last executing test programs:

1m8.415289324s ago: executing program 2 (id=1164):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x5994, 0x0, 0x0, 0x2d3}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x100, 0x10)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
userfaultfd(0x80001)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)

1m7.369877095s ago: executing program 2 (id=1175):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x400, 0x40, 0xa, 0x9, 0x7}, &(0x7f0000000380)=0x14)

1m7.180292028s ago: executing program 2 (id=1178):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x4, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x5, 0x6, 0xc, 0x2049b29, 0x6, 0x5, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x5, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x1, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x3, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x10000002, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x7, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x9, 0x7, 0x3, 0x2, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x7fffffff, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x7f, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x7c, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0x24c9, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000)

1m7.03265342s ago: executing program 2 (id=1184):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@nouid32}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

1m6.664401725s ago: executing program 2 (id=1191):
r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})

1m6.338052769s ago: executing program 2 (id=1196):
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

1m6.155893851s ago: executing program 32 (id=1196):
select(0xff44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, &(0x7f0000000100)={0x77359400})

2.38057116s ago: executing program 1 (id=1790):
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
timer_gettime(r0, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020)
rt_sigaction(0xe, &(0x7f00000000c0)={&(0x7f0000000040)="f30f1efc66450f2832c482adbcaf07000000c4e1fd5aa13c9c43713ef2400f1ed3c4c2e93be7f2262e669f8f88a4a2e100430f12957b280000653ed9fa", 0x8000000, 0x0, {[0x8000]}}, 0x0, 0x8, &(0x7f0000000200))

1.860361029s ago: executing program 0 (id=1797):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xfff5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.770432588s ago: executing program 0 (id=1798):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4004, r0, 0x1})

1.770298983s ago: executing program 0 (id=1799):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x1d, 0x0, &(0x7f0000000200)=0xfe01)

1.681198184s ago: executing program 0 (id=1800):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x44, r1, 0x1, 0x1fc, 0x400, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc090}, 0x0)

1.630874397s ago: executing program 0 (id=1801):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0)

1.510798303s ago: executing program 1 (id=1802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000029000b00ffffffff00000000050000001800018014"], 0x2c}}, 0x0)

1.441614335s ago: executing program 1 (id=1803):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa0c406, &(0x7f0000000740)=ANY=[], 0x1, 0x2a2, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000080)=""/29, 0x1d)
getdents64(r0, 0xfffffffffffffffe, 0x29)

1.441391728s ago: executing program 1 (id=1804):
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120101029853f70894060100652e0102030109021200010e0230090904"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0})

426.359471ms ago: executing program 0 (id=1805):
syz_usb_connect(0x2, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b"], 0x0)

280.740962ms ago: executing program 3 (id=1807):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0xb0a147dffc1b6dc7}}, 0x18)
sendmmsg(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

280.392802ms ago: executing program 3 (id=1808):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

200.885364ms ago: executing program 1 (id=1809):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x5f00, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

200.617255ms ago: executing program 3 (id=1810):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=""/25, &(0x7f0000000240)=0x19)

143.825544ms ago: executing program 3 (id=1811):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1, 0x2f, 0x10002)

143.381353ms ago: executing program 1 (id=1812):
syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002c23b740c71b4010b1b501020301090224000100000000090400000212c71c000905a42e7fbb00000009058202"], 0x0)

70.376899ms ago: executing program 3 (id=1813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xf, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x8, 0x2, 0x10}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x9000)

0s ago: executing program 3 (id=1814):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1)
syz_mount_image$exfat(0x0, &(0x7f00000001c0)='./bus\x00', 0x84c20, 0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001b00)={<r1=>0x0, ""/256, 0x0, <r2=>0x0, <r3=>0x0, 0x0, ""/16, ""/16, ""/16, <r4=>0x0, 0x0, 0x0, <r5=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000580)=ANY=[@ANYRES16=r3, @ANYRESDEC=r4, @ANYRES8=r3, @ANYRESOCT=r2, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRESOCT=r5, @ANYRESDEC=r4, @ANYRES8=r1, @ANYRES64, @ANYRES8=r3], 0x0, 0x0, &(0x7f0000000080))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./bus/file0/file0\x00')

kernel console output (not intermixed with test programs):

227791][ T7563] XFS (nullb0): Invalid superblock magic number
[  128.734816][ T2209] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  128.896085][ T2209] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  128.907726][ T2209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  128.915450][ T2209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  128.924779][ T2209] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  128.927851][ T2209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.934553][ T2209] usb 3-1: Product: syz
[  128.938750][ T2209] usb 3-1: Manufacturer: syz
[  128.942489][ T2209] usb 3-1: SerialNumber: syz
[  128.960043][ T2209] usb 3-1: config 0 descriptor??
[  128.998195][ T2209] iguanair 3-1:0.0: probe with driver iguanair failed with error -12
[  129.394575][  T790] usb 3-1: USB disconnect, device number 8
[  130.731000][ T7630] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  131.015284][ T5986] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  131.169171][ T5986] usb 2-1: Using ep0 maxpacket: 16
[  131.173049][ T5986] usb 2-1: too many configurations: 123, using maximum allowed: 8
[  131.192847][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.227255][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.250740][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.265118][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.278695][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.285076][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.297326][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.313019][ T5986] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.337285][ T5986] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  131.358700][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[  131.380417][ T5986] usb 2-1: SerialNumber: syz
[  131.456545][ T5986] usb 2-1: config 0 descriptor??
[  131.563335][ T5986] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12
[  131.773150][ T7633] input: syz1 as /devices/virtual/input/input13
[  132.475214][ T5265] bcm5974 2-1:0.0: could not read from device
[  132.514767][ T5265] bcm5974 2-1:0.0: could not read from device
[  132.548760][ T5265] bcm5974 2-1:0.0: could not read from device
[  132.562337][ T5265] bcm5974 2-1:0.0: could not read from device
[  132.581320][ T5986] usb 2-1: USB disconnect, device number 9
[  132.582434][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  132.595472][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  132.741763][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  133.065232][ T7660] loop1: detected capacity change from 0 to 32768
[  133.069823][ T7660] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.753 (7660)
[  133.197582][ T7660] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.201823][ T7660] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[  133.207791][ T7660] BTRFS info (device loop1): using free-space-tree
[  133.507974][ T7660] BTRFS info (device loop1): rebuilding free space tree
[  133.562670][   T33] kauditd_printk_skb: 6 callbacks suppressed
[  133.562681][   T33] audit: type=1800 audit(1753412935.016:24): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.753" name="bus" dev="loop1" ino=263 res=0 errno=0
[  133.719887][ T5944] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.023889][ T7693] loop0: detected capacity change from 0 to 8192
[  134.055947][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'.
[  134.079932][ T5939]  loop0: p3 p4
[  134.081535][ T5939] loop0: partition table partially beyond EOD, truncated
[  134.093417][ T5939] loop0: p3 start 8323105 is beyond EOD, truncated
[  134.114309][ T7693]  loop0: p3 p4
[  134.115979][ T7693] loop0: partition table partially beyond EOD, truncated
[  134.119190][ T7693] loop0: p3 start 8323105 is beyond EOD, truncated
[  134.162014][ T7697] bridge1: entered allmulticast mode
[  134.205399][ T5280]  loop0: p3 p4
[  134.206973][ T5280] loop0: partition table partially beyond EOD, truncated
[  134.212336][ T5280] loop0: p3 start 8323105 is beyond EOD, truncated
[  134.450364][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  134.522622][ T5937] udevd[5937]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  135.766204][ T7725] loop2: detected capacity change from 0 to 512
[  135.785356][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  135.786723][ T7725] EXT4-fs: Mount option(s) incompatible with ext2
[  135.788626][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.775'.
[  136.184297][ T7740] sp0: Synchronizing with TNC
[  136.307667][ T7740] Falling back ldisc for ttyS3.
[  136.614203][ T7746] loop1: detected capacity change from 0 to 40427
[  136.623108][ T7746] F2FS-fs (loop1): invalid crc value
[  136.743666][ T7746] F2FS-fs (loop1): Start checkpoint disabled!
[  136.757010][ T7746] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  136.817654][ T7746] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[  136.919045][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'.
[  136.943291][ T7766] xt_connbytes: Forcing CT accounting to be enabled
[  136.946762][ T7766] --map-set only usable from mangle table
[  139.115316][ T7799] loop0: detected capacity change from 0 to 2048
[  139.153177][ T7799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.596405][ T7803] loop1: detected capacity change from 0 to 65536
[  139.623198][ T7803] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  139.673804][ T7803] XFS (loop1): Ending clean mount
[  139.682819][ T7803] XFS (loop1): Quotacheck needed: Please wait.
[  139.710761][ T7803] XFS (loop1): Quotacheck: Done.
[  139.812766][ T5944] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  140.344589][ T7817] Bluetooth: hci0: Opcode 0x080f failed: -4
[  140.746825][ T7837] loop2: detected capacity change from 0 to 32768
[  140.763378][ T7837] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.794005][ T7853] loop1: detected capacity change from 0 to 512
[  140.799486][ T7837] XFS (loop2): Ending clean mount
[  140.812742][ T7853] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  140.813029][ T7837] XFS (loop2): Quotacheck needed: Please wait.
[  140.832346][ T7853] EXT4-fs (loop1): 1 truncate cleaned up
[  140.839433][ T7853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.905977][ T7837] XFS (loop2): Quotacheck: Done.
[  140.961415][   T33] audit: type=1800 audit(1753412942.416:25): pid=7837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.813" name="file2" dev="loop2" ino=9287 res=0 errno=0
[  140.994240][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.073467][ T5934] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.567101][ T5220] Bluetooth: hci0: command 0x080f tx timeout
[  141.574765][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'.
[  142.008552][ T7879] delete_channel: no stack
[  142.058272][ T7882] loop2: detected capacity change from 0 to 512
[  142.121112][ T7882] EXT4-fs (loop2): Test dummy encryption mode enabled
[  142.123448][ T7882] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  142.137284][ T7882] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.828: bad orphan inode 131083
[  142.142109][ T7882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.176115][ T7804] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap
[  142.207168][ T7893] evm: overlay not supported
[  142.227791][ T7882] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  142.267921][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.285058][ T7897] netlink: 'syz.0.832': attribute type 31 has an invalid length.
[  142.586356][ T7903] loop2: detected capacity change from 0 to 32768
[  142.592573][ T7903] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.833 (7903)
[  142.615417][ T7903] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.626170][ T7903] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  142.629494][ T7903] BTRFS info (device loop2): using free-space-tree
[  142.775174][  T790] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  142.785739][ T5934] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.966463][  T790] usb 2-1: Using ep0 maxpacket: 16
[  142.977980][  T790] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  142.981224][  T790] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  142.997647][  T790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.027112][  T790] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  143.030090][  T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.032717][  T790] usb 2-1: Product: syz
[  143.034241][  T790] usb 2-1: Manufacturer: syz
[  143.054572][  T790] usb 2-1: SerialNumber: syz
[  143.474818][  T790] usb 2-1: 0:2 : does not exist
[  143.487023][  T974] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  143.502153][  T790] usb 2-1: USB disconnect, device number 10
[  143.636781][  T974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  143.642333][  T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  143.646799][  T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  143.650696][  T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.657235][  T974] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  143.660561][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.665822][  T974] usb 1-1: config 0 descriptor??
[  143.801465][ T7948] loop2: detected capacity change from 0 to 32768
[  143.811160][ T7948] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  143.816847][ T7948] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  143.839075][ T7948] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid bg_blkno of 4278207136
[  143.846897][ T7948] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  143.850638][ T7948] OCFS2: File system is now read-only.
[  143.852706][ T7948] (syz.2.848,7948,1):ocfs2_search_chain:1817 ERROR: status = -30
[  143.858035][ T7948] (syz.2.848,7948,1):ocfs2_search_chain:1940 ERROR: status = -30
[  143.860859][ T7948] (syz.2.848,7948,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  143.864944][ T7948] (syz.2.848,7948,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  143.868181][ T7948] (syz.2.848,7948,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  143.872221][ T7948] (syz.2.848,7948,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  143.875979][ T7948] (syz.2.848,7948,1):ocfs2_mknod_locked:638 ERROR: status = -30
[  143.879051][ T7948] (syz.2.848,7948,1):ocfs2_mknod:385 ERROR: status = -30
[  143.882123][ T7948] (syz.2.848,7948,1):ocfs2_mknod:502 ERROR: status = -30
[  143.889319][ T7948] (syz.2.848,7948,1):ocfs2_create:675 ERROR: status = -30
[  143.919898][ T5934] ocfs2: Unmounting device (7,2) on (node local)
[  144.126183][  T974] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  144.651598][  T974] usb 1-1: USB disconnect, device number 9
[  147.274208][ T8004] loop2: detected capacity change from 0 to 16
[  147.285888][ T8004] erofs (device loop2): mounted with root inode @ nid 36.
[  147.300712][ T8006] bridge0: entered promiscuous mode
[  147.302712][ T8006] vlan2: entered promiscuous mode
[  147.444643][  T974] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  148.398516][  T974] usb 2-1: unable to get BOS descriptor or descriptor too short
[  148.406258][  T974] usb 2-1: not running at top speed; connect to a high speed hub
[  148.410394][  T974] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.413514][  T974] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  148.421733][  T974] usb 2-1: config 1 has no interface number 1
[  148.424007][  T974] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  148.433955][  T974] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  148.441212][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.450418][  T974] usb 2-1: Product: syz
[  148.452439][  T974] usb 2-1: Manufacturer: syz
[  148.454795][  T974] usb 2-1: SerialNumber: syz
[  148.729772][  T974] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  148.778413][  T974] usb 2-1: USB disconnect, device number 11
[  148.943499][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.203980][ T8051] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  150.233568][ T8051] ubi31: attaching mtd0
[  150.256973][ T8051] ubi31: scanning is finished
[  150.259319][ T8051] ubi31: empty MTD device detected
[  150.474532][  T974] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  150.510068][ T8051] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  150.513001][ T8051] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  150.516290][ T8051] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  150.519129][ T8051] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  150.522052][ T8051] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  150.524888][ T8051] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  150.528054][ T8051] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2431044947
[  150.532009][ T8051] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  150.537230][ T8058] ubi31: background thread "ubi_bgt31d" started, PID 8058
[  150.856639][ T8066] loop1: detected capacity change from 0 to 128
[  150.875822][  T971] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  151.024796][  T971] usb 1-1: Using ep0 maxpacket: 32
[  151.054626][  T971] usb 1-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  151.061878][  T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.079315][  T971] usb 1-1: config 0 descriptor??
[  151.114652][  T971] usb 1-1: dvb_usb_v2: found a 'Anysee' in warm state
[  151.122678][  T971] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  151.126334][  T971] dvb_usb_anysee 1-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  151.320488][  T971] usb 1-1: USB disconnect, device number 10
[  151.564597][  T974] usb 3-1: device descriptor read/64, error -71
[  151.805053][  T974] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  151.956349][  T974] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  151.966364][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[  151.972703][  T974] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[  151.984746][  T974] usb 3-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[  151.992339][  T974] usb 3-1: Product: syz
[  151.993753][  T974] usb 3-1: Manufacturer: syz
[  152.008792][  T974] usb 3-1: config 0 descriptor??
[  152.018347][ T8069] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  152.041415][  T974] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15
[  152.048906][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.052039][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.055192][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.058247][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.060760][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.063208][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.066203][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.069172][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.071971][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.075042][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.078065][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.081046][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.084020][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.087220][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.090461][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.093340][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.096417][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.099481][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.102472][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.105595][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.108669][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.111661][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.114736][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.117778][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.120772][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.123790][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.126853][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.130299][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.133476][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.136724][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.139748][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.142701][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.145569][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.148596][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.151690][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.154716][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.157526][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.160363][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.163141][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.165930][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.168953][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.171801][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.174795][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.177813][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.180901][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.183893][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.187063][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.190069][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.193115][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.196127][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.199095][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.202125][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.205140][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.208183][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.211240][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.214250][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.217282][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.220301][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.223337][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.226373][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.229386][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.232675][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.235642][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.238586][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.241690][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.244853][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.247923][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.251011][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.254074][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.257187][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.260268][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.263308][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.266316][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.269402][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.272499][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.275640][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.278875][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.282002][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.285156][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.288239][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.291384][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.294511][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.297941][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.301055][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.304118][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.307339][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.310404][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.313483][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.316591][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.319637][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.322668][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.325716][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.328714][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.331672][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.334816][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.338051][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.341086][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.344150][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.347252][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.350356][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.353476][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.356473][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.359440][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.362401][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.365507][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.368587][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.371568][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.374552][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.377603][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.380616][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.383620][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.386719][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.389814][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.392914][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.396190][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.399228][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.402313][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.405418][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.408465][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.411545][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.414614][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.417626][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.420564][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.423590][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.426672][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.429580][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.432625][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.435741][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.439155][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.441993][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.444616][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.447499][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.450761][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.453845][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.464594][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.467480][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.470030][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.472701][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.475576][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.478602][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.481766][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.481869][ T5265] usb 3-1: control msg error: -71
[  152.484803][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.485134][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.493424][    C0] usb 3-1: pegasus_irq - urb shutting down with status: -2
[  152.504173][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.507373][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.510263][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.512972][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.515560][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.519592][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.524007][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.527792][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.534518][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.534830][ T5265] usb 3-1: control msg error: -71
[  152.537882][    C1] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.541443][    C1] usb 3-1: pegasus_irq - usb_submit_urb failed with result -1
[  152.553704][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.556863][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.559981][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.563111][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.566305][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.569438][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.572597][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.575734][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.578857][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.582022][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.585265][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.588842][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.591902][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.595007][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.598040][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.601060][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.604066][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.611136][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.614285][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.617350][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.620441][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.623495][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.626602][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.629587][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.632616][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.636133][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.639476][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.642755][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.645872][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.648914][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.652086][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.659701][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.662890][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.666032][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.668886][  T974] usb 3-1: USB disconnect, device number 10
[  152.671298][    C0] usb 3-1: pegasus_irq - nonzero urb status received: -71
[  152.671316][    C0] usb 3-1: pegasus_irq - usb_submit_urb failed with result -19
[  152.674792][ T5265] usb 3-1: control msg error: -71
[  153.081339][ T8082] overlayfs: failed to resolve './file0': -2
[  153.180089][ T8090] netlink: 'syz.0.903': attribute type 10 has an invalid length.
[  153.201377][ T8090] team0: Cannot enslave team device to itself
[  153.500246][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.911'.
[  153.559823][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'.
[  153.584688][ T5986] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  153.734836][ T5986] usb 2-1: Using ep0 maxpacket: 8
[  153.742028][ T5986] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3
[  153.751726][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  153.758183][ T5986] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  153.762696][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  153.772975][ T5986] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  153.778488][ T5986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.787252][ T5986] usb 2-1: config 0 descriptor??
[  153.799816][ T8096] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  154.023442][ T5220] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  154.026614][  T974] usb 2-1: USB disconnect, device number 12
[  154.610003][ T8139] loop2: detected capacity change from 0 to 32768
[  155.036827][ T8139] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  155.036851][ T8139]   allowing incompatible features above 0.0: (unknown version)
[  155.036861][ T8139]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  155.050977][ T8139] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  155.054192][ T8139] bcachefs (loop2): initializing new filesystem
[  155.066451][ T8139] bcachefs (loop2): going read-write
[  155.077422][ T8139] bcachefs (loop2): marking superblocks
[  155.085158][ T8139] bcachefs (loop2): initializing freespace
[  155.090197][ T8139] bcachefs (loop2): done initializing freespace
[  155.107263][ T8139] bcachefs (loop2): reading snapshots table
[  155.109631][ T8139] bcachefs (loop2): reading snapshots done
[  155.153963][ T8139] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  155.158488][ T8139] bcachefs (loop2): done starting filesystem
[  155.303071][ T5934] bcachefs (loop2): shutting down
[  155.315938][ T5934] bcachefs (loop2): going read-only
[  155.317998][ T5934] bcachefs (loop2): finished waiting for writes to stop
[  155.340865][ T5934] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  155.442578][ T5934] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  155.458860][ T5934] bcachefs (loop2): clean shutdown complete, journal seq 4
[  155.462343][ T5934] bcachefs (loop2): marking filesystem clean
[  155.493445][ T5934] bcachefs (loop2): shutdown complete
[  155.649149][ T8171] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  157.564099][ T8186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.940'.
[  157.610264][ T8188] bridge2: entered allmulticast mode
[  157.922896][ T8208] loop1: detected capacity change from 0 to 128
[  157.938913][ T8208] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  157.960273][ T8208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.206164][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.956'.
[  158.211634][ T8221] netlink: 34 bytes leftover after parsing attributes in process `syz.2.956'.
[  158.887154][ T8231] C: renamed from team_slave_0 (while UP)
[  158.933686][ T8232] loop2: detected capacity change from 0 to 8
[  158.995254][ T8232] SQUASHFS error: xz decompression failed, data probably corrupt
[  158.998606][ T8232] SQUASHFS error: Failed to read block 0x108: -5
[  159.003304][ T8232] SQUASHFS error: Unable to read metadata cache entry [106]
[  159.006153][ T8232] SQUASHFS error: Unable to read inode 0x11f
[  159.023979][ T8231] netlink: 'syz.1.960': attribute type 1 has an invalid length.
[  159.034322][ T8231] netlink: 152 bytes leftover after parsing attributes in process `syz.1.960'.
[  159.039228][ T8231] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  159.078669][ T8232] loop2: detected capacity change from 0 to 1024
[  159.088783][ T8232] hfsplus: Bad value for 'gid'
[  159.321491][ T8240] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  159.324925][ T8240] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  159.355284][ T8238] loop1: detected capacity change from 0 to 256
[  160.154097][ T8249] loop1: detected capacity change from 0 to 32768
[  160.308148][ T8249] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=gzip,str_hash=crc32c,journal_flush_disabled,recovery_pass_last=set_may_go_rw,reconstruct_alloc
[  160.308170][ T8249]   allowing incompatible features above 0.0: (unknown version)
[  160.308175][ T8249]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  160.322534][ T8249] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  160.325691][ T8249] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  160.328567][ T8249] bcachefs (loop1): Version upgrade required:
[  160.328567][ T8249] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  160.328567][ T8249] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  160.328567][ T8249]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  160.355538][ T8249] bcachefs (loop1): dropping and reconstructing all alloc info
[  160.382127][ T8249] bcachefs (loop1): accounting_read... done
[  160.386819][ T8249] bcachefs (loop1): alloc_read... done
[  160.390060][ T8249] bcachefs (loop1): snapshots_read... done
[  160.392709][ T8249] bcachefs (loop1): check_allocations... done
[  160.422818][ T8249] bcachefs (loop1): going read-write
[  160.453718][ T8249] bcachefs (loop1): done starting filesystem
[  160.470214][  T137] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  160.470243][  T137]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  160.489910][  T137] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  160.489942][  T137]   u64s 5 type deleted 0:28:0 len 0 ver 0, , continuing
[  160.509097][  T137] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  160.509111][  T137]   u64s 5 type deleted 0:26:0 len 0 ver 0, , continuing
[  160.516814][  T137] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  160.516824][  T137]   u64s 5 type deleted 0:29:0 len 0 ver 0, , continuing
[  160.646957][ T5944] bcachefs (loop1): shutting down
[  160.648998][ T5944] bcachefs (loop1): going read-only
[  160.651003][ T5944] bcachefs (loop1): finished waiting for writes to stop
[  160.717445][ T5944] bcachefs (loop1): flushing journal and stopping allocators, journal seq 11
[  160.758646][  T137] bcachefs (loop1): bucket incorrectly unset in freespace btree
[  160.758663][  T137]   u64s 5 type deleted 0:40:0 len 0 ver 0, , continuing
[  160.809143][ T5944] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  160.828126][ T5944] bcachefs (loop1): unclean shutdown complete, journal seq 12
[  160.833016][ T5944] bcachefs (loop1): done going read-only, filesystem not clean
[  160.871209][ T5944] bcachefs (loop1): shutdown complete
[  161.118689][ T8278] loop2: detected capacity change from 0 to 32768
[  161.139842][ T8278] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.172034][ T8278] XFS (loop2): Ending clean mount
[  161.181544][ T8278] XFS (loop2): Quotacheck needed: Please wait.
[  161.219133][ T8278] XFS (loop2): Quotacheck: Done.
[  161.249760][   T33] audit: type=1804 audit(1753412962.706:26): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.977" name="/newroot/319/file0/file1" dev="loop2" ino=9286 res=1 errno=0
[  161.254753][  T790] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  161.290959][ T5934] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  161.422541][  T790] usb 1-1: Using ep0 maxpacket: 16
[  161.461755][  T790] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  161.465430][  T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.468482][  T790] usb 1-1: Product: syz
[  161.470115][  T790] usb 1-1: Manufacturer: syz
[  161.471968][  T790] usb 1-1: SerialNumber: syz
[  161.478964][  T790] usb 1-1: config 0 descriptor??
[  161.728604][ T8292] loop2: detected capacity change from 0 to 32768
[  161.766092][ T8292] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  161.794866][ T8292] XFS (loop2): Ending clean mount
[  161.847113][ T5934] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  161.906457][  T790] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  161.926714][  T790] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  161.933214][  T790] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  161.948568][  T790] usb 1-1: media controller created
[  161.979429][  T790] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.119730][  T790] zl10353_read_register: readreg error (reg=127, ret==0)
[  162.125963][  T790] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  162.129214][  T790] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  162.140179][  T790] usb 1-1: USB disconnect, device number 11
[  162.217399][  T790] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  162.563205][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.607200][ T8307] loop1: detected capacity change from 0 to 32768
[  162.623811][ T8307] JBD2: Invalid start block of journal: 2147483648
[  162.630757][ T8307] (syz.1.974,8307,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  162.645391][ T8307] (syz.1.974,8307,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  162.650516][ T8307] (syz.1.974,8307,0):ocfs2_check_volume:2432 ERROR: status = -22
[  162.663898][ T8307] (syz.1.974,8307,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  162.673914][ T8307] (syz.1.974,8307,0):ocfs2_fill_super:1177 ERROR: status = -22
[  162.766149][ T8316] loop1: detected capacity change from 0 to 512
[  162.988185][ T8326] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.295622][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  163.446995][   T24] usb 1-1: Using ep0 maxpacket: 16
[  163.451803][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.456678][   T24] usb 1-1: config 0 has no interfaces?
[  163.458722][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  163.475037][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.480843][   T24] usb 1-1: config 0 descriptor??
[  163.488653][ T8336] loop1: detected capacity change from 0 to 32768
[  163.518835][ T8336] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.597535][ T8336] XFS (loop1): Ending clean mount
[  163.601231][ T8336] XFS (loop1): Quotacheck needed: Please wait.
[  163.654914][ T8336] XFS (loop1): Quotacheck: Done.
[  163.688871][ T6000] usb 1-1: USB disconnect, device number 12
[  163.731481][ T5944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.834571][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  164.005548][   T24] usb 3-1: Using ep0 maxpacket: 16
[  164.018650][   T24] usb 3-1: config 0 has an invalid interface number: 142 but max is 0
[  164.021634][   T24] usb 3-1: config 0 has no interface number 0
[  164.026442][   T24] usb 3-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  164.029833][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.032849][   T24] usb 3-1: Product: syz
[  164.040363][    C0] vkms_vblank_simulate: vblank timer overrun
[  164.046460][   T24] usb 3-1: Manufacturer: syz
[  164.049524][   T24] usb 3-1: SerialNumber: syz
[  164.056529][   T24] usb 3-1: config 0 descriptor??
[  164.273331][   T24] usb 3-1: Found UVC 0.00 device syz (1bcf:0b40)
[  164.276665][   T24] usb 3-1: Forcing UVC version to 1.0a
[  164.279679][   T24] usb 3-1: No valid video chain found.
[  164.286484][   T24] usb 3-1: USB disconnect, device number 11
[  164.295102][ T8360] loop1: detected capacity change from 0 to 32768
[  164.302860][ T8360] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1005 (8360)
[  164.327284][ T8360] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.331368][ T8360] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  164.335902][ T8360] BTRFS info (device loop1): using free-space-tree
[  164.373308][   T33] audit: type=1800 audit(1753412965.836:27): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1005" name="file1" dev="loop1" ino=260 res=0 errno=0
[  164.444819][   T33] audit: type=1800 audit(1753412965.906:28): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1005" name="file1" dev="loop1" ino=260 res=0 errno=0
[  164.687891][ T5944] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  168.113231][   T33] audit: type=1804 audit(1753412969.566:29): pid=8392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1010" name="/" dev="pidfs" ino=8390 res=1 errno=0
[  168.401075][ T8406] input: syz0 as /devices/virtual/input/input16
[  168.580855][ T8412] loop1: detected capacity change from 0 to 16
[  168.601163][ T8412] erofs (device loop1): mounted with root inode @ nid 36.
[  168.942260][ T8426] tipc: Started in network mode
[  168.944264][ T8426] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  168.954200][ T8426] tipc: Enabled bearer <eth:vlan0>, priority 10
[  169.051888][ T8428] loop2: detected capacity change from 0 to 4096
[  169.107337][ T8432] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.129003][ T8428] NILFS (loop2): unable to set label with more than 80 bytes
[  169.227621][ T8440] random: crng reseeded on system resumption
[  169.957115][ T5986] tipc: Node number set to 10005162
[  171.526094][ T8493] loop2: detected capacity change from 0 to 1024
[  171.563539][ T8493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.589968][   T33] audit: type=1800 audit(1753412973.046:30): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1056" name="file1" dev="loop2" ino=15 res=0 errno=0
[  171.677176][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.742882][ T8502] loop1: detected capacity change from 0 to 128
[  171.766891][ T8502] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.796014][ T8502] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.911668][ T8511] xt_TPROXY: Can be used only with -p tcp or -p udp
[  172.111760][ T8510] loop2: detected capacity change from 0 to 4096
[  172.145117][ T8510] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  172.148040][ T8510] ntfs3(loop2): Failed to load $Extend (-22).
[  172.150183][ T8510] ntfs3(loop2): Failed to initialize $Extend.
[  172.867230][ T8524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'.
[  173.059067][ T5944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  173.597434][ T8532] loop2: detected capacity change from 0 to 32768
[  173.600924][ T8532] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 38) overruns end of section
[  173.600924][ T8532] clean (size 2912):
[  173.600924][ T8532] flags:          0
[  173.600924][ T8532] journal_seq:    8
[  173.600924][ T8532]                            log: 
[  173.600924][ T8532] usage: type=key_version v=0
[  173.600924][ T8532] usage: type=reserved v=0
[  173.600924][ T8532] usage: type=reserved v=0
[  173.600924][ T8532] usage: type=reserved v=0
[  173.600924][ T8532] usage: type=reserved v=0
[  173.600924][ T8532] data_usage: btree: 1/1 [0]=2816
[  173.600924][ T8532] data_usage: journal: 1/1 [0]=0
[  173.600924][ T8532] 
[  173.621588][ T8532] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  173.711735][ T8552] xt_CT: You must specify a L4 protocol and not use inversions on it
[  173.983779][ T8564] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1083'.
[  173.994408][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'.
[  174.158607][ T8572] binder: 8569:8572 ioctl c00c620f 200000000140 returned -22
[  175.437423][ T8626] loop1: detected capacity change from 0 to 32768
[  175.441371][ T8626] jfs_mount: Failed to read AGGREGATE_I
[  175.443996][ T8626] Mount JFS Failure: -5
[  175.447350][ T8626] jfs_mount failed w/return code = -5
[  175.525102][ T8632] loop1: detected capacity change from 0 to 1024
[  175.595888][ T8634] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  175.895579][ T8640] 9pnet: Unknown protocol version 9
[  176.544624][ T6000] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  176.574171][ T8668] mkiss: ax0: crc mode is auto.
[  176.694544][ T6000] usb 3-1: Using ep0 maxpacket: 16
[  176.698106][ T6000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  176.701202][ T6000] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  176.703919][ T6000] usb 3-1: config 1 has no interface number 1
[  176.707981][ T6000] usb 3-1: too many endpoints for config 1 interface 2 altsetting 252: 65, using maximum allowed: 30
[  176.711340][ T6000] usb 3-1: config 1 interface 2 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 65
[  176.715531][ T6000] usb 3-1: config 1 interface 2 has no altsetting 0
[  176.719520][ T6000] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  176.722358][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.726034][ T6000] usb 3-1: Product: syz
[  176.727430][ T6000] usb 3-1: Manufacturer: syz
[  176.728907][ T6000] usb 3-1: SerialNumber: syz
[  176.958339][ T6000] usb 3-1: USB disconnect, device number 12
[  176.979893][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  177.670097][ T8694] overlayfs: workdir and upperdir must be separate subtrees
[  178.102975][ T8696] NILFS (nbd2): device size too small
[  178.157701][ T8703] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1145'.
[  178.539432][ T8711] loop1: detected capacity change from 0 to 32768
[  178.547759][ T8711] XFS: noikeep mount option is deprecated.
[  178.606649][ T8711] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  178.624348][ T8732] loop2: detected capacity change from 0 to 1024
[  178.663361][ T8711] XFS (loop1): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[  178.686957][ T8711] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  178.704364][ T8732] hfsplus: trying to free free bnode 0(1)
[  178.709189][ T8711] XFS (loop1): Starting recovery (logdev: internal)
[  178.727195][ T8711] XFS (loop1): Ending recovery (logdev: internal)
[  178.766512][ T1089] hfsplus: b-tree write err: -5, ino 4
[  178.774251][ T5944] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  179.038859][ T8751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1166'.
[  179.041650][ T8751] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  179.590340][ T8765] loop1: detected capacity change from 0 to 512
[  179.620758][ T8765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.627681][ T8765] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.684221][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.741699][ T8770] syzkaller1: entered promiscuous mode
[  179.743648][ T8770] syzkaller1: entered allmulticast mode
[  180.453998][ T8797] loop2: detected capacity change from 0 to 1024
[  180.490904][ T8797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.586114][ T8797] overlayfs: workdir and upperdir must reside under the same mount
[  180.658704][ T5934] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  180.663618][ T5934] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  180.886627][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1194'.
[  180.924184][ T5934] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.953130][ T5934] syz-executor (5934) used greatest stack depth: 16568 bytes left
[  181.219628][ T6000] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  181.380780][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  181.381067][ T6000] usb 1-1: Using ep0 maxpacket: 16
[  181.389319][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.393588][ T6000] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.394808][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  181.397601][ T6000] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  181.403747][ T6000] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.404248][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  181.412337][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  181.418227][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  181.426589][ T6000] usb 1-1: config 0 descriptor??
[  181.649305][ T8840] loop1: detected capacity change from 0 to 128
[  181.704028][ T8831] chnl_net:caif_netlink_parms(): no params data found
[  181.886243][ T6000] lua 0003:1E7D:2C2E.0006: report_id 0 is invalid
[  181.893337][ T6000] lua 0003:1E7D:2C2E.0006: item 0 4 1 8 parsing failed
[  181.911261][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.913003][ T6000] lua 0003:1E7D:2C2E.0006: parse failed
[  181.913771][ T8831] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.919442][ T6000] lua 0003:1E7D:2C2E.0006: probe with driver lua failed with error -22
[  181.926190][ T8831] bridge_slave_0: entered allmulticast mode
[  181.935310][ T8831] bridge_slave_0: entered promiscuous mode
[  181.952652][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.962982][ T8831] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.967950][ T8831] bridge_slave_1: entered allmulticast mode
[  181.972624][ T8831] bridge_slave_1: entered promiscuous mode
[  182.077773][ T8831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  182.084679][  T974] usb 1-1: USB disconnect, device number 13
[  182.085531][ T8831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  182.289228][ T8831] team0: Port device team_slave_0 added
[  182.305323][ T8831] team0: Port device team_slave_1 added
[  182.417743][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_0
[  182.420041][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.429958][ T8831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  182.439028][ T8831] batman_adv: batadv0: Adding interface: batadv_slave_1
[  182.442268][ T8831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  182.451783][ T8831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  182.533040][ T8831] hsr_slave_0: entered promiscuous mode
[  182.538803][ T8831] hsr_slave_1: entered promiscuous mode
[  182.541513][ T8831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  182.548958][ T8831] Cannot create hsr debugfs directory
[  182.923447][ T8831] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  182.944826][ T8831] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  182.954261][ T8831] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  182.964004][ T8831] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  183.088249][ T8831] 8021q: adding VLAN 0 to HW filter on device bond0
[  183.093705][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.093705][ T8179] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  183.106459][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.106459][ T8179] loop1: rw=1, sector=161, nr_sectors = 8 limit=128
[  183.107909][ T8831] 8021q: adding VLAN 0 to HW filter on device team0
[  183.110511][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.110511][ T8179] loop1: rw=1, sector=177, nr_sectors = 8 limit=128
[  183.118677][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.120894][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.123954][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.123954][ T8179] loop1: rw=1, sector=193, nr_sectors = 8 limit=128
[  183.128854][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.128854][ T8179] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[  183.133020][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.133020][ T8179] loop1: rw=1, sector=225, nr_sectors = 8 limit=128
[  183.144235][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.144235][ T8179] loop1: rw=1, sector=241, nr_sectors = 8 limit=128
[  183.150940][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.153230][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.153555][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.153555][ T8179] loop1: rw=1, sector=257, nr_sectors = 8 limit=128
[  183.175110][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.175110][ T8179] loop1: rw=1, sector=273, nr_sectors = 8 limit=128
[  183.187267][ T8179] kworker/u10:7: attempt to access beyond end of device
[  183.187267][ T8179] loop1: rw=1, sector=289, nr_sectors = 8 limit=128
[  183.337505][ T8831] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.410430][ T8867] loop1: detected capacity change from 0 to 8
[  183.437832][   T33] audit: type=1800 audit(1753412984.896:31): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1206" name="file1" dev="loop1" ino=5 res=0 errno=0
[  183.446713][ T8867] SQUASHFS error: Failed to read block 0x2fc: -5
[  183.449054][ T8867] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  183.451283][ T8867] SQUASHFS error: read_indexes: reading block [2fa:0]
[  183.453445][ T8867] SQUASHFS error: Failed to read block 0xfc: -5
[  183.453574][ T8831] veth0_vlan: entered promiscuous mode
[  183.455722][ T8867] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  183.458796][ T5943] Bluetooth: hci0: command tx timeout
[  183.459561][ T8867] SQUASHFS error: read_indexes: reading block [2fa:0]
[  183.465299][ T8867] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  183.467934][ T8867] SQUASHFS error: read_indexes: reading block [2fa:0]
[  183.470476][ T8867] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  183.472650][ T8867] SQUASHFS error: read_indexes: reading block [2fa:0]
[  183.475981][ T8867] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  183.478607][ T8867] SQUASHFS error: read_indexes: reading block [2fa:0]
[  183.490774][ T8831] veth1_vlan: entered promiscuous mode
[  183.515247][ T8831] veth0_macvtap: entered promiscuous mode
[  183.524775][ T8831] veth1_macvtap: entered promiscuous mode
[  183.560180][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.574058][ T8831] batman_adv: batadv0: Interface activated: batadv_slave_1
[  183.581089][ T8831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.583918][ T8831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.587575][ T8831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.590371][ T8831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.716239][ T8179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.719002][ T8179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.765265][ T8179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.767783][ T8179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.219909][   T33] audit: type=1326 audit(1753412985.676:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.0.1216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e5cb8e9a9 code=0x0
[  184.284676][  T974] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  184.434761][  T974] usb 4-1: Using ep0 maxpacket: 32
[  184.440351][  T974] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  184.443824][  T974] usb 4-1: config 0 has no interface number 0
[  184.449726][  T974] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  184.453257][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.456733][  T974] usb 4-1: Product: syz
[  184.458785][  T974] usb 4-1: Manufacturer: syz
[  184.460804][  T974] usb 4-1: SerialNumber: syz
[  184.465950][  T974] usb 4-1: config 0 descriptor??
[  184.473974][  T974] radio-si470x 4-1:0.35: could not find interrupt in endpoint
[  184.477431][  T974] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5
[  184.676408][  T974] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  184.887897][  T974] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71)
[  184.905941][  T974] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  184.909588][  T974] usb 4-1: USB disconnect, device number 2
[  184.911746][  T974] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  184.931286][ T8899] sctp: [Deprecated]: syz.1.1220 (pid 8899) Use of struct sctp_assoc_value in delayed_ack socket option.
[  184.931286][ T8899] Use struct sctp_sack_info instead
[  185.345010][ T5986] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  185.463359][ T2209] hid-generic 0004:0006:0003.0007: unknown main item tag 0x1
[  185.474207][ T2209] hid-generic 0004:0006:0003.0007: hidraw0: <UNKNOWN> HID v0.09 Device [syz1] on syz1
[  185.504967][ T5986] usb 1-1: Using ep0 maxpacket: 32
[  185.509149][ T5986] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  185.520966][ T5986] usb 1-1: config 0 has no interface number 0
[  185.523419][ T5986] usb 1-1: config 0 interface 89 has no altsetting 0
[  185.529311][ T5986] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  185.532860][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.536964][ T5986] usb 1-1: Product: syz
[  185.538672][ T5986] usb 1-1: Manufacturer: syz
[  185.540468][ T5986] usb 1-1: SerialNumber: syz
[  185.545283][ T5943] Bluetooth: hci0: command tx timeout
[  185.552148][ T5986] usb 1-1: config 0 descriptor??
[  185.571271][ T5986] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  185.575779][ T5986] em28xx 1-1:0.89: Video interface 89 found: bulk
[  185.624852][ T6000] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  185.627337][ T8925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'.
[  185.798141][ T6000] usb 2-1: Using ep0 maxpacket: 8
[  185.807226][ T6000] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  185.810632][ T6000] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.848224][ T6000] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  185.851988][ T6000] usb 2-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  185.884793][ T6000] usb 2-1: Product: syz
[  185.886272][ T6000] usb 2-1: Manufacturer: syz
[  185.895459][ T6000] usb 2-1: config 0 descriptor??
[  186.128809][  T971] usb 2-1: USB disconnect, device number 13
[  186.169767][ T5986] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  186.801228][ T5986] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  186.806138][ T5986] em28xx 1-1:0.89: board has no eeprom
[  187.056640][ T5986] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  187.066766][ T5986] em28xx 1-1:0.89: analog set to bulk mode.
[  187.083088][ T6000] em28xx 1-1:0.89: Registering V4L2 extension
[  187.135007][ T5986] usb 1-1: USB disconnect, device number 14
[  187.160471][ T5986] em28xx 1-1:0.89: Disconnecting em28xx
[  187.309071][ T6000] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  187.312192][ T6000] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  187.328988][ T6000] em28xx 1-1:0.89: No AC97 audio processor
[  187.348402][ T6000] usb 1-1: Decoder not found
[  187.350290][ T6000] em28xx 1-1:0.89: failed to create media graph
[  187.352922][ T6000] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  187.365670][ T6000] em28xx 1-1:0.89: Registering snapshot button...
[  187.371936][ T6000] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input17
[  187.383263][ T6000] em28xx 1-1:0.89: Remote control support is not available for this card.
[  187.388099][ T5986] em28xx 1-1:0.89: Closing input extension
[  187.414572][ T5986] em28xx 1-1:0.89: Deregistering snapshot button
[  187.477654][ T5986] em28xx 1-1:0.89: Freeing device
[  187.614784][ T5943] Bluetooth: hci0: command tx timeout
[  187.621249][ T8950] loop3: detected capacity change from 0 to 1024
[  187.669436][ T8950] hfsplus: bad catalog entry type
[  188.005969][ T5986] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  188.175807][ T5986] usb 2-1: Using ep0 maxpacket: 16
[  188.179914][ T5986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.188296][ T5986] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.197709][ T5986] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  188.202579][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.214665][ T5986] usb 2-1: Product: syz
[  188.215994][ T5986] usb 2-1: Manufacturer: syz
[  188.219054][ T5986] usb 2-1: SerialNumber: syz
[  188.229445][ T5986] usb 2-1: selecting invalid altsetting 1
[  188.400841][ T8979] veth0_to_team: entered promiscuous mode
[  188.402747][ T8979] veth0_to_team: entered allmulticast mode
[  188.569885][   T13] nci: nci_rsp_packet: unknown rsp opcode 0xe39
[  188.859743][ T5986] usb 2-1: selecting invalid altsetting 1
[  188.861570][ T5986] cdc_ncm 2-1:1.0: bind() failure
[  189.049809][ T2209] usb 2-1: USB disconnect, device number 14
[  189.694744][ T5943] Bluetooth: hci0: command tx timeout
[  189.832575][ T9007] unsupported nla_type 52263
[  189.997520][ T9010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1267'.
[  190.133615][ T9018] loop1: detected capacity change from 0 to 1024
[  190.494606][ T9029] hfsplus: bad catalog entry type
[  190.780985][  T974] kernel write not supported for file /cpu/0/msr (pid: 974 comm: kworker/0:4)
[  191.048094][ T1089] hfsplus: b-tree write err: -5, ino 4
[  191.237463][ T9044] loop3: detected capacity change from 0 to 40427
[  191.251159][ T9044] F2FS-fs (loop3): invalid crc value
[  191.330476][ T9044] F2FS-fs (loop3): Start checkpoint disabled!
[  191.339587][ T9044] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  191.425105][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  191.576826][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.581093][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.600856][   T24] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  191.616128][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.636203][   T24] usb 2-1: config 0 descriptor??
[  192.072611][   T24] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0
[  192.079712][   T24] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  192.084928][ T9074] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  192.212430][ T9078] loop3: detected capacity change from 0 to 2048
[  192.219753][ T9078] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.273882][   T24] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00
[  192.935489][   T24] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71
[  192.994694][   T24] usb 2-1: USB disconnect, device number 15
[  193.181857][ T9099] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  193.814600][ T9078] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 118784 lbcount: 122880 extent 129+87040
[  193.847969][ T9111] loop1: detected capacity change from 0 to 256
[  193.918980][ T9111] FAT-fs (loop1): Directory bread(block 64) failed
[  193.927543][ T9111] FAT-fs (loop1): Directory bread(block 65) failed
[  193.929718][ T9115] loop3: detected capacity change from 0 to 1764
[  193.938782][ T9111] FAT-fs (loop1): Directory bread(block 66) failed
[  193.941563][ T9111] FAT-fs (loop1): Directory bread(block 67) failed
[  193.944363][ T9111] FAT-fs (loop1): Directory bread(block 68) failed
[  193.976660][ T9111] FAT-fs (loop1): Directory bread(block 69) failed
[  193.979749][ T9111] FAT-fs (loop1): Directory bread(block 70) failed
[  193.982417][ T9111] FAT-fs (loop1): Directory bread(block 71) failed
[  193.989792][ T9111] FAT-fs (loop1): Directory bread(block 72) failed
[  193.996976][ T9111] FAT-fs (loop1): Directory bread(block 73) failed
[  194.030958][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  194.033530][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  194.066341][ T9119] loop3: detected capacity change from 0 to 64
[  194.149540][ T9118] Trying to free block not in datazone
[  194.342727][ T9129] netlink: 'syz.0.1320': attribute type 33 has an invalid length.
[  194.357142][ T9129] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1320'.
[  194.923806][ T9149] loop3: detected capacity change from 0 to 32768
[  194.936549][ T9149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1329 (9149)
[  194.972272][ T9149] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.984832][ T9149] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  194.989808][ T9149] BTRFS info (device loop3): using free-space-tree
[  195.105782][ T8831] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.713989][ T9190] loop3: detected capacity change from 0 to 40427
[  195.731109][ T9190] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  195.733544][ T9190] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  195.744598][  T790] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  195.806235][ T9190] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  195.809454][ T9190] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  195.894698][  T790] usb 1-1: Using ep0 maxpacket: 32
[  195.899417][  T790] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.903700][  T790] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.911009][ T9207] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  195.911633][  T790] usb 1-1: New USB device found, idVendor=06a3, idProduct=0cfa, bcdDevice= 0.00
[  195.918597][  T790] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.925809][  T790] usb 1-1: config 0 descriptor??
[  196.097472][ T5943] Bluetooth: hci1: command 0x0406 tx timeout
[  196.347743][  T790] saitek 0003:06A3:0CFA.0009: item fetching failed at offset 0/2
[  196.350522][  T790] saitek 0003:06A3:0CFA.0009: parse failed
[  196.352336][  T790] saitek 0003:06A3:0CFA.0009: probe with driver saitek failed with error -22
[  196.413662][ T9219] trusted_key: encrypted_key: insufficient parameters specified
[  196.450280][ T9215] loop3: detected capacity change from 0 to 32768
[  196.456405][ T9215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1348 (9215)
[  196.462433][ T9215] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.466485][ T9215] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  196.469877][ T9215] BTRFS info (device loop3): using free-space-tree
[  196.548381][  T790] usb 1-1: USB disconnect, device number 15
[  196.564993][ T8831] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  196.670012][ T9237] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  197.029783][ T9252] loop3: detected capacity change from 0 to 4096
[  197.033062][ T9252] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  197.324641][ T9272] xt_hashlimit: max too large, truncated to 1048576
[  197.384343][ T9276] loop1: detected capacity change from 0 to 256
[  197.407026][ T9276] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.411221][ T9276] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  197.415944][ T9278] loop3: detected capacity change from 0 to 2048
[  197.418292][ T9276] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  197.467693][ T9278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.471330][ T9278] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  197.501531][ T8831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.669780][ T9292] netlink: 'syz.1.1376': attribute type 2 has an invalid length.
[  197.940249][ T9305] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  197.943655][ T9305] overlayfs: overlapping lowerdir path
[  197.966341][ T9299] loop1: detected capacity change from 0 to 32768
[  197.979820][ T9299] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.001502][ T9299] XFS (loop1): Ending clean mount
[  198.013050][ T9299] XFS (loop1): Quotacheck needed: Please wait.
[  198.045350][ T9299] XFS (loop1): Quotacheck: Done.
[  198.059496][   T33] audit: type=1800 audit(1753412999.516:33): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1379" name="file1" dev="loop1" ino=9286 res=0 errno=0
[  198.070356][ T9319] overlayfs: conflicting options: userxattr,metacopy=on
[  198.075862][ T9299] XFS (loop1): User initiated shutdown received.
[  198.078861][ T9299] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  198.083959][ T9299] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  198.123798][ T5944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.350362][ T9329] Bluetooth: MGMT ver 1.23
[  198.372227][ T9331] loop1: detected capacity change from 0 to 256
[  198.379362][ T9331] exfat: Deprecated parameter 'utf8'
[  198.386716][ T9331] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6acc499, utbl_chksum : 0xe619d30d)
[  198.409525][ T9331] fuse: Bad value for 'fd'
[  198.577965][ T9346] loop3: detected capacity change from 0 to 512
[  198.586087][ T9346] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  198.588832][ T9346] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  198.592119][ T9346] EXT4-fs (loop3): 1 truncate cleaned up
[  198.595184][ T9346] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.602561][ T9346] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.1394: lblock 0 mapped to illegal pblock 4 (length 1)
[  198.611185][ T9346] EXT4-fs (loop3): Remounting filesystem read-only
[  198.628932][ T8831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.034096][ T9358] loop3: detected capacity change from 0 to 40427
[  199.039787][ T9358] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  199.047665][ T9358] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  199.058974][ T9358] F2FS-fs (loop3): invalid crc value
[  199.103485][ T9358] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  199.105881][ T9358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  199.126980][   T33] audit: type=1800 audit(1753413000.586:34): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1399" name="file1" dev="loop3" ino=10 res=0 errno=0
[  199.581137][ T9372] loop3: detected capacity change from 0 to 2048
[  199.599460][ T9372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.663415][ T9364] loop1: detected capacity change from 0 to 32768
[  199.684382][ T9364] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  199.684382][ T9364] clean (size 2912):
[  199.684382][ T9364] flags:          0
[  199.684382][ T9364] journal_seq:    10
[  199.684382][ T9364] usage: type=inodes v=8
[  199.684382][ T9364] write_buffer_keys: btree=dirents level=0 u64s 5 type deleted 0:21491613697:0 len 0 ver 4294967296
[  199.684382][ T9364] usage: type=reserved v=0
[  199.684382][ T9364] usage: type=reserved v=0
[  199.684382][ T9364] usage: type=reserved v=0
[  199.684382][ T9364] usage: type=reserved v=0
[  199.684382][ T9364] data_usage: free: 0/0 []=83888896
[  199.684382][ T9364] data_usage: journal: 1/1 [0]=0
[  199.684382][ T9364] data_usage: user: 1/1 [0]=32
[  199.684382][ T9364] dev_usage: dev=0  
[  199.684382][ T9364]   free: buckets=83 sectors=0 fragmented=0
[  199.684382][ T9364]   sb: buckets=25 sectors=6152 fragmented=248
[  199.684382][ T9364]   journal: buckets=8 sectors=2048 fragmented=0
[  199.684382][ T9364]   btree: buckets=11 sectors=2816 fragmented=0
[  199.684382][ T9364]   user: buckets=1 sectors=32 fragmented=224
[  199.684382][ T9364]   cached: buckets=0 sectors=0 fragmented=0
[  199.684382][ T9364]   parity: buckets=0 sectors=0 fragmented=0
[  199.684382][ T9364]   stripe: buckets=0 sectors=0 fragmented=0
[  199.684382][ T9364]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  199.684382][ T9364]   need_discard: buckets=0 sectors=0 fragmented=0
[  199.684382][ T9364] clock: read=0
[  199.684382][ T9364] clock: write=1336
[  199.684382][ T9364] btree_root: btre
[  199.686051][ T9364] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  199.752989][ T5986] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  199.936849][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  199.941735][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  199.949118][ T5986] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  199.956006][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  199.961795][ T5986] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  199.968613][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.978771][ T5986] usb 1-1: config 0 descriptor??
[  200.024662][  T971] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  200.178859][ T5220] Bluetooth: hci0: Malformed LE Event: 0x0d
[  200.182669][  T971] usb 4-1: unable to get BOS descriptor or descriptor too short
[  200.195796][  T971] usb 4-1: unable to read config index 0 descriptor/start: -71
[  200.199026][  T971] usb 4-1: can't read configurations, error -71
[  200.402985][ T5986] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  200.549115][ T9379] loop1: detected capacity change from 0 to 32768
[  200.567794][ T9379] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  200.567794][ T9379] members_v1 (size 40):
[  200.567794][ T9379] nr_devices mismatch: have 0 entries, should be 1
[  200.577137][ T9379] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  200.780082][ T9384] loop1: detected capacity change from 0 to 512
[  200.811938][ T9384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.838795][ T9384] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  200.917602][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.052913][ T9395] loop3: detected capacity change from 0 to 128
[  201.185383][ T9400] loop1: detected capacity change from 0 to 256
[  201.206465][ T9400] FAT-fs (loop1): Directory bread(block 64) failed
[  201.209927][ T9400] FAT-fs (loop1): Directory bread(block 65) failed
[  201.212821][ T9400] FAT-fs (loop1): Directory bread(block 66) failed
[  201.218070][ T9400] FAT-fs (loop1): Directory bread(block 67) failed
[  201.220573][ T9400] FAT-fs (loop1): Directory bread(block 68) failed
[  201.222705][ T9400] FAT-fs (loop1): Directory bread(block 69) failed
[  201.226814][ T9400] FAT-fs (loop1): Directory bread(block 70) failed
[  201.229572][ T9400] FAT-fs (loop1): Directory bread(block 71) failed
[  201.232477][ T9400] FAT-fs (loop1): Directory bread(block 72) failed
[  201.238134][ T9400] FAT-fs (loop1): Directory bread(block 73) failed
[  202.090502][   T33] audit: type=1326 audit(1753413003.546:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.3.1419" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fecd218e9a9 code=0x0
[  203.263546][   T10] usb 1-1: USB disconnect, device number 16
[  203.580469][ T9439] loop1: detected capacity change from 0 to 128
[  203.611556][ T9439] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  203.621218][ T9439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.594941][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  204.761984][   T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  204.768987][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.773440][   T10] usb 2-1: Product: syz
[  204.777008][   T10] usb 2-1: Manufacturer: syz
[  204.778651][   T10] usb 2-1: SerialNumber: syz
[  204.836001][   T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  204.947221][  T974] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  205.366376][ T9465] loop3: detected capacity change from 0 to 32768
[  205.492373][ T9465] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  205.492397][ T9465]   allowing incompatible features above 0.0: (unknown version)
[  205.492408][ T9465]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  205.516520][ T9465] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  205.519609][ T9465] bcachefs (loop3): initializing new filesystem
[  205.557981][ T9465] bcachefs (loop3): going read-write
[  205.588425][ T9465] bcachefs (loop3): marking superblocks
[  205.597358][ T9465] bcachefs (loop3): initializing freespace
[  205.603516][ T9465] bcachefs (loop3): done initializing freespace
[  205.616549][ T9465] bcachefs (loop3): reading snapshots table
[  205.618866][ T9465] bcachefs (loop3): reading snapshots done
[  205.655102][   T10] usb 2-1: USB disconnect, device number 16
[  205.675644][ T9465] bcachefs (loop3): done starting filesystem
[  205.722725][ T8831] bcachefs (loop3): shutting down
[  205.725125][ T8831] bcachefs (loop3): going read-only
[  205.727382][ T8831] bcachefs (loop3): finished waiting for writes to stop
[  205.730650][ T8831] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  205.781626][ T8831] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  205.788905][ T8831] bcachefs (loop3): clean shutdown complete, journal seq 4
[  205.791616][ T8831] bcachefs (loop3): marking filesystem clean
[  205.820530][ T8831] bcachefs (loop3): shutdown complete
[  205.874689][ T9093] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  206.031706][ T9093] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  206.035591][ T9093] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.046712][ T9093] usb 1-1: Product: syz
[  206.048462][ T9093] usb 1-1: Manufacturer: syz
[  206.050393][ T9093] usb 1-1: SerialNumber: syz
[  206.059518][ T9093] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  206.092225][ T2209] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  206.111012][  T974] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  206.122543][  T974] ath9k_htc: Failed to initialize the device
[  206.128168][   T10] usb 2-1: ath9k_htc: USB layer deinitialized
[  206.321056][    C1] usb 1-1: ath9k_htc: invalid pkt_len (ffd7)
[  206.925539][   T47] usb 1-1: USB disconnect, device number 17
[  206.937016][ T9494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1453'.
[  207.134641][ T2209] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  207.138779][ T2209] ath9k_htc: Failed to initialize the device
[  207.142000][   T47] usb 1-1: ath9k_htc: USB layer deinitialized
[  207.571733][ T9503] nfs: Deprecated parameter 'nointr'
[  207.672431][ T9508] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1455'.
[  207.685992][ T9505] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  207.689553][  T974] IPVS: starting estimator thread 0...
[  207.780148][ T9509] IPVS: using max 39 ests per chain, 93600 per kthread
[  208.565234][ T9523] loop3: detected capacity change from 0 to 4096
[  208.569888][ T9523] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  208.575315][ T9523] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  208.588710][ T5937] udevd[5937]: incorrect nilfs2 checksum on /dev/loop3
[  208.604147][ T9524] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  208.608376][ T5937] udevd[5937]: incorrect nilfs2 checksum on /dev/loop3
[  208.629157][   T33] audit: type=1800 audit(1753413010.086:36): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1462" name="file1" dev="loop3" ino=15 res=0 errno=0
[  208.814887][  T971] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  208.977740][  T971] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10
[  208.982316][  T971] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024
[  209.003702][  T971] usb 1-1: config 0 interface 0 has no altsetting 0
[  209.019692][  T971] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  209.026795][  T971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.030039][  T971] usb 1-1: Product: syz
[  209.031836][  T971] usb 1-1: Manufacturer: syz
[  209.033789][  T971] usb 1-1: SerialNumber: syz
[  209.057354][  T971] usb 1-1: config 0 descriptor??
[  209.071320][  T971] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  209.075703][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  209.088195][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  209.091467][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  209.106053][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  209.110106][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  209.125063][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  209.138888][  T971] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  209.162528][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  209.174693][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  209.178100][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  209.181312][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  209.210020][  T971] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  209.217145][  T971] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  209.274541][ T2209] usb 1-1: USB disconnect, device number 18
[  209.295268][ T2209] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  209.312071][ T2209] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  209.325239][ T2209] keyspan 1-1:0.0: device disconnected
[  209.612497][ T9538] loop1: detected capacity change from 0 to 32768
[  209.645500][ T9544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'.
[  209.907420][ T9538] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.942562][ T9538] XFS (loop1): Ending clean mount
[  209.956282][ T9538] XFS (loop1): Quotacheck needed: Please wait.
[  210.011628][ T9538] XFS (loop1): Quotacheck: Done.
[  210.220084][ T5944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.609062][ T9561] loop3: detected capacity change from 0 to 32768
[  210.931931][ T9582] loop3: detected capacity change from 0 to 4096
[  210.940377][ T9577] loop1: detected capacity change from 0 to 8192
[  210.946708][ T9582] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  211.458292][ T9590] loop3: detected capacity change from 0 to 32768
[  211.482593][ T9590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1482 (9590)
[  211.498409][ T9590] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  211.501396][ T9590] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  211.514963][ T9590] BTRFS info (device loop3): using free-space-tree
[  211.685222][ T8831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.060898][ T9620] loop3: detected capacity change from 0 to 32768
[  213.066994][ T9620] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1486 (9620)
[  213.109087][ T9620] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.113141][ T9620] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  213.118131][ T9620] BTRFS info (device loop3): using free-space-tree
[  213.152874][ T9620] BTRFS info (device loop3): rebuilding free space tree
[  213.259942][ T9599] loop1: detected capacity change from 0 to 65536
[  213.302530][ T9599] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  213.347378][ T9599] XFS (loop1): Ending clean mount
[  213.351344][ T8831] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.458280][ T9647] XFS (loop1): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  213.479179][ T9647] XFS (loop1): Unmount and run xfs_repair
[  213.488426][ T9647] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  213.495060][ T9647] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  213.499984][ T9647] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  213.507090][ T9647] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  213.510558][ T9647] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  213.513964][ T9647] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  213.547421][ T9647] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  213.550957][ T9647] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  213.576691][ T9647] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  213.580967][ T9647] XFS (loop1): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  213.602176][ T9647] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  213.629596][ T9647] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  213.747904][ T5944] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  214.188862][ T9654] loop3: detected capacity change from 0 to 32768
[  214.200879][ T9654] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1490 (9654)
[  214.222116][ T9654] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  214.229075][ T9654] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  214.235789][ T9654] BTRFS info (device loop3): disk space caching is enabled
[  214.246457][ T9654] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  214.340966][ T9654] BTRFS info (device loop3): rebuilding free space tree
[  214.368059][ T9654] BTRFS info (device loop3): disabling free space tree
[  214.375090][ T9654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.387263][ T9654] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.403666][ T9656] loop1: detected capacity change from 0 to 32768
[  214.427787][ T9656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1491 (9656)
[  214.455313][ T9656] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  214.459240][ T9656] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  214.473243][ T9654] BTRFS error: failed to open device for path =y-'z>y X^V/~2*+ĭR$Lϟhd*vF%=)_0QBQ{J TK^w܁yz*
[  214.473243][ T9654] _v'" with flags 0x1: -2
[  214.476942][ T9656] BTRFS info (device loop1): disk space caching is enabled
[  214.483231][ T9656] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  214.575805][ T8831] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  214.640903][ T9656] BTRFS info (device loop1): rebuilding free space tree
[  214.743408][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.749631][ T9656] BTRFS info (device loop1): disabling free space tree
[  214.752302][ T9656] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.785209][ T9656] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  215.254171][  T971] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  215.575308][  T971] usb 4-1: Using ep0 maxpacket: 32
[  215.668448][   T33] audit: type=1800 audit(1753413016.616:37): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1491" name="bus" dev="loop1" ino=263 res=0 errno=0
[  216.482575][  T971] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  217.119708][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.157309][ T5944] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.337539][  T971] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  217.341065][  T971] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  217.345857][   T33] audit: type=1800 audit(1753413016.616:38): pid=9696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1491" name="bus" dev="loop1" ino=263 res=0 errno=0
[  217.355759][  T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  217.361056][  T971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  217.366666][  T971] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  217.370463][  T971] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  217.374107][  T971] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  217.381772][  T971] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  217.385909][  T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.408000][  T971] usb 4-1: config 0 descriptor??
[  217.416165][ T9691] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  217.419751][  T971] usblp0: Disabling reads from problematic bidirectional printer
[  217.649368][  T971] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  217.664952][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.709823][  T971] usb 4-1: USB disconnect, device number 5
[  217.716447][  T971] usblp0: removed
[  218.238385][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.485350][   T13] bridge_slave_1: left allmulticast mode
[  218.489901][   T13] bridge_slave_1: left promiscuous mode
[  218.494899][   T10] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  218.496069][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.513813][   T13] bridge_slave_0: left allmulticast mode
[  218.527714][   T13] bridge_slave_0: left promiscuous mode
[  218.530194][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.646995][   T10] usb 2-1: config 64 has an invalid interface number: 19 but max is 0
[  218.650304][   T10] usb 2-1: config 64 has no interface number 0
[  218.652805][   T10] usb 2-1: New USB device found, idVendor=2201, idProduct=012c, bcdDevice=3f.e0
[  218.679492][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.698845][   T10] usb 2-1: probing VID:PID(2201:012C)   
[  218.706554][   T10] usb 2-1: Could not find two sets of bulk-in/out endpoint pairs
[  218.728153][   T10] vub300 2-1:64.19: probe with driver vub300 failed with error -22
[  218.840663][ T9725] loop3: detected capacity change from 0 to 512
[  218.892498][   T10] usb 2-1: USB disconnect, device number 17
[  219.367318][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.373620][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.379193][   T13] bond0 (unregistering): Released all slaves
[  219.442395][   T13] : left promiscuous mode
[  219.924652][   T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  220.104869][   T47] usb 4-1: Using ep0 maxpacket: 32
[  220.142825][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.148351][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.165872][   T47] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  220.169453][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.195530][   T47] usb 4-1: config 0 descriptor??
[  220.510524][   T13] hsr_slave_0: left promiscuous mode
[  220.513883][   T13] hsr_slave_1: left promiscuous mode
[  220.523035][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.532163][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.537857][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.540570][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.582803][   T13] veth1_macvtap: left promiscuous mode
[  220.589332][   T13] veth0_macvtap: left promiscuous mode
[  220.591203][   T13] veth1_vlan: left promiscuous mode
[  220.592967][   T13] veth0_vlan: left promiscuous mode
[  220.701906][   T47] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  220.966893][   T47] usb 4-1: USB disconnect, device number 6
[  220.993549][   T33] audit: type=1800 audit(1753413022.446:39): pid=9770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1513" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  221.473367][   T13] team0 (unregistering): Port device team_slave_1 removed
[  221.530715][ T9777] binder: 9776:9777 unknown command 0
[  221.534196][ T9777] binder: 9776:9777 ioctl c0306201 2000000003c0 returned -22
[  221.602292][   T13] team0 (unregistering): Port device team_slave_0 removed
[  222.101566][ T9791] loop3: detected capacity change from 0 to 64
[  222.140599][ T9791] BFS-fs: bfs_fill_super(): Impossible last inode number 63507505 > 513 on loop3
[  222.503159][ T9799] loop3: detected capacity change from 0 to 4096
[  222.517138][ T9799] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  222.539558][ T9799] ntfs3(loop3): ino=19, mi_enum_attr
[  222.558660][ T9799] ntfs3(loop3): failed to convert "c46c" to iso8859-3
[  222.630176][ T9799] ntfs3(loop3): ino=20, mi_enum_attr
[  222.813650][ T9801] bond0: entered promiscuous mode
[  222.820534][ T9801] bond_slave_0: entered promiscuous mode
[  222.822918][ T9801] bond_slave_1: entered promiscuous mode
[  223.020265][ T9810] netlink: 'syz.0.1531': attribute type 2 has an invalid length.
[  223.027582][ T9810] netlink: 'syz.0.1531': attribute type 8 has an invalid length.
[  223.033906][ T9810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1531'.
[  223.386993][ T9828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1538'.
[  223.494794][ T9093] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  223.644834][ T9093] usb 4-1: Using ep0 maxpacket: 8
[  223.655994][ T9838] loop1: detected capacity change from 0 to 2048
[  223.669051][ T9093] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.690449][ T9093] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF
[  223.700661][ T9838] hpfs: hpfs_map_sector(): read error
[  223.706184][ T9093] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  223.723140][ T9093] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  223.744829][ T9093] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.748047][ T9093] usb 4-1: Product: syz
[  223.749666][ T9093] usb 4-1: Manufacturer: syz
[  223.751601][ T9093] usb 4-1: SerialNumber: syz
[  224.234551][   T33] audit: type=1326 audit(1753413025.686:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.1.1550" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1793f8e9a9 code=0x0
[  224.792877][ T9093] cdc_ncm 4-1:1.0: bind() failure
[  224.813350][ T9093] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  224.826020][ T9093] usb 4-1: USB disconnect, device number 7
[  225.146611][ T9898] netlink: 'syz.0.1556': attribute type 1 has an invalid length.
[  225.257914][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'.
[  225.465554][ T9918] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1566'.
[  225.469309][ T9918] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  225.472534][ T9918] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  225.690152][ T9928] sctp: [Deprecated]: syz.3.1571 (pid 9928) Use of int in max_burst socket option.
[  225.690152][ T9928] Use struct sctp_assoc_value instead
[  226.408655][ T9967] netlink: 664 bytes leftover after parsing attributes in process `syz.0.1587'.
[  226.743381][ T9975] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.822369][ T9975] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.958025][ T9975] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.042122][ T9975] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  227.198353][ T9975] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  227.230746][ T9975] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  227.247504][ T9975] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  227.276713][ T9975] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  227.739592][T10023] loop1: detected capacity change from 0 to 1024
[  227.759906][T10007] loop3: detected capacity change from 0 to 32768
[  227.767144][T10007] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1606 (10007)
[  227.777214][T10023] EXT4-fs: Ignoring removed oldalloc option
[  227.781436][T10007] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.786206][T10007] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  227.789032][T10023] EXT4-fs: Ignoring removed orlov option
[  227.791794][T10007] BTRFS info (device loop3): using free-space-tree
[  227.800158][T10023] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  227.832397][T10023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.880946][ T8831] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.891459][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.087844][T10048] loop1: detected capacity change from 0 to 512
[  228.100910][T10048] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  228.113482][T10048] EXT4-fs (loop1): 1 truncate cleaned up
[  228.128106][T10048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.139229][T10048] syz.1.1617 (pid 10048) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  228.196315][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.435932][T10063] loop1: detected capacity change from 0 to 512
[  228.443159][T10063] EXT4-fs: Ignoring removed bh option
[  228.459127][T10063] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  228.481888][T10063] EXT4-fs (loop1): 1 truncate cleaned up
[  228.496107][T10063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.206490][T10068] loop3: detected capacity change from 0 to 32768
[  229.363770][T10068] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  229.363792][T10068]   allowing incompatible features above 0.0: (unknown version)
[  229.363801][T10068]   features: atomic_nlink
[  229.381988][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.413656][T10068] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  229.450314][T10068] bcachefs (loop3): initializing new filesystem
[  229.480282][T10068] bcachefs (loop3): going read-write
[  229.507132][T10068] bcachefs (loop3): marking superblocks
[  229.559307][T10068] bcachefs (loop3): initializing freespace
[  229.571774][T10068] bcachefs (loop3): done initializing freespace
[  229.578235][T10068] bcachefs (loop3): reading snapshots table
[  229.578340][T10068] bcachefs (loop3): reading snapshots done
[  229.610248][T10068] bcachefs (loop3): done starting filesystem
[  229.725678][   T33] audit: type=1800 audit(1753413031.176:41): pid=10068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1626" name="file1" dev="loop3" ino=4098 res=0 errno=0
[  229.791271][ T8831] bcachefs (loop3): shutting down
[  229.793210][ T8831] bcachefs (loop3): going read-only
[  229.805257][ T8831] bcachefs (loop3): finished waiting for writes to stop
[  229.840726][ T8831] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  229.878094][ T8831] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  229.881851][ T8831] bcachefs (loop3): clean shutdown complete, journal seq 4
[  229.884306][ T8831] bcachefs (loop3): marking filesystem clean
[  229.887968][T10107] loop1: detected capacity change from 0 to 4096
[  229.891184][T10107] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  229.939238][ T8831] bcachefs (loop3): shutdown complete
[  230.102262][T10117] ieee802154 phy0 wpan0: encryption failed: -22
[  230.290211][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  230.293278][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1647'.
[  230.357632][T10127] loop1: detected capacity change from 0 to 764
[  230.378330][T10127] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  230.854751][  T974] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  231.014974][  T974] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  231.018035][  T974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.036511][  T974] usb 2-1: config 0 descriptor??
[  231.250009][  T974] ath6kl: Failed to submit usb control message: -71
[  231.252136][  T974] ath6kl: unable to send the bmi data to the device: -71
[  231.259953][  T974] ath6kl: Unable to send get target info: -71
[  231.275698][  T974] ath6kl: Failed to init ath6kl core: -71
[  231.279021][  T974] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  231.307207][  T974] usb 2-1: USB disconnect, device number 18
[  231.374937][T10144] loop3: detected capacity change from 0 to 32768
[  231.386617][T10144] bcachefs (/dev/loop3): error reading superblock: Not a bcachefs superblock (got magic 00000000-0000-0000-0000-000000000000)
[  231.406034][T10144] bcachefs: bch2_fs_get_tree() error: invalid_sb_magic
[  231.673592][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'.
[  231.838203][T10164] block nbd0: NBD_DISCONNECT
[  231.945838][ T5943] Bluetooth: hci2: command 0x0406 tx timeout
[  233.304129][T10202] loop3: detected capacity change from 0 to 8
[  233.342083][T10202] SQUASHFS error: xz decompression failed, data probably corrupt
[  233.346779][T10202] SQUASHFS error: Failed to read block 0xa8: -5
[  233.349308][T10202] SQUASHFS error: xz decompression failed, data probably corrupt
[  233.351795][T10202] SQUASHFS error: Failed to read block 0xa8: -5
[  233.353969][   T33] audit: type=1800 audit(1753413034.806:42): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1680" name="file0" dev="loop3" ino=3 res=0 errno=0
[  235.489997][T10247] Invalid ELF header magic: != ELF
[  235.693875][T10269] binder: 10268:10269 ioctl c0306201 200000000100 returned -14
[  236.004092][T10285] ipt_rpfilter: unknown options
[  236.080893][T10288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1720'.
[  236.094949][T10288] tc_dump_action: action bad kind
[  236.146345][T10289] loop1: detected capacity change from 0 to 1764
[  236.196531][T10289] iso9660: Corrupted directory entry in block 0 of inode 1792
[  237.074125][T10321] program syz.1.1732 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  238.026285][T10331] netlink: 'syz.3.1736': attribute type 46 has an invalid length.
[  238.029449][T10331] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1736'.
[  238.453467][T10347] ALSA: mixer_oss: invalid OSS volume 'LI'
[  240.266165][   T10] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  240.437831][   T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  240.441385][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.463007][   T10] usb 2-1: config 0 descriptor??
[  240.482365][T10365] netlink: 'syz.3.1750': attribute type 11 has an invalid length.
[  240.699409][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  240.793988][T10373] loop3: detected capacity change from 0 to 512
[  240.926945][T10373] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1754: iget: bad extended attribute block 1
[  240.932668][T10373] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1754: couldn't read orphan inode 15 (err -117)
[  240.941856][T10373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  241.138192][ T8831] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.539092][T10379] loop3: detected capacity change from 0 to 2048
[  241.564164][T10379] NILFS (loop3): invalid segment: Checksum error in super root
[  241.577990][T10379] NILFS (loop3): error -22 while loading super root
[  241.714584][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  241.718051][   T10] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  241.723079][   T10] asix 2-1:0.0: probe with driver asix failed with error -71
[  241.730282][   T10] usb 2-1: USB disconnect, device number 19
[  241.877600][T10387] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  242.780897][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  243.121390][    T9] usb 2-1: Using ep0 maxpacket: 32
[  243.463864][    T9] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  243.503312][    T9] usb 2-1: config 0 has no interface number 0
[  243.511190][    T9] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  243.520896][    T9] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  243.543757][T10407] macvlan1: entered promiscuous mode
[  243.548908][T10407] ipvlan0: entered promiscuous mode
[  243.552053][T10407] ipvlan0: left promiscuous mode
[  243.560450][T10407] macvlan1: left promiscuous mode
[  243.592985][    T9] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  243.597001][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.600420][    T9] usb 2-1: Product: syz
[  243.602541][    T9] usb 2-1: Manufacturer: syz
[  243.604946][    T9] usb 2-1: SerialNumber: syz
[  243.609319][    T9] usb 2-1: config 0 descriptor??
[  243.612121][T10393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  243.628051][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  243.631610][    T9] usb 2-1: invalid MIDI in EP 0
[  243.714100][    T9] snd-usb-audio 2-1:0.16: probe with driver snd-usb-audio failed with error -22
[  243.722367][T10412] netlink: 'syz.0.1769': attribute type 29 has an invalid length.
[  243.731631][T10412] netlink: 'syz.0.1769': attribute type 29 has an invalid length.
[  243.738423][T10412] netlink: 'syz.0.1769': attribute type 29 has an invalid length.
[  243.747665][T10412] netlink: 'syz.0.1769': attribute type 29 has an invalid length.
[  243.770901][ T5942] udevd[5942]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  243.849898][    T9] usb 2-1: USB disconnect, device number 20
[  243.857581][T10416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1770'.
[  244.072586][T10427] loop3: detected capacity change from 0 to 64
[  244.546358][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1781'.
[  244.550126][T10444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1781'.
[  244.902698][T10462] sctp: [Deprecated]: syz.1.1790 (pid 10462) Use of int in max_burst socket option.
[  244.902698][T10462] Use struct sctp_assoc_value instead
[  244.976059][ T2209] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  245.136466][ T2209] usb 4-1: Using ep0 maxpacket: 32
[  245.140493][ T2209] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  245.143681][ T2209] usb 4-1: config 0 has no interface number 0
[  245.146550][ T2209] usb 4-1: config 0 interface 89 has no altsetting 0
[  245.163225][ T2209] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  245.167829][ T2209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.171037][ T2209] usb 4-1: Product: syz
[  245.172715][ T2209] usb 4-1: Manufacturer: syz
[  245.175486][ T2209] usb 4-1: SerialNumber: syz
[  245.179934][ T2209] usb 4-1: config 0 descriptor??
[  245.190162][ T2209] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  245.194230][ T2209] em28xx 4-1:0.89: Video interface 89 found: bulk
[  245.242898][T10467] tipc: Started in network mode
[  245.249587][T10467] tipc: Node identity 2, cluster identity 4711
[  245.252278][T10467] tipc: Node number set to 2
[  245.255117][T10467] tipc: Cannot configure node identity twice
[  245.606121][T10483] IPVS: Unknown mcast interface: pimreg0
[  245.782830][T10487] netlink: 'syz.1.1802': attribute type 1 has an invalid length.
[  245.790988][ T2209] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  245.924884][   T10] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  246.086694][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.090694][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  246.099928][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  246.103570][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.108031][   T10] usb 1-1: Product: syz
[  246.109738][   T10] usb 1-1: Manufacturer: syz
[  246.111560][   T10] usb 1-1: SerialNumber: syz
[  246.114783][  T974] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  246.200287][ T2209] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  246.203291][ T2209] em28xx 4-1:0.89: board has no eeprom
[  246.268407][  T974] usb 2-1: unable to get BOS descriptor or descriptor too short
[  246.272481][  T974] usb 2-1: not running at top speed; connect to a high speed hub
[  246.280273][  T974] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=2e.65
[  246.285279][  T974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.288601][  T974] usb 2-1: Product: syz
[  246.290347][  T974] usb 2-1: Manufacturer: syz
[  246.292250][  T974] usb 2-1: SerialNumber: syz
[  246.332287][   T10] usb 1-1: 0:2 : does not exist
[  246.345024][   T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  246.369686][   T10] usb 1-1: USB disconnect, device number 19
[  246.402955][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.464606][ T2209] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  246.467647][ T2209] em28xx 4-1:0.89: analog set to bulk mode.
[  246.470128][   T47] em28xx 4-1:0.89: Registering V4L2 extension
[  246.495179][ T2209] usb 4-1: USB disconnect, device number 8
[  246.498674][ T2209] em28xx 4-1:0.89: Disconnecting em28xx
[  246.521413][  T974] legousbtower 2-1:14.0: interrupt endpoints not found
[  246.531987][   T47] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  246.537235][   T47] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  246.540061][   T47] em28xx 4-1:0.89: No AC97 audio processor
[  246.548124][  T974] usb 2-1: USB disconnect, device number 21
[  246.570729][   T47] usb 4-1: Decoder not found
[  246.572411][   T47] em28xx 4-1:0.89: failed to create media graph
[  246.577560][   T47] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  246.586525][   T47] em28xx 4-1:0.89: Registering snapshot button...
[  246.590652][   T47] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input19
[  246.601813][   T47] em28xx 4-1:0.89: Remote control support is not available for this card.
[  246.606599][ T2209] em28xx 4-1:0.89: Closing input extension
[  246.611892][ T2209] em28xx 4-1:0.89: Deregistering snapshot button
[  246.630245][ T2209] em28xx 4-1:0.89: Freeing device
[  247.109546][T10505] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  247.114276][T10505] tipc: Enabled bearer <udp:syz0>, priority 10
[  247.118481][ T2209] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  247.266933][ T2209] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  247.271104][ T2209] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83
[  247.284698][ T2209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  247.290621][ T2209] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  247.294410][ T2209] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  247.303192][ T2209] usb 1-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e
[  247.307314][ T2209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.310413][ T2209] usb 1-1: Product: syz
[  247.311965][ T2209] usb 1-1: Manufacturer: syz
[  247.313469][ T2209] usb 1-1: SerialNumber: syz
[  247.324916][ T2209] usb 1-1: config 0 descriptor??
[  247.330560][ T2209] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90)
[  247.335882][ T2209] imon 1-1:0.0: unable to initialize intf0, err -90
[  247.338403][ T2209] imon:imon_probe: failed to initialize context!
[  247.340877][ T2209] imon 1-1:0.0: unable to register, err -19
[  247.424636][ T5986] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  247.495969][T10513] loop3: detected capacity change from 0 to 32768
[  247.502177][T10513] (syz.3.1814,10513,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.507010][T10513] (syz.3.1814,10513,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  247.517180][T10513] JBD2: Ignoring recovery information on journal
[  247.532131][   T10] usb 1-1: USB disconnect, device number 20
[  247.560418][T10513] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  247.579516][ T5986] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  247.583073][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64
[  247.591430][ T5986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  247.597474][ T5986] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1
[  247.600858][ T5986] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.604064][ T5986] usb 2-1: Product: syz
[  247.605080][T10513] 
[  247.606454][T10513] ======================================================
[  247.606693][ T5986] usb 2-1: Manufacturer: syz
[  247.608702][T10513] WARNING: possible circular locking dependency detected
[  247.608711][T10513] 6.16.0-rc7-syzkaller-dirty #0 Not tainted
[  247.610487][ T5986] usb 2-1: SerialNumber: syz
[  247.612649][T10513] ------------------------------------------------------
[  247.612657][T10513] syz.3.1814/10513 is trying to acquire lock:
[  247.623043][T10513] ffff888020d1a618 (sb_internal#4){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[  247.626606][T10513] 
[  247.626606][T10513] but task is already holding lock:
[  247.629491][T10513] ffff8880300e31e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  247.633716][T10513] 
[  247.633716][T10513] which lock already depends on the new lock.
[  247.633716][T10513] 
[  247.637809][T10513] 
[  247.637809][T10513] the existing dependency chain (in reverse order) is:
[  247.641307][T10513] 
[  247.641307][T10513] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  247.644808][T10513]        lock_acquire+0x120/0x360
[  247.646807][T10513]        down_write+0x96/0x1f0
[  247.648719][T10513]        ocfs2_lock_global_qf+0x1e8/0x270
[  247.651009][T10513]        ocfs2_acquire_dquot+0x2b0/0xb30
[  247.653252][T10513]        dqget+0x7b1/0xf10
[  247.655043][T10513]        __dquot_initialize+0x3b3/0xcb0
[  247.657275][T10513]        ocfs2_get_init_inode+0x13b/0x1b0
[  247.659533][T10513]        ocfs2_mknod+0x863/0x2050
[  247.661554][T10513]        vfs_mknod+0x37f/0x3c0
[  247.663473][T10513]        do_mknodat+0x385/0x4d0
[  247.665446][T10513]        __x64_sys_mknod+0x8c/0xa0
[  247.667459][T10513]        do_syscall_64+0xfa/0x3b0
[  247.669432][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.671857][T10513] 
[  247.671857][T10513] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}:
[  247.675888][T10513]        lock_acquire+0x120/0x360
[  247.677878][T10513]        down_write+0x96/0x1f0
[  247.679783][T10513]        ocfs2_lock_global_qf+0x1ca/0x270
[  247.681902][T10513]        ocfs2_acquire_dquot+0x2b0/0xb30
[  247.684098][T10513]        dqget+0x7b1/0xf10
[  247.685849][T10513]        __dquot_initialize+0x3b3/0xcb0
[  247.687968][T10513]        ocfs2_get_init_inode+0x13b/0x1b0
[  247.690186][T10513]        ocfs2_mknod+0x863/0x2050
[  247.692141][T10513]        vfs_mknod+0x37f/0x3c0
[  247.694003][T10513]        do_mknodat+0x385/0x4d0
[  247.695920][T10513]        __x64_sys_mknod+0x8c/0xa0
[  247.697879][T10513]        do_syscall_64+0xfa/0x3b0
[  247.699888][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.702413][T10513] 
[  247.702413][T10513] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[  247.705429][T10513]        lock_acquire+0x120/0x360
[  247.707414][T10513]        __mutex_lock+0x182/0xe80
[  247.709433][T10513]        dqget+0x72a/0xf10
[  247.711226][T10513]        dquot_transfer+0x4b8/0x6d0
[  247.713290][T10513]        ext4_setattr+0x865/0x1bc0
[  247.715320][T10513]        notify_change+0xb36/0xe40
[  247.717357][T10513]        chown_common+0x40c/0x5c0
[  247.719309][T10513]        do_fchownat+0x161/0x270
[  247.721153][T10513]        __x64_sys_lchown+0x85/0xa0
[  247.723263][T10513]        do_syscall_64+0xfa/0x3b0
[  247.725265][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.727768][T10513] 
[  247.727768][T10513] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[  247.730744][T10513]        lock_acquire+0x120/0x360
[  247.732763][T10513]        down_read+0x46/0x2e0
[  247.734636][T10513]        ext4_setattr+0x855/0x1bc0
[  247.736650][T10513]        notify_change+0xb36/0xe40
[  247.738680][T10513]        chown_common+0x40c/0x5c0
[  247.740679][T10513]        do_fchownat+0x161/0x270
[  247.742660][T10513]        __x64_sys_chown+0x82/0xa0
[  247.744719][T10513]        do_syscall_64+0xfa/0x3b0
[  247.746697][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.749143][T10513] 
[  247.749143][T10513] -> #2 (jbd2_handle){++++}-{0:0}:
[  247.752016][T10513]        lock_acquire+0x120/0x360
[  247.754019][T10513]        start_this_handle+0x1fa7/0x21c0
[  247.756179][T10513]        jbd2__journal_start+0x2c1/0x5b0
[  247.758415][T10513]        jbd2_journal_start+0x2a/0x40
[  247.760535][T10513]        ocfs2_start_trans+0x376/0x6d0
[  247.762602][T10513]        ocfs2_mknod+0xe93/0x2050
[  247.764640][T10513]        ocfs2_create+0x1a5/0x440
[  247.766635][T10513]        path_openat+0x14f4/0x3830
[  247.768612][T10513]        do_filp_open+0x1fa/0x410
[  247.770541][T10513]        do_sys_openat2+0x121/0x1c0
[  247.772548][T10513]        __x64_sys_openat+0x138/0x170
[  247.774646][T10513]        do_syscall_64+0xfa/0x3b0
[  247.776598][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.779095][T10513] 
[  247.779095][T10513] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  247.782432][T10513]        lock_acquire+0x120/0x360
[  247.784459][T10513]        down_read+0x46/0x2e0
[  247.786341][T10513]        ocfs2_start_trans+0x36a/0x6d0
[  247.788493][T10513]        ocfs2_mknod+0xe93/0x2050
[  247.790488][T10513]        ocfs2_create+0x1a5/0x440
[  247.792521][T10513]        path_openat+0x14f4/0x3830
[  247.794158][T10513]        do_filp_open+0x1fa/0x410
[  247.795880][T10513]        do_sys_openat2+0x121/0x1c0
[  247.797473][T10513]        __x64_sys_openat+0x138/0x170
[  247.799088][T10513]        do_syscall_64+0xfa/0x3b0
[  247.800860][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.803394][T10513] 
[  247.803394][T10513] -> #0 (sb_internal#4){.+.+}-{0:0}:
[  247.806414][T10513]        validate_chain+0xb9b/0x2140
[  247.808521][T10513]        __lock_acquire+0xab9/0xd20
[  247.810638][T10513]        lock_acquire+0x120/0x360
[  247.812642][T10513]        ocfs2_start_trans+0x26b/0x6d0
[  247.814747][T10513]        ocfs2_acquire_dquot+0x455/0xb30
[  247.816983][T10513]        dqget+0x7b1/0xf10
[  247.818808][T10513]        __dquot_initialize+0x3b3/0xcb0
[  247.821034][T10513]        ocfs2_get_init_inode+0x13b/0x1b0
[  247.823317][T10513]        ocfs2_mknod+0x863/0x2050
[  247.825411][T10513]        vfs_mknod+0x37f/0x3c0
[  247.827435][T10513]        do_mknodat+0x385/0x4d0
[  247.829442][T10513]        __x64_sys_mknod+0x8c/0xa0
[  247.831513][T10513]        do_syscall_64+0xfa/0x3b0
[  247.833607][T10513]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.836133][T10513] 
[  247.836133][T10513] other info that might help us debug this:
[  247.836133][T10513] 
[  247.839592][T10513] Chain exists of:
[  247.839592][T10513]   sb_internal#4 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7 --> &ocfs2_quota_ip_alloc_sem_key
[  247.839592][T10513] 
[  247.845362][T10513]  Possible unsafe locking scenario:
[  247.845362][T10513] 
[  247.847596][T10513]        CPU0                    CPU1
[  247.849562][T10513]        ----                    ----
[  247.851420][T10513]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  247.853367][T10513]                                lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7);
[  247.856487][T10513]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  247.858930][T10513]   rlock(sb_internal#4);
[  247.860258][T10513] 
[  247.860258][T10513]  *** DEADLOCK ***
[  247.860258][T10513] 
[  247.862745][T10513] 6 locks held by syz.3.1814/10513:
[  247.864375][T10513]  #0: ffff888020d1a428 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  247.867369][T10513]  #1: ffff8880300e1840 (&type->i_mutex_dir_key#19/1){+.+.}-{4:4}, at: filename_create+0x1f9/0x470
[  247.870913][T10513]  #2: ffff88801dd0e0c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  247.875465][T10513]  #3: ffff8880301860a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[  247.878681][T10513]  #4: ffff8880300e3540 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#7){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[  247.882878][T10513]  #5: ffff8880300e31e0 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  247.886503][T10513] 
[  247.886503][T10513] stack backtrace:
[  247.888442][T10513] CPU: 0 UID: 0 PID: 10513 Comm: syz.3.1814 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  247.888454][T10513] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  247.888461][T10513] Call Trace:
[  247.888466][T10513]  <TASK>
[  247.888473][T10513]  dump_stack_lvl+0x189/0x250
[  247.888488][T10513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  247.888498][T10513]  ? __pfx__printk+0x10/0x10
[  247.888511][T10513]  ? print_lock_name+0xde/0x100
[  247.888523][T10513]  print_circular_bug+0x2ee/0x310
[  247.888535][T10513]  check_noncircular+0x134/0x160
[  247.888552][T10513]  validate_chain+0xb9b/0x2140
[  247.888578][T10513]  __lock_acquire+0xab9/0xd20
[  247.888593][T10513]  ? ocfs2_acquire_dquot+0x455/0xb30
[  247.888607][T10513]  lock_acquire+0x120/0x360
[  247.888621][T10513]  ? ocfs2_acquire_dquot+0x455/0xb30
[  247.888639][T10513]  ? do_raw_spin_unlock+0x4d/0x240
[  247.888657][T10513]  ocfs2_start_trans+0x26b/0x6d0
[  247.888666][T10513]  ? ocfs2_acquire_dquot+0x455/0xb30
[  247.888675][T10513]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  247.888683][T10513]  ? do_raw_spin_unlock+0x4d/0x240
[  247.888693][T10513]  ? _raw_spin_unlock+0x28/0x50
[  247.888700][T10513]  ? ocfs2_qinfo_unlock+0x121/0x150
[  247.888709][T10513]  ocfs2_acquire_dquot+0x455/0xb30
[  247.888720][T10513]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  247.888730][T10513]  dqget+0x7b1/0xf10
[  247.888744][T10513]  __dquot_initialize+0x3b3/0xcb0
[  247.888756][T10513]  ? __pfx___dquot_initialize+0x10/0x10
[  247.888767][T10513]  ? do_raw_spin_unlock+0x4d/0x240
[  247.888777][T10513]  ? from_vfsgid+0x72/0xa0
[  247.888786][T10513]  ? inode_init_owner+0x1ee/0x3a0
[  247.888795][T10513]  ocfs2_get_init_inode+0x13b/0x1b0
[  247.888807][T10513]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  247.888819][T10513]  ocfs2_mknod+0x863/0x2050
[  247.888827][T10513]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  247.888835][T10513]  ? __pfx_ocfs2_mknod+0x10/0x10
[  247.888842][T10513]  ? __pfx_ocfs2_inode_lock_full_nested+0x10/0x10
[  247.888851][T10513]  ? __lock_acquire+0xab9/0xd20
[  247.888861][T10513]  ? __lock_acquire+0xab9/0xd20
[  247.888870][T10513]  ? do_raw_spin_lock+0x121/0x290
[  247.888882][T10513]  ? __lock_acquire+0xab9/0xd20
[  247.888892][T10513]  ? devcgroup_check_permission+0x2f/0x950
[  247.888903][T10513]  ? devcgroup_check_permission+0x2f/0x950
[  247.888911][T10513]  ? bpf_lsm_inode_mknod+0x9/0x20
[  247.888919][T10513]  ? security_inode_mknod+0xc2/0x360
[  247.888931][T10513]  vfs_mknod+0x37f/0x3c0
[  247.888944][T10513]  do_mknodat+0x385/0x4d0
[  247.888953][T10513]  ? __pfx_do_mknodat+0x10/0x10
[  247.888961][T10513]  ? getname_flags+0x1e5/0x540
[  247.888970][T10513]  __x64_sys_mknod+0x8c/0xa0
[  247.888980][T10513]  do_syscall_64+0xfa/0x3b0
[  247.888990][T10513]  ? lockdep_hardirqs_on+0x9c/0x150
[  247.888997][T10513]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.889005][T10513]  ? exc_page_fault+0x9f/0xf0
[  247.889013][T10513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.889021][T10513] RIP: 0033:0x7fecd218e9a9
[  247.889031][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.889039][T10513] RSP: 002b:00007fecd2f84038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085
[  247.889048][T10513] RAX: ffffffffffffffda RBX: 00007fecd23b5fa0 RCX: 00007fecd218e9a9
[  247.889054][T10513] RDX: 0000000000000707 RSI: 100000000000600d RDI: 0000200000000080
[  247.889059][T10513] RBP: 00007fecd2210d69 R08: 0000000000000000 R09: 0000000000000000
[  247.889064][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.889069][T10513] R13: 0000000000000000 R14: 00007fecd23b5fa0 R15: 00007ffc59820408
[  247.889077][T10513]  </TASK>
[  248.015870][ T5986] usb 2-1: config 0 descriptor??
[  248.018956][T10509] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  248.026287][ T5986] option 2-1:0.0: GSM modem (1-port) converter detected
[  248.053598][T10516] (syz.3.1814,10516,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  248.131620][ T8831] ocfs2: Unmounting device (7,3) on (node local)
[  248.248781][ T5986] usb 2-1: USB disconnect, device number 22
[  248.252259][ T5986] option 2-1:0.0: device disconnected
[  255.457410][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  255.459770][ T1361] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
03:10:49  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000003a1a4 RDI=000000000003a1a5 RBP=00000000000003f8 RSP=ffffc90002ebeaf0
R8 =ffff888021508237 R9 =1ffff110042a1046 R10=dffffc0000000000 R11=ffffffff85462e20
R12=dffffc0000000000 R13=ffffffff99af189f R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462e9c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fecd2f846c0 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34011ff8 CR3=00000000293c6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffff00 ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6e5cc11ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=b8637ec8c7140d00 RBX=ffffffff81976a18 RCX=b8637ec8c7140d00 RDX=0000000000000001
RSI=ffffffff8be28ce0 RDI=ffffffff81976a18 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1dcf0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001e000
RIP=ffffffff8b6d94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557953e62d00 CR3=00000000286b0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 ffff000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
