last executing test programs:

4m22.644304627s ago: executing program 32 (id=123):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x53, 0x42, 0x4b})

4m17.207021221s ago: executing program 0 (id=168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)

4m17.127467693s ago: executing program 0 (id=169):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1}, 0x4a, 0x0)

4m17.127162507s ago: executing program 0 (id=170):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "6ffaac80b42d4daa69fd675276120fb9e784b22d8b9cf208", "637d2b0b241b123649b3588b3462d75cfebd1ba27800cf814c4e81820e71f96c"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000000c0)=0xfe, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0)

4m16.220458093s ago: executing program 0 (id=183):
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r0=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}])

4m16.048482916s ago: executing program 0 (id=187):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d8229720009058202"], 0x0)

4m15.808185612s ago: executing program 0 (id=190):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x3, 0x3, 0x46}, 0x10)

4m15.702824356s ago: executing program 33 (id=190):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x6, 0x3, 0x3, 0x46}, 0x10)

3m6.178992845s ago: executing program 4 (id=935):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0xcca6, 0x800})

3m5.947643936s ago: executing program 4 (id=937):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4c004)

3m5.888596721s ago: executing program 4 (id=939):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$char_usb(r1, &(0x7f0000000040)='N', 0x1)
madvise(&(0x7f0000079000/0x4000)=nil, 0x4000, 0x15)

3m5.74766794s ago: executing program 4 (id=941):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f0000000540)='group_id', 0x40, 0x100, 0x0)
mq_timedreceive(r0, 0x0, 0x0, 0xa7, 0x0)

3m5.688949864s ago: executing program 4 (id=943):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x101000, 0x12d)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x204818, &(0x7f00000001c0)={[{@utf8}, {@gid}, {@cruft}, {@map_off}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@map_off}, {@mode={'mode', 0x3d, 0x483}}]}, 0x1, 0x551, &(0x7f00000003c0)="$eJzs3V9v01YfwPGfS/sQ5dFTPRoTQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhho0xae8O4YZu0vQh2uRexd4T2EphsJ23a5s+gf1d9PxH4xD72+Z1g+acT4mMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiuRXbzltSN15rSQ3nVgK/sfu2u/eBFXJrz2JEuyJW/EcyGbmSrrry5e7my/FfczKbvpuVTLzIyPZ/L///waXJid7+IwL+JL9/5pE2t7afr3Q67VdHFcgZdPXi8G017ZnQNw2nppUJfVUulew7i9VQVU1dh8thpBvKDbQT+YGad2+pfLlcVDq37Le8WsWp697K+7cLtl1SD3NN7QSh7915mAvdRVOvG6+W1Ik3x3XuxyfiIxOpSDsNpdbWO+1if0AX95yUqbhSflwv40qFcZUKdqGQzxcK+dK98r37tj15YIW9jxyocXQnLf6djvDqDRzORDf/S12MeNKSJVEDX65UJBBfGkO2d/Xy/9d39Mh2+/N/L8tf2d08I0n+v5a+uzYs/w+J5eRem7Il2/JcVqQjHWnLq1OP6GRfNdHiiZFQfDHSECdZo7prlJSlJCWx5YksSlVCUVIVI3XREsqyhBKJTs4oVwLR4kgkvgSiZF5cuSVK8lKWshRFiZacLIsvLfGkJhVxkqOsyXryuRdFWcNi3KmUH9qNbO+8a0th/8aPu2XyPw7vSK/fwGF8dK00/wMAAAAAgHPLSr59j8f/U3I1KVVNXdunHRYAAAAAADhCyf/8z8aLqbh0VSzG/wAAAAAAnDdWco+dJSJZuZ6W1sRKbpfiSwAAAAAAAM4JS777n1yLh/3JHCjXxdqZLoXxPwAAAAAA58TPY+fYD5sXrT//kiCYst42l76yNpK5eZ2NC+l+F/YfMarOWNPdgySLUrqYnHT1rJVJK+1Mgvmhu1gbF4e1G4CzE8CPnxLApUn5VW6kdW6spsvV3pa0lWzV1HXO9esP8uI40xORXoq+f7H+gyTd/8VrTFsZWe+0c09fdlaTWN7GR3m70Z1A8cA8iiNieZ3Mt5DcczGwx1PJjRjddrOWrK132nZ//yfS3Sf2tvhmekSb72QurTXXnfE2u7f/mbjNfG5Y77tR5A/Z83dyM61zc/5muhgQRWFcFIX+KAZ/FoePojguiuIhowCA07I2JgtZciDvfsZV7vOyu3xidn8n82md+Znkwjo5M+CKbo+7otuHzG5/HHgG0rAcG7f7276s+j7e4f3QdsN6wYo/wguvN76Vy5tb27fXN1aetZ+1XxQKxZJ917bvFWQq6UZ3Qe4BAAzQ/4wda2D+H/sUHuvumFH1Fzs/KcjJU3kpHVmVheRug+QXBwOPmu37GcLCmFFrNkmT6RNeFkaM6v6T3OXQO25hZN29MRRP4F8CAICTMzcmD/+T/L8wZty9N5ePHh1n+57WBgAAjocOPljZ6CcrCEzzSb5czjvRolaB7z5SganUtDJepAN30fFqWjUDP/Jdvx4XHpuKDlXYajb9IFJVP1BNPzRLyfSBqvvo91A3HC8ybtisayfUyvW9yHEjVTGhq5qtb+omXNRBsnPY1K6pGteJjO+p0G8Frs4pFWrdV9FUtBeZqomLnmoGpuEEGfXYr7caWlV06AamGfnpAXttGa/qB43ksLnT/rABADgjNre2n690Ou1Xx1gY2HDmxLsKAAC6xmRpAAAAAAAAAAAAAAAAAAAAAABwBpzE/X8UznmhNxX0WYmHwhEUxl463hz7xQnAsfo7AAD//4jBUFA=")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

3m5.599145222s ago: executing program 4 (id=944):
r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0)
r1 = dup2(r0, r0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0)
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)

2m55.686648673s ago: executing program 1 (id=1013):
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000f0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x3, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

2m54.777733298s ago: executing program 1 (id=1028):
pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r3}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4, {0x8}}, './file0\x00'})

2m54.7773092s ago: executing program 1 (id=1030):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
truncate(&(0x7f0000000940)='./file1\x00', 0x900000a)

2m54.668603736s ago: executing program 1 (id=1031):
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000580)='./file0/file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0)

2m54.668303319s ago: executing program 1 (id=1032):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffff, 0x640)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

2m54.339178489s ago: executing program 1 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0xd41, 0x1200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x48f4)

2m54.267373594s ago: executing program 34 (id=1033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0xffffffff, 0x4, {0x0, 0x0, 0x0, 0x0, 0xd41, 0x1200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x48f4)

2m50.622985929s ago: executing program 35 (id=944):
r0 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0)
r1 = dup2(r0, r0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='source', 0x0, r0)
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)

2m31.458511627s ago: executing program 5 (id=1203):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7d)

2m31.361494735s ago: executing program 5 (id=1204):
r0 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000200)=0xf1)

2m31.068525491s ago: executing program 5 (id=1205):
syz_mount_image$exfat(0x0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x204e08a, 0x0, 0x0, 0x0, &(0x7f0000000240))

2m31.05681519s ago: executing program 5 (id=1206):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000010580), &(0x7f00000105c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='active_logs=4,jqfmt=vfsv0,prjjquota=f2fs\x00,mode=adaptive,heap,norecovery,fsync_mode=posix,user_xattr,disable_roll_forward,\x00\x00\x00'], 0x1, 0x105c9, &(0x7f0000020bc0)="$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")
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40106614, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x11, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m30.277370987s ago: executing program 5 (id=1213):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./bus\x00', 0x4008084, &(0x7f0000000080)={[{@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@dos1xfloppy}, {}, {@nodots}, {@fat=@gid}, {@dots}]}, 0x3, 0x27e, &(0x7f0000000700)="$eJzs3T2LE0EYB/Dn8nIXrtCrxWJBC6vgS2Mb5AQxIERSaGXgtLkTYa+JVvkYltZ+JD/GVelWzl0SEzdC1M0m5veDYx/2f7M7s4FMipnkze3352cfLt9l3z5Hp5NEK2KSZREn0YjmUSxoRMRBHC6cm8QqN1YmAEC9BoNRb+1GzUq6QkXStDdqR8TRL8nway0dAgAAAAAAAAAA4K+Vrf+PabH+v/ifg+K43vp/AGBbzdb/d9Zu2q6gO1QgTXuj4+Lz2yLr/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID6TLPsZvabv9JGjcHG+wkA/Dt/NP8DADvN/A8A+2d5/r/bNv8DwP/u5avXz3v9/ukgSToRV5PxcDzMj3n+9Fn/9H7yw8m81dV4PGzO8gd5nizm7Tgu8oel+WHcu5Pn19mTF/2l/CDOqh8+AAAAAAAAAAAAAAAAAAAAbIVuMlO6v7/bXZXn1U/fD7C0f78Vt1obGwYAAAAAAAAAAAAAAAAAAADstMuPn85HFxdv06qKaWVX3pXiS/GoN3bTeFz5LZrFmLbg8SoeRURJ1Cheo/xM57pa58o1vSEBAAAAAAAAAAAAAAAAAMAem2/6rbsnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCf+e//V1fUPUYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgP3wPAAD//9u9hmc=")

2m29.63818486s ago: executing program 5 (id=1222):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x7, 0xa, 0x4, 0x20, 0x0, {0x77359400}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}})

2m29.522144013s ago: executing program 36 (id=1222):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@userptr={0x7, 0xa, 0x4, 0x20, 0x0, {0x77359400}, {0x5, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}})

2m17.237942072s ago: executing program 3 (id=1324):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
ioctl$RTC_ALM_READ(r0, 0x80247008, 0x0)

2m17.237640642s ago: executing program 3 (id=1325):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @pix={0x311, 0x22000000, 0x34343452, 0x1, 0xe5b, 0x200d294, 0xc, 0x80800000, 0x1, 0x6}})

2m17.157904007s ago: executing program 3 (id=1326):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local, 0x1})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f00000000c0)={&(0x7f00000002c0)={{@host, 0x4}, {@local, 0x80000001}, 0x400, "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"}, 0x418, 0x800})

2m17.07819321s ago: executing program 3 (id=1327):
mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff)
mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/buffer_size_kb\x00', 0x1, 0x0)
write(r0, &(0x7f0000001100)='1024\x00', 0x5)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001180)='./mnt_trace/trace_marker\x00', 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000011c0)='./mnt_trace/trace\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0xf, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001280)=<r3=>0x0, &(0x7f00000012c0)=<r4=>0x0, &(0x7f0000001300)=<r5=>0x0)
syz_io_uring_submit(r3, r4, r5, &(0x7f0000001340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, &(0x7f00000013c0)=""/4096, 0x1000, 0x0, 0x12345, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0)

2m16.889539774s ago: executing program 3 (id=1330):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x11c}}, 0x400c800)

2m16.608580901s ago: executing program 3 (id=1334):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)

2m16.555038397s ago: executing program 37 (id=1334):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/default/accept_source_route\x00', 0x1, 0x0)
write(r0, &(0x7f0000000100)='1', 0x1)

1m5.746034899s ago: executing program 6 (id=2176):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[], 0x60}}, 0x200040c0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

1m5.685870773s ago: executing program 6 (id=2178):
mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='0123:abcd:0,', 0xc)

1m5.627286453s ago: executing program 6 (id=2180):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000e8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xffffffffffffffd8, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

1m5.556541989s ago: executing program 6 (id=2183):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x201899, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0)
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0)

1m5.556392603s ago: executing program 6 (id=2184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000d042abd70000000000000000000", @ANYBLOB="a400060040000000140012800c0001006d6163766c616e0004000280140035006d6163766c3d9130000000000000000024000e"], 0x6c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)

1m5.314979747s ago: executing program 6 (id=2186):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1m5.09760903s ago: executing program 38 (id=2186):
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000905a1"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

41.886937422s ago: executing program 9 (id=2476):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="8f92a4b0e7854a48", 0x8}], 0x1}}], 0x1, 0x4400c800)
sendto$inet6(r0, &(0x7f0000000300), 0x18, 0x3b00, 0x0, 0xfffffffffffffdfd)

41.795074001s ago: executing program 9 (id=2477):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)

41.794821206s ago: executing program 9 (id=2478):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@bh}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x6}}]}, 0x3, 0x4d4, &(0x7f0000000180)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpiuJN4NDEejTdNvOrRePIPwIMHE0NCDBfA05jZnWm3291ttz8p+/kk232e2WfmeZ6ZeWaffZ7OBNCzhrI/ScT/IuJORDxVjy5MMFR/e3j/+sSj+9cnYjZNz/yT1NI9yOK5Yr2deWS4FFH6MmnaYN301WsXxqvVqSt5fHTm4mej01evvX7+4vi5qXNTl8ZOnTpx/NjJN8fe6L5SLfLL6vVg/xeXD+x79+zt9yfKxfKB/L2xHm2VuyvGUIfPXuluU4+9XQ3hZPF+urGhhWHZBvLTupK1/+vVw2c3u0DAhknTNO1v//Fs2uzmoiXAlpXEZpcA2BzFF332+7d4bVDX47Fw73T9B1BW74f5q/5JOUp5mkrT79u1NBQRH8/++032ik7jEH+uUwEAgJ7zy+miJ9jc/yvF3oZ0/8/nUAYj4umI2B0Rz0TEnoh4NqKW9rmIeL45gyQi7ZD/nqb4fP4/5rMIpburrmQHWf/vrXxua2H/r+j9xWBfHtsVUXSYp47m+2Q4Kv2fnK9OHWuz/W1L5N/Y/8teWf5FXzAvx91y0wDd5PjM+Mpqu9i9mxH7y831T8rZgSumcZKI2BcR+7vY7mBD+Pxr3x2Yi1Ty96/rb0vXvyZtMaXX9XxcK+m3Ea/Wj/9sNB7/ZD7HpPP85OhAVKeOjmZnwdGWefz2+60P2uW/ZP1/+qt5lXdO/nxm1fUuZMd/R8P5H8X87fwk6mASkczN105HpH3d5XHrj/YrrPT835Z8VAsX7evz8ZmZK8citiXvLV4+Nr9uES/SZ/UfPtK6/e/O18n2xAsRkZ3EL0bESxFxMC/7oYg4HBFHOtT/17df/nTl9V9fWf0nW17/Fhz/+fn6ZQaKlbMlfRcO3XnU5uKxvON/ohYazpe0vv4lCy4Ryy3p6vYeAAAAbA2lqP3vf2lkLlwqjYzUx4D2xI5S9fL0zMGIuDRZv0dgMCqlYqSrPh5cSYrxz8GG+FhT/Hg+bvxV3/ZafGTicnVysysPPW5nrc0ni9p/5u8ux3mBLWgN5tGALWqp9r/39gYVBNhwvv+hdzW0/9k2SWb9pww8mXz/Q+9q1f5vxPcd711wzYCtL9WWoadp/9C7yvHhXLh223PLu22BJ5Hvf+hJ3d7Xv5xA8biGaxfS/tZpBqLFEwMG1rgYeWB7i7w2JZD1rNZwg5WIWF7i7SvJougCtn/CQ6m7DfbH4o/6otNaSRfPcSgC2V5ZMvG5vWt+8hfPRFnr0+aH+XZaaTgW5aWOzuoDG3oZAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWDf/BQAA//8mic8a")
mkdir(&(0x7f0000000080)='./bus\x00', 0x3)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)=@v2={0x2, @aes128, 0x4, '\x00', @a})

41.664701678s ago: executing program 9 (id=2479):
getpid()
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=macgreek,umask=00000000005,namecase=1,namecase=1,fmask=00000000000000000000010,discard,keep_last_dots,iocharset=euc-jp,errors=continue,errors=continue,\x00'], 0x1, 0x1528, &(0x7f00000037c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)

41.562408848s ago: executing program 9 (id=2480):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000080000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0)

41.331973489s ago: executing program 9 (id=2481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20)

41.26657625s ago: executing program 39 (id=2481):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20)

2.63188892s ago: executing program 7 (id=2953):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000)=0x37, 0x4)

2.631628287s ago: executing program 7 (id=2954):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

2.531691047s ago: executing program 7 (id=2957):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
socket$inet(0x2, 0xa, 0x8)
socket(0x200000000000011, 0x2, 0xd)
preadv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/93, 0x5d}], 0x1, 0x3e0, 0x800014)

2.47433711s ago: executing program 8 (id=2959):
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e05db0f20"], 0x8)

2.473550415s ago: executing program 7 (id=2960):
syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0)
nanosleep(&(0x7f0000000a00)={0x1}, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
pread64(r0, &(0x7f0000000b00), 0x2, 0xd000)

2.35069813s ago: executing program 8 (id=2962):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={<r1=>0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x2, @empty, 0x8}, {0xa, 0x4e20, 0xabfd, @remote, 0x8}, r1, 0x10000}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20)

2.264947913s ago: executing program 8 (id=2964):
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x1, 0x1, 0xd59f80, 0x19f5, 0x4, 0x19ef, 0x3, 0x5, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0xffffffff}, 0xcd, 0x27}})

2.264229354s ago: executing program 8 (id=2967):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000140)=""/24, 0x18, 0xc9100123, 0x0, 0x0)

1.384769656s ago: executing program 8 (id=2979):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'})

1.196575938s ago: executing program 2 (id=2982):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
r5 = pidfd_getfd(r4, r4, 0x0)
setns(r5, 0x66020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)

766.289336ms ago: executing program 7 (id=2983):
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xade3, 0x0)

765.992366ms ago: executing program 7 (id=2984):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x94)
write(0xffffffffffffffff, 0x0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa)
add_key$user(0x0, &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000340)="3c2675d62779373bf360e7fffedc42c2feba35e6d0211c3014c4098bf44a5521a53f8cfcc2ebe069743cc1ae3d17d24238ee87926351437e39b5ee624a8cd2097e28207747b1b69b0c002bd92228e1b6830f93ad974bff5dc7d76bb050fa0a9110fed86d4ec73defc607f1e65e33345ad843643d3fdfbf", 0x77, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001800)={'veth1_virt_wifi\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_usb_connect(0x0, 0x24, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1201100127a852086b0447378d61010203010902120001020860070904cd0a00226ace00"], 0x0)

296.386937ms ago: executing program 2 (id=2985):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000000140)=ANY=[], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183442, 0x25)
prlimit64(0x0, 0xe, 0x0, 0x0)
mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67)

216.464585ms ago: executing program 8 (id=2986):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001540)=""/4092})
syz_io_uring_setup(0x4b43, &(0x7f0000000080)={0x0, 0xffffffff, 0x1000, 0x20003, 0x143}, 0x0, 0x0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
writev(0xffffffffffffffff, 0x0, 0x0)

145.313715ms ago: executing program 2 (id=2987):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r1, 0x80000003)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @local, 0x8}, 0x1c)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
listen(r2, 0x0)

93.850661ms ago: executing program 2 (id=2988):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000001080)={0xf, {"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", 0x1000}}, 0x1006)

93.610694ms ago: executing program 2 (id=2989):
syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1080c, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYRES8, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESOCT], 0x1, 0xab5, &(0x7f0000000880)="$eJzs3UuMHEfdAPCa3Z3dtZ18O87nEOOExCGQREB2411jHhbEUXzBihG3SBEXy3GChWMQjhQSRcL2iRuJLHNDPMQplwgQErkgKycukYglLjkFDhywjBSJAyTYg3a2a3bm7xn37LN3dn4/qaemu6q7qme7e/tVVQkYWWOtz3rr8/Lbl47+4+G/71j8/kQ7RaP1OdExtpi6VoxPhOV9MJ5SmkzpxoevnVwcj2Etzbc+8/h4x7y7Ukrn0/50JTXSvstX33h3/unjF45dfPC9Nw9f25i1BwCA0fKtK4cP3v3XP9+7+6O37j+SptrT8/l5oxi/ozjvP1JLM6k4/5+o5euH5euBWsfQaTKkmyiGsZBuvEe61JGuntNNd88X858My633STdVkv94uEaphfLAMMvbcSPVxma7xsfGZmeXrslT67p+sjZ79vSZ589VVFBg3f3rgZTSfoNh1IbmTHsnqLws1Q0dvwJApeLzwlucj3cW1qa9tInB8r/+5Fjv+bvV17OMjI7N3v7lH5ffXY7Nzr9s/X99YYPXn5Ey+NY0vaHlWG95vfJ+dEcxHp8jxPeXOva/iV29Fhz2/7y88bC8QU8A+j1HGJbnC/3KOb7J5VitfuWP28V29bUizL/D10N85/4T/6bD8jcGevv3lrv/v2O5cJWXxWBYv2F6C27XzYqOO8AWUHJZH9+baxZyfHyvL8ZPlcRPl8TvKInfuTS1/RpfjN9VMj+Mst+99JP0ei31rI+Xlq7/WzvLoPfD8322O4vw/1ZYnng/cqXPA+J7vyu11vzj+8Swlf3hxDOnvvzcs1eX3v+vtbf/m8X2vr8YbxT71pUiQb5fGO+rt9/9b3TnM9Yn3V2hPHf2SN/6vqc7XW3P8nJSx3HmlnLs7Z5vpl+6+7rTNUK6HcUQT5fi+cnOMF8+/8jH1fx7TYT1rYf1mAzlyMeV3UU4XE9j2Kry9tjv/f+8fe5N9drzp8+cerwYz9vpn8brU4vTD2xyuYG1G7T+z97UXf/njvb0+ljncWFmeXqt87jQCNPn+0xfWBptPz7/zviO1vTZk98789x6rzyMuHOvvPrdE2fOnPqBL75swy/5OmqrlGd4vlR8YAI23NxLL35/7twrrz52+sUTL5x64dTZhUOHFubnD31l4eBc67x+rvPsHthOlv/pr3hWj7oAAAAAAAAAAACgIi8fO3r1L+986f2l+v/L9f9y/f/85m+u///jUP8/1pPP9eBzPcDdPeJbaUIDq5MhXb0Y/j+Ud0/I5+4w3yeKsN2PX1H/P2cX23XN5bknTI/t9+Z0oTmBW9pLmQxtkMT+Aj9dhBdbn1PpVwkqVPtZ78lFWNa+dd7W88vA2qUYTvnvltszye2Y5Prf/dp1ysf/3b0X+6P1LifrazOqE1a9jkBv/9xy7X9vyLDc4GflZem4Yqi8LIatNtxoNpubmV+zebtePPQ1BWyeqvv/zPc9c3j2j9+YXhxysutPdh8vY/ulsBZV939ZWf75xuKorv+A+a93/5/t/u8GPv6FHvMaq8v3Pz+/9n5Htmlf3/ynUlf+cf1zO9B7Vpb/R0X+eW0eSf3y717/5i9D/vGB0IA+DvnvHDD/uP6XVppxkeF/i/zzz/boQ4Pmv7SA2lh3OeJ94/z8L943zm6E9c9te650/VfbUePNIn8YZcPSz+xKdfX/e6G5mv5/B/r/3/f56Bp7GIrvYXyxGM8HwvyeQ+zv5MZ0WlH58/sV+f/A3WH5tZL/b/r/HW5fLcKy/SH3/5u3x0aP8bGO8XqP33a7HmtgWH2wbs//Ot6Y2wLPUbbD8PJM9WUYhqFmm1v10Gw2K33I5wljtar+/au+Tqg6/6p//zKx/994Dh/7/43xsf/fGB/7/43xrfuKHy932ht/r51h/hgf+/+N8feEfGP/wHtL4j9ZEr+vJP7ekvj7SuI/VRL/YEn8/SXxD5TE31US/1BJ/GfCXzzGf7Zk/odL4h+9ffzCD0vm3+5yfZRRXX8YZbF+3q37/yof8AJbXn7+02//31MSDwyvn7514Klnf/vtxlL9/8n2/ZD8HO9IMV4vrp3j9VK8fzJexL1TjP8txG/1+x0wSmL7GfH/+yMl8cDwyu952b9hBNV6t9hz+3arUrvdqn7n+QyXzxXh54vwC0X4WBHOFuFcER4owvlNKh8b46nf/P7w67Xl6/2ZED/o+/CxPlBsJ2phwPLE+wMrfR8/tuO3UmvNf5XVwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoz1vo8eHBvLaXLb186+szx03OLU55op2i0Pic6xurt+VJ6vAjHi/AXxZcbH752sjO8WYS1NJ9qqdaenr55vZ3TrpTS+bQ/XUmNtO/y1TfenX/6+IVjFx98783D1zbuFwAAAIDt738BAAD//4YQGFw=")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x3, 0x6, 0x7, 0xa}, 0x10001, 0x4}}, &(0x7f0000000100), 0x0)

0s ago: executing program 2 (id=2990):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xffffffffffffff7f, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000032c00048018000180080001006c6f67000c0002800800054000000008100001800c000100636f756e746572000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

0s ago: executing program 2 (id=2991):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000600)={'comedi_parport\x00', [0x78, 0x0, 0x0, 0xc, 0x8, 0x6, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x0, 0x101, 0x83, 0x80000000, 0x3, 0x1b18, 0x16, 0x4, 0x0, 0xffffffff, 0xb, 0x4, 0x3b, 0xc, 0x10000006, 0x664, 0xfffffff8]})

kernel console output (not intermixed with test programs):

 an invalid descriptor of length 0, skipping remainder of the config
[  233.711507][ T8767] usb 7-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  233.715024][T11011] loop8: detected capacity change from 0 to 512
[  233.715252][ T8767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.723090][ T8767] usb 7-1: Product: syz
[  233.724779][ T8767] usb 7-1: Manufacturer: syz
[  233.726530][ T8767] usb 7-1: SerialNumber: syz
[  233.731099][ T8767] usb 7-1: config 0 descriptor??
[  233.735542][ T8767] pn533_usb 7-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  233.744860][T11011] EXT4-fs (loop8): orphan cleanup on readonly fs
[  233.758014][T11011] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[  233.773027][T11011] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  233.777187][T11011] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.1815: bad orphan inode 768
[  233.787379][T11011] loop8: lost filesystem error report for type 5 error -117
[  233.797980][T11011] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  233.822600][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.105591][   T24] usb 7-1: USB disconnect, device number 18
[  234.327238][T11026] loop8: detected capacity change from 0 to 131072
[  234.358167][T11026] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  234.364702][T11026] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  234.724912][T11048] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1829'.
[  234.977325][T11064] input: syz0 as /devices/virtual/input/input22
[  235.141006][T11073] Bluetooth: MGMT ver 1.23
[  235.229330][T11079] loop6: detected capacity change from 0 to 1024
[  235.294076][T11081] loop8: detected capacity change from 0 to 2048
[  235.331436][ T5613] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  235.385590][   T34] audit: type=1326 audit(1785255136.765:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.412059][   T34] audit: type=1326 audit(1785255136.775:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.445586][   T34] audit: type=1326 audit(1785255136.775:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.472061][   T34] audit: type=1326 audit(1785255136.775:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.488241][   T34] audit: type=1326 audit(1785255136.775:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.514855][   T34] audit: type=1326 audit(1785255136.775:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.536317][   T34] audit: type=1326 audit(1785255136.775:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.557122][   T34] audit: type=1326 audit(1785255136.785:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  235.582514][   T34] audit: type=1326 audit(1785255136.785:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11084 comm="syz.8.1843" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f86a879de99 code=0x7ffc0000
[  236.336956][T11151] loop6: detected capacity change from 0 to 32768
[  236.339771][T11151] btrfs: Deprecated parameter 'usebackuproot'
[  236.341756][T11151] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  236.345949][T11151] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1861 (11151)
[  236.352586][T11151] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.355886][T11151] BTRFS info (device loop6): using crc32c checksum algorithm
[  236.358341][T11151] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  236.405711][ T6121] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  236.415205][T11151] BTRFS error (device loop6): failed to load root extent
[  236.417563][T11151] BTRFS warning (device loop6): try to load backup roots slot 1
[  236.420200][ T6908] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  236.424597][T11151] BTRFS warning (device loop6): couldn't read tree root
[  236.426833][T11151] BTRFS warning (device loop6): try to load backup roots slot 2
[  236.429577][ T6906] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  236.433396][T11151] BTRFS warning (device loop6): couldn't read tree root
[  236.435597][T11151] BTRFS warning (device loop6): try to load backup roots slot 3
[  236.456296][T11151] BTRFS info (device loop6): rebuilding free space tree
[  236.476826][T11151] BTRFS info (device loop6): disabling free space tree
[  236.479091][T11151] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.482110][T11151] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.491406][T11151] BTRFS info (device loop6): checking UUID tree
[  236.494124][T11151] BTRFS info (device loop6): enabling ssd optimizations
[  236.496390][T11151] BTRFS info (device loop6): turning on async discard
[  236.498518][T11151] BTRFS info (device loop6): enabling disk space caching
[  236.500725][T11151] BTRFS info (device loop6): force clearing of disk cache
[  236.503203][T11151] BTRFS info (device loop6): enabling auto defrag
[  236.505232][T11151] BTRFS info (device loop6): trying to use backup root at mount time
[  236.507758][T11151] BTRFS info (device loop6): use zstd compression, level 3
[  236.597447][ T8749] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.731857][   T34] audit: type=1326 audit(1785255138.105:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.6.1862" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fef9de99 code=0x0
[  236.867676][T11185] vivid-003: disconnect
[  236.873282][T11185] vivid-003: reconnect
[  237.410283][T11244] openvswitch: netlink: Duplicate or invalid key (type 0).
[  237.415605][T11244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.776494][T11263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  238.240073][T11287] loop6: detected capacity change from 0 to 256
[  238.247754][T11287] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  238.349914][ T6180] libceph: connect (1)[c::]:6789 error -101
[  238.358064][ T6180] libceph: mon0 (1)[c::]:6789 connect error
[  238.377402][ T6180] libceph: connect (1)[c::]:6789 error -101
[  238.383865][ T6180] libceph: mon0 (1)[c::]:6789 connect error
[  238.430782][T11293] ceph: No mds server is up or the cluster is laggy
[  238.472873][ T8767] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  238.583198][  T799] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  238.642937][ T8767] usb 9-1: Using ep0 maxpacket: 32
[  238.651658][ T8767] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  238.656516][ T8767] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  238.661230][ T8767] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.666739][ T8767] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  238.672772][ T8767] usb 9-1: config 1 has no interface number 0
[  238.676951][ T8767] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  238.682827][ T8767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.694541][ T8767] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  238.752840][  T799] usb 7-1: Using ep0 maxpacket: 32
[  238.757104][  T799] usb 7-1: config 0 has an invalid interface number: 202 but max is 1
[  238.760537][  T799] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.765546][  T799] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  238.768769][  T799] usb 7-1: config 0 has no interface number 0
[  238.771112][  T799] usb 7-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  238.775865][  T799] usb 7-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  238.779450][  T799] usb 7-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  238.786309][  T799] usb 7-1: config 0 interface 202 has no altsetting 0
[  238.790995][  T799] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  238.794177][  T799] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.799794][  T799] usb 7-1: Product: syz
[  238.803251][  T799] usb 7-1: Manufacturer: syz
[  238.805674][  T799] usb 7-1: SerialNumber: syz
[  238.814612][  T799] usb 7-1: config 0 descriptor??
[  238.836863][  T799] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  238.910660][ T8767] snd_usb_pod 9-1:1.1: endpoint not available, using fallback values
[  238.914905][ T8767] snd_usb_pod 9-1:1.1: invalid control EP
[  238.917363][ T8767] snd_usb_pod 9-1:1.1: cannot start listening: -22
[  238.920224][ T8767] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  238.933201][ T8767] snd_usb_pod 9-1:1.1: probe with driver snd_usb_pod failed with error -22
[  239.027240][ T8767] usb 7-1: USB disconnect, device number 19
[  239.038542][ T8856] usb 7-1: Failed to submit usb control message: -71
[  239.045134][ T8856] usb 7-1: unable to send the bmi data to the device: -71
[  239.064983][ T8856] usb 7-1: unable to get target info from device
[  239.068119][ T8856] usb 7-1: could not get target info (-71)
[  239.071287][ T8856] usb 7-1: could not probe fw (-71)
[  239.106687][   T33] usb 9-1: USB disconnect, device number 9
[  239.661047][T11319] loop6: detected capacity change from 0 to 512
[  239.674352][T11319] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  239.726904][T11319] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1910: bg 0: block 64: padding at end of block bitmap is not set
[  239.734741][T11319] loop6: lost filesystem error report for type 5 error -117
[  239.735659][T11319] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1910: Failed to acquire dquot type 0
[  239.743393][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  239.743417][    C0] EXT4-fs (loop6): initial error at time 1785255141: ext4_validate_block_bitmap:441
[  239.743434][    C0] EXT4-fs (loop6): last error at time 1785255141: ext4_validate_block_bitmap:441
[  239.755464][T11319] loop6: lost filesystem error report for type 5 error -117
[  239.756116][T11319] EXT4-fs (loop6): 1 truncate cleaned up
[  239.769895][T11319] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.780078][T11319] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1910: Failed to acquire dquot type 0
[  239.819936][ T8749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.969197][T11326] loop8: detected capacity change from 0 to 32768
[  239.978360][T11326] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1912 (11326)
[  240.037803][T11326] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  240.043917][T11326] BTRFS info (device loop8): using sha256 checksum algorithm
[  240.120767][T11336] loop6: detected capacity change from 0 to 2048
[  240.175922][T11336] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.192184][T11326] BTRFS info (device loop8): enabling ssd optimizations
[  240.211574][T11326] BTRFS info (device loop8): turning on async discard
[  240.225514][T11326] BTRFS info (device loop8): enabling free space tree
[  240.229622][T11326] BTRFS info (device loop8): force clearing of disk cache
[  240.242338][T11326] BTRFS info (device loop8): force zlib compression, level 3
[  240.248724][T11326] BTRFS info (device loop8): max_inline set to 0
[  240.328090][ T9736] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  240.806442][T11367] loop8: detected capacity change from 0 to 32768
[  240.809609][T11367] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1921 (11367)
[  240.822968][T11373] kAFS: unable to lookup cell '(,c'
[  240.844816][T11367] BTRFS info (device loop8): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  240.851456][T11367] BTRFS info (device loop8): using xxhash64 checksum algorithm
[  240.913139][T11367] BTRFS info (device loop8): enabling ssd optimizations
[  240.916063][T11367] BTRFS info (device loop8): turning on async discard
[  240.918844][T11367] BTRFS info (device loop8): enabling free space tree
[  240.980332][ T9736] BTRFS info (device loop8): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  241.122501][  T799] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  241.277133][  T799] usb 7-1: Using ep0 maxpacket: 8
[  241.280574][  T799] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[  241.283678][  T799] usb 7-1: config 0 has no interface number 0
[  241.285705][  T799] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  241.289200][  T799] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  241.294690][  T799] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  241.298194][  T799] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  241.299064][T11396] loop8: detected capacity change from 0 to 512
[  241.302451][  T799] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  241.308757][  T799] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.313533][  T799] usb 7-1: config 0 descriptor??
[  241.314451][T11396] EXT4-fs (loop8): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  241.318605][  T799] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  241.515768][T11396] loop8: detected capacity change from 0 to 32768
[  241.548413][   T33] usb 7-1: USB disconnect, device number 20
[  241.559386][T11396] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  241.569878][   T33] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[  241.586823][T11396] XFS (loop8): Ending clean mount
[  241.880397][ T9736] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  242.414788][T11425] loop6: detected capacity change from 0 to 32768
[  242.438655][T11425] ERROR: (device loop6): dtSearch: stack overrun!
[  242.438655][T11425] 
[  242.450977][T11425] ERROR: (device loop6): remounting filesystem as read-only
[  242.454931][T11425] btstack dump:
[  242.460889][T11425] bn = 0, index = 4
[  242.464370][T11425] bn = 0, index = 4
[  242.466133][T11425] bn = 0, index = 4
[  242.467749][T11425] bn = 0, index = 4
[  242.469264][T11425] bn = 0, index = 4
[  242.470836][T11425] bn = 0, index = 4
[  242.472402][T11425] bn = 0, index = 4
[  242.474430][T11425] bn = 0, index = 0
[  242.475945][T11425] jfs_lookup: dtSearch returned -5
[  242.591791][T11431] loop8: detected capacity change from 0 to 32768
[  242.594971][T11431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1944 (11431)
[  242.614572][T11431] BTRFS info (device loop8 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  242.618035][T11431] BTRFS info (device loop8 state S): using crc32c checksum algorithm
[  242.635344][  T757] BTRFS warning (device loop8 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  242.675234][ T1113] BTRFS warning (device loop8 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  242.690690][   T90] BTRFS warning (device loop8 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  242.700123][  T757] BTRFS warning (device loop8 state ES): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0xa652fa69 level 0, ignored
[  242.714999][T11431] BTRFS error (device loop8 state ES): failed to verify dev extents against chunks: -117
[  242.870590][T11431] BTRFS error (device loop8 state ES): open_ctree failed: -117
[  243.362873][ T5724] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  243.527067][ T5724] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  243.536574][ T5724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  243.544893][ T5724] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  243.554281][ T5724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.580199][ T5724] usb 7-1: config 0 descriptor??
[  243.795026][ T5724] ath6kl: Failed to submit usb control message: -71
[  243.797432][ T5724] ath6kl: unable to send the bmi data to the device: -71
[  243.799729][ T5724] ath6kl: Unable to send get target info: -71
[  243.810352][ T5724] ath6kl: Failed to init ath6kl core: -71
[  243.837045][ T5724] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  243.862243][ T5724] usb 7-1: USB disconnect, device number 21
[  244.212845][ T8767] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  244.369431][ T8767] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.373866][ T8767] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  244.377601][ T8767] usb 9-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  244.389293][ T8767] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[  244.399414][ T8767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.404922][ T8767] usb 9-1: Product: syz
[  244.407264][ T8767] usb 9-1: Manufacturer: syz
[  244.409346][ T8767] usb 9-1: SerialNumber: syz
[  244.671359][ T8767] usb 9-1: 0:2 : does not exist
[  245.329845][ T8767] usb 9-1: USB disconnect, device number 10
[  245.487822][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  245.568463][T11520] loop6: detected capacity change from 0 to 256
[  245.589646][T11520] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[  245.870506][T11540] loop6: detected capacity change from 0 to 256
[  245.881577][T11540] exfat: Deprecated parameter 'namecase'
[  245.893377][T11540] exfat: Deprecated parameter 'utf8'
[  245.903309][ T8767] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  245.917539][T11540] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  246.068161][ T8767] usb 9-1: unable to get BOS descriptor or descriptor too short
[  246.078820][ T8767] usb 9-1: config 1 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 68, changing to 10
[  246.095688][ T8767] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  246.111676][ T8767] usb 9-1: config 1 interface 0 has no altsetting 0
[  246.122244][ T8767] usb 9-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40
[  246.129670][ T8767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.137058][ T8767] usb 9-1: Product: syz
[  246.140497][ T8767] usb 9-1: Manufacturer: syz
[  246.148517][ T8767] usb 9-1: SerialNumber: syz
[  246.150037][T11547] input: syz0 as /devices/virtual/input/input23
[  246.381682][ T8767] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input24
[  246.426563][ T5040] bcm5974 9-1:1.0: could not read from device
[  246.445334][ T5040] bcm5974 9-1:1.0: could not read from device
[  246.449128][ T8767] usb 9-1: USB disconnect, device number 11
[  246.892837][  T799] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  247.047778][  T799] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  247.052741][  T799] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  247.059259][  T799] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  247.069345][  T799] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  247.073635][  T799] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  247.079348][  T799] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  247.085540][  T799] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  247.089853][  T799] usb 7-1: Product: syz
[  247.094805][  T799] usb 7-1: Manufacturer: syz
[  247.104958][  T799] cdc_wdm 7-1:1.0: skipping garbage
[  247.108498][  T799] cdc_wdm 7-1:1.0: skipping garbage
[  247.119597][  T799] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  247.124008][  T799] cdc_wdm 7-1:1.0: Unknown control protocol
[  247.262816][   T24] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  247.412880][   T24] usb 9-1: Using ep0 maxpacket: 32
[  247.418503][   T24] usb 9-1: unable to get BOS descriptor or descriptor too short
[  247.423786][   T24] usb 9-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.429237][   T24] usb 9-1: config 1 interface 0 has no altsetting 0
[  247.436441][   T24] usb 9-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.40
[  247.440455][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.444220][   T24] usb 9-1: Product: syz
[  247.446160][   T24] usb 9-1: Manufacturer: 魙豠讬ې₺஡ڃꘔࠢ⨰瑭慢鱸䂢䩀잠ᶏ힙﬙贸䢬㔧酚馉㲁ￋሸ再⣷聢썞滩粢嬄孓䥷舶鐝쎷
[  247.453130][   T24] usb 9-1: SerialNumber: syz
[  247.669950][   T24] usbhid 9-1:1.0: can't add hid device: -71
[  247.672071][   T24] usbhid 9-1:1.0: probe with driver usbhid failed with error -71
[  247.677491][   T24] usb 9-1: USB disconnect, device number 12
[  247.751061][ T5622] usb 7-1: USB disconnect, device number 22
[  248.221941][T11614] netlink: 'syz.8.2006': attribute type 8 has an invalid length.
[  248.226023][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2006'.
[  248.251128][T11618] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  248.690916][ T5622] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  248.867246][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout
[  249.048721][   T33] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  249.050916][   T33] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  249.122853][ T5622] usb 9-1: Using ep0 maxpacket: 32
[  249.127695][ T5622] usb 9-1: config 0 has an invalid interface number: 51 but max is 0
[  249.131127][ T5622] usb 9-1: config 0 has no interface number 0
[  249.136475][ T5622] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  249.139532][ T5622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.142156][ T5622] usb 9-1: Product: syz
[  249.144517][ T5622] usb 9-1: Manufacturer: syz
[  249.146022][ T5622] usb 9-1: SerialNumber: syz
[  249.149108][ T5622] usb 9-1: config 0 descriptor??
[  249.152380][ T5622] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  249.359878][ T5622] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  249.366339][ T5622] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  249.762980][    C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71
[  249.763485][ T5615] usb 9-1: USB disconnect, device number 13
[  249.778372][ T5615] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  249.793978][ T5615] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  249.799553][ T5615] quatech2 9-1:0.51: device disconnected
[  250.305435][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2029'.
[  251.193024][ T5613] Bluetooth: hci1: command 0x0c1a tx timeout
[  251.193923][   T33] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  251.202269][   T33] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  251.961083][T11704] batman_adv: batadv0: Adding interface: macvtap1
[  251.963800][T11704] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  251.973569][T11704] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  253.114299][   T34] kauditd_printk_skb: 4 callbacks suppressed
[  253.114321][   T34] audit: type=1800 audit(1785255154.485:143): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2057" name="nullb0" dev="tmpfs" ino=1894 res=0 errno=0
[  253.352942][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout
[  253.353993][   T33] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  253.358310][   T33] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  254.180033][T11742] loop8: detected capacity change from 0 to 32768
[  254.180057][T11759] fuse: Bad value for 'fd'
[  254.193385][T11742] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  254.224963][T11742] XFS (loop8): Ending clean mount
[  254.266426][T11773] loop6: detected capacity change from 0 to 512
[  254.305559][T11773] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  254.332924][T11773] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2075: invalid indirect mapped block 32768 (level 2)
[  254.342364][T11773] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  254.358067][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  254.362966][    C1] EXT4-fs (loop6): initial error at time 1785255155: ext4_free_branches:1023: inode 16
[  254.366020][    C1] EXT4-fs (loop6): last error at time 1785255155: ext4_free_branches:1023: inode 16
[  254.375938][T11773] EXT4-fs (loop6): Remounting filesystem read-only
[  254.378423][T11773] EXT4-fs (loop6): 1 orphan inode deleted
[  254.380233][T11773] EXT4-fs (loop6): 1 truncate cleaned up
[  254.383120][T11773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.184759][ T8749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.232763][ T9736] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  255.410977][T11787] fuse: Bad value for 'fd'
[  255.617591][T11793] veth0_macvtap: left promiscuous mode
[  255.684450][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  255.686509][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  255.725513][T11785] loop6: detected capacity change from 0 to 32768
[  255.733577][T11785] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  255.749444][T11785] JBD2: Ignoring recovery information on journal
[  255.865859][T11785] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  256.014935][T11785] (syz.6.2079,11785,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  256.023909][T11785] (syz.6.2079,11785,0):ocfs2_check_set_options:1243 ERROR: Invalid heartbeat mount options
[  256.071367][ T8749] ocfs2: Unmounting device (7,6) on (node local)
[  256.452790][T11807] loop8: detected capacity change from 0 to 65536
[  256.467719][T11807] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  256.481135][T11807] XFS (loop8): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  256.518743][ T8767] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  256.520086][T11807] XFS (loop8): Metadata corruption detected at xfs_buf_ioend+0x31b/0x750, xfs_inode block 0x40 xfs_inode_buf_verify
[  256.526767][T11807] XFS (loop8): Unmount and run xfs_repair
[  256.529038][T11807] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[  256.531970][T11807] 00000000: 49 4e 41 05 00 00 00 00 00 00 00 00 00 00 00 00  INA.............
[  256.535743][T11807] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  256.539293][T11807] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 a7 8d ff 64  ..e.....4.Xh...d
[  256.542964][T11807] 00000030: 34 f7 58 68 a7 8d ff 64 00 00 00 00 00 00 00 4b  4.Xh...d.......K
[  256.546746][T11807] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  256.550314][T11807] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  256.554306][T11807] 00000060: ff ff ff ff 39 ed 3f 1a 00 00 00 00 00 00 00 07  ....9.?.........
[  256.557711][T11807] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  256.561487][T11807] XFS (loop8): metadata I/O error in "xfs_read_icluster+0x218/0x3e0" at daddr 0x40 len 32 error 117
[  256.566251][T11807] loop8: lost filesystem error report for type 5 error -117
[  256.566323][T11807] XFS (loop8): Failed to read root inode 0x40, error 117
[  256.572597][T11807] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261).  Shutting down filesystem.
[  256.578006][T11807] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  256.581419][T11807] loop8: lost filesystem error report for type 5 error -108
[  256.915604][ T8767] usb 7-1: Using ep0 maxpacket: 16
[  256.922245][ T8767] usb 7-1: unable to get BOS descriptor or descriptor too short
[  256.926305][ T8767] usb 7-1: config 127 has an invalid interface number: 124 but max is 0
[  256.928969][ T8767] usb 7-1: config 127 has no interface number 0
[  256.931219][ T8767] usb 7-1: config 127 interface 124 has no altsetting 0
[  256.935230][ T8767] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  256.938259][ T8767] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.941017][ T8767] usb 7-1: Product: syz
[  256.942530][ T8767] usb 7-1: Manufacturer: syz
[  256.944792][ T8767] usb 7-1: SerialNumber: syz
[  257.218713][T11835] loop8: detected capacity change from 0 to 32768
[  257.221609][T11835] btrfs: Deprecated parameter 'usebackuproot'
[  257.225227][T11835] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  257.240350][T11835] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2099 (11835)
[  257.295405][T11835] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.298997][T11835] BTRFS info (device loop8): using crc32c checksum algorithm
[  257.347543][T11835] BTRFS info (device loop8): rebuilding free space tree
[  257.378210][T11835] BTRFS info (device loop8): setting nodatasum
[  257.380705][T11835] BTRFS info (device loop8): allowing degraded mounts
[  257.383799][T11835] BTRFS info (device loop8): enabling ssd optimizations
[  257.386329][T11835] BTRFS info (device loop8): turning on sync discard
[  257.388537][T11835] BTRFS info (device loop8): enabling free space tree
[  257.390994][T11835] BTRFS info (device loop8): force clearing of disk cache
[  257.394556][T11835] BTRFS info (device loop8): trying to use backup root at mount time
[  257.397486][T11835] BTRFS info (device loop8): max_inline set to 0
[  257.400955][T11835] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  257.784628][   T33] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  257.878065][ T8767] usb 7-1: reset high-speed USB device number 23 using dummy_hcd
[  257.942821][   T33] usb 9-1: Using ep0 maxpacket: 32
[  257.946973][   T33] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.951057][   T33] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.956914][   T33] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  257.959900][   T33] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  257.962588][   T33] usb 9-1: Product: syz
[  257.964056][   T33] usb 9-1: Manufacturer: syz
[  257.969172][   T33] hub 9-1:4.0: USB hub found
[  258.055048][ T8767] usb 7-1: unable to get BOS descriptor or descriptor too short
[  258.175381][   T33] hub 9-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  258.291232][ T8767] usb 7-1: failed to restore interface 124 altsetting 11 (error=-71)
[  258.308676][ T8767] usb 7-1: USB disconnect, device number 23
[  258.483207][   T33] usb 9-1: USB disconnect, device number 14
[  258.852227][T11865] netlink: 'syz.6.2105': attribute type 1 has an invalid length.
[  258.917569][T11867] loop6: detected capacity change from 0 to 128
[  258.926363][T11867] EXT4-fs: Ignoring removed orlov option
[  258.958880][T11867] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  258.963560][T11867] ext4 filesystem being mounted at /295/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  258.970952][T11870] loop8: detected capacity change from 0 to 1024
[  258.993107][ T8749] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.301143][T11888] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2115'.
[  259.421651][T11886] loop8: detected capacity change from 0 to 32768
[  259.441750][T11886] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.471030][T11886] XFS (loop8): Ending clean mount
[  259.473486][T11902] loop6: detected capacity change from 0 to 512
[  259.474713][T11902] EXT4-fs: Ignoring removed nobh option
[  259.502440][T11902] EXT4-fs (loop6): orphan cleanup on readonly fs
[  259.508432][T11902] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  259.513784][T11902] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2118: corrupted inode contents
[  259.517629][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.524624][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  259.529544][    C0] EXT4-fs (loop6): initial error at time 1785255160: ext4_do_update_inode:5742: inode 15
[  259.532549][    C0] EXT4-fs (loop6): last error at time 1785255160: ext4_do_update_inode:5742: inode 15
[  259.544963][ T9736] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  259.553603][T11902] EXT4-fs error (device loop6): ext4_dirty_inode:6639: inode #15: comm syz.6.2118: mark_inode_dirty error
[  259.559072][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.584520][T11902] EXT4-fs error (device loop6): ext4_do_update_inode:5742: inode #15: comm syz.6.2118: corrupted inode contents
[  259.598755][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.600849][T11902] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #15: comm syz.6.2118: mark_inode_dirty error
[  259.611086][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.611610][T11902] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #15: comm syz.6.2118: mark inode dirty (error -117)
[  259.669022][T11902] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  259.669299][T11902] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117)
[  259.682918][T11902] EXT4-fs (loop6): 1 orphan inode deleted
[  259.686113][T11902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  259.749736][ T8749] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.890859][T11909] loop6: detected capacity change from 0 to 128
[  259.929572][T11905] loop8: detected capacity change from 0 to 40427
[  259.934382][T11905] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  259.936662][T11905] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  259.939515][T11905] F2FS-fs (loop8): build fault injection rate: 17008
[  259.941675][T11905] F2FS-fs (loop8): build fault injection type: 0x6
[  259.944567][T11905] F2FS-fs (loop8): invalid crc value
[  260.028431][T11905] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  260.045020][T11905] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  260.047391][T11905] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  260.365677][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2128'.
[  260.400469][T11916] loop6: detected capacity change from 0 to 40427
[  260.416847][T11916] F2FS-fs (loop6): Wrong segment_count / block_count (31 > 0)
[  260.425292][T11916] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  260.427956][T11916] F2FS-fs (loop6): old and new quota format mixing
[  260.483840][T11931] tap0: tun_chr_ioctl cmd 1074025675
[  260.486226][T11931] tap0: persist enabled
[  260.488677][T11927] tap0: tun_chr_ioctl cmd 1074025675
[  260.491020][T11927] tap0: persist enabled
[  260.583744][T11934] loop8: detected capacity change from 0 to 256
[  261.557852][T11952] fuse: Bad value for 'fd'
[  261.957589][T11960] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2141'.
[  262.033043][ T5724] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  262.182825][ T5724] usb 7-1: Using ep0 maxpacket: 8
[  262.193162][ T5724] usb 7-1: unable to get BOS descriptor or descriptor too short
[  262.204772][ T5724] usb 7-1: config 0 has an invalid interface number: 88 but max is 0
[  262.207784][ T5724] usb 7-1: config 0 has no interface number 0
[  262.211064][ T5724] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 50, changing to 9
[  262.219925][ T5724] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 41107, setting to 1024
[  262.230374][ T5724] usb 7-1: config 0 interface 88 has no altsetting 0
[  262.254533][ T5724] usb 7-1: string descriptor 0 read error: -22
[  262.258540][ T5724] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  262.264360][ T5724] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  262.278746][ T5724] usb 7-1: config 0 descriptor??
[  262.314280][ T5724] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input25
[  262.661186][ T8767] usb 7-1: USB disconnect, device number 24
[  263.406253][T11973] loop6: detected capacity change from 0 to 32768
[  263.485481][T11973] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  263.537915][T11973] XFS (loop6): Ending clean mount
[  263.559180][T11973] XFS (loop6): Quotacheck needed: Please wait.
[  263.648478][T11973] XFS (loop6): Quotacheck: Done.
[  263.944660][   T34] audit: type=1800 audit(1785255165.255:144): pid=11999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2147" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=4429 res=0 errno=0
[  264.045399][T12006] loop8: detected capacity change from 0 to 512
[  264.053660][T12006] EXT4-fs: Ignoring removed i_version option
[  264.088702][T12006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.093392][T12006] ext4 filesystem being mounted at /220/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.113819][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.184243][ T8749] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  264.415554][ T8767] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  264.667965][ T8767] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  264.671937][ T8767] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  264.679661][ T8767] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  264.684858][ T8767] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  264.688619][ T8767] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  264.731289][ T8767] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  264.736249][ T8767] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  264.739092][ T8767] usb 9-1: Product: syz
[  264.740564][ T8767] usb 9-1: Manufacturer: syz
[  264.752111][ T8767] cdc_wdm 9-1:1.0: skipping garbage
[  264.756183][ T8767] cdc_wdm 9-1:1.0: skipping garbage
[  264.759222][ T8767] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[  264.761377][ T8767] cdc_wdm 9-1:1.0: Unknown control protocol
[  265.209298][    C0] cdc_wdm 9-1:1.0: Unexpected error -71
[  265.214008][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  265.217001][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  265.219651][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  265.221770][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  265.224295][ T8767] usb 9-1: USB disconnect, device number 15
[  265.226597][    C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[  265.226607][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[  265.226614][    C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  265.527250][T12062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2181'.
[  266.017538][ T8856] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.414849][ T8856] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.518281][ T4995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  266.538045][ T4995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  266.545152][ T4995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  266.548683][ T8856] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.556509][ T4995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  266.564112][ T4995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.638145][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  266.649816][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  266.678162][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  266.683352][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  266.688285][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  266.819286][ T8856] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.387445][ T8856] bridge_slave_1: left allmulticast mode
[  267.389848][ T8856] bridge_slave_1: left promiscuous mode
[  267.392261][ T8856] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.396774][ T8856] bridge_slave_0: left allmulticast mode
[  267.398695][ T8856] bridge_slave_0: left promiscuous mode
[  267.400696][ T8856] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.596639][ T8856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  267.611352][ T8856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  267.619911][ T8856] bond0 (unregistering): Released all slaves
[  267.637559][ T5351] 8021q: adding VLAN 0 to HW filter on device eth21
[  268.070055][T12135] loop8: detected capacity change from 0 to 128
[  268.106915][T12135] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  268.114344][T12135] hpfs: filesystem error: improperly stopped
[  268.121582][T12135] hpfs: You really don't want any checks? You are crazy...
[  268.129920][T12135] hpfs: hpfs_map_sector(): read error
[  268.130388][ T5351] 8021q: adding VLAN 0 to HW filter on device eth22
[  268.131715][T12135] hpfs: code page support is disabled
[  268.136848][T12135] hpfs: hpfs_map_4sectors(): unaligned read
[  268.139111][T12135] hpfs: hpfs_map_4sectors(): unaligned read
[  268.141056][T12135] hpfs: filesystem error: unable to find root dir
[  268.198674][T12077] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.223268][T12077] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.229833][T12077] bridge_slave_0: entered allmulticast mode
[  268.239304][T12077] bridge_slave_0: entered promiscuous mode
[  268.333254][T12077] bridge0: port 2(bridge_slave_1) entered blocking state
[  268.335841][T12077] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.339430][T12077] bridge_slave_1: entered allmulticast mode
[  268.346615][T12077] bridge_slave_1: entered promiscuous mode
[  268.426785][T12077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  268.439291][T12077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  268.462439][ T8856] hsr_slave_0: left promiscuous mode
[  268.467677][ T8856] hsr_slave_1: left promiscuous mode
[  268.481165][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.501134][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.525440][ T8856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.535032][ T8856] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.584766][ T8856] veth1_macvtap: left promiscuous mode
[  268.590705][ T8856] veth0_macvtap: left promiscuous mode
[  268.593612][ T8856] veth1_vlan: left promiscuous mode
[  268.596980][ T8856] veth0_vlan: left promiscuous mode
[  268.792986][ T5613] Bluetooth: hci2: command tx timeout
[  268.811891][ T8856] team0 (unregistering): Port device team_slave_1 removed
[  268.822945][ T8767] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[  268.831117][ T8856] team0 (unregistering): Port device team_slave_0 removed
[  268.961277][ T5351] 8021q: adding VLAN 0 to HW filter on device eth23
[  268.975713][ T8767] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  268.983046][ T8767] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.991698][ T8767] usb 9-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00
[  269.004909][ T8767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.011550][ T8767] usb 9-1: config 0 descriptor??
[  269.018280][T12077] team0: Port device team_slave_0 added
[  269.029171][T12077] team0: Port device team_slave_1 added
[  269.084305][T12077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.086740][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.118960][T12077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.130620][T12077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.136241][T12077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  269.167241][T12077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.300406][T12077] hsr_slave_0: entered promiscuous mode
[  269.306891][T12077] hsr_slave_1: entered promiscuous mode
[  269.501970][ T8767] cypress 0003:04B4:DE64.0010: hidraw0: USB HID vff.ff Device [HID 04b4:de64] on usb-dummy_hcd.8-1/input0
[  269.633276][T12077] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  269.686778][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  269.703968][T12077] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  269.764010][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  269.768022][ T5697] usb 9-1: USB disconnect, device number 16
[  269.848343][T12077] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  269.858663][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  269.880956][T12077] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  269.944795][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.189098][ T5351] 8021q: adding VLAN 0 to HW filter on device eth24
[  270.350927][T12077] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.378923][T12077] 8021q: adding VLAN 0 to HW filter on device team0
[  270.389132][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.391434][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.405959][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.408273][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.724909][T12221] loop8: detected capacity change from 0 to 8
[  270.808928][T12221] SQUASHFS error: zlib decompression failed, data probably corrupt
[  270.811525][T12221] SQUASHFS error: Failed to read block 0x4de: -5
[  270.814321][T12221] SQUASHFS error: zlib decompression failed, data probably corrupt
[  270.817084][T12221] SQUASHFS error: Failed to read block 0x4df: -5
[  270.820032][T12221] SQUASHFS error: zlib decompression failed, data probably corrupt
[  270.825084][T12221] SQUASHFS error: Failed to read block 0x4e0: -5
[  270.829892][T12221] SQUASHFS error: zlib decompression failed, data probably corrupt
[  270.832974][T12221] SQUASHFS error: Failed to read block 0x4de: -5
[  270.846400][T12221] SQUASHFS error: Unable to read inode 0xe3
[  270.853550][   T34] audit: type=1800 audit(1785255172.215:145): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2227" name="file1" dev="loop8" ino=5 res=0 errno=0
[  270.879509][ T5613] Bluetooth: hci2: command tx timeout
[  271.539785][T12077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.699892][T12077] veth0_vlan: entered promiscuous mode
[  271.706327][T12077] veth1_vlan: entered promiscuous mode
[  271.730199][T12077] veth0_macvtap: entered promiscuous mode
[  271.742539][T12077] veth1_macvtap: entered promiscuous mode
[  271.759146][T12077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.770838][T12077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.780745][ T5722] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.784916][ T5722] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.789635][ T5722] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.795076][ T5722] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.978771][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.984294][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.007952][ T6121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.012782][ T6121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.068777][T12243] loop9: detected capacity change from 0 to 512
[  272.113613][T12243] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  272.127908][T12243] EXT4-fs (loop9): orphan cleanup on readonly fs
[  272.131018][T12243] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.2187: Block bitmap for bg 0 marked uninitialized
[  272.142509][T12243] loop9: lost filesystem error report for type 5 error -117
[  272.156490][    C1] EXT4-fs (loop9): error count since last fsck: 1
[  272.161901][    C1] EXT4-fs (loop9): initial error at time 1785255173: ext4_read_block_bitmap_nowait:517
[  272.165718][    C1] EXT4-fs (loop9): last error at time 1785255173: ext4_read_block_bitmap_nowait:517
[  272.177877][T12243] EXT4-fs (loop9): Remounting filesystem read-only
[  272.184469][T12243] EXT4-fs (loop9): 1 orphan inode deleted
[  272.188483][T12243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  272.214586][T12077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.404458][T12248] loop9: detected capacity change from 0 to 4096
[  272.409238][T12248] ext4: Unknown parameter 'fsuuid'
[  272.426989][T12247] uprobe: syz.9.2234:12247 failed to unregister, leaking uprobe
[  272.452267][T12247] uprobe: syz.9.2234:12247 failed to unregister, leaking uprobe
[  272.634039][T12260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.852898][   T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  272.949221][    C0] vcan0: j1939_tp_rxtimer: 0xffff888101f9dc00: rx timeout, send abort
[  272.958095][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888101f9dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  272.963025][ T5613] Bluetooth: hci2: command tx timeout
[  272.969346][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888113769400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  273.017352][   T24] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  273.020730][   T24] usb 10-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  273.025970][   T24] usb 10-1: config 2 interface 0 has no altsetting 0
[  273.030316][   T24] usb 10-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  273.036122][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.038915][   T24] usb 10-1: Product: syz
[  273.040377][   T24] usb 10-1: Manufacturer: syz
[  273.042282][   T24] usb 10-1: SerialNumber: syz
[  273.259845][   T24] usb 10-1: USB disconnect, device number 2
[  274.249074][    C0] vcan0: j1939_tp_rxtimer: 0xffff888113769800: rx timeout, send abort
[  274.252490][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888113769800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  274.258042][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881153cb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  275.043198][ T5613] Bluetooth: hci2: command tx timeout
[  275.254096][T12316] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2263'.
[  275.404938][T12307] loop8: detected capacity change from 0 to 32768
[  275.671971][T12328] loop8: detected capacity change from 0 to 1024
[  276.109359][T12338] loop8: detected capacity change from 0 to 32768
[  276.140109][   T34] audit: type=1800 audit(1785255177.515:146): pid=12338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2273" name="file1" dev="loop8" ino=4 res=0 errno=0
[  276.405393][T12348] fuse: fd is not a fuse device
[  276.657340][T12359] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  277.212951][   T24] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  277.382871][   T24] usb 9-1: Using ep0 maxpacket: 16
[  277.388814][   T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.396990][   T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  277.406576][   T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  277.412336][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.417085][   T24] usb 9-1: Product: syz
[  277.420309][   T24] usb 9-1: Manufacturer: syz
[  277.423545][   T24] usb 9-1: SerialNumber: syz
[  277.433507][   T24] usb 9-1: 0:2 : does not exist
[  277.644266][   T24] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[  277.675067][   T24] usb 9-1: USB disconnect, device number 17
[  277.704804][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  278.036665][T12395] loop9: detected capacity change from 0 to 2048
[  278.114210][T12397] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  278.262523][T12399] loop8: detected capacity change from 0 to 16
[  278.268189][T12399] erofs (device loop8): mounted with root inode @ nid 36.
[  278.269348][T12397] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  278.279405][T12397] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  278.300628][T12397] Remounting filesystem read-only
[  278.321067][T12077] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  278.378497][T12403] loop8: detected capacity change from 0 to 4096
[  278.416489][T12403] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  278.467432][T12403] ntfs3(loop8): ino=21, The size of extended attributes must not exceed 64KiB
[  278.639956][T12422] loop8: detected capacity change from 0 to 512
[  278.648054][T12422] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  278.655397][T12422] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2311: bad orphan inode 131083
[  278.659611][T12422] loop8: lost filesystem error report for type 5 error -117
[  278.660538][T12422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  278.674092][T12422] syz.8.2311 (pid 12422) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  278.699132][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.777744][T12428] sctp: [Deprecated]: syz.9.2314 (pid 12428) Use of int in max_burst socket option deprecated.
[  278.777744][T12428] Use struct sctp_assoc_value instead
[  278.859924][T12434] loop8: detected capacity change from 0 to 1024
[  278.909446][T12434] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[  278.913018][T12434] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  278.916543][T12434] EXT4-fs error (device loop8): ext4_acquire_dquot:7041: comm syz.8.2317: Failed to acquire dquot type 0
[  278.920186][T12434] loop8: lost filesystem error report for type 5 error -5
[  278.923519][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  278.928329][    C1] EXT4-fs (loop8): initial error at time 1785255180: ext4_acquire_dquot:7041
[  278.931544][    C1] EXT4-fs (loop8): last error at time 1785255180: ext4_acquire_dquot:7041
[  278.940501][T12434] EXT4-fs (loop8): 1 truncate cleaned up
[  278.943486][T12434] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.980013][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.242799][  T799] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  279.493980][  T799] usb 10-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[  279.497283][  T799] usb 10-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[  279.525896][  T799] usb 10-1: Product: syz
[  279.527854][  T799] usb 10-1: Manufacturer: syz
[  279.529492][  T799] usb 10-1: SerialNumber: syz
[  279.691219][  T799] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[  280.089649][  T799] vp7045: USB control message 'in' went wrong.
[  280.092997][  T799] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  280.097152][  T799] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[  280.105532][  T799] usb 10-1: USB disconnect, device number 3
[  280.501463][T12473] loop8: detected capacity change from 0 to 2048
[  280.531486][T12473] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  280.537471][T12473] nilfs2: block size(65536) > page size(4096) not supported by filesystem
[  280.541070][T12473] NILFS (loop8): bad blocksize 65536
[  280.776938][   T34] audit: type=1800 audit(1785255182.155:147): pid=12489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2341" name="dbroot" dev="configfs" ino=30879 res=0 errno=0
[  281.323675][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2363'.
[  281.340400][ T5722] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  281.340430][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2363'.
[  281.346235][ T5722] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  281.350464][ T5722] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  281.356062][ T5722] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  281.368124][T12525] loop8: detected capacity change from 0 to 32768
[  281.416202][T12525] ialloc: diAlloc returned -28!
[  281.601326][T12547] fuse: fd is not a fuse device
[  281.748848][T12560] loop8: detected capacity change from 0 to 2048
[  281.772065][T12560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.925448][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  282.143262][T12591] tmpfs: Bad value for 'mpol'
[  282.228128][   T33] IPVS: starting estimator thread 0...
[  282.313909][T12602] IPVS: using max 83 ests per chain, 199200 per kthread
[  282.335052][T12612] loop9: detected capacity change from 0 to 1024
[  282.360024][   T34] audit: type=1800 audit(1785255183.735:148): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2389" name="file1" dev="loop9" ino=20 res=0 errno=0
[  282.360604][T12612] hfsplus: extend alloc file! (16384,256,150995124)
[  282.360663][T12612] hfsplus: failed to extend attributes file
[  282.361210][T12612] hfsplus: extend alloc file! (16384,256,150995124)
[  282.361219][T12612] hfsplus: failed to extend attributes file
[  282.442506][T12619] netlink: 'syz.9.2390': attribute type 10 has an invalid length.
[  282.506451][T12619] team0: Port device dummy0 added
[  282.569995][T12626] fuse: fd is not a fuse device
[  282.720039][T12641] loop8: detected capacity change from 0 to 256
[  283.496722][T12634] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  283.499772][T12634] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  283.517166][T12634] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  284.586366][T12678] loop9: detected capacity change from 0 to 4096
[  284.594069][T12678] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  284.616199][T12678] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  284.621691][T12678] ntfs3(loop9): Failed to load $AttrDef (-22)
[  284.723263][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout
[  284.942805][ T5695] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  285.106729][ T5695] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  285.110448][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.121212][ T5695] usb 10-1: Product: syz
[  285.123145][ T5695] usb 10-1: Manufacturer: syz
[  285.128529][ T5695] usb 10-1: SerialNumber: syz
[  285.140663][ T5695] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  285.192558][   T10] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  285.349195][T12699] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.902127][ T5695] usb 10-1: USB disconnect, device number 4
[  286.474175][   T10] usb 10-1: Service connection timeout for: 256
[  286.478194][   T10] ath9k_htc 10-1:1.0: ath9k_htc: Unable to initialize HTC services
[  286.505531][   T10] ath9k_htc: Failed to initialize the device
[  286.512453][ T5695] usb 10-1: ath9k_htc: USB layer deinitialized
[  286.580637][T12727] cgroup: name respecified
[  286.793930][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout
[  286.803443][T12741] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2440'.
[  287.690462][T12776] loop8: detected capacity change from 0 to 128
[  287.695324][T12776] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  287.699117][T12776] hpfs: filesystem error: improperly stopped
[  287.705858][T12776] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  287.715200][T12776] hpfs: You really don't want any checks? You are crazy...
[  287.717879][T12776] hpfs: hpfs_map_sector(): read error
[  287.719979][T12776] hpfs: code page support is disabled
[  287.727904][T12778] loop9: detected capacity change from 0 to 1024
[  287.730422][T12778] EXT4-fs: Ignoring removed orlov option
[  287.735204][T12776] hpfs: hpfs_map_4sectors(): unaligned read
[  287.738318][T12776] hpfs: hpfs_map_4sectors(): unaligned read
[  287.742877][T12776] hpfs: filesystem error: unable to find root dir
[  287.804872][T12778] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.293000][ T5695] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  288.453238][ T5695] usb 10-1: Using ep0 maxpacket: 16
[  288.458932][ T5695] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  288.462845][ T5695] usb 10-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[  288.466269][ T5695] usb 10-1: Product: syz
[  288.468064][ T5695] usb 10-1: Manufacturer: syz
[  288.470033][ T5695] usb 10-1: SerialNumber: syz
[  288.474688][ T5695] usb 10-1: config 0 descriptor??
[  288.482421][ T5695] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  288.683674][   T24] usb 10-1: USB disconnect, device number 5
[  288.914689][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout
[  289.208893][T12077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.374622][T12830] loop9: detected capacity change from 0 to 512
[  289.377325][T12830] EXT4-fs: Ignoring removed bh option
[  289.400014][T12830] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2478: invalid indirect mapped block 256 (level 2)
[  289.405147][T12830] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  289.405681][T12830] EXT4-fs (loop9): 2 truncates cleaned up
[  289.411733][T12830] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.420404][T12830] fscrypt (loop9, inode 18): Direct key flag not allowed with different contents and filenames modes
[  289.436460][T12077] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.494625][T12833] loop9: detected capacity change from 0 to 256
[  289.499133][T12833] exfat: Deprecated parameter 'namecase'
[  289.501647][T12833] exfat: Deprecated parameter 'namecase'
[  289.510285][T12833] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  289.875243][ T5722] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.997886][T12840] qnx4: unable to read the superblock
[  290.013032][ T4995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  290.024023][ T4995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  290.027430][ T4995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  290.035653][ T4995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  290.038621][ T4995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  290.278330][ T5722] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.374363][ T5722] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.521017][T12864] loop8: detected capacity change from 0 to 32768
[  290.524162][T12864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2492 (12864)
[  290.529933][T12864] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  290.533122][T12864] BTRFS info (device loop8): using crc32c checksum algorithm
[  290.629094][ T6478] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  290.636937][T12864] BTRFS warning (device loop8): couldn't read tree root
[  290.639197][T12864] BTRFS warning (device loop8): try to load backup roots slot 1
[  290.644620][   T36] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  290.653398][T12864] BTRFS warning (device loop8): couldn't read tree root
[  290.655673][T12864] BTRFS warning (device loop8): try to load backup roots slot 2
[  290.658244][ T6121] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  290.661692][T12864] BTRFS warning (device loop8): couldn't read tree root
[  290.664081][T12864] BTRFS warning (device loop8): try to load backup roots slot 3
[  290.677000][T12864] BTRFS info (device loop8): checking UUID tree
[  290.679667][T12864] BTRFS info (device loop8): setting nodatasum
[  290.681776][T12864] BTRFS info (device loop8): enabling ssd optimizations
[  290.684570][T12864] BTRFS info (device loop8): turning on flush-on-commit
[  290.687312][T12864] BTRFS info (device loop8): turning on async discard
[  290.689788][T12864] BTRFS info (device loop8): enabling free space tree
[  290.691891][T12864] BTRFS info (device loop8): trying to use backup root at mount time
[  290.695026][T12864] BTRFS info (device loop8): max_inline set to 0
[  290.758356][ T5722] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.360200][T12841] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.372971][T12841] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.376837][T12841] bridge_slave_0: entered allmulticast mode
[  291.380681][T12841] bridge_slave_0: entered promiscuous mode
[  291.388849][T12841] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.391773][T12841] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.397787][T12841] bridge_slave_1: entered allmulticast mode
[  291.401216][T12841] bridge_slave_1: entered promiscuous mode
[  291.446474][ T9736] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  291.528422][T12897] fuse: fd is not a fuse device
[  291.596236][T12841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.659683][ T5722] bridge_slave_1: left allmulticast mode
[  291.665695][ T5722] bridge_slave_1: left promiscuous mode
[  291.671707][ T5722] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.687309][ T5722] bridge_slave_0: left allmulticast mode
[  291.690843][ T5722] bridge_slave_0: left promiscuous mode
[  291.699112][ T5722] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.734533][T12907] loop8: detected capacity change from 0 to 512
[  291.737067][T12907] EXT4-fs: Ignoring removed bh option
[  291.781778][T12907] EXT4-fs warning (device loop8): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  291.786076][T12907] EXT4-fs warning (device loop8): dx_probe:849: Enable large directory feature to access it
[  291.795013][T12907] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2494: Corrupt directory, running e2fsck is recommended
[  291.824796][T12907] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117
[  291.828283][T12907] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2494: corrupted in-inode xattr: e_name out of bounds
[  291.834542][T12907] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  291.834886][T12907] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2494: couldn't read orphan inode 15 (err -117)
[  291.843083][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  291.843096][    C1] EXT4-fs (loop8): initial error at time 1785255193: ext4_iget_extra_inode:5180: inode 15
[  291.843109][    C1] EXT4-fs (loop8): last error at time 1785255193: ext4_iget_extra_inode:5180: inode 15
[  291.854110][T12907] loop8: lost filesystem error report for type 5 error -117
[  291.855129][T12907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.880165][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.071852][ T5722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  292.084163][ T5722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  292.094127][ T5722] bond0 (unregistering): Released all slaves
[  292.114904][T12841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.119081][ T5351] 8021q: adding VLAN 0 to HW filter on device eth25
[  292.175588][ T4995] Bluetooth: hci2: command tx timeout
[  292.251053][T12841] team0: Port device team_slave_0 added
[  292.259641][T12841] team0: Port device team_slave_1 added
[  292.410979][T12841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.414260][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.430164][T12841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.438940][T12841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.441940][T12841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  292.451790][T12841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.503836][T12841] hsr_slave_0: entered promiscuous mode
[  292.509226][T12841] hsr_slave_1: entered promiscuous mode
[  292.514096][T12841] debugfs: 'hsr0' already exists in 'hsr'
[  292.516029][T12841] Cannot create hsr debugfs directory
[  292.637060][ T5351] 8021q: adding VLAN 0 to HW filter on device eth26
[  292.895092][T12947] loop8: detected capacity change from 0 to 2048
[  292.901302][T12947] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  293.019339][T12947] syz.8.2510: attempt to access beyond end of device
[  293.019339][T12947] loop8: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  293.020553][T12949] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.055498][T12947] syz.8.2510: attempt to access beyond end of device
[  293.055498][T12947] loop8: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  293.064968][T12947] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=3)
[  293.068210][T12947] NILFS (loop8): error -5 reading inode: ino=12
[  293.164527][ T5351] 8021q: adding VLAN 0 to HW filter on device eth27
[  293.375519][ T5722] hsr_slave_0: left promiscuous mode
[  293.377940][ T5722] hsr_slave_1: left promiscuous mode
[  293.380864][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.384181][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.388828][ T5722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.391515][ T5722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.408231][ T5722] veth1_macvtap: left promiscuous mode
[  293.410181][ T5722] veth0_macvtap: left promiscuous mode
[  293.412049][ T5722] veth1_vlan: left promiscuous mode
[  293.417578][ T5722] veth0_vlan: left promiscuous mode
[  293.538990][T12958] netlink: 'syz.7.2514': attribute type 3 has an invalid length.
[  293.548617][T12958] netlink: 'syz.7.2514': attribute type 3 has an invalid length.
[  293.612496][T12958] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2514'.
[  293.698340][ T5722] team0 (unregistering): Port device team_slave_1 removed
[  293.720357][ T5722] team0 (unregistering): Port device team_slave_0 removed
[  293.776877][ T5722] team0 (unregistering): Port device dummy0 removed
[  293.926621][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2523'.
[  293.931603][T12979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2523'.
[  294.084909][ T5351] 8021q: adding VLAN 0 to HW filter on device eth28
[  294.282954][T12994] loop8: detected capacity change from 0 to 8
[  294.295068][ T4995] Bluetooth: hci2: command tx timeout
[  294.344203][T12994] SQUASHFS error: Unable to read directory block [631:26]
[  294.876760][ T5722] IPVS: stop unused estimator thread 0...
[  295.079554][T12841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  295.087122][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  295.090290][T12841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  295.105810][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  295.111372][T12841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  295.116126][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  295.119538][T12841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  295.127965][T12841] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  295.272065][T12841] 8021q: adding VLAN 0 to HW filter on device bond0
[  295.286844][T12841] 8021q: adding VLAN 0 to HW filter on device team0
[  295.295131][   T54] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.297386][   T54] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.315225][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.317524][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.742006][T12841] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.799482][T12841] veth0_vlan: entered promiscuous mode
[  295.807664][T12841] veth1_vlan: entered promiscuous mode
[  295.854537][T12841] veth0_macvtap: entered promiscuous mode
[  295.859090][T12841] veth1_macvtap: entered promiscuous mode
[  295.871062][T12841] batman_adv: batadv0: Interface activated: batadv_slave_0
[  295.888761][T12841] batman_adv: batadv0: Interface activated: batadv_slave_1
[  295.905389][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  295.910256][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  295.916623][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  295.980786][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.095628][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.099611][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.172560][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  296.176346][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.314171][ T4995] Bluetooth: hci2: command tx timeout
[  296.775606][T13113] fuse: fd is not a fuse device
[  297.301717][T13136] loop8: detected capacity change from 0 to 16
[  297.309861][T13136] erofs (device loop8): mounted with root inode @ nid 36.
[  297.651333][ T5615] libceph: mon0 (1)127.0.0.1:6789 socket closed (con state V1_BANNER)
[  297.662472][T13118] ceph: No mds server is up or the cluster is laggy
[  297.698885][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2557'.
[  297.877438][T13157] syz_tun: entered allmulticast mode
[  297.889953][T13159] loop2: detected capacity change from 0 to 512
[  297.893505][T13159] EXT4-fs: Ignoring removed bh option
[  297.915892][T13159] EXT4-fs: Ignoring removed nomblk_io_submit option
[  297.980444][T13159] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2562: inode has both inline data and extents flags
[  297.995857][T13159] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  297.996124][T13159] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2562: couldn't read orphan inode 15 (err -117)
[  298.004105][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  298.004122][    C1] EXT4-fs (loop2): initial error at time 1785255199: ext4_orphan_get:1399: inode 15
[  298.004139][    C1] EXT4-fs (loop2): last error at time 1785255199: ext4_orphan_get:1399: inode 15
[  298.048250][T13159] loop2: lost filesystem error report for type 5 error -117
[  298.049818][T13159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  298.087181][T13159] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #2: comm syz.2.2562: Directory hole found for htree leaf block 0
[  298.115016][T13169] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96
[  298.187790][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.393017][ T4995] Bluetooth: hci2: command tx timeout
[  298.779338][T13194] fuse: fd is not a fuse device
[  298.945722][T13203] loop8: detected capacity change from 0 to 8192
[  299.013319][T13203] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  299.022163][T13203] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  299.024267][T13208] loop2: detected capacity change from 0 to 4096
[  299.026090][T13203]  loop8: unable to read partition table
[  299.030501][T13203] loop_reread_partitions: partition scan of loop8 () failed (rc=-5)
[  299.125895][T13208] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  299.135228][T13208] ntfs3(loop2): Failed to load $Extend (-22).
[  299.141455][T13208] ntfs3(loop2): Failed to initialize $Extend.
[  299.267436][T13210] loop8: detected capacity change from 0 to 32768
[  299.668251][T13229] loop8: detected capacity change from 0 to 512
[  299.681378][T13229] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  299.715432][T13229] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.2593: bad orphan inode 131083
[  299.739494][T13229] loop8: lost filesystem error report for type 5 error -117
[  299.745869][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  299.751575][    C0] EXT4-fs (loop8): initial error at time 1785255457: ext4_orphan_get:1425
[  299.755097][    C0] EXT4-fs (loop8): last error at time 1785255457: ext4_orphan_get:1425
[  299.755704][T13229] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.834545][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.120673][T13244] loop8: detected capacity change from 0 to 4096
[  300.126636][T13244] ntfs3(loop8): ino=0, mi_enum_attr
[  300.131047][T13244] ntfs3(loop8): ino=0, mi_enum_attr
[  300.135872][T13244] ntfs3(loop8): Failed to load $MFT (-22).
[  300.155808][T13239] loop2: detected capacity change from 0 to 32768
[  300.167363][T13239] (syz.2.2598,13239,1):ocfs2_slot_map_physical_size:227 ERROR: Slot map file is too small!  (size 0, needed 8)
[  301.004941][T13270] loop2: detected capacity change from 0 to 512
[  301.054597][T13270] EXT4-fs: Ignoring removed oldalloc option
[  301.070238][T13270] EXT4-fs: Ignoring removed oldalloc option
[  301.174111][T13270] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.2609: corrupted in-inode xattr: invalid ea_ino
[  301.191542][T13270] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  301.192262][T13270] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2609: couldn't read orphan inode 15 (err -117)
[  301.196039][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  301.196049][    C1] EXT4-fs (loop2): initial error at time 1785255458: ext4_iget_extra_inode:5180: inode 15
[  301.196069][    C1] EXT4-fs (loop2): last error at time 1785255458: ext4_iget_extra_inode:5180: inode 15
[  301.231441][T13270] loop2: lost filesystem error report for type 5 error -117
[  301.253766][T13270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  301.510784][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.683873][T13276] No such timeout policy "syz1"
[  302.146529][T13286] loop2: detected capacity change from 0 to 32768
[  302.150300][T13286] XFS (loop2): sunit and swidth options incompatible with the noalign option
[  302.773186][    T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  302.936981][    T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  302.940781][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.946332][    T9] usb 3-1: Product: syz
[  302.949603][    T9] usb 3-1: Manufacturer: syz
[  302.960872][    T9] usb 3-1: SerialNumber: syz
[  302.968037][    T9] usb 3-1: config 0 descriptor??
[  302.977183][    T9] ch341 3-1:0.0: ch341-uart converter detected
[  303.090220][T13298] loop8: detected capacity change from 0 to 40427
[  303.096490][T13298] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  303.104076][T13298] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  303.109473][T13298] F2FS-fs (loop8): build fault injection rate: 17008
[  303.111712][T13298] F2FS-fs (loop8): build fault injection type: 0x1f8
[  303.115096][T13298] F2FS-fs (loop8): invalid crc value
[  303.162548][T13298] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  303.172507][T13298] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  303.175205][T13298] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  303.197596][ T9736] syz-executor: attempt to access beyond end of device
[  303.197596][ T9736] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  303.208578][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  303.208593][ T9736] Tainted: [L]=SOFTLOCKUP
[  303.208595][ T9736] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  303.208600][ T9736] Call Trace:
[  303.208603][ T9736]  <TASK>
[  303.208607][ T9736]  dump_stack_lvl+0xe8/0x150
[  303.208624][ T9736]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  303.208637][ T9736]  f2fs_write_end_io+0x124b/0x1710
[  303.208655][ T9736]  __submit_merged_bio+0x258/0x6a0
[  303.208664][ T9736]  ? rcu_is_watching+0x15/0xb0
[  303.208674][ T9736]  __submit_merged_write_cond+0x3c9/0x4e0
[  303.208686][ T9736]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  303.208703][ T9736]  f2fs_write_data_pages+0x2a27/0x36f0
[  303.208725][ T9736]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.208734][ T9736]  ? is_bpf_text_address+0x26/0x2b0
[  303.208750][ T9736]  ? arch_stack_walk+0xfb/0x150
[  303.208768][ T9736]  ? add_lock_to_list+0xc7/0x100
[  303.208776][ T9736]  ? lockdep_unlock+0x5d/0xd0
[  303.208785][ T9736]  ? __lock_acquire+0x13e8/0x2cf0
[  303.208804][ T9736]  ? do_raw_spin_lock+0x12b/0x2f0
[  303.208816][ T9736]  ? do_raw_spin_unlock+0x4d/0x210
[  303.208824][ T9736]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  303.208834][ T9736]  do_writepages+0x338/0x560
[  303.208849][ T9736]  ? do_raw_spin_unlock+0x4d/0x210
[  303.208859][ T9736]  filemap_fdatawrite+0x1e9/0x2f0
[  303.208872][ T9736]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  303.208897][ T9736]  ? do_raw_spin_unlock+0x4d/0x210
[  303.208907][ T9736]  f2fs_sync_dirty_inodes+0x30e/0x830
[  303.208923][ T9736]  f2fs_write_checkpoint+0xa3d/0x2710
[  303.208934][ T9736]  ? __lock_acquire+0x683/0x2cf0
[  303.208954][ T9736]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  303.208990][ T9736]  kill_f2fs_super+0x2f6/0x700
[  303.209003][ T9736]  ? __pfx_kill_f2fs_super+0x10/0x10
[  303.209017][ T9736]  ? call_rcu+0x64b/0x8b0
[  303.209024][ T9736]  ? lockdep_hardirqs_on+0x7a/0x110
[  303.209037][ T9736]  deactivate_locked_super+0xbc/0x130
[  303.209050][ T9736]  cleanup_mnt+0x3d3/0x460
[  303.209059][ T9736]  task_work_run+0x1d9/0x270
[  303.209068][ T9736]  ? __pfx_task_work_run+0x10/0x10
[  303.209078][ T9736]  exit_to_user_mode_loop+0x1fa/0x730
[  303.209089][ T9736]  ? rcu_is_watching+0x15/0xb0
[  303.209096][ T9736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.209104][ T9736]  do_syscall_64+0x353/0x580
[  303.209112][ T9736]  ? trace_irq_disable+0x3b/0x140
[  303.209123][ T9736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.209131][ T9736] RIP: 0033:0x7f86a879f0d7
[  303.209139][ T9736] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  303.209145][ T9736] RSP: 002b:00007ffe3a84a3f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  303.209154][ T9736] RAX: 0000000000000000 RBX: 00007f86a883330a RCX: 00007f86a879f0d7
[  303.209159][ T9736] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe3a84a4b0
[  303.209164][ T9736] RBP: 00007ffe3a84a4b0 R08: 00007ffe3a84b4b0 R09: 00000000ffffffff
[  303.209168][ T9736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3a84b540
[  303.209173][ T9736] R13: 00007f86a883330a R14: 0000000000049fdf R15: 00007ffe3a84b580
[  303.209184][ T9736]  </TASK>
[  303.209187][ T9736] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  303.382085][    T9] usb 3-1: failed to send control message: -71
[  303.390180][    T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  303.402378][    T9] usb 3-1: USB disconnect, device number 5
[  303.415666][    T9] ch341 3-1:0.0: device disconnected
[  303.654337][T13324] loop8: detected capacity change from 0 to 4096
[  303.680983][T13324] ntfs3(loop8): Failed to load $Extend (-22).
[  303.684851][T13324] ntfs3(loop8): Failed to initialize $Extend.
[  304.162989][ T5724] usb 9-1: new high-speed USB device number 18 using dummy_hcd
[  304.213677][ T6180] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  304.313453][ T5724] usb 9-1: too many configurations: 65, using maximum allowed: 8
[  304.317522][ T5724] usb 9-1: config 0 has no interfaces?
[  304.320549][ T5724] usb 9-1: config 0 has no interfaces?
[  304.323571][ T5724] usb 9-1: config 0 has no interfaces?
[  304.326311][ T5724] usb 9-1: config 0 has no interfaces?
[  304.329368][ T5724] usb 9-1: config 0 has no interfaces?
[  304.332077][ T5724] usb 9-1: config 0 has no interfaces?
[  304.334827][ T5724] usb 9-1: config 0 has no interfaces?
[  304.337876][ T5724] usb 9-1: config 0 has no interfaces?
[  304.340195][ T5724] usb 9-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  304.344073][ T5724] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.350565][ T5724] usb 9-1: config 0 descriptor??
[  304.377916][ T6180] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  304.381303][ T6180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.385016][ T6180] usb 3-1: Product: syz
[  304.386930][ T6180] usb 3-1: Manufacturer: syz
[  304.388924][ T6180] usb 3-1: SerialNumber: syz
[  304.404405][ T6180] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  304.417611][ T8767] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  304.892004][T13367] netlink: 'syz.7.2649': attribute type 21 has an invalid length.
[  304.895233][T13367] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2649'.
[  305.013673][ T6180] usb 3-1: USB disconnect, device number 6
[  305.077399][    T9] usb 9-1: USB disconnect, device number 18
[  305.454219][    T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd
[  305.524561][ T8767] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  305.529813][ T8767] ath9k_htc: Failed to initialize the device
[  305.537436][ T6180] usb 3-1: ath9k_htc: USB layer deinitialized
[  305.613934][    T9] usb 9-1: Using ep0 maxpacket: 8
[  305.618316][    T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.625537][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  305.640842][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  305.642080][T13399] set_capacity_and_notify: 1 callbacks suppressed
[  305.642091][T13399] loop2: detected capacity change from 0 to 1024
[  305.647665][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  305.653350][    T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x72, changing to 0x2
[  305.656922][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  305.665083][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  305.681014][    T9] usb 9-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  305.693304][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.702735][    T9] usb 9-1: Product: syz
[  305.704210][    T9] usb 9-1: Manufacturer: syz
[  305.711568][    T9] usb 9-1: SerialNumber: syz
[  305.716699][    T9] usb 9-1: config 0 descriptor??
[  305.720351][T13379] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  305.738149][    T9] ati_remote 9-1:0.0: ati_remote_probe: Unexpected endpoint_out
[  305.963268][ T5677] usb 9-1: USB disconnect, device number 19
[  306.353190][T13421] overlayfs: failed to clone upperpath
[  307.222910][ T5677] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[  307.375099][ T5677] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  307.382634][ T5677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.393831][ T5677] usb 9-1: config 0 descriptor??
[  307.402121][ T5677] cp210x 9-1:0.0: cp210x converter detected
[  307.712416][T13451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2682'.
[  307.767544][T13453] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2682'.
[  307.908157][ T5677] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  307.936442][ T5677] usb 9-1: cp210x converter now attached to ttyUSB0
[  308.135469][ T5677] usb 9-1: USB disconnect, device number 20
[  308.146778][ T5677] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  308.221887][ T5677] cp210x 9-1:0.0: device disconnected
[  308.566576][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2696'.
[  308.981632][T13496] loop2: detected capacity change from 0 to 128
[  309.024810][T13496] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  309.037226][T13496] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  309.078664][T12841] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  309.442003][T13516] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2707'.
[  309.814829][T13514] loop2: detected capacity change from 0 to 131072
[  309.823040][T13514] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  309.825398][T13514] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  309.828923][T13514] F2FS-fs (loop2): invalid crc value
[  309.860802][T13514] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  309.870453][T13514] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  309.873071][T13514] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  309.983422][   T34] audit: type=1800 audit(1785255467.331:149): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2706" name="file1" dev="loop2" ino=7 res=0 errno=0
[  310.247910][T13537] loop8: detected capacity change from 0 to 32768
[  310.286308][T13537] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  310.319061][   T34] audit: type=1800 audit(1785255467.691:150): pid=13537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2714" name="file1" dev="loop8" ino=17058 res=0 errno=0
[  310.370478][T13537] (syz.8.2714,13537,1):ocfs2_dio_end_io:2420 ERROR: Direct IO failed, bytes = -14
[  310.463119][ T9736] ocfs2: Unmounting device (7,8) on (node local)
[  310.839404][T13554] loop2: detected capacity change from 0 to 512
[  310.857315][T13554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  310.889711][T13554] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  310.896124][T13554] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  310.949618][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.054630][T13544] loop8: detected capacity change from 0 to 32768
[  311.071632][T13544] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  311.087985][T13544] XFS (loop8): Ending clean mount
[  311.168856][ T9736] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  311.171564][T13574] loop2: detected capacity change from 0 to 128
[  311.522914][T13060] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  311.579677][T13601] loop8: detected capacity change from 0 to 512
[  311.588445][T13601] EXT4-fs: Ignoring removed i_version option
[  311.621750][T13601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  311.631133][T13601] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  311.654777][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.704794][T13060] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[  311.711311][T13060] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.717684][T13060] usb 3-1: config 0 has no interface number 0
[  311.721973][T13060] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  311.725627][T13060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.728194][T13060] usb 3-1: Product: syz
[  311.729754][T13060] usb 3-1: Manufacturer: syz
[  311.731266][T13060] usb 3-1: SerialNumber: syz
[  311.737018][T13060] usb 3-1: config 0 descriptor??
[  311.741393][T13060] uvcvideo 3-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  311.745444][T13060] uvcvideo 3-1:0.31: No valid video chain found.
[  311.873296][T13609] loop8: detected capacity change from 0 to 32768
[  311.877969][T13609] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2739 (13609)
[  311.885263][T13609] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  311.888428][T13609] BTRFS info (device loop8): using crc32c checksum algorithm
[  311.925669][T13609] BTRFS info (device loop8): enabling ssd optimizations
[  311.932766][T13609] BTRFS info (device loop8): turning on flush-on-commit
[  311.935255][T13609] BTRFS info (device loop8): enabling free space tree
[  311.938915][T13609] BTRFS info (device loop8): enabling auto defrag
[  311.944587][T13609] BTRFS info (device loop8): use lzo compression, level 1
[  311.949527][T13609] BTRFS info (device loop8): max_inline set to 4096
[  311.952443][T13060] usb 3-1: USB disconnect, device number 7
[  312.066737][ T9736] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  312.303492][T13630] binder: 13629:13630 unknown command 1935813253
[  312.305656][T13630] binder: 13629:13630 ioctl c0306201 2000000001c0 returned -22
[  312.521703][T13635] loop8: detected capacity change from 0 to 512
[  312.526602][T13635] EXT4-fs (loop8): orphan cleanup on readonly fs
[  312.532240][T13635] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  312.543115][T13635] EXT4-fs (loop8): Cannot turn on quotas: error -22
[  312.545598][T13635] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #13: comm syz.8.2743: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  312.551389][T13635] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  312.551629][T13635] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2743: couldn't read orphan inode 13 (err -117)
[  312.554599][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  312.554608][    C1] EXT4-fs (loop8): last error at time 1785255469: ext4_ext_check_inode:521: inode 13
[  312.563794][T13635] loop8: lost filesystem error report for type 5 error -117
[  312.565244][T13635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  312.579365][T13635] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended
[  312.618794][T13635] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  312.648832][T13635] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended
[  312.658354][T13635] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  312.691583][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.190307][T13656] loop8: detected capacity change from 0 to 1024
[  313.574172][T13672] loop8: detected capacity change from 0 to 128
[  313.579359][T13672] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  313.603716][T13672] ext4 filesystem being mounted at /379/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  313.665095][ T9736] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  314.872865][T13060] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  315.244740][T13060] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  315.248273][T13060] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  315.252296][T13060] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[  315.256119][T13060] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  315.263317][T13060] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  315.267086][T13060] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  315.270179][T13060] usb 9-1: Product: syz
[  315.271909][T13060] usb 9-1: Manufacturer: syz
[  315.281399][T13060] cdc_wdm 9-1:1.0: probe with driver cdc_wdm failed with error -22
[  315.484938][ T5622] usb 9-1: USB disconnect, device number 21
[  316.364934][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2782'.
[  316.368548][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2782'.
[  316.405454][T13734] loop8: detected capacity change from 0 to 256
[  316.412017][T13734] FAT-fs (loop8): bogus logical sector size 128
[  316.420147][T13734] FAT-fs (loop8): Can't find a valid FAT filesystem
[  316.432164][T13734] FAT-fs (loop8): unable to read boot sector
[  316.511591][T13739] loop8: detected capacity change from 0 to 8
[  316.584194][T13060] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  316.742769][T13060] usb 3-1: Using ep0 maxpacket: 16
[  316.746046][T13060] usb 3-1: config index 0 descriptor too short (expected 51443, got 18)
[  316.750734][T13060] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  316.755036][T13060] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.757617][T13060] usb 3-1: Product: syz
[  316.759045][T13060] usb 3-1: Manufacturer: syz
[  316.760572][T13060] usb 3-1: SerialNumber: syz
[  316.765554][T13060] r8152-cfgselector 3-1: Unknown version 0x0000
[  316.767712][T13060] r8152-cfgselector 3-1: config 0 descriptor??
[  316.771186][T13753] loop8: detected capacity change from 0 to 1024
[  316.774288][T13753] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  316.777869][T13753] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  316.781360][T13753] JBD2: no valid journal superblock found
[  316.785889][T13753] EXT4-fs (loop8): Could not load journal inode
[  317.118003][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  317.121637][ T1379] ieee802154 phy1 wpan1: encryption failed: -22
[  317.187184][ T5622] r8152-cfgselector 3-1: USB disconnect, device number 8
[  317.781474][T13768] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.784429][T13768] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.821480][T13770] input: syz1 as /devices/virtual/input/input26
[  318.067441][T13784] loop8: detected capacity change from 0 to 4096
[  318.084421][T13784] ntfs3(loop8): Failed to load $Extend (-22).
[  318.088377][T13784] ntfs3(loop8): Failed to initialize $Extend.
[  318.093397][T13787] netlink: 'syz.7.2807': attribute type 4 has an invalid length.
[  318.100885][T13787] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2807'.
[  318.104746][T13784] ntfs3(loop8): ino=5, "/" mi_enum_attr
[  318.187017][T13792] loop8: detected capacity change from 0 to 128
[  318.209368][T13792] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  318.225156][T13792] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  318.259462][T13794] loop2: detected capacity change from 0 to 2048
[  318.293261][T13794] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.298365][T13794] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  318.343414][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  318.572881][T13060] usb 9-1: new high-speed USB device number 22 using dummy_hcd
[  318.662983][ T5615] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  318.722780][T13060] usb 9-1: Using ep0 maxpacket: 8
[  318.726881][T13060] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  318.730927][T13060] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  318.735835][T13060] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  318.745544][T13060] usb 9-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  318.749399][T13060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.752990][T13060] usb 9-1: Product: syz
[  318.755482][T13060] usb 9-1: Manufacturer: syz
[  318.757502][T13060] usb 9-1: SerialNumber: syz
[  318.761578][T13060] usb 9-1: config 0 descriptor??
[  318.771508][T13060] radioshark 9-1:0.0: Invalid radioSHARK device
[  318.774665][T13060] radioshark 9-1:0.0: probe with driver radioshark failed with error -22
[  318.779465][T13060] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[  318.812970][ T5615] usb 3-1: Using ep0 maxpacket: 8
[  318.816532][ T5615] usb 3-1: config 162 has an invalid interface number: 84 but max is 2
[  318.819174][ T5615] usb 3-1: config 162 has an invalid interface number: 3 but max is 2
[  318.821837][ T5615] usb 3-1: config 162 has no interface number 0
[  318.826484][ T5615] usb 3-1: config 162 has no interface number 1
[  318.829462][ T5615] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  318.834555][ T5615] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  318.838133][ T5615] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  318.841771][ T5615] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  318.846280][ T5615] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  318.849557][ T5615] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  318.855277][ T5615] usb 3-1: config 162 interface 84 has no altsetting 0
[  318.857580][ T5615] usb 3-1: config 162 interface 2 has no altsetting 0
[  318.861610][ T5615] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  318.865108][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.867703][ T5615] usb 3-1: Product: syz
[  318.869064][ T5615] usb 3-1: Manufacturer: syz
[  318.870674][ T5615] usb 3-1: SerialNumber: syz
[  318.969789][ T5677] usb 9-1: USB disconnect, device number 22
[  319.130328][ T4995] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  319.131700][ T5615] usb 3-1: USB disconnect, device number 9
[  319.217418][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2818'.
[  319.660903][T13835] overlay: ./file0 is not a directory
[  319.786601][T13837] loop8: detected capacity change from 0 to 512
[  319.793945][T13837] EXT4-fs: inline encryption not supported
[  319.821341][T13837] EXT4-fs error (device loop8): ext4_get_journal_inode:5900: comm syz.8.2827: inode #2147418112: comm syz.8.2827: iget: illegal inode #
[  319.832058][T13837] loop8: lost filesystem error report for type 5 error -117
[  319.832292][T13837] EXT4-fs (loop8): Remounting filesystem read-only
[  319.834883][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  319.834894][    C1] EXT4-fs (loop8): initial error at time 1785255477: ext4_get_journal_inode:5900
[  319.834904][    C1] EXT4-fs (loop8): last error at time 1785255477: ext4_get_journal_inode:5900
[  319.853629][T13837] EXT4-fs (loop8): no journal found
[  319.999265][T13851] loop8: detected capacity change from 0 to 512
[  320.097876][T13851] EXT4-fs (loop8): external journal device major/minor numbers have changed
[  320.275297][T13851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  320.280306][T13851] block device autoloading is deprecated and will be removed.
[  320.283561][T13851] EXT4-fs (loop8): couldn't read superblock of external journal
[  320.332455][T13855] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2835'.
[  320.555498][T13869] loop8: detected capacity change from 0 to 512
[  320.558411][T13869] EXT4-fs: Ignoring removed orlov option
[  320.565368][T13869] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  320.569216][T13869] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee02c, mo2=0002]
[  320.572095][T13869] System zones: 1-12
[  320.573660][T13869] EXT4-fs (loop8): orphan cleanup on readonly fs
[  320.577710][T13869] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2841: invalid indirect mapped block 2 (level 2)
[  320.582149][T13869] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  320.584279][    C0] EXT4-fs (loop8): error count since last fsck: 1
[  320.589854][    C0] EXT4-fs (loop8): initial error at time 1785255477: ext4_free_branches:1023: inode 11
[  320.593472][    C0] EXT4-fs (loop8): last error at time 1785255477: ext4_free_branches:1023: inode 11
[  320.597927][T13869] EXT4-fs (loop8): Remounting filesystem read-only
[  320.600675][T13869] EXT4-fs (loop8): 1 truncate cleaned up
[  320.604115][T13869] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  320.626983][ T9736] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  321.059155][T13894] comedi comedi0: 8255: I/O base address not correctly aligned
[  321.429987][T13929] loop2: detected capacity change from 0 to 1024
[  321.437325][T13929] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  321.495957][T13934] loop2: detected capacity change from 0 to 512
[  321.512263][T13934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  321.524445][T13934] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  321.541319][T13934] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  321.578859][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.726547][T13942] loop2: detected capacity change from 0 to 32768
[  321.731589][T13942] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2873 (13942)
[  321.744889][T13942] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  321.751485][T13942] BTRFS info (device loop2): using crc32c checksum algorithm
[  321.803973][T13942] BTRFS info (device loop2): enabling ssd optimizations
[  321.810936][T13942] BTRFS info (device loop2): turning on flush-on-commit
[  321.815548][T13942] BTRFS info (device loop2): enabling free space tree
[  321.820296][T13942] BTRFS info (device loop2): enabling auto defrag
[  321.823726][T13942] BTRFS info (device loop2): use lzo compression, level 1
[  321.829445][T13942] BTRFS info (device loop2): max_inline set to 4096
[  321.955017][T12841] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  322.359257][T13969] xt_hashlimit: size too large, truncated to 1048576
[  322.692947][    T9] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[  322.865361][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  322.869966][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.877277][    T9] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[  322.882279][    T9] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  322.885738][    T9] usb 9-1: Manufacturer: syz
[  322.889907][    T9] usb 9-1: config 0 descriptor??
[  322.984761][T13989] loop2: detected capacity change from 0 to 512
[  322.992528][T13989] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2887: bg 0: block 5: invalid block bitmap
[  322.997853][T13989] loop2: lost filesystem error report for type 5 error -117
[  322.998398][T13989] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  323.004602][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  323.004618][    C0] EXT4-fs (loop2): initial error at time 1785255480: ext4_validate_block_bitmap:432
[  323.004636][    C0] EXT4-fs (loop2): last error at time 1785255480: ext4_validate_block_bitmap:432
[  323.016620][T13989] loop2: lost filesystem error report for type 5 error -117
[  323.017124][T13989] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2887: invalid indirect mapped block 3 (level 2)
[  323.024291][T13989] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  323.024665][T13989] EXT4-fs (loop2): 1 orphan inode deleted
[  323.029524][T13989] EXT4-fs (loop2): 1 truncate cleaned up
[  323.032285][T13989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  323.064959][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  323.135762][T13992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2888'.
[  323.319553][    T9] cougar 0003:060B:700A.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[  323.457380][T14004] loop2: detected capacity change from 0 to 512
[  323.469172][T14004] EXT4-fs (loop2): 1 truncate cleaned up
[  323.479774][T14004] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.516105][ T5677] usb 9-1: USB disconnect, device number 23
[  323.763073][ T5622] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  323.814349][T14013] fuse: fd is not a fuse device
[  323.934036][ T5622] usb 3-1: Using ep0 maxpacket: 32
[  323.937308][T14021] overlayfs: failed to clone upperpath
[  323.939030][ T5622] usb 3-1: unable to get BOS descriptor or descriptor too short
[  323.945087][ T5622] usb 3-1: config 7 has an invalid interface number: 128 but max is 0
[  323.948538][ T5622] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  323.952208][ T5622] usb 3-1: config 7 has no interface number 0
[  323.956313][ T5622] usb 3-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  323.960673][ T5622] usb 3-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  323.967843][ T5622] usb 3-1: config 7 interface 128 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  323.973907][ T5622] usb 3-1: config 7 interface 128 has no altsetting 0
[  323.979242][ T5622] usb 3-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  323.982994][ T5622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.986465][ T5622] usb 3-1: Product: syz
[  323.988269][ T5622] usb 3-1: Manufacturer: syz
[  323.990187][ T5622] usb 3-1: SerialNumber: syz
[  323.995582][T14004] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  324.179552][T14033] netlink: 'syz.8.2908': attribute type 2 has an invalid length.
[  324.258512][ T5622] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  324.265263][ T5622] usb 3-1: MIDIStreaming interface descriptor not found
[  324.351453][ T5622] usb 3-1: USB disconnect, device number 10
[  324.396022][ T5779] udevd[5779]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.489374][T14037] loop8: detected capacity change from 0 to 32768
[  324.532043][T14037] jfs_create: dtInsert returned -EIO
[  324.534259][T14037] ERROR: (device loop8): jfs_create: 
[  324.534259][T14037] 
[  324.543485][T14037] ERROR: (device loop8): remounting filesystem as read-only
[  324.742040][T14050] loop8: detected capacity change from 0 to 4096
[  324.790044][T14054] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  324.819837][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.222889][T13060] usb 9-1: new high-speed USB device number 24 using dummy_hcd
[  325.262787][    T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  325.372833][T13060] usb 9-1: Using ep0 maxpacket: 8
[  325.376571][T13060] usb 9-1: unable to get BOS descriptor or descriptor too short
[  325.380032][T13060] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7
[  325.387216][T13060] usb 9-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice= 0.40
[  325.390775][T13060] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.394485][T13060] usb 9-1: Product: syz
[  325.396171][T13060] usb 9-1: Manufacturer: syz
[  325.397714][T13060] usb 9-1: SerialNumber: syz
[  325.414751][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  325.419063][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.422968][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  325.427309][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  325.433779][    T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  325.436736][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.439711][    T9] usb 3-1: Product: syz
[  325.441366][    T9] usb 3-1: Manufacturer: syz
[  325.443003][    T9] usb 3-1: SerialNumber: syz
[  325.446480][    T9] usb 3-1: config 0 descriptor??
[  325.612177][T13060] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71
[  325.618465][T13060] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -71
[  325.623473][T13060] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -71
[  325.628860][T13060] usb 9-1: USB disconnect, device number 24
[  325.658190][    T9] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  325.869889][T13060] usb 3-1: USB disconnect, device number 11
[  326.003643][T14073] xt_TPROXY: Can be used only with -p tcp or -p udp
[  326.482779][ T5622] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[  326.583296][T14089] loop2: detected capacity change from 0 to 32768
[  326.644972][ T5622] usb 9-1: Using ep0 maxpacket: 8
[  326.650982][ T5622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  326.666000][ T5622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  326.671642][ T5622] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  326.676683][ T5622] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 68
[  326.680663][ T5622] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  326.685249][ T5622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.693088][ T5622] usb 9-1: config 0 descriptor??
[  326.699369][T14085] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  326.934018][T14102] loop2: detected capacity change from 0 to 32768
[  326.959422][T14102] Bad stbl[5] index:0 (stblindex 9) in dtpage
[  326.959422][T14102] 
[  326.967435][T14102] ERROR: (device loop2): dtSearch: DT_GETPAGE: dtree page corrupt
[  326.967435][T14102] 
[  326.975141][T14102] ERROR: (device loop2): remounting filesystem as read-only
[  326.977589][T14102] jfs_rmdir: dtDelete returned -5
[  326.979231][T14102] ERROR: (device loop2): jfs_rmdir: 
[  326.979231][T14102] 
[  327.119394][ T4995] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  327.122059][ T5677] usb 9-1: USB disconnect, device number 25
[  327.776297][T14113] loop8: detected capacity change from 0 to 2048
[  327.790446][T14113] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.848715][T14115] loop8: detected capacity change from 0 to 256
[  328.344990][T14125] loop2: detected capacity change from 0 to 8192
[  328.349586][T14125] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  328.495545][T14135] loop8: detected capacity change from 0 to 2048
[  328.511180][T14135] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  328.559996][T14144] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  328.564576][T14135] syz.8.2950: attempt to access beyond end of device
[  328.564576][T14135] loop8: rw=8912896, sector=33554430, nr_sectors = 2 limit=2048
[  328.600364][T14135] syz.8.2950: attempt to access beyond end of device
[  328.600364][T14135] loop8: rw=8388608, sector=33554430, nr_sectors = 2 limit=2048
[  328.635928][T14135] NILFS (loop8): I/O error reading meta-data file (ino=6, block-offset=3)
[  328.639223][T14135] NILFS (loop8): error -5 reading inode: ino=12
[  328.715928][T14159] fuse: fd is not a fuse device
[  328.766865][T14162] loop2: detected capacity change from 0 to 512
[  328.792224][T14162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2963: bg 0: block 5: invalid block bitmap
[  328.798600][T14162] loop2: lost filesystem error report for type 5 error -117
[  328.799050][T14162] EXT4-fs (loop2): Remounting filesystem read-only
[  328.804506][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  328.804517][    C1] EXT4-fs (loop2): initial error at time 1785255486: ext4_validate_block_bitmap:432
[  328.804527][    C1] EXT4-fs (loop2): last error at time 1785255486: ext4_validate_block_bitmap:432
[  328.814220][T14162] EXT4-fs (loop2): 2 truncates cleaned up
[  328.817115][T14162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.840811][T12841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.786241][T14200] netlink: 'syz.2.2978': attribute type 8 has an invalid length.
[  330.849670][T14220] loop2: detected capacity change from 0 to 1024
[  330.864530][T14220] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.940076][   T34] audit: type=1800 audit(1785255488.321:151): pid=14220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2985" name="bus" dev="loop2" ino=785 res=0 errno=0
[  331.064440][T14230] loop2: detected capacity change from 0 to 2048
[  331.068964][T14230] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  331.081491][T14231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  331.164067][T14235] BUG: kernel NULL pointer dereference, address: 0000000000000427
[  331.166622][T14235] #PF: supervisor write access in kernel mode
[  331.168631][T14235] #PF: error_code(0x0002) - not-present page
[  331.171284][T14235] PGD 80000001aa4f4067 P4D 80000001aa4f4067 PUD 0 
[  331.174039][T14235] Oops: Oops: 0002 [#1] SMP KASAN PTI
[  331.176136][T14235] CPU: 1 UID: 0 PID: 14235 Comm: syz.2.2991 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  331.179758][T14235] Tainted: [L]=SOFTLOCKUP
[  331.181141][T14235] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  331.184453][T14235] RIP: 0010:parport_attach+0x6a4/0x930
[  331.186268][T14235] Code: 80 3c 2e 00 74 08 48 89 df e8 18 da 0a f9 0f b7 13 31 ed 31 c0 ee 43 80 3c 2e 00 74 08 48 89 df e8 01 da 0a f9 8b 13 83 c2 02 <31> 66 90 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44
[  331.192190][T14235] RSP: 0018:ffffc900069c79e8 EFLAGS: 00010202
[  331.194053][T14235] RAX: 0000000000000000 RBX: ffff8881122319c0 RCX: 0000000000080000
[  331.196559][T14235] RDX: 000000000000007a RSI: 0000000000000497 RDI: 0000000000000498
[  331.199031][T14235] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000
[  331.201494][T14235] R10: 000000000000000a R11: ffffffff8eb59c60 R12: ffff88816cf93b00
[  331.203972][T14235] R13: dffffc0000000000 R14: 1ffff11022446338 R15: 1ffff11022446336
[  331.206437][T14235] FS:  00007f8e42e4a6c0(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
[  331.209202][T14235] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.211277][T14235] CR2: 0000000000000427 CR3: 00000001be1d4000 CR4: 00000000000006f0
[  331.213740][T14235] Call Trace:
[  331.214816][T14235]  <TASK>
[  331.215756][T14235]  comedi_device_attach+0x52d/0x720
[  331.217404][T14235]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  331.219065][T14235]  ? kasan_quarantine_put+0xbb/0x1f0
[  331.220683][T14235]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  331.222513][T14235]  ? do_vfs_ioctl+0x116f/0x1530
[  331.224060][T14235]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  331.225640][T14235]  ? hook_file_ioctl+0x1f0/0x5f0
[  331.227199][T14235]  ? __fget_files+0x2a/0x420
[  331.228665][T14235]  ? __fget_files+0x2a/0x420
[  331.230152][T14235]  ? __fget_files+0x3a2/0x420
[  331.231651][T14235]  ? __fget_files+0x2a/0x420
[  331.233123][T14235]  ? bpf_lsm_file_ioctl+0x9/0x20
[  331.234697][T14235]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  331.236569][T14235]  __se_sys_ioctl+0xfc/0x170
[  331.238160][T14235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.240147][T14235]  do_syscall_64+0x174/0x580
[  331.241706][T14235]  ? trace_irq_disable+0x3b/0x140
[  331.243420][T14235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  331.245434][T14235] RIP: 0033:0x7f8e41f9de99
[  331.246972][T14235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  331.253165][T14235] RSP: 002b:00007f8e42e4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  331.255782][T14235] RAX: ffffffffffffffda RBX: 00007f8e42225fa0 RCX: 00007f8e41f9de99
[  331.258448][T14235] RDX: 0000200000000600 RSI: 0000000040946400 RDI: 0000000000000003
[  331.261025][T14235] RBP: 00007f8e42033eaf R08: 0000000000000000 R09: 0000000000000000
[  331.263700][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  331.266533][T14235] R13: 00007f8e42226038 R14: 00007f8e42225fa0 R15: 00007fff5fb0a7f8
[  331.269327][T14235]  </TASK>
[  331.270440][T14235] Modules linked in:
[  331.271824][T14235] CR2: 0000000000000427
[  331.273771][T14235] ---[ end trace 0000000000000000 ]---
[  331.279031][T14235] RIP: 0010:parport_attach+0x6a4/0x930
[  331.280991][T14235] Code: 80 3c 2e 00 74 08 48 89 df e8 18 da 0a f9 0f b7 13 31 ed 31 c0 ee 43 80 3c 2e 00 74 08 48 89 df e8 01 da 0a f9 8b 13 83 c2 02 <31> 66 90 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 44
[  331.288905][T14235] RSP: 0018:ffffc900069c79e8 EFLAGS: 00010202
[  331.291204][T14235] RAX: 0000000000000000 RBX: ffff8881122319c0 RCX: 0000000000080000
[  331.294274][T14235] RDX: 000000000000007a RSI: 0000000000000497 RDI: 0000000000000498
[  331.296973][T14235] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000
[  331.299696][T14235] R10: 000000000000000a R11: ffffffff8eb59c60 R12: ffff88816cf93b00
[  331.302367][T14235] R13: dffffc0000000000 R14: 1ffff11022446338 R15: 1ffff11022446336
[  331.305165][T14235] FS:  00007f8e42e4a6c0(0000) GS:ffff8882a8f51000(0000) knlGS:0000000000000000
[  331.308138][T14235] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  331.310669][T14235] CR2: 00007f8e41feb580 CR3: 00000001be1d4000 CR4: 00000000000006f0
[  331.313773][T14235] Kernel panic - not syncing: Fatal exception
[  331.316531][T14235] Kernel Offset: disabled
[  331.318015][T14235] Rebooting in 86400 seconds..

VM DIAGNOSIS:
16:09:29  Registers:
info registers vcpu 0

CPU#0
RAX=ffff88818d951000 RBX=ffffffff819b4450 RCX=0000000080000001 RDX=0000000000000001
RSI=ffffffff8c4bda60 RDI=ffffffff819b4450 RBP=ffffffff8e807eb8 RSP=ffffffff8e807de0
R8 =ffff8881210338db R9 =1ffff1102420671b R10=dffffc0000000000 R11=ffffed102420671c
R12=0000000000000000 R13=1ffffffff1d11de8 R14=1ffffffff1d00fc4 R15=dffffc0000000000
RIP=ffffffff8bd0512f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818d951000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005586beb5f000 CR3=0000000116cfa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff355b405 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000001780 RDI=0000000000001781 RBP=ffffc900069c7270 RSP=ffffc900069c70d8
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffffff85669710
R12=dffffc0000000000 R13=ffffffff9aada0a0 R14=ffffffff9aada0e0 R15=0000000000000000
RIP=ffffffff85669787 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8e42e4a6c0 ffffffff 00c00000
GS =0000 ffff8882a8f51000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000427 CR3=00000001be1d4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=00007f8e421f05e8 00007f8e421f0618 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f8e421f05d0 00007f8e421f0610
XMM06=00007f8e421f05f8 00007f8e421f05c8 XMM07=00007f8e421f0600 00007f8e421f05e0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
