last executing test programs:

2m0.755414934s ago: executing program 0 (id=399):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x20, r1, 0x333, 0x0, 0x4, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)

2m0.755168256s ago: executing program 0 (id=400):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x709843, 0x0)
unshare(0x2c020400)
readv(r0, 0x0, 0x0)

2m0.682018334s ago: executing program 0 (id=401):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x200007}, 0x73)

2m0.681849008s ago: executing program 0 (id=402):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="00e3078fbb81fca067351e718b1742354077ee6bdefb8addaf7c0c235850b66dac0ba564a370a77264f1a57d44c84efc49fa6c64b9351ea8fd59a458a7791fedcc466b0eab6ca6dd32fcc642517fa3219450b91e3118bf2b9d3cfa562ea44c058252d29181c81c637c6ba7d179122eee61e5c9f68165b6abd469da8d90c0632f7265bb040411d5748c475bb33a7ce77afb2ea533f1653d8cb67dad989bb0a1c16881f0d91d6cbd3751c289aecf4a00"/185, @ANYBLOB="b12398658f5ec6488081d04c33b5a507b1cac8c4376c1895046a1e6e068e53d002eb4279796b4c014f4febee026f87bd0eea7d27598f7ff2687552fdd651", @ANYRESOCT=0x0, @ANYRES64], 0x1, 0x497, &(0x7f0000002480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

2m0.615619268s ago: executing program 0 (id=404):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000007800000078000000080000000300000000000007000000000a000000070000130000000002000000090000000000000002000000080000000000120005000000040000000080000010000000ff7f00000000000003000000070000000500000009800000010400000300000006000000020000000800000004000000000000080200000000612e2e2eb9"], 0x0, 0x98, 0x0, 0x1, 0x5}, 0x28)

2m0.43879867s ago: executing program 0 (id=407):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @HCI_OP_INQUIRY_CANCEL={{0x5}, 0xc}}}, 0x43)
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x220, &(0x7f0000000700)="$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")

2m0.239408767s ago: executing program 32 (id=407):
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @HCI_OP_INQUIRY_CANCEL={{0x5}, 0xc}}}, 0x43)
syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x220, &(0x7f0000000700)="$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")

1m29.384023706s ago: executing program 3 (id=714):
write$tun(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0xfdef)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='b '], 0x47)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0)
splice(r0, 0x0, r3, 0x0, 0x8, 0x0)

1m29.263324025s ago: executing program 3 (id=716):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)

1m27.58405006s ago: executing program 3 (id=737):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10)
unshare(0x22020600)

1m27.515389603s ago: executing program 3 (id=738):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000002, &(0x7f0000000300)={[{@volume={'volume', 0x3d, 0x3e}}, {@gid}, {@dmode={'dmode', 0x3d, 0x4}}, {@rootdir={'rootdir', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@unhide}, {@noadinicb}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@longad}]}, 0x1, 0xc32, &(0x7f0000000e00)="$eJzs3U1sXNd9N+D/uRyKI/l9KyZ2FCeNi0lbpLJiufqKqViFO6pptgFkWQjF7AJwJI7UgSmSIKlGNtKC6aaLLgIURRdZEWiNAikaGE0RdMm0LpBsvCiy6opoYSMoumCLAFkFLO6dM9KQIm1GFCVKeh6b+s3ce86dc+4Z3ysLOvcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDxe6+dP3EyPexWAAAP0sXxr5445f4PAE+Uy/7/HwAAAAAAAAAAAAAA9rsURTwdKeYurqXJ6n1X/UJn8OatidGxrasdTFXNgap8+VM/eer0mS+9NHK2lxc6Mx9R/377bLwxfvl849XZG3Pz7YWF9lRjYqZzdXaqveMj7Lb+ZseqE9C48ebNqWvXFhqnXjy9Yfet4Q+HnjoyfG7k+ePP9cpOjI6Njd8pUu8vX7vnhnRtN8PjQBRxPFK88L2fplZEFLH7c1F/sGO/2cGqE8eqTkyMjlUdme60ZhbLnZd6J6KIaPRVavbO0dZjEbXBB9qH7TUjlsrmlw0+VnZvfK4137oy3W5cas0vdhY7szOXUre1ZX8aUcTZFLEcEatDdx9uMIqoRYrvHF5LVyJioHcevlhNDN6+HcUe9nEHynY2BiOWi0dgzPaxoSji9Ujxs/eOxtV8namuNV+IeL3MH0S8U+YrEan8YpyJ+GCL7xGPploU8efl+J9bS1PV9aB3XbnwtcZXZq7N9pXtXVd+yfvDXVeKh3R/OLgpH4x9fm2qRxGt6oq/lu79NzsAAAAAAAAAAAAAAAAA3G8Ho4jPRIrX/u2PqnnFUc1LP3xu5PeH/3//nPFnP+Y4ZdkXI2Kp2Nmc3AN5YuCldCmlhzyX+ElWjyL+OM//+9bDbgwAAAAAAAAAAAAAAAAAAMATrYifRIqX3z+alqN/TfHOzPXG5daV6e6qsL21f3trpq+vr683UjebOSdzLuVczrmSczVnFLl+zmbOyZxLOZdzruRczRkDuX7OZs7JnEs5l3Ou5FzNGbVcP2cz52TOpZzLOVdyruaMfbJ2LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaEZPRzZWhh906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0lIr4fqRo/EHz9rZaRKTq366j5S9nonmgzE9Gc6TMV6J5PmerylrzWw+h/ezOYCrix5FiqP7u7QHP4z/YfXf7axDvfPPOu8/WujnQ2zn84dBTRw6fGxn7tWe3e522asCxC52Zm7caE6NjY+N9m2v50z/Zt204f25xf7pORCy89fabrenp9vy9vyi/Aruo/gi9SLUnpadeVC+iti+a8XD6zhOgvP9/ECl++/1/793wu/f/evy/7rvbd/j4+Z/cuf+/vPlAO7z/1zbXy/f/8p6+1f3/6b5tL+ffjQzWIuqLN+YGj0TUF956+3jnRut6+3p75syJE18eGfny6RODByLq1zrT7b5X9+V0AQAAAAAAAAAAAAAAADw4qYjfjRStH6+lRkTcquZrDZ8bef74cwMxUM232jBv+43xy+cbr87emJtvLyy0pxoTM52rs1PtnX5cvZruNTE6tied+VgH97j9B+uvzs69Nd+5/oeLW+4/VD9/ZWFxvnV1691xMIqIZv+WY1WDJ0bHqkZPd1ozVdVLW06m/+UNpiL+I1JcPdNIn8/b8vz/zTP8N8z/X9p8oD2a//+Jvm3lZ6ZUxM8jxW/9xbPx+aqdh+Kuc5bL/U2kOHb2c7lcHCjL9drQfa5Ad2ZgWfZ/IsU//GJj2d58yKfvlD254xP7iCjH/3Ck+P6ffTd+PW/b+PyHrcf/0OYD7dH4P9O37dCG5xXsuuvk8T8eKV55+t34jbzto57/0Xv2xtFc+PbzOfZo/D/Vt204f+5v3p+uAwAAAAAAAAAAPNIGUxF/Gyl+OFZLL+VtO/n7f1ObD7RHf//r033bpu7PekUf+2LXJxUAAAAA9onBVMRPIsX1xXdvz6HeOP+7b/7n79yZ/zmaNu2t/pzvV6rnBtzPP//rN5w/d3L33QYAAAAAAAAAAAAAAAAAAIB9JaUiXsrrqU9W8/mntl1PfSVSvPZfL+Ry6UhZrrcO/HD1a/3i7Mzx89PTs1dbi60r0+3G+Fzrarus+0ykWPvrz+W6RbW+em+9+e4a73fWYp+PFGN/1yvbXYu9tzb5M72yS+2TZdlPRIr//PuNZXvrWH/qznFPlWX/KlJ8/Z+2LnvkTtnTZdnvRooffb3RK3uoLNt7Puqn75R98epssQejAgAAAAAAAAAAAAAAAAAAwJNmMBXxp5Hiv28s357Ln9f/H+x7W3nnm33r/W9yq1rnf7ha/3+71/ey/n/1XIGl7T4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTymKeDtSzF1cSytD5fuu+oXOzM1bE6NjW1c7mKqaA1X58qd+8tTpM196aeRsLz+6/v32mXhj/PL5xquzN+bm2wsL7anGxEzn6uxUe8dH2G39zY5VJ6Bx482bU9euLTROvXh6w+5bwx8OPXVk+NzI88ef65WdGB0bG+8rUxu850+/S9pm+4Eo4i8jxQvf+2n64VBEEbs/Fx/z3dlrB6tOHKs6MTE6VnVkutOaWSx3XuqdiCKi0Vep2TtHD2AsdqUZsVQ2v2zwsbJ743Ot+daV6XbjUmt+sbPYmZ25lLqtLfvTiCLOpojliFgduvtwg1HEm5HiO4fX0j8PRQz0zsMXL45/9cSp7dtR7GEfd6BsZ2MwYrn4qDHbosNsMBRF/GOk+Nl7R+NfhiJq0f2JL0S8XuYPIt6J7nin8otxJuIDp/WxUYsi/rcc/3Nr6b2h8nrQu65c+FrjKzPXZvvK9q4rj/z94UHa5/eTehTxo+qKv5b+1X/XAAAAAAAAAAAAAAAAAPtIEb8aKV5+/2iq5gffnlPcmbneuNy6Mt2d1teb+9ebM72+vr7eSN1s5pzMuZRzOedKztWcUeT6OZtl1tfXJ/P7pZzLOVdyruaMgVw/ZzPnZM6lnMs5V3Ku5oxarp+zmXMy51LO5ZwrOVdzxj6ZuwcAAAAAAAAAAAAAAAAAADxeiuqfFN/+xlpaH6rWlx7o7VuxHuhj7/8CAAD//0pa+Ck=")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x1a06496, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})

1m27.345653459s ago: executing program 3 (id=739):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x9, 0x0, 0x8})

1m27.265300777s ago: executing program 3 (id=740):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)

1m27.163099066s ago: executing program 33 (id=740):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendto$unix(r2, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0)
recvfrom$unix(r3, 0x0, 0x0, 0x10102, 0x0, 0x0)

1m10.965762056s ago: executing program 2 (id=865):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
syz_clone(0x4800080, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1m10.794630421s ago: executing program 2 (id=867):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x25dfdc01, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x48804)

1m10.726993105s ago: executing program 2 (id=869):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x7fffffff}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001240))

1m10.675225632s ago: executing program 2 (id=870):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@resgid={'resgid', 0x3d, 0xee00}}, {@user_xattr}, {@grpquota}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70)

1m10.301983592s ago: executing program 2 (id=873):
r0 = syz_open_dev$vbi(&(0x7f0000000440), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x5, 0x2, {0x5, @vbi={0x4000000, 0xfffffffd, 0x4, 0x0, [], [0xff], 0x1}}, 0x4})

1m9.395443974s ago: executing program 2 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1m9.252871457s ago: executing program 34 (id=876):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)

1m5.684998353s ago: executing program 4 (id=901):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0)

1m5.565182525s ago: executing program 4 (id=902):
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2132, 0xffffffffffffffff, 0x0)
mlockall(0x7)
mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000f)

1m5.425032752s ago: executing program 4 (id=904):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000000e00)="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", 0x122}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}, {&(0x7f0000000880)="921b13bdd91bdfe64a88bc211121c3ed3f62b7a3854fed6c5cfe3cf309af2a5cf2ead11c596694bab199b184b25e72f0566fc53958cafa5605e143d193b752db468e93f29aad31983b039d4b6fe1d01d2483", 0x52}, {&(0x7f0000000a00)="6fd8dd48dd5f680c99b8da66e7c282be984f2b6cf6fc7174fe0a7c4bcd", 0x1d}], 0x8}}], 0x2, 0xc044)
write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0)

1m5.273722027s ago: executing program 4 (id=905):
syz_mount_image$iso9660(&(0x7f0000000d40), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[], 0x1, 0x5ca, &(0x7f0000001480)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x48940, 0x10c)
io_setup(0x5, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x40000000000002cd, &(0x7f0000000240)=[&(0x7f0000000180)={0x20000, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x6, 0x0, 0x0, 0x0, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)="84cf6f50b46bc8578b0851b558b34298a1dd11ed59448a25a1654d4228aaa6e7d6cb56c1", 0x0, 0x7, 0x0, 0x2}])

1m4.719068838s ago: executing program 4 (id=906):
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x3, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000140))

1m4.295205764s ago: executing program 4 (id=910):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

1m3.995375809s ago: executing program 35 (id=910):
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000540)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)

45.711823601s ago: executing program 6 (id=1058):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffffffffffffff6f, &(0x7f0000000400)=[@in6={0xa, 0x4e24, 0xb, @mcast2, 0x1}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x1783552e, @private1, 0x1}, @in6={0xa, 0x4e24, 0x4, @empty, 0x2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0xfffffffd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x44c6}, @in6={0xa, 0x4e22, 0x0, @empty, 0x1000}]}, &(0x7f0000000240)=0x10)

45.577558265s ago: executing program 6 (id=1060):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)

45.493610947s ago: executing program 6 (id=1062):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3})

45.414440366s ago: executing program 6 (id=1065):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = syz_io_uring_setup(0xd5, &(0x7f0000000640)={0x0, 0xc12d, 0x1, 0x0, 0x109}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0xffffffffffffffff, 0x0})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

45.255910029s ago: executing program 6 (id=1066):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000feffffff0000000010000000850000006c00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

44.565837234s ago: executing program 6 (id=1071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x25dfdc01, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0)

44.368296987s ago: executing program 36 (id=1071):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x60, r1, 0x1, 0x0, 0x25dfdc01, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1a}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x60}}, 0x0)

1.754720263s ago: executing program 5 (id=1457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00')

1.196962561s ago: executing program 7 (id=1466):
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0)
pwritev(r2, &(0x7f00000014c0)=[{&(0x7f0000000340)='&+,', 0x3}, {0x0}], 0x2, 0x3, 0x80)

684.055878ms ago: executing program 7 (id=1468):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26)
close(0x3)
getsockname(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

625.038219ms ago: executing program 7 (id=1469):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000017c0)='./file1\x00', 0x1c880, &(0x7f0000000000)=ANY=[], 0xf9, 0x60ba, &(0x7f0000001800)="$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")

624.859642ms ago: executing program 1 (id=1470):
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={0x0, @isdn={0x22, 0x7, 0x51, 0xfd, 0x10}, @tipc=@id={0x1e, 0x3, 0x3, {0x4e20}}, @generic={0x0, "e1a2f0c2bca6a5ba17ef9f77060c"}, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2fea, 0x5e5e, 0x196})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000000))

544.758608ms ago: executing program 1 (id=1471):
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
eventfd2(0x13af, 0x80000)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}})

544.480945ms ago: executing program 1 (id=1472):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)

462.549991ms ago: executing program 5 (id=1473):
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)

340.868666ms ago: executing program 5 (id=1474):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1b, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

210.56154ms ago: executing program 1 (id=1475):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0)

209.601045ms ago: executing program 7 (id=1476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c"], 0x140}}, 0x0)

129.329129ms ago: executing program 5 (id=1477):
syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3)

129.074524ms ago: executing program 1 (id=1478):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='h\x00\x00\x00J\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x68}}, 0x0)

71.889602ms ago: executing program 7 (id=1479):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'})

71.620734ms ago: executing program 5 (id=1480):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2000}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x20000805}, 0x20040000)

632.704µs ago: executing program 1 (id=1481):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x28444, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x404, 0x2, 0x8000013, 0xa7, 0xffffffa7, 0x8000b, 0x34d, 0x6e, 0x0, 0x4000009, 0x200, 0xe2df, 0x9, 0x20000001, 0x4, 0x505e, 0x7, 0xf58, 0x6]})
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000})

302.604µs ago: executing program 7 (id=1482):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
readv(r0, &(0x7f0000000380)=[{&(0x7f0000000180)=""/187, 0xbb}], 0x1)

0s ago: executing program 5 (id=1483):
mkdir(&(0x7f0000000040)='./control\x00', 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='./control\x00', 0x40000000)
rmdir(&(0x7f0000000280)='./control\x00')

kernel console output (not intermixed with test programs):

8302] loop1: detected capacity change from 0 to 1764
[  151.418900][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.437355][    T9] usb 3-1: config 0 descriptor??
[  151.440469][ T8286] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  151.464738][ T8302] iso9660: Corrupted directory entry in block 2 of inode 1920
[  152.022846][    T9] waterforce 0003:1044:7A4D.000B: hidraw0: USB HID v0.08 Device [HID 1044:7a4d] on usb-dummy_hcd.2-1/input0
[  152.125724][    T9] waterforce 0003:1044:7A4D.000B: fw version request failed with -71
[  152.186745][    T9] usb 3-1: USB disconnect, device number 17
[  152.491351][ T5899] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  152.655040][ T5899] usb 5-1: config 1 has an invalid interface number: 35 but max is 0
[  152.658429][ T5899] usb 5-1: config 1 has no interface number 0
[  152.661115][ T5899] usb 5-1: config 1 interface 35 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  152.671960][ T5899] usb 5-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=2d.0a
[  152.675669][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.678427][ T5899] usb 5-1: Product: syz
[  152.679759][ T5899] usb 5-1: Manufacturer: syz
[  152.681472][ T5899] usb 5-1: SerialNumber: syz
[  152.788310][ T8311] program syz.2.826 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.798602][ T8311] program syz.2.826 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  152.922134][ T5899] snd-usb-audio 5-1:1.35: probe with driver snd-usb-audio failed with error -71
[  152.944957][ T5899] usb 5-1: USB disconnect, device number 3
[  152.955143][ T8313] loop2: detected capacity change from 0 to 4096
[  152.971663][ T8313] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  153.003206][ T8317] loop1: detected capacity change from 0 to 4096
[  153.003822][ T8313] ntfs3(loop2): ino=1a, mi_enum_attr
[  153.008392][ T8317] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  153.014495][ T8313] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  153.033814][ T8317] ntfs3(loop1): ino=19, mi_enum_attr
[  153.035949][ T8317] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  153.053961][ T8317] ntfs3(loop1): failed to convert "c46c" to koi8-u
[  153.061048][ T8317] ntfs3(loop1): ino=20, mi_enum_attr
[  153.453884][ T5899] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  153.461090][ T2252] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  153.470209][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'.
[  153.474793][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.834'.
[  153.606780][ T8336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.837'.
[  153.613104][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.617325][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  153.624455][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  153.635104][ T2252] usb 2-1: unable to get BOS descriptor or descriptor too short
[  153.641094][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  153.641125][ T2252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.650343][ T5899] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  153.657699][ T2252] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  153.664637][ T5899] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  153.668326][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  153.674764][ T5899] usb 3-1: Product: syz
[  153.676487][ T5899] usb 3-1: Manufacturer: syz
[  153.678406][ T5899] usb 3-1: SerialNumber: syz
[  153.680527][ T2252] usb 2-1: config 1 interface 1 has no altsetting 0
[  153.687856][ T2252] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  153.692841][ T5899] usb 3-1: config 0 descriptor??
[  153.704494][ T2252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.708890][ T2252] usb 2-1: Product: syz
[  153.710697][ T2252] usb 2-1: Manufacturer: syz
[  153.718316][ T2252] usb 2-1: SerialNumber: syz
[  153.917762][ T5899] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  153.928722][ T5899] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  153.956365][ T2252] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  153.963817][ T2252] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  153.967395][ T2252] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  154.017525][ T2252] usb 2-1: USB disconnect, device number 20
[  154.040528][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.126111][ T5899] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  154.129306][ T5899] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  154.138289][ T5899] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  154.332798][ T5899] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  154.334900][ T8349] loop4: detected capacity change from 0 to 32768
[  154.364158][ T8349] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.387688][ T8349] XFS (loop4): Ending clean mount
[  154.398738][ T8349] XFS (loop4): Quotacheck needed: Please wait.
[  154.429054][ T8349] XFS (loop4): Quotacheck: Done.
[  154.491980][ T8050] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.892034][ T8365] loop1: detected capacity change from 0 to 32768
[  154.907448][ T8365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.847 (8365)
[  154.918668][ T8365] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.923741][ T8365] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  154.931394][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  155.011801][ T8365] BTRFS info (device loop1): enabling ssd optimizations
[  155.016520][ T8365] BTRFS info (device loop1): enabling free space tree
[  155.019426][ T8365] BTRFS info (device loop1): use zlib compression, level 3
[  155.060069][   T33] audit: type=1804 audit(1757266522.597:39): pid=8365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.847" name="/newroot/289/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  155.094663][    T9] usb 5-1: Using ep0 maxpacket: 8
[  155.101840][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  155.104475][    T9] usb 5-1: config 0 has no interface number 0
[  155.106691][    T9] usb 5-1: config 0 interface 1 has no altsetting 0
[  155.123703][    T9] usb 5-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice=da.9a
[  155.126628][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.129255][    T9] usb 5-1: Product: syz
[  155.136554][   T33] audit: type=1804 audit(1757266522.667:40): pid=8382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.847" name="/newroot/289/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  155.145460][    T9] usb 5-1: Manufacturer: syz
[  155.149260][    T9] usb 5-1: SerialNumber: syz
[  155.154209][    T9] usb 5-1: config 0 descriptor??
[  155.345709][ T5899] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  155.361455][ T5899] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71
[  155.387491][ T5899] usb 3-1: USB disconnect, device number 18
[  155.419094][    T9] snd-usb-audio 5-1:0.1: probe with driver snd-usb-audio failed with error -22
[  155.433569][    T9] usb 5-1: USB disconnect, device number 4
[  155.457033][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.711286][ T5853] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.336171][ T8415] loop4: detected capacity change from 0 to 1024
[  156.349979][ T8415] hfsplus: wrong filesystem version
[  156.385018][ T8394] loop1: detected capacity change from 0 to 32768
[  156.388360][ T8394] XFS: noikeep mount option is deprecated.
[  156.404364][ T8394] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.420439][ T8394] XFS (loop1): Ending clean mount
[  156.438388][ T8394] XFS (loop1): Quotacheck needed: Please wait.
[  156.504586][ T8394] XFS (loop1): Quotacheck: Done.
[  156.534338][ T5853] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  156.591069][ T5914] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  156.759166][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short
[  156.765319][ T5914] usb 5-1: not running at top speed; connect to a high speed hub
[  156.771686][ T8429] loop2: detected capacity change from 0 to 32768
[  156.772524][ T5914] usb 5-1: config 1 has an invalid interface number: 138 but max is 0
[  156.775702][ T8429] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.859 (8429)
[  156.789336][ T5914] usb 5-1: config 1 has no interface number 0
[  156.794609][ T5914] usb 5-1: config 1 interface 138 has no altsetting 0
[  156.802361][ T5914] usb 5-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  156.806121][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.809409][ T5914] usb 5-1: Product: syz
[  156.814603][ T5914] usb 5-1: Manufacturer: syz
[  156.816655][ T5914] usb 5-1: SerialNumber: syz
[  156.945811][ T8429] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.956130][ T8429] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  157.449251][ T8429] BTRFS info (device loop2): enabling ssd optimizations
[  157.463815][ T8429] BTRFS info (device loop2): enabling free space tree
[  157.472401][ T5914] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  157.536352][ T5914] usb 5-1: USB disconnect, device number 5
[  157.613534][ T7197] udevd[7197]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.645199][ T5849] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.088129][ T8461] loop1: detected capacity change from 0 to 32768
[  158.097915][ T8461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.863 (8461)
[  158.157463][ T8461] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.168374][ T8461] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  158.250727][ T8461] BTRFS info (device loop1): enabling ssd optimizations
[  158.273187][ T8461] BTRFS info (device loop1): enabling free space tree
[  158.336275][ T8495] loop2: detected capacity change from 0 to 1024
[  158.340409][ T5853] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.353450][ T8495] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  158.385374][ T5914] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  158.396748][ T8495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.512072][ T8495] loop2: detected capacity change from 1024 to 64
[  158.519281][ T8504] syz.2.870: attempt to access beyond end of device
[  158.519281][ T8504] loop2: rw=524288, sector=192, nr_sectors = 18 limit=64
[  158.529161][ T8504] syz.2.870: attempt to access beyond end of device
[  158.529161][ T8504] loop2: rw=0, sector=192, nr_sectors = 8 limit=64
[  158.542690][ T5914] usb 5-1: Using ep0 maxpacket: 8
[  158.560753][   T33] audit: type=1800 audit(1757266526.087:41): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.870" name="file2" dev="loop2" ino=16 res=0 errno=0
[  158.573602][ T5914] usb 5-1: config 0 has an invalid interface number: 252 but max is 0
[  158.576542][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.585593][ T8507] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  158.587438][ T5914] usb 5-1: config 0 has no interface number 0
[  158.614418][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=f0.28
[  158.617712][ T5914] usb 5-1: New USB device strings: Mfr=244, Product=1, SerialNumber=3
[  158.620441][ T5914] usb 5-1: Product: syz
[  158.626236][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.639938][ T5914] usb 5-1: Manufacturer: syz
[  158.661004][ T5914] usb 5-1: SerialNumber: syz
[  158.663399][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.667954][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.688696][ T5914] usb 5-1: config 0 descriptor??
[  158.705528][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.723635][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.729117][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.751496][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.767137][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.778987][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.785961][ T5849] EXT4-fs warning (device loop2): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  158.925989][ T5914] usb 5-1: USB disconnect, device number 6
[  159.493397][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.512806][ T8497] kmmpd-loop2: attempt to access beyond end of device
[  159.512806][ T8497] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64
[  159.518024][ T8497] buffer_io_error: 11 callbacks suppressed
[  159.518035][ T8497] Buffer I/O error on dev loop2, logical block 64, lost sync page write
[  159.606313][ T8100] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.736304][ T8100] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.789529][ T8533] netlink: 'syz.4.879': attribute type 2 has an invalid length.
[  159.969046][ T8100] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.006436][ T8541] netlink: 'syz.4.883': attribute type 27 has an invalid length.
[  160.067931][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  160.072625][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  160.075482][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  160.079585][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  160.082213][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  160.167256][ T8100] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.483088][ T8542] lo speed is unknown, defaulting to 1000
[  160.656970][ T8100] bridge_slave_1: left allmulticast mode
[  160.660350][ T8100] bridge_slave_1: left promiscuous mode
[  160.663949][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.678568][ T8100] bridge_slave_0: left allmulticast mode
[  160.682755][ T8100] bridge_slave_0: left promiscuous mode
[  160.687550][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.167402][ T8100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.172843][ T8100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.176964][ T8100] bond0 (unregistering): Released all slaves
[  161.184689][ T8100] bond1 (unregistering): Released all slaves
[  161.301503][ T8100] bond2 (unregistering): Released all slaves
[  161.411089][ T8557] lo speed is unknown, defaulting to 1000
[  161.506566][ T8542] chnl_net:caif_netlink_parms(): no params data found
[  161.538349][ T8100] tipc: Left network mode
[  161.763032][ T8542] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.767989][ T8542] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.774311][ T8542] bridge_slave_0: entered allmulticast mode
[  161.782354][ T8542] bridge_slave_0: entered promiscuous mode
[  161.796980][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.803850][ T8542] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.806929][ T8542] bridge_slave_1: entered allmulticast mode
[  161.812548][ T8542] bridge_slave_1: entered promiscuous mode
[  161.949826][ T8100] hsr_slave_0: left promiscuous mode
[  161.956431][ T8100] hsr_slave_1: left promiscuous mode
[  161.960592][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.968691][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  161.980821][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  161.985051][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  162.004055][ T8100] veth1_macvtap: left promiscuous mode
[  162.007240][ T8100] veth0_macvtap: left promiscuous mode
[  162.009732][ T8100] veth1_vlan: left promiscuous mode
[  162.013960][ T8100] veth0_vlan: left promiscuous mode
[  162.060123][ T8590] netlink: 16 bytes leftover after parsing attributes in process `syz.4.897'.
[  162.141539][ T5857] Bluetooth: hci0: command tx timeout
[  162.280421][    C0] vkms_vblank_simulate: vblank timer overrun
[  162.648944][ T8100] team0 (unregistering): Port device team_slave_1 removed
[  162.693597][ T8100] team0 (unregistering): Port device team_slave_0 removed
[  163.154127][ T8542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.168571][ T8542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.186737][   T96] lo speed is unknown, defaulting to 1000
[  163.189427][   T96] infiniband syz0: ib_query_port failed (-19)
[  163.265001][ T8542] team0: Port device team_slave_0 added
[  163.276580][ T8542] team0: Port device team_slave_1 added
[  163.332921][ T8598] netlink: 'syz.1.900': attribute type 9 has an invalid length.
[  163.336150][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'.
[  163.374594][ T8598] hsr0: entered promiscuous mode
[  163.390059][ T8598] macvlan2: entered promiscuous mode
[  163.394594][ T8598] macvlan2: entered allmulticast mode
[  163.396909][ T8598] hsr0: entered allmulticast mode
[  163.399078][ T8598] hsr_slave_0: entered allmulticast mode
[  163.409377][ T8598] hsr_slave_1: entered allmulticast mode
[  163.452793][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.458290][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.497718][ T8542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.509623][ T8542] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.530952][ T8542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.547079][ T8542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.730545][ T8614] loop4: detected capacity change from 0 to 736
[  164.146958][ T8542] hsr_slave_0: entered promiscuous mode
[  164.149631][ T8542] hsr_slave_1: entered promiscuous mode
[  164.211662][ T5857] Bluetooth: hci0: command tx timeout
[  164.269439][ T8050] Symlink component flag not implemented
[  164.629012][ T8542] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  164.636431][ T8542] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  164.668298][ T8542] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  164.693617][ T8542] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  164.856157][ T8100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.999566][ T8100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.052926][ T8542] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.132819][ T8100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.155035][ T8542] 8021q: adding VLAN 0 to HW filter on device team0
[  165.173520][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.176683][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.199632][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.202676][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.256037][ T8100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.417947][ T8649] loop1: detected capacity change from 0 to 32768
[  165.431906][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  165.436104][ T8649] bcachefs: bch2_fs_parse_param() Error parsing option direct_io: option_value
[  165.438362][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  165.449265][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  165.453937][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  165.460006][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  165.594988][ T8100] bridge_slave_1: left allmulticast mode
[  165.597278][ T8100] bridge_slave_1: left promiscuous mode
[  165.599564][ T8100] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.625323][ T8100] bridge_slave_0: left allmulticast mode
[  165.628006][ T8100] bridge_slave_0: left promiscuous mode
[  165.630255][ T8100] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.678561][ T8664] loop1: detected capacity change from 0 to 512
[  165.703207][ T8664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.720110][ T8664] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.842912][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.161094][ T8100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.167957][ T8100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.176001][ T8100] bond0 (unregistering): Released all slaves
[  166.298304][ T8542] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.302110][ T5857] Bluetooth: hci0: command tx timeout
[  166.671146][ T8100] hsr_slave_0: left promiscuous mode
[  166.683942][ T8100] hsr_slave_1: left promiscuous mode
[  166.686891][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.690019][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_0
[  166.714639][ T8100] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  166.717044][ T8100] batman_adv: batadv0: Removing interface: batadv_slave_1
[  166.739905][ T8100] veth1_macvtap: left promiscuous mode
[  166.742205][ T8100] veth0_macvtap: left promiscuous mode
[  166.744359][ T8100] veth1_vlan: left promiscuous mode
[  166.746528][ T8100] veth0_vlan: left promiscuous mode
[  167.327044][ T8100] team0 (unregistering): Port device team_slave_1 removed
[  167.367094][ T8100] team0 (unregistering): Port device team_slave_0 removed
[  167.498912][ T5857] Bluetooth: hci2: command tx timeout
[  167.858851][ T8654] chnl_net:caif_netlink_parms(): no params data found
[  168.032002][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.034710][ T8654] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.037237][ T8654] bridge_slave_0: entered allmulticast mode
[  168.051439][ T8654] bridge_slave_0: entered promiscuous mode
[  168.054841][ T8654] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.057335][ T8654] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.059990][ T8654] bridge_slave_1: entered allmulticast mode
[  168.063958][ T8654] bridge_slave_1: entered promiscuous mode
[  168.101483][ T8654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.107761][ T8654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.143026][ T8654] team0: Port device team_slave_0 added
[  168.155897][ T8654] team0: Port device team_slave_1 added
[  168.159528][ T8542] veth0_vlan: entered promiscuous mode
[  168.206030][ T8542] veth1_vlan: entered promiscuous mode
[  168.217893][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.223754][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.236366][ T8654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.245339][ T8654] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.248431][ T8654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.259939][ T8654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.372655][ T8654] hsr_slave_0: entered promiscuous mode
[  168.376131][ T8654] hsr_slave_1: entered promiscuous mode
[  168.379192][ T8654] debugfs: 'hsr0' already exists in 'hsr'
[  168.392460][ T8654] Cannot create hsr debugfs directory
[  168.460440][ T8542] veth0_macvtap: entered promiscuous mode
[  168.523801][ T8542] veth1_macvtap: entered promiscuous mode
[  168.672067][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.738219][ T8542] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.758556][ T5913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.772436][ T5913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.776883][ T5913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.794680][ T5913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.933559][ T8729] geneve0: entered promiscuous mode
[  169.128342][ T8654] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.132051][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.135781][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.150204][ T8654] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  169.167830][ T8654] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  169.176777][ T8654] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  169.240825][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.249112][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.321099][ T5918] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  169.419960][ T8654] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.454409][ T8654] 8021q: adding VLAN 0 to HW filter on device team0
[  169.465878][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.469810][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.482232][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  169.487599][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.490679][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.495245][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  169.511651][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  169.520080][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  169.524412][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.529675][ T5918] usb 2-1: Product: syz
[  169.535611][ T5918] usb 2-1: Manufacturer: syz
[  169.537570][ T5918] usb 2-1: SerialNumber: syz
[  169.550271][ T5918] usb 2-1: config 0 descriptor??
[  169.573349][ T5857] Bluetooth: hci2: command tx timeout
[  169.706360][ T8654] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.832071][ T5918] appledisplay 2-1:0.0: Error while getting initial brightness: -110
[  169.839636][ T5918] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110
[  169.914269][ T8654] veth0_vlan: entered promiscuous mode
[  169.922631][ T8654] veth1_vlan: entered promiscuous mode
[  169.952082][ T8654] veth0_macvtap: entered promiscuous mode
[  169.957841][ T8654] veth1_macvtap: entered promiscuous mode
[  169.973643][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.984047][ T8654] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.995559][ T5913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.999015][ T5913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.003297][ T5913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.006865][ T5913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.095922][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.104344][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.128844][ T3661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.133282][ T3661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.280504][ T5899] usb 2-1: USB disconnect, device number 21
[  170.421303][ T2252] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  170.575161][ T2252] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49499, setting to 1024
[  170.579813][ T2252] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  170.598744][ T2252] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  170.607842][ T2252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.624031][ T8788] loop5: detected capacity change from 0 to 16
[  170.637969][ T2252] usb 7-1: config 0 descriptor??
[  170.646493][ T8788] erofs (device loop5): mounted with root inode @ nid 36.
[  170.653325][ T8788] erofs (device loop5): xattr_isize 12 of nid 46 is not supported yet
[  170.795774][ T8794] loop1: detected capacity change from 0 to 512
[  170.829339][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.835786][ T8794] ext4 filesystem being mounted at /339/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.856071][ T8794] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.943: corrupted inode contents
[  170.867263][ T8794] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.943: mark_inode_dirty error
[  170.873309][ T8794] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.943: corrupted inode contents
[  170.910112][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.001119][ T8179] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  171.068568][ T2252] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  171.100037][ T8801] loop1: detected capacity change from 0 to 4096
[  171.154491][ T8801] ntfs3(loop1): ino=5, "/" indx_read
[  171.158514][ T8801] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  171.168507][ T8801] ntfs3(loop1): ino=5, "/" ntfs_readdir
[  171.174980][ T8179] usb 6-1: unable to get BOS descriptor or descriptor too short
[  171.180419][ T8179] usb 6-1: config 1 interface 1 has no altsetting 0
[  171.188790][ T8179] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  171.192863][ T8179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.196838][ T8179] usb 6-1: Product: syz
[  171.200237][ T8179] usb 6-1: Manufacturer: syz
[  171.202541][ T8179] usb 6-1: SerialNumber: syz
[  171.419969][ T8808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.948'.
[  171.431951][ T8179] usb 6-1: found format II with max.bitrate = 2418, frame size=7
[  171.435922][ T8179] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  171.484258][ T8179] usb 6-1: USB disconnect, device number 2
[  171.513284][ T8810] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.949'.
[  171.545915][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  171.651301][ T5857] Bluetooth: hci2: command tx timeout
[  171.749902][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'.
[  171.754186][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.954'.
[  171.840806][ T8824] loop1: detected capacity change from 0 to 4096
[  171.877881][ T5899] usb 7-1: USB disconnect, device number 2
[  172.125514][ T8832] loop1: detected capacity change from 0 to 4096
[  172.149103][ T8832] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  172.193168][ T8832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.229228][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.263819][ T8870] netlink: 'syz.1.974': attribute type 1 has an invalid length.
[  173.342300][ T5918] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  173.627755][ T5918] usb 6-1: config 5 has an invalid interface number: 234 but max is 0
[  173.631655][ T5918] usb 6-1: config 5 has no interface number 0
[  173.634410][ T5918] usb 6-1: config 5 interface 234 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  173.657098][ T5918] usb 6-1: New USB device found, idVendor=0bfd, idProduct=0027, bcdDevice=6e.03
[  173.664784][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.668424][ T5918] usb 6-1: Product: syz
[  173.685845][ T5918] usb 6-1: Manufacturer: syz
[  173.688095][ T5918] usb 6-1: SerialNumber: syz
[  173.721935][ T8867] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  173.732429][ T5857] Bluetooth: hci2: command tx timeout
[  173.750160][ T5918] kvaser_usb 6-1:5.234: error -EPROTO: Cannot get software info
[  173.757461][ T5918] kvaser_usb 6-1:5.234: probe with driver kvaser_usb failed with error -71
[  173.987213][ T3146] usb 6-1: USB disconnect, device number 3
[  173.993015][ T5899] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  174.161234][ T5899] usb 7-1: Using ep0 maxpacket: 16
[  174.167853][ T5899] usb 7-1: config 252 has an invalid interface number: 165 but max is 0
[  174.172731][ T5899] usb 7-1: config 252 has no interface number 0
[  174.176939][ T5899] usb 7-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd
[  174.184865][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.226887][ T5899] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware
[  174.234002][ T5899] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  174.461969][ T5918] usb 7-1: USB disconnect, device number 3
[  174.687492][ T8875] ip6erspan0: entered allmulticast mode
[  174.754401][ T8879] netlink: 'syz.1.977': attribute type 10 has an invalid length.
[  174.985167][ T8889] loop1: detected capacity change from 0 to 4096
[  174.997798][ T8889] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  175.032624][ T8889] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  175.042660][ T8889] ntfs3(loop1): Failed to load $BadClus (-22).
[  175.411049][ T8900] loop1: detected capacity change from 0 to 32768
[  175.420198][ T8900] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.985 (8900)
[  175.453506][ T8900] BTRFS info (device loop1 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  175.463699][ T8900] BTRFS info (device loop1 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  175.523413][ T8895] loop5: detected capacity change from 0 to 32768
[  175.529769][ T8895] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 0 transid 8 /dev/loop5 (7:5) scanned by syz.5.983 (8895)
[  175.559887][ T3661] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[  175.607178][ T3661] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  175.642000][ T3661] BTRFS error (device loop1 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  175.666937][ T8900] BTRFS info (device loop1 state CS): allowing degraded mounts
[  175.669798][ T8900] BTRFS info (device loop1 state CS): enabling ssd optimizations
[  175.691244][ T8900] BTRFS info (device loop1 state CS): using spread ssd allocation scheme
[  175.694826][ T8900] BTRFS info (device loop1 state CS): disabling log replay at mount time
[  175.698336][ T8900] BTRFS info (device loop1 state CS): enabling free space tree
[  175.720412][ T8900] BTRFS info (device loop1 state CS): ignoring bad roots
[  175.727287][ T8900] BTRFS info (device loop1 state CS): ignoring data csums
[  175.729685][ T8900] BTRFS info (device loop1 state CS): ignoring meta csums
[  175.742415][ T8900] BTRFS info (device loop1 state CS): ignoring unknown super block flags
[  175.752208][ T8900] BTRFS info (device loop1 state CS): force zlib compression, level 3
[  175.808010][ T5853] BTRFS info (device loop1 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  176.024774][ T8925] loop5: detected capacity change from 0 to 32768
[  176.035849][ T8925] (syz.5.989,8925,0):ocfs2_verify_volume:2314 ERROR: bad root_blkno: 0
[  176.039440][ T8925] (syz.5.989,8925,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  176.049349][ T8925] (syz.5.989,8925,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  176.072984][ T8925] (syz.5.989,8925,0):ocfs2_fill_super:1177 ERROR: status = -22
[  176.318914][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.993'.
[  176.323023][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.993'.
[  176.834271][ T8960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.998'.
[  177.014241][   T33] audit: type=1326 audit(1757266544.547:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.1.1001" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf4998ebe9 code=0x0
[  177.685545][ T8989] loop6: detected capacity change from 0 to 64
[  178.002072][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'.
[  178.018950][ T8997] netlink: 'syz.6.1010': attribute type 20 has an invalid length.
[  178.160074][ T9000] loop1: detected capacity change from 0 to 32768
[  178.189554][ T5913] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.189565][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'.
[  178.189602][ T8997] netlink: 'syz.6.1010': attribute type 20 has an invalid length.
[  178.215004][ T5913] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.218829][ T5913] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.230648][ T9000] bcachefs (dev-0): cannot online: device too small
[  178.231008][ T5913] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.233170][ T9000] bcachefs (loop1): shutting down
[  178.271275][ T9000] bcachefs (loop1): shutdown complete
[  179.264038][ T9000] bcachefs: bch2_fs_get_tree() error: device_size_too_small
[  179.469342][ T9025] loop6: detected capacity change from 0 to 128
[  179.475483][ T9025] EXT4-fs (loop6): Test dummy encryption mode enabled
[  179.510620][ T9025] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.533173][ T9025] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  179.628021][ T9036] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1017'.
[  179.657991][ T9038] loop1: detected capacity change from 0 to 64
[  179.691256][ T9038] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  180.399588][ T9052] loop5: detected capacity change from 0 to 512
[  180.409105][ T9052] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  180.467624][ T9052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.501311][ T9052] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.563465][ T9052] EXT4-fs error (device loop5): ext4_get_verity_descriptor_location:335: inode #15: comm syz.5.1029: verity file corrupted; can't find descriptor
[  180.594756][ T9052] EXT4-fs (loop5): Remounting filesystem read-only
[  180.601241][ T9052] fs-verity (loop5, inode 15): Error -117 getting verity descriptor size
[  180.630137][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.801627][ T9067] loop5: detected capacity change from 0 to 512
[  180.848158][ T9067] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.884686][ T9067] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.992652][ T8654] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.004266][ T7196] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  181.163782][ T7196] usb 2-1: config 32 has an invalid interface number: 251 but max is 0
[  181.168063][ T7196] usb 2-1: config 32 has no interface number 0
[  181.180119][ T7196] usb 2-1: config 32 interface 251 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  181.188952][ T7196] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=6f.ea
[  181.196937][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.197863][ T7196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.207616][ T7196] usb 2-1: Product: syz
[  181.209151][ T7196] usb 2-1: Manufacturer: syz
[  181.210843][ T7196] usb 2-1: SerialNumber: syz
[  181.218376][ T9065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  181.228614][ T7196] iowarrior 2-1:32.251: no interrupt-in endpoint found
[  181.452742][ T7196] usb 2-1: USB disconnect, device number 22
[  181.492106][ T5918] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  181.660970][ T5918] usb 6-1: Using ep0 maxpacket: 8
[  181.666250][ T5918] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  181.670081][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.674425][ T5918] usb 6-1: Product: syz
[  181.676103][ T5918] usb 6-1: Manufacturer: syz
[  181.677905][ T5918] usb 6-1: SerialNumber: syz
[  181.683151][ T5918] usb 6-1: config 0 descriptor??
[  181.703509][ T5918] usb 6-1: selecting invalid altsetting 3
[  181.706210][ T5918] comedi comedi5: could not set alternate setting 3 in high speed
[  181.709454][ T5918] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device.
[  181.717406][ T5918] usbdux 6-1:0.0: probe with driver usbdux failed with error -22
[  181.913978][ T7196] usb 6-1: USB disconnect, device number 4
[  182.185496][ T9107] loop1: detected capacity change from 0 to 128
[  182.193317][ T9107] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  182.198280][ T9107] hpfs: filesystem error: improperly stopped
[  182.204265][ T9107] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  182.208002][ T9107] hpfs: You really don't want any checks? You are crazy...
[  182.220346][ T9107] hpfs: hpfs_map_sector(): read error
[  182.223443][ T9107] hpfs: code page support is disabled
[  182.226359][ T9107] hpfs: hpfs_map_4sectors(): unaligned read
[  182.229115][ T9107] hpfs: hpfs_map_4sectors(): unaligned read
[  182.236380][ T9107] hpfs: filesystem error: unable to find root dir
[  182.245989][ T9107] hpfs: hpfs_map_4sectors(): unaligned read
[  182.480659][ T9112] loop5: detected capacity change from 0 to 4096
[  182.496611][ T9112] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.512153][ T9112] EXT4-fs (loop5): shut down requested (2)
[  182.538471][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.556603][ T9110] loop1: detected capacity change from 0 to 32768
[  182.648382][ T9110] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io
[  182.648407][ T9110]   allowing incompatible features above 0.0: (unknown version)
[  182.648416][ T9110]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  182.672682][ T9110] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  182.679588][ T9117] loop5: detected capacity change from 0 to 4096
[  182.680078][ T9110] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[  182.697979][ T9110] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=data_usage in superblock: invalid journal entry usage: no devices in entry free: 0/0 [], fixing
[  182.701753][ T9117] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  182.711196][ T9110] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  182.715786][ T9110] bcachefs (loop1): Version upgrade required:
[  182.715786][ T9110] Version upgrade from 0.27: fragmentation_lru to 1.7: mi_btree_bitmap incomplete
[  182.715786][ T9110] Doing incompatible version upgrade from 0.27: fragmentation_lru to 1.28: inode_has_case_insensitive
[  182.715786][ T9110]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  182.772728][ T9110] bcachefs (loop1): btree node read error at btree alloc level 0/0
[  182.772776][ T9110]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  182.772784][ T9110]   loop1 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 11015804688548233216 > 4294967295
[  182.772790][ T9110]   u64s 3 fields 64:0, 64:0, 32:11015804688548233216, 0:0, 0:0, 0:0
[  182.772795][ T9110]   loop1 btree validate error
[  182.772799][ T9110]   flagging btree alloc lost data
[  182.772803][ T9110]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  182.772808][ T9110]   ret btree_node_read_err_bad_node
[  182.849295][ T9110] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  182.865951][ T9110] bcachefs (loop1): invalid bkey in btree_node btree=freespace level=0: u64s 5 type set 0:35:0 len 0 ver 0
[  182.866007][ T9110]   size == 0, deleting
[  182.879880][ T9110] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  182.893544][ T9110] bcachefs (loop1): btree node read error at btree backpointers level 0/0
[  182.893565][ T9110]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  182.893576][ T9110]   loop1 node offset 0/24 bset u64s 0: checksum error, type none: got  should be 
[  182.893583][ T9110]   loop1 btree validate error
[  182.893590][ T9110]   flagging btree backpointers lost data
[  182.893597][ T9110]   ret fsck_errors_not_fixed
[  182.919978][ T9110] bcachefs (loop1): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[  182.957116][ T9110] bcachefs (loop1): check_topology... done
[  182.969340][ T9110] bcachefs (loop1): accounting_read... done
[  182.989791][ T9110] bcachefs (loop1): alloc_read... done
[  183.004572][ T9110] bcachefs (loop1): snapshots_read... done
[  183.018318][ T9110] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  183.033116][ T9110] bcachefs (loop1): done starting filesystem
[  183.060491][ T5914] IPVS: starting estimator thread 0...
[  183.151155][ T9129] IPVS: using max 82 ests per chain, 196800 per kthread
[  183.179204][ T5853] bcachefs (loop1): shutting down
[  183.292220][ T5853] bcachefs (loop1): shutdown complete
[  183.383593][ T9144] syz.6.1060 (9144): /proc/9143/oom_adj is deprecated, please use /proc/9143/oom_score_adj instead.
[  183.389948][ T9146] loop5: detected capacity change from 0 to 16
[  183.397882][ T9146] erofs (device loop5): mounted with root inode @ nid 36.
[  183.404498][ T9146] erofs (device loop5): readahead error at folio 2 @ nid 89
[  183.429837][   T57] erofs (device loop5): failed to decompress -33 in[4096, 0] out[8192]
[  183.438213][ T9146] erofs (device loop5): failed to decompress -33 in[4096, 0] out[4096]
[  183.442680][ T9146] erofs (device loop5): read error -117 @ 0 of nid 89
[  183.447740][   T33] audit: type=1800 audit(1757266550.977:43): pid=9146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1061" name="file3" dev="loop5" ino=89 res=0 errno=0
[  183.577987][ T9155] loop6: detected capacity change from 0 to 512
[  183.587378][ T9155] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.1065: iget: bad extended attribute block 1
[  183.599689][ T9155] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1065: couldn't read orphan inode 15 (err -117)
[  183.608443][ T9155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.688543][ T8654] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /26/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  183.705774][ T8654] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  183.722734][ T8654] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /26/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  183.742690][ T8654] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  183.757792][ T8654] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /26/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  183.785229][ T8654] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  183.800533][ T8654] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /26/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  183.815083][ T8654] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  183.828715][ T8654] EXT4-fs error (device loop6): ext4_readdir:264: inode #11: block 20: comm syz-executor: path /26/file0/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=393216, rec_len=0, size=1024 fake=0
[  183.839741][ T8654] EXT4-fs error (device loop6): ext4_empty_dir:3120: inode #11: block 20: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=393216, rec_len=0, size=1024 fake=0
[  184.267856][ T9165] loop5: detected capacity change from 0 to 32768
[  184.274954][ T8654] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.281884][ T9165] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  184.281884][ T9165] clean (size 2912):
[  184.281884][ T9165] flags:          0
[  184.281884][ T9165] journal_seq:    8
[  184.281884][ T9165] usage: type=inodes v=8
[  184.281884][ T9165] usage: type=key_version v=0
[  184.281884][ T9165] usage: type=reserved v=0
[  184.281884][ T9165] usage: type=reserved v=0
[  184.281884][ T9165] usage: type=reserved v=0
[  184.281884][ T9165] usage: type=(unknown fs_usage_type 3) v=0
[  184.281884][ T9165] data_usage: btree: 1/1 [0]=2816
[  184.281884][ T9165] data_usage: journal: 1/1 [0]=0
[  184.281884][ T9165] data_usage: user: 1/1 [0]=32
[  184.281884][ T9165] dev_usage: dev=0  
[  184.281884][ T9165]   free: buckets=83 sectors=0 fragmented=0
[  184.281884][ T9165]   sb: buckets=25 sectors=6152 fragmented=248
[  184.281884][ T9165]   journal: buckets=8 sectors=2048 fragmented=0
[  184.281884][ T9165]   btree: buckets=11 sectors=2816 fragmented=0
[  184.281884][ T9165]   user: buckets=1 sectors=32 fragmented=224
[  184.281884][ T9165]   cached: buckets=0 sectors=0 fragmented=0
[  184.281884][ T9165]   parity: buckets=0 sectors=0 fragmented=0
[  184.281884][ T9165]   stripe: buckets=0 sectors=0 fragmented=0
[  184.281884][ T9165]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  184.281884][ T9165]   need_discard: buckets=0 sectors=0 fragmented=0
[  184.281884][ T9165] clock: read=0
[  184.281884][ T9165] clock: write=1288
[  184.281884][ T9165] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 720575940379
[  184.282085][ T9165] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  184.396242][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.400149][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.613958][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.628352][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.755070][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.759551][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.883206][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  184.887556][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.967525][ T9185] loop5: detected capacity change from 0 to 512
[  184.972251][ T9185] EXT4-fs: Ignoring removed nomblk_io_submit option
[  184.974872][ T9185] EXT4-fs: Ignoring removed bh option
[  184.993424][ T9185] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  185.007678][ T9185] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.1080: corrupted inode contents
[  185.024448][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  185.034555][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  185.040464][ T9185] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #11: comm syz.5.1080: mark_inode_dirty error
[  185.040679][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  185.051476][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  185.054392][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  185.079503][ T9185] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1080: invalid indirect mapped block 1 (level 1)
[  185.117032][ T9185] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.1080: corrupted inode contents
[  185.151699][ T9185] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  185.157706][ T9185] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #11: comm syz.5.1080: corrupted inode contents
[  185.177706][ T9185] EXT4-fs error (device loop5): ext4_truncate:4666: inode #11: comm syz.5.1080: mark_inode_dirty error
[  185.194978][ T9185] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  185.217448][ T9185] EXT4-fs (loop5): 1 truncate cleaned up
[  185.259702][   T13] bridge_slave_1: left allmulticast mode
[  185.262376][   T13] bridge_slave_1: left promiscuous mode
[  185.264614][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.272983][ T9185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.289560][   T13] bridge_slave_0: left allmulticast mode
[  185.297748][   T13] bridge_slave_0: left promiscuous mode
[  185.300348][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.301851][ T9185] EXT4-fs (loop5): shut down requested (2)
[  185.331525][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.100789][ T9201] loop5: detected capacity change from 0 to 256
[  186.106104][ T9201] vfat: Bad value for 'umask'
[  186.368743][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.386498][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.397017][   T13] bond0 (unregistering): Released all slaves
[  186.835173][   T13] hsr_slave_0: left promiscuous mode
[  186.840444][   T13] hsr_slave_1: left promiscuous mode
[  186.843221][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  186.845949][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.851296][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.853891][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.879655][   T13] veth1_macvtap: left promiscuous mode
[  186.884693][   T13] veth0_macvtap: left promiscuous mode
[  186.887179][   T13] veth1_vlan: left promiscuous mode
[  186.889019][   T13] veth0_vlan: left promiscuous mode
[  186.990571][ T9207] loop5: detected capacity change from 0 to 32768
[  187.011974][ T9207] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  187.020475][ T9207] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  187.029772][ T9207] (syz.5.1089,9207,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len % 4 != 0 - offset=0, inode=65, rec_len=1023, name_len=0
[  187.036642][ T9207] (syz.5.1089,9207,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  187.039782][ T9207] (syz.5.1089,9207,0):ocfs2_symlink:1879 ERROR: status = -2
[  187.045421][ T9207] (syz.5.1089,9207,0):ocfs2_symlink:2080 ERROR: status = -2
[  187.080118][ T8542] ocfs2: Unmounting device (7,5) on (node local)
[  187.093021][ T5857] Bluetooth: hci2: command tx timeout
[  187.246869][ T9221] loop1: detected capacity change from 0 to 128
[  187.351751][ T9225] loop1: detected capacity change from 0 to 512
[  187.448380][ T9223] loop5: detected capacity change from 0 to 40427
[  187.454953][ T9223] F2FS-fs (loop5): Image doesn't support compression
[  187.457437][ T9223] F2FS-fs (loop5): build fault injection rate: 690
[  187.470400][ T9223] F2FS-fs (loop5): invalid crc value
[  187.529789][ T9227] loop1: detected capacity change from 0 to 4096
[  187.547452][ T9227] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  187.557459][ T9227] ntfs3(loop1): ino=0, mi_enum_attr
[  187.590505][ T9223] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.596285][ T9223] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  187.615229][ T9227] ntfs3(loop1): volume is dirty and "force" flag is not set!
[  187.673992][ T8542] syz-executor: attempt to access beyond end of device
[  187.673992][ T8542] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.679347][ T8542] CPU: 1 UID: 0 PID: 8542 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  187.679359][ T8542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.679364][ T8542] Call Trace:
[  187.679367][ T8542]  <TASK>
[  187.679371][ T8542]  dump_stack_lvl+0x189/0x250
[  187.679387][ T8542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.679398][ T8542]  ? __pfx_queue_work_on+0x10/0x10
[  187.679411][ T8542]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.679426][ T8542]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.679445][ T8542]  f2fs_handle_critical_error+0x37c/0x540
[  187.679466][ T8542]  f2fs_write_end_io+0x886/0xb60
[  187.679489][ T8542]  __submit_merged_bio+0x27a/0x6a0
[  187.679511][ T8542]  __submit_merged_write_cond+0x255/0x530
[  187.679532][ T8542]  f2fs_write_data_pages+0x261d/0x3000
[  187.679567][ T8542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.679602][ T8542]  ? folios_put_refs+0x559/0x640
[  187.679616][ T8542]  ? __pfx_folios_put_refs+0x10/0x10
[  187.679622][ T8542]  ? rcu_is_watching+0x15/0xb0
[  187.679635][ T8542]  ? __lock_acquire+0xab9/0xd20
[  187.679652][ T8542]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.679663][ T8542]  do_writepages+0x32e/0x550
[  187.679677][ T8542]  ? do_raw_spin_unlock+0x4d/0x240
[  187.679687][ T8542]  filemap_fdatawrite+0x199/0x240
[  187.679697][ T8542]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  187.679729][ T8542]  ? do_raw_spin_unlock+0x4d/0x240
[  187.679739][ T8542]  f2fs_sync_dirty_inodes+0x31f/0x830
[  187.679753][ T8542]  f2fs_write_checkpoint+0x95a/0x1df0
[  187.679770][ T8542]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  187.679798][ T8542]  ? kill_f2fs_super+0x298/0x6c0
[  187.679808][ T8542]  kill_f2fs_super+0x2c3/0x6c0
[  187.679818][ T8542]  ? __pfx_kill_f2fs_super+0x10/0x10
[  187.679824][ T8542]  ? radix_tree_delete_item+0x2b6/0x400
[  187.679837][ T8542]  ? shrinker_free+0x2ce/0x3e0
[  187.679846][ T8542]  deactivate_locked_super+0xbc/0x130
[  187.679856][ T8542]  cleanup_mnt+0x425/0x4c0
[  187.679864][ T8542]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.679875][ T8542]  task_work_run+0x1d4/0x260
[  187.679886][ T8542]  ? __pfx_task_work_run+0x10/0x10
[  187.679893][ T8542]  ? __x64_sys_umount+0x122/0x160
[  187.679905][ T8542]  ? exit_to_user_mode_loop+0x40/0x110
[  187.679917][ T8542]  exit_to_user_mode_loop+0xec/0x110
[  187.679926][ T8542]  do_syscall_64+0x2bd/0x3b0
[  187.679932][ T8542]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.679942][ T8542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.679949][ T8542]  ? exc_page_fault+0x9f/0xf0
[  187.679960][ T8542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.679973][ T8542] RIP: 0033:0x7f05b018ff17
[  187.679981][ T8542] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  187.679987][ T8542] RSP: 002b:00007ffce6c5cdd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  187.679996][ T8542] RAX: 0000000000000000 RBX: 00007f05b0211c05 RCX: 00007f05b018ff17
[  187.680001][ T8542] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffce6c5ce90
[  187.680005][ T8542] RBP: 00007ffce6c5ce90 R08: 0000000000000000 R09: 0000000000000000
[  187.680009][ T8542] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffce6c5df20
[  187.680013][ T8542] R13: 00007f05b0211c05 R14: 000000000002dc87 R15: 00007ffce6c5df60
[  187.680048][ T8542]  </TASK>
[  187.680053][ T8542] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  188.205810][   T13] team0 (unregistering): Port device team_slave_1 removed
[  188.211807][ T5914] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  188.270227][   T13] team0 (unregistering): Port device team_slave_0 removed
[  188.392742][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.397094][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  188.403138][ T5914] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[  188.406901][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.413711][ T5914] usb 2-1: config 0 descriptor??
[  188.746429][ T9236] U9: renamed from lo (while UP)
[  188.857747][ T5914] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  188.860688][ T5914] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  188.868512][ T9188] chnl_net:caif_netlink_parms(): no params data found
[  188.878200][ T5914] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  188.883996][ T5914] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  188.886705][ T5914] uclogic 0003:5543:0003.000D: unknown main item tag 0x0
[  188.893079][ T5914] uclogic 0003:5543:0003.000D: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0
[  189.094201][ T8179] usb 2-1: USB disconnect, device number 23
[  189.172139][ T5857] Bluetooth: hci2: command tx timeout
[  189.199643][ T9188] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.204537][ T9188] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.207214][ T9188] bridge_slave_0: entered allmulticast mode
[  189.210253][ T9188] bridge_slave_0: entered promiscuous mode
[  189.220693][ T9188] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.226400][ T9188] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.229673][ T9188] bridge_slave_1: entered allmulticast mode
[  189.245599][ T9188] bridge_slave_1: entered promiscuous mode
[  189.275662][ T9256] loop5: detected capacity change from 0 to 128
[  189.279289][ T9188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.294470][ T9256] ufs: You didn't specify the type of your ufs filesystem
[  189.294470][ T9256] 
[  189.294470][ T9256] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  189.294470][ T9256] 
[  189.294470][ T9256] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  189.305765][ T9188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  189.344890][ T9256] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  189.358058][ T9188] team0: Port device team_slave_0 added
[  189.379615][ T9188] team0: Port device team_slave_1 added
[  189.416772][ T9261] netlink: 504 bytes leftover after parsing attributes in process `syz.5.1104'.
[  189.474491][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_0
[  189.477808][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.490369][ T9188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  189.506178][ T9188] batman_adv: batadv0: Adding interface: batadv_slave_1
[  189.509091][ T9188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  189.523784][ T9188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  189.562741][ T9188] hsr_slave_0: entered promiscuous mode
[  189.565470][ T9188] hsr_slave_1: entered promiscuous mode
[  189.567899][ T9188] debugfs: 'hsr0' already exists in 'hsr'
[  189.570288][ T9188] Cannot create hsr debugfs directory
[  189.787598][ T9271] loop1: detected capacity change from 0 to 512
[  189.799798][ T9271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  189.822045][ T9271] EXT4-fs (loop1): 1 truncate cleaned up
[  189.826552][ T9271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.900112][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.926875][ T9188] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  189.935538][ T9188] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  189.948616][ T9188] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  189.958543][ T9188] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  190.066255][ T9188] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.095756][ T9188] 8021q: adding VLAN 0 to HW filter on device team0
[  190.124221][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.126581][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.132147][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.134581][ T4636] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.307698][ T9188] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.341073][ T8179] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  190.501853][ T8179] usb 2-1: Using ep0 maxpacket: 16
[  190.516083][ T8179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  190.530273][ T8179] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  190.540508][ T8179] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.544114][ T9188] veth0_vlan: entered promiscuous mode
[  190.556812][ T8179] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  190.563530][ T8179] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.570288][ T9188] veth1_vlan: entered promiscuous mode
[  190.574381][ T8179] usb 2-1: config 0 descriptor??
[  190.596686][ T8179] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  190.657946][ T9188] veth0_macvtap: entered promiscuous mode
[  190.690824][ T9188] veth1_macvtap: entered promiscuous mode
[  190.730554][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.753632][ T9188] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.764858][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.768070][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.780820][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.787265][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.791404][ T8179] usb 2-1: USB disconnect, device number 24
[  190.890668][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.898514][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  190.926576][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  190.929913][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.015471][ T9319] IPv6: sit1: Disabled Multicast RS
[  191.079217][ T9317] loop5: detected capacity change from 0 to 32768
[  191.114028][ T9317] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  191.117533][ T9317] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.154873][ T9317] XFS (loop5): Ending clean mount
[  191.158073][ T9317] XFS (loop5): Quotacheck needed: Please wait.
[  191.219056][ T9317] XFS (loop5): Quotacheck: Done.
[  191.251451][ T5857] Bluetooth: hci2: command tx timeout
[  191.275287][ T9333] team0: Device gtp0 is of different type
[  191.317970][ T8542] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  191.643367][ T9344] loop1: detected capacity change from 0 to 512
[  191.688404][ T9344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.713495][ T9344] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.768819][   T33] audit: type=1800 audit(1757266559.307:44): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1123" name="file2" dev="loop1" ino=16 res=0 errno=0
[  191.836379][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.150460][ T9366] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  192.178504][ T9351] loop7: detected capacity change from 0 to 40427
[  192.199360][ T9351] F2FS-fs (loop7): Image doesn't support compression
[  192.206113][ T9351] F2FS-fs (loop7): build fault injection rate: 690
[  192.227655][ T9351] F2FS-fs (loop7): invalid crc value
[  192.370728][ T9351] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  192.386476][ T9351] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  192.447423][   T33] audit: type=1800 audit(1757266559.987:45): pid=9351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1124" name="file1" dev="loop7" ino=10 res=0 errno=0
[  192.515872][ T9188] syz-executor: attempt to access beyond end of device
[  192.515872][ T9188] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  192.541770][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  192.541785][ T9188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  192.541789][ T9188] Call Trace:
[  192.541807][ T9188]  <TASK>
[  192.541813][ T9188]  dump_stack_lvl+0x189/0x250
[  192.541829][ T9188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  192.541838][ T9188]  ? __pfx_queue_work_on+0x10/0x10
[  192.541848][ T9188]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  192.541859][ T9188]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  192.541873][ T9188]  f2fs_handle_critical_error+0x37c/0x540
[  192.541888][ T9188]  f2fs_write_end_io+0x886/0xb60
[  192.541903][ T9188]  __submit_merged_bio+0x27a/0x6a0
[  192.541916][ T9188]  __submit_merged_write_cond+0x255/0x530
[  192.541928][ T9188]  f2fs_write_data_pages+0x261d/0x3000
[  192.541938][ T9188]  ? __pfx_usage_match+0x10/0x10
[  192.541945][ T9188]  ? __bfs+0x154/0x2a0
[  192.541963][ T9188]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.541972][ T9188]  ? __switch_to+0xdae/0x1670
[  192.542032][ T9188]  ? rcu_is_watching+0x15/0xb0
[  192.542046][ T9188]  ? trace_sched_exit_tp+0x36/0x110
[  192.542062][ T9188]  ? __schedule+0x17ae/0x4cc0
[  192.542079][ T9188]  ? folios_put_refs+0x559/0x640
[  192.542101][ T9188]  ? __lock_acquire+0xab9/0xd20
[  192.542123][ T9188]  ? do_raw_spin_lock+0x121/0x290
[  192.542144][ T9188]  ? do_raw_spin_unlock+0x4d/0x240
[  192.542158][ T9188]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  192.542176][ T9188]  do_writepages+0x32e/0x550
[  192.542199][ T9188]  ? do_raw_spin_unlock+0x4d/0x240
[  192.542214][ T9188]  filemap_fdatawrite+0x199/0x240
[  192.542228][ T9188]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  192.542276][ T9188]  ? do_raw_spin_unlock+0x4d/0x240
[  192.542293][ T9188]  f2fs_sync_dirty_inodes+0x31f/0x830
[  192.542314][ T9188]  f2fs_write_checkpoint+0x95a/0x1df0
[  192.542342][ T9188]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  192.542388][ T9188]  ? kill_f2fs_super+0x298/0x6c0
[  192.542404][ T9188]  kill_f2fs_super+0x2c3/0x6c0
[  192.542421][ T9188]  ? __pfx_kill_f2fs_super+0x10/0x10
[  192.542430][ T9188]  ? radix_tree_delete_item+0x2b6/0x400
[  192.542453][ T9188]  ? shrinker_free+0x2ce/0x3e0
[  192.542468][ T9188]  deactivate_locked_super+0xbc/0x130
[  192.542485][ T9188]  cleanup_mnt+0x425/0x4c0
[  192.542499][ T9188]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.542518][ T9188]  task_work_run+0x1d4/0x260
[  192.542537][ T9188]  ? __pfx_task_work_run+0x10/0x10
[  192.542551][ T9188]  ? __x64_sys_umount+0x122/0x160
[  192.542570][ T9188]  ? exit_to_user_mode_loop+0x40/0x110
[  192.542596][ T9188]  exit_to_user_mode_loop+0xec/0x110
[  192.542613][ T9188]  do_syscall_64+0x2bd/0x3b0
[  192.542623][ T9188]  ? lockdep_hardirqs_on+0x9c/0x150
[  192.542638][ T9188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.542650][ T9188]  ? exc_page_fault+0x9f/0xf0
[  192.542668][ T9188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  192.542679][ T9188] RIP: 0033:0x7f737878ff17
[  192.542692][ T9188] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  192.542702][ T9188] RSP: 002b:00007ffedddc9748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  192.542716][ T9188] RAX: 0000000000000000 RBX: 00007f7378811c05 RCX: 00007f737878ff17
[  192.542724][ T9188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedddc9800
[  192.542732][ T9188] RBP: 00007ffedddc9800 R08: 0000000000000000 R09: 0000000000000000
[  192.542739][ T9188] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedddca890
[  192.542746][ T9188] R13: 00007f7378811c05 R14: 000000000002ef45 R15: 00007ffedddca8d0
[  192.542767][ T9188]  </TASK>
[  192.542957][ T9188] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  193.344119][ T5857] Bluetooth: hci2: command tx timeout
[  194.033627][ T9387] loop1: detected capacity change from 0 to 1024
[  194.036235][ T9392] trusted_key: syz.5.1140 sent an empty control message without MSG_MORE.
[  194.047552][ T9387] EXT4-fs: Ignoring removed orlov option
[  194.076168][ T9387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.130121][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.220055][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.227476][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.236625][ T9406] loop1: detected capacity change from 0 to 512
[  194.247173][ T9406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  194.262776][ T9406] EXT4-fs (loop1): 1 truncate cleaned up
[  194.266393][ T9406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.330949][   T33] audit: type=1800 audit(1757266561.847:46): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1144" name="file1" dev="loop1" ino=15 res=0 errno=0
[  194.376048][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.637414][ T9417] loop5: detected capacity change from 0 to 16384
[  194.681049][ T5899] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  194.741488][ T9417] bcachefs (loop5): starting version 1.13: inode_has_child_snapshots opts=errors=continue,metadata_checksum=none,data_checksum=none,grpquota,norecovery,reconstruct_alloc
[  194.741512][ T9417]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  194.755422][ T9417] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  194.759479][ T9417] bcachefs (loop5): invalid journal entry, version=1.13: inode_has_child_snapshots type=clock in superblock: bad size, fixing
[  194.767613][ T9417] bcachefs (loop5): recovering from clean shutdown, journal seq 18
[  194.771691][ T9417] bcachefs (loop5): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  194.771691][ T9417]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  194.781806][ T9417] bcachefs (loop5): dropping and reconstructing all alloc info
[  194.798487][ T9417] bcachefs (loop5): accounting_read... done
[  194.810087][ T9417] bcachefs (loop5): alloc_read... done
[  194.813215][ T9417] bcachefs (loop5): snapshots_read... done
[  194.816541][ T9417] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  194.821382][ T9417] bcachefs (loop5): reading quotas
[  194.825507][ T9417] bcachefs (loop5): quotas done
[  194.827923][ T9417] bcachefs (loop5): done starting filesystem
[  194.834457][ T5899] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  194.838307][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.852058][ T5899] usb 2-1: config 0 descriptor??
[  194.881580][ T5899] cp210x 2-1:0.0: cp210x converter detected
[  194.893094][ T8542] bcachefs (loop5): shutting down
[  194.928091][ T8542] bcachefs (loop5): shutdown complete
[  195.029648][ T9423] loop7: detected capacity change from 0 to 32768
[  195.074230][ T9423] ocfs2: Mounting device (7,7) on (node local, slot 0) with writeback data mode.
[  195.128107][ T9188] ocfs2: Unmounting device (7,7) on (node local)
[  195.273120][ T9434] loop7: detected capacity change from 0 to 1024
[  195.278396][ T9434] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  195.292391][ T9434] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  195.295347][ T9434] EXT4-fs (loop7): orphan cleanup on readonly fs
[  195.321251][ T9434] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz.7.1155: Invalid inode table block 0 in block_group 0
[  195.337490][ T9434] EXT4-fs (loop7): Remounting filesystem read-only
[  195.340394][ T9434] Quota error (device loop7): write_blk: dquota write failed
[  195.346546][ T9434] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[  195.354547][ T9434] EXT4-fs (loop7): 1 truncate cleaned up
[  195.370646][ T9434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.419957][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.477474][ T5899] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  195.481203][ T5899] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  195.498109][ T5899] usb 2-1: cp210x converter now attached to ttyUSB0
[  195.513301][ T5899] usb 2-1: USB disconnect, device number 25
[  195.519659][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  195.528251][ T5899] cp210x 2-1:0.0: device disconnected
[  196.907343][ T9473] loop7: detected capacity change from 0 to 1024
[  196.936271][ T9473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.942429][ T9473] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.967519][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.354643][ T9457] loop1: detected capacity change from 0 to 262144
[  197.358404][ T9457] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1164 (9457)
[  197.387175][ T9457] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  197.392356][ T9457] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  197.468191][ T1088] BTRFS warning (device loop1): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  197.480107][   T96] kernel write not supported for file /230/attr/exec (pid: 96 comm: kworker/0:2)
[  197.492494][ T9457] BTRFS info (device loop1): read error corrected: ino 0 off 22036480 (dev /dev/loop1 sector 43040)
[  197.496503][ T9457] BTRFS info (device loop1): read error corrected: ino 0 off 22040576 (dev /dev/loop1 sector 43048)
[  197.501807][ T9457] BTRFS info (device loop1): read error corrected: ino 0 off 22044672 (dev /dev/loop1 sector 43056)
[  197.505938][ T9457] BTRFS info (device loop1): read error corrected: ino 0 off 22048768 (dev /dev/loop1 sector 43064)
[  197.526425][ T9457] BTRFS info (device loop1): enabling ssd optimizations
[  197.529537][ T9457] BTRFS info (device loop1): enabling free space tree
[  197.597929][ T9457] BTRFS info (device loop1): balance: start -d -m -s
[  197.613441][ T9457] BTRFS info (device loop1): relocating block group 30408704 flags metadata|dup
[  197.655313][ T9457] BTRFS info (device loop1): found 3 extents, stage: move data extents
[  197.676519][ T9457] BTRFS info (device loop1): relocating block group 22020096 flags system|dup
[  197.695392][ T9457] BTRFS info (device loop1): found 1 extents, stage: move data extents
[  197.711259][ T9457] BTRFS info (device loop1): relocating block group 13631488 flags data
[  197.752070][ T9457] BTRFS info (device loop1): found 1 extents, stage: move data extents
[  197.769776][ T9457] BTRFS info (device loop1): found 1 extents, stage: update data pointers
[  197.790125][ T9457] BTRFS info (device loop1): balance: ended with status: 0
[  197.888515][ T5853] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  197.951083][ T5899] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  198.006480][ T9509] loop7: detected capacity change from 0 to 512
[  198.054756][ T9509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.059892][ T9509] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  198.138243][ T5899] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  198.142255][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.150394][ T5899] usb 6-1: config 0 descriptor??
[  198.165660][ T5899] cp210x 6-1:0.0: cp210x converter detected
[  198.213983][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.606089][ T5899] usb 6-1: cp210x converter now attached to ttyUSB0
[  198.790469][ T5899] usb 6-1: USB disconnect, device number 5
[  198.797779][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  198.810324][ T5899] cp210x 6-1:0.0: device disconnected
[  198.920594][ T9525] loop1: detected capacity change from 0 to 32768
[  198.925289][ T9525] XFS: noikeep mount option is deprecated.
[  198.927862][ T9525] XFS: noikeep mount option is deprecated.
[  198.941070][ T9525] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  198.960614][ T9525] XFS (loop1): Ending clean mount
[  198.967416][ T9525] XFS (loop1): Quotacheck needed: Please wait.
[  199.013762][ T9525] XFS (loop1): Quotacheck: Done.
[  199.053185][ T5853] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.370815][ T9543] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  199.447183][ T9549] loop5: detected capacity change from 0 to 16
[  199.450708][ T9549] erofs (device loop5): mounted with root inode @ nid 36.
[  199.457661][   T57] erofs (device loop5): failed to decompress -26 in[46, 0] out[9000]
[  199.465053][ T9549] erofs (device loop5): failed to decompress -26 in[46, 4050] out[8192]
[  199.468263][ T9549] erofs (device loop5): read error -117 @ 1 of nid 89
[  199.473512][   T33] audit: type=1800 audit(1757266566.997:47): pid=9549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1191" name="file2" dev="loop5" ino=89 res=0 errno=0
[  199.555642][ T9535] loop1: detected capacity change from 0 to 32768
[  199.618658][ T9535] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.649825][ T9535] XFS (loop1): Ending clean mount
[  199.655557][ T9535] XFS (loop1): Quotacheck needed: Please wait.
[  199.657613][ T9567] IPv6: addrconf: prefix option has invalid lifetime
[  199.714980][ T9535] XFS (loop1): Quotacheck: Done.
[  199.794598][ T9535] evm: overlay not supported
[  199.879904][ T5853] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  199.889713][ T9575] loop7: detected capacity change from 0 to 128
[  199.956327][ T9577] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1201'.
[  200.261089][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  200.321137][   T96] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  200.395099][ T9583] loop5: detected capacity change from 0 to 1024
[  200.399227][ T9583] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.414561][ T9583] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  200.418149][ T9583] System zones: 0-1, 3-36
[  200.422685][    T9] usb 8-1: Using ep0 maxpacket: 8
[  200.430568][ T9583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.437817][    T9] usb 8-1: config 0 has an invalid interface number: 60 but max is 0
[  200.441423][    T9] usb 8-1: config 0 has no interface number 0
[  200.446311][    T9] usb 8-1: config 0 interface 60 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  200.450373][    T9] usb 8-1: config 0 interface 60 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  200.468606][    T9] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=68.09
[  200.474886][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.479370][    T9] usb 8-1: Product: syz
[  200.485972][   T96] usb 2-1: unable to get BOS descriptor or descriptor too short
[  200.489848][    T9] usb 8-1: Manufacturer: syz
[  200.492029][    T9] usb 8-1: SerialNumber: syz
[  200.494342][   T96] usb 2-1: config 129 has an invalid interface number: 135 but max is 0
[  200.497753][   T96] usb 2-1: config 129 has an invalid interface number: 5 but max is 0
[  200.505441][    T9] usb 8-1: config 0 descriptor??
[  200.507924][   T96] usb 2-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config
[  200.520363][   T96] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  200.526617][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.530182][   T96] usb 2-1: config 129 has no interface number 0
[  200.530652][    T9] as10x_usb: device has been detected
[  200.536047][   T96] usb 2-1: config 129 has no interface number 1
[  200.538855][   T96] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  200.548632][    T9] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan)
[  200.555491][   T96] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  200.571164][   T96] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  200.576615][   T96] usb 2-1: config 129 interface 135 has no altsetting 0
[  200.586084][ T9586] netlink: 'syz.5.1204': attribute type 39 has an invalid length.
[  200.598413][   T96] usb 2-1: config 129 interface 5 has no altsetting 0
[  200.631930][    T9] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)...
[  200.653052][   T96] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  200.656683][   T96] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.659977][   T96] usb 2-1: SerialNumber: Е
[  200.679348][    T9] as10x_usb: error during firmware upload part1
[  200.684352][    T9] Registered device Abilis Systems DVB-Titan
[  200.732976][    T9] usb 8-1: USB disconnect, device number 2
[  200.806348][    T9] Unregistered device Abilis Systems DVB-Titan
[  200.822185][    T9] as10x_usb: device has been disconnected
[  200.898101][   T96] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  200.903382][   T96] usb 2-1: MIDIStreaming interface descriptor not found
[  200.937559][   T96] usb 2-1: USB disconnect, device number 26
[  200.995266][ T5968] udevd[5968]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.023416][ T9596] loop5: detected capacity change from 0 to 4096
[  201.035414][ T9596] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  201.078586][ T9596] ntfs3(loop5): ino=1a, mi_enum_attr
[  201.083099][ T9596] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  201.086073][ T9596] ntfs3(loop5): ino=1a, mi_enum_attr
[  201.087842][ T9596] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  201.116363][   T33] audit: type=1800 audit(1757266568.647:48): pid=9596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1206" name="file1" dev="loop5" ino=24 res=0 errno=0
[  201.238731][ T9611] loop5: detected capacity change from 0 to 164
[  201.265288][ T9611] iso9660: Corrupted directory entry in block 2 of inode 1792
[  201.973659][ T9364] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  202.232309][ T9364] usb 8-1: Using ep0 maxpacket: 16
[  202.355436][ T9364] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.359787][ T9364] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  202.364376][ T9364] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  202.369114][ T9364] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  202.373507][ T9364] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  202.475867][ T9364] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  202.484345][ T9364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.487716][ T9364] usb 8-1: Product: syz
[  202.501215][ T9364] usb 8-1: Manufacturer: syz
[  202.503290][ T9364] usb 8-1: SerialNumber: syz
[  202.522203][ T9364] usb 8-1: config 0 descriptor??
[  202.775668][ T9364] appledisplay: Apple Cinema Display connected
[  202.981291][ T2252] usb 8-1: USB disconnect, device number 3
[  202.981394][    C1] usb 8-1: appledisplay_complete - usb_submit_urb failed with result -19
[  202.996448][ T2252] appledisplay: Apple Cinema Display disconnected
[  203.021179][ T3146] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  203.197105][ T3146] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  203.205911][ T3146] usb 6-1: config 0 has no interface number 0
[  203.223167][ T3146] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  203.230765][ T3146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.236890][ T3146] usb 6-1: Product: syz
[  203.238970][ T3146] usb 6-1: Manufacturer: syz
[  203.250643][ T3146] usb 6-1: SerialNumber: syz
[  203.288061][ T3146] usb 6-1: config 0 descriptor??
[  203.508540][ T3146] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  203.530791][ T3146] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  203.537415][ T3146] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  203.544797][ T3146] usb 6-1: media controller created
[  203.565284][ T3146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  203.727032][ T9661] loop1: detected capacity change from 0 to 4096
[  203.742487][ T9661] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  203.750155][ T9661] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  203.753837][ T9661] NILFS (loop1): mounting unchecked fs
[  203.779152][ T9661] NILFS (loop1): recovery complete
[  203.791641][ T9662] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.859785][ T9659] loop7: detected capacity change from 0 to 32768
[  203.953586][ T3146] usb 6-1: USB disconnect, device number 6
[  204.038873][ T9667] loop7: detected capacity change from 0 to 1024
[  204.727232][ T9679] netlink: 'syz.5.1230': attribute type 1 has an invalid length.
[  204.946362][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1233'.
[  205.709797][ T9688] loop7: detected capacity change from 0 to 32768
[  205.723448][ T9688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1235 (9688)
[  205.817482][ T9688] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  205.828737][ T9688] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  205.832446][ T9688] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  206.008341][ T9688] BTRFS info (device loop7): rebuilding free space tree
[  206.037449][ T9688] BTRFS info (device loop7): disabling free space tree
[  206.040509][ T9688] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  206.045576][ T9688] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  206.066727][ T9688] BTRFS info (device loop7): enabling ssd optimizations
[  206.069813][ T9688] BTRFS info (device loop7): turning off barriers
[  206.073385][ T9688] BTRFS info (device loop7): disabling tree log
[  206.078420][ T9688] BTRFS info (device loop7): turning on flush-on-commit
[  206.082307][ T9688] BTRFS info (device loop7): enabling disk space caching
[  206.085310][ T9688] BTRFS info (device loop7): force clearing of disk cache
[  206.087722][ T9688] BTRFS info (device loop7): doing ref verification
[  206.089950][ T9688] BTRFS info (device loop7): use lzo compression, level 0
[  206.370298][ T9713] binder: 9712:9713 ioctl c018620c 2000000000c0 returned -1
[  206.419601][ T9188] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.968181][ T9732] loop1: detected capacity change from 0 to 256
[  207.313418][ T9749] loop7: detected capacity change from 0 to 16
[  207.323859][ T9749] erofs (device loop7): mounted with root inode @ nid 36.
[  207.444203][ T9757] openvswitch: netlink: VXLAN extension 2 out of range max 1
[  207.499068][ T9761] loop5: detected capacity change from 0 to 65
[  207.512688][ T9761] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing
[  207.515248][ T9761] BFS-fs: bfs_fill_super(): NOTE: filesystem loop5 was created with 512 inodes, the real maximum is 511, mounting anyway
[  207.730991][ T5899] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  207.741682][ T9766] loop5: detected capacity change from 0 to 32768
[  207.744927][ T9766] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1261 (9766)
[  207.758714][ T9766] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.771075][ T9766] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  207.815441][ T9768] loop7: detected capacity change from 0 to 40427
[  207.818648][ T9768] F2FS-fs (loop7): build fault injection rate: 14
[  207.820719][ T9768] F2FS-fs (loop7): build fault injection type: 0x3bfe8c
[  207.831421][ T9768] F2FS-fs (loop7): invalid crc value
[  207.837155][    C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  207.865356][    C1] F2FS-fs (loop7): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  207.905337][ T5899] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  207.909029][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.918516][ T9766] BTRFS info (device loop5): enabling ssd optimizations
[  207.923935][ T5899] usb 2-1: config 0 descriptor??
[  207.932448][ T9766] BTRFS info (device loop5): enabling free space tree
[  207.946939][ T5899] ums-realtek 2-1:0.0: USB Mass Storage device detected
[  207.994781][ T8542] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.028611][ T9768] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  208.046969][ T9768] F2FS-fs (loop7): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  208.079061][ T9768] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  208.102708][ T9792] loop5: detected capacity change from 0 to 128
[  208.118668][ T9792] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  208.127525][ T9768] F2FS-fs (loop7): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  208.145890][ T5899] usb 2-1: USB disconnect, device number 27
[  208.188541][ T9768] F2FS-fs (loop7): inject inconsistent footer in sanity_check_node_footer of f2fs_write_inline_data+0x9b/0x790
[  208.196447][ T9768] F2FS-fs (loop7): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  208.303070][ T5857] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  208.306140][ T5857] Bluetooth: hci2: Injecting HCI hardware error event
[  208.309475][ T5857] Bluetooth: hci2: hardware error 0x00
[  208.340743][ T9188] syz-executor: attempt to access beyond end of device
[  208.340743][ T9188] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.350169][ T9188] CPU: 0 UID: 0 PID: 9188 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  208.350188][ T9188] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.350196][ T9188] Call Trace:
[  208.350202][ T9188]  <TASK>
[  208.350208][ T9188]  dump_stack_lvl+0x189/0x250
[  208.350234][ T9188]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.350248][ T9188]  ? __pfx_queue_work_on+0x10/0x10
[  208.350261][ T9188]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.350279][ T9188]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.350305][ T9188]  f2fs_handle_critical_error+0x37c/0x540
[  208.350330][ T9188]  f2fs_write_end_io+0x886/0xb60
[  208.350358][ T9188]  __submit_merged_bio+0x27a/0x6a0
[  208.350381][ T9188]  __submit_merged_write_cond+0x255/0x530
[  208.350404][ T9188]  f2fs_write_data_pages+0x261d/0x3000
[  208.350450][ T9188]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.350510][ T9188]  ? __mod_zone_page_state+0xd7/0x140
[  208.350536][ T9188]  ? folios_put_refs+0x560/0x640
[  208.350559][ T9188]  ? __pfx_folios_put_refs+0x10/0x10
[  208.350570][ T9188]  ? rcu_is_watching+0x15/0xb0
[  208.350592][ T9188]  ? __lock_acquire+0xab9/0xd20
[  208.350624][ T9188]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.350644][ T9188]  do_writepages+0x32e/0x550
[  208.350669][ T9188]  ? do_raw_spin_unlock+0x4d/0x240
[  208.350688][ T9188]  filemap_fdatawrite+0x199/0x240
[  208.350704][ T9188]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  208.350758][ T9188]  ? do_raw_spin_unlock+0x4d/0x240
[  208.350776][ T9188]  f2fs_sync_dirty_inodes+0x31f/0x830
[  208.350802][ T9188]  f2fs_write_checkpoint+0x95a/0x1df0
[  208.350856][ T9188]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  208.350935][ T9188]  ? kill_f2fs_super+0x298/0x6c0
[  208.350954][ T9188]  kill_f2fs_super+0x2c3/0x6c0
[  208.350973][ T9188]  ? __pfx_kill_f2fs_super+0x10/0x10
[  208.350983][ T9188]  ? radix_tree_delete_item+0x2b6/0x400
[  208.351007][ T9188]  ? shrinker_free+0x2ce/0x3e0
[  208.351023][ T9188]  deactivate_locked_super+0xbc/0x130
[  208.351041][ T9188]  cleanup_mnt+0x425/0x4c0
[  208.351055][ T9188]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.351076][ T9188]  task_work_run+0x1d4/0x260
[  208.351096][ T9188]  ? __pfx_task_work_run+0x10/0x10
[  208.351109][ T9188]  ? __x64_sys_umount+0x122/0x160
[  208.351130][ T9188]  ? exit_to_user_mode_loop+0x40/0x110
[  208.351152][ T9188]  exit_to_user_mode_loop+0xec/0x110
[  208.351169][ T9188]  do_syscall_64+0x2bd/0x3b0
[  208.351179][ T9188]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.351195][ T9188]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.351206][ T9188]  ? exc_page_fault+0x9f/0xf0
[  208.351224][ T9188]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.351235][ T9188] RIP: 0033:0x7f737878ff17
[  208.351248][ T9188] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  208.351257][ T9188] RSP: 002b:00007ffedddc9748 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  208.351272][ T9188] RAX: 0000000000000000 RBX: 00007f7378811c05 RCX: 00007f737878ff17
[  208.351280][ T9188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffedddc9800
[  208.351286][ T9188] RBP: 00007ffedddc9800 R08: 0000000000000000 R09: 0000000000000000
[  208.351293][ T9188] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffedddca890
[  208.351300][ T9188] R13: 00007f7378811c05 R14: 0000000000032d06 R15: 00007ffedddca8d0
[  208.351321][ T9188]  </TASK>
[  208.486089][ T9188] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  208.710993][ T2252] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  208.756118][ T9801] tipc: Started in network mode
[  208.758453][ T9801] tipc: Node identity 917f, cluster identity 4
[  208.767831][ T9801] tipc: Node number set to 37247
[  208.770094][ T9801] tipc: Cannot configure node identity twice
[  208.873100][ T2252] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.877246][ T2252] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  208.882247][ T2252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.900780][ T2252] usb 6-1: config 0 descriptor??
[  209.355088][ T2252] itetech 0003:258A:6A88.000E: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.5-1/input0
[  209.443341][ T9832] loop1: detected capacity change from 0 to 1024
[  209.447297][ T9832] hfsplus: Filesystem is marked locked, mounting read-only.
[  209.459678][ T9832] hfsplus: invalid attributes max_key_len 0
[  209.463248][ T9832] hfsplus: failed to load attributes file
[  209.546343][ T2252] usb 6-1: USB disconnect, device number 7
[  209.831347][ T9364] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  209.997290][ T9364] usb 8-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  210.002883][ T9364] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.006138][ T9364] usb 8-1: Product: syz
[  210.007843][ T9364] usb 8-1: Manufacturer: syz
[  210.009868][ T9364] usb 8-1: SerialNumber: syz
[  210.036851][ T9364] usb 8-1: config 0 descriptor??
[  210.046053][ T9364] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  210.297770][ T9862] netlink: 'syz.5.1296': attribute type 46 has an invalid length.
[  210.307460][ T9364] gspca_sn9c2028: read1 error -71
[  210.310698][ T9364] gspca_sn9c2028: read1 error -71
[  210.315537][ T9364] gspca_sn9c2028: read1 error -71
[  210.319572][ T9364] sn9c2028 8-1:0.0: probe with driver sn9c2028 failed with error -71
[  210.328442][ T9364] usb 8-1: USB disconnect, device number 4
[  210.531313][ T5857] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  211.510542][ T9878] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  211.941316][ T9364] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  212.091121][ T9364] usb 2-1: Using ep0 maxpacket: 32
[  212.102557][ T9364] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  212.106384][ T9364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.112498][ T9364] usb 2-1: config 0 descriptor??
[  212.117225][   T96] usb 8-1: new full-speed USB device number 5 using dummy_hcd
[  212.288141][   T96] usb 8-1: config 0 has an invalid interface number: 11 but max is 0
[  212.293845][   T96] usb 8-1: config 0 has no interface number 0
[  212.296146][   T96] usb 8-1: config 0 interface 11 has no altsetting 0
[  212.299358][   T96] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  212.306476][   T96] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.334136][   T96] usb 8-1: config 0 descriptor??
[  212.348452][   T96] keyspan 8-1:0.11: Keyspan 2 port adapter converter detected
[  212.355199][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 7
[  212.376192][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 81
[  212.379753][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 82
[  212.393984][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 1
[  212.398746][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 2
[  212.402189][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 85
[  212.406127][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 5
[  212.416263][   T96] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  212.438842][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 83
[  212.450663][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 84
[  212.456431][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 3
[  212.459130][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 4
[  212.465757][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 86
[  212.468684][   T96] keyspan 8-1:0.11: found no endpoint descriptor for endpoint 6
[  212.485636][   T96] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  212.553298][ T9364] redragon 0003:0C45:760B.000F: item fetching failed at offset 0/3
[  212.568727][   T96] usb 8-1: USB disconnect, device number 5
[  212.575900][ T9364] redragon 0003:0C45:760B.000F: probe with driver redragon failed with error -22
[  212.593044][   T96] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  212.604550][   T96] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  212.619953][   T96] keyspan 8-1:0.11: device disconnected
[  212.733383][ T9900] loop5: detected capacity change from 0 to 1024
[  212.763641][   T10] usb 2-1: USB disconnect, device number 28
[  212.777527][ T9900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  212.787089][ T9900] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  212.800621][   T33] audit: type=1800 audit(1757266580.327:49): pid=9900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1315" name="file1" dev="loop5" ino=15 res=0 errno=0
[  212.810724][ T9900] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.1315: lblock 0 mapped to illegal pblock 0 (length 1)
[  212.823542][ T9900] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.1315: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  212.853329][ T8542] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  213.156412][ T9914] netlink: 'syz.7.1320': attribute type 1 has an invalid length.
[  213.159700][ T9914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  213.273807][ T9919] loop7: detected capacity change from 0 to 1024
[  213.305488][ T9919] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  213.399010][ T9919] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  213.420323][ T9919] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  213.436277][ T9919] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  213.573834][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.229350][ T9926] loop1: detected capacity change from 0 to 32768
[  214.268013][ T9926] ERROR: (device loop1): dbAlloc: unable to allocate blocks
[  214.268013][ T9926] 
[  214.283725][ T9926] jfs_rename: dtInsert returned -EIO
[  214.309135][ T9933] loop5: detected capacity change from 0 to 4096
[  214.321221][ T9933] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  214.342262][ T9933] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  214.363528][ T9933] ntfs3(loop5): Failed to load $MFT.
[  215.260137][ T9943] loop1: detected capacity change from 0 to 131072
[  215.268120][ T9943] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  215.271667][ T9943] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  215.278257][ T9943] F2FS-fs (loop1): invalid crc value
[  215.331164][ T5899] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  215.331527][ T9943] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.343299][ T9943] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  215.346394][ T9943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  215.508141][ T5899] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  215.518533][ T9975] loop5: detected capacity change from 0 to 2048
[  215.520980][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  215.534172][ T9975] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.538024][ T5899] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  215.554169][ T5899] usb 8-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  215.558161][ T5899] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.564179][ T5899] usb 8-1: Product: syz
[  215.573618][ T5899] usb 8-1: Manufacturer: syz
[  215.575685][ T5899] usb 8-1: SerialNumber: syz
[  215.595486][ T5899] usb 8-1: config 0 descriptor??
[  215.604772][ T5899] iguanair 8-1:0.0: probe with driver iguanair failed with error -12
[  215.865189][ T3146] usb 8-1: USB disconnect, device number 6
[  216.506134][ T9989] netlink: 2384 bytes leftover after parsing attributes in process `syz.1.1351'.
[  217.084497][T10032] loop7: detected capacity change from 0 to 512
[  217.126890][T10032] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  217.147530][T10032] EXT4-fs (loop7): Remounting filesystem read-only
[  217.161216][T10032] EXT4-fs (loop7): 1 truncate cleaned up
[  217.164401][T10032] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.306940][T10036] loop1: detected capacity change from 0 to 32768
[  217.340441][T10036] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  217.367817][T10036] XFS (loop1): Ending clean mount
[  217.413684][   T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  217.417731][ T5853] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  217.563266][   T10] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  217.566910][   T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  217.581343][   T10] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  217.585487][   T10] usb 8-1: config 1 has no interface number 1
[  217.588127][   T10] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  217.601067][   T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  217.604979][   T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.609322][   T10] usb 8-1: Product: syz
[  217.613433][   T10] usb 8-1: Manufacturer: syz
[  217.615748][   T10] usb 8-1: SerialNumber: syz
[  217.620286][T10052] loop1: detected capacity change from 0 to 2048
[  217.661461][T10052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.667048][T10052] ext4 filesystem being mounted at /467/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.677457][   T33] audit: type=1800 audit(1757266585.207:50): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1376" name="file0" dev="loop1" ino=13 res=0 errno=0
[  217.704899][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.846463][   T10] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  217.853758][   T10] usb 8-1: MIDIStreaming interface descriptor not found
[  217.886650][   T10] usb 8-1: USB disconnect, device number 7
[  217.982031][ T5858] udevd[5858]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.498337][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.631075][ T5914] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  218.782986][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  218.792024][ T5914] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  218.797163][ T5914] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  218.814795][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.820820][ T5914] usb 6-1: config 0 descriptor??
[  218.823896][T10063] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  218.828733][T10067] loop7: detected capacity change from 0 to 32768
[  218.855056][T10067] bcachefs (/dev/loop7): error validating superblock: Invalid superblock layout type 7
[  218.859195][T10067] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_type
[  219.053769][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.057860][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.062068][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  219.065584][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  219.068856][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  219.080125][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.083061][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.086410][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.089722][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.093166][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  219.284507][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1391'.
[  219.504071][ T5914] usb 6-1: string descriptor 0 read error: -71
[  219.513660][ T5914] uclogic 0003:5543:0047.0010: failed retrieving string descriptor #200: -71
[  219.518353][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'.
[  219.523185][ T5914] uclogic 0003:5543:0047.0010: failed retrieving pen parameters: -71
[  219.526661][ T5914] uclogic 0003:5543:0047.0010: failed probing pen v2 parameters: -71
[  219.530316][T10090] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1392'.
[  219.538591][ T5914] uclogic 0003:5543:0047.0010: failed probing parameters: -71
[  219.546006][ T5914] uclogic 0003:5543:0047.0010: probe with driver uclogic failed with error -71
[  219.565733][ T5914] usb 6-1: USB disconnect, device number 8
[  219.676969][T10092] loop1: detected capacity change from 0 to 4096
[  219.694555][T10092] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  220.189510][T10100] loop5: detected capacity change from 0 to 256
[  220.199135][T10100] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.204029][T10100] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  220.210325][T10100] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  220.467208][T10084] loop7: detected capacity change from 0 to 262144
[  220.689741][T10084] F2FS-fs (loop7): invalid crc value
[  220.760428][T10084] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.764868][T10084] F2FS-fs (loop7): Start checkpoint disabled!
[  220.772278][T10084] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  221.193231][T10112] netlink: 495 bytes leftover after parsing attributes in process `syz.5.1400'.
[  221.289363][T10116] program syz.5.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.236210][T10142] loop7: detected capacity change from 0 to 1024
[  222.261062][T10142] EXT4-fs: inline encryption not supported
[  222.263370][T10142] EXT4-fs: Ignoring removed bh option
[  222.283723][T10142] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.388153][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.673332][T10157] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  222.673332][T10157] The task syz.1.1417 (10157) triggered the difference, watch for misbehavior.
[  223.856900][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'.
[  223.865550][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'.
[  224.731454][   T96] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  224.923046][   T96] usb 8-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  224.965482][   T96] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.034680][   T96] usb 8-1: config 0 descriptor??
[  225.044774][   T96] gspca_main: spca508-2.14.0 probing 8086:0110
[  225.094205][T10197] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ^>>Mv^侦Kc'A
[  225.463588][   T96] gspca_spca508: reg_read err -71
[  225.470197][   T96] gspca_spca508: reg_read err -71
[  225.478411][   T96] gspca_spca508: reg_read err -71
[  225.485532][   T96] gspca_spca508: reg_read err -71
[  225.505454][   T96] gspca_spca508: reg write: error -71
[  225.507824][   T96] spca508 8-1:0.0: probe with driver spca508 failed with error -71
[  225.525063][   T96] usb 8-1: USB disconnect, device number 8
[  226.070275][T10239] loop7: detected capacity change from 0 to 512
[  226.140692][T10239] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  226.147186][T10239] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  226.158114][T10239] System zones: 0-1, 15-15, 18-18, 34-34
[  226.167561][T10239] EXT4-fs (loop7): orphan cleanup on readonly fs
[  226.177407][T10239] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0
[  226.195493][T10239] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  226.225585][T10239] EXT4-fs (loop7): Cannot turn on quotas: error -22
[  226.232318][T10239] EXT4-fs (loop7): 1 truncate cleaned up
[  226.235265][T10239] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  226.274671][T10239] fscrypt (loop7, inode 16): Error -61 getting encryption context
[  226.335490][ T9188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.543279][T10225] loop1: detected capacity change from 0 to 131072
[  226.547438][T10225] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  226.551010][T10225] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  226.654618][T10225] F2FS-fs (loop1): invalid crc value
[  226.715562][T10225] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.734827][T10225] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  226.737824][T10225] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  227.098321][T10249] loop5: detected capacity change from 0 to 32768
[  227.159761][T10249] ERROR: (device loop5): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  227.159761][T10249] 
[  227.166502][T10249] ERROR: (device loop5): remounting filesystem as read-only
[  227.605445][T10278] loop1: detected capacity change from 0 to 512
[  227.851014][T10286] loop1: detected capacity change from 0 to 64
[  228.216624][T10284] &+,
[  228.416001][T10299] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  228.564234][T10303] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  228.577974][T10303] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  228.584939][T10303] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  228.600707][T10303] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2)
[  228.611939][T10302] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2)
[  228.709992][T10295] loop7: detected capacity change from 0 to 32768
[  228.733644][T10295] jfs_mount: dbMount failed w/rc = -22
[  228.736468][T10295] Mount JFS Failure: -22
[  228.796506][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1476'.
[  228.799578][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1476'.
[  228.985174][T10322] comedi comedi1: c6xdigio: I/O port conflict (0x401,3)
[  228.988413][T10322] ------------[ cut here ]------------
[  228.990653][T10322] Unexpected driver unregister!
[  228.997490][T10322] WARNING: CPU: 0 PID: 10322 at drivers/base/driver.c:273 driver_unregister+0x94/0xb0
[  229.001091][T10322] Modules linked in:
[  229.003026][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.1.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  229.008641][T10322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.013407][T10322] RIP: 0010:driver_unregister+0x94/0xb0
[  229.015879][T10322] Code: 90 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 d1 a9 be fb eb 05 e8 ca a9 be fb 90 48 c7 c7 00 fc 09 8c e8 dd 45 82 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be a6 7b 05 cc cc cc cc cc cc cc cc
[  229.024269][T10322] RSP: 0018:ffffc900071e7a40 EFLAGS: 00010246
[  229.027009][T10322] RAX: cf95fa54091e5f00 RBX: ffffffff8f3f64c0 RCX: 0000000000080000
[  229.030358][T10322] RDX: ffffc90003cb3000 RSI: 0000000000000f4d RDI: 0000000000000f4e
[  229.033842][T10322] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  229.037214][T10322] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888020eac038
[  229.040612][T10322] R13: ffffffff8f3f6410 R14: 0000000000000000 R15: dffffc0000000000
[  229.044231][T10322] FS:  00007faf4a8096c0(0000) GS:ffff8880b8618000(0000) knlGS:0000000000000000
[  229.048284][T10322] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  229.051328][T10322] CR2: 0000001b32923ffc CR3: 0000000111240000 CR4: 00000000000006f0
[  229.054840][T10322] Call Trace:
[  229.056372][T10322]  <TASK>
[  229.057641][T10322]  comedi_device_detach_locked+0x178/0x750
[  229.060173][T10322]  comedi_device_attach+0x5d4/0x720
[  229.062751][T10322]  comedi_unlocked_ioctl+0x5ff/0x1020
[  229.065061][T10322]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  229.068125][T10322]  ? __lock_acquire+0xab9/0xd20
[  229.070244][T10322]  ? __fget_files+0x2a/0x420
[  229.072473][T10322]  ? __fget_files+0x2a/0x420
[  229.074468][T10322]  ? __fget_files+0x3a0/0x420
[  229.076584][T10322]  ? __fget_files+0x2a/0x420
[  229.078593][T10322]  ? bpf_lsm_file_ioctl+0x9/0x20
[  229.080725][T10322]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  229.083511][T10322]  __se_sys_ioctl+0xfc/0x170
[  229.085576][T10322]  do_syscall_64+0xfa/0x3b0
[  229.087557][T10322]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.089888][T10322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.092897][T10322]  ? exc_page_fault+0x9f/0xf0
[  229.095070][T10322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.097711][T10322] RIP: 0033:0x7faf4998ebe9
[  229.099707][T10322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.108512][T10322] RSP: 002b:00007faf4a809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.112382][T10322] RAX: ffffffffffffffda RBX: 00007faf49bc5fa0 RCX: 00007faf4998ebe9
[  229.116286][T10322] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  229.119803][T10322] RBP: 00007faf49a11e19 R08: 0000000000000000 R09: 0000000000000000
[  229.123428][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.127104][T10322] R13: 00007faf49bc6038 R14: 00007faf49bc5fa0 R15: 00007fff63dab5b8
[  229.130663][T10322]  </TASK>
[  229.132198][T10322] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  229.135376][T10322] CPU: 0 UID: 0 PID: 10322 Comm: syz.1.1481 Not tainted syzkaller #0 PREEMPT(full) 
[  229.139131][T10322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  229.143301][T10322] Call Trace:
[  229.144726][T10322]  <TASK>
[  229.146031][T10322]  dump_stack_lvl+0x99/0x250
[  229.148082][T10322]  ? __asan_memcpy+0x40/0x70
[  229.150167][T10322]  ? __pfx_dump_stack_lvl+0x10/0x10
[  229.152376][T10322]  ? __pfx__printk+0x10/0x10
[  229.154434][T10322]  vpanic+0x281/0x750
[  229.156344][T10322]  ? __pfx__printk+0x10/0x10
[  229.158637][T10322]  ? __pfx_vpanic+0x10/0x10
[  229.160868][T10322]  ? is_bpf_text_address+0x26/0x2b0
[  229.163187][T10322]  panic+0xb9/0xc0
[  229.164863][T10322]  ? __pfx_panic+0x10/0x10
[  229.166868][T10322]  __warn+0x31b/0x4b0
[  229.168633][T10322]  ? driver_unregister+0x94/0xb0
[  229.170854][T10322]  ? driver_unregister+0x94/0xb0
[  229.172979][T10322]  report_bug+0x2be/0x4f0
[  229.174863][T10322]  ? driver_unregister+0x94/0xb0
[  229.177049][T10322]  ? driver_unregister+0x94/0xb0
[  229.179167][T10322]  ? driver_unregister+0x96/0xb0
[  229.181360][T10322]  handle_bug+0x84/0x160
[  229.183269][T10322]  exc_invalid_op+0x1a/0x50
[  229.185209][T10322]  asm_exc_invalid_op+0x1a/0x20
[  229.187357][T10322] RIP: 0010:driver_unregister+0x94/0xb0
[  229.189692][T10322] Code: 90 5d fc 48 89 df 5b 41 5e 41 5f e9 56 55 ff ff e8 d1 a9 be fb eb 05 e8 ca a9 be fb 90 48 c7 c7 00 fc 09 8c e8 dd 45 82 fb 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 be a6 7b 05 cc cc cc cc cc cc cc cc
[  229.198052][T10322] RSP: 0018:ffffc900071e7a40 EFLAGS: 00010246
[  229.200803][T10322] RAX: cf95fa54091e5f00 RBX: ffffffff8f3f64c0 RCX: 0000000000080000
[  229.204579][T10322] RDX: ffffc90003cb3000 RSI: 0000000000000f4d RDI: 0000000000000f4e
[  229.208361][T10322] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000000004
[  229.211887][T10322] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: ffff888020eac038
[  229.215246][T10322] R13: ffffffff8f3f6410 R14: 0000000000000000 R15: dffffc0000000000
[  229.218789][T10322]  comedi_device_detach_locked+0x178/0x750
[  229.221380][T10322]  comedi_device_attach+0x5d4/0x720
[  229.223729][T10322]  comedi_unlocked_ioctl+0x5ff/0x1020
[  229.226104][T10322]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  229.228619][T10322]  ? __lock_acquire+0xab9/0xd20
[  229.230828][T10322]  ? __fget_files+0x2a/0x420
[  229.232893][T10322]  ? __fget_files+0x2a/0x420
[  229.234922][T10322]  ? __fget_files+0x3a0/0x420
[  229.236994][T10322]  ? __fget_files+0x2a/0x420
[  229.239024][T10322]  ? bpf_lsm_file_ioctl+0x9/0x20
[  229.241315][T10322]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  229.243915][T10322]  __se_sys_ioctl+0xfc/0x170
[  229.245924][T10322]  do_syscall_64+0xfa/0x3b0
[  229.247986][T10322]  ? lockdep_hardirqs_on+0x9c/0x150
[  229.250325][T10322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.253069][T10322]  ? exc_page_fault+0x9f/0xf0
[  229.255229][T10322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.257945][T10322] RIP: 0033:0x7faf4998ebe9
[  229.259964][T10322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  229.268637][T10322] RSP: 002b:00007faf4a809038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  229.272304][T10322] RAX: ffffffffffffffda RBX: 00007faf49bc5fa0 RCX: 00007faf4998ebe9
[  229.275796][T10322] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  229.279090][T10322] RBP: 00007faf49a11e19 R08: 0000000000000000 R09: 0000000000000000
[  229.282560][T10322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  229.286008][T10322] R13: 00007faf49bc6038 R14: 00007faf49bc5fa0 R15: 00007fff63dab5b8
[  229.289301][T10322]  </TASK>
[  229.291452][T10322] Kernel Offset: disabled
[  229.293279][T10322] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:32:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000c183 RDI=000000000000c184 RBP=00000000000003f8 RSP=ffffc900071e71f0
R8 =ffff888021648237 R9 =1ffff110042c9046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ea R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faf4a8096c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32923ffc CR3=0000000111240000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007faf49a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffff888135400000 RBX=0000000000000000 RCX=0000000000aa7740 RDX=00000000e5435939
RSI=0000000000000000 RDI=00000000301bec5e RBP=00000000722aa774 RSP=ffffc900073d75e8
R8 =0000000067f8b6bf R9 =000000002f34cc6f R10=000000000000000d R11=ffffffff81ac3aa0
R12=ffff888135ea7740 R13=0000000000000000 R14=ffffc900073d7650 R15=ffffc900073d7650
RIP=ffffffff84fee6a8 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555591c0500 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556f28b808 CR3=0000000111bca000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
