last executing test programs:

58.559658201s ago: executing program 2 (id=576):
ioperm(0x0, 0x2, 0x7e)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58)

58.470972607s ago: executing program 2 (id=578):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x9, 0x0, 0x8})

58.308498828s ago: executing program 2 (id=581):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x100, 0x0)
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)

58.224187822s ago: executing program 2 (id=582):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2b, 0x101, 0x12400000, 0x0, 0xff, 0xfff, 0x400, 0x0, 0x0, 0x2, 0x6}}, 0x50)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)

58.073373566s ago: executing program 2 (id=587):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, 0x0, &(0x7f00000001c0)=0x18)

57.474148506s ago: executing program 2 (id=594):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x4, 0x4, 0x10006, 0x1b00}, 0x50)

57.425682127s ago: executing program 32 (id=594):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xd, 0x4, 0x4, 0x10006, 0x1b00}, 0x50)

52.894936064s ago: executing program 3 (id=665):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f00000001c0)=0xc, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'})

52.813715639s ago: executing program 3 (id=666):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x7, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="160a0000000000006110ac000000000095000f0000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80)

52.813309693s ago: executing program 3 (id=668):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="e8ffffff914faeb21253e320849117818e367e00c7ff9383b4020002004c60c2", 0x20)

52.704767001s ago: executing program 3 (id=669):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$eJzs281vG8Ufx/HPbGJnk/b3w31yC6qEJSSKiiix05I+gRRa0iL1gbYJAqEWhcYJVhMnitOqraCtxKFHoEggJA7l0AtCVZHgAgcOcOM/4MKtBy6YEycQms2sd+26JK0fEjfvl5R4vPv17uzM7OysdywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACC9/MpQf9Ysdy4AAEA7HTt1sj/H9R8AgFVlhPt/AACA1cTI0ycy+uHTsjkavF/gHykUz18cPThc/2O9JvhkVxBv//xsbmDnrhcGd4ev//35Zntcx0+NDGUOzEzPzuVLpfx4ZrRYODsznl/yFhr9fK3tQQFkps+dH5+YKGVyOwaqVl9M3e1Zk07tG0zvfzqMHT04PHwqFtOdeOi93+N+I/ykPF2XUfnj2+aYJE+Nl8UibafVeoOD2B4cxOjB4eBApgpjxXm70oQF4VWXSTIsozbURUM2SjZfJtmce7aEPJVktCldNscldYXl8GzwxfDiG/Cako0HZvN5WlJGHVBnK1iPPO2S0Y09Kb1myyys/27p/eXOHFquW55uy2jbS2VzIugP7Plku80jr2deLU7MxGKNcWdUp18f2mmF902+PB0LzviyObncmUHb2cHSaRntHLkQjCsUjEsf2zd46PBIfISxeZHt2NgdLr2Ua3IiNnQwyzSGAAAAAAAAAB51vvGC7+I+/8YP3mfcMyCsEsbT8zL683A5eDQen5fQFZvfUdHpz35am/9e/8DM7KW5wuS783XX9/lD75Tm58bO1l+tXnvyVX0dvtg8hgYljKfdMrr6z51ovylj064biHZ0a3+UN9/UrA3azf8X5rOEzxD2Dm+Op+tm+QGej6XcfumfgOYwxtOQjCa+3+LmfvTpnj7IxX0roz9ubnVxXtIGhadpKvjvTxSm8v029icZffl3GBtMM9MaF7shis3aWE9GHx2tjl3rYjdGsTkbe0hGP5+pH7spih2wsR/IaPb3TBjbZ2OfdLHpKHbH2Zmp8ZYV8Apn+/8rMlr/YsaEdenKy3WzXZXYW+9F/f212g3dp89vtP9PxZZdc+3wrm2vZ7YEbS9or1799npdRl9/t9XFLbSVpFu/Lvgftdc3ZDT5S3Vsn4tdH8Vml1ywHcLW/9syyhXvVMrG1b+rgdj1P1b/T9S2jhbV/7rYspTbb09zDh2SSpcunxubmsrPkSBBYgmJHq2IbCySCPvlh9/OMndMaAt7/f9MRm+e+LUy3nHXfzesjsZ/f12Jrv97azfUouv/+tiyvW40kuiW/Pnp2URa8kuXLj9XmB6bzE/miwO57J7+PTsHs4lkOLaLUg0X1SMp4e7VLnz4VeX+rHr8V3/831e7oRbV/waXzXCfUSfVlMNf9Wz9/yajt368U7mPtvV/sxJRPf4P77OeeWrhtXJ+tqj+N8aWpdx+/9eE4wYAAAAAAAAAAAAAAACATpcwnm7IyD/dbcLfRi1l/t89P5hq0fyvdGzZeJt+r9BwoQJAB/Dk6QsZbVPZXLUL1kpH4694pP0bAAD//3VdHM0=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

52.615016818s ago: executing program 3 (id=670):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2)

50.87403487s ago: executing program 3 (id=696):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0)

50.771066084s ago: executing program 33 (id=696):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x32, 0x0, 0xffffd000)
futex(&(0x7f000000cffc), 0x8c, 0x1, 0x0, 0x0, 0x0)

12.753696463s ago: executing program 1 (id=1151):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x40204706, &(0x7f0000000040)={0x4000, 0x3, 0x5, 0x0, 0x0, "3eccd8f9d20500005a1a320900"})

12.205003497s ago: executing program 1 (id=1154):
r0 = socket(0x40000000015, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100))

12.111502647s ago: executing program 1 (id=1156):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94)

12.109958262s ago: executing program 1 (id=1158):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x818808, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file1\x00', 0x2004010, &(0x7f0000001180)=ANY=[], 0x9, 0x1f2, &(0x7f00000004c0)="$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")
getdents64(r0, &(0x7f0000000180)=""/92, 0x5c)

12.033272046s ago: executing program 1 (id=1161):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94)

11.814297541s ago: executing program 1 (id=1165):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

11.69020295s ago: executing program 34 (id=1165):
r0 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

1.498971101s ago: executing program 0 (id=1251):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
openat(r1, &(0x7f0000002700)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x0)

1.444594353s ago: executing program 4 (id=1253):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x619)

1.442589914s ago: executing program 0 (id=1259):
r0 = socket(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r1=>0xffffffffffffffff})
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000040))
write(r0, &(0x7f0000000100), 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f000001b000)=""/102400, 0x19000)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe0a, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
fallocate(0xffffffffffffffff, 0x3, 0x5, 0x8)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x3}, 0x20004004)
recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {&(0x7f0000001340)=""/240, 0xf0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x32, 0x10122, 0x0)

1.441166433s ago: executing program 4 (id=1260):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = gettid()
timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe2(&(0x7f0000001440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r5, 0x0, r4, 0x0, 0x3, 0x0)
fcntl$setpipe(r3, 0x4, 0xfffffffffffff000)

844.210308ms ago: executing program 5 (id=1257):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0)

682.793366ms ago: executing program 5 (id=1258):
shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x3000)=nil)

604.26217ms ago: executing program 5 (id=1261):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xe8}, 0x94)

514.100511ms ago: executing program 4 (id=1262):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x50)
bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r0, 0x0, 0x20000000}, 0x20)

513.939797ms ago: executing program 5 (id=1263):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x8000}, 0x4)

412.455003ms ago: executing program 4 (id=1264):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x1, 0x4)

343.61635ms ago: executing program 4 (id=1265):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000780)={r0, &(0x7f0000001080), &(0x7f0000000540)=""/197}, 0x20)

339.80363ms ago: executing program 5 (id=1271):
r0 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x6f631b4376e74f14, {0x2, 0x0, @dev}})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})

224.252723ms ago: executing program 4 (id=1266):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x809268, 0x400}, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$rds(0x15, 0x5, 0x0)
r0 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x200000, 0x1000000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

223.898464ms ago: executing program 5 (id=1267):
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

128.26951ms ago: executing program 0 (id=1268):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20842, 0x47)
fcntl$setstatus(r2, 0x4, 0x42000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r3, 0x4, 0x2400)
close(0x3)

127.859886ms ago: executing program 0 (id=1269):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20)
recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000)
sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0)

456.864µs ago: executing program 0 (id=1270):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000180)=[<r1=>0x0], 0x1})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0x20)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000240)=[0x0, 0x0, <r2=>0x0], &(0x7f00000001c0), 0x3, r1, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000180), &(0x7f0000000400)=[r2], &(0x7f0000000280), 0x0, 0x3ff})

0s ago: executing program 0 (id=1272):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

kernel console output (not intermixed with test programs):

EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.370070][ T6560] loop0: detected capacity change from 0 to 128
[   74.374945][ T6560] EXT4-fs: Ignoring removed nobh option
[   74.390546][ T6560] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   74.395078][ T6560] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   74.421237][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   74.425397][   T52] usb 2-1: 0:2 : does not exist
[   74.434365][   T52] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[   74.458378][   T52] usb 2-1: USB disconnect, device number 3
[   74.465728][ T5894] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   74.475981][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   74.617650][ T5894] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81
[   74.621607][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.627497][ T5894] usb 3-1: config 0 descriptor??
[   74.633490][ T5894] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state.
[   74.637462][ T5894] dvb-usb: bulk message failed: -22 (3/0)
[   74.643215][ T5894] dvb-usb: will use the device's hardware PID filter (table count: 32).
[   74.647488][ T5894] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2)
[   74.650707][ T5894] usb 3-1: media controller created
[   74.653008][ T5894] dvb-usb: bulk message failed: -22 (5/0)
[   74.655548][ T5894] dvb-usb: MAC address reading failed.
[   74.660285][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   74.671227][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[   74.673840][ T5894] dvb-usb: bulk message failed: -22 (6/0)
[   74.677560][ T5894] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2'
[   74.683358][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5
[   74.689761][ T5894] dvb-usb: schedule remote query interval to 100 msecs.
[   74.693670][ T5894] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected.
[   74.807742][   T52] dvb-usb: bulk message failed: -22 (2/0)
[   74.810297][   T52] dvb-usb: error while querying for an remote control event.
[   74.915804][   T10] dvb-usb: bulk message failed: -22 (2/0)
[   74.918328][   T10] dvb-usb: error while querying for an remote control event.
[   75.026092][   T10] dvb-usb: bulk message failed: -22 (2/0)
[   75.028668][   T10] dvb-usb: error while querying for an remote control event.
[   75.042509][   T52] usb 3-1: USB disconnect, device number 2
[   75.073596][   T52] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected.
[   75.377085][ T5894] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   75.528462][ T5894] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   75.532770][ T5894] usb 2-1: config 2 interface 0 has no altsetting 0
[   75.538198][ T5894] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[   75.542060][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.545496][ T5894] usb 2-1: Product: syz
[   75.547578][ T5894] usb 2-1: Manufacturer: syz
[   75.549606][ T5894] usb 2-1: SerialNumber: syz
[   75.557612][ T5894] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[   75.565007][ T5894] usb 2-1: selecting invalid altsetting 0
[   75.575001][ T5894] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[   75.780072][ T5894] usb 2-1: USB disconnect, device number 4
[   76.428429][ T6595] loop2: detected capacity change from 0 to 128
[   76.548578][ T6595] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.560718][ T6595] syz.2.253 uses obsolete (PF_INET,SOCK_PACKET)
[   76.914411][ T6601] loop2: detected capacity change from 0 to 40427
[   76.918377][ T6601] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   76.921449][ T6601] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   76.927726][ T6601] F2FS-fs (loop2): invalid crc value
[   76.974216][ T6601] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   77.018270][ T6603] loop1: detected capacity change from 0 to 32768
[   77.041547][ T6601] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   77.044985][ T6601] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   77.080460][ T6603] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.198479][ T6603] XFS (loop1): Ending clean mount
[   77.235873][ T5842] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.349292][ T6627] bio_check_eod: 4 callbacks suppressed
[   77.349380][ T6627] syz.2.257: attempt to access beyond end of device
[   77.349380][ T6627] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[   77.600671][ T6637] loop1: detected capacity change from 0 to 4096
[   77.625015][ T6637] ntfs3(loop1): Failed to initialize $Secure (-22).
[   77.732334][ T6639] loop0: detected capacity change from 0 to 4096
[   77.753193][ T6639] NILFS (loop0): invalid segment: Checksum error in segment payload
[   77.765489][ T6639] NILFS (loop0): trying rollback from an earlier position
[   77.779359][ T6639] NILFS (loop0): recovery complete
[   77.783188][ T6644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   78.039193][ T6657] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'.
[   78.044374][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.047947][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.690514][ T6674] loop2: detected capacity change from 0 to 1024
[   78.852658][ T6681] loop1: detected capacity change from 0 to 4096
[   78.856771][ T6681] EXT4-fs: Ignoring removed mblk_io_submit option
[   78.872421][ T6681] EXT4-fs (loop1): Test dummy encryption mode enabled
[   78.899072][ T6681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   78.994799][ T6690] macsec0: entered promiscuous mode
[   78.997106][ T6690] macsec0: entered allmulticast mode
[   78.999348][ T6690] veth1_macvtap: entered allmulticast mode
[   79.020905][ T6691] futex_wake_op: syz.1.283 tries to shift op by -1; fix this program
[   79.137140][   T33] audit: type=1326 audit(1755504317.665:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6696 comm="syz.2.289" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f87a158ebe9 code=0x0
[   79.160005][ T6681] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   79.671936][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.688128][ T6704] program syz.2.292 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.743758][ T6706] loop1: detected capacity change from 0 to 1024
[   79.870057][ T6712] program syz.1.295 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.873601][ T6712] program syz.1.295 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.926248][ T6714] netlink: 88 bytes leftover after parsing attributes in process `syz.2.297'.
[   79.929789][ T6714] netlink: 48 bytes leftover after parsing attributes in process `syz.2.297'.
[   80.063889][ T6718] loop2: detected capacity change from 0 to 4096
[   80.067891][ T6718] EXT4-fs: Ignoring removed mblk_io_submit option
[   80.071517][ T6718] EXT4-fs (loop2): Test dummy encryption mode enabled
[   80.076052][ T6718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.158298][ T6725] loop0: detected capacity change from 0 to 128
[   80.166494][ T6725] adfs: Bad value for 'uid'
[   80.168631][ T6725] adfs: Bad value for 'uid'
[   80.466402][ T6718] futex_wake_op: syz.2.298 tries to shift op by -1; fix this program
[   80.525843][ T6722] loop0: detected capacity change from 0 to 1024
[   80.932627][ T4174] hfsplus: b-tree write err: -5, ino 4
[   80.961636][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.601513][    T9] cfg80211: failed to load regulatory.db
[   81.888166][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.901553][ T6745] netlink: 88 bytes leftover after parsing attributes in process `syz.0.307'.
[   81.905604][ T6745] netlink: 48 bytes leftover after parsing attributes in process `syz.0.307'.
[   82.045810][ T5881] usb 3-1: Using ep0 maxpacket: 32
[   82.050480][ T5881] usb 3-1: config 0 interface 0 has no altsetting 0
[   82.053405][ T5881] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   82.057616][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.064954][ T5881] usb 3-1: config 0 descriptor??
[   82.492126][ T5881] corsair-cpro 0003:1B1C:0C10.0001: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0
[   82.855670][    T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   82.891905][ T5881] corsair-cpro 0003:1B1C:0C10.0001: probe with driver corsair-cpro failed with error -71
[   82.898041][ T5881] usb 3-1: USB disconnect, device number 3
[   83.020874][    T9] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[   83.024917][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.028904][    T9] usb 2-1: Product: syz
[   83.030845][    T9] usb 2-1: Manufacturer: syz
[   83.032859][    T9] usb 2-1: SerialNumber: syz
[   83.037746][    T9] usb 2-1: config 0 descriptor??
[   83.043856][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[   83.050715][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   83.059905][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[   83.254555][    T9] usb 2-1: USB disconnect, device number 5
[   83.430610][ T6776] macvtap0: refused to change device tx_queue_len
[   85.021928][ T6816] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   85.027763][ T5857] bond0: (slave bond_slave_0): interface is now down
[   85.032410][ T5857] bond0: (slave bond_slave_1): interface is now down
[   85.073248][ T5874] bond0: (slave bond_slave_0): interface is now down
[   85.075958][ T5874] bond0: (slave bond_slave_1): interface is now down
[   85.082004][ T5874] bond0: now running without any active interface!
[   85.163726][ T6810] loop2: detected capacity change from 0 to 32768
[   85.184609][ T6810] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   85.195383][ T6810] (syz.2.333,6810,1):ocfs2_find_entry:1094 ERROR: status = -117
[   85.201655][ T6810] (syz.2.333,6810,1):ocfs2_find_entry:1094 ERROR: status = -117
[   85.204696][ T6810] (syz.2.333,6810,1):ocfs2_mknod:505 ERROR: status = -117
[   85.209827][ T6810] (syz.2.333,6810,1):ocfs2_mkdir:661 ERROR: status = -117
[   85.241964][ T5841] (syz-executor,5841,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[   85.249354][ T5841] ocfs2: Unmounting device (7,2) on (node local)
[   85.311238][ T6834] lo: entered promiscuous mode
[   85.313182][ T6834] lo: entered allmulticast mode
[   85.475763][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   85.637429][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   85.641656][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.645691][    T9] usb 2-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc
[   85.648689][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.654208][    T9] usb 2-1: config 0 descriptor??
[   86.065268][    T9] wacom 0003:056A:0217.0002: Unknown device_type for 'HID 056a:0217'. Ignoring.
[   86.269442][ T5894] usb 2-1: USB disconnect, device number 6
[   86.369566][ T6843] syz.2.349: attempt to access beyond end of device
[   86.369566][ T6843] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[   86.376339][ T6843] exFAT-fs (loop2): unable to read boot sector
[   86.378878][ T6843] exFAT-fs (loop2): failed to read boot sector
[   86.381634][ T6843] exFAT-fs (loop2): failed to recognize exfat type
[   86.524631][ T6849] loop0: detected capacity change from 0 to 4096
[   86.684861][   T33] audit: type=1326 audit(1755504325.215:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.0.359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5298ebe9 code=0x7ffc0000
[   86.698563][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'.
[   86.709017][   T33] audit: type=1326 audit(1755504325.235:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.0.359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5298ebe9 code=0x7ffc0000
[   86.729705][   T33] audit: type=1326 audit(1755504325.235:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.0.359" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbc5298ebe9 code=0x7ffc0000
[   86.747630][   T33] audit: type=1326 audit(1755504325.235:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.0.359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5298ebe9 code=0x7ffc0000
[   86.756239][   T33] audit: type=1326 audit(1755504325.235:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6860 comm="syz.0.359" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5298ebe9 code=0x7ffc0000
[   86.792871][ T6869] loop2: detected capacity change from 0 to 512
[   86.818586][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.824330][ T6869] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.985801][ T5894] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   88.114675][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.158924][ T5894] usb 2-1: Using ep0 maxpacket: 32
[   88.163148][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0
[   88.169209][ T5894] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   88.172302][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.181073][ T5894] usb 2-1: config 0 descriptor??
[   88.383351][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'.
[   88.528920][ T6926] loop2: detected capacity change from 0 to 512
[   88.540999][ T6926] EXT4-fs: Ignoring removed bh option
[   88.553648][ T6926] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   88.561052][ T6926] EXT4-fs (loop2): 1 truncate cleaned up
[   88.563904][ T6926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.584288][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.923749][ T6933] loop2: detected capacity change from 0 to 40427
[   88.938895][ T6933] F2FS-fs (loop2): invalid crc value
[   89.016854][ T6933] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.022993][ T6933] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[   89.038258][ T6933] syz.2.391: attempt to access beyond end of device
[   89.038258][ T6933] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   89.049733][ T6933] syz.2.391: attempt to access beyond end of device
[   89.049733][ T6933] loop2: rw=2049, sector=53256, nr_sectors = 128 limit=40427
[   89.056152][ T6933] syz.2.391: attempt to access beyond end of device
[   89.056152][ T6933] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[   89.074283][ T5841] syz-executor: attempt to access beyond end of device
[   89.074283][ T5841] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   89.079873][ T5841] CPU: 0 UID: 0 PID: 5841 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   89.079883][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   89.079888][ T5841] Call Trace:
[   89.079891][ T5841]  <TASK>
[   89.079895][ T5841]  dump_stack_lvl+0x189/0x250
[   89.079908][ T5841]  ? __pfx_dump_stack_lvl+0x10/0x10
[   89.079917][ T5841]  ? __pfx_queue_work_on+0x10/0x10
[   89.079923][ T5841]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   89.079933][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   89.079946][ T5841]  f2fs_handle_critical_error+0x37c/0x540
[   89.079965][ T5841]  f2fs_write_end_io+0x886/0xb60
[   89.079987][ T5841]  __submit_merged_bio+0x27a/0x6a0
[   89.080008][ T5841]  __submit_merged_write_cond+0x255/0x530
[   89.080055][ T5841]  f2fs_write_data_pages+0x261d/0x3000
[   89.080098][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.080127][ T5841]  ? is_bpf_text_address+0x26/0x2b0
[   89.080157][ T5841]  ? unwind_next_frame+0xa5/0x2390
[   89.080165][ T5841]  ? rcu_is_watching+0x15/0xb0
[   89.080171][ T5841]  ? __kasan_check_byte+0x12/0x40
[   89.080186][ T5841]  ? is_bpf_text_address+0x26/0x2b0
[   89.080194][ T5841]  ? rcu_is_watching+0x15/0xb0
[   89.080202][ T5841]  ? rcu_is_watching+0x15/0xb0
[   89.080208][ T5841]  ? lock_release+0x4b/0x3e0
[   89.080217][ T5841]  ? lock_release+0x4b/0x3e0
[   89.080232][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   89.080242][ T5841]  do_writepages+0x32e/0x550
[   89.080256][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[   89.080266][ T5841]  filemap_fdatawrite+0x199/0x240
[   89.080276][ T5841]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   89.080284][ T5841]  ? __pfx_SOFTIRQ_verbose+0x10/0x10
[   89.080311][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[   89.080321][ T5841]  f2fs_sync_dirty_inodes+0x31f/0x830
[   89.080335][ T5841]  f2fs_write_checkpoint+0x95a/0x1df0
[   89.080352][ T5841]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   89.080380][ T5841]  ? kill_f2fs_super+0x298/0x6c0
[   89.080391][ T5841]  kill_f2fs_super+0x2c3/0x6c0
[   89.080404][ T5841]  ? __pfx_kill_f2fs_super+0x10/0x10
[   89.080412][ T5841]  ? radix_tree_delete_item+0x2b6/0x400
[   89.080431][ T5841]  ? shrinker_free+0x2ce/0x3e0
[   89.080447][ T5841]  deactivate_locked_super+0xbc/0x130
[   89.080463][ T5841]  cleanup_mnt+0x425/0x4c0
[   89.080476][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.080494][ T5841]  task_work_run+0x1d4/0x260
[   89.080527][ T5841]  ? __pfx_task_work_run+0x10/0x10
[   89.080537][ T5841]  ? __x64_sys_umount+0x122/0x160
[   89.080548][ T5841]  ? exit_to_user_mode_loop+0x40/0x110
[   89.080560][ T5841]  exit_to_user_mode_loop+0xec/0x110
[   89.080569][ T5841]  do_syscall_64+0x2bd/0x3b0
[   89.080578][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[   89.080586][ T5841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.080593][ T5841]  ? exc_page_fault+0x9f/0xf0
[   89.080602][ T5841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.080608][ T5841] RIP: 0033:0x7f87a158ff17
[   89.080616][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   89.080621][ T5841] RSP: 002b:00007fffba35f1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   89.080630][ T5841] RAX: 0000000000000000 RBX: 00007f87a1611c05 RCX: 00007f87a158ff17
[   89.080634][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffba35f280
[   89.080643][ T5841] RBP: 00007fffba35f280 R08: 0000000000000000 R09: 0000000000000000
[   89.080647][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffba360310
[   89.080651][ T5841] R13: 00007f87a1611c05 R14: 0000000000015b78 R15: 00007fffba360350
[   89.080664][ T5841]  </TASK>
[   89.081269][ T5841] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   89.495228][ T5894] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[   89.560343][ T5894] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -71
[   89.568108][ T5894] usb 2-1: USB disconnect, device number 7
[   89.751119][ T6939] netlink: 'syz.2.393': attribute type 9 has an invalid length.
[   89.762249][ T6939] netlink: 'syz.2.393': attribute type 9 has an invalid length.
[   90.148249][ T6969] 9pnet: p9_errstr2errno: server reported unknown error 6G)Do')=0O]|[
[   90.810514][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.409'.
[   90.858378][ T6986] 9pnet: p9_errstr2errno: server reported unknown error 6G)Do')=0O]|[
[   91.575437][ T5894] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.755896][ T5894] usb 3-1: Using ep0 maxpacket: 32
[   91.763480][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.768270][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.771488][ T5894] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   91.774650][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.783173][ T5894] usb 3-1: config 0 descriptor??
[   92.198084][ T5894] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   92.200690][ T5894] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   92.204214][ T5894] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   92.209479][ T5894] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   92.212229][ T5894] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[   92.218731][ T5894] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0
[   92.408161][ T5894] usb 3-1: USB disconnect, device number 4
[   92.466505][ T7024] overlayfs: empty lowerdir
[   92.723240][ T7036] loop0: detected capacity change from 0 to 32768
[   92.754897][ T6621] read_mapping_page failed!
[   92.756676][ T6621] ERROR: (device loop0): txCommit: 
[   92.756676][ T6621] 
[   92.764809][ T6621] jfs_write_inode: jfs_commit_inode failed!
[   93.015723][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   93.175736][ T5881] usb 2-1: Using ep0 maxpacket: 16
[   93.179712][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.183427][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.188122][ T5881] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[   93.191269][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.198265][ T5881] usb 2-1: config 0 descriptor??
[   93.366158][   T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   93.515752][   T52] usb 1-1: Using ep0 maxpacket: 32
[   93.519585][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.524213][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.529105][   T52] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[   93.532948][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.544185][   T52] usb 1-1: config 0 descriptor??
[   93.955017][   T52] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[   93.958288][   T52] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[   93.961274][   T52] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[   93.963671][   T52] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[   93.966165][   T52] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0
[   93.970464][   T52] koneplus 0003:1E7D:2D51.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[   94.161715][   T52] usb 1-1: USB disconnect, device number 5
[   94.219323][ T5881] letsketch 0003:6161:4D15.0005: Device info: ఁ
[   94.247763][ T5851] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   94.252559][ T5851] Bluetooth: hci0: Injecting HCI hardware error event
[   94.256179][ T5233] Bluetooth: hci0: hardware error 0x00
[   94.449886][ T5881] usb 2-1: Max retries (5) exceeded reading string descriptor 201
[   94.453111][ T5881] letsketch 0003:6161:4D15.0005: probe with driver letsketch failed with error -71
[   94.459771][ T5881] usb 2-1: USB disconnect, device number 8
[   95.170251][ T7087] loop2: detected capacity change from 0 to 1024
[   95.194497][ T7087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   95.211462][ T7087] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.221368][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'.
[   95.231302][ T7087] EXT4-fs (loop2): Online resizing not supported with bigalloc
[   95.254899][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   95.827300][ T7112] netlink: 'syz.2.466': attribute type 1 has an invalid length.
[   95.851025][ T7112] 8021q: adding VLAN 0 to HW filter on device bond1
[   95.875251][ T7114] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.465'.
[   95.884789][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.465'.
[   95.897653][ T7112] bond1: (slave veth3): Enslaving as an active interface with a down link
[   95.915738][ T7112] vlan2: entered allmulticast mode
[   95.918011][ T7112] veth0_to_bond: entered allmulticast mode
[   95.921069][ T7112] veth0_to_bond: entered promiscuous mode
[   95.924291][ T7112] veth0_to_bond: left promiscuous mode
[   95.931022][ T7112] bond1: (slave vlan2): making interface the new active one
[   95.934916][ T7112] veth0_to_bond: entered promiscuous mode
[   95.938626][ T7112] vlan2: entered promiscuous mode
[   95.941369][ T7112] bond1: (slave vlan2): Enslaving as an active interface with an up link
[   96.327181][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   97.089181][ T7129] bpq0: entered allmulticast mode
[   97.200146][ T7132] netlink: 48 bytes leftover after parsing attributes in process `syz.2.473'.
[   97.230549][ T7134] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[   97.242946][ T7134] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   97.258742][ T7134] overlayfs: failed to get uuid (173/file1, err=-13); falling back to uuid=null.
[   97.929873][ T7140] loop0: detected capacity change from 0 to 32768
[   97.959410][ T7140] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.983387][ T7140] XFS (loop0): Ending clean mount
[   98.108303][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   98.297348][ T7168] netlink: 'syz.1.485': attribute type 1 has an invalid length.
[   98.311801][ T7168] 8021q: adding VLAN 0 to HW filter on device bond1
[   98.339042][ T7168] bond1: (slave veth3): Enslaving as an active interface with a down link
[   98.360248][ T7168] vlan0: entered allmulticast mode
[   98.362648][ T7168] veth0_to_bond: entered allmulticast mode
[   98.367445][ T7168] veth0_to_bond: entered promiscuous mode
[   98.370464][ T7168] veth0_to_bond: left promiscuous mode
[   98.374620][ T7168] bond1: (slave vlan0): making interface the new active one
[   98.378942][ T7168] veth0_to_bond: entered promiscuous mode
[   98.381885][ T7168] vlan0: entered promiscuous mode
[   98.386237][ T7168] bond1: (slave vlan0): Enslaving as an active interface with an up link
[   98.481526][ T7178] loop1: detected capacity change from 0 to 4096
[   98.485521][ T7178] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   98.530379][ T7178] ntfs3(loop1): ino=1a, mi_enum_attr
[   98.533431][ T7178] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   98.542251][ T7178] ntfs3(loop1): ino=1a, mi_enum_attr
[   98.544136][ T7178] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   98.562272][ T7178] ntfs3(loop1): ino=5, "/" indx_read
[   98.712627][ T7196] netlink: 96 bytes leftover after parsing attributes in process `syz.1.497'.
[   98.863247][ T7190] loop0: detected capacity change from 0 to 40427
[   98.870878][ T7190] F2FS-fs (loop0): build fault injection rate: 19
[   98.873722][ T7190] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[   98.879632][ T7190] F2FS-fs (loop0): invalid crc value
[   98.888694][ T7190] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   98.916826][ T7190] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   98.922356][ T7190] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.926636][ T7190] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   98.940838][ T7190] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   98.949149][ T7190] F2FS-fs (loop0): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[   98.953140][ T7190] F2FS-fs (loop0): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[   98.973796][ T5849] syz-executor: attempt to access beyond end of device
[   98.973796][ T5849] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   98.978666][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   98.978677][ T5849] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.978681][ T5849] Call Trace:
[   98.978684][ T5849]  <TASK>
[   98.978687][ T5849]  dump_stack_lvl+0x189/0x250
[   98.978701][ T5849]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.978709][ T5849]  ? __pfx_queue_work_on+0x10/0x10
[   98.978716][ T5849]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.978726][ T5849]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.978739][ T5849]  f2fs_handle_critical_error+0x37c/0x540
[   98.978752][ T5849]  f2fs_write_end_io+0x886/0xb60
[   98.978767][ T5849]  __submit_merged_bio+0x27a/0x6a0
[   98.978779][ T5849]  __submit_merged_write_cond+0x255/0x530
[   98.978791][ T5849]  f2fs_write_data_pages+0x261d/0x3000
[   98.978816][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.978850][ T5849]  ? folios_put_refs+0x559/0x640
[   98.978863][ T5849]  ? __pfx_folios_put_refs+0x10/0x10
[   98.978869][ T5849]  ? rcu_is_watching+0x15/0xb0
[   98.978881][ T5849]  ? __lock_acquire+0xab9/0xd20
[   98.978898][ T5849]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.978907][ T5849]  do_writepages+0x32e/0x550
[   98.978921][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[   98.978931][ T5849]  filemap_fdatawrite+0x199/0x240
[   98.978940][ T5849]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   98.978991][ T5849]  ? do_raw_spin_unlock+0x4d/0x240
[   98.979003][ T5849]  f2fs_sync_dirty_inodes+0x31f/0x830
[   98.979016][ T5849]  f2fs_write_checkpoint+0x95a/0x1df0
[   98.979034][ T5849]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   98.979062][ T5849]  ? kill_f2fs_super+0x298/0x6c0
[   98.979071][ T5849]  kill_f2fs_super+0x2c3/0x6c0
[   98.979080][ T5849]  ? __pfx_kill_f2fs_super+0x10/0x10
[   98.979086][ T5849]  ? radix_tree_delete_item+0x2b6/0x400
[   98.979098][ T5849]  ? shrinker_free+0x2ce/0x3e0
[   98.979106][ T5849]  deactivate_locked_super+0xbc/0x130
[   98.979116][ T5849]  cleanup_mnt+0x425/0x4c0
[   98.979124][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.979134][ T5849]  task_work_run+0x1d4/0x260
[   98.979144][ T5849]  ? __pfx_task_work_run+0x10/0x10
[   98.979151][ T5849]  ? __x64_sys_umount+0x122/0x160
[   98.979162][ T5849]  ? exit_to_user_mode_loop+0x40/0x110
[   98.979173][ T5849]  exit_to_user_mode_loop+0xec/0x110
[   98.979182][ T5849]  do_syscall_64+0x2bd/0x3b0
[   98.979191][ T5849]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.979198][ T5849]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.979205][ T5849]  ? exc_page_fault+0x9f/0xf0
[   98.979214][ T5849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.979220][ T5849] RIP: 0033:0x7fbc5298ff17
[   98.979228][ T5849] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   98.979233][ T5849] RSP: 002b:00007ffd8bb7f4e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   98.979241][ T5849] RAX: 0000000000000000 RBX: 00007fbc52a11c05 RCX: 00007fbc5298ff17
[   98.979245][ T5849] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8bb7f5a0
[   98.979249][ T5849] RBP: 00007ffd8bb7f5a0 R08: 0000000000000000 R09: 0000000000000000
[   98.979253][ T5849] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8bb80630
[   98.979257][ T5849] R13: 00007fbc52a11c05 R14: 000000000001821a R15: 00007ffd8bb80670
[   98.979270][ T5849]  </TASK>
[   98.979273][ T5849] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   99.183848][ T7201] loop2: detected capacity change from 0 to 4096
[   99.188340][ T7201] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   99.216094][ T7201] ntfs3(loop2): ino=1a, mi_enum_attr
[   99.233098][ T7201] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   99.239767][ T7201] ntfs3(loop2): ino=1a, mi_enum_attr
[   99.243249][ T7201] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   99.275023][ T7201] ntfs3(loop2): ino=5, "/" indx_read
[   99.333215][ T7207] netlink: 'syz.0.499': attribute type 2 has an invalid length.
[   99.502919][   T24] IPVS: starting estimator thread 0...
[   99.585806][ T7218] IPVS: using max 49 ests per chain, 117600 per kthread
[  100.609173][ T7227] loop1: detected capacity change from 0 to 40427
[  100.615818][ T7227] F2FS-fs (loop1): build fault injection rate: 19
[  100.619568][ T7227] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  100.640058][ T7227] F2FS-fs (loop1): invalid crc value
[  100.650933][ T7227] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  100.703366][ T7227] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  100.711125][ T7227] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.716054][ T7227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  100.730571][ T7231] loop0: detected capacity change from 0 to 32768
[  100.732793][ T7227] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  100.743192][ T7227] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  100.751554][ T7227] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  100.791903][ T5842] syz-executor: attempt to access beyond end of device
[  100.791903][ T5842] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.803893][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  100.803905][ T5842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.803909][ T5842] Call Trace:
[  100.803912][ T5842]  <TASK>
[  100.803916][ T5842]  dump_stack_lvl+0x189/0x250
[  100.803929][ T5842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.803937][ T5842]  ? __pfx_queue_work_on+0x10/0x10
[  100.803971][ T5842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.803985][ T5842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.803998][ T5842]  f2fs_handle_critical_error+0x37c/0x540
[  100.804012][ T5842]  f2fs_write_end_io+0x886/0xb60
[  100.804026][ T5842]  __submit_merged_bio+0x27a/0x6a0
[  100.804039][ T5842]  __submit_merged_write_cond+0x255/0x530
[  100.804051][ T5842]  f2fs_write_data_pages+0x261d/0x3000
[  100.804059][ T5842]  ? __lock_acquire+0xab9/0xd20
[  100.804083][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.804111][ T5842]  ? __mod_zone_page_state+0xd7/0x140
[  100.804126][ T5842]  ? folios_put_refs+0x560/0x640
[  100.804139][ T5842]  ? __lock_acquire+0xab9/0xd20
[  100.804151][ T5842]  ? do_raw_spin_lock+0x121/0x290
[  100.804164][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  100.804173][ T5842]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.804188][ T5842]  do_writepages+0x32e/0x550
[  100.804210][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  100.804224][ T5842]  filemap_fdatawrite+0x199/0x240
[  100.804239][ T5842]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  100.804291][ T5842]  ? do_raw_spin_unlock+0x4d/0x240
[  100.804303][ T5842]  f2fs_sync_dirty_inodes+0x31f/0x830
[  100.804316][ T5842]  f2fs_write_checkpoint+0x95a/0x1df0
[  100.804340][ T5842]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  100.804367][ T5842]  ? kill_f2fs_super+0x298/0x6c0
[  100.804377][ T5842]  kill_f2fs_super+0x2c3/0x6c0
[  100.804386][ T5842]  ? __pfx_kill_f2fs_super+0x10/0x10
[  100.804392][ T5842]  ? radix_tree_delete_item+0x2b6/0x400
[  100.804404][ T5842]  ? shrinker_free+0x2ce/0x3e0
[  100.804413][ T5842]  deactivate_locked_super+0xbc/0x130
[  100.804423][ T5842]  cleanup_mnt+0x425/0x4c0
[  100.804432][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.804460][ T5842]  task_work_run+0x1d4/0x260
[  100.804471][ T5842]  ? __pfx_task_work_run+0x10/0x10
[  100.804478][ T5842]  ? __x64_sys_umount+0x122/0x160
[  100.804489][ T5842]  ? exit_to_user_mode_loop+0x40/0x110
[  100.804501][ T5842]  exit_to_user_mode_loop+0xec/0x110
[  100.804510][ T5842]  do_syscall_64+0x2bd/0x3b0
[  100.804518][ T5842]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.804526][ T5842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.804533][ T5842]  ? exc_page_fault+0x9f/0xf0
[  100.804542][ T5842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  100.804548][ T5842] RIP: 0033:0x7f610078ff17
[  100.804556][ T5842] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  100.804562][ T5842] RSP: 002b:00007ffc9ebc0a58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  100.804571][ T5842] RAX: 0000000000000000 RBX: 00007f6100811c05 RCX: 00007f610078ff17
[  100.804577][ T5842] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc9ebc0b10
[  100.804582][ T5842] RBP: 00007ffc9ebc0b10 R08: 0000000000000000 R09: 0000000000000000
[  100.804586][ T5842] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc9ebc1ba0
[  100.804590][ T5842] R13: 00007f6100811c05 R14: 0000000000018926 R15: 00007ffc9ebc1be0
[  100.804607][ T5842]  </TASK>
[  100.847330][ T7238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'.
[  100.850562][ T5842] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  101.012822][ T7246] team_slave_0: entered promiscuous mode
[  101.014883][ T7246] team_slave_1: entered promiscuous mode
[  101.464175][ T7271] team_slave_0: entered promiscuous mode
[  101.466211][ T7271] team_slave_1: entered promiscuous mode
[  101.590886][ T7277] netlink: 11 bytes leftover after parsing attributes in process `syz.1.532'.
[  101.658593][ T7281] loop1: detected capacity change from 0 to 16
[  101.665126][ T7281] erofs (device loop1): mounted with root inode @ nid 36.
[  102.023143][ T7297] input: syz0 as /devices/virtual/input/input9
[  102.062647][   T52] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  102.195309][ T7312] netlink: 'syz.2.549': attribute type 21 has an invalid length.
[  102.203159][ T7312] netlink: 128 bytes leftover after parsing attributes in process `syz.2.549'.
[  102.207181][ T7312] netlink: 'syz.2.549': attribute type 4 has an invalid length.
[  102.210218][ T7312] netlink: 'syz.2.549': attribute type 5 has an invalid length.
[  102.213147][ T7312] netlink: 3 bytes leftover after parsing attributes in process `syz.2.549'.
[  102.219062][   T52] usb 2-1: Using ep0 maxpacket: 32
[  102.222633][   T52] usb 2-1: config 0 has no interfaces?
[  102.226663][   T52] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  102.230414][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.233622][   T52] usb 2-1: Product: syz
[  102.235236][   T52] usb 2-1: Manufacturer: syz
[  102.244076][   T52] usb 2-1: SerialNumber: syz
[  102.251491][   T52] usb 2-1: config 0 descriptor??
[  102.351787][ T7319] loop0: detected capacity change from 0 to 1024
[  102.363021][ T7319] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data
[  102.492537][ T7324] loop2: detected capacity change from 0 to 2048
[  102.498056][ T5881] usb 2-1: USB disconnect, device number 9
[  102.513017][ T7324] udf: Unknown parameter 'A'
[  103.094068][ T7334] loop2: detected capacity change from 0 to 16
[  103.108397][ T7334] erofs (device loop2): mounted with root inode @ nid 36.
[  103.350148][ T7342] loop2: detected capacity change from 0 to 8192
[  103.577122][ T7349] loop2: detected capacity change from 0 to 16
[  103.598458][ T7349] erofs (device loop2): mounted with root inode @ nid 36.
[  103.765039][ T7355] bpq0: left allmulticast mode
[  105.254008][ T7390] loop0: detected capacity change from 0 to 32768
[  105.303975][ T7398] loop2: detected capacity change from 0 to 512
[  105.312195][ T7398] EXT4-fs: Ignoring removed i_version option
[  105.314258][ T7398] EXT4-fs: Ignoring removed nobh option
[  105.365390][ T7398] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  105.371010][ T7398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  105.386067][ T7398] EXT4-fs (loop2): 1 truncate cleaned up
[  105.391061][ T7398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  105.436109][ T7398] loop2: detected capacity change from 512 to 64
[  105.461334][ T5841] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /197/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0
[  105.495583][ T1087] kworker/u9:3: attempt to access beyond end of device
[  105.495583][ T1087] loop2: rw=1, sector=76, nr_sectors = 2 limit=64
[  105.509248][ T1087] EXT4-fs warning (device loop2): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 38)
[  105.517098][ T1087] Buffer I/O error on device loop2, logical block 38
[  105.528476][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.683407][ T7423] loop1: detected capacity change from 0 to 1024
[  105.701524][ T7423] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data
[  105.913060][ T7426] trusted_key: syz.0.591 sent an empty control message without MSG_MORE.
[  106.091982][ T5874] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.158887][ T5874] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.205849][ T5874] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.267085][ T5874] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.292952][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.297684][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.300788][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.304557][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.308438][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.423472][ T5874] bridge_slave_1: left allmulticast mode
[  106.427163][ T5874] bridge_slave_1: left promiscuous mode
[  106.430183][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.434959][ T5874] bridge_slave_0: left allmulticast mode
[  106.437582][ T5874] bridge_slave_0: left promiscuous mode
[  106.439572][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.729048][ T5874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.734280][ T5874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  106.738979][ T5874] bond0 (unregistering): Released all slaves
[  106.812141][ T5874] bond1 (unregistering): (slave veth3): Releasing active interface
[  106.816544][ T5874] bond1 (unregistering): (slave vlan2): Releasing active interface
[  106.820503][ T5874] bond1 (unregistering): Released all slaves
[  106.938996][ T7428] chnl_net:caif_netlink_parms(): no params data found
[  107.259799][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.262647][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.265037][ T7428] bridge_slave_0: entered allmulticast mode
[  107.268199][ T7428] bridge_slave_0: entered promiscuous mode
[  107.272247][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.275036][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.278948][ T7428] bridge_slave_1: entered allmulticast mode
[  107.282182][ T7428] bridge_slave_1: entered promiscuous mode
[  107.333019][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.337726][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.367252][ T7428] team0: Port device team_slave_0 added
[  107.370320][ T7428] team0: Port device team_slave_1 added
[  107.382963][ T5874] hsr_slave_0: left promiscuous mode
[  107.387657][ T5874] hsr_slave_1: left promiscuous mode
[  107.393554][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.399709][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  107.410966][ T5874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.414617][ T5874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  107.445291][ T5874] veth1_macvtap: left allmulticast mode
[  107.449255][ T5874] veth1_macvtap: left promiscuous mode
[  107.452323][ T5874] veth0_macvtap: left promiscuous mode
[  107.454536][ T5874] veth1_vlan: left promiscuous mode
[  107.457963][ T5874] veth0_vlan: left promiscuous mode
[  107.830670][ T5874] team0 (unregistering): Port device team_slave_1 removed
[  107.848098][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.603'.
[  107.860849][ T5874] team0 (unregistering): Port device team_slave_0 removed
[  108.264611][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0
[  108.271474][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.297933][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.305435][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.315868][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.327997][ T5851] Bluetooth: hci0: command tx timeout
[  108.331144][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.391174][ T7428] hsr_slave_0: entered promiscuous mode
[  108.394013][ T7428] hsr_slave_1: entered promiscuous mode
[  108.592376][ T7428] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  108.601983][ T7428] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  108.606219][ T7428] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  108.613853][ T7428] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  108.651880][ T5874] IPVS: stop unused estimator thread 0...
[  108.687123][ T7428] 8021q: adding VLAN 0 to HW filter on device bond0
[  108.705238][ T7428] 8021q: adding VLAN 0 to HW filter on device team0
[  108.715195][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.717654][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.742266][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.744811][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.889738][ T7428] 8021q: adding VLAN 0 to HW filter on device batadv0
[  108.917624][ T7428] veth0_vlan: entered promiscuous mode
[  108.930556][ T7428] veth1_vlan: entered promiscuous mode
[  108.953378][ T7428] veth0_macvtap: entered promiscuous mode
[  108.959191][ T7428] veth1_macvtap: entered promiscuous mode
[  108.969512][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.975160][ T7428] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.004512][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.009066][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.011964][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.030130][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.054416][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.065973][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.098055][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.101891][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.209297][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  109.689659][ T7571] cifs: Unknown parameter 'no'aN[Gzob,er;%j
[  109.689659][ T7571] z,@qJ#"h/.W1ȱnNC"C׈E)8+1<;8+`#'
[  109.780527][ T5874] vlan0: left promiscuous mode
[  110.361081][ T7649] netlink: 280 bytes leftover after parsing attributes in process `syz.3.659'.
[  110.373069][ T7646] loop0: detected capacity change from 0 to 512
[  110.381730][ T7646] EXT4-fs: Ignoring removed bh option
[  110.390956][ T7651] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  110.399583][ T7646] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  110.409231][ T7646] EXT4-fs (loop0): 1 truncate cleaned up
[  110.412291][ T7646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.416646][ T5851] Bluetooth: hci0: command tx timeout
[  110.471468][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.651483][ T7660] loop0: detected capacity change from 0 to 32768
[  110.672840][ T7660] JBD2: Ignoring recovery information on journal
[  110.694960][ T7660] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  110.726206][ T5849] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  110.746601][ T5849] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  110.753434][ T5849] OCFS2: File system is now read-only.
[  110.757141][ T5849] (syz-executor,5849,1):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  110.760844][ T5849] (syz-executor,5849,1):ocfs2_remove_inode:775 ERROR: status = -30
[  110.765970][ T5849] (syz-executor,5849,1):ocfs2_wipe_inode:897 ERROR: status = -30
[  110.776481][ T5849] (syz-executor,5849,1):ocfs2_delete_inode:1158 ERROR: status = -30
[  110.795354][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  110.843551][ T7676] loop3: detected capacity change from 0 to 128
[  110.859128][ T7676] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  110.872144][ T7676] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.891306][ T7676] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 93: 0x5d != 0x05
[  110.900850][ T7676] UDF-fs: error (device loop3): udf_count_free_bitmap: udf_count_free failed
[  110.938966][ T7428] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  110.943069][ T7428] UDF-fs: error (device loop3): udf_read_inode: (ino 104) failed !bh
[  110.951540][ T7679] sp0: Synchronizing with TNC
[  110.958583][ T7679] sp0: Found TNC
[  111.734995][ T7695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.196235][ T7704] loop1: detected capacity change from 0 to 40427
[  112.200625][ T7704] F2FS-fs (loop1): Image doesn't support compression
[  112.208991][ T7704] F2FS-fs (loop1): build fault injection rate: 690
[  112.226786][ T7704] F2FS-fs (loop1): invalid crc value
[  112.282578][ T7704] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.287271][ T7704] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  112.572628][ T7726] netlink: 16 bytes leftover after parsing attributes in process `syz.0.689'.
[  112.579521][ T7726] netlink: 40 bytes leftover after parsing attributes in process `syz.0.689'.
[  112.609659][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'.
[  112.689347][ T7734] bond0: default FDB implementation only supports local addresses
[  112.774845][   T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.801628][ T7724] loop1: detected capacity change from 0 to 32768
[  112.819019][ T7724] JBD2: Ignoring recovery information on journal
[  112.844401][ T7724] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  112.913998][   T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.951806][ T5842] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  112.966066][ T5842] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  112.971550][ T5842] OCFS2: File system is now read-only.
[  112.973650][ T5842] (syz-executor,5842,1):_ocfs2_free_suballoc_bits:2579 ERROR: status = -30
[  112.983138][ T5842] (syz-executor,5842,1):ocfs2_remove_inode:775 ERROR: status = -30
[  112.995292][ T5842] (syz-executor,5842,1):ocfs2_wipe_inode:897 ERROR: status = -30
[  112.999130][ T5842] (syz-executor,5842,1):ocfs2_delete_inode:1158 ERROR: status = -30
[  113.000970][   T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.017685][ T5842] ocfs2: Unmounting device (7,1) on (node local)
[  113.096447][   T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  113.101251][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  113.104140][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  113.113329][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  113.119543][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  113.123198][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  113.287237][   T12] bridge_slave_1: left allmulticast mode
[  113.290115][   T12] bridge_slave_1: left promiscuous mode
[  113.298840][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.321000][   T12] bridge_slave_0: left allmulticast mode
[  113.322895][   T12] bridge_slave_0: left promiscuous mode
[  113.324731][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.600967][ T5233] Bluetooth: hci1: unexpected event 0x01 length: 13 > 1
[  113.703441][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  113.711976][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  113.716708][   T12] bond0 (unregistering): Released all slaves
[  113.807142][ T7744] chnl_net:caif_netlink_parms(): no params data found
[  113.825058][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'.
[  113.939964][ T7804] netlink: 16 bytes leftover after parsing attributes in process `syz.1.719'.
[  113.944467][ T7804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.719'.
[  113.982935][ T7744] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.985465][ T7744] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.990012][ T7744] bridge_slave_0: entered allmulticast mode
[  113.993985][ T7744] bridge_slave_0: entered promiscuous mode
[  114.023458][   T12] hsr_slave_0: left promiscuous mode
[  114.026042][   T12] hsr_slave_1: left promiscuous mode
[  114.028209][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.031010][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.034260][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.039524][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.048801][   T12] veth1_macvtap: left promiscuous mode
[  114.050759][   T12] veth0_macvtap: left promiscuous mode
[  114.052731][   T12] veth1_vlan: left promiscuous mode
[  114.054621][   T12] veth0_vlan: left promiscuous mode
[  114.326854][   T24] IPVS: starting estimator thread 0...
[  114.457964][ T7813] IPVS: using max 81 ests per chain, 194400 per kthread
[  114.639055][   T12] team0 (unregistering): Port device team_slave_1 removed
[  114.664499][   T12] team0 (unregistering): Port device team_slave_0 removed
[  114.932511][ T7832] netlink: 48 bytes leftover after parsing attributes in process `syz.1.730'.
[  114.948338][ T7744] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.951227][ T7744] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.954255][ T7744] bridge_slave_1: entered allmulticast mode
[  114.970992][ T7744] bridge_slave_1: entered promiscuous mode
[  115.024109][ T7744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.060030][ T7744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.092572][ T7744] team0: Port device team_slave_0 added
[  115.097902][ T7744] team0: Port device team_slave_1 added
[  115.163560][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_0
[  115.170183][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.182236][ T7844] loop1: detected capacity change from 0 to 1024
[  115.184586][ T7744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  115.190025][ T7844] EXT4-fs: Ignoring removed bh option
[  115.192531][ T7744] batman_adv: batadv0: Adding interface: batadv_slave_1
[  115.200855][ T5233] Bluetooth: hci2: unexpected event 0x01 length: 13 > 1
[  115.201078][ T7744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  115.219370][ T5233] Bluetooth: hci0: command tx timeout
[  115.229298][ T7744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  115.240658][ T7844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  115.275136][ T7744] hsr_slave_0: entered promiscuous mode
[  115.278958][ T7744] hsr_slave_1: entered promiscuous mode
[  115.305155][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  115.496099][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'.
[  115.496989][ T7744] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  115.527721][ T7744] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  115.557667][ T7744] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  115.568166][ T7744] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  115.570607][ T7880] loop1: detected capacity change from 0 to 256
[  115.586386][ T7880] exfat: Deprecated parameter 'utf8'
[  115.588723][ T7880] exfat: Deprecated parameter 'namecase'
[  115.602701][ T7880] exfat: Deprecated parameter 'namecase'
[  115.605035][ T7880] exfat: Deprecated parameter 'utf8'
[  115.622775][ T7880] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  115.688225][ T7744] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.752841][ T7744] 8021q: adding VLAN 0 to HW filter on device team0
[  115.774126][ T7380] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.777306][ T7380] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.791343][ T7380] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.794317][ T7380] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.887334][ T1271] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  115.909912][ T7744] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.027582][ T7744] veth0_vlan: entered promiscuous mode
[  116.033433][ T7744] veth1_vlan: entered promiscuous mode
[  116.037192][ T1271] usb 1-1: Using ep0 maxpacket: 8
[  116.042840][ T1271] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7
[  116.051540][ T1271] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  116.054566][ T1271] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  116.066649][ T1271] usb 1-1: Product: syz
[  116.068436][ T1271] usb 1-1: Manufacturer: syz
[  116.070705][ T7744] veth0_macvtap: entered promiscuous mode
[  116.075091][ T7744] veth1_macvtap: entered promiscuous mode
[  116.077419][ T1271] usb 1-1: SerialNumber: syz
[  116.090493][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_0
[  116.105594][ T7744] batman_adv: batadv0: Interface activated: batadv_slave_1
[  116.118903][ T5873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.131018][ T5873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.143634][ T5873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.149442][ T5873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.203812][ T7380] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.209919][ T7380] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.226318][ T7380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  116.228941][ T7380] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  116.285749][ T1271] usb 1-1: Handspring Visor / Palm OS: No valid connect info available
[  116.288523][ T1271] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  116.291114][ T1271] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  116.293803][ T1271] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2
[  116.484964][ T1271] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  116.501686][ T1271] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  116.508032][ T1271] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  116.691270][   T24] usb 1-1: USB disconnect, device number 6
[  116.706408][   T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  116.721668][   T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  116.736013][   T24] visor 1-1:1.0: device disconnected
[  117.100841][ T7984] loop1: detected capacity change from 0 to 4096
[  117.122389][ T7985] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  117.130298][   T33] audit: type=1800 audit(1755504355.665:8): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.142429][   T33] audit: type=1800 audit(1755504355.665:9): pid=7984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.766" name="file1" dev="loop1" ino=15 res=0 errno=0
[  117.286191][ T5233] Bluetooth: hci0: command tx timeout
[  117.551504][ T7997] loop1: detected capacity change from 0 to 4096
[  117.579499][ T7999] loop4: detected capacity change from 0 to 128
[  117.594673][ T7999] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  117.606038][ T7999] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  117.682983][ T7991] loop0: detected capacity change from 0 to 40427
[  117.699881][ T7999] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  117.715375][ T7991] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  117.720528][ T7744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  117.720936][ T7991] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  117.748017][ T7991] F2FS-fs (loop0): invalid crc value
[  117.778543][ T8017] loop1: detected capacity change from 0 to 256
[  117.817686][ T7991] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.937476][ T7991] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  117.940579][ T7991] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.655811][   T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  118.810803][ T8065] netlink: 'syz.1.796': attribute type 3 has an invalid length.
[  118.830184][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  118.833381][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0
[  118.837157][   T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.840325][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  118.855282][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  118.859169][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.861773][   T24] usb 5-1: Product: syz
[  118.863473][   T24] usb 5-1: Manufacturer: syz
[  118.865221][   T24] usb 5-1: SerialNumber: syz
[  118.868615][   T24] usb 5-1: config 0 descriptor??
[  118.872059][ T8059] loop0: detected capacity change from 0 to 32768
[  118.872181][   T24] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  118.877583][   T24] em28xx 5-1:0.0: Device initialization failed.
[  118.879646][   T24] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  118.934609][ T8059] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  118.934621][ T8059]   allowing incompatible features above 0.0: (unknown version)
[  118.934626][ T8059]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  118.951937][ T8059] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  118.954663][ T8059] bcachefs (loop0): initializing new filesystem
[  118.961932][ T8059] bcachefs (loop0): going read-write
[  118.970146][ T8059] bcachefs (loop0): marking superblocks
[  118.983976][ T8059] bcachefs (loop0): initializing freespace
[  118.990502][ T8059] bcachefs (loop0): done initializing freespace
[  118.997206][ T8059] bcachefs (loop0): reading snapshots table
[  118.999251][ T8059] bcachefs (loop0): reading snapshots done
[  119.017034][ T8059] bcachefs (loop0): done starting filesystem
[  119.042444][ T8059] syz.0.793 (8059) used greatest stack depth: 16136 bytes left
[  119.052372][ T5849] bcachefs (loop0): shutting down
[  119.054928][ T5849] bcachefs (loop0): going read-only
[  119.058740][ T5849] bcachefs (loop0): finished waiting for writes to stop
[  119.063758][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[  119.076474][   T24] usb 5-1: USB disconnect, device number 2
[  119.112817][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 6
[  119.123667][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 7
[  119.130274][ T5849] bcachefs (loop0): marking filesystem clean
[  119.174209][ T5849] bcachefs (loop0): shutdown complete
[  119.365951][ T5233] Bluetooth: hci0: command tx timeout
[  119.660148][ T8097] loop1: detected capacity change from 0 to 4096
[  119.663370][ T8097] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  119.678077][ T8097] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  119.863160][ T8110] loop1: detected capacity change from 0 to 2048
[  119.881038][ T8110] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  119.898677][ T8110] UDF-fs: warning (device loop1): udf_fill_super: No fileset found
[  120.280566][ T8127] tmpfs: Bad value for 'size'
[  120.700609][ T8142] loop0: detected capacity change from 0 to 1024
[  120.876612][ T8153] tmpfs: Bad value for 'size'
[  121.045381][ T8167] loop0: detected capacity change from 0 to 2048
[  121.074066][ T8167] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  121.085192][ T8167] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[  121.143670][ T8175] netlink: 168 bytes leftover after parsing attributes in process `syz.1.833'.
[  121.269979][ T8182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.835'.
[  121.292261][ T8181] loop1: detected capacity change from 0 to 512
[  121.300590][ T8181] EXT4-fs: Ignoring removed nomblk_io_submit option
[  121.372550][ T8181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.385509][ T8181] ext4 filesystem being mounted at /286/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  121.397525][   T33] audit: type=1800 audit(1755504359.935:10): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name="file1" dev="loop1" ino=15 res=0 errno=0
[  121.447926][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.461076][ T5233] Bluetooth: hci0: command tx timeout
[  122.481325][ T8211] loop4: detected capacity change from 0 to 4096
[  122.515513][ T8218] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.538442][   T33] audit: type=1800 audit(1755504361.075:11): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=15 res=0 errno=0
[  122.555447][   T33] audit: type=1800 audit(1755504361.075:12): pid=8211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.839" name="file1" dev="loop4" ino=15 res=0 errno=0
[  122.695360][ T8229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.844'.
[  122.986227][   T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  123.137284][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  123.143248][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0
[  123.152275][   T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  123.155583][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  123.159467][ T8254] loop4: detected capacity change from 0 to 128
[  123.161245][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  123.171149][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.172872][ T8254] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.179215][   T10] usb 2-1: Product: syz
[  123.179226][   T10] usb 2-1: Manufacturer: syz
[  123.179232][   T10] usb 2-1: SerialNumber: syz
[  123.186193][ T8254] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  123.186579][   T10] usb 2-1: config 0 descriptor??
[  123.198166][   T10] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  123.201618][   T10] em28xx 2-1:0.0: Device initialization failed.
[  123.203834][   T10] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  123.219871][ T7744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  123.353533][ T8264] loop0: detected capacity change from 0 to 8192
[  123.404411][ T1271] usb 2-1: USB disconnect, device number 10
[  123.555886][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  123.705850][   T10] usb 5-1: Using ep0 maxpacket: 8
[  123.709866][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  123.720549][   T10] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  123.724281][   T10] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  123.728711][   T10] usb 5-1: Product: syz
[  123.730462][   T10] usb 5-1: Manufacturer: syz
[  123.732382][   T10] usb 5-1: SerialNumber: syz
[  123.955805][   T10] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  123.958961][   T10] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  123.961532][   T10] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  123.964223][   T10] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  124.156872][   T10] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  124.175897][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  124.181295][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  124.384597][ T7437] usb 5-1: USB disconnect, device number 3
[  124.397588][ T7437] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  124.409964][ T7437] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  124.414206][ T7437] visor 5-1:1.0: device disconnected
[  124.806179][   T33] audit: type=1326 audit(1755504363.345:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8288 comm="syz.0.868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc5298ebe9 code=0x7fc00000
[  125.004586][ T8308] loop0: detected capacity change from 0 to 1764
[  125.248687][ T8316] netlink: 47 bytes leftover after parsing attributes in process `syz.4.875'.
[  125.540994][ T8322] loop4: detected capacity change from 0 to 2048
[  125.547192][ T8322] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.563876][ T8323] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.634846][ T8326] netem: incorrect gi model size
[  125.642140][ T8326] netem: change failed
[  125.698559][ T8333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.882'.
[  125.780156][ T8337] loop1: detected capacity change from 0 to 2048
[  125.790891][ T8337] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.810392][ T8338] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  125.835184][ T8335] loop4: detected capacity change from 0 to 32768
[  125.840961][ T8335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.884 (8335)
[  125.853131][ T8335] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.857874][ T8335] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  125.866176][ T8335] BTRFS info (device loop4): using free-space-tree
[  126.068507][ T7744] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.583593][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'.
[  127.150410][ T8405] binder: 8404:8405 ioctl c018620c 0 returned -14
[  127.690534][ T8418] loop4: detected capacity change from 0 to 512
[  127.703627][ T8418] EXT4-fs: Ignoring removed nomblk_io_submit option
[  127.706632][ T8418] EXT4-fs: Ignoring removed bh option
[  127.714332][ T8418] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  127.722015][ T8418] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.911: corrupted inode contents
[  127.726315][ T8418] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.911: mark_inode_dirty error
[  127.730253][ T8418] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.911: invalid indirect mapped block 1 (level 1)
[  127.734527][ T8418] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.911: corrupted inode contents
[  127.741540][ T8418] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  127.744494][ T8418] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.911: corrupted inode contents
[  127.748828][ T8418] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.911: mark_inode_dirty error
[  127.753636][ T8418] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  127.758730][ T8418] EXT4-fs (loop4): 1 truncate cleaned up
[  127.761482][ T8418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  127.816384][   T33] audit: type=1326 audit(1755504366.345:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8392 comm="syz.1.901" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610078ebe9 code=0x7fc00000
[  128.025761][ T8430] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.911: path /57/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  128.406299][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  128.462563][ T8445] loop0: detected capacity change from 0 to 256
[  128.467566][ T8445] exfat: Deprecated parameter 'utf8'
[  128.513972][ T8445] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  128.586314][   T10] usb 2-1: Using ep0 maxpacket: 32
[  128.592646][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  128.602984][   T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  128.608925][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  128.618274][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  128.630161][   T10] usb 2-1: New USB device found, idVendor=286b, idProduct=0101, bcdDevice= 0.40
[  128.634186][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.648257][ T7744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.660808][   T10] usb 2-1: Product: syz
[  128.662618][   T10] usb 2-1: Manufacturer: syz
[  128.668101][   T10] usb 2-1: SerialNumber: syz
[  128.865511][ T8457] loop0: detected capacity change from 0 to 2048
[  128.899705][ T8457] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  128.905293][ T8457] NILFS (loop0): mounting unchecked fs
[  128.908031][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop0
[  128.924333][   T10] usb 2-1: 0:2 : does not exist
[  128.927145][ T5847] udevd[5847]: incorrect nilfs2 checksum on /dev/loop0
[  128.942006][ T8457] NILFS (loop0): recovery complete
[  128.951725][   T10] usb 2-1: USB disconnect, device number 11
[  128.959720][ T8459] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.989646][ T5847] udevd[5847]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.158062][ T8468] loop0: detected capacity change from 0 to 64
[  129.524375][ T8485] loop1: detected capacity change from 0 to 1024
[  129.580074][ T8485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.611084][ T8485] EXT4-fs error (device loop1): ext4_get_first_dir_block:3556: inode #11: comm syz.1.925: directory missing '..'
[  129.635356][ T8485] EXT4-fs (loop1): Remounting filesystem read-only
[  129.665970][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.781291][ T8475] loop0: detected capacity change from 0 to 32768
[  129.819847][ T8475] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  129.841893][ T8512] loop4: detected capacity change from 0 to 128
[  129.863092][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  129.868519][ T8512] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.892389][ T8512] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  130.022096][ T7744] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.088610][ T8525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'.
[  130.209397][ T8532] netlink: 'syz.1.934': attribute type 13 has an invalid length.
[  131.726141][ T8558] loop0: detected capacity change from 0 to 32768
[  131.737435][ T8558] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.945 (8558)
[  131.763245][ T8558] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.767026][ T8558] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  131.770398][ T8558] BTRFS info (device loop0): using free-space-tree
[  132.457780][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.467707][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.540861][ T5849] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  132.623171][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.957'.
[  132.649734][ T8602] ref_ctr_offset mismatch. inode: 0x68d offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4
[  133.035738][ T7437] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  133.185843][ T7437] usb 2-1: Using ep0 maxpacket: 32
[  133.190455][ T7437] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  133.194665][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  133.199432][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  133.204121][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  133.208970][ T7437] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  133.216384][ T7437] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  133.220275][ T7437] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.223704][ T7437] usb 2-1: Product: syz
[  133.226016][ T7437] usb 2-1: Manufacturer: syz
[  133.228528][ T7437] usb 2-1: SerialNumber: syz
[  133.233325][ T7437] usb 2-1: config 0 descriptor??
[  133.719700][ T8616] loop4: detected capacity change from 0 to 32768
[  133.723815][ T8616] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.963 (8616)
[  133.731108][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -32
[  133.733282][ T7437] input input10: Device does not respond to id packet M
[  133.737666][ T8616] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.741896][ T8616] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  133.745359][ T8616] BTRFS info (device loop4): using free-space-tree
[  133.748955][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -32
[  133.750420][ T8620] netlink: 536 bytes leftover after parsing attributes in process `syz.0.965'.
[  133.751449][ T7437] input input10: Device does not respond to id packet P
[  133.976368][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -71
[  133.978892][ T7437] input input10: Device does not respond to id packet N
[  133.981547][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -71
[  133.991639][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -71
[  133.994020][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -71
[  134.005074][ T7437] iforce 2-1:0.0: usb_submit_urb failed: -71
[  134.012052][ T7437] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  134.036358][ T7437] usb 2-1: USB disconnect, device number 12
[  134.548889][ T5311] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  134.571863][ T7744] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.697208][ T5311] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  134.700683][ T5311] usb 1-1: config 0 has no interface number 0
[  134.709838][ T5311] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  134.717589][ T5311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.727616][ T5311] usb 1-1: config 0 descriptor??
[  134.738338][ T5311] cp210x 1-1:0.1: cp210x converter detected
[  134.869172][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'.
[  135.087275][   T52] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  135.138128][ T5311] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32
[  135.155731][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  135.237604][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.242352][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.248411][   T52] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  135.253935][   T52] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.258133][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.263591][   T52] usb 2-1: config 0 descriptor??
[  135.305894][   T10] usb 5-1: Using ep0 maxpacket: 32
[  135.309657][   T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  135.315080][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  135.319167][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  135.322251][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  135.326698][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  135.333851][   T10] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  135.336979][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.339800][   T10] usb 5-1: Product: syz
[  135.341369][   T10] usb 5-1: Manufacturer: syz
[  135.342987][   T10] usb 5-1: SerialNumber: syz
[  135.351175][   T10] usb 5-1: config 0 descriptor??
[  135.358053][ T5311] usb 1-1: cp210x converter now attached to ttyUSB0
[  135.568334][ T5311] usb 1-1: USB disconnect, device number 7
[  135.576132][ T5311] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  135.585430][ T5311] cp210x 1-1:0.1: device disconnected
[  135.682059][   T52] plantronics 0003:047F:FFFF.0007: item 0 0 0 9 parsing failed
[  135.686466][   T52] plantronics 0003:047F:FFFF.0007: parse failed
[  135.689261][   T52] plantronics 0003:047F:FFFF.0007: probe with driver plantronics failed with error -22
[  135.768629][   T10] iforce 5-1:0.0: usb_submit_urb failed: -32
[  135.770717][   T10] input input11: Device does not respond to id packet M
[  135.773849][   T10] iforce 5-1:0.0: usb_submit_urb failed: -32
[  135.777001][   T10] input input11: Device does not respond to id packet P
[  135.881357][   T52] usb 2-1: USB disconnect, device number 13
[  135.980500][   T10] iforce 5-1:0.0: usb_submit_urb failed: -71
[  135.984131][   T10] input input11: Device does not respond to id packet N
[  135.987622][   T10] iforce 5-1:0.0: usb_submit_urb failed: -71
[  135.989926][   T10] iforce 5-1:0.0: usb_submit_urb failed: -71
[  135.992170][   T10] iforce 5-1:0.0: usb_submit_urb failed: -71
[  135.994442][   T10] iforce 5-1:0.0: usb_submit_urb failed: -71
[  135.997922][   T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  136.010719][   T10] usb 5-1: USB disconnect, device number 4
[  136.645913][   T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  136.798400][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  136.801862][   T10] usb 2-1: config 0 has no interface number 0
[  136.804486][   T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  136.810119][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.815578][   T10] usb 2-1: config 0 descriptor??
[  136.818086][ T5311] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  136.823781][   T10] cp210x 2-1:0.1: cp210x converter detected
[  136.967319][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.970898][ T5311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.974182][ T5311] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  136.979160][ T5311] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  136.982269][ T5311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.987161][ T5311] usb 5-1: config 0 descriptor??
[  137.225814][   T10] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32
[  137.406021][ T5311] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  137.432503][   T10] usb 2-1: cp210x converter now attached to ttyUSB0
[  137.638218][   T10] usb 2-1: USB disconnect, device number 14
[  137.648422][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  137.654005][   T10] cp210x 2-1:0.1: device disconnected
[  139.165812][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  139.316953][   T10] usb 1-1: Using ep0 maxpacket: 32
[  139.320900][   T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  139.326831][   T10] usb 1-1: config 0 has no interface number 0
[  139.330984][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  139.336251][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.338895][   T10] usb 1-1: Product: syz
[  139.340300][   T10] usb 1-1: Manufacturer: syz
[  139.341836][   T10] usb 1-1: SerialNumber: syz
[  139.346394][   T10] usb 1-1: config 0 descriptor??
[  139.355276][   T10] smsc95xx v2.0.0
[  139.462599][ T8746] tmpfs: Bad value for 'mpol'
[  139.505816][   T52] usb 5-1: USB disconnect, device number 5
[  139.679435][ T8747] loop4: detected capacity change from 0 to 32768
[  139.691544][ T8747] XFS (loop4): logbuf size must be greater than or equal to log stripe size
[  139.760445][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  139.764055][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  140.222403][ T8773] loop1: detected capacity change from 0 to 4096
[  140.365777][   T33] audit: type=1326 audit(1755504378.895:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610078ebe9 code=0x7ffc0000
[  140.393884][   T33] audit: type=1326 audit(1755504378.895:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610078ebe9 code=0x7ffc0000
[  140.412888][   T33] audit: type=1326 audit(1755504378.915:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f610078ebe9 code=0x7ffc0000
[  140.433953][   T33] audit: type=1326 audit(1755504378.915:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610078ebe9 code=0x7ffc0000
[  140.450972][   T33] audit: type=1326 audit(1755504378.915:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8778 comm="syz.1.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610078ebe9 code=0x7ffc0000
[  140.805837][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  140.812173][   T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  140.821629][   T10] usb 1-1: USB disconnect, device number 8
[  140.846879][   T52] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  140.998282][   T52] usb 2-1: unable to get BOS descriptor or descriptor too short
[  141.002756][   T52] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 157, changing to 11
[  141.008508][   T52] usb 2-1: config 1 interface 0 has no altsetting 0
[  141.013598][   T52] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[  141.019567][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.023078][   T52] usb 2-1: Product: syz
[  141.024924][   T52] usb 2-1: Manufacturer: syz
[  141.027063][   T52] usb 2-1: SerialNumber: syz
[  141.248272][   T52] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12
[  141.255139][ T5278] bcm5974 2-1:1.0: could not read from device
[  141.264352][ T5278] bcm5974 2-1:1.0: could not read from device
[  141.266811][   T52] usb 2-1: USB disconnect, device number 15
[  141.592171][ T8802] loop4: detected capacity change from 0 to 32768
[  141.606363][   T33] audit: type=1800 audit(1755504380.145:20): pid=8802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1040" name="file1" dev="loop4" ino=4 res=0 errno=0
[  141.655870][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  141.810954][   T10] usb 1-1: Using ep0 maxpacket: 8
[  141.815126][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.834143][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  141.838671][ T8814] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1046'.
[  141.838997][   T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  141.847878][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.856644][   T10] hub 1-1:1.0: bad descriptor, ignoring hub
[  141.858930][   T10] hub 1-1:1.0: probe with driver hub failed with error -5
[  141.882432][ T8815] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  141.882432][ T8815] The task syz.1.1045 (8815) triggered the difference, watch for misbehavior.
[  142.321994][   T10] usb 1-1: USB disconnect, device number 9
[  142.615883][   T10] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  142.778514][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.875916][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.880085][   T10] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  142.883767][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.902416][   T10] hub 1-1:1.0: bad descriptor, ignoring hub
[  142.904617][   T10] hub 1-1:1.0: probe with driver hub failed with error -5
[  143.217076][   T10] usb 1-1: USB disconnect, device number 10
[  143.754280][ T8838] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.1060'.
[  143.773387][ T8840] sctp: Trying to GSO but underlying device doesn't support it.
[  143.844465][ T8847] loop1: detected capacity change from 0 to 1024
[  143.869429][ T8847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.881456][ T8847] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  143.888759][ T8847] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  143.893962][ T8847] EXT4-fs (loop1): This should not happen!! Data will be lost
[  143.893962][ T8847] 
[  143.899294][ T8847] EXT4-fs (loop1): Total free blocks count 0
[  143.901538][ T8847] EXT4-fs (loop1): Free/Dirty block details
[  143.903808][ T8847] EXT4-fs (loop1): free_blocks=68451041280
[  143.906211][ T8847] EXT4-fs (loop1): dirty_blocks=32
[  143.908009][ T8847] EXT4-fs (loop1): Block reservation details
[  143.910161][ T8847] EXT4-fs (loop1): i_reserved_data_blocks=2
[  143.929460][ T1091] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  144.122083][ T8862] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'.
[  144.927568][ T8873] loop1: detected capacity change from 0 to 40427
[  144.931006][ T8873] F2FS-fs: heap/no_heap options were deprecated
[  144.933820][ T8873] F2FS-fs: heap/no_heap options were deprecated
[  145.188597][ T8904] loop0: detected capacity change from 0 to 32768
[  145.216308][ T8904] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  145.225970][ T8904] (syz.0.1086,8904,0):ocfs2_reflink_ioctl:4417 ERROR: status = -14
[  145.231285][ T8903] loop4: detected capacity change from 0 to 32768
[  145.242319][ T5849] (syz-executor,5849,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  145.253599][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  145.490012][ T8914] loop4: detected capacity change from 0 to 2048
[  145.494232][ T8914] EXT4-fs: Ignoring removed nobh option
[  145.513467][ T8914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.738840][ T7744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.549384][ T8921] loop4: detected capacity change from 0 to 32768
[  146.567170][ T8921] XFS (loop4): Invalid device [./bus], error=-16
[  146.719536][ T8943] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1102'.
[  146.763221][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'.
[  146.768644][ T8947] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1104'.
[  146.799714][ T8950] loop0: detected capacity change from 0 to 128
[  146.813649][   T33] audit: type=1800 audit(1755504385.345:21): pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file2" dev="loop0" ino=1048607 res=0 errno=0
[  146.867860][ T8958] loop4: detected capacity change from 0 to 256
[  146.950404][ T8962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1110'.
[  147.032899][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1114'.
[  147.126001][ T5233] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  147.196314][ T8968] loop0: detected capacity change from 0 to 32768
[  147.210760][ T8978] loop1: detected capacity change from 0 to 2048
[  147.214398][ T8978] EXT4-fs: Ignoring removed nobh option
[  147.233056][ T8978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.284576][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.319916][ T8986] netlink: 'syz.1.1121': attribute type 3 has an invalid length.
[  147.344415][ T8988] netlink: 'syz.1.1123': attribute type 5 has an invalid length.
[  147.421319][ T8994] netlink: 'syz.1.1126': attribute type 6 has an invalid length.
[  147.425834][ T8994] netlink: 'syz.1.1126': attribute type 6 has an invalid length.
[  147.505221][ T9000] loop1: detected capacity change from 0 to 256
[  147.508663][ T9000] exfat: Deprecated parameter 'utf8'
[  147.513595][ T9000] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  147.665314][ T9008] tipc: Started in network mode
[  147.670531][ T9008] tipc: Node identity ., cluster identity 4711
[  147.673306][ T9008] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  148.451760][ T9041] loop4: detected capacity change from 0 to 2048
[  148.469336][ T9041] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  148.481387][ T9041] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  148.875818][   T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  149.026467][   T10] usb 2-1: Using ep0 maxpacket: 8
[  149.030380][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.034224][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.042061][   T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  149.049612][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.062762][   T10] hub 2-1:1.0: bad descriptor, ignoring hub
[  149.068134][   T10] hub 2-1:1.0: probe with driver hub failed with error -5
[  149.532920][   T10] usb 2-1: USB disconnect, device number 16
[  149.835869][   T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  149.987838][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.992277][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  149.996338][   T10] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  150.000271][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.014047][   T10] hub 2-1:1.0: bad descriptor, ignoring hub
[  150.017444][   T10] hub 2-1:1.0: probe with driver hub failed with error -5
[  150.326427][ T5311] usb 2-1: USB disconnect, device number 17
[  151.391838][ T9063] loop0: detected capacity change from 0 to 256
[  151.396697][ T9063] exfat: Deprecated parameter 'utf8'
[  151.408487][ T9063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  151.506020][ T9071] loop1: detected capacity change from 0 to 64
[  151.550267][ T9075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1160'.
[  151.613382][ T9077] fuse: Bad value for 'fd'
[  151.831041][ T5857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.949459][ T5857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.032255][ T5857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.075957][ T7437] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  152.113172][ T5857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.156505][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.160330][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.163401][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.171779][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.174912][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.235869][ T7437] usb 5-1: Using ep0 maxpacket: 16
[  152.247145][ T7437] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  152.255969][ T7437] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.258796][ T7437] usb 5-1: Product: syz
[  152.260206][ T7437] usb 5-1: Manufacturer: syz
[  152.263420][ T5857] bridge_slave_1: left allmulticast mode
[  152.265305][ T5857] bridge_slave_1: left promiscuous mode
[  152.267360][ T7437] usb 5-1: SerialNumber: syz
[  152.270316][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.273413][ T7437] usb 5-1: config 0 descriptor??
[  152.278093][ T5857] bridge_slave_0: left allmulticast mode
[  152.279960][ T5857] bridge_slave_0: left promiscuous mode
[  152.281859][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.284691][ T7437] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  152.483177][ T7437] usb 5-1: USB disconnect, device number 6
[  152.554234][ T5857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.558378][ T5857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.562081][ T5857] bond0 (unregistering): Released all slaves
[  152.638740][ T5857] bond1 (unregistering): (slave veth3): Releasing active interface
[  152.641388][ T5857] vlan0: entered promiscuous mode
[  152.644256][ T5857] bond1 (unregistering): (slave vlan0): Releasing active interface
[  152.650028][ T5857] bond1 (unregistering): Released all slaves
[  152.718672][ T5857] tipc: Left network mode
[  152.886572][ T9085] chnl_net:caif_netlink_parms(): no params data found
[  152.971702][ T5857] hsr_slave_0: left promiscuous mode
[  152.974670][ T5857] hsr_slave_1: left promiscuous mode
[  152.978793][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.981952][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.985595][ T5857] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.988753][ T5857] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.009740][ T5857] team_slave_0: left promiscuous mode
[  153.012135][ T5857] team_slave_1: left promiscuous mode
[  153.023891][ T5857] veth1_macvtap: left promiscuous mode
[  153.026589][ T5857] veth0_macvtap: left promiscuous mode
[  153.032825][ T5857] veth1_vlan: left promiscuous mode
[  153.036233][ T5857] veth0_vlan: left promiscuous mode
[  153.465560][ T5857] team0 (unregistering): Port device team_slave_1 removed
[  153.490012][ T5857] team0 (unregistering): Port device team_slave_0 removed
[  153.758548][ T9117] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1171'.
[  153.768274][ T9117] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1171'.
[  153.780266][ T9085] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.794145][ T9085] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.797598][ T9085] bridge_slave_0: entered allmulticast mode
[  153.807449][ T9085] bridge_slave_0: entered promiscuous mode
[  153.810528][ T9085] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.812831][ T9085] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.815509][ T9085] bridge_slave_1: entered allmulticast mode
[  153.830439][ T9085] bridge_slave_1: entered promiscuous mode
[  153.882993][ T9085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.888918][ T9085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.945000][ T9085] team0: Port device team_slave_0 added
[  153.949314][ T9085] team0: Port device team_slave_1 added
[  153.977569][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_0
[  153.979914][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.995508][ T9085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.000319][ T9085] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.002675][ T9085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.011384][ T9085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.077459][ T7437] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  154.083043][ T9085] hsr_slave_0: entered promiscuous mode
[  154.086072][ T9085] hsr_slave_1: entered promiscuous mode
[  154.088233][ T9085] debugfs: 'hsr0' already exists in 'hsr'
[  154.090148][ T9085] Cannot create hsr debugfs directory
[  154.124608][ T5857] IPVS: stop unused estimator thread 0...
[  154.245788][ T5851] Bluetooth: hci1: command tx timeout
[  154.245894][ T7437] usb 1-1: Using ep0 maxpacket: 16
[  154.270407][ T7437] usb 1-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  154.286884][ T7437] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.289523][ T7437] usb 1-1: Product: syz
[  154.291110][ T7437] usb 1-1: Manufacturer: syz
[  154.293053][ T7437] usb 1-1: SerialNumber: syz
[  154.306175][ T7437] usb 1-1: config 0 descriptor??
[  154.312831][ T7437] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  154.323800][ T9085] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.343449][ T9085] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.350934][ T9085] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  154.361978][ T9085] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  154.411514][ T9158] loop4: detected capacity change from 0 to 1024
[  154.419215][ T9158] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  154.422702][ T9158] EXT4-fs (loop4): group descriptors corrupted!
[  154.475410][ T9085] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.517286][ T9085] 8021q: adding VLAN 0 to HW filter on device team0
[  154.525843][ T7437] usb 1-1: USB disconnect, device number 11
[  154.530256][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.532606][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.550682][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.553119][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.681272][ T9085] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.814191][ T9085] veth0_vlan: entered promiscuous mode
[  154.821176][ T9085] veth1_vlan: entered promiscuous mode
[  154.835440][ T9085] veth0_macvtap: entered promiscuous mode
[  154.844393][ T9085] veth1_macvtap: entered promiscuous mode
[  154.853221][ T9176] loop4: detected capacity change from 0 to 32768
[  154.853594][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_0
[  154.861402][ T9176] jfs_mount: dbMount failed w/rc = -5
[  154.864206][ T9176] Mount JFS Failure: -5
[  154.868349][ T9085] batman_adv: batadv0: Interface activated: batadv_slave_1
[  154.877269][ T9176] jfs_mount failed w/return code = -5
[  154.883254][ T5873] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  154.891110][ T5873] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  154.904383][ T5873] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  154.916533][ T5873] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  154.970058][  T381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.981726][  T381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.009506][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  155.012680][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  155.150411][ T9206] fuse: Bad value for 'fd'
[  155.624703][ T9200] loop0: detected capacity change from 0 to 32768
[  155.633707][ T9200] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1192 (9200)
[  155.682351][ T9200] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.703326][ T9200] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  155.709014][ T9200] BTRFS info (device loop0): using free-space-tree
[  155.760718][   T36] BTRFS warning (device loop0): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0
[  155.782586][ T9200] BTRFS error (device loop0): failed to read chunk root
[  155.856613][ T9200] BTRFS error (device loop0): open_ctree failed: -5
[  156.054137][ T9247] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1205'.
[  156.305963][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  156.325826][ T5851] Bluetooth: hci1: command tx timeout
[  156.328200][ T5881] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  156.457760][    T9] usb 1-1: Using ep0 maxpacket: 32
[  156.462462][    T9] usb 1-1: config 1 has an invalid interface number: 242 but max is 0
[  156.466767][    T9] usb 1-1: config 1 has no interface number 0
[  156.469444][    T9] usb 1-1: config 1 interface 242 has no altsetting 0
[  156.474819][    T9] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df
[  156.478934][ T5881] usb 5-1: Using ep0 maxpacket: 16
[  156.481284][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.485077][    T9] usb 1-1: Product: syz
[  156.488008][    T9] usb 1-1: Manufacturer: syz
[  156.490449][    T9] usb 1-1: SerialNumber: syz
[  156.493449][ T5881] usb 5-1: descriptor type invalid, skip
[  156.499140][ T5881] usb 5-1: descriptor type invalid, skip
[  156.504748][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.509237][ T5881] usb 5-1: config 0 has no interfaces?
[  156.515151][ T5881] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.520086][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.523589][ T5881] usb 5-1: Product: syz
[  156.525489][ T5881] usb 5-1: Manufacturer: syz
[  156.528252][ T5881] usb 5-1: SerialNumber: syz
[  156.536344][ T5881] usb 5-1: config 0 descriptor??
[  156.743117][    T9] aqc111 1-1:1.242: probe with driver aqc111 failed with error -22
[  156.751359][ T5881] usb 5-1: USB disconnect, device number 7
[  156.754174][    T9] usb 1-1: USB disconnect, device number 12
[  156.954904][   T33] audit: type=1326 audit(1755504395.485:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9253 comm="syz.5.1202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f236db8ebe9 code=0x7fc00000
[  157.247030][ T9273] loop5: detected capacity change from 0 to 32768
[  157.255006][ T9273] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1208 (9273)
[  157.318946][ T9273] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.322339][ T9273] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  157.332165][ T9273] BTRFS info (device loop5): using free-space-tree
[  157.341734][ T9279] process 'syz.0.1210' launched './file0' with NULL argv: empty string added
[  157.414282][   T26] BTRFS warning (device loop5): checksum verify failed on logical 1052672 mirror 1 wanted 0x11f3e929624b680852cd2754314153a53c00b22ae8936d589814e00d5ed09030 found 0xe38ba9bd71c513db051652ecf0e4e83d075b6f90790e6c1c1ddb1c188093d1e0 level 0
[  157.430861][ T9273] BTRFS error (device loop5): failed to read chunk root
[  157.454398][ T9300] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1214'.
[  157.458539][ T9273] BTRFS error (device loop5): open_ctree failed: -5
[  157.675718][ T7437] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  157.720307][ T9303] loop4: detected capacity change from 0 to 40427
[  157.733561][ T9303] F2FS-fs (loop4): invalid crc value
[  157.762157][ T9303] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  157.765470][ T9303] F2FS-fs (loop4): Start checkpoint disabled!
[  157.778148][ T9303] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  157.789714][ T9303] syz.4.1216: attempt to access beyond end of device
[  157.789714][ T9303] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  157.815324][ T7380] kworker/u10:6: attempt to access beyond end of device
[  157.815324][ T7380] loop4: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  157.824321][  T381] kworker/u10:3: attempt to access beyond end of device
[  157.824321][  T381] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  157.830402][ T7437] usb 1-1: Using ep0 maxpacket: 32
[  157.833880][  T381] CPU: 0 UID: 0 PID: 381 Comm: kworker/u10:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  157.833898][  T381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.833906][  T381] Workqueue: writeback wb_workfn (flush-7:4)
[  157.833925][  T381] Call Trace:
[  157.833930][  T381]  <TASK>
[  157.833936][  T381]  dump_stack_lvl+0x189/0x250
[  157.833955][  T381]  ? __pfx_dump_stack_lvl+0x10/0x10
[  157.833970][  T381]  ? __pfx_queue_work_on+0x10/0x10
[  157.833980][  T381]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  157.833996][  T381]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.834019][  T381]  f2fs_handle_critical_error+0x37c/0x540
[  157.834041][  T381]  f2fs_write_end_io+0x886/0xb60
[  157.834066][  T381]  __submit_merged_bio+0x27a/0x6a0
[  157.834088][  T381]  __submit_merged_write_cond+0x255/0x530
[  157.834110][  T381]  f2fs_write_data_pages+0x261d/0x3000
[  157.834153][  T381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  157.834207][  T381]  ? rcu_read_lock_sched_held+0x89/0x100
[  157.834220][  T381]  ? __pfx_rcu_read_lock_sched_held+0x10/0x10
[  157.834274][  T381]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  157.834293][  T381]  do_writepages+0x32e/0x550
[  157.834313][  T381]  ? reacquire_held_locks+0x127/0x1d0
[  157.834324][  T381]  ? writeback_sb_inodes+0x384/0x1010
[  157.834345][  T381]  __writeback_single_inode+0x145/0xff0
[  157.834359][  T381]  ? do_raw_spin_unlock+0x4d/0x240
[  157.834376][  T381]  writeback_sb_inodes+0x6c7/0x1010
[  157.834411][  T381]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  157.834458][  T381]  ? rcu_is_watching+0x15/0xb0
[  157.834478][  T381]  wb_writeback+0x43b/0xaf0
[  157.834499][  T381]  ? queue_io+0x3c1/0x590
[  157.834516][  T381]  ? __pfx_wb_writeback+0x10/0x10
[  157.834537][  T381]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.834555][  T381]  wb_workfn+0x409/0xef0
[  157.834579][  T381]  ? __pfx_wb_workfn+0x10/0x10
[  157.834596][  T381]  ? __lock_acquire+0xab9/0xd20
[  157.834649][  T381]  ? process_scheduled_works+0x9ef/0x17b0
[  157.834667][  T381]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.834680][  T381]  ? process_scheduled_works+0x9ef/0x17b0
[  157.834690][  T381]  ? process_scheduled_works+0x9ef/0x17b0
[  157.834703][  T381]  process_scheduled_works+0xae1/0x17b0
[  157.834738][  T381]  ? __pfx_process_scheduled_works+0x10/0x10
[  157.834763][  T381]  worker_thread+0x8a0/0xda0
[  157.834777][  T381]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  157.834797][  T381]  ? __kthread_parkme+0x7b/0x200
[  157.834818][  T381]  kthread+0x711/0x8a0
[  157.834835][  T381]  ? __pfx_worker_thread+0x10/0x10
[  157.834846][  T381]  ? __pfx_kthread+0x10/0x10
[  157.834862][  T381]  ? _raw_spin_unlock_irq+0x23/0x50
[  157.834874][  T381]  ? lockdep_hardirqs_on+0x9c/0x150
[  157.834888][  T381]  ? __pfx_kthread+0x10/0x10
[  157.834902][  T381]  ret_from_fork+0x3fc/0x770
[  157.834916][  T381]  ? __pfx_ret_from_fork+0x10/0x10
[  157.834932][  T381]  ? __switch_to_asm+0x39/0x70
[  157.834945][  T381]  ? __switch_to_asm+0x33/0x70
[  157.834957][  T381]  ? __pfx_kthread+0x10/0x10
[  157.834971][  T381]  ret_from_fork_asm+0x1a/0x30
[  157.834996][  T381]  </TASK>
[  157.835001][  T381] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  157.835084][ T7437] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  157.979113][   T52] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  157.983033][ T7437] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  157.990554][ T7437] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  157.994407][ T7437] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  157.997991][ T7437] usb 1-1: Product: syz
[  157.999765][ T7437] usb 1-1: Manufacturer: syz
[  158.001722][ T7437] usb 1-1: SerialNumber: syz
[  158.007013][ T7437] usb 1-1: config 0 descriptor??
[  158.026545][ T7437] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  158.125797][   T52] usb 6-1: Using ep0 maxpacket: 16
[  158.138736][   T52] usb 6-1: descriptor type invalid, skip
[  158.141238][   T52] usb 6-1: descriptor type invalid, skip
[  158.146373][   T52] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.165935][   T52] usb 6-1: config 0 has no interfaces?
[  158.173198][   T52] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  158.177329][   T52] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.180830][   T52] usb 6-1: Product: syz
[  158.182638][   T52] usb 6-1: Manufacturer: syz
[  158.184593][   T52] usb 6-1: SerialNumber: syz
[  158.195407][   T52] usb 6-1: config 0 descriptor??
[  158.216153][   T13] usb 1-1: Failed to submit usb control message: -71
[  158.216411][   T52] usb 1-1: USB disconnect, device number 13
[  158.218914][   T13] usb 1-1: unable to send the bmi data to the device: -71
[  158.227371][   T13] usb 1-1: unable to get target info from device
[  158.229920][   T13] usb 1-1: could not get target info (-71)
[  158.232539][   T13] usb 1-1: could not probe fw (-71)
[  158.388164][ T9320] loop4: detected capacity change from 0 to 1024
[  158.391687][ T9320] EXT4-fs: Ignoring removed bh option
[  158.394826][ T9320] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  158.406325][ T5851] Bluetooth: hci1: command tx timeout
[  158.414823][ T9320] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.421019][ T7437] usb 6-1: USB disconnect, device number 2
[  158.454767][ T9320] evm: overlay not supported
[  158.474405][ T9320] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #12: block 7: comm syz.4.1220: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  158.487252][ T9320] EXT4-fs (loop4): Remounting filesystem read-only
[  158.515986][ T7744] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.282524][ T9341] loop0: detected capacity change from 0 to 1024
[  159.314673][ T9341] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  159.343470][ T9341] EXT4-fs (loop0): group descriptors corrupted!
[  160.003747][ T9355] veth1_to_batadv: entered promiscuous mode
[  160.416118][   T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  160.421572][ T9371] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1240'.
[  160.486120][ T5851] Bluetooth: hci1: command tx timeout
[  160.570694][   T10] usb 1-1: Using ep0 maxpacket: 16
[  160.574755][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.585267][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  160.596667][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  160.600782][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  160.605550][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  160.613342][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  160.617286][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  160.620865][   T10] usb 1-1: Manufacturer: syz
[  160.633816][   T10] usb 1-1: config 0 descriptor??
[  160.896118][   T10] rc_core: IR keymap rc-hauppauge not found
[  160.903696][   T10] Registered IR keymap rc-empty
[  160.906298][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.926211][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.946665][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  160.951556][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  160.958457][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.977718][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  160.997205][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.017689][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.035850][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.055750][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.075734][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.095772][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.115895][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.136533][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  161.157273][   T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  161.160365][   T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  161.286056][   T10] usb 1-1: USB disconnect, device number 14
[  162.013451][ T9398] loop4: detected capacity change from 0 to 1024
[  162.215128][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1259'.
[  162.804894][ T9420] bridge0: entered promiscuous mode
[  164.029643][ T9452] loop0: detected capacity change from 0 to 32768
[  164.045558][ T9452] read_mapping_page failed!
[  164.048523][ T9452] ERROR: (device loop0): txCommit: 
[  164.048523][ T9452] 
[  164.069258][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  164.072828][  T115] ------------[ cut here ]------------
[  164.075009][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  164.079422][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  164.082654][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  164.087257][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.091109][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  164.092963][  T115] Code: e5 fd 90 0f 0b e8 61 3b 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 52 2f e5 fd 90 <0f> 0b e8 3a 3b 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  164.100075][  T115] RSP: 0018:ffffc9000242fbc8 EFLAGS: 00010246
[  164.102376][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: b116669b842b7f00
[  164.105361][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  164.108333][  T115] RBP: ffffc90001f820d8 R08: ffffc9000242f8e7 R09: 1ffff92000485f1c
[  164.111342][  T115] R10: dffffc0000000000 R11: fffff52000485f1d R12: dffffc0000000000
[  164.114337][  T115] R13: 1ffff11022e79fa8 R14: ffff8881173cfd40 R15: 0000000000000000
[  164.117160][  T115] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  164.120385][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.122842][  T115] CR2: 000000110c403ea0 CR3: 000000002ad52000 CR4: 00000000000006f0
[  164.125761][  T115] Call Trace:
[  164.127006][  T115]  <TASK>
[  164.128117][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.130077][  T115]  jfs_lazycommit+0x584/0xa90
[  164.131881][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  164.133876][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  164.136092][  T115]  ? __kthread_parkme+0x7b/0x200
[  164.137981][  T115]  ? __kthread_parkme+0x1a1/0x200
[  164.139900][  T115]  kthread+0x711/0x8a0
[  164.141472][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  164.143441][  T115]  ? __pfx_kthread+0x10/0x10
[  164.145191][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  164.147093][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.149053][  T115]  ? __pfx_kthread+0x10/0x10
[  164.150789][  T115]  ret_from_fork+0x3fc/0x770
[  164.152546][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  164.154523][  T115]  ? __switch_to_asm+0x39/0x70
[  164.156377][  T115]  ? __switch_to_asm+0x33/0x70
[  164.158179][  T115]  ? __pfx_kthread+0x10/0x10
[  164.159927][  T115]  ret_from_fork_asm+0x1a/0x30
[  164.161768][  T115]  </TASK>
[  164.162959][  T115] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  164.165118][  T115] ---[ end trace 0000000000000000 ]---
[  164.170729][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  164.173674][  T115] Code: e5 fd 90 0f 0b e8 61 3b 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba a3 03 00 00 48 c7 c1 60 28 c4 8b e8 52 2f e5 fd 90 <0f> 0b e8 3a 3b 7d fe 48 c7 c7 60 1b c4 8b 48 c7 c6 59 17 c4 8b ba
[  164.183329][  T115] RSP: 0018:ffffc9000242fbc8 EFLAGS: 00010246
[  164.187066][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: b116669b842b7f00
[  164.193383][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  164.215151][  T115] RBP: ffffc90001f820d8 R08: ffffc9000242f8e7 R09: 1ffff92000485f1c
[  164.226361][  T115] R10: dffffc0000000000 R11: fffff52000485f1d R12: dffffc0000000000
[  164.229720][  T115] R13: 1ffff11022e79fa8 R14: ffff8881173cfd40 R15: 0000000000000000
[  164.233545][  T115] FS:  0000000000000000(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  164.238022][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  164.240877][  T115] CR2: 000000110c403ea0 CR3: 000000010d9e8000 CR4: 00000000000006f0
[  164.244303][  T115] Kernel panic - not syncing: Fatal exception
[  164.247540][  T115] Kernel Offset: disabled
[  164.248974][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:06:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000034 RBX=0000000000000034 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000242f310
R8 =ffff888107750237 R9 =1ffff11020eea046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98cb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c403ea0 CR3=000000002ad52000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff812b2da6 ffffffff812b2da6
XMM02=ffffffff812b2da6 ffffffff812b2da6 XMM03=ffffffff812b2da6 ffffffff812b2da6
XMM04=ffffffff812b2da6 ffffffff812b2da6 XMM05=ffffffff812b2da6 ffffffff812b2da6
XMM06=ffffffff812b2da6 ffffffff812b2da6 XMM07=ffffffff812b2da6 ffffffff812b2da6
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d4b RBX=1ffff11009608341 RCX=ffff888107129cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900031ff700 RSP=ffffc900031ff580
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8bc0ce7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f8bc01876c3 00007f8bc01876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=010fffffffffffff 040410000610000f
XMM06=8004010000000806 0a0156e610080011 XMM07=f00300080011e003 00100011d0030fff
XMM08=ffffffffff0411c0 0306100011b0033f XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
