last executing test programs:

6m14.288422004s ago: executing program 32 (id=48):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
faccessat(0xffffffffffffff9c, 0x0, 0x2)

5m52.071898907s ago: executing program 33 (id=445):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

5m27.636602018s ago: executing program 34 (id=559):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x3, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}})
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x7, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})

5m7.349755269s ago: executing program 35 (id=755):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001800080000000000000000085000000270000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e7140000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m27.935145568s ago: executing program 36 (id=1217):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x300)

4m26.221777338s ago: executing program 37 (id=1393):
r0 = open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
dup2(r0, r1)
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

4m7.931251529s ago: executing program 38 (id=1565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38)

3m48.150472592s ago: executing program 8 (id=1768):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m48.042671653s ago: executing program 8 (id=1769):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x83, &(0x7f0000000040)="020000000980ffff", 0x8)

3m47.991308601s ago: executing program 8 (id=1770):
r0 = syz_io_uring_setup(0xec5, &(0x7f0000000c00)={0x0, 0x0, 0x2}, &(0x7f0000000500), &(0x7f0000000600))
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001480)={0x1, 0x2000000, 0x0, &(0x7f0000001380)=[{0x0}], 0x0}, 0x20)

3m47.991089717s ago: executing program 8 (id=1771):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

3m47.884686798s ago: executing program 8 (id=1773):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2)
ppoll(&(0x7f0000000440)=[{r3, 0x14e2}], 0x1, &(0x7f0000000480), 0x0, 0x0)
pipe(0x0)

3m47.421658631s ago: executing program 8 (id=1781):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0xc, 0x703, 0x0, 0x0, 0x12, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b4f05f819e01177d3d458dac00000000000000000000003b00000000000000000a00", "90be8c1c5512407b7f0000fcff00020000000000000000000400", [0x7, 0x40000000000000]}})
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)

3m47.326046938s ago: executing program 39 (id=1781):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0xc, 0x703, 0x0, 0x0, 0x12, 0x14, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b4f05f819e01177d3d458dac00000000000000000000003b00000000000000000a00", "90be8c1c5512407b7f0000fcff00020000000000000000000400", [0x7, 0x40000000000000]}})
ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0)

3m31.892742875s ago: executing program 9 (id=1909):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000130001000000000000000000fe8000000000000000000000000000aa00000000000000000000ffffe000000200000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="001000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000004000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00100008"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m31.823080721s ago: executing program 9 (id=1911):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGREP(r0, 0x80084524, 0x0)

3m31.713158987s ago: executing program 9 (id=1913):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r1=>0x0})
connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0}, 0x1}, 0x18)

3m31.652924512s ago: executing program 9 (id=1914):
capset(0x0, &(0x7f0000000100)={0xffff8001, 0x6, 0x2, 0x2087, 0xffffffff, 0xef})
unshare(0x28000600)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000004080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$eJzsmL9rFEEUx78zu7feiog2KWwsDBjR7GX3UNIcGkGwEiHxV6WHWUPMJieXFUxANNjYaGchpLHwH7BIkcrCzn9A0EIFwcIrLGxsRmZndm9yc3HDcla+TzF8Z9+befPezbziQBDEf8vXL78+Pzs/PXcKwAGMY5/+/t0BGFOaG/6fXt4/+aJ1YfPNx9fvVg4+3B7cTy4RYueH+l/iuwDezjhIi0jF6t9SjOvJHHihr4DjhNbXwBBofQscV7WOwXBD67uG7kj/ILizmMTB7U4yL8WUHEI5RHJoDp6vt8Ewr+dCCMEM++ra+lI7SeKuIVxtG2KqJIpgS2NW/Wrw0JvhaBnnk1W8/vTJhpzntZky6heCI9RJNMEwq79PYzOvjSqJkf8Rt7+/Y+U/JFumLwNQlmRdidbPkRTLFIcnqy2fkOmcs02HUOUY2Lmqhr5JVnK0KVtXJxNu+V08q3/QCrEuDWYhHg1/AM99AP8oU1NUyiIXY73t97bpmxJ81/ssWHkItvf7U9/rmfOHWL1iPmReI/8tgA9bqn+IVwzHjf7kGv2jkS7fa6yurU8uLrcX4oV4JYqaZxjw+HTUyBqRGq2+1+/Pftaf9hv713bx9biHB+007YZq9JgHH2najbJ5ZDyb2a3Oj5t6WYqLAI6piWxpXrGjY8VgnvLhma9UE7YTQRAEQRAEQRAEQRAEQRBEJY6CZf+ClhBdzrz/BAAA//9oglvV")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

3m31.364840175s ago: executing program 9 (id=1915):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @remote, @empty}}}})

3m31.072790023s ago: executing program 9 (id=1919):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@loopback}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xe57}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x2, 0xc}}}, 0xf8}}, 0x0)

3m30.978264701s ago: executing program 40 (id=1919):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b40)=@expire={0xf8, 0x18, 0x1, 0x0, 0x0, {{{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in6=@loopback}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xe57}, {0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x0, 0x2, 0xc}}}, 0xf8}}, 0x0)

3m25.040783161s ago: executing program 2 (id=1962):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])

3m24.481934839s ago: executing program 2 (id=1963):
r0 = syz_io_uring_setup(0x5c0, &(0x7f00000002c0)={0x0, 0x983b, 0x10001, 0x0, 0x22e}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000540))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0x0)

3m24.158156061s ago: executing program 2 (id=1964):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt(r0, 0x0, 0x5, &(0x7f0000000080)=""/3, &(0x7f0000000140)=0x3)

3m23.924470098s ago: executing program 2 (id=1965):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

3m23.702979725s ago: executing program 2 (id=1966):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
write$binfmt_register(r0, &(0x7f0000000380)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, 'U]\xc5$\xe4\x92p\xa2ay\xf6\x1f\xc7\x18Z\xefU\xf7\x14<t\'@U\xdf\xf0\xbb\xb81C\x1e=\xc8\x9a\x0e\xcc\r\xec\xec\xe6W\x02\x8b\x05\xdf*<\xda\xbf\x93\xef8\x911]{\xed\xcc\x85\"pN\xb4\xcdG\xc2\x1d\x7f9\xf0\x0fZ\xecx\xbb13|\xdcI4`\xe5\xaf\xb0g\xfc\xb6\xeeQ\xb0{dX.\x9d=\xccV\xf4\xa4g\x89\x01\x1f\xd1\xcc\x9d,?\xf4\x9af\xa4!\x84\x10\x16@fi\x1dRL\x86g\xaf\xa5\x03j\xc2P\xbaR\xc2I\x88\xc4N\xac\xfb\a]\xb4\xa4\x95\xb8-\xfa\xa8\x1b\xe6\xdfg\a\xfb\'\xd27\xec\xde\xc7n(\tx\xfb\x91%\xee*\xe8\xe8\xcdzU~\xbb\xe7\x11\x18?I5\x1f\xbbD\x92s@\xf5\xb2\xe4x\t\x00\xf9\xda\xd4\x1e`\f\x9a-\x91\xe9\xc2\xcaIx\x98\xc7x\x99\x9aeP#\x89\xe4o\xc1-\x13\xd8\x8a\xcf\x18\xa4ba\x90C\xd4I\xed\x9d\xdc\x82f\xe2\xce\x1b\xba', 0x3a, '!&)%.}+!/\xe1', 0x3a, './file0'}, 0x125)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000640)='<', 0x1, 0x805, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10)

3m21.713069899s ago: executing program 2 (id=1974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480300001800e000100636f6e6e6c696d69740000001c000280080001400000000908000240001e000108000240000000011c0001800900010068617368000000000c00028008000740000000010900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000)

3m21.263308531s ago: executing program 41 (id=1974):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000010900010073797a310000000050000480300001800e000100636f6e6e6c696d69740000001c000280080001400000000908000240001e000108000240000000011c0001800900010068617368000000000c00028008000740000000010900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20000000)

3m19.683257553s ago: executing program 7 (id=1985):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000003740)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x1, 0x8}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8}, 0x0, 0x0, 0xfff, 0x3, 0x6, 0xc, 0x1, 0x2ca}}], 0x70, 0x90}, 0x0)

3m19.683045863s ago: executing program 7 (id=1986):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60)

3m19.580233765s ago: executing program 7 (id=1987):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)

3m19.339695551s ago: executing program 7 (id=1988):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0003e0000000e0038b9379db6c"], 0x0, 0x0}, 0x0)

3m17.46950284s ago: executing program 7 (id=1990):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

3m16.25922993s ago: executing program 3 (id=1991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c80)=@newtfilter={0x3c, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd}, {}, {0x0, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0x3c}}, 0x0)

3m15.611614879s ago: executing program 3 (id=1992):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000dc0)=@newqdisc={0xb8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb8}}, 0x0)

3m15.271151476s ago: executing program 3 (id=1993):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000440)={[{@dots}, {@nodots}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@nodots}, {@dots}, {@dots}, {@fat=@errors_continue}, {@nodots}, {@fat=@check_strict}, {@dots}, {@dots}, {@nodots}, {}, {@dots}, {@fat=@check_strict}, {@fat=@dos1xfloppy}, {@fat=@showexec}, {@dots}, {@dots}, {@nodots}, {@dots}]}, 0xfd, 0x1ed, &(0x7f0000000240)="$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")

3m15.161397984s ago: executing program 3 (id=1994):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

3m14.973434094s ago: executing program 3 (id=1995):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
close(0x3)
r3 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2})
sendmsg$rds(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002980)=""/4112, 0x1039}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
write(r3, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xbf82)

2m27.887880451s ago: executing program 7 (id=1996):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)

2m27.88776381s ago: executing program 3 (id=1997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000680009010000000000000000020003000000000008001000", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

2m23.497951747s ago: executing program 42 (id=1996):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000)

2m3.88785268s ago: executing program 43 (id=1997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000680009010000000000000000020003000000000008001000", @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)

1m32.780588467s ago: executing program 4 (id=2213):
r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000001480)=""/4096)

1m32.64656234s ago: executing program 4 (id=2214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

1m32.47453209s ago: executing program 4 (id=2216):
mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil)

1m32.320339252s ago: executing program 4 (id=2217):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

1m32.159024952s ago: executing program 4 (id=2218):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)

1m31.625026092s ago: executing program 4 (id=2227):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80a, &(0x7f00000009c0)={[{@barrier_val}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

1m31.48541666s ago: executing program 44 (id=2227):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80a, &(0x7f00000009c0)={[{@barrier_val}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x5}}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1dc)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0)

1m11.140533675s ago: executing program 1 (id=2440):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRESOCT, @ANYRES32=0x0, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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")
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0)
llistxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000300)=""/143, 0x8f)

1m10.70738763s ago: executing program 1 (id=2448):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000280)='\x00N35', 0x4)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=[0x1], 0x0, 0x0, 0x1}}, 0x40)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)

1m9.169057762s ago: executing program 1 (id=2467):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCDELRT(r0, 0x890c, 0x0)

1m9.166859158s ago: executing program 1 (id=2468):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m9.040502623s ago: executing program 1 (id=2469):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x2d, 0x0, 0x0, 0x1c}, {0x6, 0x7, 0x1, 0xd060}]}, 0x10)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68)

1m8.78990026s ago: executing program 1 (id=2470):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_script(r1, 0x0, 0x0)

1m8.714627648s ago: executing program 45 (id=2470):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000d00)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
write$binfmt_script(r1, 0x0, 0x0)

1.969779136s ago: executing program 0 (id=3232):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0)
ioctl$VIDIOC_QUERYMENU(r0, 0xc008561c, &(0x7f0000000040)={0x980915, 0x3, @value=0x140000000000})

1.86848029s ago: executing program 0 (id=3233):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'gre0\x00', 0x0})
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

1.630624516s ago: executing program 0 (id=3234):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000200)={0xfc, {"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", 0x1000}}, 0x1006)

1.560372912s ago: executing program 0 (id=3235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)

1.514019544s ago: executing program 0 (id=3236):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r3, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES16=r0], 0x2c}}, 0x0)

1.513814393s ago: executing program 0 (id=3237):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c4a616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

540.501522ms ago: executing program 5 (id=3248):
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0)

513.917198ms ago: executing program 5 (id=3249):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})

396.866993ms ago: executing program 5 (id=3250):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

394.8122ms ago: executing program 6 (id=3251):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

310.528599ms ago: executing program 6 (id=3252):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
unshare(0x2c020400)
fsmount(r0, 0x0, 0x2)

310.305784ms ago: executing program 5 (id=3253):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000004040)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

250.36839ms ago: executing program 6 (id=3254):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
syz_emit_ethernet(0x4e, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x17, 0x12, [@private, @broadcast, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

185.476492ms ago: executing program 5 (id=3255):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]})
chmod(0x0, 0x8)

185.139041ms ago: executing program 6 (id=3256):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

90.722112ms ago: executing program 5 (id=3257):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa9, 0x62, 0xda, 0x20, 0x2040, 0x4901, 0x4777, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x30, 0x8e, 0x72}}]}}]}}, 0x0)

90.564137ms ago: executing program 6 (id=3258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x22, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000005}, 0x800)

0s ago: executing program 6 (id=3259):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000000c0)='./file1\x00', 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x1, 0x446b, &(0x7f0000004480)="$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")

kernel console output (not intermixed with test programs):

752][ T5906] usb 1-1: config 0 descriptor??
[  346.153557][T11617] loop1: detected capacity change from 0 to 256
[  346.162010][T11617] exfat: Deprecated parameter 'utf8'
[  346.170220][T11617] exfat: Deprecated parameter 'utf8'
[  346.172084][T11617] exfat: Deprecated parameter 'utf8'
[  346.182368][T11617] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  346.244728][T11617] exFAT-fs (loop1): error, exfat_zeroed_cluster: out of range(sect:184 len:8)
[  346.265540][T11617] exFAT-fs (loop1): Filesystem has been set read-only
[  346.432327][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2070'.
[  346.487791][T11623] netlink: 'syz.1.2071': attribute type 29 has an invalid length.
[  346.496424][T11623] netlink: 'syz.1.2071': attribute type 29 has an invalid length.
[  346.520130][ T5906] cougar 0003:060B:500A.0010: unexpected long global item
[  346.526049][ T5906] cougar 0003:060B:500A.0010: parse failed
[  346.533585][ T5906] cougar 0003:060B:500A.0010: probe with driver cougar failed with error -22
[  346.586536][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2073'.
[  346.590128][T11627] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  346.697548][ T5895] usb 1-1: USB disconnect, device number 22
[  348.436574][T11665] netlink: 'syz.4.2089': attribute type 2 has an invalid length.
[  348.440456][T11665] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.2089'.
[  349.457080][T11698] loop1: detected capacity change from 0 to 32768
[  349.462402][T11698] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  349.560089][T11698] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  349.574182][T11698] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  349.584716][T11698] XFS (loop1): Ending clean mount
[  349.639114][T11365] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  351.142733][T11725] netlink: 'syz.1.2112': attribute type 11 has an invalid length.
[  351.206434][T11729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'.
[  351.210492][T11729] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2114'.
[  351.223882][T11729] netlink: 'syz.1.2114': attribute type 15 has an invalid length.
[  351.445577][ T6149] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  351.515257][   T61] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  351.605258][ T6149] usb 1-1: Using ep0 maxpacket: 16
[  351.608747][ T6149] usb 1-1: config 1 has an invalid descriptor of length 189, skipping remainder of the config
[  351.612542][ T6149] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  351.619626][ T6149] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  351.623036][ T6149] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  351.626304][ T6149] usb 1-1: Product: syz
[  351.627703][ T6149] usb 1-1: Manufacturer: syz
[  351.633526][ T6149] cdc_ether 1-1:1.0: skipping garbage
[  351.635638][ T6149] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  351.665232][   T61] usb 2-1: Using ep0 maxpacket: 32
[  351.669650][   T61] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  351.674677][   T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  351.679662][   T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  351.683628][   T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  351.690151][   T61] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  351.694014][   T61] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.699504][   T61] usb 2-1: Product: syz
[  351.701235][   T61] usb 2-1: Manufacturer: syz
[  351.703264][   T61] usb 2-1: SerialNumber: syz
[  351.709288][   T61] usb 2-1: config 0 descriptor??
[  351.756332][ T5906] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  351.834611][   T61] usb 1-1: USB disconnect, device number 23
[  351.915192][ T5906] usb 5-1: Using ep0 maxpacket: 8
[  351.920368][ T5895] usb 2-1: USB disconnect, device number 11
[  351.926276][ T5906] usb 5-1: New USB device found, idVendor=0cf3, idProduct=e004, bcdDevice=b5.2e
[  351.929981][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.933214][ T5906] usb 5-1: Product: syz
[  351.934884][ T5906] usb 5-1: Manufacturer: syz
[  351.941531][ T5906] usb 5-1: SerialNumber: syz
[  351.946563][ T5906] usb 5-1: config 0 descriptor??
[  352.161833][T11171] usb 5-1: USB disconnect, device number 6
[  352.480917][T11743] loop1: detected capacity change from 0 to 8
[  352.552548][T11745] syz_tun: entered allmulticast mode
[  352.583626][T11745] dvmrp1: entered allmulticast mode
[  352.591652][T11744] syz_tun: left allmulticast mode
[  352.835831][T11762] loop1: detected capacity change from 0 to 4096
[  352.843369][T11762] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  352.854750][T11762] ntfs3(loop1): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  352.860194][T11762] ntfs3(loop1): It is recommened to use chkdsk.
[  353.081812][T11762] ntfs3(loop1): $Bitmap is corrupted.
[  353.272283][T11774] loop1: detected capacity change from 0 to 4096
[  353.319473][T11774] ntfs3(loop1): ino=5, "/" indx_read
[  353.321266][T11774] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  353.387819][T11776] loop1: detected capacity change from 0 to 16
[  353.399744][T11776] erofs (device loop1): mounted with root inode @ nid 36.
[  354.030600][T11772] Bluetooth: hci0: Opcode 0x080f failed: -4
[  354.330980][T11807] netlink: 'syz.1.2150': attribute type 3 has an invalid length.
[  354.371761][T11808] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  354.998371][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2157'.
[  355.027440][T11822] netlink: 'syz.0.2157': attribute type 1 has an invalid length.
[  355.030267][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2157'.
[  355.287587][ T5233] Bluetooth: hci0: command 0x080f tx timeout
[  355.600807][T11836] loop4: detected capacity change from 0 to 512
[  355.606461][T11836] EXT4-fs (loop4): #blocks per group too big: 65535
[  355.770884][T11850] ipvlan2: entered allmulticast mode
[  355.773223][T11850] syz_tun: entered allmulticast mode
[  356.313055][T11862] loop4: detected capacity change from 0 to 32768
[  356.322228][T11862] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  356.344675][T11862] XFS (loop4): Ending clean mount
[  356.360139][T11862] XFS (loop4): Quotacheck needed: Please wait.
[  356.398691][T11862] XFS (loop4): Quotacheck: Done.
[  356.455260][ T5895] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  356.455452][T11369] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  356.621863][ T5895] usb 1-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  356.635186][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.639656][ T5895] usb 1-1: Product: syz
[  356.641549][ T5895] usb 1-1: Manufacturer: syz
[  356.643538][ T5895] usb 1-1: SerialNumber: syz
[  356.651578][ T5895] usb 1-1: config 0 descriptor??
[  356.830612][T11891] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2184'.
[  356.841914][T11891] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2184'.
[  356.939251][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  357.743163][ T5895] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  357.747679][ T5895] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  357.752226][ T5895] asix 1-1:0.0: probe with driver asix failed with error -71
[  357.758003][ T5895] usb 1-1: USB disconnect, device number 24
[  357.803737][ T5233] Bluetooth: hci0: unexpected event for opcode 0x0804
[  357.881430][T11916] syz.1.2195 uses old SIOCAX25GETINFO
[  357.943062][T11920] loop4: detected capacity change from 0 to 1024
[  357.957743][T11920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  358.166881][ T5906] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  358.324948][ T5906] usb 2-1: Using ep0 maxpacket: 32
[  358.336530][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short
[  358.341229][ T5906] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  358.350049][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  358.359193][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.362552][ T5906] usb 2-1: Product: С
[  358.364291][ T5906] usb 2-1: Manufacturer: 긨탞鿝ﭘ켛괆勰ǿ㵖鼜뤱Ώ㼛䂨⸓삻䓑⏽﻽煌㈃쏛䙴풰୭鷅䅣퇥
[  358.400067][ T5906] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  358.402892][ T5906] cdc_ncm 2-1:1.0: bind() failure
[  358.416171][ T5906] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  358.418948][ T5906] cdc_ncm 2-1:1.1: bind() failure
[  358.585206][   T61] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  358.635516][ T5906] usb 2-1: USB disconnect, device number 12
[  358.855156][   T61] usb 1-1: Using ep0 maxpacket: 16
[  358.858341][   T61] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  358.861457][   T61] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  358.866634][   T61] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  358.871391][   T61] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  358.874388][   T61] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.877652][   T61] usb 1-1: Product: syz
[  358.879220][   T61] usb 1-1: Manufacturer: syz
[  358.880928][   T61] usb 1-1: SerialNumber: syz
[  359.017327][T11947] loop4: detected capacity change from 0 to 1024
[  359.026689][T11947] hfsplus: Unknown parameter 'nobari'
[  359.618534][   T61] usb 1-1: 0:2 : does not exist
[  360.104873][T11950] loop1: detected capacity change from 0 to 65536
[  360.136230][T11950] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  360.176771][T11950] XFS (loop1): Ending clean mount
[  360.255674][T11365] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  360.284046][   T61] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  360.365410][   T61] usb 1-1: USB disconnect, device number 25
[  360.414073][T11359] udevd[11359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  360.608322][T11970] loop4: detected capacity change from 0 to 256
[  360.692374][T11972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2215'.
[  360.910596][T11980] team_slave_0: entered promiscuous mode
[  360.912875][T11980] team_slave_1: entered promiscuous mode
[  360.918021][T11980] vlan2: entered promiscuous mode
[  360.920093][T11980] team0: entered promiscuous mode
[  360.987221][T11974] loop1: detected capacity change from 0 to 32768
[  361.039056][ T9765] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.055933][T11974] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.098865][T11974] XFS (loop1): Ending clean mount
[  361.106808][T11974] XFS (loop1): Quotacheck needed: Please wait.
[  361.152666][T11974] XFS (loop1): Quotacheck: Done.
[  361.156681][ T9765] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.201761][T11365] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  361.341210][ T9765] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.516165][ T9765] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  361.638601][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  361.644590][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  361.648660][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  361.652185][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  361.656000][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  361.816612][ T9765] bridge_slave_1: left allmulticast mode
[  361.819590][ T9765] bridge_slave_1: left promiscuous mode
[  361.822959][ T9765] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.834309][ T9765] bridge_slave_0: left allmulticast mode
[  361.839035][ T9765] bridge_slave_0: left promiscuous mode
[  361.841453][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.134192][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8881221a4000: rx timeout, send abort
[  362.371655][ T9765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.383178][ T9765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.385481][ T5906] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  362.394600][ T9765] bond0 (unregistering): Released all slaves
[  362.414661][T12024] : renamed from wg2 (while UP)
[  362.543929][ T5906] usb 1-1: Using ep0 maxpacket: 32
[  362.560728][ T5906] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  362.564260][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.573268][ T5906] usb 1-1: Product: syz
[  362.579522][ T5906] usb 1-1: Manufacturer: syz
[  362.581493][ T5906] usb 1-1: SerialNumber: syz
[  362.589359][ T5906] usb 1-1: config 0 descriptor??
[  362.596089][ T5906] xr_serial 1-1:0.0: skipping garbage
[  362.637650][    C0] vxcan1: j1939_tp_rxtimer: 0xffff8881221a4000: abort rx timeout. Force session deactivation
[  362.700194][T12008] chnl_net:caif_netlink_parms(): no params data found
[  362.797493][ T5906] usb 1-1: USB disconnect, device number 26
[  362.907023][ T9765] hsr_slave_0: left promiscuous mode
[  362.911279][ T9765] hsr_slave_1: left promiscuous mode
[  362.913426][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  362.923891][ T9765] batman_adv: batadv0: Removing interface: batadv_slave_0
[  362.932928][ T9765] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  362.941450][ T9765] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.977922][ T9765] veth1_macvtap: left promiscuous mode
[  362.979725][ T9765] veth0_macvtap: left promiscuous mode
[  362.981895][ T9765] veth1_vlan: left promiscuous mode
[  362.994111][ T9765] veth0_vlan: left promiscuous mode
[  363.467817][ T9765] team0 (unregistering): Port device team_slave_1 removed
[  363.528029][ T9765] team0 (unregistering): Port device team_slave_0 removed
[  363.687819][   T55] Bluetooth: hci1: command tx timeout
[  364.238384][T12008] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.241268][T12008] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.244258][T12008] bridge_slave_0: entered allmulticast mode
[  364.253103][T12008] bridge_slave_0: entered promiscuous mode
[  364.260856][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2248'.
[  364.273778][T12008] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.280897][T12008] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.283928][T12008] bridge_slave_1: entered allmulticast mode
[  364.306885][T12008] bridge_slave_1: entered promiscuous mode
[  364.430797][T12008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.453436][T12008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.527051][T12008] team0: Port device team_slave_0 added
[  364.540394][T12008] team0: Port device team_slave_1 added
[  364.594867][T12008] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.601014][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.621848][T12008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  364.633730][T12008] batman_adv: batadv0: Adding interface: batadv_slave_1
[  364.638787][T12008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  364.651464][T12008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  364.780481][T12008] hsr_slave_0: entered promiscuous mode
[  364.784239][T12008] hsr_slave_1: entered promiscuous mode
[  364.788077][T12008] debugfs: 'hsr0' already exists in 'hsr'
[  364.790539][T12008] Cannot create hsr debugfs directory
[  365.766984][   T55] Bluetooth: hci1: command tx timeout
[  366.090535][   T33] audit: type=1326 audit(1755282135.600:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.115904][   T33] audit: type=1326 audit(1755282135.600:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.132930][   T33] audit: type=1326 audit(1755282135.600:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.144646][   T33] audit: type=1326 audit(1755282135.600:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.171528][   T33] audit: type=1326 audit(1755282135.600:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.199164][   T33] audit: type=1326 audit(1755282135.600:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.209496][   T33] audit: type=1326 audit(1755282135.600:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.219195][   T33] audit: type=1326 audit(1755282135.600:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.228184][   T33] audit: type=1326 audit(1755282135.600:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.246678][   T33] audit: type=1326 audit(1755282135.600:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12073 comm="syz.0.2259" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  366.316142][ T5895] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  366.370918][T12008] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  366.378967][T12008] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  366.384847][T12008] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  366.391328][T12008] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  366.471591][ T5895] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  366.477873][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.499486][ T5895] usb 2-1: config 0 descriptor??
[  366.507151][ T5895] ums-realtek 2-1:0.0: USB Mass Storage device detected
[  366.532843][T12008] 8021q: adding VLAN 0 to HW filter on device bond0
[  366.552886][T12008] 8021q: adding VLAN 0 to HW filter on device team0
[  366.581976][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.584991][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.591530][ T6000] bridge0: port 2(bridge_slave_1) entered blocking state
[  366.594466][ T6000] bridge0: port 2(bridge_slave_1) entered forwarding state
[  366.714102][ T5889] usb 2-1: USB disconnect, device number 13
[  366.778207][T12008] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.782676][T12113] tipc: Started in network mode
[  366.784749][T12113] tipc: Node identity 2, cluster identity 4711
[  366.790366][T12113] tipc: Node number set to 2
[  367.028995][T12008] veth0_vlan: entered promiscuous mode
[  367.040050][T12008] veth1_vlan: entered promiscuous mode
[  367.079033][T12008] veth0_macvtap: entered promiscuous mode
[  367.084030][T12008] veth1_macvtap: entered promiscuous mode
[  367.096916][T12008] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.109769][T12008] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.119778][ T5716] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.123352][ T5716] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.129311][ T5716] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.132963][ T5716] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.232658][ T8957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.237094][ T8957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.259349][ T6000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.263207][ T6000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.336316][T12128] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  367.821368][T12133] loop1: detected capacity change from 0 to 32768
[  367.824824][T12133] btrfs: Deprecated parameter 'usebackuproot'
[  367.828781][T12133] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  367.833722][T12133] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2277 (12133)
[  367.845372][   T55] Bluetooth: hci1: command tx timeout
[  367.868399][T12133] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.884171][T12133] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  367.892024][T12133] BTRFS info (device loop1): using free-space-tree
[  367.954862][ T1092] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  367.981674][T12133] BTRFS error (device loop1): failed to load root extent
[  367.981711][T12133] BTRFS warning (device loop1): try to load backup roots slot 1
[  367.982058][   T32] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  367.982173][T12133] BTRFS warning (device loop1): couldn't read tree root
[  367.982186][T12133] BTRFS warning (device loop1): try to load backup roots slot 2
[  367.982403][   T32] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  367.982483][T12133] BTRFS warning (device loop1): couldn't read tree root
[  367.982496][T12133] BTRFS warning (device loop1): try to load backup roots slot 3
[  367.998315][T12133] BTRFS info (device loop1): rebuilding free space tree
[  368.012374][T12133] BTRFS info (device loop1): checking UUID tree
[  368.104454][T11365] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.507402][T12168] loop1: detected capacity change from 0 to 4096
[  368.550941][T12168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.968535][T11365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.422897][T12204] loop1: detected capacity change from 0 to 4096
[  369.435195][ T5892] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  369.454980][T12204] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  369.564707][T12210] Bluetooth: MGMT ver 1.23
[  369.571163][T12210] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  369.598882][ T5892] usb 1-1: Using ep0 maxpacket: 8
[  369.608017][T12214] openvswitch: netlink: IP tunnel dst address not specified
[  369.623679][ T5892] usb 1-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=dc.f4
[  369.633321][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.646863][ T5892] usb 1-1: Product: syz
[  369.648845][ T5892] usb 1-1: Manufacturer: syz
[  369.650808][ T5892] usb 1-1: SerialNumber: syz
[  369.659864][ T5892] usb 1-1: config 0 descriptor??
[  369.671085][ T5892] gl620a 1-1:0.0: probe with driver gl620a failed with error -22
[  369.878090][ T5892] usb 1-1: USB disconnect, device number 27
[  369.920704][T12218] loop1: detected capacity change from 0 to 40427
[  369.926369][   T55] Bluetooth: hci1: command tx timeout
[  369.935188][T12218] F2FS-fs (loop1): invalid crc value
[  370.004988][T12218] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  370.010308][T12218] F2FS-fs (loop1): Start checkpoint disabled!
[  370.014791][T12218] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  370.131147][T12225] bio_check_eod: 2 callbacks suppressed
[  370.131163][T12225] syz.1.2302: attempt to access beyond end of device
[  370.131163][T12225] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  370.527890][ T1088] kworker/u9:4: attempt to access beyond end of device
[  370.527890][ T1088] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  370.535604][T12238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  370.550480][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u9:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  370.550501][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  370.550509][ T1088] Workqueue: writeback wb_workfn (flush-7:1)
[  370.550532][ T1088] Call Trace:
[  370.550538][ T1088]  <TASK>
[  370.550543][ T1088]  dump_stack_lvl+0x189/0x250
[  370.550563][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.550578][ T1088]  ? __pfx_queue_work_on+0x10/0x10
[  370.550591][ T1088]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  370.550608][ T1088]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  370.550631][ T1088]  f2fs_handle_critical_error+0x37c/0x540
[  370.550654][ T1088]  f2fs_write_end_io+0x886/0xb60
[  370.550680][ T1088]  __submit_merged_bio+0x27a/0x6a0
[  370.550702][ T1088]  __submit_merged_write_cond+0x255/0x530
[  370.550725][ T1088]  f2fs_write_data_pages+0x261d/0x3000
[  370.550767][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.550795][ T1088]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  370.550835][ T1088]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  370.550862][ T1088]  ? trace_f2fs_writepages+0x7f/0x200
[  370.550879][ T1088]  ? f2fs_write_node_pages+0x478/0x6e0
[  370.550900][ T1088]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  370.550926][ T1088]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  370.550945][ T1088]  do_writepages+0x32e/0x550
[  370.550966][ T1088]  ? reacquire_held_locks+0x127/0x1d0
[  370.550978][ T1088]  ? writeback_sb_inodes+0x384/0x1010
[  370.550999][ T1088]  __writeback_single_inode+0x145/0xff0
[  370.551015][ T1088]  ? do_raw_spin_unlock+0x4d/0x240
[  370.551033][ T1088]  writeback_sb_inodes+0x6c7/0x1010
[  370.551069][ T1088]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  370.551116][ T1088]  ? rcu_is_watching+0x15/0xb0
[  370.551136][ T1088]  wb_writeback+0x43b/0xaf0
[  370.551159][ T1088]  ? queue_io+0x321/0x590
[  370.551176][ T1088]  ? __pfx_wb_writeback+0x10/0x10
[  370.551198][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  370.551217][ T1088]  wb_workfn+0x409/0xef0
[  370.551269][ T1088]  ? __pfx_wb_workfn+0x10/0x10
[  370.551288][ T1088]  ? __lock_acquire+0xab9/0xd20
[  370.551315][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  370.551332][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  370.551345][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  370.551356][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  370.551370][ T1088]  process_scheduled_works+0xae1/0x17b0
[  370.551404][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  370.551429][ T1088]  worker_thread+0x8a0/0xda0
[  370.551462][ T1088]  kthread+0x711/0x8a0
[  370.551480][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  370.551492][ T1088]  ? __pfx_kthread+0x10/0x10
[  370.551509][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  370.551524][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.551539][ T1088]  ? __pfx_kthread+0x10/0x10
[  370.551555][ T1088]  ret_from_fork+0x3fc/0x770
[  370.551571][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  370.551588][ T1088]  ? __switch_to_asm+0x39/0x70
[  370.551603][ T1088]  ? __switch_to_asm+0x33/0x70
[  370.551617][ T1088]  ? __pfx_kthread+0x10/0x10
[  370.551633][ T1088]  ret_from_fork_asm+0x1a/0x30
[  370.551661][ T1088]  </TASK>
[  370.551666][ T1088] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  370.822202][T11171] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  370.834364][T12251] syzkaller1: entered promiscuous mode
[  370.839701][T12251] syzkaller1: entered allmulticast mode
[  370.973737][T12253] Option 'TXƮ' to dns_resolver key: bad/missing value
[  370.991911][T11171] usb 7-1: Using ep0 maxpacket: 16
[  371.002086][T11171] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  371.009535][T11171] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  371.016311][T11171] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  371.019556][T12255] loop1: detected capacity change from 0 to 512
[  371.024281][T12255] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  371.028523][T11171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.028541][T11171] usb 7-1: Product: syz
[  371.028552][T11171] usb 7-1: Manufacturer: syz
[  371.045889][T12255] EXT4-fs (loop1): 1 truncate cleaned up
[  371.061102][T12255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  371.068850][T11171] usb 7-1: SerialNumber: syz
[  371.108495][T11365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.265276][ T6149] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  371.428824][ T6149] usb 1-1: Using ep0 maxpacket: 8
[  371.436527][ T6149] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.440705][ T6149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  371.444925][ T6149] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  371.449462][ T6149] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  371.453470][ T6149] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  371.477403][ T6149] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8
[  371.481320][ T6149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.484740][ T6149] usb 1-1: Product: syz
[  371.495374][ T6149] usb 1-1: Manufacturer: syz
[  371.497416][ T6149] usb 1-1: SerialNumber: syz
[  371.503046][ T6149] usb 1-1: config 0 descriptor??
[  371.512840][ T6149] redrat3 1-1:0.0: Couldn't find all endpoints
[  371.708741][ T6149] usb 7-1: USB disconnect, device number 7
[  371.742264][   T47] usb 1-1: USB disconnect, device number 28
[  372.630111][T12287] binder: 12282:12287 ioctl 4018620d 0 returned -22
[  372.961656][T12291] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  373.023878][T12295] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2335'.
[  373.139363][T12299] loop1: detected capacity change from 0 to 4096
[  373.155253][T12301] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  373.356541][T12307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2340'.
[  373.785340][    T9] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  373.795242][T11171] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  373.948381][T11171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  373.953174][T11171] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  373.961421][T11171] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  373.966626][    T9] usb 1-1: config index 0 descriptor too short (expected 63186, got 210)
[  373.970231][    T9] usb 1-1: config 0 has an invalid interface number: 106 but max is 0
[  373.973754][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  373.981540][T11171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.986868][    T9] usb 1-1: config 0 has no interface number 0
[  373.990438][T11171] usb 2-1: config 0 descriptor??
[  373.999739][    T9] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  374.003997][    T9] usb 1-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  374.010906][    T9] usb 1-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  374.016862][    T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  374.022550][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.029382][    T9] usb 1-1: config 0 descriptor??
[  374.058288][    T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  374.246796][    T9] usb 1-1: USB disconnect, device number 29
[  374.249790][ T5716] usb 1-1: Failed to submit usb control message: -71
[  374.256529][ T5716] usb 1-1: unable to send the bmi data to the device: -71
[  374.259548][ T5716] usb 1-1: unable to get target info from device
[  374.262130][ T5716] usb 1-1: could not get target info (-71)
[  374.264745][ T5716] usb 1-1: could not probe fw (-71)
[  374.412127][T11171] cherry 0003:046A:0023.0011: item fetching failed at offset 5/7
[  374.418478][T11171] cherry 0003:046A:0023.0011: probe with driver cherry failed with error -22
[  374.609728][   T47] usb 2-1: USB disconnect, device number 14
[  374.883305][T12339] loop6: detected capacity change from 0 to 128
[  374.888897][T12339] Invalid source name
[  374.888907][T12339] UBIFS error (pid: 12339): cannot open "/dev/loop6", error -22
[  374.984484][T12343] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2357'.
[  376.958207][T12383] loop1: detected capacity change from 0 to 16
[  377.018029][T12383] erofs (device loop1): mounted with root inode @ nid 36.
[  377.070738][T12387] loop6: detected capacity change from 0 to 512
[  377.074588][T12387] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  377.075194][   T33] kauditd_printk_skb: 19 callbacks suppressed
[  377.075207][   T33] audit: type=1400 audit(1755282146.560:82): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26333F9B9D8B pid=12381 comm="syz.1.2373"
[  377.093012][T12387] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  377.103153][T12387] EXT4-fs (loop6): group descriptors corrupted!
[  377.339594][T12405] libceph: resolve 'R' (ret=-3): failed
[  377.375412][    T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  377.538145][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  377.544881][    T9] usb 2-1: not running at top speed; connect to a high speed hub
[  377.553090][    T9] usb 2-1: config 4 has an invalid interface number: 156 but max is 0
[  377.562048][    T9] usb 2-1: config 4 has no interface number 0
[  377.564682][    T9] usb 2-1: config 4 interface 156 has no altsetting 0
[  377.575232][    T9] usb 2-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  377.579081][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.582483][    T9] usb 2-1: Product: syz
[  377.584222][    T9] usb 2-1: Manufacturer: syz
[  377.586514][    T9] usb 2-1: SerialNumber: syz
[  377.815621][    T9] usb 2-1: USB disconnect, device number 15
[  378.250820][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  378.253201][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  378.993317][   T55] Bluetooth: hci2: Malformed LE Event: 0x1d
[  379.278352][T12448] loop1: detected capacity change from 0 to 512
[  379.306181][T12448] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2402: iget: bad extended attribute block 1
[  379.313013][T12448] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2402: couldn't read orphan inode 15 (err -117)
[  379.323600][T12448] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.335247][ T6149] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  379.353323][T11365] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.488722][ T6149] usb 7-1: Using ep0 maxpacket: 16
[  379.494717][ T6149] usb 7-1: config 0 has an invalid interface number: 237 but max is 0
[  379.499071][ T6149] usb 7-1: config 0 has no interface number 0
[  379.501454][ T6149] usb 7-1: config 0 interface 237 has no altsetting 0
[  379.510659][ T6149] usb 7-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice= 6.ad
[  379.514445][ T6149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.522497][ T6149] usb 7-1: Product: syz
[  379.524365][ T6149] usb 7-1: Manufacturer: syz
[  379.528581][ T6149] usb 7-1: SerialNumber: syz
[  379.534620][ T6149] usb 7-1: config 0 descriptor??
[  379.544742][ T6149] snd_usb_podhd 7-1:0.237: Line 6 POD HD300 found
[  379.748796][ T6149] snd_usb_podhd 7-1:0.237: cannot get proper max packet size
[  379.752243][ T6149] snd_usb_podhd 7-1:0.237: Line 6 POD HD300 now disconnected
[  379.776977][ T6149] snd_usb_podhd 7-1:0.237: probe with driver snd_usb_podhd failed with error -22
[  379.955968][ T6149] usb 7-1: USB disconnect, device number 8
[  380.005264][ T5892] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  380.186669][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.190970][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  380.197683][ T5892] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  380.204009][ T5892] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  380.208056][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.211459][ T5892] usb 2-1: Product: syz
[  380.213207][ T5892] usb 2-1: Manufacturer: syz
[  380.216788][ T5892] usb 2-1: SerialNumber: syz
[  380.224757][ T5892] usb 2-1: bad CDC descriptors
[  380.385400][ T6149] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  380.437193][ T5892] usb 2-1: USB disconnect, device number 16
[  380.538702][ T6149] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.545091][ T6149] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  380.553354][ T6149] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  380.558788][ T6149] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  380.561862][ T6149] usb 1-1: SerialNumber: syz
[  380.577863][ T6149] usb 1-1: 0:2 : does not exist
[  380.699863][T12480] loop6: detected capacity change from 0 to 32768
[  380.716285][T12480] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  380.744652][T12008] ocfs2: Unmounting device (7,6) on (node local)
[  380.993152][    T9] usb 1-1: USB disconnect, device number 30
[  381.911027][T12535] loop1: detected capacity change from 0 to 32768
[  381.993765][T12535] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  381.993786][T12535]   allowing incompatible features above 0.0: (unknown version)
[  381.993793][T12535]   features: 
[  382.011091][T12535] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  382.014440][T12535] bcachefs (loop1): initializing new filesystem
[  382.022913][T12535] bcachefs (loop1): going read-write
[  382.031852][T12535] bcachefs (loop1): marking superblocks
[  382.049982][T12535] bcachefs (loop1): initializing freespace
[  382.055172][T12535] bcachefs (loop1): done initializing freespace
[  382.062169][T12535] bcachefs (loop1): reading snapshots table
[  382.064553][T12535] bcachefs (loop1): reading snapshots done
[  382.088725][T12535] bcachefs (loop1): done starting filesystem
[  382.167255][T11365] bcachefs (loop1): shutting down
[  382.169765][T11365] bcachefs (loop1): going read-only
[  382.172231][T11365] bcachefs (loop1): finished waiting for writes to stop
[  382.178236][T11365] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  382.233776][T11365] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  382.239589][T11365] bcachefs (loop1): clean shutdown complete, journal seq 4
[  382.243814][T11365] bcachefs (loop1): marking filesystem clean
[  382.281267][T11365] bcachefs (loop1): shutdown complete
[  383.281031][ T6149] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  383.325822][T12593] 9pnet_fd: p9_fd_create_unix (12593): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  383.437164][ T6149] usb 7-1: Using ep0 maxpacket: 32
[  383.476817][    C1] vkms_vblank_simulate: vblank timer overrun
[  383.493498][ T6149] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  383.502022][ T6149] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  383.506270][ T6149] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.509779][ T6149] usb 7-1: Product: syz
[  383.511756][ T6149] usb 7-1: Manufacturer: syz
[  383.513658][ T6149] usb 7-1: SerialNumber: syz
[  383.528283][ T6149] usb 7-1: config 0 descriptor??
[  383.531514][T12586] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  383.565730][ T6149] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input21
[  383.791656][ T6149] usb 7-1: USB disconnect, device number 9
[  383.791734][    C1] usbtouchscreen 7-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  384.563807][T12613] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  384.574574][T12613] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  384.622248][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  384.629165][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  384.635990][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  384.643733][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  384.651995][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  384.796625][T12618] loop6: detected capacity change from 0 to 512
[  384.806251][T12618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  384.859117][T12618] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.864766][T12618] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.924190][T12618] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  385.036755][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.282179][T12614] chnl_net:caif_netlink_parms(): no params data found
[  385.561833][T12614] bridge0: port 1(bridge_slave_0) entered blocking state
[  385.568105][T12614] bridge0: port 1(bridge_slave_0) entered disabled state
[  385.573855][T12614] bridge_slave_0: entered allmulticast mode
[  385.584122][T12614] bridge_slave_0: entered promiscuous mode
[  385.596353][T12614] bridge0: port 2(bridge_slave_1) entered blocking state
[  385.599226][T12614] bridge0: port 2(bridge_slave_1) entered disabled state
[  385.603167][T12614] bridge_slave_1: entered allmulticast mode
[  385.613355][T12614] bridge_slave_1: entered promiscuous mode
[  385.686301][T12614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  385.691679][T12614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  385.729809][T12614] team0: Port device team_slave_0 added
[  385.732981][T12614] team0: Port device team_slave_1 added
[  385.750041][T12639] loop6: detected capacity change from 0 to 4096
[  385.766889][T12642] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  385.780549][T12614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  385.783567][T12614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.805514][T12614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  385.811399][T12639] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  385.811551][T12614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  385.824943][T12614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  385.834781][T12639] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[  385.836569][T12614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  385.903680][T12614] hsr_slave_0: entered promiscuous mode
[  385.926721][T12614] hsr_slave_1: entered promiscuous mode
[  385.929306][T12614] debugfs: 'hsr0' already exists in 'hsr'
[  385.931745][T12614] Cannot create hsr debugfs directory
[  386.090585][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2491'.
[  386.181242][T12668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2495'.
[  386.260315][T12672] netlink: 248 bytes leftover after parsing attributes in process `syz.6.2497'.
[  386.293854][T12674] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  386.306891][T12674] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  386.725509][ T5233] Bluetooth: hci0: command tx timeout
[  386.738034][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2506'.
[  386.813913][T12614] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  386.827629][T12614] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  386.838598][T12614] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  386.847041][T12614] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  386.931108][T12614] 8021q: adding VLAN 0 to HW filter on device bond0
[  386.951022][T12614] 8021q: adding VLAN 0 to HW filter on device team0
[  386.959972][ T6000] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.963013][ T6000] bridge0: port 1(bridge_slave_0) entered forwarding state
[  386.974431][  T713] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.977734][  T713] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.106237][T12614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.128876][ T5906] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  387.235182][T12614] veth0_vlan: entered promiscuous mode
[  387.241089][T12614] veth1_vlan: entered promiscuous mode
[  387.267743][T12614] veth0_macvtap: entered promiscuous mode
[  387.273658][T12614] veth1_macvtap: entered promiscuous mode
[  387.290791][T12614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.293157][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  387.302372][T12614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.306803][ T5906] usb 1-1: not running at top speed; connect to a high speed hub
[  387.311266][ T9765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.321843][ T9765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.326238][ T5906] usb 1-1: config 4 has an invalid interface number: 32 but max is 0
[  387.329870][ T5906] usb 1-1: config 4 has no interface number 0
[  387.333405][ T9765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.346621][ T9765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  387.352280][ T5906] usb 1-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  387.358279][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.362042][ T5906] usb 1-1: Product: syz
[  387.364098][ T5906] usb 1-1: Manufacturer: syz
[  387.368819][ T5906] usb 1-1: SerialNumber: syz
[  387.461677][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.465633][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.508378][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  387.511814][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  387.617230][ T5906] usb 1-1: Found UVC 0.02 device syz (17dc:0202)
[  387.621533][ T5906] usb 1-1: No valid video chain found.
[  387.629844][ T5906] usb 1-1: USB disconnect, device number 31
[  388.095628][ T5906] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  388.267200][ T5906] usb 7-1: config 0 has an invalid interface number: 212 but max is 0
[  388.280822][ T5906] usb 7-1: config 0 has no interface number 0
[  388.283419][ T5906] usb 7-1: config 0 interface 212 has no altsetting 0
[  388.289715][ T5906] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  388.299655][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.310565][ T5906] usb 7-1: Product: syz
[  388.321107][ T5906] usb 7-1: Manufacturer: syz
[  388.330188][ T5906] usb 7-1: SerialNumber: syz
[  388.348572][ T5906] usb 7-1: config 0 descriptor??
[  388.362720][ T5906] ftdi_sio 7-1:0.212: FTDI USB Serial Device converter detected
[  388.376240][ T5906] usb 7-1: Detected FT4232HP
[  388.573673][ T5906] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  388.578266][ T5906] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  388.585988][ T5906] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  388.597781][ T5906] usb 7-1: USB disconnect, device number 10
[  388.606128][ T5906] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  388.672954][ T5906] ftdi_sio 7-1:0.212: device disconnected
[  388.805832][ T5233] Bluetooth: hci0: command tx timeout
[  389.284204][T12764] loop6: detected capacity change from 0 to 2048
[  389.287673][    T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  389.293962][T12764] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  389.320374][T12765] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  389.441159][    T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  389.448585][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  389.458863][    T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  389.462726][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.475556][    T9] usb 1-1: Product: syz
[  389.477425][    T9] usb 1-1: Manufacturer: syz
[  389.481396][    T9] usb 1-1: SerialNumber: syz
[  389.498407][    T9] usb 1-1: config 0 descriptor??
[  389.522195][    T9] usb 1-1: selecting invalid altsetting 0
[  389.558099][T12773] comedi comedi4: bad chanlist[0]=0x032c0000 chan=0 range length=2
[  389.698875][T12779] loop6: detected capacity change from 0 to 1024
[  389.733134][ T5906] usb 1-1: USB disconnect, device number 32
[  389.768414][T12779] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  389.800570][   T33] audit: type=1800 audit(1755282159.310:83): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2540" name="bus" dev="loop6" ino=18 res=0 errno=0
[  389.806671][T12779] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.2540: Allocating blocks 385-513 which overlap fs metadata
[  389.843293][T12779] EXT4-fs (loop6): pa ffff88802b59b9f8: logic 16, phys. 129, len 24
[  389.848426][T12779] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  389.861183][T12779] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 1
[  389.875726][T12779] EXT4-fs (loop6): This should not happen!! Data will be lost
[  389.875726][T12779] 
[  389.902608][T12788] loop5: detected capacity change from 0 to 1024
[  389.912519][T12788] EXT4-fs: inline encryption not supported
[  389.948273][T12788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  389.960701][T12008] Trying to write to read-only block-device loop6
[  389.968943][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.296841][    T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  390.455176][    T9] usb 7-1: Using ep0 maxpacket: 8
[  390.462311][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  390.470168][    T9] usb 7-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  390.473715][    T9] usb 7-1: Product: syz
[  390.477893][    T9] usb 7-1: Manufacturer: syz
[  390.479538][    T9] usb 7-1: SerialNumber: syz
[  390.499637][    T9] usb 7-1: config 0 descriptor??
[  390.510980][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  390.555404][   T61] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  390.710775][   T61] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.739101][   T61] usb 1-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  390.743108][   T61] usb 1-1: config 2 interface 0 has no altsetting 0
[  390.755326][   T61] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  390.769882][   T61] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.888044][ T5233] Bluetooth: hci0: command tx timeout
[  390.889701][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.078129][T12802] loop5: detected capacity change from 0 to 8192
[  391.087383][T12802] FAT-fs (loop5): bogus logical sector size 0
[  391.089872][T12802] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  391.093569][T12802] FAT-fs (loop5): Can't find a valid FAT filesystem
[  391.162399][    T9] input: gspca_zc3xx as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22
[  391.235196][   T61] apple 0003:05AC:027A.0012: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0
[  391.361555][   T61] usb 7-1: USB disconnect, device number 11
[  391.362160][T12807] vcan0: entered allmulticast mode
[  391.372348][T12807] vcan0: left allmulticast mode
[  391.427821][ T5906] usb 1-1: USB disconnect, device number 33
[  391.502561][T12811] loop5: detected capacity change from 0 to 512
[  391.511397][T12811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  391.522449][T12811] EXT4-fs (loop5): 1 truncate cleaned up
[  391.526538][T12811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.545867][T12811] syz.5.2551 (pid 12811) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  391.552765][T12811] EXT4-fs (loop5): shut down requested (2)
[  391.586980][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.683051][T12815] loop5: detected capacity change from 0 to 4096
[  391.695445][T12815] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  391.940372][T12823] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2556'.
[  392.585387][   T61] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  392.735525][T12865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2577'.
[  392.740609][   T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.751755][   T61] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.761100][   T61] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  392.772344][   T61] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  392.777046][   T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.783778][   T61] usb 7-1: config 0 descriptor??
[  392.813873][T12867] netlink: 'syz.0.2578': attribute type 39 has an invalid length.
[  392.966403][   T55] Bluetooth: hci0: command tx timeout
[  393.208899][   T61] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  393.285190][T11171] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  393.435164][T11171] usb 1-1: Using ep0 maxpacket: 8
[  393.439241][T11171] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  393.442777][T11171] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  393.446946][T11171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  393.451368][T11171] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  393.456585][T11171] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  393.462263][T11171] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  393.466414][T11171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.483156][   T61] usb 7-1: USB disconnect, device number 12
[  393.899643][ T5895] usb 1-1: USB disconnect, device number 34
[  394.039382][T12873] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2581'.
[  394.171746][T12877] geneve2: entered promiscuous mode
[  394.173891][T12877] geneve2: entered allmulticast mode
[  394.518195][T12879] loop6: detected capacity change from 0 to 32768
[  394.521864][T12879] XFS: noikeep mount option is deprecated.
[  394.655253][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  394.658169][ T5233] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  394.788705][T12893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2591'.
[  394.843090][T12893] 8021q: adding VLAN 0 to HW filter on device bond1
[  394.870533][T12901] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input23
[  394.872644][T12898] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  395.324844][T12899] loop6: detected capacity change from 0 to 65536
[  397.036261][T10242] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  397.235683][T10242] usb 6-1: Using ep0 maxpacket: 8
[  397.253735][T10242] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15
[  397.264520][T10242] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  397.288496][T10242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  397.303700][T10242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  397.324438][T10242] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  397.332643][T10242] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.344035][T10242] usb 6-1: Product: syz
[  397.350137][T10242] usb 6-1: Manufacturer: syz
[  397.352671][T10242] usb 6-1: SerialNumber: syz
[  397.375143][T10242] usb 6-1: config 0 descriptor??
[  397.378757][T12927] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  397.789834][T10242] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  397.887154][T10242] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input24
[  398.221754][    C1] powermate: config urb returned -71
[  398.224715][    C1] powermate: config urb returned -71
[  398.227406][    C1] powermate: config urb returned -71
[  398.258233][T10242] usb 6-1: USB disconnect, device number 19
[  398.258323][    C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  398.860790][T12987] deleting an unspecified loop device is not supported.
[  398.978036][T12996] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  399.420162][   T47] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  399.488467][   T61] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  399.575198][   T47] usb 6-1: Using ep0 maxpacket: 32
[  399.579672][   T47] usb 6-1: unable to get BOS descriptor or descriptor too short
[  399.583999][   T47] usb 6-1: config 117 has an invalid interface number: 249 but max is 0
[  399.588301][   T47] usb 6-1: config 117 has no interface number 0
[  399.591030][   T47] usb 6-1: config 117 interface 249 altsetting 99 endpoint 0xF has an invalid bInterval 0, changing to 7
[  399.595647][   T47] usb 6-1: config 117 interface 249 altsetting 99 endpoint 0xF has invalid maxpacket 42073, setting to 1024
[  399.600447][   T47] usb 6-1: config 117 interface 249 has no altsetting 0
[  399.606132][   T47] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=d5.d1
[  399.609796][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.613238][   T47] usb 6-1: Product: syz
[  399.615307][   T47] usb 6-1: Manufacturer: syz
[  399.617515][   T47] usb 6-1: SerialNumber: syz
[  399.629765][T13003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  399.651424][   T61] usb 7-1: config 0 has an invalid interface number: 227 but max is 0
[  399.654783][   T61] usb 7-1: config 0 has no interface number 0
[  399.657691][   T61] usb 7-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=ab.24
[  399.661248][   T61] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.668297][   T61] usb 7-1: config 0 descriptor??
[  399.845475][   T47] ati_remote 6-1:117.249: ati_remote_probe: Unexpected endpoint_in
[  399.852752][   T47] usb 6-1: USB disconnect, device number 20
[  399.879485][   T61] snd-usb-audio 7-1:0.227: probe with driver snd-usb-audio failed with error -71
[  399.891384][   T61] usb 7-1: USB disconnect, device number 13
[  400.315306][T10242] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  400.371722][T13011] syz.5.2641 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  400.475235][T10242] usb 1-1: Using ep0 maxpacket: 16
[  400.481317][T10242] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.496407][T10242] usb 1-1: config 0 has no interfaces?
[  400.504188][T10242] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  400.511932][T10242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.525381][T10242] usb 1-1: config 0 descriptor??
[  400.692022][T13020] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  400.701665][T13020] qnx6: wrong signature (magic) in superblock #1.
[  400.704648][T13020] qnx6: unable to read the first superblock
[  400.864480][T11171] usb 1-1: USB disconnect, device number 35
[  401.841501][T13027] loop5: detected capacity change from 0 to 512
[  401.891272][T13027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  401.942931][T13027] EXT4-fs (loop5): orphan cleanup on readonly fs
[  402.019406][T13027] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2647: bg 0: block 248: padding at end of block bitmap is not set
[  402.057298][T13027] Quota error (device loop5): write_blk: dquota write failed
[  402.060512][T13027] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  402.064670][T13027] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2647: Failed to acquire dquot type 1
[  402.108543][T13027] EXT4-fs (loop5): 1 truncate cleaned up
[  402.116160][T13027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  402.222974][T13027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  402.227714][T13027] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring
[  402.239674][T13027] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  402.280315][T13027] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  402.295983][T13027] ext4 filesystem being remounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  402.382787][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  402.487050][T13044] loop5: detected capacity change from 0 to 64
[  402.567200][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  402.567252][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x5d
[  402.570457][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  402.573479][ T5233] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  402.577324][ T5233] Bluetooth: hci1: Malformed LE Event: 0x0d
[  402.609194][T13045] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2655'.
[  402.641763][T13047] program syz.0.2656 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  403.025170][   T47] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  403.189508][   T47] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  403.201731][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.218859][   T47] usb 6-1: Product: syz
[  403.227361][   T47] usb 6-1: Manufacturer: syz
[  403.235293][   T47] usb 6-1: SerialNumber: syz
[  403.250443][   T47] usb 6-1: config 0 descriptor??
[  403.506758][ T5895] usb 6-1: USB disconnect, device number 21
[  404.268323][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2666'.
[  404.322303][T13070] loop5: detected capacity change from 0 to 2048
[  404.344716][T13070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  404.374077][T13070] UDF-fs: error (device loop5): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  405.078887][T11171] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  405.245322][T11171] usb 7-1: Using ep0 maxpacket: 8
[  405.259813][T11171] usb 7-1: config 7 has an invalid interface number: 190 but max is 0
[  405.263453][T11171] usb 7-1: config 7 has no interface number 0
[  405.273275][T11171] usb 7-1: config 7 interface 190 has no altsetting 0
[  405.285985][T11171] usb 7-1: New USB device found, idVendor=0af0, idProduct=8400, bcdDevice=c0.15
[  405.305383][T11171] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.312404][T11171] usb 7-1: Product: syz
[  405.314306][T11171] usb 7-1: Manufacturer: syz
[  405.324288][T11171] usb 7-1: SerialNumber: syz
[  405.628287][T13079] loop5: detected capacity change from 0 to 40427
[  405.636466][T11171] hso 7-1:7.190: Not our interface
[  405.640782][T13079] F2FS-fs (loop5): build fault injection rate: 7
[  405.647850][T13079] F2FS-fs (loop5): build fault injection type: 0xeffa
[  405.655810][T11171] usb 7-1: USB disconnect, device number 14
[  405.702267][T13079] F2FS-fs (loop5): invalid crc value
[  405.706720][T13079] F2FS-fs (loop5): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  405.714185][T13079] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  406.984018][T13102] ntfs3(nullb0): Primary boot signature is not NTFS.
[  406.987252][T13102] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  407.055372][ T5895] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  407.227645][ T5895] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  407.230769][ T5895] usb 6-1: config 0 has no interface number 0
[  407.233157][ T5895] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  407.240392][ T5895] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  407.244267][ T5895] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  407.249708][ T5895] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  407.254194][ T5895] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  407.263024][ T5895] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  407.269068][ T5895] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  407.273034][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.281802][ T5895] usb 6-1: config 0 descriptor??
[  407.289440][T13100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  407.295537][T13100] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  407.308117][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'.
[  407.310983][ T5895] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  407.456989][T13120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2689'.
[  407.532907][    C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending?
[  407.543542][    T9] usb 6-1: USB disconnect, device number 22
[  407.557132][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  407.870501][T13128] loop6: detected capacity change from 0 to 32768
[  408.131617][T13138] loop6: detected capacity change from 0 to 1024
[  408.703034][T13162] loop5: detected capacity change from 0 to 256
[  408.776787][T13162] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  408.794142][   T33] audit: type=1800 audit(1755282178.300:84): pid=13162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2710" name="file1" dev="loop5" ino=1048709 res=0 errno=0
[  409.036663][T13166] loop5: detected capacity change from 0 to 32768
[  409.146052][T13176] loop5: detected capacity change from 0 to 128
[  409.149498][T13176] FAT-fs (loop5): bread failed, FSINFO block (sector = 54136)
[  409.213302][   T40] Bluetooth: hci3: Frame reassembly failed (-84)
[  409.272461][T13182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2720'.
[  409.283105][T13184] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  409.290446][T13184] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  409.564743][T13194] loop6: detected capacity change from 0 to 1024
[  410.037558][T13197] loop6: detected capacity change from 0 to 4096
[  410.418393][T13203] loop6: detected capacity change from 0 to 32768
[  410.422427][T13203] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2728 (13203)
[  410.428144][T13203] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  411.295611][   T55] Bluetooth: hci3: command 0xfc11 tx timeout
[  411.298685][ T5233] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  412.401779][T13285] loop5: detected capacity change from 0 to 512
[  412.410974][T13285] EXT4-fs: Ignoring removed oldalloc option
[  412.426943][T13285] EXT4-fs (loop5): 1 truncate cleaned up
[  412.437121][T13285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  412.495236][   T33] audit: type=1800 audit(1755282181.980:85): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2768" name="file1" dev="loop5" ino=15 res=0 errno=0
[  412.537331][T11171] libceph: connect (1)[c::]:6789 error -101
[  412.543649][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.549996][T11171] libceph: mon0 (1)[c::]:6789 connect error
[  412.620662][T13291] ceph: No mds server is up or the cluster is laggy
[  412.665624][ T5895] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  412.860807][ T5895] usb 1-1: Using ep0 maxpacket: 8
[  412.881833][ T5895] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  412.888813][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.898900][ T5895] usb 1-1: Product: syz
[  412.900567][ T5895] usb 1-1: Manufacturer: syz
[  412.902317][ T5895] usb 1-1: SerialNumber: syz
[  412.912730][ T5895] usb 1-1: config 0 descriptor??
[  412.943322][ T5895] usb 1-1: selecting invalid altsetting 3
[  412.954920][ T5895] comedi comedi5: could not set alternate setting 3 in high speed
[  412.959014][ T5895] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device.
[  412.978575][ T5895] usbdux 1-1:0.0: probe with driver usbdux failed with error -22
[  413.133876][ T5895] usb 1-1: USB disconnect, device number 36
[  413.332347][T13303] loop5: detected capacity change from 0 to 1024
[  413.382746][T13303] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  413.401155][T13303] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  413.417734][T13303] JBD2: no valid journal superblock found
[  413.421402][T13303] EXT4-fs (loop5): Could not load journal inode
[  413.914941][T13311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2778'.
[  414.128099][T13321] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  414.181961][T13325] netlink: 388 bytes leftover after parsing attributes in process `syz.6.2785'.
[  414.296023][T13335] loop6: detected capacity change from 0 to 256
[  414.394889][T13341] loop5: detected capacity change from 0 to 4096
[  414.400257][T13341] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  414.407384][   T47] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  414.420054][T13341] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  414.424173][T13341] ntfs3(loop5): Failed to load root (-22).
[  414.565188][   T47] usb 1-1: Using ep0 maxpacket: 8
[  414.569380][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  414.577521][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  414.581807][   T47] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  414.590482][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.597099][   T47] usb 1-1: config 0 descriptor??
[  414.605511][   T47] hso 1-1:0.0: Can't find BULK IN endpoint
[  414.724476][T13355] loop5: detected capacity change from 0 to 4096
[  414.815144][T11171] usb 1-1: USB disconnect, device number 37
[  414.933346][T13370] loop5: detected capacity change from 0 to 256
[  414.964697][T13370] FAT-fs (loop5): Directory bread(block 64) failed
[  414.973083][T13370] FAT-fs (loop5): Directory bread(block 65) failed
[  414.976859][T13370] FAT-fs (loop5): Directory bread(block 66) failed
[  414.979500][T13370] FAT-fs (loop5): Directory bread(block 67) failed
[  414.982919][T13370] FAT-fs (loop5): Directory bread(block 68) failed
[  414.986665][T13370] FAT-fs (loop5): Directory bread(block 69) failed
[  414.989219][T13370] FAT-fs (loop5): Directory bread(block 70) failed
[  414.991585][T13370] FAT-fs (loop5): Directory bread(block 71) failed
[  414.993699][T13370] FAT-fs (loop5): Directory bread(block 72) failed
[  414.996587][T13370] FAT-fs (loop5): Directory bread(block 73) failed
[  415.013717][   T33] audit: type=1800 audit(1755282184.520:86): pid=13370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2805" name="file1" dev="loop5" ino=1048710 res=0 errno=0
[  415.027614][T13370] syz.5.2805: attempt to access beyond end of device
[  415.027614][T13370] loop5: rw=0, sector=1768, nr_sectors = 4 limit=256
[  415.190336][T13382] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  415.325298][   T47] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  415.485174][   T47] usb 6-1: Using ep0 maxpacket: 16
[  415.499959][   T47] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00
[  415.509445][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.512724][   T47] usb 6-1: Product: syz
[  415.514474][   T47] usb 6-1: Manufacturer: syz
[  415.517620][   T47] usb 6-1: SerialNumber: syz
[  415.524678][   T47] usb 6-1: config 0 descriptor??
[  415.532597][   T47] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  415.539561][   T47] usb 6-1: Detected FT4233HP
[  415.715599][T11171] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  415.722738][T13402] loop6: detected capacity change from 0 to 1024
[  415.733673][T13402] hfsplus: Unknown parameter 'dns_resolver'
[  415.739554][   T47] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  415.743144][   T47] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  415.752771][   T47] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  415.759386][   T47] usb 6-1: USB disconnect, device number 23
[  415.768707][   T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  415.773252][   T47] ftdi_sio 6-1:0.0: device disconnected
[  415.858551][T13404] loop6: detected capacity change from 0 to 2048
[  415.871368][T11171] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  415.882904][T11171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.887367][T11171] usb 1-1: Product: syz
[  415.889088][T11171] usb 1-1: Manufacturer: syz
[  415.890933][T11171] usb 1-1: SerialNumber: syz
[  415.906636][T11171] usb 1-1: config 0 descriptor??
[  415.920430][T11171] gspca_main: sunplus-2.14.0 probing 055f:c230
[  416.100455][T13412] loop6: detected capacity change from 0 to 128
[  416.491022][T13428] loop6: detected capacity change from 0 to 16
[  416.498542][T13428] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 66300)
[  416.905224][   T47] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  417.061000][   T47] usb 7-1: config 0 has an invalid interface number: 41 but max is 0
[  417.064552][   T47] usb 7-1: config 0 has no interface number 0
[  417.067323][   T47] usb 7-1: config 0 interface 41 has no altsetting 0
[  417.072688][   T47] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  417.077807][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.081169][   T47] usb 7-1: Product: syz
[  417.082860][   T47] usb 7-1: Manufacturer: syz
[  417.084863][   T47] usb 7-1: SerialNumber: syz
[  417.094380][   T47] usb 7-1: config 0 descriptor??
[  417.507811][T13440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  417.520230][   T47] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  417.527696][   T47] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71
[  417.528935][T11171] gspca_sunplus: reg_r err -71
[  417.533236][T11171] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  417.543919][   T47] usb 7-1: USB disconnect, device number 15
[  417.558131][T11171] usb 1-1: USB disconnect, device number 38
[  417.915181][T10242] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  418.082644][T10242] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  418.092623][T10242] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  418.102611][T10242] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  418.116621][T10242] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  418.119892][T10242] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  418.124943][T10242] usb 6-1: config 0 descriptor??
[  418.486416][ T5233] Bluetooth: hci0: command tx timeout
[  418.550177][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.553270][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.556409][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.559536][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.562812][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.572482][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.575900][T10242] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0
[  418.586783][T10242] holtek_kbd 0003:04D9:A055.0014: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.5-1/input0
[  418.745120][T11171] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  418.748774][T10242] usb 6-1: USB disconnect, device number 24
[  418.895233][T11171] usb 1-1: Using ep0 maxpacket: 8
[  418.898848][T11171] usb 1-1: unable to get BOS descriptor or descriptor too short
[  418.903671][T11171] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  418.908076][T11171] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  418.912502][T11171] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  418.916883][T11171] usb 1-1: config 1 has no interface number 1
[  418.919335][T11171] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  418.924471][T11171] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  418.930425][T11171] usb 1-1: config 1 interface 2 has no altsetting 0
[  418.936783][T11171] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  418.940705][T11171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.944172][T11171] usb 1-1: Product: syz
[  418.947419][T11171] usb 1-1: Manufacturer: syz
[  418.949557][T11171] usb 1-1: SerialNumber: syz
[  419.169143][T11171] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  419.171871][T11171] usb 1-1: MIDIStreaming interface descriptor not found
[  419.209102][T11171] usb 1-1: USB disconnect, device number 39
[  419.239258][T11362] udevd[11362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  419.367620][T13488] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  419.551094][T13492] loop5: detected capacity change from 0 to 32768
[  419.577424][T13492] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.594835][T13492] XFS (loop5): Ending clean mount
[  419.624471][T12614] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  419.877872][T13510] loop5: detected capacity change from 0 to 4096
[  419.902102][T13510] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  419.906764][   T47] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  419.911897][T13510] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[  419.928906][T13510] ntfs3(loop5): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  420.065410][   T47] usb 7-1: Using ep0 maxpacket: 16
[  420.069531][   T47] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  420.073003][   T47] usb 7-1: config 0 has no interface number 0
[  420.093906][   T47] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  420.097933][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.105128][   T47] usb 7-1: Product: syz
[  420.106969][   T47] usb 7-1: Manufacturer: syz
[  420.108791][   T47] usb 7-1: SerialNumber: syz
[  420.115756][    T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  420.118466][   T47] usb 7-1: config 0 descriptor??
[  420.132195][   T47] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  420.160123][T10242] hid-generic 0005:16C0:05DF.0015: item fetching failed at offset 0/1
[  420.164595][T10242] hid-generic 0005:16C0:05DF.0015: probe with driver hid-generic failed with error -22
[  420.267128][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  420.274062][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  420.282631][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  420.284221][T13525] loop5: detected capacity change from 0 to 64
[  420.288041][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  420.294833][T13525] BFS-fs: bfs_fill_super(): Last block not available on loop5: 163903
[  420.298843][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  420.303176][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.333958][   T47] gspca_spca1528: reg_w err -71
[  420.334987][    T9] usb 1-1: config 0 descriptor??
[  420.354307][T13514] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  420.359941][   T47] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71
[  420.375876][   T47] usb 7-1: USB disconnect, device number 16
[  420.751043][T13533] loop5: detected capacity change from 0 to 32768
[  420.783394][    T9] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd
[  420.800475][    T9] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  420.983967][T13537] loop6: detected capacity change from 0 to 764
[  421.008933][T13537] rock: directory entry would overflow storage
[  421.011659][T13537] rock: sig=0x5850, size=36, remaining=22
[  421.050392][T13541] binder: 13540:13541 ioctl c0306201 2000000003c0 returned -22
[  421.063626][   T47] usb 1-1: USB disconnect, device number 40
[  421.132416][T13543] loop6: detected capacity change from 0 to 1024
[  421.213217][T13549] random: crng reseeded on system resumption
[  421.317834][T13554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2892'.
[  421.328593][T13555] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2893'.
[  421.375884][ T5233] Bluetooth: hci1: command 0x0401 tx timeout
[  421.424071][T13563] loop5: detected capacity change from 0 to 256
[  421.626146][   T47] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  421.762491][T13579] sp0: Synchronizing with TNC
[  421.805185][   T47] usb 7-1: Using ep0 maxpacket: 16
[  421.811244][   T47] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  421.819792][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.823017][   T47] usb 7-1: Product: syz
[  421.824857][   T47] usb 7-1: Manufacturer: syz
[  421.827062][   T47] usb 7-1: SerialNumber: syz
[  421.831406][   T47] usb 7-1: config 0 descriptor??
[  422.403346][   T47] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  422.412464][   T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  422.417853][   T47] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  422.421506][   T47] usb 7-1: media controller created
[  422.440075][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  422.498359][   T47] zl10353_read_register: readreg error (reg=127, ret==0)
[  422.501337][   T47] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  422.504579][   T47] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  422.513980][   T47] usb 7-1: USB disconnect, device number 17
[  422.587541][   T47] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  423.129263][T13603] loop5: detected capacity change from 0 to 32768
[  423.259957][T13608] loop6: detected capacity change from 0 to 8
[  423.782334][T13630] loop6: detected capacity change from 0 to 8192
[  424.233944][T13639] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2932'.
[  424.706828][T13654] loop6: detected capacity change from 0 to 164
[  425.186244][T13650] loop5: detected capacity change from 0 to 32768
[  425.228378][T13650] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  425.242567][T13650] XFS (loop5): Ending clean mount
[  425.246023][T13650] XFS (loop5): Quotacheck needed: Please wait.
[  425.289158][T13650] XFS (loop5): Quotacheck: Done.
[  425.301262][T13669] netlink: 'syz.6.2941': attribute type 1 has an invalid length.
[  425.304698][T13669] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2941'.
[  425.312515][T12614] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  425.559280][T13679] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2942'.
[  425.582970][T13679] netlink: 'syz.5.2942': attribute type 6 has an invalid length.
[  425.588826][T13679] netlink: 'syz.5.2942': attribute type 5 has an invalid length.
[  425.591446][T13679] netlink: 'syz.5.2942': attribute type 4 has an invalid length.
[  425.661844][   T33] audit: type=1326 audit(1755282195.170:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13684 comm="syz.0.2949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  425.678389][   T33] audit: type=1326 audit(1755282195.170:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13684 comm="syz.0.2949" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  425.688276][   T33] audit: type=1326 audit(1755282195.170:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13684 comm="syz.0.2949" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f91edf8ebe9 code=0x7ffc0000
[  425.698227][   T33] audit: type=1326 audit(1755282195.170:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13684 comm="syz.0.2949" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91edf8ebe9 code=0x0
[  425.737070][T13673] loop6: detected capacity change from 0 to 32768
[  425.744418][T13673] btrfs: Deprecated parameter 'usebackuproot'
[  425.760893][T13673] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  425.764037][T13673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2944 (13673)
[  425.774201][T13673] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  425.891944][T13695] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2953'.
[  426.062212][T13693] loop6: detected capacity change from 0 to 32768
[  426.233963][T13707] netlink: 'syz.5.2959': attribute type 2 has an invalid length.
[  426.425881][T13701] loop6: detected capacity change from 0 to 40427
[  426.542051][T13719] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  426.805323][ T5233] Bluetooth: hci2: command tx timeout
[  426.806556][T13734] loop5: detected capacity change from 0 to 32768
[  426.816919][T13734] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2971 (13734)
[  426.825249][T10242] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  426.834990][T13734] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  426.843221][T13734] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  426.849424][T13734] BTRFS info (device loop5): using free-space-tree
[  426.934604][T12614] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  426.985211][T10242] usb 7-1: Using ep0 maxpacket: 8
[  426.991351][T10242] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  426.999087][T10242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.018283][T10242] usb 7-1: Product: syz
[  427.019989][T10242] usb 7-1: Manufacturer: syz
[  427.021847][T10242] usb 7-1: SerialNumber: syz
[  427.045265][T10242] usb 7-1: config 0 descriptor??
[  427.251970][T10242] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  427.310535][T13774] loop5: detected capacity change from 0 to 256
[  427.323610][T13774] FAT-fs (loop5): Directory bread(block 64) failed
[  427.327179][T13774] FAT-fs (loop5): Directory bread(block 65) failed
[  427.331352][T13774] FAT-fs (loop5): Directory bread(block 66) failed
[  427.333599][T13774] FAT-fs (loop5): Directory bread(block 67) failed
[  427.355964][T13774] FAT-fs (loop5): Directory bread(block 68) failed
[  427.358431][T13774] FAT-fs (loop5): Directory bread(block 69) failed
[  427.362264][T13774] FAT-fs (loop5): Directory bread(block 70) failed
[  427.368063][T13774] FAT-fs (loop5): Directory bread(block 71) failed
[  427.370389][T13774] FAT-fs (loop5): Directory bread(block 72) failed
[  427.379740][T13774] FAT-fs (loop5): Directory bread(block 73) failed
[  427.530067][ T5869] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.630741][ T5869] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.665251][T10242] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  427.679869][T10242] usb 7-1: USB disconnect, device number 18
[  427.736439][ T5869] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.820107][ T5869] team0: Port device netdevsim0 removed
[  427.823807][ T5869] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  427.869970][T13801] netlink: 'syz.0.2996': attribute type 12 has an invalid length.
[  427.872984][T13801] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.2996'.
[  427.913538][T13803] loop5: detected capacity change from 0 to 512
[  428.031915][ T5869] bridge_slave_1: left allmulticast mode
[  428.037255][ T5869] bridge_slave_1: left promiscuous mode
[  428.046393][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.056864][ T5869] bridge_slave_0: left allmulticast mode
[  428.059260][ T5869] bridge_slave_0: left promiscuous mode
[  428.061774][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.282146][T13807] loop5: detected capacity change from 0 to 32768
[  428.336800][T13807] JBD2: Ignoring recovery information on journal
[  428.403522][T13807] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  428.681884][T12614] ocfs2: Unmounting device (7,5) on (node local)
[  428.995264][ T5869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  429.000365][ T5869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  429.007508][ T5869] bond0 (unregistering): Released all slaves
[  429.238244][T13838] loop6: detected capacity change from 0 to 16
[  429.589039][ T5869] hsr_slave_0: left promiscuous mode
[  429.603297][ T5869] hsr_slave_1: left promiscuous mode
[  429.619042][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  429.639175][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  429.652953][ T5869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  429.666174][ T5869] batman_adv: batadv0: Removing interface: batadv_slave_1
[  429.830817][ T5869] veth1_macvtap: left promiscuous mode
[  429.833184][ T5869] veth0_macvtap: left promiscuous mode
[  429.845898][ T5869] veth1_vlan: left promiscuous mode
[  429.848109][ T5869] veth0_vlan: left promiscuous mode
[  429.963736][T13847] loop6: detected capacity change from 0 to 32768
[  430.376054][T13856] loop6: detected capacity change from 0 to 512
[  430.379472][T13856] EXT4-fs: user quota file already specified
[  430.757464][T11171] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  430.764646][T13862] loop6: detected capacity change from 0 to 512
[  430.767308][T13862] EXT4-fs: Ignoring removed bh option
[  430.773537][T13862] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  430.786684][T13862] EXT4-fs (loop6): write access unavailable, skipping orphan cleanup
[  430.791381][T13862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  430.834374][T12008] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.915463][T11171] usb 6-1: Using ep0 maxpacket: 16
[  430.924075][T11171] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  430.929085][T11171] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  430.962766][T11171] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  430.973553][T11171] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.977227][T11171] usb 6-1: Product: syz
[  430.978713][T11171] usb 6-1: Manufacturer: syz
[  430.980314][T11171] usb 6-1: SerialNumber: syz
[  431.202200][T11171] usb 6-1: 0:2 : does not exist
[  431.232028][T11171] usb 6-1: USB disconnect, device number 25
[  431.324247][T11359] udevd[11359]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  431.405254][ T5869] team0 (unregistering): Port device team_slave_1 removed
[  431.461526][ T5869] team0 (unregistering): Port device team_slave_0 removed
[  431.652406][T13874] input: syz0 as /devices/virtual/input/input27
[  432.454072][T13888] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3033'.
[  432.788438][ T5895] usb 6-1: new full-speed USB device number 26 using dummy_hcd
[  432.955782][T11171] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  432.967107][ T5895] usb 6-1: unable to get BOS descriptor or descriptor too short
[  432.971059][ T5895] usb 6-1: not running at top speed; connect to a high speed hub
[  432.977236][ T5895] usb 6-1: config 5 has an invalid interface number: 246 but max is 0
[  432.981665][ T5895] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  432.986041][ T5895] usb 6-1: config 5 has no interface number 0
[  432.989710][ T5895] usb 6-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  432.993913][ T5895] usb 6-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  432.999440][ T5895] usb 6-1: config 5 interface 246 has no altsetting 0
[  433.011146][ T5895] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  433.014468][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.018389][ T5895] usb 6-1: Product: syz
[  433.020110][ T5895] usb 6-1: Manufacturer: syz
[  433.021921][ T5895] usb 6-1: SerialNumber: syz
[  433.068649][ T5869] IPVS: stop unused estimator thread 0...
[  433.108991][T11171] usb 1-1: config 1 has an invalid interface number: 146 but max is 0
[  433.112529][T11171] usb 1-1: config 1 has no interface number 0
[  433.118036][T11171] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb
[  433.121910][T11171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.135280][T11171] usb 1-1: Product: syz
[  433.137198][T11171] usb 1-1: Manufacturer: syz
[  433.139109][T11171] usb 1-1: SerialNumber: syz
[  433.151497][T11171] usbserial_generic 1-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  433.158781][T11171] usbserial_generic 1-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  433.163306][T11171] usbserial_generic 1-1:1.146: generic converter detected
[  433.174064][T11171] usb 1-1: generic converter now attached to ttyUSB0
[  433.262162][ T5895] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  433.265972][ T5869] usb 6-1: Failed to submit usb control message: -71
[  433.268936][ T5869] usb 6-1: unable to send the bmi data to the device: -71
[  433.271620][ T5869] usb 6-1: unable to get target info from device
[  433.274033][ T5869] usb 6-1: could not get target info (-71)
[  433.279919][ T5895] usb 6-1: USB disconnect, device number 26
[  433.287274][ T5869] usb 6-1: could not probe fw (-71)
[  433.353184][   T47] usb 1-1: USB disconnect, device number 41
[  433.362484][   T47] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  433.370283][   T47] usbserial_generic 1-1:1.146: device disconnected
[  433.485150][T10242] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  433.646948][T10242] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  433.650515][T10242] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  433.654822][T10242] usb 7-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  433.658580][T10242] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.663091][T10242] usb 7-1: config 0 descriptor??
[  433.665822][T13908] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  434.088715][T10242] logitech 0003:046D:CA04.0017: bogus close delimiter
[  434.091529][T10242] logitech 0003:046D:CA04.0017: item 0 4 2 10 parsing failed
[  434.110497][ T5233] Bluetooth: hci2: unexpected subevent 0x03 length: 244 > 9
[  434.117492][T10242] logitech 0003:046D:CA04.0017: parse failed
[  434.119952][T10242] logitech 0003:046D:CA04.0017: probe with driver logitech failed with error -22
[  434.245608][T13940] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  434.289486][T10242] usb 7-1: USB disconnect, device number 19
[  435.152507][T13949] loop6: detected capacity change from 0 to 4096
[  435.456631][T13953] netlink: 160 bytes leftover after parsing attributes in process `syz.0.3064'.
[  435.471961][T13953] netlink: 'syz.0.3064': attribute type 1 has an invalid length.
[  435.491412][T13953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3064'.
[  435.585288][T13957] loop6: detected capacity change from 0 to 64
[  435.774610][T13973] loop5: detected capacity change from 0 to 1024
[  435.818825][T13973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  435.830762][T13973] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  435.848771][T13973] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 13)
[  435.859580][T13973] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[  435.864709][T13973] EXT4-fs (loop5): This should not happen!! Data will be lost
[  435.864709][T13973] 
[  435.876741][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.886653][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.892731][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.899150][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.905604][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.911741][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.919256][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.927729][T13972] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.933783][T13973] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.3073: lblock 3 mapped to illegal pblock 3 (length 1)
[  435.956158][T13980] loop6: detected capacity change from 0 to 32768
[  436.031091][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nochanges,nojournal_transaction_names,read_only
[  436.031107][T13980]   allowing incompatible features above 0.0: (unknown version)
[  436.031111][T13980]   features: lz4
[  436.031114][T13980]   with devices loop6
[  436.047019][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  436.050330][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  436.059515][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  436.072916][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  436.080308][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  436.085498][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  436.090821][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  436.093848][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  436.111809][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  436.114806][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  436.118516][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 1
[  436.162828][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 2
[  436.171633][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 3
[  436.176140][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  436.180508][T13980] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  436.200303][T13980] syz.6.3075 (13980) used greatest stack depth: 15448 bytes left
[  436.206600][T12008] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  436.227059][T12008] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  436.620707][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.801262][T13999] netlink: 'syz.5.3081': attribute type 15 has an invalid length.
[  436.951086][   T33] audit: type=1326 audit(1755282206.460:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14006 comm="syz.5.3085" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323b58ebe9 code=0x0
[  437.229906][T14010] loop6: detected capacity change from 0 to 256
[  437.232638][T14010] exfat: Deprecated parameter 'utf8'
[  437.495339][    T9] usb 7-1: new full-speed USB device number 20 using dummy_hcd
[  437.673535][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  437.676789][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  437.680611][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  437.684732][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  437.691705][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  437.695353][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.698624][    T9] usb 7-1: Product: syz
[  437.700367][    T9] usb 7-1: Manufacturer: syz
[  437.702224][    T9] usb 7-1: SerialNumber: syz
[  438.180177][    T9] usb 7-1: 0:2 : does not exist
[  438.193738][    T9] usb 7-1: USB disconnect, device number 20
[  438.217779][T11359] udevd[11359]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  438.313012][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3090'.
[  438.731283][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3097'.
[  438.760861][T14041] loop5: detected capacity change from 0 to 8
[  438.791030][T14041] SQUASHFS error: Failed to read block 0xdfa: -5
[  438.804058][T14041] SQUASHFS error: Unable to read metadata cache entry [dfa]
[  438.811467][T14041] SQUASHFS error: Failed to read block 0x4e8: -5
[  438.818495][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.821428][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.826549][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.829485][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.832275][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.836362][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.839243][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.843919][T14041] SQUASHFS error: Failed to read block 0x4de: -5
[  438.849050][T14041] SQUASHFS error: Failed to read block 0x4e8: -5
[  438.853420][   T33] audit: type=1800 audit(1755282208.360:92): pid=14041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3098" name="file1" dev="loop5" ino=5 res=0 errno=0
[  438.988493][   T33] audit: type=1804 audit(1755282208.490:93): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.3102" name="/newroot/264/bus/file1" dev="overlay" ino=2 res=1 errno=0
[  439.025165][   T33] audit: type=1800 audit(1755282208.490:94): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3102" name="file1" dev="overlay" ino=2 res=0 errno=0
[  439.408752][T14064] loop6: detected capacity change from 0 to 512
[  439.417933][T14064] EXT4-fs: Ignoring removed bh option
[  439.629819][T14071] loop6: detected capacity change from 0 to 512
[  439.700949][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  439.703586][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  439.733416][T14073] loop6: detected capacity change from 0 to 65
[  439.738017][T14055] loop5: detected capacity change from 0 to 65536
[  439.783820][T14055] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  439.831148][T14055] XFS (loop5): Ending clean mount
[  439.851796][T14055] XFS (loop5): Quotacheck needed: Please wait.
[  439.882785][T14055] XFS (loop5): Quotacheck: Done.
[  439.900055][T14055] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8004 
[  439.908942][T14055] XFS (loop5): Unmount and run xfs_repair
[  439.911654][T14055] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  439.914772][T14055] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  439.919460][T14055] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00  ................
[  439.924388][T14055] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  439.931547][T14055] 00000030: 00 00 00 01 21 53 59 0a 00 00 00 05 00 00 00 03  ....!SY.........
[  439.931856][ T5895] kernel write not supported for file /input/mice (pid: 5895 comm: kworker/1:3)
[  439.936062][T14055] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 03 00 00 00  ......;\........
[  439.944214][T14055] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  439.952389][T14055] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  439.956326][T14055] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  439.960259][T14055] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8004 len 2 error 74
[  440.015618][T12614] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  440.042336][T12614] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  440.662216][T14093] loop6: detected capacity change from 0 to 131072
[  440.979234][T14093] F2FS-fs (loop6): write access unavailable, skipping recovery
[  440.982374][T14093] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  442.777696][T14142] loop6: detected capacity change from 0 to 32768
[  443.011051][T14148] loop5: detected capacity change from 0 to 32768
[  443.051822][T14148] JBD2: Ignoring recovery information on journal
[  443.106695][T14148] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  443.165146][ T5906] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  443.208269][T12614] ocfs2: Unmounting device (7,5) on (node local)
[  443.319844][ T5906] usb 7-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  443.323128][ T5906] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.332283][ T5906] usb 7-1: Product: syz
[  443.334037][ T5906] usb 7-1: Manufacturer: syz
[  443.336793][ T5906] usb 7-1: SerialNumber: syz
[  443.341086][ T5906] usb 7-1: config 0 descriptor??
[  443.970729][T14177] loop5: detected capacity change from 0 to 32768
[  443.984665][T14177] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  443.984665][T14177] clean (size 2912):
[  443.984665][T14177] flags:          0
[  443.984665][T14177] journal_seq:    8
[  443.984665][T14177] prio_ptrs: 
[  443.984665][T14177] usage: type=key_version v=0
[  443.984665][T14177] usage: type=reserved v=0
[  443.984665][T14177] usage: type=reserved v=0
[  443.984665][T14177] usage: type=reserved v=0
[  443.984665][T14177] usage: type=reserved v=0
[  443.984665][T14177] data_usage: btree: 1/1 [0]=2816
[  443.984665][T14177] data_usage: journal: 1/1 [0]=0
[  443.984665][T14177] data_usage: user: 1/1 [0]=32
[  443.984665][T14177] dev_usage: dev=0  
[  443.984665][T14177]   free: buckets=83 sectors=0 fragmented=0
[  443.984665][T14177]   sb: buckets=25 sectors=6152 fragmented=248
[  443.984665][T14177]   journal: buckets=8 sectors=2048 fragmented=0
[  443.984665][T14177]   btree: buckets=11 sectors=2816 fragmented=0
[  443.984665][T14177]   user: buckets=1 sectors=32 fragmented=224
[  443.984665][T14177]   cached: buckets=0 sectors=0 fragmented=0
[  443.984665][T14177]   parity: buckets=0 sectors=0 fragmented=0
[  443.984665][T14177]   stripe: buckets=0 sectors=0 fragmented=0
[  443.984665][T14177]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  443.984665][T14177]   need_discard: buckets=0 sectors=0 fragmented=0
[  443.984665][T14177] clock: read=0
[  443.984665][T14177] clock: write=1288
[  443.984665][T14177] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  443.984853][T14177] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  444.256338][ T5906] mos7840 7-1:0.0: required endpoints missing
[  444.263884][ T5906] usb 7-1: USB disconnect, device number 21
[  445.295209][ T5906] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  445.445863][ T5906] usb 7-1: Using ep0 maxpacket: 16
[  445.449385][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  445.452840][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  445.460557][ T5906] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  445.466504][ T5906] usb 7-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[  445.470259][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  445.492793][ T5906] usb 7-1: config 0 descriptor??
[  445.791524][T14200] loop5: detected capacity change from 0 to 32768
[  445.815775][T14200] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  445.841850][T14200] XFS (loop5): Ending clean mount
[  445.922969][T12614] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  445.936097][ T5906] hid-generic 0003:045E:FC40.0018: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.6-1/input0
[  446.119602][ T5906] usb 7-1: USB disconnect, device number 22
[  446.196395][   T33] audit: type=1326 audit(1755282215.710:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14215 comm="syz.5.3162" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f323b58ebe9 code=0x0
[  446.259279][T14218] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  446.263329][T14218] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  446.272218][T14218] overlayfs: failed to get uuid (395/file1, err=-13); falling back to uuid=null.
[  447.093093][T14233] tc_dump_action: action bad kind
[  447.181023][T14238] loop5: detected capacity change from 0 to 2048
[  447.198283][T14238] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  447.283575][T14240] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  447.701502][T14258] Bluetooth: MGMT ver 1.23
[  447.923197][ T5895] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  448.085155][ T5895] usb 1-1: Using ep0 maxpacket: 16
[  448.088181][ T5895] usb 1-1: too many configurations: 112, using maximum allowed: 8
[  448.105481][ T5895] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  448.109145][ T5895] usb 1-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  448.112809][ T5895] usb 1-1: Product: syz
[  448.114742][ T5895] usb 1-1: Manufacturer: syz
[  448.124900][ T5895] r8152-cfgselector 1-1: Unknown version 0x0000
[  448.127700][ T5895] r8152-cfgselector 1-1: config 0 descriptor??
[  448.131896][T14268] loop6: detected capacity change from 0 to 32768
[  448.138034][T14268] btrfs: Deprecated parameter 'usebackuproot'
[  448.141019][T14268] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  448.146441][T14268] BTRFS error: failed to open device for path /dev/loop6 with flags 0x23: -13
[  448.175197][ T5906] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  448.328151][ T5906] usb 6-1: Using ep0 maxpacket: 16
[  448.337988][ T5906] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  448.341179][ T5906] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  448.347102][ T5895] r8152-cfgselector 1-1: bad CDC descriptors
[  448.357070][ T5895] r8152-cfgselector 1-1: USB disconnect, device number 42
[  448.366489][ T5906] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  448.373915][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.388466][ T5906] usb 6-1: Product: syz
[  448.390059][ T5906] usb 6-1: Manufacturer: syz
[  448.391856][ T5906] usb 6-1: SerialNumber: syz
[  448.604918][ T5906] usb 6-1: 0:2 : does not exist
[  448.628379][ T5906] usb 6-1: USB disconnect, device number 27
[  448.663954][T11359] udevd[11359]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  449.693834][   T33] audit: type=1326 audit(1755282219.200:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.5.3209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323b58ebe9 code=0x7ffc0000
[  449.729967][   T33] audit: type=1326 audit(1755282219.200:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.5.3209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323b58ebe9 code=0x7ffc0000
[  449.760185][T14328] loop6: detected capacity change from 0 to 1024
[  449.760452][   T33] audit: type=1326 audit(1755282219.200:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.5.3209" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f323b58ebe9 code=0x7ffc0000
[  449.790716][   T33] audit: type=1326 audit(1755282219.200:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.5.3209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323b58ebe9 code=0x7ffc0000
[  449.824136][   T33] audit: type=1326 audit(1755282219.200:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.5.3209" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323b58ebe9 code=0x7ffc0000
[  449.938066][T14334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3213'.
[  450.089430][T14341] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  450.644810][T14365] sock: sock_timestamping_bind_phc: sock not bind to device
[  450.665250][ T5906] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  450.815416][ T5906] usb 7-1: Using ep0 maxpacket: 8
[  450.824348][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  450.828832][ T5906] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  450.835080][ T5906] usb 7-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  450.838272][ T5906] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.850412][ T5906] usb 7-1: config 0 descriptor??
[  451.267693][ T5906] cherry 0003:046A:0027.0019: fixing up Cherry Cymotion report descriptor
[  451.271153][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x0
[  451.273541][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x0
[  451.276887][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x0
[  451.279588][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x6
[  451.282697][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x5
[  451.288603][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x4
[  451.291409][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x0
[  451.303154][ T5906] cherry 0003:046A:0027.0019: unknown main item tag 0x0
[  451.307737][ T5906] cherry 0003:046A:0027.0019: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.6-1/input0
[  451.468743][ T5906] usb 7-1: USB disconnect, device number 23
[  451.635148][    T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  451.780113][T14396] loop5: detected capacity change from 0 to 1024
[  451.783788][T14396] EXT4-fs: Ignoring removed orlov option
[  451.787200][T14396] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  451.795462][    T9] usb 1-1: Using ep0 maxpacket: 8
[  451.804547][    T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  451.808738][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.813478][    T9] usb 1-1: Product: syz
[  451.817882][T14396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.823486][    T9] usb 1-1: Manufacturer: syz
[  451.826027][    T9] usb 1-1: SerialNumber: syz
[  451.833352][    T9] usb 1-1: config 0 descriptor??
[  451.838615][    T9] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  451.861314][T12614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  452.110257][T14409] dlm: plock device version mismatch: kernel (1.2.0), user (1.4.8)
[  452.399283][T14413] netlink: 'syz.6.3246': attribute type 1 has an invalid length.
[  452.404972][T14413] nbd: error processing sock list
[  452.416080][T14413] block nbd0: shutting down sockets
[  453.045262][ T5906] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  453.059177][    T9] gspca_sonixj: reg_w1 err -71
[  453.061253][    T9] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[  453.072641][T14440] loop6: detected capacity change from 0 to 32768
[  453.073131][    T9] usb 1-1: USB disconnect, device number 43
[  453.113387][T14440] ocfs2: Readonly device (7,6) detected. Cluster services will not be used for this mount. Recovery will be skipped.
[  453.120200][T14440] ocfs2: Mounting device (7,6) on (node local, slot 65535) with ordered data mode.
[  453.150933][T12008] INFO: trying to register non-static key.
[  453.153517][T12008] The code is fine but needs lockdep annotation, or maybe
[  453.157099][T12008] you didn't initialize this object before use?
[  453.160046][T12008] turning off the locking correctness validator.
[  453.162681][T12008] CPU: 0 UID: 0 PID: 12008 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  453.162698][T12008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  453.162705][T12008] Call Trace:
[  453.162711][T12008]  <TASK>
[  453.162717][T12008]  dump_stack_lvl+0x189/0x250
[  453.162735][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.162748][T12008]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.162761][T12008]  ? __pfx__printk+0x10/0x10
[  453.162778][T12008]  ? __is_module_percpu_address+0x39b/0x3f0
[  453.162791][T12008]  ? is_module_address+0x17/0xf0
[  453.162806][T12008]  assign_lock_key+0x133/0x150
[  453.162818][T12008]  register_lock_class+0x105/0x320
[  453.162837][T12008]  __lock_acquire+0x99/0xd20
[  453.162854][T12008]  ? ktime_get+0x3e/0x1f0
[  453.162867][T12008]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  453.162880][T12008]  lock_acquire+0x120/0x360
[  453.162895][T12008]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  453.162912][T12008]  _raw_spin_lock_irqsave+0xa7/0xf0
[  453.162929][T12008]  ? ocfs2_mark_lockres_freeing+0x125/0x580
[  453.162941][T12008]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  453.162957][T12008]  ? ktime_get+0x1cb/0x1f0
[  453.162969][T12008]  ocfs2_mark_lockres_freeing+0x125/0x580
[  453.162983][T12008]  ? __pfx_ocfs2_mark_lockres_freeing+0x10/0x10
[  453.163002][T12008]  ? ocfs2_journal_shutdown+0x64b/0xaf0
[  453.163019][T12008]  ? __pfx_ocfs2_journal_shutdown+0x10/0x10
[  453.163034][T12008]  ? kfree+0x18e/0x440
[  453.163050][T12008]  ocfs2_dlm_shutdown+0x3a/0x240
[  453.163064][T12008]  ocfs2_dismount_volume+0x46a/0x8d0
[  453.163084][T12008]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  453.163101][T12008]  ? __pfx_evict_inodes+0x10/0x10
[  453.163121][T12008]  ? __pfx_ocfs2_put_super+0x10/0x10
[  453.163137][T12008]  generic_shutdown_super+0x135/0x2c0
[  453.163159][T12008]  kill_block_super+0x44/0x90
[  453.163175][T12008]  deactivate_locked_super+0xbc/0x130
[  453.163189][T12008]  cleanup_mnt+0x425/0x4c0
[  453.163201][T12008]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.163217][T12008]  task_work_run+0x1d4/0x260
[  453.163234][T12008]  ? __pfx_task_work_run+0x10/0x10
[  453.163248][T12008]  ? __x64_sys_umount+0x122/0x160
[  453.163264][T12008]  ? exit_to_user_mode_loop+0x40/0x110
[  453.163282][T12008]  exit_to_user_mode_loop+0xec/0x110
[  453.163298][T12008]  do_syscall_64+0x2bd/0x3b0
[  453.163315][T12008]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.163329][T12008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.163340][T12008]  ? exc_page_fault+0x9f/0xf0
[  453.163380][T12008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.163392][T12008] RIP: 0033:0x7fcfe3d8ff17
[  453.163403][T12008] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  453.163413][T12008] RSP: 002b:00007ffddbc11cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  453.163427][T12008] RAX: 0000000000000000 RBX: 00007fcfe3e11c05 RCX: 00007fcfe3d8ff17
[  453.163435][T12008] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddbc11d90
[  453.163443][T12008] RBP: 00007ffddbc11d90 R08: 0000000000000000 R09: 0000000000000000
[  453.163450][T12008] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddbc12e20
[  453.163457][T12008] R13: 00007fcfe3e11c05 R14: 000000000006e9a3 R15: 00007ffddbc12e60
[  453.163470][T12008]  </TASK>
[  453.195159][ T5906] usb 6-1: Using ep0 maxpacket: 32
[  453.206030][T12008] ocfs2: Unmounting device (7,6) on (node local)
[  453.219209][ T5906] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  453.219229][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.234607][T12008] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI
[  453.235635][ T5906] usb 6-1: Product: syz
[  453.237293][T12008] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  453.239402][ T5906] usb 6-1: Manufacturer: syz
[  453.241687][T12008] CPU: 0 UID: 0 PID: 12008 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  453.243577][ T5906] usb 6-1: SerialNumber: syz
[  453.245811][T12008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  453.245823][T12008] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  453.245842][T12008] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ec e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 cc e1 83 fe 48 8b 3b 49 81 c7 88
[  453.245853][T12008] RSP: 0018:ffffc90003fa7340 EFLAGS: 00010202
[  453.245866][T12008] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8880207f5640
[  453.245875][T12008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  453.245882][T12008] RBP: ffffc90003fa7a70 R08: ffff888108993ff7 R09: 1ffff110211327fe
[  453.245891][T12008] R10: dffffc0000000000 R11: ffffed10211327ff R12: fffff520007f4e78
[  453.245900][T12008] R13: ffff8881089942a0 R14: dffffc0000000000 R15: ffff888108994278
[  453.245909][T12008] FS:  00005555748fb500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  453.245920][T12008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.245928][T12008] CR2: 00005555749165c8 CR3: 00000000363b8000 CR4: 00000000000006f0
[  453.245963][T12008] Call Trace:
[  453.251447][ T5906] usb 6-1: config 0 descriptor??
[  453.252097][T12008]  <TASK>
[  453.256803][ T5906] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[  453.258626][T12008]  ? kasan_record_aux_stack+0xbd/0xd0
[  453.258648][T12008]  ? destroy_workqueue+0x134/0xc70
[  453.258663][T12008]  ? ocfs2_delete_osb+0x49/0x170
[  453.258680][T12008]  ? kill_block_super+0x44/0x90
[  453.261448][ T5906] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  453.263520][T12008]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  453.263541][T12008]  ? do_syscall_64+0x2bd/0x3b0
[  453.263559][T12008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.263581][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.403886][T12008]  ? unwind_next_frame+0xa5/0x2390
[  453.406094][T12008]  ? __perf_event_task_sched_in+0xec/0x17e0
[  453.408698][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.410666][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.412733][T12008]  ? lock_release+0x4b/0x3e0
[  453.414638][T12008]  ? rcu_qs+0xc4/0x170
[  453.416267][T12008]  ? __perf_event_task_sched_in+0x15ec/0x17e0
[  453.418673][T12008]  ? __pfx___switch_to+0x10/0x10
[  453.420642][T12008]  ? __perf_event_task_sched_in+0xec/0x17e0
[  453.423022][T12008]  ? do_raw_spin_lock+0x121/0x290
[  453.425034][T12008]  ? do_raw_spin_lock+0x121/0x290
[  453.427077][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.429047][T12008]  ? do_raw_spin_unlock+0x4d/0x240
[  453.431144][T12008]  ? _raw_spin_unlock+0x28/0x50
[  453.433125][T12008]  ? writeback_single_inode+0x43e/0x6a0
[  453.435331][T12008]  ? write_inode_now+0x160/0x1d0
[  453.437306][T12008]  ? __pfx_write_inode_now+0x10/0x10
[  453.439491][T12008]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  453.441851][T12008]  ? inode_wait_for_writeback+0xf9/0x290
[  453.444142][T12008]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  453.446717][T12008]  ? rcu_is_watching+0x15/0xb0
[  453.448719][T12008]  ? do_raw_spin_unlock+0x4d/0x240
[  453.450787][T12008]  ? __pfx_ocfs2_evict_inode+0x10/0x10
[  453.453052][T12008]  evict+0x504/0x9c0
[  453.454714][T12008]  ? __pfx_evict+0x10/0x10
[  453.456572][T12008]  ? do_raw_spin_unlock+0x4d/0x240
[  453.458705][T12008]  ? _raw_spin_unlock+0x28/0x50
[  453.460733][T12008]  ? iput+0x6d8/0x9d0
[  453.462312][ T5906] usb 6-1: USB disconnect, device number 28
[  453.462366][T12008]  ocfs2_free_slot_info+0x79/0x260
[  453.466764][T12008]  ocfs2_delete_osb+0x58/0x170
[  453.468762][T12008]  ocfs2_dismount_volume+0x57a/0x8d0
[  453.470958][T12008]  ? __pfx_ocfs2_dismount_volume+0x10/0x10
[  453.473375][T12008]  ? __pfx_evict_inodes+0x10/0x10
[  453.475423][T12008]  ? __pfx_ocfs2_put_super+0x10/0x10
[  453.477684][T12008]  generic_shutdown_super+0x135/0x2c0
[  453.479872][T12008]  kill_block_super+0x44/0x90
[  453.481764][T12008]  deactivate_locked_super+0xbc/0x130
[  453.483931][T12008]  cleanup_mnt+0x425/0x4c0
[  453.485777][T12008]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.487944][T12008]  task_work_run+0x1d4/0x260
[  453.489855][T12008]  ? __pfx_task_work_run+0x10/0x10
[  453.491937][T12008]  ? __x64_sys_umount+0x122/0x160
[  453.493967][T12008]  ? exit_to_user_mode_loop+0x40/0x110
[  453.496207][T12008]  exit_to_user_mode_loop+0xec/0x110
[  453.498337][T12008]  do_syscall_64+0x2bd/0x3b0
[  453.500262][T12008]  ? lockdep_hardirqs_on+0x9c/0x150
[  453.502408][T12008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.504849][T12008]  ? exc_page_fault+0x9f/0xf0
[  453.506785][T12008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.509159][T12008] RIP: 0033:0x7fcfe3d8ff17
[  453.510977][T12008] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  453.518641][T12008] RSP: 002b:00007ffddbc11cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  453.521979][T12008] RAX: 0000000000000000 RBX: 00007fcfe3e11c05 RCX: 00007fcfe3d8ff17
[  453.525152][T12008] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffddbc11d90
[  453.528284][T12008] RBP: 00007ffddbc11d90 R08: 0000000000000000 R09: 0000000000000000
[  453.531480][T12008] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffddbc12e20
[  453.534639][T12008] R13: 00007fcfe3e11c05 R14: 000000000006e9a3 R15: 00007ffddbc12e60
[  453.537814][T12008]  </TASK>
[  453.539049][T12008] Modules linked in:
[  453.541766][T12008] ---[ end trace 0000000000000000 ]---
[  453.551247][T12008] RIP: 0010:ocfs2_evict_inode+0x2d05/0x40e0
[  453.553907][T12008] Code: 02 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 ec e1 83 fe 4d 01 f4 48 8b 1b 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 df e8 cc e1 83 fe 48 8b 3b 49 81 c7 88
[  453.571544][T12008] RSP: 0018:ffffc90003fa7340 EFLAGS: 00010202
[  453.574217][T12008] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff8880207f5640
[  453.577818][T12008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  453.581240][T12008] RBP: ffffc90003fa7a70 R08: ffff888108993ff7 R09: 1ffff110211327fe
[  453.584687][T12008] R10: dffffc0000000000 R11: ffffed10211327ff R12: fffff520007f4e78
[  453.589715][T12008] R13: ffff8881089942a0 R14: dffffc0000000000 R15: ffff888108994278
[  453.593074][T12008] FS:  00005555748fb500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  453.598513][T12008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  453.601308][T12008] CR2: 00005555749165c8 CR3: 00000000363b8000 CR4: 00000000000006f0
[  453.604700][T12008] Kernel panic - not syncing: Fatal exception
[  453.608069][T12008] Kernel Offset: disabled
[  453.609943][T12008] Rebooting in 86400 seconds..

VM DIAGNOSIS:
18:23:42  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000072 RBX=0000000000000072 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003fa71b0
R8 =ffff888106f10237 R9 =1ffff11020de2046 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=ffffffff99af9908 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555748fb500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005555749165c8 CR3=00000000363b8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=81f0815a499ddf00 RBX=ffffffff81968308 RCX=81f0815a499ddf00 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d6000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056198d89c000 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000ffff00 000000000000ffff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000ffff00 XMM03=0000000000000000 0000000000000000
XMM04=0000000000ffff00 000000000000ffff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
