last executing test programs:

5m42.973262984s ago: executing program 2 (id=733):
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0)
ioctl$TIOCSCTTY(r0, 0x2202, 0x6)

5m42.97307797s ago: executing program 2 (id=734):
socket(0x24, 0x6, 0x3fc)

5m42.920590245s ago: executing program 2 (id=735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01050008e8ffffffffff0b00000048000580080001"], 0x5c}}, 0x0)

5m42.852290536s ago: executing program 2 (id=737):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000005a80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000000100), 0x100)

5m42.52651197s ago: executing program 2 (id=739):
ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, &(0x7f0000000080)={0x5, "f1df3e532f70302103b68ece4ca96b9d3d4ef6bbfeb861a345892b75e53994cd818d1d99aa5a67581f8eef7e9cbfa42dfa2b05d502339ab1ed8f8101c01290a69a0c8eb4e36c1d59b498546229913a607e03e8c349ce5c8816df712ba4774a80fb8fda76bfd29e81e94892765ac0a542a2e4b2abe22e0842309c76ef094b744c769aebaaa8d816472e4dd4ec301f0e0c52965c897edc5f66b8655ced2ddc787ae44e7bd184f4508ee2538fe51f9cd9e554908836d289f4d55b5ad0a8f9b7bb4ab7501d7345aad2545fb793d65f671ca730950d0513eeff6df2a3420a3e9b7cc7781b76f3a9309ff6f65fa89c2448b8d2d969e830b5024924f63a45dc58b28297"})
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}})

5m41.623361482s ago: executing program 2 (id=751):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0)

5m41.612433772s ago: executing program 32 (id=751):
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0)

4m2.491187751s ago: executing program 0 (id=2036):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2)

4m2.311398657s ago: executing program 0 (id=2037):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfe, 0x7, 0x7ffc0001}]})
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

4m2.180638269s ago: executing program 0 (id=2038):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c000180060001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40)

4m2.02861123s ago: executing program 0 (id=2040):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

4m1.72493989s ago: executing program 0 (id=2044):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x6, 0x25dfdc01, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x2000}}, 0x1c}}, 0x4040000)

4m1.212190276s ago: executing program 0 (id=2048):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x1200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@debug}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000000380)="$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")

4m1.023813398s ago: executing program 33 (id=2048):
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x1200800, &(0x7f0000000100)={[{@shortname_winnt}, {@fat=@debug}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}]}, 0x11, 0x305, &(0x7f0000000380)="$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")

3m16.823375159s ago: executing program 1 (id=2337):
r0 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x1)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32314742, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}})

3m15.042559961s ago: executing program 1 (id=2341):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001600)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x1, 0x6, 0x9, 0x8, 0x9, 0xa, 0x9, 0x5, 0xfe, 0x2, 0xd, 0x8, 0xe, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1ff, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

3m14.602812436s ago: executing program 1 (id=2345):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0\x00', 0x894, &(0x7f0000000580)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_winnt}, {@shortname_win95}, {@uni_xlate}, {@fat=@usefree}, {@fat=@sys_immutable}, {@shortname_winnt}, {@numtail}, {@utf8}, {@utf8}, {@shortname_win95}, {@utf8no}]}, 0x2, 0x289, &(0x7f00000001c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3m14.380386235s ago: executing program 1 (id=2348):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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")
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000140)='./file0\x00')

3m13.587456798s ago: executing program 1 (id=2355):
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)='\n\\', 0x2}], 0x1)

3m13.015318422s ago: executing program 1 (id=2359):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)

3m12.793962147s ago: executing program 34 (id=2359):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)

3m7.726223502s ago: executing program 4 (id=2398):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
semtimedop(0x0, &(0x7f00000004c0)=[{0x0, 0xfff, 0x1000}], 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_setup(0x1057e, &(0x7f0000000080)={0x0, 0x600e, 0x810, 0x0, 0x246})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_uring_setup(0x1057e, &(0x7f0000000080)={0x0, 0x1a14, 0x810, 0x0, 0x248})

3m7.461954709s ago: executing program 4 (id=2401):
syz_emit_ethernet(0x3a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa08004927002c00670000fc0b000000000000ac1e0001830739ac38c9018307efac1414bb0000150490780a010101"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x9, 0x0, 0x2, 0x5, 0x0, 0x8, 0x0, 0xdffffffffffffffd}, {0xf90, 0x0, 0x0, 0x10000000000000}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x50)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

3m7.365998449s ago: executing program 4 (id=2404):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0000}]})
socket(0x1e, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, r3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x40051}, 0x20008000)
syz_open_dev$radio(0x0, 0x2, 0x2)

3m6.257419251s ago: executing program 4 (id=2415):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

3m6.165868578s ago: executing program 4 (id=2416):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000440)={0x40, 0x31, 0x2, "01ba"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m5.787205265s ago: executing program 4 (id=2417):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@dots}, {@fat=@nfs_stale_rw}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@dos1xfloppy}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@fat=@errors_continue}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@flush}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@dots}]}, 0x1, 0x20e, &(0x7f0000000400)="$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")
setreuid(0x0, 0xee00)
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

3m5.643732401s ago: executing program 35 (id=2417):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000640)={[{@dots}, {@fat=@nfs_stale_rw}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@fat=@uid}, {@dots}, {@nodots}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@dos1xfloppy}, {@fat=@errors_remount}, {@dots}, {@nodots}, {@nodots}, {@fat=@fmask={'fmask', 0x3d, 0x6}}, {@fat=@errors_continue}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}, {@nodots}, {@fat=@nfs_nostale_ro}, {@fat=@flush}, {@fat=@dmask={'dmask', 0x3d, 0x2}}, {@nodots}, {@nodots}, {@dots}]}, 0x1, 0x20e, &(0x7f0000000400)="$eJzs3T9rE2EYAPAnbdpcVKSbIAgnDjoVdXKsSAUxIFQy6CboZKZ2SV3a7+DiV/B7+QGkUxZ5Jd4lF9MkDaW5YP39lnvunve990/IJUuepHgWQz/ufIssa8TGXuzFoBE7sREjpwEAXCeDlOJnKqx7LgBAPZb4/P9V85QAgBV7++796+edzv5BnmcRZ6f9br9bHIv8y1ed/cf5HztVr7N+v7s5zj/Jp787DPNbcaPMPy365+P0dkR0t+PRgyI/zL1408n/7t+KjyteOwAAAAAAAAAAAAAAAAAAAAAArMu9yEeq+j6bEVHW99ndnc63y/o8xdlEfaCp+j3NuNssT6vyQOmkllUBAAAAAAAAAAAAAAAAAADAv+Xo+MvnD73ep8MqaEXE5JXmjDbzg0Z546UaXxzcvKL7zAs24nLd26MNbMzcw0VBo9yic6ksrnCB7dkv7jJBNFe44bUEeQ1jtRdub0rDYPa7YFQWY2737YhYPPrDg8tOfpBS6n2/f3h0HGlh4+oZ0arzgQQAAAAAAAAAAAAAAAAAAP+xiV99j329XRyztc0KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpV/f//MDh/ZWFwEhG34sLGo7G2IlvrWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi+fgcAAP//9DweRg==")
setreuid(0x0, 0xee00)
utimes(&(0x7f0000000000)='./file0\x00', 0x0)

1m58.025960561s ago: executing program 3 (id=3285):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="200704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m56.568229398s ago: executing program 3 (id=3312):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x0, 0x4f, 0x8, 0x3, 0x74c, 0x3})
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x200)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0)

1m56.435123004s ago: executing program 3 (id=3313):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000fcffffff00000000040000008500000036000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)

1m56.218144682s ago: executing program 3 (id=3315):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000001b80)=ANY=[@ANYBLOB='utf8,errors=continue,namecase=1,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB=',umask=00000000000000000000077,umask=00000000000000000005676,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c000ca8768ddddc191573cbd33da79641936c9de64e264f331d1b50f4c4f54702f51dcbddb39c14c19175f07a639bb65ea608fbf6fadf5d8da30ace1281bed3e61b084526e10dbe921dad84fbcabc5791f52445cb76b789ed377aa0cd17309c4df04d525e8af05fb246b33836d90656cd2daa991b916be40df3bd607ae5672e1bb90730d0ff03000000000000c5f0cf287ea707c1fc66165f74e7d8a78c37a4b86907cec1df06da3611f616718d88770a2520ceb039bc06ef4d1183"], 0x1, 0x1503, &(0x7f0000000580)="$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")
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2000084c, &(0x7f0000000400)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYRES64, @ANYRES8, @ANYRES16, @ANYRES64, @ANYBLOB="2c6469736361726459ad809e1eb82c00fb278330ab3b4884d36adf6908d11f5783dc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d", @ANYRES32], 0x81, 0x14fc, &(0x7f0000002a80)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0)

1m55.975140511s ago: executing program 3 (id=3317):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000440)=@multiplanar_userptr={0x1, 0xc, 0x4, 0x2, 0x8, {}, {0x3, 0x8, 0x3, 0x6, 0x80, 0x2a, "4be972ba"}, 0x1, 0x2, {0x0}, 0x10})

1m55.481730962s ago: executing program 3 (id=3319):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5ed5, &(0x7f0000011ac0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$fuse(0x0, 0x0, 0x390022, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m55.381233774s ago: executing program 36 (id=3319):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4000, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5ed5, &(0x7f0000011ac0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140))
mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b8)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
creat(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$fuse(0x0, 0x0, 0x390022, 0x0, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

35.243436326s ago: executing program 5 (id=4396):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

35.194174838s ago: executing program 5 (id=4398):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x1, 0x5, {0x1d, 0x1c, 0x40000a, 0x114, 0x3, 0x7fdc, 0x5, 0x8000b9, 0xfffffffffffffffe}})

35.124725989s ago: executing program 5 (id=4399):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6)

35.12454931s ago: executing program 5 (id=4400):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

35.064556444s ago: executing program 5 (id=4401):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020400020a000000000000000000000002004e23e00000020000000000000000020001020000000000000000000000ee020005000000000002"], 0x50}, 0x1, 0x7}, 0x4084)

34.842533654s ago: executing program 5 (id=4404):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x6007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

34.343857164s ago: executing program 37 (id=4404):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80)
socket$packet(0x11, 0x3, 0x300)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x401, 0x4000, 0x101, {0x0, 0x0, 0x0, 0x0, 0x20009, 0x6007}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x10}}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x0)

4.342174334s ago: executing program 8 (id=4769):
eventfd2(0x6, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)

4.292675056s ago: executing program 8 (id=4771):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r1, &(0x7f0000002540)=[{&(0x7f0000000000)=""/121, 0x79}], 0x1, 0x5, 0x1002)

2.740988386s ago: executing program 8 (id=4781):
unshare(0x2a020480)
writev(0xffffffffffffffff, &(0x7f0000003140)=[{&(0x7f00000002c0)}, {&(0x7f0000001000)="48e18ac5bc3e6f990aff8d607dbece5c09a4df5eb472b86faeaaa15f5a345012446f2190af47087f86135c51fae2d728b2cdc0a6c6c8fd154de435395fe59284038dab5b47d0d09a166285da7024f40e2042d6525561cd76e2c338a2dbb28ae38a20f1a3b59178e4a47e6bd936c812acb6d60a570dca18611804fdc3aedab84dccd3947f0ce5bc87fd493d7a14211f7bd866ae200cd49e77233cc39896c1babd3a6124a9a8d632d58e4a848c18961c4ace028801644373bd4b5da0e001e9962770516b0a340d6169be921f2b63a5d1f5a707515aa0effba480d38bb9001cc8c0761d16877d7764bb456468e45220f36780bd9ac99cbfab03bcf7725ef117e2a9b165a128823ab323284d08f192ff2338ee6be0cc6ed2abe3c3853e9ec7f018fbd7a4a321ca103d0466c5a3694e9d8f945e6ccede2a89d256585cf21255c48b9cda3d5e9df47df10adcdebf58a68d2f663fe2ffe9acdc16e253a2f64fc8302792d8a1d9c58ed771c75df48f8418595cbadec2bdd0b1daefb3e7c4d5f8c0cb8326ed2f22e70fcd4a9d581554d2e3be228442ec1b5c7b9ddd6fbc234fa9baa53ab333a396b9ba32dca0f8f809f3e2c2c25aed5233f50aff88af9a092b6aa112575a3da237e3475084e060e5e660025db4e565fadf05b17fef95afb93e89203941173f2ccdf2c75cece79d6e439f9c9bd83e5285b9c868e042e0b8c9773207ce2098ca5dda9d90bf57bb0b5effff8410dbe0a7875ec077e223bfd714f77d7552a24485ab723d5f671b4fa4bc1176ec5f7d603a25bc3572c89d3ba8d262bdb2c9514e1c38877ac61e008a6958e361876e0825c5b8594d000b2c92591adf321152007747caa8bb271b7520e1e002730d968c3037b8008e3846462071ff53e9b9686ca129ff526d18ba5976c64416d0db98f436f4add5e9b00de297828e4eb3b875432512ee48632d4b37f4d241febfcdafb45bf60af5eb1b87a9bf64319be5a56da64d7adff5e88783e42d2e06e26132b3be0e3148f945ae60b29de45ea8943abaaa81b9f97aebeb6e07eddfed3353ab40b4197dee4cdac765d410236007d9615659129f772f629f9ab5d02a3c568fc92418ee9b525e3fe1047da318ac3e01e81a384b31139192ced84ce251f6405b2246474a4cd606122c5a0b9b232f751193b41ff47e51ac3aadd784e2a011b6b5dea531d20cb601233a7222bd82dcb6d5786917ba8a66e1dc88b32e55df610b7231358aefe32797168dd3ff38a61f7fca64269264d4dad9ca9e764aade61569a18748fccb0ef8de7df6ea11b2d3b8566b946634ce73524bca67a217be7641e7f540e7dc830711d7f43f432d8b96c990c6eff5428cfcd0d083c28c4f07b3f3b5b43e0227840f38afa7c37736ccf204ffa32db6daac3d54300912f8fe0bb239318c535c3eed6dd456f588c9dec3102f96eef9e6f4e8bd14a7070da406cd092d53e99b24b14664d26d3962284a50da55a7f7a2207e5691d235a58f66e4de88fe0c405e9d009d4610194312bd6efc9b90806194645e86761ac9cd6f1941a90a66cf12ad6bf27279371a151aefb73cab1744be83fe3efb2fe75492e3912e2e1b81db3be5544abf42e82658beab720569d7de80c4d4790f9a5565f67ea823a4f4b7966b29e287cc8991104c923bb2f28048d21b6bd99719039573a59bf6757a0bb719ded99d8cf987cda04bd5933470d85674f947415e244dafcdff10b5640e6c983d9e5c7c257944fc5e08c909acc00706dd6f1daba4518462a5c7611dedfc1008d4da3b21ecce5a133de116f590809901ece902968151dcb5378341c0bdb0050eef649dad41eaf3b2ffc28eb6636afea412f95742712b265abbf4bc46557957bdb6d9ab602fb09e8b17e3054103c93c319346fb091eb997", 0x541}], 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, &(0x7f0000000280)=""/135, &(0x7f0000000340), &(0x7f0000000380), 0x80, r0}, 0x38)

2.650753697s ago: executing program 8 (id=4782):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x2, 0x100, 0x100, 0x7, 0x4000}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0xfb94, 0x4, 0xb7a, 0x3}})

2.650464515s ago: executing program 8 (id=4783):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000e80)={"9fb770e8ffb03d8c98369a1833ea4adcc96a12d210f52b30a70a937f11b9", 0xc, 0x8, 0x800, [0x7, 0x1, 0x8, 0x6467, 0x7, 0x0, 0x7, 0x2, 0x6, 0x89b, 0x6, 0xfff, 0x0, 0x6, 0x2, 0x93, 0x9]})

2.553172574s ago: executing program 8 (id=4784):
r0 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00000007058103"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000300)={0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.123559689s ago: executing program 7 (id=4805):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='md0\x00', 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f00000001c0), 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='4\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0), 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000380)='1:1\x00', 0x4)
write(r4, &(0x7f00000003c0)='1:2\x00', 0x4)
write(0xffffffffffffffff, &(0x7f0000000480)='0\x00', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-ram2/slot\x00', 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/array_state\x00', 0x1, 0x0)
write(r5, &(0x7f0000000680)='active\x00', 0x7)

1.070071882s ago: executing program 6 (id=4806):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x64}}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40)

794.11114ms ago: executing program 6 (id=4807):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})

723.386433ms ago: executing program 6 (id=4808):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, "040022eb00000000"}}}}}, 0x0)

653.492735ms ago: executing program 6 (id=4809):
add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000040), 0x0, 0xfffffffffffffffd)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(0xffffffffffffffff, 0x21, &(0x7f0000000240)={0x0, 0x35b3, 0x1000, 0x0, 0xb9000000}, 0x1)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000540)=@generic={0x0, 0x0, 0x18}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r4, 0x0, 0x0}, 0x10)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r5 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10)
recvfrom(r3, &(0x7f00000003c0)=""/71, 0xfffffffffffffe83, 0x122, 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x9)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6002, 0x4, 0x410, 0x218, 0x0, 0x110, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@arp={@empty, @loopback, 0xffffff00, 0x0, 0x0, 0xf, {@empty, {[0x0, 0xff, 0x0, 0x181, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x3ff, 0x1, 0x6, 0x1, 0x8, 'veth0_macvtap\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x0, 0x37c}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1b}, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb4, 'syz1\x00', {0x93bf}}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffff00, 0x0, 0xe, 0x10, {@mac, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x96a1643d635fad03, 0xff, 0x0, 0xff]}}, 0x2, 0xfff, 0xe, 0x9, 0x0, 0x2f0, 'veth1_to_team\x00', 'sit0\x00', {}, {}, 0x0, 0x12}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x460)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet(r0, 0x0, 0x52, 0x20020084, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10)

542.588324ms ago: executing program 7 (id=4810):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0xffffd000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[])

486.945421ms ago: executing program 6 (id=4811):
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read(r0, &(0x7f0000000500), 0xfa0)
syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0)
write(r1, &(0x7f0000000180)='Mid', 0x3)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='2\n', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='2', 0x1)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
userfaultfd(0x80001)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7})
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8)

400.603295ms ago: executing program 6 (id=4812):
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0xd2, 0x63, 0xd5, 0x10, 0xc52, 0x2211, 0xc63b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9e, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0xc1, 0xf8, 0x2, 0xe, 0x1, 0x0, 0x5, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0x2}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x7, 0x26, 0xff}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})

311.512576ms ago: executing program 7 (id=4813):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0xcc8c8000)
write$binfmt_elf32(r0, 0x0, 0x4cd)

186.075717ms ago: executing program 7 (id=4814):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000bc02080000e3000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)

100.40488ms ago: executing program 7 (id=4815):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000640)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0)

0s ago: executing program 7 (id=4816):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)

kernel console output (not intermixed with test programs):

 T5769] usb 8-1: USB disconnect, device number 6
[  375.498840][T15357] loop5: detected capacity change from 0 to 4096
[  375.536480][T15357] NILFS error (device loop5): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  375.540309][T15361] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.558414][T15357] NILFS (loop5): mounting fs with errors
[  375.666921][T15364] i2c i2c-0: delete_device: Can't parse I2C address
[  375.702096][T15366] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3)
[  375.704352][T15366] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  375.714956][T15366] vhci_hcd vhci_hcd.0: Device attached
[  375.723223][T15367] vhci_hcd: connection closed
[  375.726355][ T5777] vhci_hcd vhci_hcd.5: stop threads
[  375.732668][ T5777] vhci_hcd vhci_hcd.5: release socket
[  375.735064][ T5777] vhci_hcd vhci_hcd.5: disconnect device
[  375.819929][ T5769] usb 7-1: new low-speed USB device number 20 using dummy_hcd
[  376.191245][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  376.274382][T15372] bridge_slave_0: left allmulticast mode
[  376.276794][T15372] bridge_slave_0: left promiscuous mode
[  376.280789][T15372] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.286638][T15372] bridge_slave_1: left allmulticast mode
[  376.288835][T15372] bridge_slave_1: left promiscuous mode
[  376.292779][T15372] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.314682][T15372] bond0: (slave bond_slave_0): Releasing backup interface
[  376.318288][T15372] bond_slave_0: left promiscuous mode
[  376.352595][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  376.357272][T15372] bond0: (slave bond_slave_1): Releasing backup interface
[  376.361653][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  376.367542][T15372] bond_slave_1: left promiscuous mode
[  376.376204][    T9] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  376.381037][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.384350][    T9] usb 8-1: Product: syz
[  376.386137][    T9] usb 8-1: Manufacturer: syz
[  376.387824][T15375] loop6: detected capacity change from 0 to 4096
[  376.388044][    T9] usb 8-1: SerialNumber: syz
[  376.397269][T15372] team_slave_0: left promiscuous mode
[  376.408488][    T9] usb 8-1: config 0 descriptor??
[  376.416387][T15375] ntfs3(loop6): Failed to load $Extend (-22).
[  376.419845][T15375] ntfs3(loop6): Failed to initialize $Extend.
[  376.435550][T15372] team0: Port device team_slave_0 removed
[  376.443541][T15372] team_slave_1: left promiscuous mode
[  376.458502][T15372] team0: Port device team_slave_1 removed
[  376.462094][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  376.465391][T15372] batman_adv: batadv0: Removing interface: batadv_slave_0
[  376.473565][T15372] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  376.476682][T15372] batman_adv: batadv0: Removing interface: batadv_slave_1
[  376.483729][T15372] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  376.523465][T15373] xfrm0: entered promiscuous mode
[  376.556480][T15373] team0: Port device xfrm0 added
[  376.568481][T15376] tipc: Enabled bearer <eth:team0>, priority 0
[  376.737533][    T9] usb 8-1: USB disconnect, device number 7
[  376.778529][ T5667] udevd[5667]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.907146][T15391] netlink: 'syz.5.3835': attribute type 1 has an invalid length.
[  376.919039][T15391] 8021q: adding VLAN 0 to HW filter on device bond4
[  376.953878][T15391] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  376.964542][T15391] bond4: entered promiscuous mode
[  376.966680][T15391] bond4: entered allmulticast mode
[  377.031195][ T5769] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  377.058513][T15398] loop5: detected capacity change from 0 to 256
[  377.194990][ T5769] usb 7-1: Using ep0 maxpacket: 16
[  377.205084][ T5769] usb 7-1: config index 0 descriptor too short (expected 51443, got 18)
[  377.215359][ T5769] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  377.227344][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.232476][ T5769] usb 7-1: Product: syz
[  377.234493][ T5769] usb 7-1: Manufacturer: syz
[  377.236827][ T5769] usb 7-1: SerialNumber: syz
[  377.245600][ T5769] r8152-cfgselector 7-1: Unknown version 0x0000
[  377.248715][ T5769] r8152-cfgselector 7-1: config 0 descriptor??
[  377.342374][T15412] loop7: detected capacity change from 0 to 256
[  377.559484][ T5784] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  377.677447][ T5769] r8152-cfgselector 7-1: USB disconnect, device number 21
[  377.710185][ T5784] usb 6-1: Using ep0 maxpacket: 8
[  377.713830][ T5784] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.718073][ T5784] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0
[  377.723274][ T5784] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  377.728418][ T5784] usb 6-1: config 0 interface 0 has no altsetting 0
[  377.734371][ T5784] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  377.737767][ T5784] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.741031][ T5784] usb 6-1: Product: syz
[  377.742744][ T5784] usb 6-1: Manufacturer: syz
[  377.744574][ T5784] usb 6-1: SerialNumber: syz
[  377.748549][ T5784] usb 6-1: config 0 descriptor??
[  377.754862][ T5784] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found
[  377.929987][  T189] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  377.963106][ T5784] snd_usb_toneport 6-1:0.0: cannot get proper max packet size
[  377.966401][ T5784] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected
[  377.971126][ T5784] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  378.081066][  T189] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  378.087810][  T189] usb 8-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40
[  378.093187][  T189] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.096518][  T189] usb 8-1: Product: syz
[  378.098289][  T189] usb 8-1: Manufacturer: syz
[  378.100310][  T189] usb 8-1: SerialNumber: syz
[  378.171974][    T9] usb 6-1: USB disconnect, device number 26
[  378.318124][  T189] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  378.330550][  T189] usb 8-1: unit 2 not found!
[  378.375581][  T189] usb 8-1: disable ehci-hcd to run US-144
[  378.385769][  T189] usb 8-1: USB disconnect, device number 8
[  378.431449][ T5725] udevd[5725]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  378.474977][T15434] loop6: detected capacity change from 0 to 16
[  378.490451][T15434] erofs (device loop6): mounted with root inode @ nid 36.
[  378.682463][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  378.753276][T15447] loop5: detected capacity change from 0 to 256
[  378.757032][T15447] exfat: Deprecated parameter 'namecase'
[  378.762826][T15447] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  378.787709][T15447] exFAT-fs (loop5): Invalid exboot-signature(sector = 1): 0xaa000000
[  378.792655][T15447] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6)
[  378.797183][T15447] exFAT-fs (loop5): invalid boot region
[  378.799692][T15447] exFAT-fs (loop5): failed to recognize exfat type
[  378.967331][T15451] loop5: detected capacity change from 0 to 4096
[  379.003868][T15451] ntfs3(loop5): ino=19, mi_enum_attr
[  379.009194][T15451] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  379.034502][T15451] ntfs3(loop5): ino=5, "/" fiemap is not supported for compressed file
[  379.134742][T15470] loop7: detected capacity change from 0 to 1024
[  379.141492][T15470] EXT4-fs: Ignoring removed orlov option
[  379.165757][T15470] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.219004][T15470] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.3872: unexpected EA_INODE flag
[  379.268705][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.359442][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  379.446755][ T5784] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  379.464005][T15487] loop7: detected capacity change from 0 to 4096
[  379.467389][T15487] ext4: Unknown parameter 'seclabel'
[  379.487620][T15491] loop5: detected capacity change from 0 to 512
[  379.496635][T15491] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  379.524257][T15491] EXT4-fs (loop5): 1 truncate cleaned up
[  379.527999][T15491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.534337][    T9] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  379.539610][    T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  379.551506][    T9] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c
[  379.557349][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.563247][    T9] usb 7-1: Product: syz
[  379.564727][    T9] usb 7-1: Manufacturer: syz
[  379.566421][    T9] usb 7-1: SerialNumber: syz
[  379.626395][    T9] usb 7-1: config 0 descriptor??
[  379.660459][    T9] ims_pcu 7-1:0.0: Missing CDC union descriptor
[  379.662972][    T9] ims_pcu 7-1:0.0: probe with driver ims_pcu failed with error -22
[  379.797367][T15496] netlink: 'syz.5.3880': attribute type 4 has an invalid length.
[  380.007824][T10740] usb 7-1: USB disconnect, device number 22
[  380.108851][T15495] loop7: detected capacity change from 0 to 32768
[  380.112608][T15495] btrfs: Deprecated parameter 'usebackuproot'
[  380.118851][T15495] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  380.132237][T15495] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3881 (15495)
[  380.149028][T15495] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  380.153581][T15495] BTRFS info (device loop7): using sha256 checksum algorithm
[  380.181235][T15495] BTRFS info (device loop7): rebuilding free space tree
[  380.231174][T15495] BTRFS info (device loop7): disabling free space tree
[  380.233419][T15495] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  380.236492][T15495] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  380.252754][T15495] BTRFS info (device loop7): setting nodatasum
[  380.254866][T15495] BTRFS info (device loop7): setting nodatacow
[  380.256768][T15495] BTRFS info (device loop7): turning off barriers
[  380.258647][T15495] BTRFS info (device loop7): turning on async discard
[  380.263452][T15495] BTRFS info (device loop7): force clearing of disk cache
[  380.269413][T15495] BTRFS info (device loop7): trying to use backup root at mount time
[  380.399624][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.528489][T14125] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  380.602775][T15516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.125021][T15525] F2FS-fs (loop7): Image doesn't support compression
[  381.127949][T15525] F2FS-fs (loop7): build fault injection rate: 690
[  381.130787][T15525] F2FS-fs (loop7): build fault injection type: 0x4
[  381.134219][T15525] F2FS-fs (loop7): invalid crc value
[  381.200787][T15525] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  381.221082][ T1116] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  381.237851][T15525] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  381.238042][ T1116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[  381.246491][ T1116] EXT4-fs (loop5): This should not happen!! Data will be lost
[  381.246491][ T1116] 
[  381.258384][ T1116] EXT4-fs (loop5): Total free blocks count 0
[  381.263004][ T1116] EXT4-fs (loop5): Free/Dirty block details
[  381.265524][ T1116] EXT4-fs (loop5): free_blocks=2415919504
[  381.268433][ T1116] EXT4-fs (loop5): dirty_blocks=8192
[  381.271169][ T1116] EXT4-fs (loop5): Block reservation details
[  381.273922][ T1116] EXT4-fs (loop5): i_reserved_data_blocks=512
[  381.327342][ T1116] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28
[  381.362669][T11478] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost
[  381.631115][T15535] set_capacity_and_notify: 2 callbacks suppressed
[  381.631124][T15535] loop6: detected capacity change from 0 to 256
[  381.951091][T15560] netlink: 3 bytes leftover after parsing attributes in process `syz.6.3902'.
[  381.962997][T15556] loop5: detected capacity change from 0 to 8192
[  382.174350][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3906'.
[  382.182691][T15570] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3906'.
[  382.199563][T14956] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.204906][T14956] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.211740][T14956] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.218010][T14956] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.298266][T15575] loop7: detected capacity change from 0 to 512
[  382.301742][T15575] EXT4-fs: inline encryption not supported
[  382.503614][T15575] EXT4-fs (loop7): Test dummy encryption mode enabled
[  382.514112][T15575] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  382.604577][T15575] EXT4-fs (loop7): 1 truncate cleaned up
[  382.610655][T15575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  382.631716][T15575] EXT4-fs (loop7): Online defrag not supported for encrypted files
[  382.658068][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  383.105441][ T5784] hid_parser_main: 31 callbacks suppressed
[  383.105453][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.111171][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.116847][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.124614][T15595] netlink: 'syz.5.3913': attribute type 2 has an invalid length.
[  383.127639][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.127679][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.127689][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.127698][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.127707][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.130096][T15595] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3913'.
[  383.134314][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.158107][ T5784] hid-generic 0006:0004:0009.0015: unknown main item tag 0x0
[  383.180598][ T5784] hid-generic 0006:0004:0009.0015: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  383.233110][T15601] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  383.349019][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  383.349027][   T33] audit: type=1326 audit(2000000109.070:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15607 comm="syz.5.3919" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd60b9e019 code=0x0
[  383.847838][T15624] loop7: detected capacity change from 0 to 512
[  383.855745][T15624] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  383.887304][T15624] EXT4-fs error (device loop7): ext4_quota_enable:7228: comm syz.7.3926: Bad quota inum: 2, type: 1
[  383.891120][T15624] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  383.908865][T14125] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  384.261404][T15636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3930'.
[  384.291947][T15635] bridge0: left promiscuous mode
[  384.304249][T15635] 8021q: adding VLAN 0 to HW filter on device bond0
[  384.308616][T15635] 8021q: adding VLAN 0 to HW filter on device team0
[  384.324960][T15635] 8021q: adding VLAN 0 to HW filter on device batadv0
[  384.382944][T15635] batman_adv: batadv0: Interface activated: batadv_slave_0
[  384.389009][T15635] batman_adv: batadv0: Interface activated: batadv_slave_1
[  384.402903][T15635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  384.406951][T15635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  384.415473][T15635] veth1_vlan: left promiscuous mode
[  384.419136][T15635] veth0_vlan: left promiscuous mode
[  384.422739][T15635] veth0_vlan: entered promiscuous mode
[  384.425653][T15635] veth1_vlan: entered promiscuous mode
[  384.445671][T15635] veth1_macvtap: left promiscuous mode
[  384.450877][T15635] veth0_macvtap: left promiscuous mode
[  384.454904][T15635] veth0_macvtap: entered promiscuous mode
[  384.466760][T15635] veth1_macvtap: entered promiscuous mode
[  384.488667][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  384.496225][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  384.499807][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  384.503865][T15635] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  384.517579][T15635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  384.611394][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.613945][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.621993][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.624401][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.759926][ T5506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  384.780233][ T5506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  384.791970][ T5506] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  384.821399][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  385.125226][T15647] nvmet: adding nsid 1 to subsystem testnqn
[  385.135398][   T33] audit: type=1800 audit(2000000110.860:206): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3935" name="device_path" dev="configfs" ino=39708 res=0 errno=0
[  385.157258][   T33] audit: type=1800 audit(2000000110.880:207): pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3935" name="enable" dev="configfs" ino=39709 res=0 errno=0
[  385.191229][T15647] nvmet: failed to open file /dev/null: (-22)
[  385.254544][T15651] loop6: detected capacity change from 0 to 1024
[  385.644082][T15661] loop5: detected capacity change from 0 to 512
[  385.652740][T15661] EXT4-fs (loop5): orphan cleanup on readonly fs
[  385.656407][T15661] EXT4-fs error (device loop5): dx_probe:791: inode #2: comm syz.5.3942: Directory hole found for htree index block 0
[  385.665342][T15661] loop5: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  385.670501][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  385.675610][    C0] EXT4-fs (loop5): initial error at time 2000000111: dx_probe:791: inode 2
[  385.678401][    C0] EXT4-fs (loop5): last error at time 2000000111: dx_probe:791: inode 2
[  385.732227][T15661] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  385.744303][T15661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  385.753052][T15661] EXT4-fs (loop5): shut down requested (2)
[  385.771595][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.777322][T15670] netlink: 'syz.7.3945': attribute type 4 has an invalid length.
[  385.780613][T15670] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3945'.
[  385.809331][T15670] .`: renamed from bond0 (while UP)
[  385.884532][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  387.152973][T15711] loop6: detected capacity change from 0 to 256
[  387.156494][T15711] exfat: Deprecated parameter 'namecase'
[  387.175149][T15711] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d)
[  387.263321][T15717] loop5: detected capacity change from 0 to 8
[  387.275478][T15717] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  387.472643][ T5769] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  387.599409][  T189] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  387.772771][  T189] usb 7-1: Using ep0 maxpacket: 32
[  387.778683][  T189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 66, changing to 7
[  387.785888][  T189] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  387.799415][  T189] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  387.802950][  T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.808175][  T189] usb 7-1: Product: syz
[  387.812071][  T189] usb 7-1: Manufacturer: syz
[  387.815252][  T189] usb 7-1: SerialNumber: syz
[  387.846749][T15740] x_tables: duplicate entry at hook 2
[  388.117979][  T189] usb 7-1: USB disconnect, device number 23
[  388.207455][ T5667] udevd[5667]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  388.388174][T15750] fuse: root generation should be zero
[  388.645856][T15765] loop6: detected capacity change from 0 to 1024
[  388.710325][T15763] loop5: detected capacity change from 0 to 4096
[  388.719724][T15763] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  388.774096][   T33] audit: type=1800 audit(2000000114.500:208): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3987" name="bus" dev="loop5" ino=33 res=0 errno=0
[  389.321248][T15774] loop7: detected capacity change from 0 to 32768
[  389.338361][T15774] (syz.7.3993,15774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  389.344521][T15774] (syz.7.3993,15774,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  389.393003][T15774] JBD2: Ignoring recovery information on journal
[  389.423485][T15774] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  389.494892][T15769] loop6: detected capacity change from 0 to 131072
[  389.501511][T15769] F2FS-fs (loop6): invalid crc value
[  389.507463][   T33] audit: type=1800 audit(2000000115.220:209): pid=15774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3993" name="file1" dev="loop7" ino=16978 res=0 errno=0
[  389.551645][T15769] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  389.566551][T15769] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  390.106630][T15781] syz.7.3993 (15781) used greatest stack depth: 18104 bytes left
[  390.120257][   T33] audit: type=1800 audit(2000000115.830:210): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3993" name="file1" dev="loop7" ino=16978 res=0 errno=0
[  390.191579][T14125] ocfs2: Unmounting device (7,7) on (node local)
[  390.416581][T15792] loop7: detected capacity change from 0 to 512
[  390.422869][T15792] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  390.456886][T15792] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.3998: invalid indirect mapped block 4294967295 (level 0)
[  390.461252][T15792] loop7: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  390.461611][T15792] EXT4-fs (loop7): Remounting filesystem read-only
[  390.466952][T15792] EXT4-fs (loop7): 1 orphan inode deleted
[  390.469079][T15792] EXT4-fs (loop7): 1 truncate cleaned up
[  390.470947][    C0] EXT4-fs (loop7): error count since last fsck: 1
[  390.470956][    C0] EXT4-fs (loop7): initial error at time 2000000116: ext4_free_branches:1023: inode 16
[  390.470969][    C0] EXT4-fs (loop7): last error at time 2000000116: ext4_free_branches:1023: inode 16
[  390.480690][T15792] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.508179][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.084972][T15820] loop5: detected capacity change from 0 to 32768
[  391.121695][T15820] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  391.132559][T15820] XFS (loop5): Ending clean mount
[  391.882593][T11478] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  391.910666][  T189] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  392.040834][T15847] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4019'.
[  392.078702][  T189] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  392.084843][  T189] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  392.101911][  T189] usb 7-1: config 220 has no interface number 2
[  392.107953][  T189] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  392.120197][  T189] usb 7-1: config 220 interface 0 has no altsetting 0
[  392.138530][  T189] usb 7-1: config 220 interface 76 has no altsetting 0
[  392.142614][  T189] usb 7-1: config 220 interface 1 has no altsetting 0
[  392.147764][T15851] loop7: detected capacity change from 0 to 2048
[  392.147800][  T189] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  392.162039][  T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.166372][  T189] usb 7-1: Product: syz
[  392.168440][  T189] usb 7-1: Manufacturer: syz
[  392.171002][T15852] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  392.179592][  T189] usb 7-1: SerialNumber: syz
[  392.244147][T15849] loop5: detected capacity change from 0 to 32768
[  392.250381][T15849] 
[  392.250381][T15849]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  392.250381][T15849] 
[  392.255029][T15849] 
[  392.255029][T15849]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  392.255029][T15849] 
[  392.271523][T15849] 
[  392.271523][T15849]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  392.271523][T15849] 
[  392.289175][T15854] loop7: detected capacity change from 0 to 512
[  392.316310][T15854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002]
[  392.329537][T15854] System zones: 1-12
[  392.334494][T15854] EXT4-fs (loop7): 1 truncate cleaned up
[  392.344085][T15854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.402208][  T189] usb 7-1: selecting invalid altsetting 0
[  392.408160][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.444975][  T189] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  392.448940][  T189] uvcvideo 7-1:220.0: No valid video chain found.
[  392.488990][  T189] usb 7-1: selecting invalid altsetting 0
[  392.495036][  T189] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  392.504756][  T189] usb 7-1: USB disconnect, device number 24
[  392.944067][T15887] pimreg0: tun_chr_ioctl cmd 2147767506
[  393.029547][T10740] usb 6-1: new full-speed USB device number 27 using dummy_hcd
[  393.076152][T15893] xt_NFQUEUE: number of total queues is 0
[  393.182739][T10740] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.189821][T10740] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  393.193296][T10740] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  393.196982][T10740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.204665][T10740] usb 6-1: config 0 descriptor??
[  393.217140][T10740] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  393.222811][T10740] dvb-usb: bulk message failed: -22 (3/0)
[  393.243232][T10740] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  393.247205][T10740] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  393.250526][T10740] usb 6-1: media controller created
[  393.254597][T10740] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  393.280919][T10740] dvb-usb: bulk message failed: -22 (6/0)
[  393.289092][T10740] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  393.297681][   T33] audit: type=1326 audit(2000000119.030:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15900 comm="syz.6.4042" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x0
[  393.304341][T10740] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input27
[  393.329083][T10740] dvb-usb: schedule remote query interval to 150 msecs.
[  393.333525][T10740] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  393.404276][T15903] netlink: 'syz.6.4043': attribute type 1 has an invalid length.
[  393.407380][T15903] netlink: 248 bytes leftover after parsing attributes in process `syz.6.4043'.
[  393.425640][  T189] usb 6-1: USB disconnect, device number 27
[  393.450987][  T189] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  393.921516][T15924] loop7: detected capacity change from 0 to 40427
[  393.927583][T15924] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  393.932438][T15924] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  393.939400][  T189] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  393.946450][T15924] F2FS-fs (loop7): invalid crc value
[  394.004048][T15924] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  394.017985][T15924] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  394.021098][T15924] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  394.066258][T14125] syz-executor: attempt to access beyond end of device
[  394.066258][T14125] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  394.076525][T14125] CPU: 1 UID: 0 PID: 14125 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  394.076545][T14125] Tainted: [L]=SOFTLOCKUP
[  394.076549][T14125] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  394.076556][T14125] Call Trace:
[  394.076561][T14125]  <TASK>
[  394.076566][T14125]  dump_stack_lvl+0xe8/0x150
[  394.076586][T14125]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  394.076604][T14125]  f2fs_write_end_io+0x124b/0x1710
[  394.076630][T14125]  __submit_merged_bio+0x258/0x6a0
[  394.076644][T14125]  ? rcu_is_watching+0x15/0xb0
[  394.076659][T14125]  __submit_merged_write_cond+0x3c9/0x4e0
[  394.076677][T14125]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  394.076739][T14125]  f2fs_write_data_pages+0x2a27/0x36f0
[  394.076779][T14125]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  394.076795][T14125]  ? is_bpf_text_address+0x26/0x2b0
[  394.076818][T14125]  ? arch_stack_walk+0xfb/0x150
[  394.076847][T14125]  ? add_lock_to_list+0xc7/0x100
[  394.076861][T14125]  ? lockdep_unlock+0x5d/0xd0
[  394.076873][T14125]  ? __lock_acquire+0x13e8/0x2cf0
[  394.076904][T14125]  ? do_raw_spin_lock+0x12b/0x2f0
[  394.076923][T14125]  ? do_raw_spin_unlock+0x4d/0x210
[  394.076935][T14125]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  394.076950][T14125]  do_writepages+0x338/0x560
[  394.076972][T14125]  ? do_raw_spin_unlock+0x4d/0x210
[  394.076987][T14125]  filemap_fdatawrite+0x1e9/0x2f0
[  394.077006][T14125]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  394.077051][T14125]  ? do_raw_spin_unlock+0x4d/0x210
[  394.077066][T14125]  f2fs_sync_dirty_inodes+0x30e/0x830
[  394.077092][T14125]  f2fs_write_checkpoint+0xa3d/0x2710
[  394.077110][T14125]  ? __lock_acquire+0x683/0x2cf0
[  394.077144][T14125]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  394.077211][T14125]  kill_f2fs_super+0x2f6/0x700
[  394.077233][T14125]  ? __pfx_kill_f2fs_super+0x10/0x10
[  394.077255][T14125]  ? call_rcu+0x64b/0x8b0
[  394.077267][T14125]  ? lockdep_hardirqs_on+0x7a/0x110
[  394.077289][T14125]  deactivate_locked_super+0xbc/0x130
[  394.077309][T14125]  cleanup_mnt+0x3d3/0x460
[  394.077324][T14125]  task_work_run+0x1d9/0x270
[  394.077337][T14125]  ? __pfx_task_work_run+0x10/0x10
[  394.077353][T14125]  exit_to_user_mode_loop+0x1fa/0x730
[  394.077371][T14125]  ? rcu_is_watching+0x15/0xb0
[  394.077383][T14125]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.077396][T14125]  do_syscall_64+0x353/0x580
[  394.077413][T14125]  ? trace_irq_disable+0x3b/0x140
[  394.077433][T14125]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  394.077445][T14125] RIP: 0033:0x7fcd12d9f257
[  394.077458][T14125] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  394.077467][T14125] RSP: 002b:00007ffd6d7c0468 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  394.077481][T14125] RAX: 0000000000000000 RBX: 00007fcd12e3445c RCX: 00007fcd12d9f257
[  394.077488][T14125] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6d7c0520
[  394.077494][T14125] RBP: 00007ffd6d7c0520 R08: 00007ffd6d7c1520 R09: 00000000ffffffff
[  394.077501][T14125] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd6d7c15b0
[  394.077508][T14125] R13: 00007fcd12e3445c R14: 00000000000602c4 R15: 00007ffd6d7c15f0
[  394.077527][T14125]  </TASK>
[  394.081928][T14125] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  394.213116][  T189] usb 7-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  394.216309][  T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.218813][  T189] usb 7-1: Product: syz
[  394.220287][  T189] usb 7-1: Manufacturer: syz
[  394.221791][  T189] usb 7-1: SerialNumber: syz
[  394.434088][  T189] usb 7-1: 1:1 : no cluster descriptor
[  394.438410][  T189] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  394.461528][T15937] loop7: detected capacity change from 0 to 128
[  394.476483][T15937] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  394.481979][T15937] ext4 filesystem being mounted at /283/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  394.488552][  T189] usb 7-1: USB disconnect, device number 25
[  394.511917][T14125] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  394.678680][T15951] loop7: detected capacity change from 0 to 2048
[  394.688672][T15951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.695153][T15951] fs-verity (loop7, inode 13): Unsupported log_blocksize: 12
[  394.710738][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.948461][T15967] loop5: detected capacity change from 0 to 128
[  394.974200][T15967] FAT-fs (loop5): data area starts beyond volume (33 > 0)
[  394.979592][T15967] FAT-fs (loop5): Can't find a valid FAT filesystem
[  394.992257][T15967] loop5: detected capacity change from 0 to 128
[  395.001259][   T33] audit: type=1800 audit(2000000120.720:212): pid=15967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4068" name="file1" dev="loop5" ino=1048739 res=0 errno=0
[  395.021838][T14954] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  395.171309][T14954] usb 8-1: Using ep0 maxpacket: 16
[  395.178671][T14954] usb 8-1: config 0 has an invalid interface number: 34 but max is 0
[  395.184741][T14954] usb 8-1: config 0 has no interface number 0
[  395.195802][T14954] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  395.204061][T14954] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  395.218885][T14954] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  395.232639][T14954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.238819][T14954] usb 8-1: Product: syz
[  395.243176][T14954] usb 8-1: Manufacturer: syz
[  395.247324][T14954] usb 8-1: SerialNumber: syz
[  395.258294][T14954] usb 8-1: config 0 descriptor??
[  395.261656][T15959] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  395.269470][T15959] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  395.445730][T15989] loop6: detected capacity change from 0 to 1024
[  395.491356][T14954] asix 8-1:0.34: probe with driver asix failed with error -71
[  395.518436][T14954] usb 8-1: USB disconnect, device number 9
[  395.557494][T15989] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  395.569694][T15992] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  395.668945][T15997] loop5: detected capacity change from 0 to 16
[  395.676101][T15997] erofs (device loop5): mounted with root inode @ nid 36.
[  395.679728][T15998] netlink: 'syz.6.4082': attribute type 4 has an invalid length.
[  395.720010][T15998] netlink: 'syz.6.4082': attribute type 4 has an invalid length.
[  395.929993][T10740] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  395.983296][T16008] block nbd1: server does not support multiple connections per device.
[  395.994317][T16008] block nbd1: shutting down sockets
[  396.089348][T10740] usb 6-1: Using ep0 maxpacket: 16
[  396.093616][T10740] usb 6-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  396.114223][T10740] usb 6-1: config 0 interface 0 has no altsetting 0
[  396.121375][T10740] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  396.129572][T10740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.139812][T10740] usb 6-1: config 0 descriptor??
[  396.145281][   T33] audit: type=1326 audit(2000000121.870:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16015 comm="syz.7.4091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  396.171758][   T33] audit: type=1326 audit(2000000121.890:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16015 comm="syz.7.4091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  396.191211][   T33] audit: type=1326 audit(2000000121.890:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16015 comm="syz.7.4091" exe="/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  396.202351][   T33] audit: type=1326 audit(2000000121.890:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16015 comm="syz.7.4091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  396.220123][   T33] audit: type=1326 audit(2000000121.890:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16015 comm="syz.7.4091" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  396.515136][T16018] loop7: detected capacity change from 0 to 32768
[  396.533770][T16018] ERROR: (device loop7): diAllocAG: numfree > numinos
[  396.533770][T16018] 
[  396.555447][T10740] kovaplus 0003:1E7D:2D50.0017: global environment stack underflow
[  396.562420][T16018] ERROR: (device loop7): remounting filesystem as read-only
[  396.565976][T10740] kovaplus 0003:1E7D:2D50.0017: item 0 0 1 11 parsing failed
[  396.568523][T10740] kovaplus 0003:1E7D:2D50.0017: parse failed
[  396.574020][T10740] kovaplus 0003:1E7D:2D50.0017: probe with driver kovaplus failed with error -22
[  396.576870][T16018] ialloc: diAlloc returned -5!
[  396.689759][T16033] kAFS: bad VL server IP address
[  397.219414][T10740] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  397.324943][   T33] audit: type=1326 audit(2000000123.050:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.6.4110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  397.338670][   T33] audit: type=1326 audit(2000000123.050:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.6.4110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  397.347869][   T33] audit: type=1326 audit(2000000123.060:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.6.4110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  397.350457][T16058] loop6: detected capacity change from 0 to 128
[  397.358914][   T33] audit: type=1326 audit(2000000123.060:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16057 comm="syz.6.4110" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  397.363673][T16058] FAT-fs (loop6): bogus number of reserved sectors
[  397.377941][T10740] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  397.381756][T10740] usb 8-1: config 0 has no interface number 0
[  397.388289][T10740] usb 8-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[  397.393953][T10740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.398266][T16058] FAT-fs (loop6): Can't find a valid FAT filesystem
[  397.402249][T10740] usb 8-1: Product: syz
[  397.405620][T10740] usb 8-1: Manufacturer: syz
[  397.410027][T10740] usb 8-1: SerialNumber: syz
[  397.428157][T10740] usb 8-1: config 0 descriptor??
[  397.440426][T10740] usb 8-1: selecting invalid altsetting 1
[  397.469055][T10740] dvb_ttusb_budget: ttusb_init_controller: error
[  397.475470][T10740] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  397.521160][T10740] DVB: Unable to find symbol stv0299_attach()
[  397.552931][T10740] DVB: Unable to find symbol tda8083_attach()
[  397.564758][T10740] dvb_ttusb_budget: no frontend driver found for device [0b48:1003]
[  397.640052][T14954] usb 8-1: USB disconnect, device number 10
[  398.193590][T16067] atomic_op ffff88816cb50998 conn xmit_atomic 0000000000000000
[  398.273899][T16069] loop7: detected capacity change from 0 to 4096
[  398.281470][T16069] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  398.308767][T16069] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  398.408923][T16073] loop7: detected capacity change from 0 to 512
[  398.414983][T16073] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  398.453864][T16073] EXT4-fs (loop7): 1 truncate cleaned up
[  398.458069][T16073] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  398.784644][   T10] usb 6-1: USB disconnect, device number 28
[  398.833644][T16082] loop5: detected capacity change from 0 to 512
[  398.836567][T16082] EXT4-fs: Ignoring removed bh option
[  398.851992][T16082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  398.856141][T16082] ext4 filesystem being mounted at /613/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  398.863694][T16082] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #2: block 3: comm syz.5.4118: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0
[  398.871534][T16082] EXT4-fs (loop5): Remounting filesystem read-only
[  398.891480][T11478] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.976653][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.508953][T16122] loop7: detected capacity change from 0 to 512
[  399.537175][T16122] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  399.540340][T16122] UDF-fs: Scanning with blocksize 512 failed
[  399.548514][T16122] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  399.551716][T16122] UDF-fs: Scanning with blocksize 1024 failed
[  399.578102][T16122] UDF-fs: warning (device loop7): udf_load_vrs: No VRS found
[  399.581003][T16122] UDF-fs: Scanning with blocksize 2048 failed
[  399.588753][T16122] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  399.618871][T16122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  400.009373][T10740] usb 6-1: new full-speed USB device number 29 using dummy_hcd
[  400.161498][T10740] usb 6-1: unable to get BOS descriptor or descriptor too short
[  400.172641][T10740] usb 6-1: not running at top speed; connect to a high speed hub
[  400.183655][T10740] usb 6-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  400.201928][T10740] usb 6-1: config 1 interface 0 has no altsetting 0
[  400.211810][T10740] usb 6-1: language id specifier not provided by device, defaulting to English
[  400.229944][T10740] usb 6-1: New USB device found, idVendor=046d, idProduct=c29a, bcdDevice= 0.40
[  400.240091][T10740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.256715][T10740] usb 6-1: Product: syz
[  400.263385][T10740] usb 6-1: SerialNumber: syz
[  400.279946][T16127] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  400.482163][T16141] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  400.483157][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.492471][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.495897][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.499032][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.502380][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.505550][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.508731][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.512015][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.515325][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.518478][T16139] ICMPv6: RA: ndisc_router_discovery failed to add default route
[  400.541207][T10740] usbhid 6-1:1.0: can't add hid device: -71
[  400.543777][T10740] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  400.551181][T10740] usb 6-1: USB disconnect, device number 29
[  401.170482][T16151] loop7: detected capacity change from 0 to 128
[  401.243628][T16156] syz_tun: refused to change device tx_queue_len
[  401.281173][T16158] loop7: detected capacity change from 0 to 256
[  401.585506][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4158'.
[  401.633509][T16173] vlan3: entered promiscuous mode
[  401.639632][T16173] bridge0: entered promiscuous mode
[  401.837625][ T5715] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  401.844469][T16189] loop6: detected capacity change from 0 to 1024
[  401.902185][T16189] hfsplus: xattr search failed
[  402.199006][T16195] loop6: detected capacity change from 0 to 512
[  402.300120][T16195] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  402.364723][T16191] loop7: detected capacity change from 0 to 32768
[  402.380610][T14954] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  402.417505][T16191] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  402.464274][T16191] XFS (loop7): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  402.471324][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.7.4166 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  402.471347][T16191] Tainted: [L]=SOFTLOCKUP
[  402.471353][T16191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  402.471359][T16191] Call Trace:
[  402.471364][T16191]  <TASK>
[  402.471372][T16191]  dump_stack_lvl+0xe8/0x150
[  402.471394][T16191]  xfs_corruption_error+0x122/0x170
[  402.471409][T16191]  ? xlog_header_check_mount+0x93/0xe0
[  402.471429][T16191]  xlog_header_check_mount+0xc6/0xe0
[  402.471445][T16191]  ? xlog_header_check_mount+0x93/0xe0
[  402.471461][T16191]  xlog_find_verify_log_record+0x32e/0x500
[  402.471484][T16191]  xlog_find_zeroed+0x327/0x410
[  402.471506][T16191]  xlog_find_head+0x5f/0x700
[  402.471529][T16191]  xlog_find_tail+0x3d/0x880
[  402.471544][T16191]  ? lockdep_hardirqs_on+0x7a/0x110
[  402.471560][T16191]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  402.471600][T16191]  ? try_to_wake_up+0x8c5/0x14d0
[  402.471616][T16191]  xlog_recover+0x4b/0x3d0
[  402.471636][T16191]  xfs_log_mount+0x253/0x3e0
[  402.471652][T16191]  xfs_mountfs+0xedf/0x2380
[  402.471678][T16191]  ? __pfx_xfs_mountfs+0x10/0x10
[  402.471697][T16191]  ? trace_xfs_inode_timestamp_range+0x84/0x200
[  402.471713][T16191]  xfs_fs_fill_super+0x115a/0x15a0
[  402.471731][T16191]  get_tree_bdev_flags+0x430/0x4f0
[  402.471745][T16191]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  402.471759][T16191]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  402.471779][T16191]  vfs_get_tree+0x92/0x2a0
[  402.471793][T16191]  do_new_mount+0x319/0xdc0
[  402.471813][T16191]  ? __pfx_do_new_mount+0x10/0x10
[  402.471831][T16191]  ? ns_capable+0x89/0xe0
[  402.471847][T16191]  ? path_mount+0x647/0x1040
[  402.471872][T16191]  ? user_path_at+0xd4/0x160
[  402.471893][T16191]  __se_sys_mount+0x31d/0x420
[  402.471914][T16191]  ? __pfx___se_sys_mount+0x10/0x10
[  402.471937][T16191]  ? __x64_sys_mount+0x20/0xc0
[  402.471953][T16191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.471968][T16191]  do_syscall_64+0x174/0x580
[  402.471985][T16191]  ? trace_irq_disable+0x3b/0x140
[  402.472005][T16191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.472017][T16191] RIP: 0033:0x7fcd12d9f28a
[  402.472030][T16191] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  402.472041][T16191] RSP: 002b:00007fcd13d20e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  402.472055][T16191] RAX: ffffffffffffffda RBX: 00007fcd13d20ee0 RCX: 00007fcd12d9f28a
[  402.472064][T16191] RDX: 0000200000009600 RSI: 0000200000009640 RDI: 00007fcd13d20ea0
[  402.472073][T16191] RBP: 0000200000009600 R08: 00007fcd13d20ee0 R09: 0000000000000000
[  402.472080][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000009640
[  402.472088][T16191] R13: 00007fcd13d20ea0 R14: 00000000000096c5 R15: 0000200000000080
[  402.472109][T16191]  </TASK>
[  402.472114][T16191] XFS (loop7): Corruption detected. Unmount and run xfs_repair
[  402.580155][T16191] XFS (loop7): log has mismatched uuid - can't recover
[  402.583009][T16191] XFS (loop7): empty log check failed
[  402.585412][T16191] XFS (loop7): log mount/recovery failed: error -117
[  402.603788][T14954] usb 6-1: Using ep0 maxpacket: 32
[  402.607767][T16191] XFS (loop7): log mount failed
[  402.611295][T14954] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  402.613944][T14954] usb 6-1: config 0 has no interface number 0
[  402.620695][T14954] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  402.623645][T14954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.626218][T14954] usb 6-1: Product: syz
[  402.627625][T14954] usb 6-1: Manufacturer: syz
[  402.629398][T14954] usb 6-1: SerialNumber: syz
[  402.641207][T14954] usb 6-1: config 0 descriptor??
[  402.647070][T14954] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  402.860877][T14954] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  402.892682][T14954] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  402.958117][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  403.246044][T16229] loop6: detected capacity change from 0 to 1024
[  403.259124][T16229] hfsplus: failed to load root directory
[  403.274578][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  403.278544][T10740] usb 6-1: USB disconnect, device number 30
[  403.288012][T10740] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  403.348114][T10740] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  403.358651][T10740] quatech2 6-1:0.51: device disconnected
[  403.569478][ T5769] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  403.649494][T14954] usb 7-1: new full-speed USB device number 26 using dummy_hcd
[  403.720970][ T5769] usb 8-1: Using ep0 maxpacket: 8
[  403.727222][ T5769] usb 8-1: unable to get BOS descriptor or descriptor too short
[  403.731758][ T5769] usb 8-1: config 0 has an invalid interface number: 88 but max is 0
[  403.734969][ T5769] usb 8-1: config 0 has no interface number 0
[  403.737510][ T5769] usb 8-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  403.741781][ T5769] usb 8-1: config 0 interface 88 has no altsetting 0
[  403.746972][ T5769] usb 8-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  403.750826][ T5769] usb 8-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  403.754394][ T5769] usb 8-1: Product: syz
[  403.756216][ T5769] usb 8-1: Manufacturer: syz
[  403.758075][ T5769] usb 8-1: SerialNumber: syz
[  403.762365][ T5769] usb 8-1: config 0 descriptor??
[  403.803863][T14954] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.812944][T14954] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[  403.827608][T14954] usb 7-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00
[  403.836653][T14954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.840634][T14954] usb 7-1: Product: syz
[  403.842432][T14954] usb 7-1: Manufacturer: syz
[  403.844223][T14954] usb 7-1: SerialNumber: syz
[  403.989843][ T5769] usb 8-1: USB disconnect, device number 11
[  404.498380][T14954] usb 7-1: unable to init card! (ret=-110)
[  404.501146][T14954] snd-usb-caiaq 7-1:1.0: probe with driver snd-usb-caiaq failed with error -110
[  404.588630][    T9] usb 7-1: USB disconnect, device number 26
[  404.660665][T16251] loop7: detected capacity change from 0 to 64
[  405.273039][T16281] loop7: detected capacity change from 0 to 1024
[  405.710257][T14954] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  405.859591][T14954] usb 8-1: Using ep0 maxpacket: 8
[  405.865138][T14954] usb 8-1: unable to get BOS descriptor or descriptor too short
[  405.870507][T14954] usb 8-1: config 3 has an invalid interface number: 161 but max is 0
[  405.873664][T14954] usb 8-1: config 3 has no interface number 0
[  405.881891][T14954] usb 8-1: New USB device found, idVendor=19ff, idProduct=0239, bcdDevice=9e.6d
[  405.885273][T14954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.889751][T14954] usb 8-1: Product: syz
[  405.891120][T14954] usb 8-1: Manufacturer: syz
[  405.893217][T14954] usb 8-1: SerialNumber: syz
[  405.936185][T16324] loop6: detected capacity change from 0 to 512
[  405.947441][T16324] EXT4-fs: Ignoring removed nomblk_io_submit option
[  405.971048][T16324] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  405.977392][T16324] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.4222: corrupted in-inode xattr: e_value size too large
[  405.991919][T16324] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  405.992101][T16324] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4222: couldn't read orphan inode 15 (err -117)
[  405.999293][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  406.001198][T16329] kAFS: unparsable volume name
[  406.003172][    C0] EXT4-fs (loop6): initial error at time 2000000131: ext4_iget_extra_inode:5180: inode 15
[  406.006474][    C0] EXT4-fs (loop6): last error at time 2000000131: ext4_iget_extra_inode:5180: inode 15
[  406.019417][T16324] loop6: lost filesystem error report for type 5 error -117
[  406.022401][T16324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.060100][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.117080][T14954] usb 8-1: USB disconnect, device number 12
[  406.374599][T16357] loop6: detected capacity change from 0 to 256
[  406.386168][T16357] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xdbae3f17, utbl_chksum : 0xe619d30d)
[  406.605168][   T33] kauditd_printk_skb: 51 callbacks suppressed
[  406.605177][   T33] audit: type=1326 audit(2000000132.330:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16372 comm="syz.5.4245" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd60b9e019 code=0x0
[  407.079387][T10740] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  407.120769][ T5769] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  407.231915][T10740] usb 8-1: config 8 has an invalid interface number: 223 but max is 0
[  407.235139][T10740] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  407.239089][T10740] usb 8-1: config 8 has no interface number 0
[  407.242518][T10740] usb 8-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  407.250638][T10740] usb 8-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  407.254397][T10740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.257741][T10740] usb 8-1: Product: syz
[  407.259611][T10740] usb 8-1: Manufacturer: syz
[  407.261527][T10740] usb 8-1: SerialNumber: syz
[  407.269919][ T5769] usb 7-1: Using ep0 maxpacket: 8
[  407.275107][ T5769] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  407.282840][ T5769] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  407.288631][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.292202][ T5769] usb 7-1: Product: syz
[  407.293783][ T5769] usb 7-1: Manufacturer: syz
[  407.295344][ T5769] usb 7-1: SerialNumber: syz
[  407.298386][ T5769] usb 7-1: config 0 descriptor??
[  407.306421][ T5769] gspca_main: stk014-2.14.0 probing 05e1:0893
[  407.308344][ T5769] usb 7-1: selecting invalid altsetting 1
[  407.488880][T16399] netlink: 'syz.5.4257': attribute type 32 has an invalid length.
[  407.492045][T10740] usb 8-1: USB disconnect, device number 13
[  407.510121][ T5769] gspca_stk014: reg_r err -71
[  407.514764][ T5769] stk014 7-1:0.0: probe with driver stk014 failed with error -71
[  407.529081][ T5769] usb 7-1: USB disconnect, device number 27
[  407.662208][T16404] loop5: detected capacity change from 0 to 64
[  408.391571][T16431] loop7: detected capacity change from 0 to 4096
[  408.436615][T16431] ntfs3(loop7): Failed to initialize $Secure::$SII (-22).
[  408.443033][T16431] ntfs3(loop7): Failed to initialize $Secure (-22).
[  408.696685][T16433] loop7: detected capacity change from 0 to 32768
[  408.702746][T16433] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4272 (16433)
[  408.726102][T16433] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  408.730658][T16433] BTRFS info (device loop7): using sha256 checksum algorithm
[  408.776965][T16433] BTRFS info (device loop7): enabling ssd optimizations
[  408.782397][T16433] BTRFS info (device loop7): turning on async discard
[  408.785380][T16433] BTRFS info (device loop7): enabling free space tree
[  408.821798][T14125] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  409.727233][T16473] loop6: detected capacity change from 0 to 4096
[  410.387376][T16477] loop6: detected capacity change from 0 to 32768
[  410.680957][    T9] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  410.786530][T16492] loop5: detected capacity change from 0 to 32768
[  410.797512][T16492] JBD2: Ignoring recovery information on journal
[  410.821135][T16492] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  410.850313][    T9] usb 8-1: Using ep0 maxpacket: 16
[  410.860405][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  410.864770][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  410.882116][T11478] ocfs2: Unmounting device (7,5) on (node local)
[  410.885023][    T9] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  410.888661][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.891992][    T9] usb 8-1: Product: syz
[  410.893770][    T9] usb 8-1: Manufacturer: syz
[  410.895663][    T9] usb 8-1: SerialNumber: syz
[  410.905497][    T9] usb 8-1: config 0 descriptor??
[  410.915472][    T9] hub 8-1:0.0: bad descriptor, ignoring hub
[  410.925094][    T9] hub 8-1:0.0: probe with driver hub failed with error -5
[  410.953218][    T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  411.026187][    T9] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -12
[  411.071607][ T8124] udevd[8124]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  411.174823][T16502] net_ratelimit: 46 callbacks suppressed
[  411.174833][T16502] sock: sock_set_timeout: `syz.5.4296' (pid 16502) tries to set negative timeout
[  411.231204][T14954] usb 8-1: USB disconnect, device number 14
[  411.270411][T16510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4300'.
[  411.389671][T16520] loop5: detected capacity change from 0 to 512
[  411.423311][T16520] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  411.557076][T16533] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  411.708835][T16539] loop7: detected capacity change from 0 to 8
[  411.718524][T16539] SQUASHFS error: zlib decompression failed, data probably corrupt
[  411.722780][T16539] SQUASHFS error: Failed to read block 0x9b: -5
[  411.725215][T16539] SQUASHFS error: Unable to read metadata cache entry [99]
[  411.727966][T16539] SQUASHFS error: Unable to read inode 0x127
[  411.831065][T10740] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  411.879580][T16527] loop5: detected capacity change from 0 to 131072
[  411.909163][T16527] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  411.915580][T16527] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  411.996011][T10740] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  412.006976][T10740] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  412.013147][T10740] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  412.024184][T10740] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  412.054863][T10740] usb 7-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f
[  412.058385][T10740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.063961][T16554] loop7: detected capacity change from 0 to 2048
[  412.070300][T10740] usb 7-1: Product: syz
[  412.075937][T10740] usb 7-1: Manufacturer: syz
[  412.081502][T10740] usb 7-1: SerialNumber: syz
[  412.090524][T10740] usb 7-1: config 0 descriptor??
[  412.093044][T16554] NILFS (loop7): bad btree root (ino=6): level = 5, flags = 0xbd, nchildren = 0
[  412.098935][T16554] NILFS (loop7): ifile inode (checkpoint number=2) corrupted
[  412.106686][T10740] redrat3 7-1:0.0: Couldn't find all endpoints
[  412.111713][T16554] NILFS (loop7): error -5 while loading last checkpoint (checkpoint number=2)
[  412.305205][T10740] usb 7-1: USB disconnect, device number 28
[  412.348017][T16564] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  413.047635][T16585] loop5: detected capacity change from 0 to 7
[  413.259464][T16585] Dev loop5: unable to read RDB block 7
[  413.261917][T16585]  loop5: unable to read partition table
[  413.263920][T16585] loop5: partition table beyond EOD, truncated
[  413.269470][T16585] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X	%`ր{֐ȵ4FLQk݊) failed (rc=-5)
[  414.227176][T16606] loop7: detected capacity change from 0 to 256
[  414.241174][T16606] vfat: Deprecated parameter 'posix'
[  414.258568][T16606] FAT-fs: "posix" option is obsolete, not supported now
[  414.617239][T16620] x_tables: unsorted underflow at hook 4
[  415.119669][ T5792] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  415.168368][T16642] loop6: detected capacity change from 0 to 32768
[  415.183339][T16642] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  415.220140][T16642] XFS (loop6): Ending clean mount
[  415.270592][ T5792] usb 8-1: Using ep0 maxpacket: 8
[  415.277047][ T5792] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  415.280863][ T5792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  415.284595][ T5792] usb 8-1: Product: syz
[  415.286500][ T5792] usb 8-1: Manufacturer: syz
[  415.288809][ T5792] usb 8-1: SerialNumber: syz
[  415.294291][ T5792] usb 8-1: config 0 descriptor??
[  415.303608][ T5792] gspca_main: sq905-2.14.0 probing 2770:9120
[  415.323649][T16665] netlink: 'syz.5.4365': attribute type 49 has an invalid length.
[  415.323854][T11780] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  415.538028][T16671] loop5: detected capacity change from 0 to 16
[  415.551783][T16671] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  415.729475][ T5792] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  415.735802][ T5792] sq905 8-1:0.0: probe with driver sq905 failed with error -71
[  415.744568][ T5792] usb 8-1: USB disconnect, device number 15
[  415.864292][T16679] loop6: detected capacity change from 0 to 4096
[  415.868659][T16679] EXT4-fs (loop6): Test dummy encryption mode enabled
[  415.888636][T16679] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.944700][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  416.067822][T16693] loop5: detected capacity change from 0 to 164
[  416.086079][T16693] rock: directory entry would overflow storage
[  416.090034][T16693] rock: sig=0x66, size=4, remaining=3
[  416.099014][T16693] rock: directory entry would overflow storage
[  416.104310][T16693] rock: sig=0x66, size=4, remaining=3
[  416.159894][T16699] bond0: entered promiscuous mode
[  416.181103][T16701] dlm: Unknown command passed to DLM device : 8
[  416.181103][T16701] 
[  416.361511][T16714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4386'.
[  416.432554][T16722] netlink: 'syz.6.4391': attribute type 4 has an invalid length.
[  416.511673][T16729] loop7: detected capacity change from 0 to 2048
[  416.516906][T16729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  416.675640][T16727] loop6: detected capacity change from 0 to 32768
[  416.687042][   T33] audit: type=1800 audit(2000000142.410:274): pid=16727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4394" name="bus" dev="loop6" ino=7 res=0 errno=0
[  416.847400][T16741] loop6: detected capacity change from 0 to 2048
[  416.863346][T16741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  416.878409][T16741] EXT4-fs (loop6): shut down requested (1)
[  416.896285][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  417.506981][T16750] loop7: detected capacity change from 0 to 16
[  417.516775][T16750] erofs (device loop7): mounted with root inode @ nid 36.
[  417.526244][T16750] erofs (device loop7): invalid h_shared_count 83 @ nid 46
[  417.615295][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  417.618941][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  417.628782][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  417.633759][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  417.640420][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  417.666205][T16756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4408'.
[  417.959048][T16770] UDF-fs: unknown compression code (135)
[  418.058225][T16779] set_capacity_and_notify: 1 callbacks suppressed
[  418.058234][T16779] loop7: detected capacity change from 0 to 24
[  418.072577][T16779] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  418.116481][T16779] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  418.138842][T16779] VFS: Lookup of 'file0' in romfs loop7 would have caused loop
[  418.314702][T16751] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.319141][T16751] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.324845][T16751] bridge_slave_0: entered allmulticast mode
[  418.329744][T16751] bridge_slave_0: entered promiscuous mode
[  418.334804][T16751] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.339365][T16751] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.347011][T16751] bridge_slave_1: entered allmulticast mode
[  418.350014][T16751] bridge_slave_1: entered promiscuous mode
[  418.407536][T16751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.417180][T16751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.452636][T16751] team0: Port device team_slave_0 added
[  418.472735][T16751] team0: Port device team_slave_1 added
[  418.503274][T16796] loop7: detected capacity change from 0 to 2048
[  418.521572][T16796] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  418.524064][T16751] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.532953][T16751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.551161][T16751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.559006][T16751] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.565890][T16751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.585064][T16751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.659416][T16751] hsr_slave_0: entered promiscuous mode
[  418.665017][T16751] hsr_slave_1: entered promiscuous mode
[  418.671023][T16751] debugfs: 'hsr0' already exists in 'hsr'
[  418.677200][T16751] Cannot create hsr debugfs directory
[  419.018664][T16804] program syz.7.4421 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  419.046188][T16751] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  419.054179][T16751] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  419.058459][T16751] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  419.065457][T16751] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  419.068110][T16751] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  419.075727][T16751] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  419.078481][T16751] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  419.083898][T16751] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  419.131570][T16814] loop7: detected capacity change from 0 to 256
[  419.145103][T16751] 8021q: adding VLAN 0 to HW filter on device bond0
[  419.157376][T16751] 8021q: adding VLAN 0 to HW filter on device team0
[  419.165553][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state
[  419.167994][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state
[  419.177295][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.180286][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  419.268240][T16818] loop7: detected capacity change from 0 to 128
[  419.281796][T16818] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  419.300900][T16818] hpfs: filesystem error: improperly stopped
[  419.307371][T16818] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  419.311794][T16818] hpfs: You really don't want any checks? You are crazy...
[  419.315071][T16818] hpfs: hpfs_map_sector(): read error
[  419.317304][T16818] hpfs: code page support is disabled
[  419.321185][T16818] hpfs: hpfs_map_4sectors(): unaligned read
[  419.323785][T16818] hpfs: hpfs_map_4sectors(): unaligned read
[  419.326737][T16818] hpfs: filesystem error: unable to find root dir
[  419.527135][T16751] 8021q: adding VLAN 0 to HW filter on device batadv0
[  419.584543][T16836] loop7: detected capacity change from 0 to 1024
[  419.729831][ T5715] Bluetooth: hci2: command tx timeout
[  419.780602][T16751] veth0_vlan: entered promiscuous mode
[  419.792918][T16751] veth1_vlan: entered promiscuous mode
[  419.829106][T16751] veth0_macvtap: entered promiscuous mode
[  419.843534][T16751] veth1_macvtap: entered promiscuous mode
[  419.847881][T16846] binder: Bad value for 'stats'
[  419.869969][T16751] batman_adv: batadv0: Interface activated: batadv_slave_0
[  419.882249][T16751] batman_adv: batadv0: Interface activated: batadv_slave_1
[  419.910150][ T5506] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  420.052744][ T5506] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  420.055952][ T5506] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  420.059103][ T5506] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  420.134480][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.146168][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.182374][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  420.185905][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  420.460042][T16867] loop7: detected capacity change from 0 to 32768
[  420.462901][T16867] btrfs: Deprecated parameter 'usebackuproot'
[  420.464883][T16867] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  420.468009][T16867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4440 (16867)
[  420.475263][T16867] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  420.478397][T16867] BTRFS info (device loop7): using crc32c checksum algorithm
[  420.480902][T16867] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  420.508658][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4442'.
[  420.597568][ T1113] BTRFS warning (device loop7): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  420.606392][T16867] BTRFS error (device loop7): failed to load root extent
[  420.609198][T16867] BTRFS warning (device loop7): try to load backup roots slot 1
[  420.614543][   T27] BTRFS warning (device loop7): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  420.622528][T16867] BTRFS warning (device loop7): couldn't read tree root
[  420.625034][T16867] BTRFS warning (device loop7): try to load backup roots slot 2
[  420.627981][ T1113] BTRFS error (device loop7): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  420.639118][T16867] BTRFS warning (device loop7): couldn't read tree root
[  420.642112][T16867] BTRFS warning (device loop7): try to load backup roots slot 3
[  420.651275][T16867] BTRFS info (device loop7): rebuilding free space tree
[  420.671389][T16867] BTRFS info (device loop7): disabling free space tree
[  420.674274][T16867] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  420.678556][T16867] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  420.688741][T16867] BTRFS info (device loop7): checking UUID tree
[  420.694420][T16867] BTRFS info (device loop7): enabling ssd optimizations
[  420.697125][T16867] BTRFS info (device loop7): turning on async discard
[  420.699852][T16867] BTRFS info (device loop7): enabling disk space caching
[  420.702657][T16867] BTRFS info (device loop7): force clearing of disk cache
[  420.705501][T16867] BTRFS info (device loop7): enabling auto defrag
[  420.708071][T16867] BTRFS info (device loop7): trying to use backup root at mount time
[  420.711700][T16867] BTRFS info (device loop7): use zstd compression, level 3
[  420.797100][T14125] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  421.122160][T16898] loop6: detected capacity change from 0 to 1024
[  421.136632][T16901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  421.175937][T16898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  421.532864][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  421.677331][T16909] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  421.716863][   T33] audit: type=1326 audit(2000000147.440:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.738393][   T33] audit: type=1326 audit(2000000147.440:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.749643][   T33] audit: type=1326 audit(2000000147.440:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.766441][   T33] audit: type=1326 audit(2000000147.440:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.794821][   T33] audit: type=1326 audit(2000000147.440:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.807171][   T33] audit: type=1326 audit(2000000147.450:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.813171][ T5715] Bluetooth: hci2: command tx timeout
[  421.827099][   T33] audit: type=1326 audit(2000000147.450:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.844604][   T33] audit: type=1326 audit(2000000147.450:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.852904][   T33] audit: type=1326 audit(2000000147.450:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.866383][   T33] audit: type=1326 audit(2000000147.450:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16910 comm="syz.6.4450" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2cb159e019 code=0x7ffc0000
[  421.919104][T16917] loop8: detected capacity change from 0 to 4096
[  422.005833][T16917] ntfs3(loop8): Failed to load $Extend (-22).
[  422.016952][T16917] ntfs3(loop8): Failed to initialize $Extend.
[  422.191911][T16931] netlink: 4768 bytes leftover after parsing attributes in process `syz.8.4460'.
[  422.263859][T16933] syzkaller1: entered promiscuous mode
[  422.266753][T16933] syzkaller1: entered allmulticast mode
[  422.486209][T16935] loop7: detected capacity change from 0 to 32768
[  422.506798][T16935] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  422.523541][T16935] XFS (loop7): Ending clean mount
[  422.587530][T16935] XFS (loop7): User initiated shutdown received.
[  422.590636][T16935] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  422.596043][T16935] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  422.618798][T14125] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  423.079736][T14954] usb 7-1: new full-speed USB device number 29 using dummy_hcd
[  423.119490][  T961] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  423.172560][T16957] loop8: detected capacity change from 0 to 128
[  423.177283][T16957] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  423.184187][T16957] hpfs: filesystem error: improperly stopped
[  423.186805][T16957] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  423.190451][T16957] hpfs: You really don't want any checks? You are crazy...
[  423.193692][T16957] hpfs: Code page index out of array
[  423.195955][T16957] hpfs: code page support is disabled
[  423.198369][T16957] hpfs: hpfs_map_4sectors(): unaligned read
[  423.215073][T16957] hpfs: hpfs_map_4sectors(): unaligned read
[  423.217621][T16957] hpfs: filesystem error: unable to find root dir
[  423.230765][T14954] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0
[  423.234415][T14954] usb 7-1: config 0 interface 0 has no altsetting 0
[  423.243237][T14954] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  423.246337][T14954] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  423.250010][T14954] usb 7-1: Product: syz
[  423.251879][T14954] usb 7-1: Manufacturer: syz
[  423.253567][T14954] usb 7-1: SerialNumber: syz
[  423.257500][T14954] usb 7-1: config 0 descriptor??
[  423.270124][  T961] usb 8-1: Using ep0 maxpacket: 32
[  423.289113][T14954] usb 7-1: selecting invalid altsetting 0
[  423.292175][  T961] usb 8-1: config 11 has an invalid interface number: 161 but max is 0
[  423.299410][  T961] usb 8-1: config 11 has no interface number 0
[  423.312488][  T961] usb 8-1: config 11 interface 161 has no altsetting 0
[  423.326815][  T961] usb 8-1: New USB device found, idVendor=10d2, idProduct=81d2, bcdDevice=11.e5
[  423.333696][  T961] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.336032][  T961] usb 8-1: Product: syz
[  423.337213][  T961] usb 8-1: Manufacturer: syz
[  423.343767][  T961] usb 8-1: SerialNumber: syz
[  423.509415][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  423.563438][  T961] usblcd 8-1:11.161: USBLCD model not supported.
[  423.570224][  T961] usb 8-1: USB disconnect, device number 16
[  423.695565][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.699479][   T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  423.703342][   T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  423.707132][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  423.712281][   T10] usb 9-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  423.715945][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.879793][ T5715] Bluetooth: hci2: command tx timeout
[  424.140369][  T961] usb 9-1: USB disconnect, device number 2
[  424.389418][T10740] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  424.560157][T10740] usb 8-1: Using ep0 maxpacket: 8
[  424.564821][T10740] usb 8-1: config 2 has an invalid interface number: 57 but max is 0
[  424.568838][T10740] usb 8-1: config 2 has no interface number 0
[  424.571718][T10740] usb 8-1: config 2 interface 57 has no altsetting 0
[  424.574766][T10740] usb 8-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  424.578225][T10740] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.799971][   T10] usb 8-1: USB disconnect, device number 17
[  425.439417][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  425.589368][   T10] usb 9-1: Using ep0 maxpacket: 16
[  425.595070][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  425.598521][   T10] usb 9-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  425.601997][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.606660][   T10] usb 9-1: config 0 descriptor??
[  425.808349][ T5776] usb 7-1: USB disconnect, device number 29
[  425.959587][ T5715] Bluetooth: hci2: command tx timeout
[  426.022283][   T10] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring
[  426.228730][   T10] usb 9-1: USB disconnect, device number 3
[  426.240125][ T5776] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  426.389433][ T5776] usb 7-1: Using ep0 maxpacket: 16
[  426.395430][ T5776] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  426.402136][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.405538][ T5776] usb 7-1: Product: syz
[  426.407449][ T5776] usb 7-1: Manufacturer: syz
[  426.411005][ T5776] usb 7-1: SerialNumber: syz
[  426.417361][ T5776] usb 7-1: config 0 descriptor??
[  426.491106][T17008] loop7: detected capacity change from 0 to 128
[  426.515439][T17008] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  426.633683][T17014] loop7: detected capacity change from 0 to 256
[  426.640397][ T5776] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  426.644456][T17014] vfat: Unknown parameter 'cleck'
[  426.722896][ T5776] usb 7-1: USB disconnect, device number 30
[  427.479095][T17039] syzkaller1: entered promiscuous mode
[  427.481940][T17039] syzkaller1: entered allmulticast mode
[  427.694003][T17052] loop7: detected capacity change from 0 to 2
[  427.698625][T17052] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  427.952473][T17067] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  428.144816][T17077] loop7: detected capacity change from 0 to 2048
[  428.167832][T17079] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  428.717508][T17091] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4528'.
[  428.721246][T17091] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4528'.
[  428.970014][T17078] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  428.974200][T17078] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  429.016317][T17078] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  429.028586][T17078] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  429.032391][T17078] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  429.034733][T17078] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  429.049529][T17078] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  429.052405][T17078] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  429.054678][T17078] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  429.057202][T17078] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  429.299825][T10740] usb 7-1: new full-speed USB device number 31 using dummy_hcd
[  429.317210][T17110] loop8: detected capacity change from 0 to 256
[  429.407953][T17112] loop8: detected capacity change from 0 to 2048
[  429.453206][T10740] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  429.455375][T17112] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  429.456920][T10740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.470603][T10740] usb 7-1: config 0 descriptor??
[  429.479119][T10740] cp210x 7-1:0.0: cp210x converter detected
[  429.482195][T17112] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  429.506298][T17119] loop7: detected capacity change from 0 to 8
[  429.596330][T16751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  429.630995][T17123] loop7: detected capacity change from 0 to 128
[  429.637303][T17123] vfat: Unknown parameter 'shortn'
[  429.748461][T17127] loop8: detected capacity change from 0 to 64
[  429.764982][T17127] Trying to free block not in datazone
[  429.915662][T17131] rdma_op ffff8881133529f0 conn xmit_rdma 0000000000000000
[  429.954428][T17131] geneve2: entered promiscuous mode
[  429.981257][   T13] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 39250 - 0
[  430.023608][   T13] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 39250 - 0
[  430.062273][   T13] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 39250 - 0
[  430.082650][   T13] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 39250 - 0
[  430.111560][T10740] usb 7-1: cp210x converter now attached to ttyUSB0
[  430.266627][ T5769] usb 7-1: USB disconnect, device number 31
[  430.281539][ T5769] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  430.289755][ T5715] Bluetooth: hci1: command 0x0405 tx timeout
[  430.292266][ T5769] cp210x 7-1:0.0: device disconnected
[  430.327114][T17139] loop8: detected capacity change from 0 to 128
[  430.354401][T17139] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  430.361038][T17139] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  430.370952][T17139] EXT4-fs (loop8): shut down requested (1)
[  430.389764][T16751] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  430.603193][T17148] netlink: 'syz.8.4552': attribute type 4 has an invalid length.
[  430.846765][T17156] loop7: detected capacity change from 0 to 4096
[  430.851353][T17156] EXT4-fs: Ignoring removed orlov option
[  430.854542][T17156] EXT4-fs (loop7): Test dummy encryption mode enabled
[  430.861608][T17156] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.901247][T17159] loop6: detected capacity change from 0 to 512
[  430.901250][T14125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  430.907906][T17159] EXT4-fs: Ignoring removed bh option
[  430.929857][T17159] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  430.952910][T17159] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  430.963072][T17159] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4557: Corrupt directory, running e2fsck is recommended
[  430.979663][T10740] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  431.005335][T17159] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117
[  431.014399][T17159] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.4557: bad orphan inode 15
[  431.035544][T17166] loop7: detected capacity change from 0 to 1024
[  431.037601][T17159] loop6: lost filesystem error report for type 5 error -117
[  431.039303][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  431.044702][    C0] EXT4-fs (loop6): initial error at time 2000000156: ext4_orphan_get:1425
[  431.047926][    C0] EXT4-fs (loop6): last error at time 2000000156: ext4_orphan_get:1425
[  431.059229][T17159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  431.082800][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  431.085327][ T5715] Bluetooth: hci2: command 0x0c1a tx timeout
[  431.111500][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.151596][T10740] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  431.155726][T10740] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  431.172522][T10740] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  431.178161][T10740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.185813][T10740] usb 9-1: Product: syz
[  431.189499][T10740] usb 9-1: Manufacturer: syz
[  431.198008][T10740] usb 9-1: SerialNumber: syz
[  431.217478][T10740] usb 9-1: config 0 descriptor??
[  431.221417][T17152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  431.225507][T17152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  431.252635][T17173] loop7: detected capacity change from 0 to 1024
[  431.482873][T17152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  431.485852][T17152] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  431.515713][T17177] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  431.691631][T10740] Error reading MAC address
[  431.697412][T10740] usb 9-1: USB disconnect, device number 4
[  431.926027][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  431.926039][   T33] audit: type=1800 audit(2000000157.650:287): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4564" name="file1" dev="loop6" ino=17059 res=0 errno=0
[  431.938464][T17186] netlink: 'syz.6.4564': attribute type 4 has an invalid length.
[  432.326045][T11780] ocfs2: Unmounting device (7,6) on (node local)
[  432.359662][ T5715] Bluetooth: hci1: command 0x0405 tx timeout
[  432.824163][T17219] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  432.846930][T17219] XFS (loop8): Ending clean mount
[  432.853617][T17219] XFS (loop8): User initiated shutdown received.
[  432.855711][T17219] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:468).  Shutting down filesystem.
[  432.861237][T17219] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[  432.876209][T16751] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  432.918216][T17220] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  433.003710][T17234] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4583'.
[  433.004018][T14125] ocfs2: Unmounting device (7,7) on (node local)
[  433.159834][ T5715] Bluetooth: hci2: command 0x0c1a tx timeout
[  433.161864][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  433.932887][   T33] audit: type=1800 audit(2000000159.660:288): pid=17265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4598" name="file0" dev="loop6" ino=27 res=0 errno=0
[  434.449361][   T54] Bluetooth: hci1: command 0x0405 tx timeout
[  434.449501][T10740] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  434.487179][T17281] bond0: invalid ARP target 0.0.0.0 specified for addition
[  434.491888][T17281] bond0: option arp_ip_target: invalid value (0)
[  434.494917][T17281] bond0 (unregistering): Released all slaves
[  434.576944][T17286] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4608'.
[  434.621200][T10740] usb 9-1: config 0 has no interfaces?
[  434.623894][T10740] usb 9-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  434.628035][T10740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.635389][T10740] usb 9-1: config 0 descriptor??
[  434.729486][T14954] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  434.848195][T10740] usb 9-1: USB disconnect, device number 5
[  434.890611][T14954] usb 7-1: Using ep0 maxpacket: 32
[  434.895309][T14954] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  434.901261][T14954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7
[  434.905539][T14954] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024
[  434.915262][T14954] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  434.918946][T14954] usb 7-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  434.922497][T14954] usb 7-1: Product: syz
[  434.924333][T14954] usb 7-1: Manufacturer: syz
[  434.926302][T14954] usb 7-1: SerialNumber: syz
[  434.932728][T14954] usb 7-1: config 0 descriptor??
[  434.953828][T14954] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  435.077128][T17304] set_capacity_and_notify: 4 callbacks suppressed
[  435.077138][T17304] loop7: detected capacity change from 0 to 256
[  435.088931][T17304] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  435.096622][   T33] audit: type=1800 audit(2000000160.830:289): pid=17304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4614" name="file1" dev="loop7" ino=1048757 res=0 errno=0
[  435.143918][   T13] usb 7-1: Failed to submit usb control message: -71
[  435.151546][T10740] usb 7-1: USB disconnect, device number 32
[  435.157628][   T13] usb 7-1: unable to send the bmi data to the device: -71
[  435.161946][   T13] usb 7-1: unable to get target info from device
[  435.165425][   T13] usb 7-1: could not get target info (-71)
[  435.168486][   T13] usb 7-1: could not probe fw (-71)
[  435.239794][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  435.240710][ T5715] Bluetooth: hci2: command 0x0c1a tx timeout
[  435.258600][T17310] openvswitch: netlink: IP tunnel attribute has 5405 unknown bytes.
[  435.322400][T17316] netlink: 'syz.7.4620': attribute type 1 has an invalid length.
[  435.384041][T17320] CIFS: Attempting to mount //127.0.0.1/share
[  435.775530][T17339] loop6: detected capacity change from 0 to 512
[  435.797898][T17339] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.4629: corrupted in-inode xattr: invalid ea_ino
[  435.803600][T17339] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  435.803751][T17339] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4629: couldn't read orphan inode 15 (err -117)
[  435.810960][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  435.810970][    C0] EXT4-fs (loop6): initial error at time 2000000161: ext4_iget_extra_inode:5180: inode 15
[  435.810983][    C0] EXT4-fs (loop6): last error at time 2000000161: ext4_iget_extra_inode:5180: inode 15
[  435.820870][T17339] loop6: lost filesystem error report for type 5 error -117
[  435.821906][T17339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  435.867733][T11780] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.246169][T17320] CIFS: VFS: cifs_mount failed w/return code = -512
[  436.290140][T10740] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  436.460932][T10740] usb 9-1: Using ep0 maxpacket: 8
[  436.467763][T10740] usb 9-1: unable to get BOS descriptor or descriptor too short
[  436.476241][T10740] usb 9-1: config 9 has an invalid interface number: 5 but max is 1
[  436.481634][T10740] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  436.492303][T10740] usb 9-1: config 9 has 1 interface, different from the descriptor's value: 2
[  436.507182][T10740] usb 9-1: config 9 has no interface number 0
[  436.517024][T10740] usb 9-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xFA, changing to 0x8A
[  436.526347][ T5715] Bluetooth: hci1: command 0x0405 tx timeout
[  436.537812][T10740] usb 9-1: config 9 interface 5 altsetting 9 endpoint 0x8A has invalid wMaxPacketSize 0
[  436.552372][T10740] usb 9-1: config 9 interface 5 has no altsetting 0
[  436.561835][T10740] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8
[  436.567463][T10740] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.575591][T10740] usb 9-1: Product: syz
[  436.580086][T10740] usb 9-1: Manufacturer: syz
[  436.584418][T10740] usb 9-1: SerialNumber: syz
[  436.826913][T17379] loop7: detected capacity change from 0 to 256
[  436.909408][T10740] usb 9-1: USB disconnect, device number 6
[  437.071096][T17383] IPv6: NLM_F_CREATE should be specified when creating new route
[  437.521179][T17391] loop6: detected capacity change from 0 to 1024
[  437.528860][T17391] EXT4-fs: Invalid want_extra_isize 125
[  438.229087][T17423] loop6: detected capacity change from 0 to 256
[  438.509776][   T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  438.549933][T10740] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  438.569409][ T5769] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  438.661164][   T10] usb 9-1: config 255 has an invalid interface number: 97 but max is 0
[  438.663913][   T10] usb 9-1: config 255 has no interface number 0
[  438.665940][   T10] usb 9-1: config 255 interface 97 has no altsetting 0
[  438.671012][   T10] usb 9-1: New USB device found, idVendor=0424, idProduct=cf19, bcdDevice=71.90
[  438.674552][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.677532][   T10] usb 9-1: Product: syz
[  438.679150][   T10] usb 9-1: Manufacturer: syz
[  438.680914][   T10] usb 9-1: SerialNumber: syz
[  438.699453][T10740] usb 8-1: Using ep0 maxpacket: 16
[  438.703199][T10740] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  438.707367][T10740] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  438.713380][T10740] usb 8-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40
[  438.717110][T10740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.720829][T10740] usb 8-1: Product: syz
[  438.722008][ T5769] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.722662][T10740] usb 8-1: Manufacturer: syz
[  438.726206][ T5769] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.727746][T10740] usb 8-1: SerialNumber: syz
[  438.732859][ T5769] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  438.736733][ T5769] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  438.742496][ T5769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.747181][ T5769] usb 7-1: config 0 descriptor??
[  438.894363][   T10] rndis_host 9-1:255.97: ACM capabilities 01, not really RNDIS?
[  438.919074][   T10] usb 9-1: USB disconnect, device number 7
[  438.946773][T10740] usb 8-1: unit 0 not found!
[  438.971661][T10740] usb 8-1: USB disconnect, device number 18
[  439.156505][ T5769] plantronics 0003:047F:FFFF.0019: unbalanced collection at end of report description
[  439.160675][ T5769] plantronics 0003:047F:FFFF.0019: parse failed
[  439.163177][ T5769] plantronics 0003:047F:FFFF.0019: probe with driver plantronics failed with error -22
[  439.367212][T10740] usb 7-1: USB disconnect, device number 33
[  439.697466][T17441] loop8: detected capacity change from 0 to 2048
[  439.711918][T17441] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  439.725953][T17445] loop7: detected capacity change from 0 to 64
[  439.728619][T17441] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  439.742915][T17441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  439.933170][T17453] input: syz1 as /devices/virtual/input/input30
[  440.055255][T17463] trusted_key: encrypted_key: keylen parameter is missing
[  440.113856][T17465] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  440.121046][ T1384] ieee802154 phy1 wpan1: encryption failed: -22
[  440.229687][ T5769] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  440.384783][ T5769] usb 7-1: config 1 interface 0 has no altsetting 2
[  440.389577][ T5769] usb 7-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  440.404929][ T5769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.573299][T17483] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4695'.
[  440.801313][T17493] loop8: detected capacity change from 0 to 764
[  440.873760][ T5769] dvbdev: DVB: registering new adapter (DEC2000-t)
[  440.885672][ T5769] usb 7-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)...
[  441.079289][  T189] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  441.109334][ T5776] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  441.249622][  T189] usb 8-1: Using ep0 maxpacket: 8
[  441.253437][  T189] usb 8-1: unable to get BOS descriptor or descriptor too short
[  441.256885][  T189] usb 8-1: config 4 interface 0 has no altsetting 0
[  441.262625][  T189] usb 8-1: string descriptor 0 read error: -22
[  441.264908][  T189] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  441.267789][  T189] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  441.273387][ T5776] usb 9-1: unable to get BOS descriptor or descriptor too short
[  441.281941][ T5776] usb 9-1: config 0 has an invalid interface number: 59 but max is 2
[  441.286660][ T5776] usb 9-1: config 0 has an invalid interface number: 59 but max is 2
[  441.293916][  T189] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  441.297686][ T5776] usb 9-1: config 0 has an invalid interface number: 56 but max is 2
[  441.303113][ T5776] usb 9-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  441.307080][ T5776] usb 9-1: config 0 has no interface number 0
[  441.309670][  T189] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  441.313389][ T5776] usb 9-1: config 0 has no interface number 1
[  441.316102][  T189] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  441.318917][ T5776] usb 9-1: config 0 interface 59 has no altsetting 0
[  441.321818][ T5776] usb 9-1: config 0 interface 59 has no altsetting 1
[  441.324087][  T189] usb 8-1: media controller created
[  441.326913][ T5776] usb 9-1: config 0 interface 56 has no altsetting 0
[  441.335768][ T5776] usb 9-1: New USB device found, idVendor=0421, idProduct=02e3, bcdDevice=43.b7
[  441.340648][ T5776] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.346956][ T5776] usb 9-1: Product: syz
[  441.349179][  T189] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  441.352224][ T5776] usb 9-1: Manufacturer: syz
[  441.354112][ T5776] usb 9-1: SerialNumber: syz
[  441.364477][ T5776] usb 9-1: config 0 descriptor??
[  441.493356][  T189] zl10353_read_register: readreg error (reg=127, ret==0)
[  441.522414][  T189] usb 8-1: USB disconnect, device number 19
[  441.577146][ T5776] rndis_host 9-1:0.59: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  441.581831][ T5776] cdc_acm 9-1:0.59: Zero length descriptor references
[  441.584567][ T5776] cdc_acm 9-1:0.59: probe with driver cdc_acm failed with error -22
[  441.597121][ T5776] usb 9-1: USB disconnect, device number 8
[  441.961241][ T5769] ttusb_dec_send_command: command bulk message failed: error -110
[  442.080520][ T5769] usb 7-1: USB disconnect, device number 34
[  442.181736][T17504] loop8: detected capacity change from 0 to 4096
[  442.187203][   T33] audit: type=1326 audit(2000000167.910:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.188564][T17504] EXT4-fs: Ignoring removed orlov option
[  442.207860][   T33] audit: type=1326 audit(2000000167.930:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.219364][T17504] EXT4-fs (loop8): Test dummy encryption mode enabled
[  442.227643][   T33] audit: type=1326 audit(2000000167.930:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.237707][T17504] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.247157][   T33] audit: type=1326 audit(2000000167.930:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.256017][   T33] audit: type=1326 audit(2000000167.930:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.267944][T17510] netlink: 'syz.7.4707': attribute type 4 has an invalid length.
[  442.273706][   T33] audit: type=1326 audit(2000000167.930:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.295639][T16751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.301623][T17510] netlink: 'syz.7.4707': attribute type 4 has an invalid length.
[  442.304162][   T33] audit: type=1326 audit(2000000167.930:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.325913][   T33] audit: type=1326 audit(2000000167.930:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.335861][   T33] audit: type=1326 audit(2000000167.930:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.343598][   T33] audit: type=1326 audit(2000000167.930:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17505 comm="syz.7.4706" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd12d9e019 code=0x7ffc0000
[  442.527439][T17524] loop8: detected capacity change from 0 to 512
[  442.542795][T17524] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  442.551372][T17525] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4713'.
[  442.562900][T17524] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4714: invalid indirect mapped block 32768 (level 2)
[  442.570505][T17524] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  442.579385][    C1] EXT4-fs (loop8): error count since last fsck: 1
[  442.585405][    C1] EXT4-fs (loop8): initial error at time 2000000168: ext4_free_branches:1023: inode 16
[  442.588992][    C1] EXT4-fs (loop8): last error at time 2000000168: ext4_free_branches:1023: inode 16
[  442.595166][T17524] EXT4-fs (loop8): Remounting filesystem read-only
[  442.598138][T17524] EXT4-fs (loop8): 1 orphan inode deleted
[  442.601874][T17524] EXT4-fs (loop8): 1 truncate cleaned up
[  442.604790][T17524] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  442.612829][T17524] EXT4-fs (loop8): shut down requested (2)
[  442.615832][T17524] EXT4-fs warning (device loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60
[  442.671570][T16751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  443.370640][T17538] macvlan2: entered promiscuous mode
[  443.372574][T17538] bridge0: entered promiscuous mode
[  443.712604][ T5792] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  443.811591][T17554] netlink: 'syz.8.4727': attribute type 12 has an invalid length.
[  443.818814][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4727'.
[  443.869990][ T5792] usb 8-1: Using ep0 maxpacket: 32
[  443.879504][ T5792] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 959, setting to 64
[  443.890633][ T5792] usb 8-1: string descriptor 0 read error: -22
[  443.893281][ T5792] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  443.899387][ T5792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.918497][ T5792] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  443.921891][ T5792] usb 8-1: MIDIStreaming interface descriptor not found
[  443.988659][T17548] loop6: detected capacity change from 0 to 32768
[  444.006070][T17548] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4723 (17548)
[  444.044534][T17548] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  444.052002][T17548] BTRFS info (device loop6): using blake2b checksum algorithm
[  444.124029][ T5792] usb 8-1: USB disconnect, device number 20
[  444.125419][T17548] BTRFS info (device loop6): enabling ssd optimizations
[  444.135137][T17548] BTRFS info (device loop6): turning on async discard
[  444.137704][T17548] BTRFS info (device loop6): enabling free space tree
[  444.140324][T17548] BTRFS info (device loop6): use zstd compression, level 3
[  444.250639][ T5776] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  444.421715][ T5776] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  444.429616][ T5776] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  444.440650][ T5776] usb 9-1: Product: syz
[  444.445763][ T5776] usb 9-1: SerialNumber: syz
[  444.461093][ T5776] usb 9-1: config 0 descriptor??
[  444.660098][T11780] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  444.706017][ T5776] hso 9-1:0.0: Failed to find INT IN ep
[  444.914607][ T5776] usb 9-1: USB disconnect, device number 9
[  444.974498][T17585] bond0: entered promiscuous mode
[  444.976990][T17585] bond_slave_0: entered promiscuous mode
[  444.983388][T17585] bond_slave_1: entered promiscuous mode
[  445.682596][T17604] loop8: detected capacity change from 0 to 1024
[  445.782841][T17608] cgroup: name respecified
[  446.017430][T17622] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4751'.
[  446.179007][T17632] uprobe: syz.6.4756:17632 failed to unregister, leaking uprobe
[  446.217848][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4757'.
[  446.222003][T17635] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4757'.
[  446.310428][ T5792] usb 8-1: new full-speed USB device number 21 using dummy_hcd
[  446.461381][ T5792] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  446.465551][ T5792] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.471709][ T5792] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  446.475363][ T5792] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.513602][T10740] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  446.669327][T10740] usb 7-1: Using ep0 maxpacket: 8
[  446.674441][T10740] usb 7-1: config index 0 descriptor too short (expected 74, got 45)
[  446.677990][T10740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  446.683219][T10740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  446.693112][T10740] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  446.698275][ T5792] usb 8-1: GET_CAPABILITIES returned 0
[  446.700632][T10740] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  446.704787][ T5792] usbtmc 8-1:16.0: can't read capabilities
[  446.708064][T10740] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  446.715577][T10740] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  446.721127][T10740] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.913233][  T961] usb 8-1: USB disconnect, device number 21
[  446.941733][T10740] usb 7-1: GET_CAPABILITIES returned 0
[  446.944130][T10740] usbtmc 7-1:16.0: can't read capabilities
[  447.172761][T17637] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71
[  447.180063][ T5776] usb 7-1: USB disconnect, device number 35
[  447.358594][T17657] loop8: detected capacity change from 0 to 4096
[  447.376590][T17657] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  447.393042][T17657] ntfs3(loop8): Failed to load $Secure (-22).
[  447.395466][T17657] ntfs3(loop8): Failed to initialize $Secure (-22).
[  447.544930][T17665] loop7: detected capacity change from 0 to 256
[  447.741275][ T5776] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  447.803349][T17673] netlink: 'syz.7.4776': attribute type 12 has an invalid length.
[  447.806630][T17673] netlink: 'syz.7.4776': attribute type 29 has an invalid length.
[  447.814638][T17673] netlink: 148 bytes leftover after parsing attributes in process `syz.7.4776'.
[  447.818189][T17673] netlink: 'syz.7.4776': attribute type 2 has an invalid length.
[  447.821444][T17673] netlink: 'syz.7.4776': attribute type 2 has an invalid length.
[  447.889365][ T5776] usb 9-1: Using ep0 maxpacket: 8
[  447.895421][ T5776] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  447.900257][ T5776] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  447.903117][ T5776] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.906934][ T5776] usb 9-1: config 0 descriptor??
[  447.999380][  T189] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  448.082155][T17677] loop7: detected capacity change from 0 to 32768
[  448.105685][T17677] JBD2: Ignoring recovery information on journal
[  448.118401][ T5776] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  448.150771][T17677] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  448.155690][  T189] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  448.173844][  T189] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  448.183299][  T189] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  448.190337][  T189] usb 7-1: Manufacturer: syz
[  448.192256][  T189] usb 7-1: SerialNumber: syz
[  448.218446][T14125] ocfs2: Unmounting device (7,7) on (node local)
[  448.335240][T10740] usb 9-1: USB disconnect, device number 10
[  448.446273][  T189] usbhid 7-1:36.0: couldn't find an input interrupt endpoint
[  448.759048][  T189] usb 7-1: USB disconnect, device number 36
[  449.356099][T17687] loop6: detected capacity change from 0 to 32768
[  449.392879][T17699] loop7: detected capacity change from 0 to 32768
[  449.427381][T17699] JBD2: Ignoring recovery information on journal
[  449.461241][T17699] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  449.479413][  T189] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  449.525615][T17699] OCFS2: ERROR (device loop7): int ocfs2_xattr_ibody_lookup_header(struct inode *, struct ocfs2_dinode *, struct ocfs2_xattr_header **): Invalid xattr inline size 0 in inode 65
[  449.532977][T17699] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  449.541005][T17703] loop6: detected capacity change from 0 to 512
[  449.545916][T17699] OCFS2: Returning error to the calling process.
[  449.547806][T17699] (syz.7.4786,17699,1):ocfs2_calc_xattr_init:642 ERROR: status = -117
[  449.551630][T17703] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  449.566626][T17703] FAT-fs (loop6): error, invalid access to FAT (entry 0x0ffffff6)
[  449.571699][T17699] (syz.7.4786,17699,1):ocfs2_mknod:338 ERROR: status = -117
[  449.577201][T17699] (syz.7.4786,17699,1):ocfs2_mknod:506 ERROR: status = -117
[  449.581889][T17699] (syz.7.4786,17699,1):ocfs2_mkdir:662 ERROR: status = -117
[  449.645748][T14125] ocfs2: Unmounting device (7,7) on (node local)
[  449.653393][  T189] usb 9-1: unable to get BOS descriptor or descriptor too short
[  449.666101][  T189] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  449.675147][  T189] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  449.692670][  T189] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  449.702997][  T189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.717622][  T189] usb 9-1: Product: syz
[  449.724585][  T189] usb 9-1: Manufacturer: syz
[  449.728007][  T189] usb 9-1: SerialNumber: syz
[  449.776551][T17711] loop6: detected capacity change from 0 to 16
[  449.782980][T17711] erofs (device loop6): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  449.793963][T17711] erofs (device loop6): mounted with root inode @ nid 36.
[  449.983932][  T189] cdc_ncm 9-1:1.0: bind() failure
[  450.026053][  T189] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found
[  450.029097][  T189] cdc_ncm 9-1:1.1: bind() failure
[  450.046344][  T189] usb 9-1: USB disconnect, device number 11
[  450.529420][  T189] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  450.597016][T17735] loop6: detected capacity change from 0 to 32768
[  450.610496][T17735] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  450.626558][T17735] XFS (loop6): Ending clean mount
[  450.656019][T17749] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  450.692867][T11780] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  450.701676][  T189] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  450.709691][  T189] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 33029, setting to 1024
[  450.722021][  T189] usb 9-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 1.00
[  450.725823][  T189] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.737796][  T189] usb 9-1: Product: syz
[  450.740740][  T189] usb 9-1: Manufacturer: syz
[  450.742944][  T189] usb 9-1: SerialNumber: syz
[  450.761909][  T189] usb 9-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  450.825713][T17749] md: could not open device unknown-block(1,1).
[  450.841482][T17750] md: could not open device unknown-block(1,2).
[  450.880519][T17749] md/raid:md0: not clean -- starting background reconstruction
[  450.897086][T17749] md/raid:md0: device ram1 operational as raid disk 1
[  450.943381][T17749] md/raid:md0: not enough operational devices (3/4 failed)
[  451.187040][T17749] md/raid:md0: failed to run raid set.
[  451.189446][T17749] md: pers->run() failed ...
[  451.580268][  T961] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  451.583654][  T189] usb 9-1: Scarlett Gen 2 USB request result cmd 0 was -71
[  451.592728][  T189] usb 9-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[  451.660873][  T189] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22
[  451.669141][  T189] usb 9-1: USB disconnect, device number 12
[  451.672499][T10740] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  451.702366][ T5725] udevd[5725]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  451.743791][  T961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.756526][  T961] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  451.766945][  T961] usb 1-1: Dual-Role OTG device on HNP port
[  451.770262][  T961] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  451.773863][  T961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.789109][    C1] ------------[ cut here ]------------
[  451.791475][    C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0
[  451.794108][    C1] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#1: swapper/1/0
[  451.798052][    C1] Modules linked in:
[  451.800083][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  451.804192][    C1] Tainted: [L]=SOFTLOCKUP
[  451.805899][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  451.809911][    C1] RIP: 0010:usb_ep_enable+0x1bc/0x480
[  451.812083][    C1] Code: aa e5 7e fa 49 83 3f 00 48 c7 c0 a0 3b b1 8c 49 c7 c0 c0 3b b1 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 f9 38 4c 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 50 4c 11 fa 65 8b
[  451.819449][    C1] RSP: 0018:ffffc90000a08910 EFLAGS: 00010082
[  451.821878][    C1] RAX: ffffffff8cb13ba0 RBX: ffff88816c3ec0e0 RCX: ffffffff8cb159c0
[  451.825000][    C1] RDX: 0000000000000081 RSI: ffffffff8e4c38f9 RDI: ffffffff9065c750
[  451.827981][    C1] RBP: dffffc0000000000 R08: ffffffff8cb13bc0 R09: 0000000000000002
[  451.831043][    C1] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cb159c0
[  451.834113][    C1] R13: 0000000000000081 R14: ffffffff9065c750 R15: ffff88816c3ec0f8
[  451.837075][    C1] FS:  0000000000000000(0000) GS:ffff8882a8f4b000(0000) knlGS:0000000000000000
[  451.840236][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  451.842705][    C1] CR2: 00007fcd13b5da08 CR3: 000000010c7a2000 CR4: 00000000000006f0
[  451.845696][    C1] Call Trace:
[  451.847212][    C1]  <IRQ>
[  451.848400][    C1]  hidg_set_alt+0x12a/0xa60
[  451.850229][    C1]  ? usb_gadget_set_state+0x12c/0x2d0
[  451.852361][    C1]  set_config+0x749/0x1160
[  451.854054][    C1]  composite_setup+0x1de7/0x3480
[  451.855816][    C1]  configfs_composite_setup+0xc7/0x100
[  451.857937][    C1]  dummy_timer+0x2f43/0x4cf0
[  451.859869][    C1]  ? __lock_acquire+0x683/0x2cf0
[  451.861800][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  451.863972][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  451.865985][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  451.868196][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  451.870144][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  451.872015][    C1]  hrtimer_run_softirq+0x17a/0x240
[  451.873877][    C1]  handle_softirqs+0x225/0x840
[  451.875643][    C1]  ? __irq_exit_rcu+0xca/0x220
[  451.877590][    C1]  __irq_exit_rcu+0xca/0x220
[  451.879416][    C1]  irq_exit_rcu+0x9/0x30
[  451.881145][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  451.883297][    C1]  </IRQ>
[  451.884397][    C1]  <TASK>
[  451.885488][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  451.887773][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  451.890021][    C1] Code: ac 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 3e 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  451.897509][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000202
[  451.899963][    C1] RAX: 000000000045dde3 RBX: ffffffff819b5450 RCX: 0000000080000001
[  451.903142][    C1] RDX: 0000000000000001 RSI: ffffffff8e22f0ee RDI: ffffffff8c4bdd80
[  451.906280][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  451.909172][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  451.912004][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  451.915086][    C1]  ? do_idle+0x2e0/0x540
[  451.916786][    C1]  default_idle+0x9/0x20
[  451.918475][    C1]  default_idle_call+0x72/0xb0
[  451.920376][    C1]  do_idle+0x2e0/0x540
[  451.921959][    C1]  ? __pfx_do_idle+0x10/0x10
[  451.923689][    C1]  cpu_startup_entry+0x43/0x60
[  451.925612][    C1]  start_secondary+0x101/0x110
[  451.927562][    C1]  common_startup_64+0x13e/0x157
[  451.929366][    C1]  </TASK>
[  451.930421][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  451.932950][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  451.936611][    C1] Tainted: [L]=SOFTLOCKUP
[  451.938217][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  451.942059][    C1] Call Trace:
[  451.943425][    C1]  <IRQ>
[  451.944597][    C1]  vpanic+0x56c/0xa60
[  451.946153][    C1]  ? __pfx__printk+0x10/0x10
[  451.947930][    C1]  ? __pfx_vpanic+0x10/0x10
[  451.949759][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  451.951901][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  451.953988][    C1]  panic+0xc5/0xd0
[  451.955462][    C1]  ? __pfx_panic+0x10/0x10
[  451.957280][    C1]  ? common_startup_64+0x13e/0x157
[  451.959359][    C1]  __warn+0x315/0x4c0
[  451.961001][    C1]  ? usb_ep_enable+0x148/0x480
[  451.962966][    C1]  ? usb_ep_enable+0x148/0x480
[  451.964900][    C1]  __report_bug+0x276/0x570
[  451.966495][    C1]  ? usb_ep_enable+0x148/0x480
[  451.968249][    C1]  ? __pfx___report_bug+0x10/0x10
[  451.970206][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  451.972454][    C1]  ? try_to_wake_up+0x8c5/0x14d0
[  451.974441][    C1]  report_bug_entry+0x19a/0x290
[  451.976415][    C1]  ? usb_ep_enable+0x1bc/0x480
[  451.978300][    C1]  ? usb_ep_enable+0x1c1/0x480
[  451.980241][    C1]  handle_bug+0xce/0x200
[  451.981974][    C1]  exc_invalid_op+0x1a/0x50
[  451.983852][    C1]  asm_exc_invalid_op+0x1a/0x20
[  451.985845][    C1] RIP: 0010:usb_ep_enable+0x1bc/0x480
[  451.988029][    C1] Code: aa e5 7e fa 49 83 3f 00 48 c7 c0 a0 3b b1 8c 49 c7 c0 c0 3b b1 8c 4c 0f 44 c0 4c 89 f7 48 c7 c6 f9 38 4c 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 50 4c 11 fa 65 8b
[  451.995530][    C1] RSP: 0018:ffffc90000a08910 EFLAGS: 00010082
[  451.997857][    C1] RAX: ffffffff8cb13ba0 RBX: ffff88816c3ec0e0 RCX: ffffffff8cb159c0
[  452.000965][    C1] RDX: 0000000000000081 RSI: ffffffff8e4c38f9 RDI: ffffffff9065c750
[  452.004112][    C1] RBP: dffffc0000000000 R08: ffffffff8cb13bc0 R09: 0000000000000002
[  452.007329][    C1] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8cb159c0
[  452.010498][    C1] R13: 0000000000000081 R14: ffffffff9065c750 R15: ffff88816c3ec0f8
[  452.013724][    C1]  hidg_set_alt+0x12a/0xa60
[  452.015620][    C1]  ? usb_gadget_set_state+0x12c/0x2d0
[  452.017794][    C1]  set_config+0x749/0x1160
[  452.019448][    C1]  composite_setup+0x1de7/0x3480
[  452.021358][    C1]  configfs_composite_setup+0xc7/0x100
[  452.023422][    C1]  dummy_timer+0x2f43/0x4cf0
[  452.025128][    C1]  ? __lock_acquire+0x683/0x2cf0
[  452.026967][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  452.029030][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  452.030963][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  452.033294][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  452.035341][    C1]  __hrtimer_run_queues+0x3bc/0xa10
[  452.037431][    C1]  hrtimer_run_softirq+0x17a/0x240
[  452.039515][    C1]  handle_softirqs+0x225/0x840
[  452.041455][    C1]  ? __irq_exit_rcu+0xca/0x220
[  452.043426][    C1]  __irq_exit_rcu+0xca/0x220
[  452.045327][    C1]  irq_exit_rcu+0x9/0x30
[  452.047066][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  452.049319][    C1]  </IRQ>
[  452.050518][    C1]  <TASK>
[  452.051742][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  452.054176][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  452.056451][    C1] Code: ac 7e 02 e9 93 06 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d d3 3e 18 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  452.064117][    C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000202
[  452.066590][    C1] RAX: 000000000045dde3 RBX: ffffffff819b5450 RCX: 0000000080000001
[  452.069772][    C1] RDX: 0000000000000001 RSI: ffffffff8e22f0ee RDI: ffffffff8c4bdd80
[  452.073012][    C1] RBP: ffffc90000197f10 R08: ffff88823c6338db R09: 1ffff110478c671b
[  452.076146][    C1] R10: dffffc0000000000 R11: ffffed10478c671c R12: 0000000000000000
[  452.079337][    C1] R13: 1ffff1102c09d000 R14: 1ffff92000032fd0 R15: dffffc0000000000
[  452.082530][    C1]  ? do_idle+0x2e0/0x540
[  452.084277][    C1]  default_idle+0x9/0x20
[  452.086008][    C1]  default_idle_call+0x72/0xb0
[  452.087791][    C1]  do_idle+0x2e0/0x540
[  452.089384][    C1]  ? __pfx_do_idle+0x10/0x10
[  452.091208][    C1]  cpu_startup_entry+0x43/0x60
[  452.093013][    C1]  start_secondary+0x101/0x110
[  452.094959][    C1]  common_startup_64+0x13e/0x157
[  452.096998][    C1]  </TASK>
[  452.098970][    C1] Kernel Offset: disabled
[  452.100562][    C1] Rebooting in 86400 seconds..
