last executing test programs:

3m41.258715181s ago: executing program 0 (id=137):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp863'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

3m41.183281623s ago: executing program 0 (id=139):
syz_mount_image$jfs(&(0x7f0000000700), &(0x7f0000000000)='./bus\x00', 0x2000002, &(0x7f0000000100)=ANY=[], 0xfe, 0x60a1, &(0x7f0000001600)="$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")
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m40.878686023s ago: executing program 0 (id=142):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

3m40.728032793s ago: executing program 0 (id=143):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjmfHTOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddg3PwAAAOCKuNF1/f+Pmfb1PwAAADBiZoedAAAAAHDhXP8DAADA6HP9DwAAACPtK6+/3pzSzu9fr765v7dZe/P2aqW+WdraWymt1HZ3Suu12nrrmX1b5+2vWqvtfDa29+6WG5V6o1zfP7izVdvbbtzZiMlLaRAAAABwypMfv/+7JCIOPzfVmpomhp0UcCnGj0pJNs/p/b9/oj1/95KSAi7FWB+vefda/nLnCfB4G+9e0KOvA6OnOOwEgKFLzlnfc/DOr7P5JwabDwAAMHhzH8v//v/87wUOC5eQHnCBdGK4uro+59OZYSUCXLrWff9+B/I4WYCRUuxrBCAwyv7v7//PlaYPlRAAADBw060pKZSy23vTUSiUShE3Wz8LUEzWNqqV+Yh4IiJ+O1O81qwvtLZMzr1mAAAAAAAAAAAAAAAAAAAAAAAAAADa0jSJFAAAABhpEYU/Jb9sP8t/bub56e77AxPJv1o/CTwREW/98I3v311uNHYXmsv/drS88YNs+YvDuIMBAAAAdOtcp7fm/xx2NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMmvcevL3Smfp4+dSg4v7lCxExmxd/PCZb88koRsT1vycxfmK7JCLGBhD/8F5EfDQvftJM6yhkXvxBvAnnxI/Z7F3Ii39jAPHhKrvfPP68ltf/CvFsa57f/8Yj/qf+QfU+/sXR8W+sR/+/2WeMp975Wbln/HsRT43nH3868ZMe8Z/rM/7Xv3Zw0Gtd+qOIuc7nT+uIdzLCcanc2Nop1/cPbm9sLa9X1ivbi4sLLy+9svTS0nx5baNayf7NjfGdp3/+/lntv577+Zdk2fRu//M5+8v7TPrPO3cffLhTOTwd/9ZzOfF/9ePsFafjF7I4n8rKzfVznfJhu3zSMz/9zTNntX/1uP3Fh/n/v9Vrp91OdZSn+/3TAQAuQH3/YHO5Wq3sjmyheZX+CKSh8AgWvjXQHaZpmjb7VM6q+xHRz36SGHBLC/n5HBd6HgGGfWQCAAAG7fikf9iZAAAAAAAAAAAAAAAAAAAAwNV1GU9Z6455/AjkZBCP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGIj/BgAA//8RHtP4")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a)

3m40.410193221s ago: executing program 0 (id=146):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='nfs=nostale_ro,uni_xlate=1,uni_xlate=0,gid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=1,nonumtail=0,iocharset=cpush,\x00'], 0x1, 0x28d, &(0x7f0000000240)="$eJzs3cFLG1kcB/BfTNZEYUkOC7LLwmbZy55EXfawp1UWF5YNtLTk0J4qNdJirKAg1IN6k/ZvaP+F9throYfSa/+BUii20Iv25KGQkk6iiU2jsYbU8vkc9PHy+zov42OcGZmXaz8vLc4vry7s7e1ELpeKzHRE7KeiEEORjsRWAADfkv1aLXZriVPEh/owJACgz/Zrf92NOPXffwDgHOpw/X9wTZ/aOui7OJjRAQD98EX3/939B4Bz6fKVq//PlEqzl4rFXMTS9lp5rZx8T16fWYibUY1KTEQ+3jf/U5CcLdS//vtfaXaiWPe6ELmlzUZ+c62cbs9PRj4KnfOTxUSUW/PfxWgj/2I0KjEV+fihc36qY344fv+tZfvjkY/n12M5qjEf9WySz0bExmSx+M+F0mG+fl5Tzn6sAwAAAAAAAAAAAAAAAAAAAACAfhgvNuUaPe3r94wfFhTa19dJqlvXBxrpuj7Q0fV5MvFTZnDvGwAAAAAAAAAAAAAAAAAAAL4mq7fXF+eq1cpKt8atZw+e7GSTwFy1+dT+camOjVQj3Ftq+6TFf598PN//+ure0Zcysb6Y7X3/nG3j8S8D2GhlJTK9pJ7u3Pjxj9WxPz9XE5nWnjv16dJWU59IHX5y5ix3+FDLFH2bjxg+7aTt3njYbEy/+6SmOZkqKyOD+J22NsbuT8892nj5ptGTjmNSXQ4atfTZH4gAAAAAAAAAAAAAAAAAAICWx60HPRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGJzDz//vtZGNtp5cW83wwQZ2awN9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUPchAAD//26KiX0=")
syz_mount_image$fuse(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000004c0)='smb3\x00', 0x0, &(0x7f0000000500)='acl')

3m39.949264362s ago: executing program 0 (id=149):
unshare(0x22020600)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/252, 0xfc)

3m39.760064983s ago: executing program 32 (id=149):
unshare(0x22020600)
r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x4)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
read(r2, &(0x7f0000000040)=""/252, 0xfc)

3m15.506398385s ago: executing program 2 (id=306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r1, r1}, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={'sha1-ssse3\x00'}})

3m13.795612337s ago: executing program 2 (id=313):
socket$igmp6(0xa, 0x3, 0x2)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001ac0)={0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001a00)={0x84, 0x0, 0x0, 0x0, &(0x7f00000016c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

3m11.306444658s ago: executing program 2 (id=325):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x10bc84)

3m11.246052772s ago: executing program 2 (id=327):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file2\x00', 0x200800, &(0x7f0000000080)={[{@lazytime}, {@gquota}, {@filestreams}, {@lazytime}, {@discard}]}, 0x4, 0x9647, &(0x7f0000012cc0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x71e5b314, 0x0, 0x0, 0x0, 0x100000})
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x141011, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

3m10.757560452s ago: executing program 2 (id=335):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa1, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @mcast1={0xff, 0x5}}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

3m9.946379875s ago: executing program 2 (id=336):
r0 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x2)

3m9.672601154s ago: executing program 33 (id=336):
r0 = socket(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0)
readv(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)=""/222, 0xde}, {&(0x7f0000003680)=""/4096, 0x1000}], 0x2)

1.652952732s ago: executing program 4 (id=2353):
syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00')

1.592869344s ago: executing program 4 (id=2354):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000100)=0x2, 0x4)

1.592478103s ago: executing program 4 (id=2356):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback, 0x7, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

1.532569758s ago: executing program 4 (id=2358):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x74}}, 0x0)

1.482424443s ago: executing program 4 (id=2360):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000005010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000228000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0xb8}}, 0x0)

1.402061211s ago: executing program 4 (id=2362):
syz_usb_connect(0x3, 0x10e, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYRESHEX], 0x0)

1.152204953s ago: executing program 1 (id=2370):
syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f00000022c0)=ANY=[], 0x5, 0x6ca, &(0x7f0000000500)="$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")
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_elf32(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7f454c46fe7df904050000000000000002000300155eef2e5d020000380000000b0300000700000000002000030009008700000400000000050000003016000000e00100018000000300000000080000000000000000000051e5746401"], 0x98)
close(r0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)

1.152101477s ago: executing program 3 (id=2371):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x9, 0x6ea, &(0x7f0000000280)="$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")
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)

1.151879306s ago: executing program 1 (id=2372):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.065401317s ago: executing program 3 (id=2373):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}, @dstopts={{0x18, 0x29, 0x37, {0x62}}}], 0x40}}], 0x1, 0x0)

1.064793843s ago: executing program 1 (id=2374):
syz_clone(0x9000, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x80000001, 0x0, 0x0)

1.06396899s ago: executing program 3 (id=2375):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0)

961.704347ms ago: executing program 3 (id=2376):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x5}}, &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94)

872.10484ms ago: executing program 3 (id=2377):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
pipe2$watch_queue(&(0x7f0000001180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r5, 0x0)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0)
keyctl$KEYCTL_WATCH_KEY(0x20, r7, r6, 0xffffffffffffffff)

171.281294ms ago: executing program 1 (id=2378):
fsopen(&(0x7f0000000000)='pstore\x00', 0x1)

170.877801ms ago: executing program 1 (id=2379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x3350, 0x1000, 0x2, 0x3bd})
r3 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24)
listen(r3, 0x4)
recvmmsg(r3, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0)
close_range(r2, r3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000)
sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044052)

231.193µs ago: executing program 3 (id=2380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x4080)

0s ago: executing program 1 (id=2381):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

 174.585186][ T8612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  174.667937][ T8624] loop3: detected capacity change from 0 to 32768
[  174.681470][ T8624] XFS: attr2 mount option is deprecated.
[  174.716574][ T8624] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  174.731540][ T8624] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.761551][ T8624] XFS (loop3): Ending clean mount
[  174.765248][ T8624] XFS (loop3): Quotacheck needed: Please wait.
[  174.811829][ T8624] XFS (loop3): Quotacheck: Done.
[  174.844496][ T6344] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  175.021785][ T1270] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  175.144541][ T8651] trusted_key: encrypted_key: insufficient parameters specified
[  175.364776][ T1270] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  175.370422][ T1270] usb 5-1: USB disconnect, device number 8
[  176.081383][ T8660] loop3: detected capacity change from 0 to 32768
[  176.125710][ T8660] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.187851][ T8660] XFS (loop3): Ending clean mount
[  176.217003][ T8660] XFS (loop3): Quotacheck needed: Please wait.
[  176.303854][ T8678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.888'.
[  176.306127][ T8660] XFS (loop3): Quotacheck: Done.
[  176.366159][ T6344] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.488561][ T8685] netlink: 27 bytes leftover after parsing attributes in process `syz.4.892'.
[  176.798296][ T8699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.933474][ T8706] loop3: detected capacity change from 0 to 256
[  176.941659][ T8706] exfat: Deprecated parameter 'utf8'
[  176.956602][ T8706] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  177.180222][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  177.330071][   T10] usb 5-1: Using ep0 maxpacket: 32
[  177.342033][   T10] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  177.348141][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.354059][   T10] usb 5-1: Product: syz
[  177.360064][   T10] usb 5-1: Manufacturer: syz
[  177.361836][   T10] usb 5-1: SerialNumber: syz
[  177.398236][ T8715] loop3: detected capacity change from 0 to 32768
[  177.402787][ T8715] XFS: ikeep mount option is deprecated.
[  177.418218][ T8715] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.498996][ T8715] XFS (loop3): Ending clean mount
[  177.511265][ T8715] XFS (loop3): Quotacheck needed: Please wait.
[  177.562071][ T8715] XFS (loop3): Quotacheck: Done.
[  177.590999][   T10] usb 5-1: palm_os_4_probe - error -71 getting connection info
[  177.595676][   T10] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  177.620182][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  177.629468][   T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  177.638055][ T6344] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  177.667307][   T10] usb 5-1: USB disconnect, device number 9
[  177.702282][   T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  177.729329][   T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  177.732977][   T10] visor 5-1:1.0: device disconnected
[  178.263733][ T8759] loop3: detected capacity change from 0 to 1024
[  178.300064][ T8759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.304948][ T8759] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.316883][ T8759] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  178.325746][ T8759] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28
[  178.329387][ T8759] EXT4-fs (loop3): This should not happen!! Data will be lost
[  178.329387][ T8759] 
[  178.334876][ T8759] EXT4-fs (loop3): Total free blocks count 0
[  178.336887][ T8759] EXT4-fs (loop3): Free/Dirty block details
[  178.338877][ T8759] EXT4-fs (loop3): free_blocks=4293918720
[  178.341508][ T8759] EXT4-fs (loop3): dirty_blocks=16
[  178.343108][ T8759] EXT4-fs (loop3): Block reservation details
[  178.344934][ T8759] EXT4-fs (loop3): i_reserved_data_blocks=1
[  178.373142][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.473666][ T8757] loop4: detected capacity change from 0 to 32768
[  178.497418][ T8757] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  178.523327][ T8757] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  178.668766][ T7097] ocfs2: Unmounting device (7,4) on (node local)
[  178.787623][ T8781] Illegal XDP return value 4294967282 on prog  (id 84) dev N/A, expect packet loss!
[  178.884078][ T8788] netlink: 'syz.4.935': attribute type 1 has an invalid length.
[  179.434446][ T8797] loop3: detected capacity change from 0 to 32768
[  179.442102][ T8797] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  179.442102][ T8797] members_v2 (size 40):
[  179.442102][ T8797] nr_devices mismatch: have 2 entries, should be 1Device:0
[  179.442102][ T8797]   Label:                       (none)
[  179.442102][ T8797]   UUID:                        07000000-0000-0000-1800-000000000000
[  179.442102][ T8797]   Size:                        0
[  179.442102][ T8797]   read errors:                 0
[  179.442102][ T8797]   write errors:                0
[  179.442102][ T8797]   checksum errors:             0
[  179.442102][ T8797]   seqread iops:                0
[  179.442102][ T8797]   seqwrite iops:               0
[  179.442102][ T8797]   randread iops:               0
[  179.442102][ T8797]   randwrite iops:              0
[  179.442102][ T8797]   Bucket size:                 0
[  179.442102][ T8797]   First bucket:                0
[  179.442102][ T8797]   Buckets:                     0
[  179.442102][ T8797]   Last mount:                  (never)
[  179.442102][ T8797]   Last superblock write:       0
[  179.442102][ T8797]   State:                       rw
[  179.442102][ T8797]   Data allowed:                (none)
[  179.442102][ T8797]   Has data:                    journal,btree,user
[  179.442102][ T8797]   Btree allocated bitmap blocksize:1
[  179.442102][ T8797]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  179.442102][ T8797]   Durabili
[  179.442267][ T8797] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  180.012108][   T10] IPVS: starting estimator thread 0...
[  180.120840][ T8809] IPVS: using max 49 ests per chain, 117600 per kthread
[  180.249396][ T8818] input: syz0 as /devices/virtual/input/input8
[  180.869650][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'.
[  181.230834][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  181.400120][    T9] usb 5-1: Using ep0 maxpacket: 16
[  181.438832][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  181.450107][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.453313][    T9] usb 5-1: Product: syz
[  181.455035][    T9] usb 5-1: Manufacturer: syz
[  181.457034][    T9] usb 5-1: SerialNumber: syz
[  181.495041][    T9] usb 5-1: config 0 descriptor??
[  181.503282][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  181.505689][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  181.861342][    T9] usb 5-1: USB disconnect, device number 10
[  182.261028][ T8862] netlink: 'syz.3.968': attribute type 21 has an invalid length.
[  182.273919][ T8862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.968'.
[  182.507899][ T8878] loop4: detected capacity change from 0 to 512
[  182.522526][ T8878] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.977: casefold flag without casefold feature
[  182.527947][ T8878] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.977: couldn't read orphan inode 15 (err -117)
[  182.536242][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.618215][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.624286][ T8884] loop3: detected capacity change from 0 to 512
[  182.648563][ T8884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  182.682141][ T8884] EXT4-fs (loop3): 1 truncate cleaned up
[  182.685711][ T8884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.710616][ T8884] EXT4-fs (loop3): Online resizing not supported with sparse_super2
[  182.744618][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.886059][ T8895] loop3: detected capacity change from 0 to 1024
[  182.929343][ T8895] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.942036][ T8895] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.976094][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.989011][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.165888][ T8934] warning: `syz.4.993' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  184.425697][ T8938] loop4: detected capacity change from 0 to 32768
[  184.440210][ T8938] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.994 (8938)
[  184.451597][ T8938] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  184.455436][ T8938] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  184.458760][ T8938] BTRFS info (device loop4): using free-space-tree
[  184.990588][ T8964] loop3: detected capacity change from 0 to 512
[  185.021630][ T8964] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.997: inode #15: comm syz.3.997: iget: illegal inode #
[  185.029379][ T8964] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.997: couldn't read orphan inode 15 (err -117)
[  185.037032][ T8964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.072206][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.196277][ T8976] loop3: detected capacity change from 0 to 512
[  185.337635][ T7097] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  186.082887][ T9002] loop4: detected capacity change from 0 to 32768
[  186.088197][ T9002] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1012 (9002)
[  186.106993][ T9002] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  186.130506][ T9002] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  186.134004][ T9002] BTRFS info (device loop4): disk space caching is enabled
[  186.136752][ T9002] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  186.253060][ T9002] BTRFS info (device loop4): rebuilding free space tree
[  186.285444][ T9002] BTRFS info (device loop4): disabling free space tree
[  186.291995][ T9002] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  186.299609][ T9002] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  186.410286][ T7097] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  187.829781][ T9088] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1042'.
[  188.229363][ T9095] loop4: detected capacity change from 0 to 32768
[  188.247439][ T9095] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  188.264516][ T9095] XFS (loop4): Internal error (!rhead->h_version || (be32_to_cpu(rhead->h_version) & (~XLOG_VERSION_OKBITS))) at line 2961 of file fs/xfs/xfs_log_recover.c.  Caller xlog_valid_rec_header+0x19e/0x380
[  188.274757][ T9095] CPU: 1 UID: 0 PID: 9095 Comm: syz.4.1045 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  188.274773][ T9095] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.274781][ T9095] Call Trace:
[  188.274785][ T9095]  <TASK>
[  188.274789][ T9095]  dump_stack_lvl+0x189/0x250
[  188.274808][ T9095]  ? __pfx_dump_stack_lvl+0x10/0x10
[  188.274819][ T9095]  ? __pfx_submit_bio_wait_endio+0x10/0x10
[  188.274841][ T9095]  xfs_corruption_error+0x122/0x170
[  188.274857][ T9095]  ? xlog_valid_rec_header+0x19e/0x380
[  188.274869][ T9095]  xlog_valid_rec_header+0x1f6/0x380
[  188.274878][ T9095]  ? xlog_valid_rec_header+0x19e/0x380
[  188.274891][ T9095]  xlog_do_recovery_pass+0x2ef/0xc30
[  188.274905][ T9095]  ? __pfx_xlog_do_recovery_pass+0x10/0x10
[  188.274921][ T9095]  ? xlog_verify_head+0xf2/0x440
[  188.274931][ T9095]  xlog_verify_head+0x136/0x440
[  188.274944][ T9095]  xlog_find_tail+0x5ca/0x840
[  188.274962][ T9095]  xlog_recover+0x4b/0x3e0
[  188.274977][ T9095]  xfs_log_mount+0x253/0x3e0
[  188.274989][ T9095]  xfs_mountfs+0xe5e/0x2330
[  188.275008][ T9095]  ? __pfx_xfs_mountfs+0x10/0x10
[  188.275023][ T9095]  ? trace_xfs_inode_timestamp_range+0x84/0x200
[  188.275035][ T9095]  xfs_fs_fill_super+0x11b3/0x1600
[  188.275050][ T9095]  get_tree_bdev_flags+0x40e/0x4d0
[  188.275088][ T9095]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  188.275101][ T9095]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  188.275116][ T9095]  vfs_get_tree+0x92/0x2b0
[  188.275134][ T9095]  do_new_mount+0x24a/0xa40
[  188.275151][ T9095]  __se_sys_mount+0x317/0x410
[  188.275166][ T9095]  ? __pfx___se_sys_mount+0x10/0x10
[  188.275181][ T9095]  ? do_syscall_64+0xbe/0x3b0
[  188.275190][ T9095]  ? __x64_sys_mount+0x20/0xc0
[  188.275201][ T9095]  do_syscall_64+0xfa/0x3b0
[  188.275209][ T9095]  ? lockdep_hardirqs_on+0x9c/0x150
[  188.275224][ T9095]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.275233][ T9095]  ? exc_page_fault+0x9f/0xf0
[  188.275246][ T9095]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  188.275254][ T9095] RIP: 0033:0x7fd96ad900ca
[  188.275267][ T9095] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  188.275280][ T9095] RSP: 002b:00007fd96bb22e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  188.275297][ T9095] RAX: ffffffffffffffda RBX: 00007fd96bb22ef0 RCX: 00007fd96ad900ca
[  188.275309][ T9095] RDX: 00002000000000c0 RSI: 0000200000000280 RDI: 00007fd96bb22eb0
[  188.275320][ T9095] RBP: 00002000000000c0 R08: 00007fd96bb22ef0 R09: 0000000000008000
[  188.275332][ T9095] R10: 0000000000008000 R11: 0000000000000246 R12: 0000200000000280
[  188.275344][ T9095] R13: 00007fd96bb22eb0 R14: 00000000000097a7 R15: 0000200000000180
[  188.275368][ T9095]  </TASK>
[  188.275372][ T9095] XFS (loop4): Corruption detected. Unmount and run xfs_repair
[  188.373624][ T9095] XFS (loop4): xlog_valid_rec_header: unrecognised log version (0).
[  188.376287][ T9095] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  188.385199][ T9095] XFS (loop4): Starting recovery (logdev: internal)
[  188.398035][ T9095] XFS (loop4): Ending recovery (logdev: internal)
[  188.403866][ T9095] XFS (loop4): Quotacheck needed: Please wait.
[  188.428775][ T9095] XFS (loop4): Quotacheck: Done.
[  188.491138][ T7097] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  189.373256][ T9147] loop3: detected capacity change from 0 to 2048
[  189.388435][ T9147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.639345][ T9148] loop4: detected capacity change from 0 to 32768
[  189.702107][ T9148] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.768930][ T9148] XFS (loop4): Ending clean mount
[  189.802218][ T9148] XFS (loop4): Quotacheck needed: Please wait.
[  189.856126][ T9148] XFS (loop4): Quotacheck: Done.
[  189.893293][ T9148] XFS (loop4): User initiated shutdown received.
[  189.898828][ T9148] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  189.907622][ T9148] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  189.946052][ T7097] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.240740][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1071'.
[  190.399163][ T9182] loop4: detected capacity change from 0 to 1024
[  190.430495][ T9182] EXT4-fs: Ignoring removed oldalloc option
[  190.440342][ T9182] EXT4-fs: Ignoring removed orlov option
[  190.446295][ T9182] EXT4-fs (loop4): unsupported descriptor size 0
[  190.740120][   T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.890697][   T10] usb 4-1: Using ep0 maxpacket: 16
[  190.898133][   T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  190.902302][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.906218][   T10] usb 4-1: Product: syz
[  190.908060][   T10] usb 4-1: Manufacturer: syz
[  190.911472][   T10] usb 4-1: SerialNumber: syz
[  190.918234][   T10] usb 4-1: config 0 descriptor??
[  191.042882][ T5835] Bluetooth: hci0: command 0x0406 tx timeout
[  191.337747][   T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  191.352063][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  191.356866][   T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  191.364022][   T10] usb 4-1: media controller created
[  191.411039][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  191.542206][   T10] zl10353_read_register: readreg error (reg=127, ret==0)
[  191.552150][   T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  191.555222][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  191.575150][   T10] usb 4-1: USB disconnect, device number 10
[  191.673336][   T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  191.935601][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  192.114225][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  192.117697][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  192.151998][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  192.158408][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  192.168531][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  192.187966][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  192.194802][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  192.200260][    T9] usb 5-1: Product: syz
[  192.201631][    T9] usb 5-1: Manufacturer: syz
[  192.222275][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  192.223990][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  192.258478][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  192.276434][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  192.443750][    T9] usb 5-1: USB disconnect, device number 11
[  193.103203][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  193.273138][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  193.276581][   T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  193.280234][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  193.286745][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  193.291923][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  193.301528][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  193.304666][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  193.307493][   T10] usb 5-1: Product: syz
[  193.308845][   T10] usb 5-1: Manufacturer: syz
[  193.324224][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  193.326228][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  193.329137][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  193.332482][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  193.527297][   T10] usb 5-1: USB disconnect, device number 12
[  194.091769][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  194.094321][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  195.287722][ T9320] loop4: detected capacity change from 0 to 32768
[  195.300136][ T9320] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1096 (9320)
[  195.321443][ T9320] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.326158][ T9320] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  195.329455][ T9320] BTRFS info (device loop4): using free-space-tree
[  195.378729][ T9316] loop3: detected capacity change from 0 to 40427
[  195.390401][ T9316] F2FS-fs (loop3): build fault injection rate: 16
[  195.396785][ T9316] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  195.425103][ T9316] F2FS-fs (loop3): invalid crc value
[  195.448283][ T9316] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  195.476735][    C0] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x5eb/0xe70
[  195.525829][ T7097] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.632317][ T9316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  195.785895][ T9316] F2FS-fs (loop3): inject slab alloc in f2fs_alloc_inode of alloc_inode+0x6a/0x1b0
[  195.915141][    C1] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x5eb/0xe70
[  195.920039][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  195.920061][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.920071][    C1] Call Trace:
[  195.920077][    C1]  <TASK>
[  195.920085][    C1]  dump_stack_lvl+0x189/0x250
[  195.920109][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.920127][    C1]  ? __pfx_queue_work_on+0x10/0x10
[  195.920146][    C1]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.920168][    C1]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.920190][    C1]  ? f2fs_hw_is_readonly+0x39b/0x470
[  195.920216][    C1]  f2fs_handle_critical_error+0x37c/0x540
[  195.920240][    C1]  f2fs_write_end_io+0x495/0x810
[  195.920252][    C1]  ? blkg_put+0x22/0x240
[  195.920283][    C1]  blk_update_request+0x5eb/0xe70
[  195.920314][    C1]  blk_mq_end_request+0x3e/0x70
[  195.920333][    C1]  blk_flush_complete_seq+0x678/0xcc0
[  195.920360][    C1]  flush_end_io+0xbaf/0xe60
[  195.920391][    C1]  __blk_mq_end_request+0x426/0x600
[  195.920413][    C1]  blk_done_softirq+0x10a/0x160
[  195.920434][    C1]  handle_softirqs+0x286/0x870
[  195.920449][    C1]  ? schedule+0x165/0x360
[  195.920472][    C1]  ? run_ksoftirqd+0x9b/0x100
[  195.920496][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  195.920550][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  195.920568][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  195.920583][    C1]  run_ksoftirqd+0x9b/0x100
[  195.920601][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  195.920626][    C1]  smpboot_thread_fn+0x542/0xa60
[  195.920644][    C1]  ? smpboot_thread_fn+0x4d/0xa60
[  195.920675][    C1]  kthread+0x711/0x8a0
[  195.920698][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  195.920715][    C1]  ? __pfx_kthread+0x10/0x10
[  195.920736][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.920756][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.920775][    C1]  ? __pfx_kthread+0x10/0x10
[  195.920795][    C1]  ret_from_fork+0x3fc/0x770
[  195.920812][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  195.920832][    C1]  ? __switch_to_asm+0x39/0x70
[  195.920850][    C1]  ? __switch_to_asm+0x33/0x70
[  195.920867][    C1]  ? __pfx_kthread+0x10/0x10
[  195.920888][    C1]  ret_from_fork_asm+0x1a/0x30
[  195.920920][    C1]  </TASK>
[  195.920926][    C1] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  196.011162][ T6344] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  197.439003][ T9381] loop4: detected capacity change from 0 to 4096
[  197.455713][ T9381] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  197.464044][ T9381] ntfs3(loop4): $Volume is corrupted.
[  197.617160][ T9389] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1118'.
[  197.621022][ T9389] netlink: 'syz.3.1118': attribute type 4 has an invalid length.
[  197.959296][ T9400] loop3: detected capacity change from 0 to 1024
[  197.964523][ T5900] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  198.018539][   T67] hfsplus: b-tree write err: -5, ino 8
[  198.081886][ T9404] batman_adv: batadv0: Adding interface: gretap1
[  198.088078][ T9404] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.098906][ T9404] batman_adv: batadv0: Interface activated: gretap1
[  198.104238][ T9404] batadv0: mtu less than device minimum
[  198.107761][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.113599][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.118651][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.123930][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.129195][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.134504][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.139772][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.145102][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.150549][ T9404] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  198.168102][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  198.196863][ T5900] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  198.202193][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.205297][ T5900] usb 5-1: Product: syz
[  198.206866][ T5900] usb 5-1: Manufacturer: syz
[  198.208660][ T5900] usb 5-1: SerialNumber: syz
[  198.214002][ T5900] usb 5-1: config 0 descriptor??
[  198.219854][ T5900] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  198.226425][ T5900] usb 5-1: Detected FT232H
[  198.427974][ T5900] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  198.466653][ T9421] nfs4: Unexpected value for 'rdma'
[  198.850632][ T5900] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  198.993102][ T9432] loop3: detected capacity change from 0 to 512
[  199.012148][ T9432] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.1138: casefold flag without casefold feature
[  199.030707][ T9432] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.1138: couldn't read orphan inode 15 (err -117)
[  199.041350][ T5900] usb 5-1: USB disconnect, device number 13
[  199.081909][ T9432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.108942][ T5900] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  199.122686][ T5900] ftdi_sio 5-1:0.0: device disconnected
[  199.192792][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.453997][ T9442] 9pnet_fd: Insufficient options for proto=fd
[  199.733062][ T9461] loop4: detected capacity change from 0 to 256
[  199.739519][ T9461] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  199.973236][ T9472] loop4: detected capacity change from 0 to 1024
[  200.002657][ T9472] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.088889][ T9472] EXT4-fs: Ignoring removed nomblk_io_submit option
[  200.092715][ T9472] EXT4-fs: Can't set or change test_dummy_encryption on remount
[  200.125639][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.189837][ T9478] loop4: detected capacity change from 0 to 512
[  200.224840][ T9478] EXT4-fs (loop4): bad s_want_extra_isize: 11962
[  200.720451][ T5900] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  200.913733][ T5900] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  200.928879][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.940474][ T5900] usb 4-1: Product: syz
[  200.946012][ T5900] usb 4-1: Manufacturer: syz
[  200.963911][ T5900] usb 4-1: SerialNumber: syz
[  201.001560][ T5900] usb 4-1: config 0 descriptor??
[  201.365802][ T5900] gspca_main: sunplus-2.14.0 probing 055f:c230
[  201.930656][ T9505] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  202.176544][ T5900] gspca_sunplus: reg_r err -71
[  202.178804][ T5900] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  202.212562][ T5900] usb 4-1: USB disconnect, device number 11
[  202.456195][ T9524] loop4: detected capacity change from 0 to 64
[  203.903559][   T33] audit: type=1800 audit(1752297312.030:66): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1186" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  204.230076][ T5885] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  204.411146][ T5885] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  204.415097][ T5885] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  204.418645][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.431322][ T5885] usb 5-1: config 0 descriptor??
[  204.443182][ T5885] pwc: Askey VC010 type 2 USB webcam detected.
[  204.679780][ T9559] loop3: detected capacity change from 0 to 32768
[  204.687298][ T9559] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1195 (9559)
[  204.715156][ T9559] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  204.719225][ T9559] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  204.729021][ T9559] BTRFS info (device loop3): using free-space-tree
[  204.866529][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00
[  205.170801][ T5885] pwc: recv_control_msg error -71 req 02 val 2c00
[  205.200227][ T5885] pwc: recv_control_msg error -71 req 04 val 1000
[  205.221409][ T5885] pwc: recv_control_msg error -71 req 04 val 1300
[  205.243296][ T5885] pwc: recv_control_msg error -71 req 04 val 1400
[  205.255946][   T33] audit: type=1800 audit(1752297313.360:67): pid=9590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1195" name="file1" dev="loop3" ino=260 res=0 errno=0
[  205.279875][ T5885] pwc: recv_control_msg error -71 req 02 val 2000
[  205.288248][ T5885] pwc: recv_control_msg error -71 req 02 val 2100
[  205.293957][ T5885] pwc: recv_control_msg error -71 req 04 val 1500
[  205.297205][ T5885] pwc: recv_control_msg error -71 req 02 val 2500
[  205.301696][ T5885] pwc: recv_control_msg error -71 req 02 val 2400
[  205.304874][ T5885] pwc: recv_control_msg error -71 req 02 val 2600
[  205.307997][ T5885] pwc: recv_control_msg error -71 req 02 val 2900
[  205.312626][ T5885] pwc: recv_control_msg error -71 req 02 val 2800
[  205.315812][ T5885] pwc: recv_control_msg error -71 req 04 val 1100
[  205.319115][ T5885] pwc: recv_control_msg error -71 req 04 val 1200
[  205.335006][ T5885] pwc: Registered as video103.
[  205.348577][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  205.399141][ T5885] usb 5-1: USB disconnect, device number 14
[  205.536256][ T6344] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  205.863417][ T9602] dummy0: entered promiscuous mode
[  205.867467][ T9602] macsec1: entered promiscuous mode
[  205.869829][ T9602] macsec1: entered allmulticast mode
[  205.875473][ T9602] dummy0: entered allmulticast mode
[  205.881071][ T9602] dummy0: left allmulticast mode
[  205.883317][ T9602] dummy0: left promiscuous mode
[  206.106302][ T5885] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  206.284814][ T5885] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  206.287648][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.291236][ T5885] usb 5-1: Product: syz
[  206.292683][ T5885] usb 5-1: Manufacturer: syz
[  206.294181][ T5885] usb 5-1: SerialNumber: syz
[  206.297167][ T5885] usb 5-1: config 0 descriptor??
[  206.308147][ T5885] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[  206.312277][ T5885] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  206.509166][ T5900] usb 5-1: USB disconnect, device number 15
[  207.066621][ T9633] 9pnet_fd: Insufficient options for proto=fd
[  207.357365][ T9649] loop3: detected capacity change from 0 to 512
[  207.372705][ T9649] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  207.389489][ T9649] EXT4-fs (loop3): 1 truncate cleaned up
[  207.403902][ T9649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.432566][   T33] audit: type=1800 audit(1752297315.560:68): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1222" name="file2" dev="loop3" ino=16 res=0 errno=0
[  207.519200][ T9659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1228'.
[  207.537120][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.790301][ T9672] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1234'.
[  207.980273][ T5899] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  208.120265][ T9692] xt_TCPMSS: Only works on TCP SYN packets
[  208.143792][ T5899] usb 4-1: Using ep0 maxpacket: 16
[  208.151726][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short
[  208.156433][ T5899] usb 4-1: config 3 has an invalid interface number: 200 but max is 0
[  208.170066][ T5899] usb 4-1: config 3 has no interface number 0
[  208.172608][ T5899] usb 4-1: config 3 interface 200 altsetting 128 bulk endpoint 0xF has invalid maxpacket 32
[  208.176457][ T5899] usb 4-1: config 3 interface 200 has no altsetting 0
[  208.186394][ T5899] usb 4-1: New USB device found, idVendor=294b, idProduct=7b59, bcdDevice=52.61
[  208.189850][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.195576][ T5899] usb 4-1: Product: syz
[  208.197298][ T5899] usb 4-1: Manufacturer: syz
[  208.199653][ T5899] usb 4-1: SerialNumber: syz
[  208.400525][ T9669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  208.969761][ T5899] usb 4-1: USB disconnect, device number 12
[  209.304941][ T9709] loop4: detected capacity change from 0 to 2048
[  209.360609][ T7037] Alternate GPT is invalid, using primary GPT.
[  209.370238][ T7037]  loop4: p1 p2 p3
[  209.391311][ T9709] Alternate GPT is invalid, using primary GPT.
[  209.393948][ T9709]  loop4: p1 p2 p3
[  209.422281][ T5278] Alternate GPT is invalid, using primary GPT.
[  209.424825][ T5278]  loop4: p1 p2 p3
[  209.494264][ T7037] udevd[7037]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  209.494506][ T6548] udevd[6548]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  209.504994][ T6549] udevd[6549]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  209.604411][ T9715] input: syz1 as /devices/virtual/input/input10
[  209.614355][ T7037] udevd[7037]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  209.614477][ T6549] udevd[6549]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  209.629752][ T6548] udevd[6548]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  209.671328][ T6548] udevd[6548]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  209.676980][ T6549] udevd[6549]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  209.682660][ T7037] udevd[7037]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  209.732874][ T9719] loop4: detected capacity change from 0 to 1024
[  209.799203][ T9721] loop3: detected capacity change from 0 to 4096
[  209.815789][ T9721] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  209.848732][ T9721] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  211.091896][ T9754] overlayfs: failed to clone upperpath
[  211.524044][ T5835] Bluetooth: hci2: command 0x0406 tx timeout
[  211.662951][ T9766] loop3: detected capacity change from 0 to 2048
[  211.711799][ T9766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  211.716319][ T9766] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.755032][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.829684][ T9774] loop3: detected capacity change from 0 to 128
[  211.947910][ T9779] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1280'.
[  212.768873][ T9807] binder_alloc: 9806: binder_alloc_buf, no vma
[  212.845433][ T9812] netlink: 'syz.3.1289': attribute type 41 has an invalid length.
[  213.142855][ T9824] loop3: detected capacity change from 0 to 256
[  213.157908][ T9824] FAT-fs (loop3): Directory bread(block 1285) failed
[  213.171150][ T9824] FAT-fs (loop3): Directory bread(block 1285) failed
[  213.354772][ T9813] loop4: detected capacity change from 0 to 32768
[  213.384685][ T9813] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  213.421155][ T9813] XFS (loop4): Ending clean mount
[  213.509563][ T7097] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  213.559263][ T9855] loop3: detected capacity change from 0 to 2048
[  213.604852][ T9855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.608384][ T9855] ext4 filesystem being mounted at /369/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.695340][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.775140][ T9864] loop4: detected capacity change from 0 to 1024
[  213.926577][ T9875] loop4: detected capacity change from 0 to 2048
[  213.934315][ T9875] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  213.939011][ T7037] udevd[7037]: incorrect nilfs2 checksum on /dev/loop4
[  213.951610][ T9878] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  213.969108][ T9877] loop3: detected capacity change from 0 to 4096
[  214.072589][ T9877] ntfs3(loop3): try to read out of volume at offset 0x3fffffc7000
[  214.080979][ T9880] loop4: detected capacity change from 0 to 512
[  214.095538][ T9880] EXT4-fs: Ignoring removed mblk_io_submit option
[  214.098028][ T9880] EXT4-fs: inline encryption not supported
[  214.110894][ T9880] EXT4-fs (loop4): Test dummy encryption mode enabled
[  214.120083][ T9880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  214.145996][ T9880] EXT4-fs (loop4): 1 truncate cleaned up
[  214.148705][ T9880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  214.262630][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.309909][ T9892] loop4: detected capacity change from 0 to 131072
[  215.312996][ T9892] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  215.315564][ T9892] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  215.320408][ T9892] F2FS-fs (loop4): invalid crc value
[  215.378283][ T9892] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  215.380584][ T9892] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  215.656270][ T9892] F2FS-fs (loop4): Start checkpoint disabled!
[  217.319610][ T9963] loop4: detected capacity change from 0 to 2048
[  217.336206][ T9967] loop3: detected capacity change from 0 to 512
[  217.339572][ T9967] EXT4-fs: Ignoring removed bh option
[  217.345254][ T9967] EXT4-fs: Ignoring removed mblk_io_submit option
[  217.349370][ T9967] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  217.354626][ T9963] EXT4-fs: Ignoring removed mblk_io_submit option
[  217.356915][ T9967] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  217.357138][ T9963] EXT4-fs: Ignoring removed nobh option
[  217.364333][ T9967] EXT4-fs (loop3): orphan cleanup on readonly fs
[  217.369805][ T9967] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4
[  217.374100][ T9967] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  217.378132][ T9967] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1346: Failed to acquire dquot type 1
[  217.385322][ T9967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1346: Invalid block bitmap block 0 in block_group 0
[  217.395577][ T9967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1346: Invalid block bitmap block 0 in block_group 0
[  217.404627][ T9967] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1346: Invalid block bitmap block 0 in block_group 0
[  217.410909][ T9967] Quota error (device loop3): write_blk: dquota write failed
[  217.414068][ T9967] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  217.418299][ T9967] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1346: Failed to acquire dquot type 1
[  217.423594][ T9967] Quota error (device loop3): write_blk: dquota write failed
[  217.427606][ T9967] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  217.431407][ T9967] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1346: Failed to acquire dquot type 1
[  217.438660][ T9967] EXT4-fs (loop3): 1 orphan inode deleted
[  217.442639][ T9967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.456412][ T9963] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  217.462864][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.464111][ T9963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  217.544760][ T9972] input: syz0 as /devices/virtual/input/input11
[  218.041727][ T9981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  218.340816][ T9983] loop3: detected capacity change from 0 to 8192
[  218.703604][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.894002][T10003] sctp: [Deprecated]: syz.3.1361 (pid 10003) Use of int in maxseg socket option.
[  218.894002][T10003] Use struct sctp_assoc_value instead
[  218.981310][T10009] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1364'.
[  218.984951][T10009] net_ratelimit: 10 callbacks suppressed
[  218.984963][T10009] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  219.532591][T10029] loop3: detected capacity change from 0 to 16
[  219.540643][T10029] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  219.835455][T10039] loop3: detected capacity change from 0 to 32768
[  219.869035][T10039] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  219.937930][ T6344] ocfs2: Unmounting device (7,3) on (node local)
[  220.261700][T10047] 9pnet_fd: Insufficient options for proto=fd
[  220.327679][T10050] loop3: detected capacity change from 0 to 512
[  220.345694][T10050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  220.368811][T10050] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  220.380503][T10053] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.383821][T10050] EXT4-fs (loop3): 1 truncate cleaned up
[  220.388628][T10050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.595913][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.640276][ T5218] Bluetooth: hci0: unexpected event for opcode 0x0c03
[  221.120878][T10078] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1386'.
[  221.922367][T10093] loop3: detected capacity change from 0 to 4096
[  222.585730][T10110] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  223.045287][T10114] loop3: detected capacity change from 0 to 32768
[  223.087142][T10114] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  223.130093][ T6344] (syz-executor,6344,0):ocfs2_inode_is_valid_to_delete:886 ERROR: Skipping delete of system file 72
[  223.137557][ T6344] ocfs2: Unmounting device (7,3) on (node local)
[  223.434979][T10126] loop3: detected capacity change from 0 to 256
[  223.444608][T10126] exfat: Deprecated parameter 'utf8'
[  223.446277][T10126] exfat: Deprecated parameter 'utf8'
[  223.480215][T10126] exfat: Deprecated parameter 'utf8'
[  223.489989][    C1] sched: DL replenish lagged too much
[  223.508788][T10126] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  223.677050][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'.
[  224.991534][  T972] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  225.551321][  T972] usb 4-1: unable to get BOS descriptor or descriptor too short
[  225.554507][  T972] usb 4-1: not running at top speed; connect to a high speed hub
[  225.558402][  T972] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.569666][  T972] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.596646][  T972] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  225.611090][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.613633][  T972] usb 4-1: Product: syz
[  225.614924][  T972] usb 4-1: Manufacturer: syz
[  225.616617][  T972] usb 4-1: SerialNumber: syz
[  225.860986][  T972] usb 4-1: 0:2 : does not exist
[  225.877468][  T972] usb 4-1: USB disconnect, device number 13
[  225.910354][ T7037] udevd[7037]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.574975][T10168] loop3: detected capacity change from 0 to 2048
[  226.626149][T10168] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.676375][T10173] loop4: detected capacity change from 0 to 1024
[  226.780285][   T33] audit: type=1800 audit(1752297334.900:69): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1433" name="file1" dev="loop4" ino=20 res=0 errno=0
[  226.927375][T10180] loop3: detected capacity change from 0 to 736
[  227.313917][T10187] loop4: detected capacity change from 0 to 512
[  227.345357][T10187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  227.377300][T10187] Quota error (device loop4): do_check_range: Getting dqdh_entries 1536 out of range 0-14
[  227.394662][T10187] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  227.397693][T10187] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1439: Failed to acquire dquot type 1
[  227.434964][T10187] EXT4-fs (loop4): 1 truncate cleaned up
[  227.437725][T10187] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.454711][T10187] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.490840][T10187] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1439: iget: bad i_size value: 360287970189639690
[  227.522733][T10187] binfmt_misc: register: failed to install interpreter file ./file1
[  227.569778][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.872720][T10199] loop4: detected capacity change from 0 to 2048
[  227.883510][T10189] loop3: detected capacity change from 0 to 32768
[  227.919852][T10189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1440 (10189)
[  227.972278][T10189] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.975733][T10189] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm
[  227.979112][T10189] BTRFS info (device loop3): using free-space-tree
[  228.280985][ T6344] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  228.343406][ T5899] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  228.510073][ T5899] usb 5-1: Using ep0 maxpacket: 16
[  228.514541][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.518192][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  228.526645][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.540659][ T5899] usb 5-1: config 0 descriptor??
[  228.969371][ T5899] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0
[  228.973652][ T5899] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0
[  228.976789][ T5899] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0
[  228.979292][ T5899] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0
[  228.984515][ T5899] logitech-djreceiver 0003:046D:C513.0006: unknown main item tag 0x0
[  229.174754][   T10] usb 5-1: USB disconnect, device number 16
[  229.870126][  T972] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  230.026680][  T972] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  230.032081][  T972] usb 4-1: config 0 has no interface number 0
[  230.034691][  T972] usb 4-1: config 0 interface 120 has no altsetting 0
[  230.041959][  T972] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  230.045194][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.049115][  T972] usb 4-1: Product: syz
[  230.053159][  T972] usb 4-1: Manufacturer: syz
[  230.055475][  T972] usb 4-1: SerialNumber: syz
[  230.062697][  T972] usb 4-1: config 0 descriptor??
[  230.480329][  T972] comedi comedi5: could not switch to alternate setting 1
[  230.484675][  T972] usbduxfast 4-1:0.120: driver 'usbduxfast' failed to auto-configure device.
[  230.493521][  T972] usb 4-1: USB disconnect, device number 14
[  230.743609][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'.
[  230.746474][T10265] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'.
[  231.689584][T10284] loop3: detected capacity change from 0 to 32768
[  231.705606][T10284] XFS: noikeep mount option is deprecated.
[  231.842644][T10284] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  231.874007][T10284] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  231.889151][T10284] XFS (loop3): Starting recovery (logdev: internal)
[  231.909829][T10284] XFS (loop3): Ending recovery (logdev: internal)
[  231.922750][   T33] audit: type=1800 audit(1752297340.050:70): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1472" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  231.983157][T10301] XFS (loop3): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[  231.992025][T10301] XFS (loop3): Unmount and run xfs_repair
[  231.994825][T10284] XFS (loop3): Internal error i != 1 at line 628 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_alloc_fixup_trees+0x929/0xd20
[  232.007873][T10284] CPU: 1 UID: 0 PID: 10284 Comm: syz.3.1472 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  232.007929][T10284] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  232.007937][T10284] Call Trace:
[  232.007944][T10284]  <TASK>
[  232.007950][T10284]  dump_stack_lvl+0x189/0x250
[  232.007975][T10284]  ? __pfx__xfs_alert_tag+0x10/0x10
[  232.007997][T10284]  ? __pfx_dump_stack_lvl+0x10/0x10
[  232.008016][T10284]  ? __pfx_xfs_btree_lookup+0x10/0x10
[  232.008044][T10284]  xfs_corruption_error+0x122/0x170
[  232.008066][T10284]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  232.008086][T10284]  xfs_alloc_fixup_trees+0x95e/0xd20
[  232.008102][T10284]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  232.008127][T10284]  ? __pfx_xfs_alloc_fixup_trees+0x10/0x10
[  232.008143][T10284]  ? rcu_is_watching+0x15/0xb0
[  232.008169][T10284]  ? xfs_alloc_ag_vextent_lastblock+0x3e2/0x6e0
[  232.008186][T10284]  ? rcu_is_watching+0x15/0xb0
[  232.008208][T10284]  xfs_alloc_cur_finish+0xd3/0x4b0
[  232.008233][T10284]  xfs_alloc_ag_vextent_near+0xd1a/0x1230
[  232.008265][T10284]  ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10
[  232.008282][T10284]  ? xfs_group_grab+0x28/0x480
[  232.008303][T10284]  ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610
[  232.008323][T10284]  xfs_alloc_vextent_iterate_ags+0x640/0x940
[  232.008350][T10284]  xfs_alloc_vextent_start_ag+0x388/0x850
[  232.008373][T10284]  xfs_bmapi_allocate+0x188e/0x2e00
[  232.008411][T10284]  ? __pfx_xfs_bmapi_allocate+0x10/0x10
[  232.008429][T10284]  ? get_random_u32+0x155/0x940
[  232.008459][T10284]  ? xfs_iext_lookup_extent+0x41e/0x7e0
[  232.008472][T10284]  ? xfs_iext_prev+0x35a/0x370
[  232.008483][T10284]  ? xfs_iext_get_extent+0x1bb/0x370
[  232.008499][T10284]  xfs_bmapi_write+0x7df/0x1260
[  232.008528][T10284]  ? __pfx_xfs_bmapi_write+0x10/0x10
[  232.008565][T10284]  ? xfs_trans_alloc_inode+0x22a/0x4a0
[  232.008583][T10284]  ? xfs_iext_count_extend+0x1fc/0x2c0
[  232.008603][T10284]  xfs_iomap_write_direct+0x3b2/0x6b0
[  232.008634][T10284]  ? __pfx_xfs_iomap_write_direct+0x10/0x10
[  232.008654][T10284]  ? xfs_iunlock+0x14f/0x330
[  232.008671][T10284]  ? xfs_direct_write_iomap_begin+0xf82/0x13e0
[  232.008694][T10284]  ? xfs_direct_write_iomap_begin+0xf82/0x13e0
[  232.008714][T10284]  ? xfs_iunlock+0x1c0/0x330
[  232.008730][T10284]  xfs_direct_write_iomap_begin+0xfa3/0x13e0
[  232.008749][T10284]  ? iomap_dio_rw+0x45/0xb0
[  232.008776][T10284]  ? __pfx_xfs_direct_write_iomap_begin+0x10/0x10
[  232.008812][T10284]  ? __pfx_xfs_direct_write_iomap_begin+0x10/0x10
[  232.008829][T10284]  iomap_iter+0x53a/0xdf0
[  232.008848][T10284]  __iomap_dio_rw+0xc67/0x1e40
[  232.008926][T10284]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  232.008955][T10284]  ? __pfx___iomap_dio_rw+0x10/0x10
[  232.008971][T10284]  ? file_remove_privs_flags+0x3b1/0x5f0
[  232.008995][T10284]  ? arch_stack_walk+0xfc/0x150
[  232.009018][T10284]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[  232.009059][T10284]  ? __pfx_xfs_break_layouts+0x10/0x10
[  232.009081][T10284]  ? file_modified_flags+0x374/0x560
[  232.009100][T10284]  ? xfs_file_write_checks+0x987/0xa10
[  232.009128][T10284]  iomap_dio_rw+0x45/0xb0
[  232.009153][T10284]  xfs_file_dio_write_aligned+0x157/0x1b0
[  232.009176][T10284]  ? __pfx_xfs_file_dio_write_aligned+0x10/0x10
[  232.009201][T10284]  ? splice_from_pipe_next+0x608/0x660
[  232.009223][T10284]  xfs_file_write_iter+0x8b6/0xa60
[  232.009250][T10284]  iter_file_splice_write+0x93a/0x1000
[  232.009292][T10284]  ? __pfx_iter_file_splice_write+0x10/0x10
[  232.009313][T10284]  ? rcu_read_lock_any_held+0xb3/0x120
[  232.009337][T10284]  ? direct_splice_actor+0x10c/0x160
[  232.009359][T10284]  ? __pfx_iter_file_splice_write+0x10/0x10
[  232.009378][T10284]  direct_splice_actor+0x101/0x160
[  232.009400][T10284]  splice_direct_to_actor+0x5a8/0xcc0
[  232.009437][T10284]  ? __pfx_direct_splice_actor+0x10/0x10
[  232.009454][T10284]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  232.009470][T10284]  ? __pfx_aa_file_perm+0x10/0x10
[  232.009492][T10284]  do_splice_direct+0x181/0x270
[  232.009513][T10284]  ? __pfx_do_splice_direct+0x10/0x10
[  232.009531][T10284]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  232.009557][T10284]  ? rw_verify_area+0x258/0x650
[  232.009577][T10284]  do_sendfile+0x4da/0x7e0
[  232.009604][T10284]  ? __pfx_do_sendfile+0x10/0x10
[  232.009626][T10284]  ? __se_sys_futex+0x36f/0x400
[  232.009645][T10284]  __se_sys_sendfile64+0x13e/0x190
[  232.009663][T10284]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  232.009679][T10284]  ? rcu_is_watching+0x15/0xb0
[  232.009698][T10284]  ? do_syscall_64+0xbe/0x3b0
[  232.009716][T10284]  do_syscall_64+0xfa/0x3b0
[  232.009730][T10284]  ? lockdep_hardirqs_on+0x9c/0x150
[  232.009753][T10284]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.009766][T10284]  ? exc_page_fault+0x9f/0xf0
[  232.009790][T10284]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  232.009804][T10284] RIP: 0033:0x7f9fe398e929
[  232.009818][T10284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  232.009831][T10284] RSP: 002b:00007f9fe4772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  232.009846][T10284] RAX: ffffffffffffffda RBX: 00007f9fe3bb5fa0 RCX: 00007f9fe398e929
[  232.009858][T10284] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004
[  232.009868][T10284] RBP: 00007f9fe3a10b39 R08: 0000000000000000 R09: 0000000000000000
[  232.009907][T10284] R10: 0000000000fffe82 R11: 0000000000000246 R12: 0000000000000000
[  232.009918][T10284] R13: 0000000000000000 R14: 00007f9fe3bb5fa0 R15: 00007ffd38494118
[  232.009944][T10284]  </TASK>
[  232.215441][T10284] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[  232.602477][ T6344] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.618681][ T6344] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair.
[  232.988640][T10328] netlink: 'syz.4.1488': attribute type 12 has an invalid length.
[  232.994596][T10328] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1488'.
[  233.110845][T10333] loop3: detected capacity change from 0 to 256
[  233.208835][T10340] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1493'.
[  233.404474][T10354] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  233.633432][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1508'.
[  233.900701][T10364] loop4: detected capacity change from 0 to 40427
[  233.941848][T10364] F2FS-fs (loop4): invalid crc value
[  234.085533][T10377] program syz.3.1511 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  234.354506][T10364] F2FS-fs (loop4): Start checkpoint disabled!
[  234.359903][T10364] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  234.430681][   T67] bio_check_eod: 2 callbacks suppressed
[  234.430747][   T67] kworker/u10:4: attempt to access beyond end of device
[  234.430747][   T67] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  234.445280][   T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u10:4 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  234.445302][   T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.445312][   T67] Workqueue: writeback wb_workfn (flush-7:4)
[  234.445343][   T67] Call Trace:
[  234.445350][   T67]  <TASK>
[  234.445357][   T67]  dump_stack_lvl+0x189/0x250
[  234.445381][   T67]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.445396][   T67]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  234.445417][   T67]  ? __pfx_queue_work_on+0x10/0x10
[  234.445437][   T67]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.445456][   T67]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.445477][   T67]  ? f2fs_hw_is_readonly+0x39b/0x470
[  234.445504][   T67]  f2fs_handle_critical_error+0x37c/0x540
[  234.445529][   T67]  f2fs_write_end_io+0x495/0x810
[  234.445542][   T67]  ? blkg_put+0x22/0x240
[  234.445574][   T67]  __submit_merged_bio+0x27a/0x6a0
[  234.445600][   T67]  __submit_merged_write_cond+0x255/0x530
[  234.445626][   T67]  f2fs_write_data_pages+0x261d/0x3000
[  234.445685][   T67]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.445751][   T67]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  234.445802][   T67]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  234.445836][   T67]  ? trace_f2fs_writepages+0x7f/0x200
[  234.445856][   T67]  ? f2fs_write_node_pages+0x478/0x6e0
[  234.445880][   T67]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  234.445911][   T67]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.445933][   T67]  do_writepages+0x32e/0x550
[  234.445956][   T67]  ? reacquire_held_locks+0x127/0x1d0
[  234.445973][   T67]  ? writeback_sb_inodes+0x372/0x1000
[  234.445997][   T67]  __writeback_single_inode+0x145/0xff0
[  234.446014][   T67]  ? do_raw_spin_unlock+0x4d/0x240
[  234.446038][   T67]  writeback_sb_inodes+0x6b5/0x1000
[  234.446079][   T67]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  234.446135][   T67]  ? rcu_is_watching+0x15/0xb0
[  234.446163][   T67]  wb_writeback+0x43b/0xaf0
[  234.446186][   T67]  ? queue_io+0x3a1/0x590
[  234.446205][   T67]  ? __pfx_wb_writeback+0x10/0x10
[  234.446227][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.446251][   T67]  wb_workfn+0x409/0xef0
[  234.446287][   T67]  ? __pfx_wb_workfn+0x10/0x10
[  234.446313][   T67]  ? __lock_acquire+0xab9/0xd20
[  234.446339][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.446362][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.446381][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.446396][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.446414][   T67]  process_scheduled_works+0xae1/0x17b0
[  234.446460][   T67]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.446493][   T67]  worker_thread+0x8a0/0xda0
[  234.446528][   T67]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.446556][   T67]  ? __kthread_parkme+0x7b/0x200
[  234.446585][   T67]  kthread+0x711/0x8a0
[  234.446608][   T67]  ? __pfx_worker_thread+0x10/0x10
[  234.446624][   T67]  ? __pfx_kthread+0x10/0x10
[  234.446645][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.446670][   T67]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.446690][   T67]  ? __pfx_kthread+0x10/0x10
[  234.446733][   T67]  ret_from_fork+0x3fc/0x770
[  234.446749][   T67]  ? __pfx_ret_from_fork+0x10/0x10
[  234.446765][   T67]  ? __switch_to_asm+0x39/0x70
[  234.446780][   T67]  ? __switch_to_asm+0x33/0x70
[  234.446796][   T67]  ? __pfx_kthread+0x10/0x10
[  234.446813][   T67]  ret_from_fork_asm+0x1a/0x30
[  234.446840][   T67]  </TASK>
[  234.446846][   T67] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  234.582374][T10390] xt_TCPMSS: Only works on TCP SYN packets
[  234.589081][   T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u10:4 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  234.589104][   T67] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  234.589115][   T67] Workqueue: writeback wb_workfn (flush-7:4)
[  234.589147][   T67] Call Trace:
[  234.589153][   T67]  <TASK>
[  234.589160][   T67]  dump_stack_lvl+0x189/0x250
[  234.589183][   T67]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.589196][   T67]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  234.589217][   T67]  ? __pfx_queue_work_on+0x10/0x10
[  234.589236][   T67]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  234.589255][   T67]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.589275][   T67]  ? f2fs_hw_is_readonly+0x39b/0x470
[  234.589301][   T67]  f2fs_handle_critical_error+0x37c/0x540
[  234.589325][   T67]  f2fs_write_end_io+0x495/0x810
[  234.589338][   T67]  ? blkg_put+0x22/0x240
[  234.589368][   T67]  __submit_merged_bio+0x27a/0x6a0
[  234.589394][   T67]  __submit_merged_write_cond+0x255/0x530
[  234.589418][   T67]  f2fs_write_data_pages+0x261d/0x3000
[  234.589469][   T67]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.589501][   T67]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  234.589547][   T67]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  234.589578][   T67]  ? trace_f2fs_writepages+0x7f/0x200
[  234.589597][   T67]  ? f2fs_write_node_pages+0x478/0x6e0
[  234.589620][   T67]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  234.589658][   T67]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  234.589679][   T67]  do_writepages+0x32e/0x550
[  234.589731][   T67]  ? reacquire_held_locks+0x127/0x1d0
[  234.589748][   T67]  ? writeback_sb_inodes+0x372/0x1000
[  234.589772][   T67]  __writeback_single_inode+0x145/0xff0
[  234.589788][   T67]  ? do_raw_spin_unlock+0x4d/0x240
[  234.589810][   T67]  writeback_sb_inodes+0x6b5/0x1000
[  234.589849][   T67]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  234.589901][   T67]  ? rcu_is_watching+0x15/0xb0
[  234.589944][   T67]  wb_writeback+0x43b/0xaf0
[  234.589969][   T67]  ? queue_io+0x3a1/0x590
[  234.589986][   T67]  ? __pfx_wb_writeback+0x10/0x10
[  234.590009][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.590033][   T67]  wb_workfn+0x409/0xef0
[  234.590067][   T67]  ? __pfx_wb_workfn+0x10/0x10
[  234.590090][   T67]  ? __lock_acquire+0xab9/0xd20
[  234.590115][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.590138][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.590157][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.590171][   T67]  ? process_scheduled_works+0x9ef/0x17b0
[  234.590189][   T67]  process_scheduled_works+0xae1/0x17b0
[  234.590232][   T67]  ? __pfx_process_scheduled_works+0x10/0x10
[  234.590264][   T67]  worker_thread+0x8a0/0xda0
[  234.590283][   T67]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  234.590310][   T67]  ? __kthread_parkme+0x7b/0x200
[  234.590337][   T67]  kthread+0x711/0x8a0
[  234.590359][   T67]  ? __pfx_worker_thread+0x10/0x10
[  234.590375][   T67]  ? __pfx_kthread+0x10/0x10
[  234.590396][   T67]  ? _raw_spin_unlock_irq+0x23/0x50
[  234.590413][   T67]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.590432][   T67]  ? __pfx_kthread+0x10/0x10
[  234.590452][   T67]  ret_from_fork+0x3fc/0x770
[  234.590470][   T67]  ? __pfx_ret_from_fork+0x10/0x10
[  234.590491][   T67]  ? __switch_to_asm+0x39/0x70
[  234.590508][   T67]  ? __switch_to_asm+0x33/0x70
[  234.590523][   T67]  ? __pfx_kthread+0x10/0x10
[  234.590543][   T67]  ret_from_fork_asm+0x1a/0x30
[  234.590576][   T67]  </TASK>
[  234.591449][   T67] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  235.401852][ T5900] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  235.550143][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  235.555982][ T5900] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  235.559275][ T5900] usb 5-1: config 0 has no interface number 0
[  235.563793][ T5900] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  235.568294][ T5900] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  235.575559][ T5900] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  235.578874][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  235.581991][ T5900] usb 5-1: Product: syz
[  235.583782][ T5900] usb 5-1: SerialNumber: syz
[  235.588884][ T5900] usb 5-1: config 0 descriptor??
[  235.606932][ T5900] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input12
[  235.805958][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.812518][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.815493][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.818268][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.821202][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.824170][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.827128][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.830093][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.833002][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.835886][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  235.850640][ T5900] usb 5-1: USB disconnect, device number 17
[  235.850740][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  235.886632][ T5900] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  236.235321][T10426] loop3: detected capacity change from 0 to 32768
[  236.262722][T10426] JBD2: Ignoring recovery information on journal
[  236.284449][T10426] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  236.324649][T10426] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (0, expected 74)
[  236.335457][T10426] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  236.339146][T10426] OCFS2: File system is now read-only.
[  236.341845][T10426] (syz.3.1533,10426,1):ocfs2_search_one_group:1738 ERROR: status = -30
[  236.345198][T10426] (syz.3.1533,10426,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[  236.348476][T10426] (syz.3.1533,10426,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  236.360333][T10426] (syz.3.1533,10426,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  236.363504][T10426] (syz.3.1533,10426,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  236.366625][T10426] (syz.3.1533,10426,1):ocfs2_mknod_locked:638 ERROR: status = -30
[  236.369619][T10426] (syz.3.1533,10426,1):ocfs2_mknod:385 ERROR: status = -30
[  236.375300][T10426] (syz.3.1533,10426,0):ocfs2_mknod:502 ERROR: status = -30
[  236.380161][T10426] (syz.3.1533,10426,0):ocfs2_mkdir:658 ERROR: status = -30
[  236.404725][T10434] loop4: detected capacity change from 0 to 8
[  236.429546][T10434] SQUASHFS error: lzo decompression failed, data probably corrupt
[  236.436838][T10434] SQUASHFS error: Failed to read block 0x28d: -5
[  236.439300][T10434] SQUASHFS error: Unable to read metadata cache entry [28b]
[  236.443116][T10434] SQUASHFS error: Unable to read inode 0x11f
[  236.446602][ T6344] ocfs2: Unmounting device (7,3) on (node local)
[  236.634430][T10440] loop3: detected capacity change from 0 to 512
[  236.654327][T10440] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0f000002)
[  237.105487][T10462] loop3: detected capacity change from 0 to 2048
[  237.132390][T10463] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.142867][T10463] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  237.149467][T10463] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  237.161654][T10463] Remounting filesystem read-only
[  237.292882][ T5218] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  237.296604][ T5218] Bluetooth: hci1: Injecting HCI hardware error event
[  237.301472][ T5835] Bluetooth: hci1: hardware error 0x00
[  238.886066][T10502] loop3: detected capacity change from 0 to 256
[  239.101676][T10502] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  239.451588][ T5835] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  240.048366][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1569'.
[  240.217359][T10521] loop4: detected capacity change from 0 to 2048
[  240.250626][T10521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.283668][T10520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  240.297129][T10520] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  240.304262][T10520] EXT4-fs (loop4): This should not happen!! Data will be lost
[  240.304262][T10520] 
[  240.307563][T10520] EXT4-fs (loop4): Total free blocks count 0
[  240.309467][T10520] EXT4-fs (loop4): Free/Dirty block details
[  240.312916][T10520] EXT4-fs (loop4): free_blocks=2415919104
[  240.315156][T10520] EXT4-fs (loop4): dirty_blocks=16
[  240.317021][T10520] EXT4-fs (loop4): Block reservation details
[  240.319202][T10520] EXT4-fs (loop4): i_reserved_data_blocks=1
[  240.351693][ T7097] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.410302][ T1270] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  240.870620][ T1270] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=d6.bb
[  240.882174][ T1270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.895479][ T1270] usb 4-1: Product: syz
[  240.906323][ T1270] usb 4-1: Manufacturer: syz
[  240.908090][ T1270] usb 4-1: SerialNumber: syz
[  240.945369][ T1270] usb 4-1: config 0 descriptor??
[  240.997585][ T1270] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  241.208547][ T1270] gspca_sn9c2028: read1 error -71
[  241.214307][ T1270] gspca_sn9c2028: read1 error -71
[  241.216876][ T1270] gspca_sn9c2028: read1 error -71
[  241.219057][ T1270] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  241.228812][ T1270] usb 4-1: USB disconnect, device number 15
[  241.479381][T10545] loop4: detected capacity change from 0 to 4096
[  241.509732][T10550] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  242.117053][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'.
[  242.124747][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'.
[  242.127541][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'.
[  242.360106][   T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  242.770283][   T10] usb 5-1: Using ep0 maxpacket: 16
[  242.774390][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.778684][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.782801][   T10] usb 5-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00
[  242.786264][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.793166][   T10] usb 5-1: config 0 descriptor??
[  243.213911][   T10] nzxt-kraken2 0003:1E71:170E.0007: hidraw0: USB HID v0.00 Device [HID 1e71:170e] on usb-dummy_hcd.4-1/input0
[  243.410177][ T5899] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  243.421661][   T10] usb 5-1: USB disconnect, device number 18
[  243.570129][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  243.574661][ T5899] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  243.578145][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.588069][ T5899] pvrusb2: Hardware description: Terratec Grabster AV400
[  243.593030][ T5899] pvrusb2: **********
[  243.595162][ T5899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  243.598947][ T5899] pvrusb2: Important functionality might not be entirely working.
[  243.602875][ T5899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  243.607628][ T5899] pvrusb2: **********
[  243.794797][ T2395] pvrusb2: Invalid write control endpoint
[  243.849876][ T2395] pvrusb2: Invalid write control endpoint
[  243.852959][ T2395] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  243.859136][ T2395] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  243.862321][ T2395] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  243.866157][ T2395] pvrusb2: Device being rendered inoperable
[  243.877513][ T2395] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  243.880825][ T2395] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  243.889587][ T2395] pvrusb2: Attached sub-driver cx25840
[  243.892252][ T2395] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  243.896546][ T2395] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  244.003953][ T5885] usb 4-1: USB disconnect, device number 16
[  244.188253][T10587] loop4: detected capacity change from 0 to 32768
[  244.198427][T10587] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1598 (10587)
[  244.210566][T10587] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  244.213704][T10587] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  244.216535][T10587] BTRFS info (device loop4): using free-space-tree
[  244.249130][   T33] audit: type=1800 audit(1752297352.370:71): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1598" name="file1" dev="loop4" ino=260 res=0 errno=0
[  244.324284][   T33] audit: type=1800 audit(1752297352.450:72): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1598" name="file1" dev="loop4" ino=260 res=0 errno=0
[  245.253384][ T7097] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  246.034435][T10627] loop4: detected capacity change from 0 to 64
[  246.606272][ T5885] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  246.770280][ T5885] usb 4-1: Using ep0 maxpacket: 32
[  246.775193][ T5885] usb 4-1: unable to get BOS descriptor or descriptor too short
[  246.779713][ T5885] usb 4-1: config 4 has an invalid interface number: 10 but max is 0
[  246.783488][ T5885] usb 4-1: config 4 has no interface number 0
[  246.786117][ T5885] usb 4-1: config 4 interface 10 has no altsetting 0
[  246.791751][ T5885] usb 4-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  246.795426][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.798555][ T5885] usb 4-1: Product: syz
[  246.800594][ T5885] usb 4-1: Manufacturer: syz
[  246.802525][ T5885] usb 4-1: SerialNumber: syz
[  246.940057][   T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  247.022867][ T5885] radio-si470x 4-1:4.10: could not find interrupt in endpoint
[  247.025271][ T5885] radio-si470x 4-1:4.10: probe with driver radio-si470x failed with error -5
[  247.029353][ T5885] usbhid 4-1:4.10: couldn't find an input interrupt endpoint
[  247.036049][ T5885] usb 4-1: USB disconnect, device number 17
[  247.104022][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.108370][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.113074][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  247.120083][   T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  247.124166][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.129377][   T10] usb 5-1: config 0 descriptor??
[  247.434017][T10654] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1621'.
[  247.541658][   T10] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd
[  247.586718][   T10] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  247.809164][ T1270] usb 5-1: USB disconnect, device number 19
[  247.831218][T10670] loop3: detected capacity change from 0 to 1024
[  247.834853][T10670] EXT4-fs: Ignoring removed nobh option
[  247.837044][T10670] EXT4-fs: Ignoring removed bh option
[  247.875133][T10670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.922154][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.610325][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  248.772827][   T10] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  248.776021][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.782961][   T10] usb 5-1: config 0 descriptor??
[  248.791092][   T10] pwc: Creative Labs Webcam Pro Ex detected.
[  249.000637][   T10] pwc: Failed to set LED on/off time (-71)
[  249.007155][   T10] pwc: send_video_command error -71
[  249.012097][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  249.019398][   T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71
[  249.024516][   T10] usb 5-1: USB disconnect, device number 20
[  249.112378][T10702] netlink: 'syz.1.1642': attribute type 10 has an invalid length.
[  249.141343][T10702] team0: Port device dummy0 added
[  249.433055][T10713] batadv0: mtu less than device minimum
[  249.435639][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.439722][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.443500][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.447931][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.452130][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.456414][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.460683][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.465010][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.469043][T10713] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  249.868114][T10716] loop3: detected capacity change from 0 to 1024
[  249.918339][T10716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.982744][ T6344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.039497][T10725] loop3: detected capacity change from 0 to 256
[  250.043969][T10725] exfat: Deprecated parameter 'utf8'
[  250.046300][T10725] exfat: Deprecated parameter 'utf8'
[  250.048594][T10725] exfat: Deprecated parameter 'utf8'
[  250.052961][T10725] exfat: Deprecated parameter 'utf8'
[  250.114181][T10725] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  250.265024][T10729] loop3: detected capacity change from 0 to 4096
[  250.274245][ T1270] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  250.449908][ T1270] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  250.453471][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.464297][ T1270] usb 5-1: config 0 descriptor??
[  250.473921][ T1270] cp210x 5-1:0.0: cp210x converter detected
[  250.699122][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1660'.
[  251.096341][ T1270] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  251.102338][ T1270] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  251.107120][ T1270] usb 5-1: cp210x converter now attached to ttyUSB0
[  251.122005][ T1270] usb 5-1: USB disconnect, device number 21
[  251.141072][ T1270] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  251.144648][ T1270] cp210x 5-1:0.0: device disconnected
[  251.978221][T10790] netlink: 'syz.4.1684': attribute type 10 has an invalid length.
[  251.985048][T10790] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1684'.
[  252.065056][T10782] loop3: detected capacity change from 0 to 40427
[  252.068965][T10782] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  252.082356][T10782] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  252.209335][T10782] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  252.212354][T10782] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  252.261911][T10797] f2fs_ckpt-7:3: attempt to access beyond end of device
[  252.261911][T10797] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  252.269012][T10797] CPU: 1 UID: 0 PID: 10797 Comm: f2fs_ckpt-7:3 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  252.269027][T10797] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  252.269033][T10797] Call Trace:
[  252.269037][T10797]  <TASK>
[  252.269042][T10797]  dump_stack_lvl+0x189/0x250
[  252.269061][T10797]  ? __pfx_dump_stack_lvl+0x10/0x10
[  252.269070][T10797]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  252.269084][T10797]  ? __pfx_queue_work_on+0x10/0x10
[  252.269096][T10797]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  252.269107][T10797]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  252.269119][T10797]  ? f2fs_hw_is_readonly+0x39b/0x470
[  252.269136][T10797]  f2fs_handle_critical_error+0x37c/0x540
[  252.269150][T10797]  f2fs_write_end_io+0x495/0x810
[  252.269158][T10797]  ? blkg_put+0x22/0x240
[  252.269176][T10797]  __submit_merged_bio+0x27a/0x6a0
[  252.269191][T10797]  __submit_merged_write_cond+0x255/0x530
[  252.269205][T10797]  f2fs_write_data_pages+0x261d/0x3000
[  252.269233][T10797]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  252.269279][T10797]  ? __lock_acquire+0xab9/0xd20
[  252.269293][T10797]  ? do_raw_spin_lock+0x121/0x290
[  252.269309][T10797]  ? do_raw_spin_unlock+0x4d/0x240
[  252.269321][T10797]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  252.269333][T10797]  do_writepages+0x32e/0x550
[  252.269348][T10797]  ? do_raw_spin_unlock+0x4d/0x240
[  252.269361][T10797]  filemap_fdatawrite+0x191/0x230
[  252.269371][T10797]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  252.269402][T10797]  ? do_raw_spin_unlock+0x4d/0x240
[  252.269444][T10797]  f2fs_sync_dirty_inodes+0x31f/0x830
[  252.269459][T10797]  f2fs_write_checkpoint+0x94a/0x1de0
[  252.269479][T10797]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  252.269510][T10797]  ? __pfx_down_write+0x10/0x10
[  252.269519][T10797]  ? __pfx___schedule+0x10/0x10
[  252.269534][T10797]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  252.269545][T10797]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  252.269561][T10797]  issue_checkpoint_thread+0xd9/0x260
[  252.269571][T10797]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  252.269580][T10797]  ? __pfx_autoremove_wake_function+0x10/0x10
[  252.269592][T10797]  ? __kthread_parkme+0x7b/0x200
[  252.269605][T10797]  ? __kthread_parkme+0x1a1/0x200
[  252.269617][T10797]  kthread+0x711/0x8a0
[  252.269630][T10797]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  252.269638][T10797]  ? __pfx_kthread+0x10/0x10
[  252.269649][T10797]  ? _raw_spin_unlock_irq+0x23/0x50
[  252.269660][T10797]  ? lockdep_hardirqs_on+0x9c/0x150
[  252.269671][T10797]  ? __pfx_kthread+0x10/0x10
[  252.269682][T10797]  ret_from_fork+0x3fc/0x770
[  252.269693][T10797]  ? __pfx_ret_from_fork+0x10/0x10
[  252.269704][T10797]  ? __switch_to_asm+0x39/0x70
[  252.269713][T10797]  ? __switch_to_asm+0x33/0x70
[  252.269722][T10797]  ? __pfx_kthread+0x10/0x10
[  252.269733][T10797]  ret_from_fork_asm+0x1a/0x30
[  252.269751][T10797]  </TASK>
[  252.269754][T10797] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  253.285832][T10822] loop4: detected capacity change from 0 to 2048
[  253.307289][T10822] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  253.315218][ T7037] udevd[7037]: incorrect nilfs2 checksum on /dev/loop4
[  253.330728][T10822] NILFS (loop4): mounting unchecked fs
[  253.339861][ T7037] udevd[7037]: incorrect nilfs2 checksum on /dev/loop4
[  253.382476][T10822] NILFS (loop4): recovery complete
[  253.397626][T10823] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.545277][ T1270] kernel write not supported for file /adsp1 (pid: 1270 comm: kworker/1:2)
[  253.689451][T10831] syzkaller1: tun_chr_ioctl cmd 1074025677
[  253.698511][T10831] syzkaller1: Linktype set failed because interface is up
[  253.710291][ T1270] syzkaller1: tun_net_xmit 90
[  254.032500][ T5862] syzkaller1: tun_net_xmit 86
[  255.165099][ T5899] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  255.343856][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short
[  255.346286][ T5899] usb 5-1: no configurations
[  255.350166][ T5899] usb 5-1: can't read configurations, error -22
[  255.526255][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  255.528262][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  255.968819][T10889] loop4: detected capacity change from 0 to 128
[  257.537074][T10935] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[  257.607420][T10939] bridge0: entered promiscuous mode
[  257.607503][T10939] macsec1: entered promiscuous mode
[  257.607592][T10939] macsec1: entered allmulticast mode
[  257.615634][T10939] bridge0: entered allmulticast mode
[  257.616613][T10939] bridge0: port 3(macsec1) entered blocking state
[  257.616715][T10939] bridge0: port 3(macsec1) entered disabled state
[  257.625510][T10939] bridge0: left allmulticast mode
[  257.625700][T10939] bridge0: left promiscuous mode
[  257.798398][T10947] loop4: detected capacity change from 0 to 1024
[  257.802680][T10946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  257.805673][T10946] IPv6: NLM_F_CREATE should be set when creating new route
[  257.831635][T10947] hfsplus: bad catalog entry type
[  257.845958][  T152] hfsplus: b-tree write err: -5, ino 4
[  257.905363][T10949] loop4: detected capacity change from 0 to 4096
[  257.912088][T10949] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  257.950606][T10949] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  258.098206][T10959] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1758'.
[  258.667656][T10965] loop3: detected capacity change from 0 to 32768
[  258.686756][T10965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1759 (10965)
[  258.828862][T10965] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  258.852297][T10965] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[  258.865006][T10965] BTRFS info (device loop3): using free-space-tree
[  259.073136][T10999] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1766'.
[  259.141623][T10965] BTRFS error (device loop3): balance: invalid convert metadata profile raid1c4
[  259.388431][ T6344] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.923698][   T33] audit: type=1326 audit(1752297368.045:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  259.945153][   T33] audit: type=1326 audit(1752297368.055:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  259.970048][   T33] audit: type=1326 audit(1752297368.055:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  259.978373][   T33] audit: type=1326 audit(1752297368.055:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  259.988710][   T33] audit: type=1326 audit(1752297368.055:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  260.012424][   T33] audit: type=1326 audit(1752297368.075:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11011 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  260.032957][   T33] audit: type=1326 audit(1752297368.075:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fd96adc11e5 code=0x7ffc0000
[  260.174203][T11020] loop3: detected capacity change from 0 to 2048
[  260.180335][   T33] audit: type=1326 audit(1752297368.295:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11014 comm="syz.4.1770" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd96ad8e929 code=0x7ffc0000
[  260.228994][T11020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.140466][ T1270] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  261.325449][ T1270] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  261.338488][ T1270] usb 5-1: config 0 has no interface number 0
[  261.348911][ T1270] usb 5-1: config 0 interface 39 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  261.402862][ T1270] usb 5-1: New USB device found, idVendor=0499, idProduct=4d3f, bcdDevice=d2.2a
[  261.407649][ T1270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.411582][ T1270] usb 5-1: Product: syz
[  261.413723][ T1270] usb 5-1: Manufacturer: syz
[  261.415916][ T1270] usb 5-1: SerialNumber: syz
[  261.432323][ T1270] usb 5-1: config 0 descriptor??
[  261.814536][ T1270] usb 5-1: USB disconnect, device number 24
[  261.901846][ T7037] udevd[7037]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.39/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  261.985592][T11049] overlayfs: failed to clone upperpath
[  262.974712][T11070] netlink: 'syz.3.1794': attribute type 10 has an invalid length.
[  262.977994][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1794'.
[  263.014717][T11070] team0: Port device geneve0 added
[  263.395053][T11084] loop4: detected capacity change from 0 to 1024
[  263.412141][T11084] EXT4-fs: Ignoring removed nobh option
[  263.423381][T11084] EXT4-fs: inline encryption not supported
[  263.458342][T11084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.489564][T11084] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1799: Allocating blocks 385-513 which overlap fs metadata
[  263.526516][T11084] EXT4-fs (loop4): pa ffff8881035ec2b8: logic 16, phys. 129, len 24
[  263.529850][T11084] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8
[  263.555055][T11084] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[  263.569187][T11084] EXT4-fs (loop4): This should not happen!! Data will be lost
[  263.569187][T11084] 
[  263.577143][T11084] EXT4-fs (loop4): Total free blocks count 0
[  263.584638][T11084] EXT4-fs (loop4): Free/Dirty block details
[  263.586696][T11084] EXT4-fs (loop4): free_blocks=128
[  263.589491][T11084] EXT4-fs (loop4): dirty_blocks=0
[  263.596720][T11084] EXT4-fs (loop4): Block reservation details
[  263.603309][T11084] EXT4-fs (loop4): i_reserved_data_blocks=0
[  265.215000][T11152] loop4: detected capacity change from 0 to 32768
[  265.225603][T11152] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1830 (11152)
[  265.252508][T11152] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  265.256010][T11152] BTRFS info (device loop4): using sha256 (sha256-x86_64) checksum algorithm
[  265.258727][T11152] BTRFS info (device loop4): disk space caching is enabled
[  265.261193][T11152] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  265.349870][T11152] BTRFS info (device loop4): rebuilding free space tree
[  265.360607][T11152] BTRFS info (device loop4): disabling free space tree
[  265.363048][T11152] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  265.380519][T11152] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  265.539062][ T7097] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  266.138475][T11183] loop4: detected capacity change from 0 to 32768
[  266.183874][T11183] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.201196][T11183] XFS (loop4): Ending clean mount
[  266.204853][T11183] XFS (loop4): Quotacheck needed: Please wait.
[  266.237488][T11183] XFS (loop4): Quotacheck: Done.
[  266.282617][ T7097] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.883169][T11215] loop4: detected capacity change from 0 to 40427
[  266.898731][T11215] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  266.901961][T11215] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  266.908169][T11215] F2FS-fs (loop4): invalid crc value
[  266.969824][T11215] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  266.973103][T11215] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  267.673578][   T33] audit: type=1800 audit(1752297375.385:81): pid=11227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1849" name="file1" dev="loop4" ino=10 res=0 errno=0
[  268.754563][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.754563][ T6764] loop4: rw=1048577, sector=77824, nr_sectors = 3120 limit=40427
[  268.777284][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.777284][ T6764] loop4: rw=1048577, sector=80944, nr_sectors = 976 limit=40427
[  268.809354][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.809354][ T6764] loop4: rw=1048577, sector=49152, nr_sectors = 3840 limit=40427
[  268.818448][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.818448][ T6764] loop4: rw=1048577, sector=52992, nr_sectors = 256 limit=40427
[  268.844963][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.844963][ T6764] loop4: rw=1048577, sector=57344, nr_sectors = 3864 limit=40427
[  268.876778][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.876778][ T6764] loop4: rw=1048577, sector=61208, nr_sectors = 3848 limit=40427
[  268.924126][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.924126][ T6764] loop4: rw=1048577, sector=65056, nr_sectors = 5008 limit=40427
[  268.970421][ T6764] kworker/u10:8: attempt to access beyond end of device
[  268.970421][ T6764] loop4: rw=1048577, sector=70064, nr_sectors = 3664 limit=40427
[  269.733525][ T7097] syz-executor: attempt to access beyond end of device
[  269.733525][ T7097] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  269.744780][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  269.744803][ T7097] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  269.744812][ T7097] Call Trace:
[  269.744818][ T7097]  <TASK>
[  269.744824][ T7097]  dump_stack_lvl+0x189/0x250
[  269.744849][ T7097]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.744863][ T7097]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  269.744882][ T7097]  ? __pfx_queue_work_on+0x10/0x10
[  269.744898][ T7097]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  269.744916][ T7097]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  269.744937][ T7097]  ? f2fs_hw_is_readonly+0x39b/0x470
[  269.744960][ T7097]  f2fs_handle_critical_error+0x37c/0x540
[  269.744983][ T7097]  f2fs_write_end_io+0x495/0x810
[  269.744996][ T7097]  ? blkg_put+0x22/0x240
[  269.745024][ T7097]  __submit_merged_bio+0x27a/0x6a0
[  269.745050][ T7097]  ? up_write+0x1c4/0x420
[  269.745072][ T7097]  __submit_merged_write_cond+0x44c/0x530
[  269.745096][ T7097]  f2fs_sync_node_pages+0x1869/0x1a00
[  269.745120][ T7097]  ? mlock_drain_local+0x79/0x490
[  269.745188][ T7097]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  269.745229][ T7097]  ? f2fs_write_checkpoint+0xe33/0x1de0
[  269.745247][ T7097]  ? up_write+0x1c4/0x420
[  269.745269][ T7097]  f2fs_write_checkpoint+0xe5f/0x1de0
[  269.745302][ T7097]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  269.745355][ T7097]  ? kill_f2fs_super+0x298/0x6c0
[  269.745376][ T7097]  kill_f2fs_super+0x2c3/0x6c0
[  269.745396][ T7097]  ? __pfx_kill_f2fs_super+0x10/0x10
[  269.745408][ T7097]  ? radix_tree_delete_item+0x2b6/0x400
[  269.745436][ T7097]  ? shrinker_free+0x2ce/0x3e0
[  269.745458][ T7097]  deactivate_locked_super+0xbc/0x130
[  269.745495][ T7097]  cleanup_mnt+0x425/0x4c0
[  269.745510][ T7097]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.745533][ T7097]  task_work_run+0x1d4/0x260
[  269.745554][ T7097]  ? __pfx_task_work_run+0x10/0x10
[  269.745573][ T7097]  ? __x64_sys_umount+0x122/0x160
[  269.745594][ T7097]  ? exit_to_user_mode_loop+0x40/0x110
[  269.745612][ T7097]  exit_to_user_mode_loop+0xec/0x110
[  269.745628][ T7097]  do_syscall_64+0x2bd/0x3b0
[  269.745641][ T7097]  ? lockdep_hardirqs_on+0x9c/0x150
[  269.745661][ T7097]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.745674][ T7097]  ? exc_page_fault+0x9f/0xf0
[  269.745696][ T7097]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.745709][ T7097] RIP: 0033:0x7fd96ad8fc57
[  269.745724][ T7097] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  269.745734][ T7097] RSP: 002b:00007ffda5bb3d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  269.745749][ T7097] RAX: 0000000000000000 RBX: 00007fd96ae10925 RCX: 00007fd96ad8fc57
[  269.745757][ T7097] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffda5bb3e10
[  269.745764][ T7097] RBP: 00007ffda5bb3e10 R08: 0000000000000000 R09: 0000000000000000
[  269.745771][ T7097] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffda5bb4ea0
[  269.745780][ T7097] R13: 00007fd96ae10925 R14: 0000000000041793 R15: 00007ffda5bb4ee0
[  269.745801][ T7097]  </TASK>
[  269.746071][ T7097] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  270.281181][T11266] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  270.682230][T11284] net_ratelimit: 10 callbacks suppressed
[  270.682248][T11284] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  272.154191][ T5885] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  272.323183][ T5885] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  272.332151][ T5885] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.409772][ T5885] usb 5-1: config 0 descriptor??
[  272.584811][T11339] SET target dimension over the limit!
[  272.677781][ T5885] kaweth 5-1:0.0: Firmware present in device.
[  272.869168][ T5885] kaweth 5-1:0.0: Statistics collection: 0
[  272.872248][ T5885] kaweth 5-1:0.0: Multicast filter limit: 0
[  272.874406][ T5885] kaweth 5-1:0.0: MTU: 0
[  272.879471][ T5885] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00
[  273.070951][ T5885] kaweth 5-1:0.0: probe with driver kaweth failed with error -5
[  273.082519][ T5885] usb 5-1: USB disconnect, device number 25
[  273.103290][T11357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1908'.
[  274.035297][T11376] loop4: detected capacity change from 0 to 2048
[  274.072066][T11356]  loop4: p2 p3 < > p4 < p5 >
[  274.078764][T11356] loop4: partition table partially beyond EOD, truncated
[  274.083796][T11356] loop4: p2 start 16908804 is beyond EOD, truncated
[  274.086319][T11356] loop4: p3 start 4284289 is beyond EOD, truncated
[  274.090869][T11356] loop4: p5 start 16908804 is beyond EOD, truncated
[  274.097909][T11376]  loop4: p2 p3 < > p4 < p5 >
[  274.099776][T11376] loop4: partition table partially beyond EOD, truncated
[  274.102767][T11376] loop4: p2 start 16908804 is beyond EOD, truncated
[  274.105503][T11376] loop4: p3 start 4284289 is beyond EOD, truncated
[  274.109752][T11376] loop4: p5 start 16908804 is beyond EOD, truncated
[  274.165913][T11356] udevd[11356]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  274.185572][T11356] udevd[11356]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  276.994749][T11428] loop4: detected capacity change from 0 to 32768
[  277.008667][T11428] 
[  277.008667][T11428]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.008667][T11428] 
[  277.064826][T11428] 
[  277.064826][T11428]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.064826][T11428] 
[  277.074896][T11428] 
[  277.074896][T11428]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.074896][T11428] 
[  277.098626][T11428] ERROR: (device loop4): diWrite: ixpxd invalid
[  277.098626][T11428] 
[  277.106868][T11428] ERROR: (device loop4): txCommit: 
[  277.106868][T11428] 
[  277.133837][ T7097] 
[  277.133837][ T7097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.133837][ T7097] 
[  277.138233][ T7097] 
[  277.138233][ T7097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  277.138233][ T7097] 
[  278.000139][ T1270] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  278.050266][   T33] audit: type=1326 audit(1752297386.165:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.070080][   T33] audit: type=1326 audit(1752297386.165:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.088987][   T33] audit: type=1326 audit(1752297386.165:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.108905][   T33] audit: type=1326 audit(1752297386.165:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.130651][   T33] audit: type=1326 audit(1752297386.165:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.138923][   T33] audit: type=1326 audit(1752297386.165:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.157487][   T33] audit: type=1326 audit(1752297386.165:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.166691][ T1270] usb 5-1: Using ep0 maxpacket: 16
[  278.180141][   T33] audit: type=1326 audit(1752297386.165:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9fe392ab19 code=0x7ffc0000
[  278.189640][ T1270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  278.199745][ T1270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  278.204663][ T1270] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  278.208147][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.214949][   T33] audit: type=1326 audit(1752297386.165:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe398e929 code=0x7ffc0000
[  278.230253][   T33] audit: type=1326 audit(1752297386.165:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11465 comm="syz.3.1956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe398e929 code=0x7ffc0000
[  278.250344][ T1270] usb 5-1: config 0 descriptor??
[  278.686331][ T1270] hid-multitouch 0003:1FD2:6007.0009: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0
[  278.871655][  T972] usb 5-1: USB disconnect, device number 26
[  279.005038][T11504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1973'.
[  279.466574][T11507] sctp: [Deprecated]: syz.1.1974 (pid 11507) Use of int in maxseg socket option.
[  279.466574][T11507] Use struct sctp_assoc_value instead
[  282.570669][T11612] loop4: detected capacity change from 0 to 128
[  282.585696][T11612] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  282.596423][T11612] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  282.703808][ T7097] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  283.000076][ T5899] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  283.150951][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  283.158215][ T5899] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  283.165649][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.170364][ T5899] usb 5-1: Product: syz
[  283.172002][ T5899] usb 5-1: Manufacturer: syz
[  283.173992][ T5899] usb 5-1: SerialNumber: syz
[  283.178235][ T5899] usb 5-1: config 0 descriptor??
[  283.395452][ T5899] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  283.457321][T11643] overlayfs: missing 'lowerdir'
[  283.494019][ T5862] tipc: Subscription rejected, illegal request
[  284.298771][ T5899] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  284.317027][ T5899] usb 5-1: USB disconnect, device number 27
[  284.528024][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2040'.
[  285.156785][T11693] loop4: detected capacity change from 0 to 1024
[  285.216674][ T4842] hfsplus: b-tree write err: -5, ino 4
[  287.256265][T11721] loop4: detected capacity change from 0 to 262144
[  287.265833][T11750] fuse: Bad value for 'fd'
[  287.315041][T11721] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2070 (11721)
[  287.609819][T11721] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  287.614070][T11721] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  287.617680][T11721] BTRFS info (device loop4): using free-space-tree
[  287.885612][ T7097] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  288.529382][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2085'.
[  290.712402][T11852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2120'.
[  290.886275][   T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  291.261891][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  291.276117][   T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[  291.292217][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.303230][   T10] usb 5-1: config 0 descriptor??
[  291.518948][T11845] Bluetooth: hci0: unsupported parameter 4096
[  291.522525][T11845] Bluetooth: hci0: invalid len left 4, exp >= 243
[  291.529462][   T10] usbhid 5-1:0.0: can't add hid device: -71
[  291.536967][   T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  291.545406][   T10] usb 5-1: USB disconnect, device number 28
[  291.786820][T11871] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526
[  291.903016][   T33] kauditd_printk_skb: 80 callbacks suppressed
[  291.903031][   T33] audit: type=1326 audit(1752297400.025:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.914289][   T33] audit: type=1326 audit(1752297400.025:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.923893][   T33] audit: type=1326 audit(1752297400.035:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.931403][   T33] audit: type=1326 audit(1752297400.035:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.938203][   T33] audit: type=1326 audit(1752297400.035:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.946339][   T33] audit: type=1326 audit(1752297400.045:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.957642][   T33] audit: type=1326 audit(1752297400.045:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.965617][   T33] audit: type=1326 audit(1752297400.045:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.973263][   T33] audit: type=1326 audit(1752297400.055:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  291.980475][   T33] audit: type=1326 audit(1752297400.075:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11876 comm="syz.1.2131" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb32278e929 code=0x7ffc0000
[  293.422056][T11908] xt_TPROXY: Can be used only with -p tcp or -p udp
[  293.801775][ T1270] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  294.014470][ T1270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  294.018300][ T1270] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  294.050149][ T1270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  294.054583][ T1270] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[  294.072343][ T1270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.083343][ T1270] usb 5-1: config 0 descriptor??
[  294.089789][T11912] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  294.305603][ T1270] ath6kl: Failed to submit usb control message: -71
[  294.312604][ T1270] ath6kl: unable to send the bmi data to the device: -71
[  294.317157][ T1270] ath6kl: Unable to send get target info: -71
[  294.343886][ T1270] ath6kl: Failed to init ath6kl core: -71
[  294.346677][ T1270] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  294.362855][ T1270] usb 5-1: USB disconnect, device number 29
[  294.572619][   T10] libceph: connect (1)[c::]:6789 error -101
[  294.576593][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  294.597378][T11941] ceph: No mds server is up or the cluster is laggy
[  294.916650][T11962] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2169'.
[  295.200145][T11981] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2179'.
[  295.217695][T11985] netlink: 'syz.1.2180': attribute type 21 has an invalid length.
[  296.335952][T12020] loop4: detected capacity change from 0 to 32768
[  296.404399][T12020] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  296.404424][T12020]   allowing incompatible features above 0.0: (unknown version)
[  296.404435][T12020]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  296.420732][T12020] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  296.423861][T12020] bcachefs (loop4): initializing new filesystem
[  296.435019][T12020] bcachefs (loop4): going read-write
[  296.440396][T12020] bcachefs (loop4): marking superblocks
[  296.448606][T12020] bcachefs (loop4): initializing freespace
[  296.454785][T12020] bcachefs (loop4): done initializing freespace
[  296.459856][T12020] bcachefs (loop4): reading snapshots table
[  296.462575][T12020] bcachefs (loop4): reading snapshots done
[  296.498259][T12020] bcachefs (loop4): done starting filesystem
[  297.118731][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  297.124064][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  297.127788][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  297.139020][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  297.143777][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2198'.
[  297.167551][ T7097] bcachefs (loop4): shutting down
[  297.169577][ T7097] bcachefs (loop4): going read-only
[  297.173745][ T7097] bcachefs (loop4): finished waiting for writes to stop
[  297.185386][ T7097] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  297.213470][ T7097] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  297.219473][ T7097] bcachefs (loop4): clean shutdown complete, journal seq 4
[  297.225040][ T7097] bcachefs (loop4): marking filesystem clean
[  297.253910][ T7097] bcachefs (loop4): shutdown complete
[  298.857792][T12087] ipvlan1: entered promiscuous mode
[  298.860223][T12087] ipvlan1: entered allmulticast mode
[  298.862503][T12087] veth0_vlan: entered allmulticast mode
[  299.736580][T12109] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2230'.
[  299.865820][T12115] loop4: detected capacity change from 0 to 4096
[  299.890566][T12119] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.871079][ T5899] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  301.040263][ T5899] usb 5-1: Using ep0 maxpacket: 32
[  301.051612][ T5899] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  301.057598][ T5899] usb 5-1: config 0 has no interface number 0
[  301.062213][ T5899] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  301.066371][ T5899] usb 5-1: config 0 interface 2 has no altsetting 0
[  301.075195][ T5899] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f
[  301.078769][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.083309][ T5899] usb 5-1: Product: syz
[  301.085043][ T5899] usb 5-1: Manufacturer: syz
[  301.087228][ T5899] usb 5-1: SerialNumber: syz
[  301.103286][ T5899] usb 5-1: config 0 descriptor??
[  301.313823][ T5899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  301.340683][ T5899] usb 5-1: USB disconnect, device number 30
[  301.405919][T12168] udevd[12168]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.946694][T12192] loop4: detected capacity change from 0 to 1024
[  302.718952][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  302.718968][   T33] audit: type=1326 audit(1752297410.835:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.749006][   T33] audit: type=1326 audit(1752297410.835:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.769531][   T33] audit: type=1326 audit(1752297410.835:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.783671][   T33] audit: type=1326 audit(1752297410.835:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.794074][ T1088] hfsplus: b-tree write err: -5, ino 4
[  302.802090][   T33] audit: type=1326 audit(1752297410.835:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.818604][   T33] audit: type=1326 audit(1752297410.835:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.851200][   T33] audit: type=1326 audit(1752297410.835:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.859475][   T33] audit: type=1326 audit(1752297410.835:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.870877][   T33] audit: type=1326 audit(1752297410.835:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  302.879311][   T33] audit: type=1326 audit(1752297410.835:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12186 comm="syz.4.2266" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96ad8e929 code=0x7fc00000
[  303.043287][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2294'.
[  303.827492][T12293] loop4: detected capacity change from 0 to 8
[  303.844636][T12293] SQUASHFS error: zlib decompression failed, data probably corrupt
[  303.861941][T12293] SQUASHFS error: Failed to read block 0x9b: -5
[  303.864625][T12293] SQUASHFS error: Unable to read metadata cache entry [99]
[  303.867439][T12293] SQUASHFS error: Unable to read inode 0x127
[  304.870475][T12329] loop4: detected capacity change from 0 to 128
[  304.882690][T12329] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  304.885941][T12329] FAT-fs (loop4): Filesystem has been set read-only
[  305.410293][ T1270] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  305.560175][ T1270] usb 5-1: Using ep0 maxpacket: 32
[  305.572573][ T1270] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  305.580120][ T1270] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  305.584081][ T1270] usb 5-1: config 9 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  305.592502][ T1270] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  305.596081][ T1270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.599281][ T1270] usb 5-1: Product: syz
[  305.601845][ T1270] usb 5-1: Manufacturer: syz
[  305.605265][ T1270] usb 5-1: SerialNumber: syz
[  305.824122][ T5899] usb 5-1: USB disconnect, device number 31
[  306.855241][T12411] sit0: entered promiscuous mode
[  306.861825][T12411] netlink: 'syz.3.2365': attribute type 1 has an invalid length.
[  306.864956][T12411] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2365'.
[  307.033227][ T1270] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  307.191570][ T1270] usb 5-1: Using ep0 maxpacket: 8
[  307.196306][ T1270] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  307.203145][ T1270] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  307.208002][ T1270] usb 5-1: config 135 has no interface number 0
[  307.213178][ T1270] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  307.224915][ T1270] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  307.231946][ T1270] usb 5-1: config 135 interface 230 has no altsetting 0
[  307.244110][ T1270] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  307.248033][ T1270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.252319][ T1270] usb 5-1: Product: syz
[  307.255008][ T1270] usb 5-1: Manufacturer: syz
[  307.257090][ T1270] usb 5-1: SerialNumber: syz
[  307.746482][ T5899] usb 5-1: USB disconnect, device number 32
[  308.205963][T12450] netlink: 'syz.1.2381': attribute type 10 has an invalid length.
[  308.210212][T12450] 
[  308.211288][T12450] ======================================================
[  308.214167][T12450] WARNING: possible circular locking dependency detected
[  308.216999][T12450] 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 Not tainted
[  308.220966][T12450] ------------------------------------------------------
[  308.224320][T12450] syz.1.2381/12450 is trying to acquire lock:
[  308.226859][T12450] ffff888109fd8e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  308.230932][T12450] 
[  308.230932][T12450] but task is already holding lock:
[  308.233926][T12450] ffff888110f6ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  308.237944][T12450] 
[  308.237944][T12450] which lock already depends on the new lock.
[  308.237944][T12450] 
[  308.242191][T12450] 
[  308.242191][T12450] the existing dependency chain (in reverse order) is:
[  308.245994][T12450] 
[  308.245994][T12450] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  308.249635][T12450]        lock_acquire+0x120/0x360
[  308.251837][T12450]        __mutex_lock+0x182/0xe80
[  308.253952][T12450]        dev_set_mtu+0x10e/0x260
[  308.255886][T12450]        team_add_slave+0x8b8/0x2840
[  308.257953][T12450]        do_set_master+0x533/0x6d0
[  308.260108][T12450]        do_setlink+0xcf0/0x41c0
[  308.262237][T12450]        rtnl_newlink+0x160b/0x1c70
[  308.264460][T12450]        rtnetlink_rcv_msg+0x7cf/0xb70
[  308.266737][T12450]        netlink_rcv_skb+0x208/0x470
[  308.268902][T12450]        netlink_unicast+0x75c/0x8e0
[  308.271000][T12450]        netlink_sendmsg+0x805/0xb30
[  308.273029][T12450]        __sock_sendmsg+0x21c/0x270
[  308.275060][T12450]        ____sys_sendmsg+0x505/0x830
[  308.277215][T12450]        ___sys_sendmsg+0x21f/0x2a0
[  308.279475][T12450]        __x64_sys_sendmsg+0x19b/0x260
[  308.281825][T12450]        do_syscall_64+0xfa/0x3b0
[  308.283904][T12450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.286369][T12450] 
[  308.286369][T12450] -> #0 (team->team_lock_key#3){+.+.}-{4:4}:
[  308.289679][T12450]        validate_chain+0xb9b/0x2140
[  308.291786][T12450]        __lock_acquire+0xab9/0xd20
[  308.293940][T12450]        lock_acquire+0x120/0x360
[  308.296028][T12450]        __mutex_lock+0x182/0xe80
[  308.298153][T12450]        team_device_event+0x182/0xa20
[  308.300484][T12450]        notifier_call_chain+0x1b6/0x3e0
[  308.302789][T12450]        __dev_notify_flags+0x18d/0x2e0
[  308.305077][T12450]        netif_change_flags+0xe8/0x1a0
[  308.307399][T12450]        do_setlink+0xc55/0x41c0
[  308.309445][T12450]        rtnl_newlink+0x160b/0x1c70
[  308.311717][T12450]        rtnetlink_rcv_msg+0x7cf/0xb70
[  308.314067][T12450]        netlink_rcv_skb+0x208/0x470
[  308.316240][T12450]        netlink_unicast+0x75c/0x8e0
[  308.318414][T12450]        netlink_sendmsg+0x805/0xb30
[  308.320550][T12450]        __sock_sendmsg+0x21c/0x270
[  308.322598][T12450]        ____sys_sendmsg+0x505/0x830
[  308.324657][T12450]        ___sys_sendmsg+0x21f/0x2a0
[  308.326918][T12450]        __x64_sys_sendmsg+0x19b/0x260
[  308.329297][T12450]        do_syscall_64+0xfa/0x3b0
[  308.331505][T12450]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.334133][T12450] 
[  308.334133][T12450] other info that might help us debug this:
[  308.334133][T12450] 
[  308.338160][T12450]  Possible unsafe locking scenario:
[  308.338160][T12450] 
[  308.341187][T12450]        CPU0                    CPU1
[  308.343426][T12450]        ----                    ----
[  308.345637][T12450]   lock(&dev_instance_lock_key#3);
[  308.347881][T12450]                                lock(team->team_lock_key#3);
[  308.351003][T12450]                                lock(&dev_instance_lock_key#3);
[  308.354054][T12450]   lock(team->team_lock_key#3);
[  308.356100][T12450] 
[  308.356100][T12450]  *** DEADLOCK ***
[  308.356100][T12450] 
[  308.359478][T12450] 2 locks held by syz.1.2381/12450:
[  308.361676][T12450]  #0: ffffffff8f51d888 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  308.365484][T12450]  #1: ffff888110f6ed30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: do_setlink+0x388/0x41c0
[  308.369570][T12450] 
[  308.369570][T12450] stack backtrace:
[  308.371974][T12450] CPU: 1 UID: 0 PID: 12450 Comm: syz.1.2381 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa-dirty #0 PREEMPT(full) 
[  308.371996][T12450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  308.372008][T12450] Call Trace:
[  308.372018][T12450]  <TASK>
[  308.372029][T12450]  dump_stack_lvl+0x189/0x250
[  308.372056][T12450]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.372075][T12450]  ? __pfx__printk+0x10/0x10
[  308.372098][T12450]  ? print_lock_name+0xde/0x100
[  308.372119][T12450]  print_circular_bug+0x2ee/0x310
[  308.372138][T12450]  check_noncircular+0x134/0x160
[  308.372158][T12450]  validate_chain+0xb9b/0x2140
[  308.372175][T12450]  ? trace_sched_exit_tp+0x38/0x120
[  308.372189][T12450]  ? __lock_acquire+0xab9/0xd20
[  308.372208][T12450]  __lock_acquire+0xab9/0xd20
[  308.372224][T12450]  ? team_device_event+0x182/0xa20
[  308.372245][T12450]  lock_acquire+0x120/0x360
[  308.372260][T12450]  ? team_device_event+0x182/0xa20
[  308.372282][T12450]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  308.372305][T12450]  __mutex_lock+0x182/0xe80
[  308.372320][T12450]  ? team_device_event+0x182/0xa20
[  308.372367][T12450]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  308.372391][T12450]  ? team_device_event+0x182/0xa20
[  308.372413][T12450]  ? __pfx___mutex_lock+0x10/0x10
[  308.372427][T12450]  ? __timer_delete_sync+0x218/0x2d0
[  308.372453][T12450]  team_device_event+0x182/0xa20
[  308.372473][T12450]  notifier_call_chain+0x1b6/0x3e0
[  308.372493][T12450]  __dev_notify_flags+0x18d/0x2e0
[  308.372513][T12450]  ? __pfx___dev_notify_flags+0x10/0x10
[  308.372529][T12450]  ? __dev_change_flags+0x4cc/0x6d0
[  308.372547][T12450]  ? __pfx___dev_change_flags+0x10/0x10
[  308.372564][T12450]  ? __pfx_console_unlock+0x10/0x10
[  308.372582][T12450]  ? irq_work_queue+0xbc/0x140
[  308.372605][T12450]  netif_change_flags+0xe8/0x1a0
[  308.372626][T12450]  do_setlink+0xc55/0x41c0
[  308.372650][T12450]  ? __pfx_do_setlink+0x10/0x10
[  308.372666][T12450]  ? _printk+0xcf/0x120
[  308.372683][T12450]  ? __pfx____ratelimit+0x10/0x10
[  308.372707][T12450]  ? __lock_acquire+0xab9/0xd20
[  308.372726][T12450]  ? __mutex_trylock_common+0x153/0x260
[  308.372746][T12450]  ? __pfx___mutex_trylock_common+0x10/0x10
[  308.372767][T12450]  ? rcu_is_watching+0x15/0xb0
[  308.372783][T12450]  ? trace_contention_end+0x39/0x120
[  308.372801][T12450]  ? __mutex_lock+0x330/0xe80
[  308.372814][T12450]  ? __pfx_aa_get_newest_label+0x10/0x10
[  308.372836][T12450]  ? rtnl_newlink+0x8db/0x1c70
[  308.372851][T12450]  ? rcu_is_watching+0x15/0xb0
[  308.372866][T12450]  ? __pfx___mutex_lock+0x10/0x10
[  308.372883][T12450]  ? ns_capable+0x8a/0xf0
[  308.372902][T12450]  ? rtnl_link_get_net_capable+0x16a/0x350
[  308.372923][T12450]  rtnl_newlink+0x160b/0x1c70
[  308.372940][T12450]  ? netlink_sendmsg+0x805/0xb30
[  308.372961][T12450]  ? __pfx_rtnl_newlink+0x10/0x10
[  308.372985][T12450]  ? kasan_quarantine_put+0xdd/0x220
[  308.373003][T12450]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.373028][T12450]  ? nlmon_xmit+0xb0/0x100
[  308.373045][T12450]  ? kmem_cache_free+0x18f/0x400
[  308.373068][T12450]  ? __local_bh_enable_ip+0x12d/0x1c0
[  308.373085][T12450]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.373106][T12450]  ? __local_bh_enable_ip+0x12d/0x1c0
[  308.373121][T12450]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  308.373137][T12450]  ? __dev_queue_xmit+0x27e/0x3a70
[  308.373160][T12450]  ? __lock_acquire+0xab9/0xd20
[  308.373180][T12450]  ? __pfx_rtnl_newlink+0x10/0x10
[  308.373195][T12450]  rtnetlink_rcv_msg+0x7cf/0xb70
[  308.373210][T12450]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  308.373224][T12450]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  308.373237][T12450]  ? ref_tracker_free+0x63a/0x7d0
[  308.373257][T12450]  ? __copy_skb_header+0xa7/0x550
[  308.373275][T12450]  ? __pfx_ref_tracker_free+0x10/0x10
[  308.373295][T12450]  ? __skb_clone+0x63/0x7a0
[  308.373315][T12450]  netlink_rcv_skb+0x208/0x470
[  308.373369][T12450]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  308.373389][T12450]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.373412][T12450]  ? netlink_deliver_tap+0x2e/0x1b0
[  308.373430][T12450]  ? netlink_deliver_tap+0x2e/0x1b0
[  308.373450][T12450]  netlink_unicast+0x75c/0x8e0
[  308.373470][T12450]  netlink_sendmsg+0x805/0xb30
[  308.373493][T12450]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.373511][T12450]  ? aa_sock_msg_perm+0x94/0x160
[  308.373532][T12450]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  308.373553][T12450]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.373569][T12450]  __sock_sendmsg+0x21c/0x270
[  308.373583][T12450]  ____sys_sendmsg+0x505/0x830
[  308.373611][T12450]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.373633][T12450]  ? import_iovec+0x74/0xa0
[  308.373652][T12450]  ___sys_sendmsg+0x21f/0x2a0
[  308.373673][T12450]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.373702][T12450]  ? __fget_files+0x2a/0x420
[  308.373721][T12450]  ? __fget_files+0x3a0/0x420
[  308.373758][T12450]  __x64_sys_sendmsg+0x19b/0x260
[  308.373776][T12450]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.373797][T12450]  ? rcu_is_watching+0x15/0xb0
[  308.373815][T12450]  ? do_syscall_64+0xbe/0x3b0
[  308.373831][T12450]  do_syscall_64+0xfa/0x3b0
[  308.373845][T12450]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.373865][T12450]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.373879][T12450]  ? exc_page_fault+0x9f/0xf0
[  308.373900][T12450]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.373917][T12450] RIP: 0033:0x7fb32278e929
[  308.373933][T12450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.373949][T12450] RSP: 002b:00007fb323567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.373966][T12450] RAX: ffffffffffffffda RBX: 00007fb3229b5fa0 RCX: 00007fb32278e929
[  308.373979][T12450] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003
[  308.373990][T12450] RBP: 00007fb322810b39 R08: 0000000000000000 R09: 0000000000000000
[  308.374000][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.374010][T12450] R13: 0000000000000000 R14: 00007fb3229b5fa0 R15: 00007ffc523a3648
[  308.374025][T12450]  </TASK>
[  308.647958][T12450] team0: Port device dummy0 removed
[  308.652619][T12450] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  316.962554][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  316.965147][ T1362] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
05:16:56  Registers:
info registers vcpu 0

CPU#0
RAX=738c3515d2594100 RBX=ffffffff81976c78 RCX=738c3515d2594100 RDX=0000000000000001
RSI=ffffffff8be29da0 RDI=ffffffff81976c78 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1f3f0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6f34d3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fb32297f2d8 CR3=0000000045002000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f9fe3b85478 00007f9fe3b85450 XMM03=00007f9fe3b85488 00007f9fe3b85480
XMM04=00007f9fe46ed100 00007f9fe3b85440 XMM05=00007f9fe3b85458 00007f9fe3b854a0
XMM06=00007f9fe3b85498 00007f9fe3b85490 XMM07=00007f9fe3b85488 00007f9fe3b85480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f9fe3a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bfc05 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9
RSI=0000000000003203 RDI=0000000000003204 RBP=ffffc90006fa60f0 RSP=ffffc90006fa5f18
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=ffffffff85478d60
R12=dffffc0000000000 R13=dffffc0000000000 R14=ffffffff99dfe6e0 R15=0000000000000000
RIP=ffffffff85478dd7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb3235676c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000600 CR3=00000001106d6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb322985478 00007fb322985450 XMM03=00007fb322985488 00007fb322985480
XMM04=00007fb3234ed100 00007fb322985440 XMM05=00007fb322985458 00007fb3229854a0
XMM06=00007fb322985498 00007fb322985490 XMM07=00007fb322985488 00007fb322985480
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fb322811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
