last executing test programs:

7m0.97903714s ago: executing program 0 (id=620):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x8b, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

7m0.905613683s ago: executing program 0 (id=623):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
creat(&(0x7f0000000000)='./file2\x00', 0x149)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0)
listxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0)

7m0.805210602s ago: executing program 0 (id=625):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000003ac0)=""/102392, 0x18ff8)
socket(0x200000000000011, 0x2, 0xd)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)

6m59.591637513s ago: executing program 0 (id=633):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
stat(&(0x7f0000000240)='./file0/file0/file0\x00', &(0x7f0000000540))

6m59.440847349s ago: executing program 0 (id=634):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000280)=0x40)

6m58.785366918s ago: executing program 0 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

6m58.578805029s ago: executing program 32 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x40}}, 0x8080)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)

4m2.075137419s ago: executing program 2 (id=2876):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@dax_never}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a47c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

4m1.893717718s ago: executing program 2 (id=2877):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x3e})
close(r0)

4m1.459628932s ago: executing program 2 (id=2880):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x3, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}, {0xc, 0x6, 0xd, 0x10000}, {0x6, 0xa, 0x1, 0xc}]})

4m1.221118869s ago: executing program 2 (id=2882):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f00000042c0)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYBLOB="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", @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m1.003524963s ago: executing program 2 (id=2883):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8})

4m0.677286878s ago: executing program 2 (id=2885):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x24040800)

4m0.419686016s ago: executing program 33 (id=2885):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c80)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40081}, 0x24040800)

1m55.890730496s ago: executing program 1 (id=4294):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0xfffffffffffffff2, 0x0, &(0x7f0000000480)={0x23, 0x28, 0xfd, 0x3}, 0x10)

1m55.890450656s ago: executing program 1 (id=4295):
r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r1, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000440)={0x0, 0x0, r1, r2, 0xf3, 0xffff, 0x7, 0x7f1bf100, {0x2, 0x3, 0x4, 0x5, 0x2, 0x6, 0x1a, 0x7, 0x8f, 0x79f2, 0x9, 0x401, 0xb5, 0x7fffffff, "9df6067812c5eeffd682d9d537c3bee768d3aeba2e6b9ccf6099bd5da744e187"}})

1m55.794353166s ago: executing program 1 (id=4296):
r0 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000b80)={&(0x7f0000003a80)='a', 0x1, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000000)={r1, 0x0, 0x0})

1m55.775699885s ago: executing program 1 (id=4297):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x3800400, &(0x7f0000007f40)=ANY=[@ANYBLOB='quota,errors=remount-ro,integrity,iocharset=cp932,nodiscard,nointegrity,grpquota\x00quota,resize,iocharset=iso8859-5,uid=', @ANYRESDEC, @ANYBLOB="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"], 0xfe, 0x6212, &(0x7f0000019380)="$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")
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E'])
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36)

1m55.565992827s ago: executing program 1 (id=4298):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="39000000140081ae10003c000500018311001f9de60cbda816dc9f2c90c366b81f7129b6dbfc7c055572449fe2e1c79f660fcf066505acb612", 0x39}], 0x1}, 0x0)

1m55.285542992s ago: executing program 1 (id=4302):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0)

1m55.22206291s ago: executing program 34 (id=4302):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0)

28.074032419s ago: executing program 4 (id=5294):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000)
r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001940)={0x2020}, 0x2020)

27.998586031s ago: executing program 4 (id=5295):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local, 0x9}}, 0x0, 0x0, 0x1c, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
close_range(r0, 0xffffffffffffffff, 0x0)

27.998378246s ago: executing program 4 (id=5296):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd71, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/51, 0x33}, 0xe0000000}], 0x1, 0x45833af92e4b39ff, 0x0)

27.746239514s ago: executing program 4 (id=5297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0xa, 0x80002)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x805, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
pipe(0x0)
syz_pidfd_open(0x0, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f29, 0x0, 0xc139, 0x4, 0x5, 0xafa0, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0x6, 0x101, 0xfffffffe, 0xffff, 0x3, 0x40000003, 0x89, 0xcaa3, 0x1000, 0x20001e5b, 0x8000003, 0xe69, 0x3, 0x8, 0x4086, 0x0, 0xfffffff8]})
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r2, 0x0)
setpgid(0x0, r2)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={0x0, 0x0, 0x8}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

27.554056748s ago: executing program 4 (id=5298):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000240)={0x28, 0x2, r1, 0x0, &(0x7f0000000200)=' ', 0x1, 0x4})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r1, 0xfeb, 0xfffffffffefffffc, 0x3fff})

26.902443146s ago: executing program 4 (id=5300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x1000000}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba2567eac97a6f0816406db8fe637"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}}, 0x0)

26.653155511s ago: executing program 35 (id=5300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x1000000}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba2567eac97a6f0816406db8fe637"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}}, 0x0)

12.774197746s ago: executing program 5 (id=5462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)

12.773717316s ago: executing program 5 (id=5464):
syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="36c3f7fca96e286e255432cf08ef6b3570821a9e498efb0a77fd6c614510dcb1596fe5d9fe201898a00ec60a14975344a23cf7e7675b60877d0712473da58b9a70cea076af3492bc0d9977234d6779228280914d9f92b8590f62c440f1df8fc169f70bc800a18d1addced819f7814235456893bdc1abc658f0b65d74d3c9395482eaefdfb325841901a930a51d0d06df928d340d4bf1bee0eae48021adf45664ac613e0854e4d3580a23d7f18a26036e43fe8286d2c489983c44e017"], 0x21, 0x23d, &(0x7f0000000a40)="$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")
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000005c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0xe, 0x80005, 0xed, "0062ba8482000600000000000000f7ffffd400"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x16)

12.567164455s ago: executing program 5 (id=5467):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, ' '}, @main=@item_012={0x2, 0x0, 0x8, "e6ad"}, @local=@item_012={0x1, 0x2, 0x7, '$'}]}}, 0x0}, 0x0)

10.863171212s ago: executing program 5 (id=5486):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0)

10.592830956s ago: executing program 5 (id=5487):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8)
close(r4)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r1, r5, 0x4, r0}, 0x10)

10.455362498s ago: executing program 5 (id=5488):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
unshare(0x24020400)
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000013})

10.327066518s ago: executing program 36 (id=5488):
rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0)
unshare(0x24020400)
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x20000013})

9.944265903s ago: executing program 3 (id=5490):
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000400)="5800000015", 0x5}], 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x44, 0x8, 0x0, 0x0}}, 0x10)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000400), &(0x7f0000000440)=""/236}, 0x20)

9.838657981s ago: executing program 3 (id=5491):
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)

9.838490885s ago: executing program 3 (id=5492):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$eJzs2j+LXFUcBuDfXRMSN2xmxH8kIB60UJtLZmqLLJKAOKBoRoiC5Ma9o8NcZ5a5w8KImK209SNYi6WdIClttvETWNhts2UK8Uoya5INY7GIO2Kep5kXzrzccziXwynu/uvffDYa1PmgmMValsXa5diNO1m0Yy3+shuvvXL95xfeu/7BW5u93pV3U7q6ea3TTSmdf/GnD7/4/qXbs3Pv/3D+xzOx1/5o/6D7295zexf2/7j26bBOwzqNJ7NUpJuTyay4WZVpa1iP8pTeqcqiLtNwXJfTI+ODarK9PU/FeGtjfXta1nUqxvM0KudpNkmz6TwVnxTDccrzPG2sB/9E/7s7TRMHzekb0TTNk9/Gudux8Wu0InsqZU9fzp69kT2/m104aJrWqqfKv8L+P94eOtTPRlRf7/R3+ovfxfjmIIZRRRmXohW/x93X5NAiX32zd+VSuqcdX1W3Dvu3dvpPHO13ohXt5f3Oop+O9s/EesTpiMN+N1rxzPJ+d2n/bLz68kPPz6MVv3wck6hiK+52H/S/7KT0xtu9R/oX7/0PAOD/Jk/3Lb2/5fnfjS/6x7gfPnK/OhUXT6127UTU889HRVWVU0EQhPth1ScTJ+HBpq96JgAAAAAAAAAAABzHSXxOuOo1AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/21/BgAA//9DWtUg")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000005c0)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0xffffffffffffffff, 0x3a, '\\', 0x3a, 'user_id', 0x3a, './file0/file0', 0x3a, [0x46]}, 0x36)
open(&(0x7f0000000040)='./file0/file0\x00', 0xa00, 0x0)

9.736251886s ago: executing program 3 (id=5493):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0xc0, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB=',nostrict,umask=00000000000000000177777,gid=forget,volume=00000000000000001023,noadinicb,novrs,lastblock=00000000000000000002,iocharset=cp932,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c000927ef269377351d90aeb50529825f700786beb0826da0bf9d36620d87d004d56ca63f2e70957efda4662ca0eab69a6221732d7cbdd8f6c022eb6c842004c94d392e87c4a0aa81d68ad1cca39fa8ddbb70aa75c886c11149d401ffcdab20fb3aed07ec97390337828e6bfa896e5875ceb3a020461d98fc2a61ac4685346c0fac3e0114e8bf33c9c8d36d9e451b5fb0b94421daa4e5142e0000000000000003ba53d105f78b91bc6e07d984c1071ac746a483083a8c2eb0ed62157c9c4b4ec5bf54162a901e9c1f3f8b4e8c813e2a061482a7ca495b2f7c5ba527fbbd320d96e977145ed6152b9ce4ccef88a3"], 0x1, 0xc32, &(0x7f0000009100)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
setresuid(0x0, 0xee00, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x8})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

9.648223791s ago: executing program 3 (id=5494):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)

9.480262088s ago: executing program 3 (id=5495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x48840)

9.420383209s ago: executing program 37 (id=5495):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x48840)

6.651731404s ago: executing program 6 (id=5537):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4)
syz_usb_connect$uac1(0x2, 0xac, &(0x7f00000000c0)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001000904010000010200000904010101010200000905010900000100000725"], 0x0)

6.598104798s ago: executing program 7 (id=5538):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}, @datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}]}}, 0x0, 0x36, 0x0, 0x1, 0x9}, 0x28)

6.597921709s ago: executing program 7 (id=5539):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000000080000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000080000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x0}, 0x48)

6.229730853s ago: executing program 7 (id=5540):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x100, 0x800, 0x0)
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x400, {0x10000000000, 0x10, 0x0, '\x00', {0x7ff, 0x7, 0x4, 0x3, r2, 0xffffffffffffffff, 0xa000, '\x00', 0x1, 0x80000000, 0xb4e7, 0x2, {0x80000008101, 0x8}, {0x8, 0x10001}, {0x100000000, 0x7}, {0x9, 0xa82}, 0x7, 0xb, 0x4, 0x5}}}})
write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r1}, 0x50)

6.067081208s ago: executing program 7 (id=5541):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x701080, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)

3.289303259s ago: executing program 6 (id=5550):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000002300)='./file0\x00')
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

2.891656265s ago: executing program 6 (id=5551):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x81)
fchmodat(r1, &(0x7f0000000000)='.\x00', 0xfffffffa)

2.589667586s ago: executing program 6 (id=5552):
r0 = memfd_create(&(0x7f0000000800)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd \xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\x83P\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\xd66hv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfa\x87$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\xb9F,e\xfa\xd7\xa2\xeb\xb1\xc9\xbe#\x92\xf3\x19\xe6\x83(\xfe\xf8i\xb9\xc1\xa0w\xea\xbf\xe5\x8d\xe9\x14\x130\xc3\xa5|/_\t\x98\xc3\xa7\x95!\xdf*\a\xd7\xfcv|\xb3Zc\xcf~\xf6\xe2\xa86Q\x9a$\x80\x85\x8b\t\xbf\xe6(\x12\xe0\xe1e\x81x]a\x145\xa7\xd2\n\x11h\xb9\xf5g\xc4%&\xbaRy\x8f\x85Q\xb9W\xe5\x06\xe2\xb3ryk}\x86\xc6\x04\x03i\x10\xa8\xc4\xcd`\xb8\xcfT))\xb7\x15\b%\xc8uC(C\x01\x1by\xbf \x10\xe8k\xea\x80\xd0P|\x11\xe5\xb9\x1d^\x92j\xb0\xa7\x1d', 0x7)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x4d091, r0, 0x4000000)
fcntl$addseals(r0, 0x409, 0x2)
r1 = openat$udambuf(0xffffff9c, &(0x7f0000000000), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000280)={r0, 0x1, 0x100b000, 0x1000000})
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0x0, 0x1000000})

2.40927153s ago: executing program 6 (id=5553):
r0 = socket(0x15, 0x80005, 0x0)
getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000)

2.345924297s ago: executing program 6 (id=5554):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12018b0130f56920ac05190272f0010203010902120001000010000904550700034902008693363e5064a45f05d74eecd66a8f66423b4691bbb0c960fbc985b31c5507"], 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f00000e1000/0x800000)=nil, 0x800000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x40000000)
r1 = syz_pidfd_open(r0, 0x0)
wait4(r0, 0x0, 0x8, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180))

1.9901933s ago: executing program 7 (id=5555):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000ffffff807b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.927121765s ago: executing program 7 (id=5556):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100033887462023010100fe4a0102030109021b0001000000000904"], &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0})

281.167435ms ago: executing program 8 (id=5572):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x40050)

280.868947ms ago: executing program 8 (id=5573):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f00000000c0))

216.433069ms ago: executing program 8 (id=5574):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000000), 0xfd, 0x477, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x105142, 0x2c)

140.881726ms ago: executing program 8 (id=5575):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)

64.181934ms ago: executing program 8 (id=5576):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4f7, &(0x7f0000000c40)="$eJzs3U9sFNUfAPDvbP/z50d//PihIGoRjY3EFgoKBxOD0cSDJkZM1GPTFoIUatqSCEGzJAaPhsS78ejVg1f1QownE694NDEkxHABTIxrZndmu7vdLXTZdsF+Psl235vZmffevnmzb97bnQawYY2kf5JK+FpEbIuIQuMLRipPt29enLpz8+JUFEul438k5c1upfFMtpvYnEVGCxGFT5OlFTUWzl84PTk7OzOfxccXz3w4vnD+wvOnBrMlR48ePnTwyIsTL6y+UE3SS8t1a/cnc3t2vf7+lTenevPleWq15eiUkRhplpWyZzqdWJdtrQknvV3MCKuSHv9pdfWV2/+26ImVKq+4jjkD1lqpVCoNtF5dLDW6tGwJ8NBKots5ALoj/6BPr3/zR7OOQP/adD+67saxygVQWu7b2SPiyfLCfBykr+H6tpNGIuK94p9fpo9Yo3EIAIBa3x/Le4IN/b/hyszIX+euvpw+/yebQxmOiP9GxPaI+F9E7IiI/0fEzoh4JCIebdh/T0SUVki/cbS5mn51EqpwvUNFbSrt/72UzW0t9f/qMjDck8W2RuQd5pkD2XsyGn0DJ07NzhxcIY0fXv3l81bravt/6SNNP+8LZvm43tswQDc9uTjZdoEb3LgUsbu3sfxJb0RSrZskInZFxO5V7He4Jnzqua/3VCN99a+7e/nLSk3n0Towz1T6KuLZSv0Xo67+l1JM6uYnz0yenDk5c3aiOj85PhizMwfG06PgQNM0fvr58lut0r9r+b/9rXGT1458dzxrWfcvrf9NkRRrj/3N1VKXDScRSXW+dmH1aVz+9bOW1zTtHv/9yTvlcH5d+tHk4uL8wYj+5I3lyyeWts3j6XMUK+Uf3de8/W/PtknficciIj2IH4+IJ6JyhZjmfW9EPBUR+1Yo/4+vPP1B++VfW2n5pxvOf5War6v/ynx9f8zMLx0I9YEkmxusLBmqXdVzeu+1Oy1OHvdW/4fLodFsyfLzX5rDpO4UsTyDlUD+aZcu+bsj7yAAAAA8+AoRsaVmLGlLFApjY5UxoB2xqTA7t7C4/8TcubPT6bqI4egr5CNdlfHgviQf/xyuiU80xA9l48Zf9AyV42NTc7PTXS05sLnc5pPCWMS7PTXtP/V7Z4aYgQeZ32vBxrVS+0878TuvrGNmgHV175//Vz9e04wA666m/bf6hX+xje99AQ8B1//A0tfz736jH+cMePiVtGXY0FbV/ve7CSD8m/TG29Vwoas5Adab/j9sSK1+zt+ZQGmg+arBWP7iGFx5hz3RXjaGmqTVlUDas+pK6kPtbJXfTaHla6Kwuh0ORGfq9MR9vhvF+YWTOzt+8Jey78q3t3m0vGPFN+vSTpsFas8SI63+jQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAD758AAAD//y283iw=")

0s ago: executing program 8 (id=5577):
fanotify_init(0xc, 0x80000)

kernel console output (not intermixed with test programs):

 48b305e6
[  467.858232][   T33] audit: type=1800 audit(1762393359.186:142): pid=18345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4831" name="file1" dev="loop5" ino=10 res=0 errno=0
[  468.019956][ T9676] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  468.097473][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4831'.
[  468.101217][T18349] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4831'.
[  468.105071][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4831'.
[  468.109071][T18349] netlink: 348 bytes leftover after parsing attributes in process `syz.5.4831'.
[  468.113703][T18349] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4831'.
[  468.267152][T18350] syz.5.4831: attempt to access beyond end of device
[  468.267152][T18350] loop5: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  468.281165][T18350] syz.5.4831: attempt to access beyond end of device
[  468.281165][T18350] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  468.286661][T18350] syz.5.4831: attempt to access beyond end of device
[  468.286661][T18350] loop5: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  468.291209][T18350] syz.5.4831: attempt to access beyond end of device
[  468.291209][T18350] loop5: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  468.295364][T18350] syz.5.4831: attempt to access beyond end of device
[  468.295364][T18350] loop5: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  468.300614][T18350] syz.5.4831: attempt to access beyond end of device
[  468.300614][T18350] loop5: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  468.305035][T18350] syz.5.4831: attempt to access beyond end of device
[  468.305035][T18350] loop5: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  468.309310][T18350] syz.5.4831: attempt to access beyond end of device
[  468.309310][T18350] loop5: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  468.313580][T18350] syz.5.4831: attempt to access beyond end of device
[  468.313580][T18350] loop5: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  468.317700][T18350] syz.5.4831: attempt to access beyond end of device
[  468.317700][T18350] loop5: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  468.442197][ T9676] usb 5-1: Using ep0 maxpacket: 16
[  468.445023][ T9676] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  468.448395][ T9676] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  468.451209][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.455693][ T9676] usb 5-1: config 0 descriptor??
[  468.580716][T14699] CPU: 0 UID: 0 PID: 14699 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) 
[  468.580752][T14699] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  468.580761][T14699] Workqueue: writeback wb_workfn (flush-7:5)
[  468.580786][T14699] Call Trace:
[  468.580792][T14699]  <TASK>
[  468.580799][T14699]  dump_stack_lvl+0x189/0x250
[  468.580821][T14699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.580839][T14699]  ? __pfx_queue_work_on+0x10/0x10
[  468.580853][T14699]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  468.580870][T14699]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  468.580895][T14699]  f2fs_handle_critical_error+0x37c/0x540
[  468.580920][T14699]  f2fs_write_end_io+0x886/0xb60
[  468.580947][T14699]  __submit_merged_bio+0x27a/0x6a0
[  468.580971][T14699]  __submit_merged_write_cond+0x255/0x530
[  468.580996][T14699]  f2fs_write_data_pages+0x261d/0x3000
[  468.581035][T14699]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  468.581058][T14699]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  468.581128][T14699]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  468.581157][T14699]  ? trace_f2fs_writepages+0x7f/0x200
[  468.581203][T14699]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  468.581218][T14699]  do_writepages+0x32e/0x550
[  468.581239][T14699]  ? reacquire_held_locks+0x127/0x1d0
[  468.581256][T14699]  ? writeback_sb_inodes+0x384/0x1010
[  468.581280][T14699]  __writeback_single_inode+0x145/0xff0
[  468.581298][T14699]  ? do_raw_spin_unlock+0x4d/0x240
[  468.581320][T14699]  writeback_sb_inodes+0x6c7/0x1010
[  468.581337][T14699]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.581373][T14699]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  468.581422][T14699]  ? rcu_is_watching+0x15/0xb0
[  468.581445][T14699]  wb_writeback+0x43b/0xaf0
[  468.581468][T14699]  ? queue_io+0x311/0x590
[  468.581487][T14699]  ? __pfx_wb_writeback+0x10/0x10
[  468.581508][T14699]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.581524][T14699]  wb_workfn+0x409/0xef0
[  468.581549][T14699]  ? __pfx_wb_workfn+0x10/0x10
[  468.581565][T14699]  ? __lock_acquire+0xab9/0xd20
[  468.581587][T14699]  ? process_scheduled_works+0x9ef/0x17b0
[  468.581607][T14699]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.581622][T14699]  ? process_scheduled_works+0x9ef/0x17b0
[  468.581636][T14699]  ? process_scheduled_works+0x9ef/0x17b0
[  468.581652][T14699]  process_scheduled_works+0xae1/0x17b0
[  468.581685][T14699]  ? __pfx_process_scheduled_works+0x10/0x10
[  468.581710][T14699]  worker_thread+0x8a0/0xda0
[  468.581726][T14699]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  468.581749][T14699]  ? __kthread_parkme+0x7b/0x200
[  468.581772][T14699]  kthread+0x711/0x8a0
[  468.581792][T14699]  ? __pfx_worker_thread+0x10/0x10
[  468.581806][T14699]  ? __pfx_kthread+0x10/0x10
[  468.581825][T14699]  ? _raw_spin_unlock_irq+0x23/0x50
[  468.581840][T14699]  ? lockdep_hardirqs_on+0x9c/0x150
[  468.581856][T14699]  ? __pfx_kthread+0x10/0x10
[  468.581873][T14699]  ret_from_fork+0x4bc/0x870
[  468.581889][T14699]  ? __pfx_ret_from_fork+0x10/0x10
[  468.581909][T14699]  ? __switch_to_asm+0x39/0x70
[  468.581919][T14699]  ? __switch_to_asm+0x33/0x70
[  468.581929][T14699]  ? __pfx_kthread+0x10/0x10
[  468.581947][T14699]  ret_from_fork_asm+0x1a/0x30
[  468.581972][T14699]  </TASK>
[  468.581980][T14699] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  468.756625][ T5858] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  468.904344][ T9676] konepure 0003:1E7D:2DBE.001A: bogus close delimiter
[  468.906426][ T9676] konepure 0003:1E7D:2DBE.001A: item 0 4 2 10 parsing failed
[  468.909235][ T9676] konepure 0003:1E7D:2DBE.001A: parse failed
[  468.911111][ T9676] konepure 0003:1E7D:2DBE.001A: probe with driver konepure failed with error -22
[  468.939694][ T5858] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  468.954446][ T5858] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  468.957807][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  468.960817][ T5858] usb 4-1: Product: syz
[  468.962811][ T5858] usb 4-1: Manufacturer: syz
[  468.964564][ T5858] usb 4-1: SerialNumber: syz
[  468.968822][ T5858] usb 4-1: config 0 descriptor??
[  469.124532][ T9676] usb 5-1: USB disconnect, device number 30
[  469.193282][ T5858] ims_pcu 4-1:0.0: Zero length descriptor
[  469.194993][ T5858] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[  469.198961][ T5858] usb 4-1: USB disconnect, device number 57
[  469.203226][T18358] loop5: detected capacity change from 0 to 40427
[  469.206107][T18358] F2FS-fs (loop5): Image doesn't support compression
[  469.208016][T18358] F2FS-fs (loop5): build fault injection rate: 690
[  469.210065][T18358] F2FS-fs (loop5): build fault injection type: 0x35f7
[  469.213298][T18358] F2FS-fs (loop5): invalid crc value
[  469.242822][T18358] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  469.245854][T18358] F2FS-fs (loop5): Start checkpoint disabled!
[  469.248296][T18358] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  469.250849][T18358] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  469.270652][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  469.270668][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  469.270673][ T1091] Workqueue: writeback wb_workfn (flush-7:5)
[  469.270690][ T1091] Call Trace:
[  469.270693][ T1091]  <TASK>
[  469.270698][ T1091]  dump_stack_lvl+0x189/0x250
[  469.270712][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  469.270722][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  469.270731][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  469.270743][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  469.270758][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  469.270774][ T1091]  f2fs_write_end_io+0x886/0xb60
[  469.270791][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  469.270806][ T1091]  __submit_merged_write_cond+0x255/0x530
[  469.270820][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  469.270845][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  469.270860][ T1091]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  469.270890][ T1091]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  469.270907][ T1091]  ? trace_f2fs_writepages+0x7f/0x200
[  469.270919][ T1091]  ? f2fs_write_node_pages+0x478/0x6e0
[  469.270932][ T1091]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  469.270945][ T1091]  ? __lock_acquire+0xab9/0xd20
[  469.270957][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  469.270965][ T1091]  do_writepages+0x32e/0x550
[  469.270978][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  469.270986][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  469.271001][ T1091]  __writeback_single_inode+0x145/0xff0
[  469.271011][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  469.271063][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  469.271087][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  469.271118][ T1091]  ? rcu_is_watching+0x15/0xb0
[  469.271139][ T1091]  wb_writeback+0x43b/0xaf0
[  469.271154][ T1091]  ? queue_io+0x311/0x590
[  469.271166][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  469.271180][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.271192][ T1091]  wb_workfn+0x409/0xef0
[  469.271209][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  469.271221][ T1091]  ? __lock_acquire+0xab9/0xd20
[  469.271234][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  469.271246][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.271255][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  469.271262][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  469.271271][ T1091]  process_scheduled_works+0xae1/0x17b0
[  469.271295][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  469.271312][ T1091]  worker_thread+0x8a0/0xda0
[  469.271335][ T1091]  kthread+0x711/0x8a0
[  469.271347][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  469.271355][ T1091]  ? __pfx_kthread+0x10/0x10
[  469.271366][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  469.271374][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  469.271383][ T1091]  ? __pfx_kthread+0x10/0x10
[  469.271393][ T1091]  ret_from_fork+0x4bc/0x870
[  469.271403][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  469.271416][ T1091]  ? __switch_to_asm+0x39/0x70
[  469.271422][ T1091]  ? __switch_to_asm+0x33/0x70
[  469.271428][ T1091]  ? __pfx_kthread+0x10/0x10
[  469.271438][ T1091]  ret_from_fork_asm+0x1a/0x30
[  469.271454][ T1091]  </TASK>
[  469.271458][ T1091] F2FS-fs (loop5): Remounting filesystem read-only
[  469.860360][T18363] loop5: detected capacity change from 0 to 32768
[  469.864264][T18363] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.4837 (18363)
[  469.871290][T18363] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  469.875264][T18363] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  469.938596][T18363] BTRFS info (device loop5): enabling ssd optimizations
[  469.941252][T18363] BTRFS info (device loop5): turning on async discard
[  469.943727][T18363] BTRFS info (device loop5): enabling free space tree
[  469.959278][T18363] BTRFS info (device loop5): use lzo compression, level 1
[  470.028172][T16931] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  470.349107][   T24] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  470.489124][T18404] loop5: detected capacity change from 0 to 32768
[  470.493048][T18404] Only 4K block size supported!
[  470.494811][T18404] Mount JFS Failure: -22
[  470.511603][   T24] usb 5-1: Using ep0 maxpacket: 16
[  470.515741][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.519355][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  470.523899][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  470.527913][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  470.540332][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  470.544555][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.547764][   T24] usb 5-1: Product: syz
[  470.549497][   T24] usb 5-1: Manufacturer: syz
[  470.551343][   T24] usb 5-1: SerialNumber: syz
[  470.555883][   T24] usb 5-1: config 0 descriptor??
[  470.623452][   T24] rc_core: IR keymap rc-xbox-dvd not found
[  470.625527][   T24] Registered IR keymap rc-empty
[  470.628031][   T24] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  470.633482][   T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input35
[  470.662696][T18407] loop5: detected capacity change from 0 to 1024
[  470.668790][T18407] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  470.673609][T18407] JBD2: no valid journal superblock found
[  470.678087][T18407] EXT4-fs (loop5): Could not load journal inode
[  470.729142][T18409] loop5: detected capacity change from 0 to 16
[  470.733012][T18409] erofs (device loop5): mounted with root inode @ nid 36.
[  470.789767][ T5858] usb 5-1: USB disconnect, device number 31
[  470.789830][    C1] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  471.146484][T18416] loop5: detected capacity change from 0 to 32768
[  471.154467][T18416] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.181357][T18416] XFS (loop5): Ending clean mount
[  471.189598][T18416] XFS (loop5): Quotacheck needed: Please wait.
[  471.221716][T18416] XFS (loop5): Quotacheck: Done.
[  471.273627][T16931] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  471.321574][T18432] loop3: detected capacity change from 0 to 2048
[  471.328276][T18432] NILFS (loop3): couldn't find nilfs on the device
[  472.125848][ T5858] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[  472.255856][ T5845] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  472.290190][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  472.293307][ T5858] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00
[  472.296669][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.301869][ T5858] usb 6-1: config 0 descriptor??
[  472.418407][ T5845] usb 4-1: Using ep0 maxpacket: 32
[  472.430041][ T5845] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  472.432695][ T5845] usb 4-1: config 0 has no interface number 0
[  472.437244][ T5845] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  472.450838][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.453320][ T5845] usb 4-1: Product: syz
[  472.454621][ T5845] usb 4-1: Manufacturer: syz
[  472.456029][ T5845] usb 4-1: SerialNumber: syz
[  472.459239][ T5845] usb 4-1: config 0 descriptor??
[  472.462883][ T5845] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  472.683896][ T5845] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  472.688612][ T5845] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  472.748118][ T5858] cmedia_hs100b 0003:0D8C:0014.001B: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.5-1/input0
[  472.964412][   T24] usb 6-1: USB disconnect, device number 8
[  473.126581][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  473.127092][ T5886] usb 4-1: USB disconnect, device number 58
[  473.145463][ T5886] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  473.154128][ T5886] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  473.172828][ T5886] quatech2 4-1:0.51: device disconnected
[  473.735866][T18498] loop3: detected capacity change from 0 to 1024
[  473.747416][T18500] netlink: 'syz.5.4890': attribute type 23 has an invalid length.
[  473.765744][T18498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  473.785173][T18498] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.4889: inode #745765217: comm syz.3.4889: iget: illegal inode #
[  473.789413][T18498] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4889: error while reading EA inode 745765217 err=-117
[  473.819272][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.858412][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.861803][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.864809][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.867704][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.872012][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.874999][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.877909][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.880809][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.883643][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.886044][ T5886] hid-generic 0002:0007:03FF.001C: unknown main item tag 0x0
[  473.898821][ T5886] hid-generic 0002:0007:03FF.001C: hidraw0: <UNKNOWN> HID vffff80.01 Device [syz1] on syz1
[  474.113426][T18529] loop5: detected capacity change from 0 to 4096
[  474.123970][T18532] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  474.132120][T18529] bio_check_eod: 177 callbacks suppressed
[  474.132131][T18529] syz.5.4902: attempt to access beyond end of device
[  474.132131][T18529] loop5: rw=0, sector=26388279066816, nr_sectors = 8 limit=4096
[  474.139050][T18529] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1)
[  474.265578][T18543] netlink: 'syz.3.4908': attribute type 1 has an invalid length.
[  474.271857][T18543] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4908'.
[  474.332000][T18547] loop3: detected capacity change from 0 to 4096
[  474.354053][T18547] ntfs3(loop3): failed to convert "256c" to koi8-ru
[  474.450659][T18555] loop3: detected capacity change from 0 to 256
[  474.462465][T18555] FAT-fs (loop3): Directory bread(block 64) failed
[  474.464726][T18555] FAT-fs (loop3): Directory bread(block 65) failed
[  474.468107][T18555] FAT-fs (loop3): Directory bread(block 66) failed
[  474.470101][T18555] FAT-fs (loop3): Directory bread(block 67) failed
[  474.472035][T18555] FAT-fs (loop3): Directory bread(block 68) failed
[  474.473866][T18555] FAT-fs (loop3): Directory bread(block 69) failed
[  474.475959][T18555] FAT-fs (loop3): Directory bread(block 70) failed
[  474.479964][T18555] FAT-fs (loop3): Directory bread(block 71) failed
[  474.482530][T18555] FAT-fs (loop3): Directory bread(block 72) failed
[  474.484983][T18555] FAT-fs (loop3): Directory bread(block 73) failed
[  474.530997][ T5858] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  474.687125][T18564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4918'.
[  474.695338][ T5858] usb 6-1: config 3 has an invalid interface number: 71 but max is 0
[  474.698175][ T5858] usb 6-1: config 3 has no interface number 0
[  474.700539][ T5858] usb 6-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  474.704144][ T5858] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  474.707525][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.718455][ T5858] ati_remote 6-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  474.748032][T18566] loop3: detected capacity change from 0 to 1024
[  474.751137][T18566] EXT4-fs: Ignoring removed oldalloc option
[  474.763640][T18566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  474.778560][T18566] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.3.4919: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1
[  474.786852][T18566] EXT4-fs error (device loop3) in ext4_delete_entry:2739: Corrupt filesystem
[  474.790568][T18566] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4919: Deleting old file: nlink 4, error=-117
[  474.831011][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  474.991817][ T5858] usb 6-1: USB disconnect, device number 9
[  475.309202][T18574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4921'.
[  475.315451][T18574] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  475.566465][T18586] loop4: detected capacity change from 0 to 512
[  475.569665][T18586] EXT4-fs: Ignoring removed nobh option
[  475.576048][T18586] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  475.582352][T18586] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61
[  475.585485][T18586] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.4927: inode has both inline data and extents flags
[  475.589581][T18586] EXT4-fs (loop4): Remounting filesystem read-only
[  475.592245][T18586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  475.602428][T18586] fscrypt (loop4, inode 2): Error -61 getting encryption context
[  475.619442][T13265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  475.920683][T18598] loop3: detected capacity change from 0 to 128
[  475.933224][T18596] loop4: detected capacity change from 0 to 1024
[  475.936407][T18596] EXT4-fs: Ignoring removed orlov option
[  475.938637][T18596] EXT4-fs: Ignoring removed nobh option
[  475.940820][T18596] EXT4-fs: Ignoring removed bh option
[  475.978761][T18596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  476.608889][T18615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.4931: Allocating blocks 497-513 which overlap fs metadata
[  476.617667][   T33] audit: type=1800 audit(1762393366.986:143): pid=18615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4931" name="file1" dev="loop4" ino=15 res=0 errno=0
[  476.629278][T18615] EXT4-fs (loop4): pa ffff888117ce8570: logic 256, phys. 385, len 8
[  476.633845][T18615] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1
[  476.901393][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'.
[  476.972127][T13265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.982248][T18626] netlink: 680 bytes leftover after parsing attributes in process `syz.3.4945'.
[  477.080840][T18630] loop4: detected capacity change from 0 to 1024
[  477.084905][T18630] EXT4-fs: Ignoring removed nobh option
[  477.086612][T18630] EXT4-fs: Ignoring removed bh option
[  477.089987][T18630] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  477.103140][T18630] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  477.113276][T18630] EXT4-fs (loop4): mount failed
[  477.661368][T18634] loop5: detected capacity change from 0 to 40427
[  477.665715][T18634] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  477.672988][T18634] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  477.679974][T18634] F2FS-fs (loop5): invalid crc value
[  477.767086][T18634] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  477.770563][T18634] F2FS-fs (loop5): Try to recover 1th superblock, ret: -30
[  477.772600][T18634] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  478.093679][T18649] loop4: detected capacity change from 0 to 1024
[  478.140591][T18649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  478.158943][T18649] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: comm syz.4.4954: inode #1667326720: comm syz.4.4954: iget: illegal inode #
[  478.164275][T18649] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.4954: error while reading EA inode 1667326720 err=-117
[  478.169394][T18649] EXT4-fs error (device loop4): ext4_xattr_block_set:2215: inode #15: comm syz.4.4954: bad block 113
[  478.195296][T13265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  478.234495][T18655] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  478.890740][T18670] loop4: detected capacity change from 0 to 1024
[  478.966564][   T33] audit: type=1326 audit(1762393369.432:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.4962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e78efc9 code=0x7ffc0000
[  478.977442][   T33] audit: type=1326 audit(1762393369.432:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.4962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e78efc9 code=0x7ffc0000
[  478.995015][   T33] audit: type=1326 audit(1762393369.441:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.4962" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f019e78efc9 code=0x7ffc0000
[  479.005725][   T33] audit: type=1326 audit(1762393369.441:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.4962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e78efc9 code=0x7ffc0000
[  479.013833][   T33] audit: type=1326 audit(1762393369.441:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18673 comm="syz.4.4962" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f019e78efc9 code=0x7ffc0000
[  479.369773][T18701] loop5: detected capacity change from 0 to 128
[  479.377461][T18701] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  479.543034][T18697] loop3: detected capacity change from 0 to 32768
[  479.551913][T18697] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  479.566022][T18697] XFS (loop3): Ending clean mount
[  479.571700][T18697] XFS (loop3): Quotacheck needed: Please wait.
[  479.615925][T18697] XFS (loop3): Quotacheck: Done.
[  479.651870][ T7608] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  480.006461][T18720] syzkaller0: entered allmulticast mode
[  480.369272][T18734] debugfs: 'ptm0' already exists in 'caif_serial'
[  480.703765][T18744] loop4: detected capacity change from 0 to 32768
[  480.710378][T18744] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  480.721093][T18744] XFS (loop4): Ending clean mount
[  480.725921][T18744] XFS (loop4): Quotacheck needed: Please wait.
[  480.762273][T18744] XFS (loop4): Quotacheck: Done.
[  480.786519][T13265] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  481.047047][ T5886] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  481.205618][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  481.224505][ T5886] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  481.229177][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.268056][ T5886] usb 4-1: config 0 descriptor??
[  481.501993][ T5886] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  481.509477][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  481.513584][ T5886] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  481.516372][ T5886] usb 4-1: media controller created
[  481.544128][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  481.588276][ T5886] DVB: Unable to find symbol dib7000p_attach()
[  481.590724][ T5886] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  481.649165][ T5886] rc_core: IR keymap rc-dib0700-rc5 not found
[  481.651602][ T5886] Registered IR keymap rc-empty
[  481.653806][ T5886] dvb-usb: could not initialize remote control.
[  481.656262][ T5886] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  481.728265][ T5886] usb 4-1: USB disconnect, device number 59
[  481.745285][ T5886] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[  482.201666][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  482.364178][   T24] usb 5-1: Using ep0 maxpacket: 8
[  482.372554][   T24] usb 5-1: config 9 has an invalid interface number: 159 but max is 0
[  482.380870][   T24] usb 5-1: config 9 has no interface number 0
[  482.386150][   T24] usb 5-1: New USB device found, idVendor=1fb9, idProduct=0100, bcdDevice=2c.b7
[  482.389360][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.392146][   T24] usb 5-1: Product: syz
[  482.393719][   T24] usb 5-1: Manufacturer: syz
[  482.401340][   T24] usb 5-1: SerialNumber: syz
[  482.447556][T18770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4996'.
[  482.451514][T18770] IPVS: Error connecting to the multicast addr
[  482.618344][T18777] loop3: detected capacity change from 0 to 4096
[  482.631349][T18779] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  482.635347][   T24] cp210x 5-1:9.159: cp210x converter detected
[  482.644374][   T24] cp210x 5-1:9.159: failed to get vendor val 0x370b size 1: -71
[  482.646785][   T24] cp210x 5-1:9.159: querying part number failed
[  482.650307][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  482.653608][   T24] usb 5-1: USB disconnect, device number 32
[  482.653715][T18777] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  482.659755][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  482.662209][   T24] cp210x 5-1:9.159: device disconnected
[  482.667381][T18777] Remounting filesystem read-only
[  482.673906][T18777] overlay: filesystem on ./file0 is read-only
[  482.689715][ T7608] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  482.720557][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5001'.
[  482.906075][ T5858] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  482.913038][T18789] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  482.918456][T18789] bond3 (unregistering): Released all slaves
[  483.048935][T18794] loop3: detected capacity change from 0 to 1024
[  483.051878][T18794] EXT4-fs: Ignoring removed orlov option
[  483.063033][T18794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  483.067104][T18794] ext4 filesystem being mounted at /1572/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  483.077073][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  483.078873][T18794] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  483.081223][ T5858] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  483.091071][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.096147][ T5858] usb 6-1: config 0 descriptor??
[  483.112765][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  483.277490][   T24] hid_parser_main: 219 callbacks suppressed
[  483.277508][   T24] hid-generic 0005:16BF:0008.001D: unknown main item tag 0x4
[  483.299347][   T24] hid-generic 0005:16BF:0008.001D: hidraw0: BLUETOOTH HID vc3.a9 Device [syz1] on aa:aa:aa:aa:aa:aa
[  483.463763][T18814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5014'.
[  483.785664][ T5858] hid_mf 0003:0079:1846.001E: unknown main item tag 0x1
[  483.789386][ T5858] hid_mf 0003:0079:1846.001E: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0
[  483.792571][ T5858] hid_mf 0003:0079:1846.001E: Invalid report, this should never happen!
[  483.795412][ T5858] hid_mf 0003:0079:1846.001E: Force feedback init failed.
[  483.820126][ T5858] usb 6-1: USB disconnect, device number 10
[  484.365418][T18837] sp0: Synchronizing with TNC
[  484.780225][   T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  484.964409][   T24] usb 6-1: Using ep0 maxpacket: 8
[  484.970786][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  484.976554][   T24] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  484.986042][   T24] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  484.989005][   T24] usb 6-1: Product: syz
[  484.990539][   T24] usb 6-1: Manufacturer: syz
[  484.992274][   T24] usb 6-1: SerialNumber: syz
[  485.222584][   T24] usb 6-1: Invalid connection information received from device
[  485.289419][ T5886] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  485.441615][   T24] usb 6-1: USB disconnect, device number 11
[  485.465485][ T5886] usb 5-1: config 0 has no interfaces?
[  485.467881][ T5886] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  485.471325][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.477686][ T5886] usb 5-1: config 0 descriptor??
[  485.711375][T18861] loop3: detected capacity change from 0 to 256
[  485.722084][T18861] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x00949fb8, utbl_chksum : 0x7319d30d)
[  485.760042][ T5858] usb 5-1: USB disconnect, device number 33
[  486.262359][T18875] loop5: detected capacity change from 0 to 512
[  486.268931][T18875] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  486.359102][T18879] xt_TCPMSS: Only works on TCP SYN packets
[  486.606168][T18896] loop4: detected capacity change from 0 to 512
[  486.608985][T18896] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  486.618137][T18896] EXT4-fs (loop4): 1 truncate cleaned up
[  486.621068][T18896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  486.664795][T18901] tap0: tun_chr_ioctl cmd 1074025677
[  486.666968][T18901] tap0: linktype set to 804
[  487.021119][T18907] loop5: detected capacity change from 0 to 32768
[  487.039837][T18909] loop3: detected capacity change from 0 to 32768
[  487.043589][T18909] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5055 (18909)
[  487.056167][T18909] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  487.059792][T18909] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  487.086590][T18909] BTRFS info (device loop3): setting nodatasum
[  487.088714][T18909] BTRFS info (device loop3): setting nodatacow
[  487.090487][T18909] BTRFS info (device loop3): turning on async discard
[  487.092426][T18909] BTRFS info (device loop3): enabling free space tree
[  487.094396][T18909] BTRFS info (device loop3): force clearing of disk cache
[  487.096699][T18909] BTRFS info (device loop3): enabling auto defrag
[  487.098507][T18909] BTRFS info (device loop3): trying to use backup root at mount time
[  487.129169][ T7608] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  487.210829][T13265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  487.420231][T18934] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check.
[  487.542962][ T5858] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  487.716263][ T5858] usb 5-1: Using ep0 maxpacket: 16
[  487.721210][ T5858] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  487.723895][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.726578][ T5858] usb 5-1: Product: syz
[  487.728123][ T5858] usb 5-1: Manufacturer: syz
[  487.729589][ T5858] usb 5-1: SerialNumber: syz
[  487.732520][ T5858] usb 5-1: config 0 descriptor??
[  487.900463][ T5886] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  488.073805][ T5886] usb 4-1: Using ep0 maxpacket: 32
[  488.077107][ T5886] usb 4-1: config 8 has an invalid interface number: 203 but max is 0
[  488.079491][ T5886] usb 4-1: config 8 has no interface number 0
[  488.081186][ T5886] usb 4-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83
[  488.084898][ T5886] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 1024
[  488.087870][ T5886] usb 4-1: config 8 interface 203 altsetting 1 bulk endpoint 0xB has invalid maxpacket 1023
[  488.091279][ T5886] usb 4-1: config 8 interface 203 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  488.094420][ T5886] usb 4-1: config 8 interface 203 has no altsetting 0
[  488.098322][ T5886] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  488.101201][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.104157][ T5886] usb 4-1: Product: syz
[  488.105741][ T5886] usb 4-1: Manufacturer: syz
[  488.106359][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  488.107455][ T5886] usb 4-1: SerialNumber: syz
[  488.114529][T18955] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  488.117507][T18955] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  488.173479][ T5858] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  488.176848][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  488.180027][ T5858] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  488.182459][ T5858] usb 5-1: media controller created
[  488.193951][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  488.268900][    T9] usb 6-1: Using ep0 maxpacket: 16
[  488.274038][    T9] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  488.276661][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.278934][    T9] usb 6-1: Product: syz
[  488.280287][    T9] usb 6-1: Manufacturer: syz
[  488.281718][    T9] usb 6-1: SerialNumber: syz
[  488.286451][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  488.288251][    T9] r8152-cfgselector 6-1: config 0 descriptor??
[  488.344784][    C1] port100 4-1:8.203: NFC: Urb failure (status -71)
[  488.347941][    C1] port100 4-1:8.203: NFC: Urb failure (status -71)
[  488.350783][ T5886] port100 4-1:8.203: NFC: Could not get supported command types
[  488.355893][ T5886] usb 4-1: USB disconnect, device number 60
[  488.391539][ T5858] zl10353_read_register: readreg error (reg=127, ret==0)
[  488.393719][ T5858] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  488.396024][ T5858] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  488.400333][ T5858] usb 5-1: USB disconnect, device number 34
[  488.418235][ T5858] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  488.511352][    T9] r8152-cfgselector 6-1: Unknown version 0x0000
[  488.514059][    T9] r8152-cfgselector 6-1: bad CDC descriptors
[  488.517751][    T9] r8152-cfgselector 6-1: USB disconnect, device number 12
[  489.097756][T18972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5078'.
[  489.100296][T18972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5078'.
[  489.134128][T18978] loop3: detected capacity change from 0 to 164
[  489.205864][T18984] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  489.287435][    T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  489.361520][T18998] netlink: 'syz.5.5091': attribute type 1 has an invalid length.
[  489.449856][    T9] usb 5-1: Using ep0 maxpacket: 32
[  489.453828][    T9] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  489.457343][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.465002][    T9] usb 5-1: config 0 descriptor??
[  489.478372][    T9] usb 5-1: selecting invalid altsetting 3
[  489.480505][    T9] comedi comedi5: could not set alternate setting 3 in high speed
[  489.491433][    T9] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device.
[  489.504698][    T9] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22
[  489.509642][T19010] loop3: detected capacity change from 0 to 2048
[  489.551404][T19012] batadv_slave_0: entered promiscuous mode
[  489.553063][T19012] batadv_slave_0: entered allmulticast mode
[  489.670946][T19018] loop3: detected capacity change from 0 to 16
[  489.674761][T19018] erofs (device loop3): mounted with root inode @ nid 36.
[  489.687598][    T9] usb 5-1: USB disconnect, device number 35
[  489.984183][T19020] syz.3.5101: attempt to access beyond end of device
[  489.984183][T19020] loop3: rw=524288, sector=34359738360, nr_sectors = 32 limit=16
[  489.990489][T19020] syz.3.5101: attempt to access beyond end of device
[  489.990489][T19020] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  490.037077][T19020] syz.3.5101: attempt to access beyond end of device
[  490.037077][T19020] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16
[  490.061929][   T33] audit: type=1800 audit(1762393379.612:149): pid=19020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5101" name="file1" dev="loop3" ino=86 res=0 errno=0
[  490.248072][T19023] loop5: detected capacity change from 0 to 512
[  490.251313][T19023] EXT4-fs: Ignoring removed oldalloc option
[  490.270861][T19023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.275631][T19023] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  490.290270][T19023] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5102: bg 0: block 217: padding at end of block bitmap is not set
[  490.321460][T16931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.402969][T19029] loop5: detected capacity change from 0 to 256
[  490.418932][T19029] FAT-fs (loop5): Directory bread(block 64) failed
[  490.421298][T19029] FAT-fs (loop5): Directory bread(block 65) failed
[  490.426305][T19029] FAT-fs (loop5): Directory bread(block 66) failed
[  490.428656][T19029] FAT-fs (loop5): Directory bread(block 67) failed
[  490.431023][T19029] FAT-fs (loop5): Directory bread(block 68) failed
[  490.433321][T19029] FAT-fs (loop5): Directory bread(block 69) failed
[  490.435850][T19029] FAT-fs (loop5): Directory bread(block 70) failed
[  490.439930][T19029] FAT-fs (loop5): Directory bread(block 71) failed
[  490.443070][T19029] FAT-fs (loop5): Directory bread(block 72) failed
[  490.445443][T19029] FAT-fs (loop5): Directory bread(block 73) failed
[  490.578422][T19037] loop5: detected capacity change from 0 to 1024
[  490.581135][T19037] EXT4-fs: Ignoring removed nomblk_io_submit option
[  490.583306][T19037] ext4: Unknown parameter 'fscontext'
[  490.789620][T19043] loop3: detected capacity change from 0 to 40427
[  490.793667][T19043] F2FS-fs (loop3): invalid crc value
[  490.824621][T19043] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  490.828301][T19043] F2FS-fs (loop3): Start checkpoint disabled!
[  490.830709][T19043] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  490.833058][T19043] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  490.864851][ T3610] kworker/u9:6: attempt to access beyond end of device
[  490.864851][ T3610] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  490.868801][ T3610] CPU: 0 UID: 0 PID: 3610 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  490.868813][ T3610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  490.868819][ T3610] Workqueue: writeback wb_workfn (flush-7:3)
[  490.868835][ T3610] Call Trace:
[  490.868839][ T3610]  <TASK>
[  490.868843][ T3610]  dump_stack_lvl+0x189/0x250
[  490.868858][ T3610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  490.868868][ T3610]  ? __pfx_queue_work_on+0x10/0x10
[  490.868877][ T3610]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  490.868888][ T3610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  490.868903][ T3610]  f2fs_handle_critical_error+0x37c/0x540
[  490.868918][ T3610]  f2fs_write_end_io+0x886/0xb60
[  490.868950][ T3610]  __submit_merged_bio+0x27a/0x6a0
[  490.868965][ T3610]  __submit_merged_write_cond+0x255/0x530
[  490.868979][ T3610]  f2fs_write_data_pages+0x261d/0x3000
[  490.869004][ T3610]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  490.869020][ T3610]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  490.869046][ T3610]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  490.869058][ T3610]  ? look_up_lock_class+0x74/0x170
[  490.869073][ T3610]  ? trace_f2fs_writepages+0x7f/0x200
[  490.869099][ T3610]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  490.869107][ T3610]  do_writepages+0x32e/0x550
[  490.869121][ T3610]  ? reacquire_held_locks+0x127/0x1d0
[  490.869129][ T3610]  ? writeback_sb_inodes+0x384/0x1010
[  490.869144][ T3610]  __writeback_single_inode+0x145/0xff0
[  490.869154][ T3610]  ? do_raw_spin_unlock+0x4d/0x240
[  490.869167][ T3610]  writeback_sb_inodes+0x6c7/0x1010
[  490.869176][ T3610]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.869199][ T3610]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  490.869235][ T3610]  ? rcu_is_watching+0x15/0xb0
[  490.869250][ T3610]  wb_writeback+0x43b/0xaf0
[  490.869265][ T3610]  ? queue_io+0x311/0x590
[  490.869276][ T3610]  ? __pfx_wb_writeback+0x10/0x10
[  490.869291][ T3610]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.869303][ T3610]  wb_workfn+0x409/0xef0
[  490.869320][ T3610]  ? __pfx_wb_workfn+0x10/0x10
[  490.869331][ T3610]  ? __lock_acquire+0xab9/0xd20
[  490.869345][ T3610]  ? process_scheduled_works+0x9ef/0x17b0
[  490.869357][ T3610]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.869384][ T3610]  ? process_scheduled_works+0x9ef/0x17b0
[  490.869392][ T3610]  ? process_scheduled_works+0x9ef/0x17b0
[  490.869401][ T3610]  process_scheduled_works+0xae1/0x17b0
[  490.869425][ T3610]  ? __pfx_process_scheduled_works+0x10/0x10
[  490.869442][ T3610]  worker_thread+0x8a0/0xda0
[  490.869453][ T3610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  490.869466][ T3610]  ? __kthread_parkme+0x7b/0x200
[  490.869481][ T3610]  kthread+0x711/0x8a0
[  490.869493][ T3610]  ? __pfx_worker_thread+0x10/0x10
[  490.869501][ T3610]  ? __pfx_kthread+0x10/0x10
[  490.869512][ T3610]  ? _raw_spin_unlock_irq+0x23/0x50
[  490.869521][ T3610]  ? lockdep_hardirqs_on+0x9c/0x150
[  490.869529][ T3610]  ? __pfx_kthread+0x10/0x10
[  490.869540][ T3610]  ret_from_fork+0x4bc/0x870
[  490.869550][ T3610]  ? __pfx_ret_from_fork+0x10/0x10
[  490.869562][ T3610]  ? __switch_to_asm+0x39/0x70
[  490.869569][ T3610]  ? __switch_to_asm+0x33/0x70
[  490.869574][ T3610]  ? __pfx_kthread+0x10/0x10
[  490.869585][ T3610]  ret_from_fork_asm+0x1a/0x30
[  490.869601][ T3610]  </TASK>
[  490.962839][    T9] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  490.968977][ T3610] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  491.141735][    T9] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  491.144880][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  491.151090][    T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  491.154031][    T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  491.156294][    T9] usb 6-1: Product: syz
[  491.157669][    T9] usb 6-1: Manufacturer: syz
[  491.159016][    T9] usb 6-1: SerialNumber: syz
[  491.162014][    T9] usb 6-1: config 0 descriptor??
[  491.174431][    T9] usb 6-1: selecting invalid altsetting 0
[  491.387246][    T9] usb 6-1: USB disconnect, device number 13
[  491.445461][T19057] loop4: detected capacity change from 0 to 40427
[  491.449293][T19057] F2FS-fs (loop4): invalid crc value
[  491.478507][T19059] loop3: detected capacity change from 0 to 32768
[  491.481146][T19059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5117 (19059)
[  491.487235][T19059] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  491.490137][T19059] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  491.491090][T19057] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  491.496388][T19057] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  491.522141][T13265] syz-executor: attempt to access beyond end of device
[  491.522141][T13265] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  491.526710][T13265] CPU: 1 UID: 0 PID: 13265 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  491.526724][T13265] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  491.526730][T13265] Call Trace:
[  491.526735][T13265]  <TASK>
[  491.526739][T13265]  dump_stack_lvl+0x189/0x250
[  491.526755][T13265]  ? __pfx_dump_stack_lvl+0x10/0x10
[  491.526766][T13265]  ? __pfx_queue_work_on+0x10/0x10
[  491.526775][T13265]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  491.526786][T13265]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  491.526800][T13265]  f2fs_handle_critical_error+0x37c/0x540
[  491.526815][T13265]  f2fs_write_end_io+0x886/0xb60
[  491.526831][T13265]  __submit_merged_bio+0x27a/0x6a0
[  491.526844][T13265]  __submit_merged_write_cond+0x255/0x530
[  491.526858][T13265]  f2fs_write_data_pages+0x261d/0x3000
[  491.526881][T13265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  491.526907][T13265]  ? __mod_zone_page_state+0xd7/0x140
[  491.526922][T13265]  ? folios_put_refs+0x58b/0x670
[  491.526937][T13265]  ? __lock_acquire+0xab9/0xd20
[  491.526949][T13265]  ? do_raw_spin_lock+0x121/0x290
[  491.526964][T13265]  ? do_raw_spin_unlock+0x4d/0x240
[  491.526974][T13265]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  491.526982][T13265]  do_writepages+0x32e/0x550
[  491.526996][T13265]  ? do_raw_spin_unlock+0x4d/0x240
[  491.527008][T13265]  filemap_fdatawrite+0x199/0x240
[  491.527019][T13265]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  491.527049][T13265]  ? do_raw_spin_unlock+0x4d/0x240
[  491.527061][T13265]  f2fs_sync_dirty_inodes+0x31f/0x830
[  491.527076][T13265]  f2fs_write_checkpoint+0x93e/0x2440
[  491.527084][T13265]  ? __lock_acquire+0xab9/0xd20
[  491.527103][T13265]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  491.527135][T13265]  kill_f2fs_super+0x2cc/0x6d0
[  491.527146][T13265]  ? __pfx_kill_f2fs_super+0x10/0x10
[  491.527162][T13265]  ? shrinker_free+0x2ce/0x3e0
[  491.527172][T13265]  deactivate_locked_super+0xbc/0x130
[  491.527182][T13265]  cleanup_mnt+0x425/0x4c0
[  491.527193][T13265]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.527204][T13265]  task_work_run+0x1d4/0x260
[  491.527216][T13265]  ? __pfx_task_work_run+0x10/0x10
[  491.527226][T13265]  ? __x64_sys_umount+0x122/0x160
[  491.527237][T13265]  ? exit_to_user_mode_loop+0x40/0x130
[  491.527247][T13265]  exit_to_user_mode_loop+0xe9/0x130
[  491.527254][T13265]  do_syscall_64+0x2bd/0xfa0
[  491.527264][T13265]  ? lockdep_hardirqs_on+0x9c/0x150
[  491.527274][T13265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.527281][T13265]  ? exc_page_fault+0xab/0x100
[  491.527292][T13265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  491.527299][T13265] RIP: 0033:0x7f019e7902f7
[  491.527308][T13265] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  491.527350][T13265] RSP: 002b:00007ffdbacb1bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  491.527360][T13265] RAX: 0000000000000000 RBX: 00007f019e811d7d RCX: 00007f019e7902f7
[  491.527366][T13265] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbacb1c80
[  491.527371][T13265] RBP: 00007ffdbacb1c80 R08: 0000000000000000 R09: 0000000000000000
[  491.527375][T13265] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdbacb2d10
[  491.527381][T13265] R13: 00007f019e811d7d R14: 0000000000073460 R15: 00007ffdbacb2d50
[  491.527395][T13265]  </TASK>
[  491.527398][T13265] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  491.544855][T19059] BTRFS info (device loop3): rebuilding free space tree
[  491.639189][T19059] BTRFS info (device loop3): disabling free space tree
[  491.641657][T19059] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  491.644345][T19059] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  491.657493][T19059] BTRFS info (device loop3): enabling ssd optimizations
[  491.660214][T19059] BTRFS info (device loop3): turning on async discard
[  491.662672][T19059] BTRFS info (device loop3): force clearing of disk cache
[  491.665167][T19059] BTRFS info (device loop3): enabling auto defrag
[  491.667504][T19059] BTRFS info (device loop3): max_inline set to 4096
[  491.734147][ T7608] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  493.035990][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  493.199877][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  493.203382][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  493.206057][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  493.226037][   T24] usb 5-1: config 0 descriptor??
[  493.317995][T19129] loop3: detected capacity change from 0 to 2048
[  493.343117][T19129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  493.401899][T19129] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  493.409959][T19129] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28
[  493.413707][T19129] EXT4-fs (loop3): This should not happen!! Data will be lost
[  493.413707][T19129] 
[  493.416877][T19129] EXT4-fs (loop3): Total free blocks count 0
[  493.418653][T19129] EXT4-fs (loop3): Free/Dirty block details
[  493.420504][T19129] EXT4-fs (loop3): free_blocks=2415919104
[  493.422297][T19129] EXT4-fs (loop3): dirty_blocks=32
[  493.423804][T19129] EXT4-fs (loop3): Block reservation details
[  493.425548][T19129] EXT4-fs (loop3): i_reserved_data_blocks=2
[  493.440279][   T54] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  493.672344][   T24] logitech 0003:046D:CA03.001F: nested delimiters
[  493.674485][   T24] logitech 0003:046D:CA03.001F: item 0 1 2 10 parsing failed
[  493.679769][   T24] logitech 0003:046D:CA03.001F: parse failed
[  493.681582][   T24] logitech 0003:046D:CA03.001F: probe with driver logitech failed with error -22
[  493.800346][   T33] audit: type=1326 audit(1762393383.120:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.816290][   T33] audit: type=1326 audit(1762393383.138:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.835673][   T33] audit: type=1326 audit(1762393383.138:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.859446][   T33] audit: type=1326 audit(1762393383.138:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.865993][   T33] audit: type=1326 audit(1762393383.138:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.877441][   T33] audit: type=1326 audit(1762393383.138:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.900703][   T24] usb 5-1: USB disconnect, device number 36
[  493.935391][   T33] audit: type=1326 audit(1762393383.138:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.960536][   T33] audit: type=1326 audit(1762393383.138:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  493.988625][   T33] audit: type=1326 audit(1762393383.138:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.3.5138" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa9f818efc9 code=0x7ffc0000
[  494.021492][T19191] tipc: Failed to remove unknown binding: 66,1,1/2886997039:620987277/620987279
[  494.027245][T19191] tipc: Failed to remove unknown binding: 66,1,1/2886997039:620987277/620987279
[  494.216472][T19197] loop3: detected capacity change from 0 to 32768
[  494.294763][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  494.466485][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  494.469436][ T5886] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  494.471790][ T5886] usb 6-1: config 179 has no interface number 0
[  494.473613][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  494.476891][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  494.480459][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  494.483631][ T5886] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  494.486457][ T5886] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  494.491733][ T5886] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  494.495513][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.503540][T19193] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  494.508636][ T5886] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  494.661114][   T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  494.726674][    T9] usb 6-1: USB disconnect, device number 14
[  494.834381][   T24] usb 4-1: Using ep0 maxpacket: 32
[  494.837917][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  494.840962][   T24] usb 4-1: config 244 has an invalid descriptor of length 0, skipping remainder of the config
[  494.847470][   T24] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  494.850156][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.852410][   T24] usb 4-1: Product: syz
[  494.853547][   T24] usb 4-1: Manufacturer: syz
[  494.854863][   T24] usb 4-1: SerialNumber: syz
[  495.082501][   T24] comedi comedi5: Wrong number of endpoints
[  495.084553][   T24] dt9812 4-1:244.0: driver 'dt9812' failed to auto-configure device.
[  495.088870][   T24] usb 4-1: USB disconnect, device number 61
[  495.665871][T19239] loop3: detected capacity change from 0 to 256
[  495.670470][T19239] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  495.674225][T19239] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  495.677247][T19239] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  495.679769][T19239] UDF-fs: Scanning with blocksize 512 failed
[  495.683034][T19239] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  495.687927][T19239] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  495.809469][    T9] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  495.985837][    T9] usb 6-1: config 0 has an invalid interface number: 235 but max is 0
[  495.989026][    T9] usb 6-1: config 0 has no interface number 0
[  495.991417][    T9] usb 6-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[  495.995368][    T9] usb 6-1: config 0 interface 235 has no altsetting 0
[  496.000537][    T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  496.004010][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.007173][    T9] usb 6-1: Product: syz
[  496.008814][    T9] usb 6-1: Manufacturer: syz
[  496.010662][    T9] usb 6-1: SerialNumber: syz
[  496.014914][    T9] usb 6-1: config 0 descriptor??
[  496.021439][    T9] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected
[  496.024767][    T9] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87
[  496.029238][    T9] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7
[  496.033191][    T9] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81
[  496.036323][    T9] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1
[  496.039493][    T9] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85
[  496.043828][    T9] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  496.248623][ T5886] usb 6-1: USB disconnect, device number 15
[  497.027210][ T5886] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  497.031221][ T5886] keyspan 6-1:0.235: device disconnected
[  497.132706][T19252] loop5: detected capacity change from 0 to 32768
[  497.161598][T19252] ialloc: diAlloc returned -28!
[  497.590897][T19254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5170'.
[  497.982171][T19272] loop3: detected capacity change from 0 to 4096
[  498.047692][T19278] netlink: 7064 bytes leftover after parsing attributes in process `syz.5.5182'.
[  498.050367][T19278] openvswitch: netlink: Missing key (keys=40, expected=100)
[  498.344767][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  498.374304][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  498.374321][   T33] audit: type=1400 audit(1762393387.347:180): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=19289 comm="syz.4.5187"
[  498.528984][    T9] usb 6-1: Using ep0 maxpacket: 16
[  498.532007][    T9] usb 6-1: config 0 has an invalid interface number: 180 but max is 0
[  498.534562][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.537557][    T9] usb 6-1: config 0 has no interface number 0
[  498.544974][    T9] usb 6-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72
[  498.547604][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.549960][    T9] usb 6-1: Product: syz
[  498.560866][    T9] usb 6-1: Manufacturer: syz
[  498.562394][    T9] usb 6-1: SerialNumber: syz
[  498.565676][    T9] usb 6-1: config 0 descriptor??
[  498.568542][    T9] usb 6-1: bad CDC descriptors
[  498.569858][   T33] audit: type=1326 audit(1762393387.522:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19299 comm="syz.4.5192" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f019e78efc9 code=0x0
[  498.790907][   T24] usb 6-1: USB disconnect, device number 16
[  498.843901][T19310] loop4: detected capacity change from 0 to 4096
[  498.857143][T19310] NILFS (loop4): invalid segment: Checksum error in segment payload
[  498.859995][T19310] NILFS (loop4): trying rollback from an earlier position
[  498.877204][T19310] NILFS (loop4): recovery complete
[  498.883799][T19311] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  498.906389][   T33] audit: type=1800 audit(1762393387.836:182): pid=19310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5197" name="file1" dev="loop4" ino=12 res=0 errno=0
[  499.287363][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  499.420566][T19323] loop5: detected capacity change from 0 to 128
[  499.437124][T19323] syz.5.5202: attempt to access beyond end of device
[  499.437124][T19323] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128
[  499.447840][T19323] syz.5.5202: attempt to access beyond end of device
[  499.447840][T19323] loop5: rw=2049, sector=140, nr_sectors = 2 limit=128
[  499.453013][T19323] Buffer I/O error on dev loop5, logical block 70, lost async page write
[  499.456189][T19323] syz.5.5202: attempt to access beyond end of device
[  499.456189][T19323] loop5: rw=2049, sector=142, nr_sectors = 2 limit=128
[  499.462664][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  499.463856][T19323] Buffer I/O error on dev loop5, logical block 71, lost async page write
[  499.466012][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.470639][   T24] usb 5-1: config 0 descriptor??
[  499.472654][T19323] syz.5.5202: attempt to access beyond end of device
[  499.472654][T19323] loop5: rw=2049, sector=144, nr_sectors = 2 limit=128
[  499.472680][T19323] Buffer I/O error on dev loop5, logical block 72, lost async page write
[  499.472980][T19323] syz.5.5202: attempt to access beyond end of device
[  499.472980][T19323] loop5: rw=2049, sector=146, nr_sectors = 76 limit=128
[  499.482869][   T24] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  499.491891][T19323] syz.5.5202: attempt to access beyond end of device
[  499.491891][T19323] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128
[  499.496921][T19323] Buffer I/O error on dev loop5, logical block 69, lost async page write
[  499.915735][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  500.080602][ T5886] usb 6-1: config index 0 descriptor too short (expected 38445, got 45)
[  500.083780][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.087750][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.091958][ T5886] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.094856][ T5886] usb 6-1: config 0 interface 0 has no altsetting 0
[  500.096827][ T5886] usb 6-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  500.099548][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.104562][ T5886] usb 6-1: config 0 descriptor??
[  500.368548][T19333] loop3: detected capacity change from 0 to 1024
[  500.376330][T19333] EXT4-fs: Ignoring removed bh option
[  500.378162][T19333] EXT4-fs: Ignoring removed i_version option
[  500.386371][T19333] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  500.689482][ T5886] waterforce 0003:1044:7A4D.0020: hidraw0: USB HID v0.01 Device [HID 1044:7a4d] on usb-dummy_hcd.5-1/input0
[  500.750263][ T5886] waterforce 0003:1044:7A4D.0020: fw version request failed with -38
[  500.838543][   T24] usb 5-1: USB disconnect, device number 37
[  500.908402][ T5886] usb 6-1: USB disconnect, device number 17
[  501.089180][T19335] loop3: detected capacity change from 0 to 512
[  501.098116][T19335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.103059][T19335] ext4 filesystem being mounted at /1654/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  501.113534][T19335] EXT4-fs warning (device loop3): ext4_group_extend:1862: can't shrink FS - resize aborted
[  501.142629][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.273009][T19343] loop3: detected capacity change from 0 to 2048
[  501.282439][T19344] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.314689][T19344] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  501.319595][T19344] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  501.323435][T19344] Remounting filesystem read-only
[  501.618506][T19357] loop4: detected capacity change from 0 to 2048
[  501.629080][T19358] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  501.971575][T19348] loop3: detected capacity change from 0 to 32768
[  501.988848][T19367] loop4: detected capacity change from 0 to 8
[  501.992635][T19367] SQUASHFS error: zlib decompression failed, data probably corrupt
[  501.993051][T19348] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  501.994924][T19367] SQUASHFS error: Failed to read block 0x9b: -5
[  501.999915][T19367] SQUASHFS error: Unable to read metadata cache entry [99]
[  502.002042][T19367] SQUASHFS error: Unable to read inode 0x127
[  502.017101][T19348] XFS (loop3): Ending clean mount
[  502.018837][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  502.055860][T19375] netlink: 'syz.4.5220': attribute type 9 has an invalid length.
[  502.058392][T19375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5220'.
[  502.060004][ T7608] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  502.182761][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  502.185122][    T9] usb 6-1: config 0 has no interface number 0
[  502.187032][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  502.200546][    T9] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  502.203270][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.206950][    T9] usb 6-1: config 0 descriptor??
[  502.210300][    T9] usbhid 6-1:0.1: couldn't find an input interrupt endpoint
[  502.218351][T19382] loop4: detected capacity change from 0 to 1024
[  502.231413][T19382] hfsplus: xattr searching failed
[  504.815251][    T9] usb 6-1: USB disconnect, device number 18
[  505.192142][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  505.195752][T19409] loop3: detected capacity change from 0 to 40427
[  505.198415][T19409] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  505.200638][T19409] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  505.204331][T19409] F2FS-fs (loop3): invalid crc_offset: 33558524
[  505.235914][T19409] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  505.239664][T19409] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  505.241663][T19409] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  505.270695][T19409] F2FS-fs (loop3): invalid namelen(0), ino:0, run fsck to fix.
[  505.354415][    T9] usb 6-1: Using ep0 maxpacket: 16
[  505.357528][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  505.359530][    T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  505.362198][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.366434][    T9] usb 6-1: config 0 descriptor??
[  505.534190][T19417] loop3: detected capacity change from 0 to 256
[  505.537697][T19417] exfat: Deprecated parameter 'namecase'
[  505.544513][T19417] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  505.589677][T19405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.593318][T19405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  505.629629][T19421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5237'.
[  505.710652][T19425] loop3: detected capacity change from 0 to 2048
[  505.727084][T19425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  505.747654][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  505.792668][T19430] netlink: 'syz.3.5240': attribute type 4 has an invalid length.
[  505.817570][    T9] hid (null): unknown global tag 0xd
[  505.905365][T19436] loop3: detected capacity change from 0 to 2048
[  505.914278][T19436] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  505.926528][T19436] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 0 lbcount: 512 extent 57+512
[  506.044130][ T5886] usb 6-1: USB disconnect, device number 19
[  506.067346][T19444] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5247'.
[  506.194963][T19450] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5250'.
[  506.197942][T19450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5250'.
[  506.203168][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5250'.
[  506.371730][T19463] Unsupported ieee802154 address type: 0
[  506.414466][T19465] loop3: detected capacity change from 0 to 16
[  506.418327][T19465] erofs (device loop3): mounted with root inode @ nid 36.
[  506.424548][T19465] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  506.428236][T19465] erofs (device loop3): failed to decompress -46 in[60, 4036] out[1851]
[  506.431567][T19465] erofs (device loop3): read error -117 @ 43 of nid 36
[  506.532794][T19469] loop3: detected capacity change from 0 to 2048
[  506.539896][T19469] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  506.550014][T19470] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  506.567287][T19469] syz.3.5259: attempt to access beyond end of device
[  506.567287][T19469] loop3: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  506.571969][T19469] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=1)
[  506.735321][T19484] QAT: Device 7 not found
[  507.733223][T19503] loop3: detected capacity change from 0 to 1024
[  508.368924][   T33] audit: type=1804 audit(1762393396.494:183): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5274" name="/newroot/1694/file0/bus" dev="loop3" ino=26 res=1 errno=0
[  508.377994][   T33] audit: type=1800 audit(1762393396.494:184): pid=19513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5274" name="bus" dev="loop3" ino=26 res=0 errno=0
[  508.392330][T19511] Invalid ELF header magic: != ELF
[  508.403107][T19511] hfsplus: found bad thread record in catalog
[  508.405672][T19511] hfsplus: found bad thread record in catalog
[  508.704842][    T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  508.844373][T19521] loop4: detected capacity change from 0 to 2048
[  508.860636][T19521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.864784][    T9] usb 4-1: Using ep0 maxpacket: 16
[  508.868167][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.871903][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  508.875075][T19521] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  508.875297][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  508.886124][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  508.889557][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.894693][T19525] loop5: detected capacity change from 0 to 47
[  508.903513][    T9] usb 4-1: config 0 descriptor??
[  508.917130][T13265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.917956][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5281'.
[  509.013601][   T40] kworker/u10:2: attempt to access beyond end of device
[  509.013601][   T40] loop5: rw=1, sector=48, nr_sectors = 2 limit=47
[  509.020568][   T40] Buffer I/O error on dev loop5, logical block 24, lost async page write
[  509.023863][   T40] kworker/u10:2: attempt to access beyond end of device
[  509.023863][   T40] loop5: rw=1, sector=50, nr_sectors = 2 limit=47
[  509.031680][   T40] Buffer I/O error on dev loop5, logical block 25, lost async page write
[  509.034848][   T40] kworker/u10:2: attempt to access beyond end of device
[  509.034848][   T40] loop5: rw=1, sector=52, nr_sectors = 2 limit=47
[  509.039834][   T40] Buffer I/O error on dev loop5, logical block 26, lost async page write
[  509.043144][   T40] kworker/u10:2: attempt to access beyond end of device
[  509.043144][   T40] loop5: rw=1, sector=54, nr_sectors = 2 limit=47
[  509.047841][   T40] Buffer I/O error on dev loop5, logical block 27, lost async page write
[  509.207949][T19536] loop5: detected capacity change from 0 to 512
[  509.210340][T19536] EXT4-fs: Ignoring removed nomblk_io_submit option
[  509.214240][T19536] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  509.216626][T19536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  509.218951][T19536] System zones: 0-1, 15-15, 18-18, 34-34
[  509.221071][T19536] EXT4-fs (loop5): orphan cleanup on readonly fs
[  509.226172][T19536] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #16: comm syz.5.5286: inode has both inline data and extents flags
[  509.230475][T19536] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5286: couldn't read orphan inode 16 (err -117)
[  509.235181][T19536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  509.240397][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5287'.
[  509.243275][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5287'.
[  509.254275][T19536] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  509.256943][T19536] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  509.275759][T16931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  509.358188][T19548] loop4: detected capacity change from 0 to 256
[  509.391266][T19548] FAT-fs (loop4): IO charset none not found
[  511.035366][ T8293] hfsplus: b-tree write err: -5, ino 4
[  511.132683][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  511.134614][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  511.197969][T19573] netlink: 'syz.3.5302': attribute type 1 has an invalid length.
[  511.369360][    T9] usb 4-1: USB disconnect, device number 62
[  511.475019][ T5823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  511.481263][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  511.487715][ T5823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  511.491502][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  511.494601][ T5823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  511.525050][T19582] lo speed is unknown, defaulting to 1000
[  511.526652][   T33] audit: type=1326 audit(1762393399.484:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19584 comm="syz.3.5307" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9f818efc9 code=0x0
[  511.591680][T19579] loop5: detected capacity change from 0 to 32768
[  511.600318][T19579] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  511.606874][T19579] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  511.662934][T16931] ocfs2: Unmounting device (7,5) on (node local)
[  511.710946][T19582] chnl_net:caif_netlink_parms(): no params data found
[  511.763327][T19594] loop5: detected capacity change from 0 to 512
[  511.765849][T19594] EXT4-fs: Ignoring removed i_version option
[  511.769543][T19594] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  511.776171][T19594] EXT4-fs error (device loop5): xattr_find_entry:337: inode #15: comm syz.5.5309: corrupted xattr entries
[  511.781508][T19594] EXT4-fs (loop5): 1 orphan inode deleted
[  511.784060][T19594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  511.810969][T16931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.841933][T19587] loop3: detected capacity change from 0 to 32768
[  511.873970][T19587] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  511.879887][T19582] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.882617][T19582] bridge0: port 1(bridge_slave_0) entered disabled state
[  511.885353][T19582] bridge_slave_0: entered allmulticast mode
[  511.889103][T19582] bridge_slave_0: entered promiscuous mode
[  511.892859][T19582] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.895089][T19582] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.897302][T19582] bridge_slave_1: entered allmulticast mode
[  511.900746][T19582] bridge_slave_1: entered promiscuous mode
[  511.922995][T19582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  511.932591][T19582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  511.934293][ T7608] ocfs2: Unmounting device (7,3) on (node local)
[  511.968661][T19582] team0: Port device team_slave_0 added
[  511.972117][T19582] team0: Port device team_slave_1 added
[  511.992907][T19582] batman_adv: batadv0: Adding interface: batadv_slave_0
[  511.995036][T19582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.002651][T19582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  512.007532][T19582] batman_adv: batadv0: Adding interface: batadv_slave_1
[  512.009603][T19582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  512.017205][T19582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  512.049512][T19582] hsr_slave_0: entered promiscuous mode
[  512.052213][T19582] hsr_slave_1: entered promiscuous mode
[  512.054370][T19582] debugfs: 'hsr0' already exists in 'hsr'
[  512.056133][T19582] Cannot create hsr debugfs directory
[  512.075464][T19607] loop3: detected capacity change from 0 to 8192
[  512.099349][T19607] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  512.102978][T19607] FAT-fs (loop3): Filesystem has been set read-only
[  512.105289][T19607] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  512.107867][T19607] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  512.110512][T19607] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  512.148165][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  512.209917][T19582] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  512.218238][T19582] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  512.224878][T19582] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  512.231168][T19582] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  512.264105][T19582] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.267063][T19582] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.268689][T19619] sctp: [Deprecated]: syz.3.5315 (pid 19619) Use of int in max_burst socket option.
[  512.268689][T19619] Use struct sctp_assoc_value instead
[  512.270094][T19582] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.277600][T19582] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.334647][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  512.342187][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  512.347250][T19582] 8021q: adding VLAN 0 to HW filter on device bond0
[  512.350919][   T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  512.354526][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.358046][   T24] usb 6-1: config 0 descriptor??
[  512.368404][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state
[  512.371534][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state
[  512.390071][T19582] 8021q: adding VLAN 0 to HW filter on device team0
[  512.405144][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state
[  512.407602][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state
[  512.415410][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state
[  512.417928][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state
[  512.434317][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5318'.
[  512.671444][T19582] 8021q: adding VLAN 0 to HW filter on device batadv0
[  512.794854][T19629] loop3: detected capacity change from 0 to 32768
[  512.798903][T19629] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5319 (19629)
[  512.805006][T19629] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  512.807970][T19629] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  512.812625][   T24] cp2112 0003:10C4:EA90.0022: item fetching failed at offset 5/7
[  512.815953][   T24] cp2112 0003:10C4:EA90.0022: parse failed
[  512.822321][   T24] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -22
[  512.830426][T19629] BTRFS info (device loop3): enabling ssd optimizations
[  512.832601][T19629] BTRFS info (device loop3): turning on async discard
[  512.834474][T19629] BTRFS info (device loop3): enabling free space tree
[  512.836412][T19629] BTRFS info (device loop3): enabling auto defrag
[  512.853157][T19582] veth0_vlan: entered promiscuous mode
[  512.859780][T19582] veth1_vlan: entered promiscuous mode
[  512.886173][ T7608] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  512.892261][T19582] veth0_macvtap: entered promiscuous mode
[  512.909658][T19582] veth1_macvtap: entered promiscuous mode
[  512.937399][T19582] batman_adv: batadv0: Interface activated: batadv_slave_0
[  512.943345][T19582] batman_adv: batadv0: Interface activated: batadv_slave_1
[  512.964233][ T5832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  512.979063][ T5832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  512.997973][ T5832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.000608][ T5832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.071335][ T8293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.072921][ T1792] usb 6-1: USB disconnect, device number 20
[  513.073618][ T8293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.181440][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  513.184602][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.412619][T19675] loop3: detected capacity change from 0 to 256
[  513.708038][ T5823] Bluetooth: hci0: command tx timeout
[  513.725026][T19685] loop3: detected capacity change from 0 to 2048
[  513.770397][T19689] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5335'.
[  513.802179][T19685] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  514.155399][T19691] loop5: detected capacity change from 0 to 32768
[  514.168162][T19691] JBD2: Ignoring recovery information on journal
[  514.199062][T19691] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  514.236024][T19691] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74)
[  514.242130][T19691] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  514.244924][T19691] OCFS2: File system is now read-only.
[  514.246668][T19691] (syz.5.5336,19691,1):ocfs2_search_one_group:1738 ERROR: status = -30
[  514.249115][T19691] (syz.5.5336,19691,1):ocfs2_claim_suballoc_bits:1989 ERROR: status = -30
[  514.251997][T19691] (syz.5.5336,19691,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  514.254427][T19691] (syz.5.5336,19691,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  514.257039][T19691] (syz.5.5336,19691,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  514.259326][T19691] (syz.5.5336,19691,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  514.261743][T19691] (syz.5.5336,19691,1):ocfs2_mknod:388 ERROR: status = -30
[  514.264057][T19691] (syz.5.5336,19691,1):ocfs2_mknod:505 ERROR: status = -30
[  514.266129][T19691] (syz.5.5336,19691,1):ocfs2_create:678 ERROR: status = -30
[  514.290677][T16931] ocfs2: Unmounting device (7,5) on (node local)
[  514.359375][T19705] netlink: 356 bytes leftover after parsing attributes in process `syz.6.5341'.
[  514.429236][T19710] loop6: detected capacity change from 0 to 512
[  514.431791][T19710] EXT4-fs: Ignoring removed bh option
[  514.497479][T19710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  514.501709][T19710] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  514.516636][   T33] audit: type=1800 audit(1762393402.244:186): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5343" name="bus" dev="loop6" ino=18 res=0 errno=0
[  514.545577][T19582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.563201][T19718] overlayfs: upper fs does not support file handles, falling back to index=off.
[  514.927704][T19730] loop6: detected capacity change from 0 to 32768
[  514.930467][T19730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5350 (19730)
[  514.936177][T19730] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  514.939142][T19730] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  514.965167][T19730] BTRFS info (device loop6): enabling ssd optimizations
[  514.967779][T19730] BTRFS info (device loop6): turning on async discard
[  514.970255][T19730] BTRFS info (device loop6): enabling free space tree
[  515.010209][T19582] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  515.105333][ T1792] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  515.204862][T19747] loop6: detected capacity change from 0 to 2048
[  515.267716][ T1792] usb 6-1: Using ep0 maxpacket: 16
[  515.273048][ T1792] usb 6-1: config 0 has no interfaces?
[  515.277226][ T1792] usb 6-1: New USB device found, idVendor=413c, idProduct=81a2, bcdDevice=b7.0a
[  515.280363][ T1792] usb 6-1: New USB device strings: Mfr=3, Product=0, SerialNumber=0
[  515.282947][ T1792] usb 6-1: Manufacturer: syz
[  515.286538][ T1792] usb 6-1: config 0 descriptor??
[  515.511243][   T24] usb 6-1: USB disconnect, device number 21
[  515.842011][ T9676] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  515.951029][ T5823] Bluetooth: hci0: command tx timeout
[  516.004546][ T9676] usb 4-1: Using ep0 maxpacket: 32
[  516.008229][ T9676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.011203][ T9676] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  516.013831][ T9676] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  516.017792][ T9676] usb 4-1: config 0 interface 0 has no altsetting 1
[  516.021713][ T9676] usb 4-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=8e.57
[  516.024545][ T9676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.027535][ T9676] usb 4-1: Product: syz
[  516.028946][ T9676] usb 4-1: Manufacturer: syz
[  516.030463][ T9676] usb 4-1: SerialNumber: syz
[  516.033607][ T9676] usb 4-1: config 0 descriptor??
[  516.037374][ T9676] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  516.040142][ T9676] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  516.050620][ T9676] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2
[  516.262103][ T9676] usb 4-1: USB disconnect, device number 63
[  516.346228][T19770] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  516.348302][T19770] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  516.352893][T19770] comedi comedi3: 8255: I/O port conflict (0x16,4)
[  516.355448][T19770] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  516.357943][T19770] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  516.360387][T19770] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  516.362908][T19770] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  516.365275][T19770] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  516.367649][T19770] comedi comedi3: 8255: I/O port conflict (0xfd,4)
[  516.369693][T19772] syzkaller1: entered promiscuous mode
[  516.370042][T19770] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  516.372111][T19772] syzkaller1: entered allmulticast mode
[  516.374572][T19770] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  516.374684][T19770] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  516.382368][T19770] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  516.389273][T19770] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  516.391208][T19770] comedi comedi3: 8255: I/O port conflict (0x8000c,4)
[  516.393403][T19770] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  516.405760][T19770] comedi comedi3: 8255: I/O port conflict (0x7f,4)
[  516.720295][T19782] loop5: detected capacity change from 0 to 256
[  516.726138][T19782] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  516.736276][T19782] exFAT-fs (loop5): start_clu is invalid cluster(0x400)
[  517.005398][ T9676] IPVS: starting estimator thread 0...
[  517.100673][T19787] IPVS: using max 69 ests per chain, 165600 per kthread
[  517.203029][T19794] loop3: detected capacity change from 0 to 256
[  517.213499][T19794] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf5596061, utbl_chksum : 0xe619d30d)
[  517.276447][    C0] Unknown status report in ack skb
[  517.543493][T19810] netlink: 'syz.3.5380': attribute type 1 has an invalid length.
[  517.545962][T19810] netlink: 'syz.3.5380': attribute type 2 has an invalid length.
[  517.796420][T19814] loop3: detected capacity change from 0 to 40427
[  517.830018][T19814] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  517.834339][T19814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  518.227632][T19840] input: syz1 as /devices/virtual/input/input38
[  518.364629][T19847] loop5: detected capacity change from 0 to 1024
[  518.395107][   T28] hfsplus: b-tree write err: -5, ino 4
[  518.470362][T19852] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5398'.
[  518.740024][T19858] loop5: detected capacity change from 0 to 4096
[  518.744655][T19858] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  518.850100][T19858] ntfs3(loop5): failed to convert "c46c" to cp861
[  518.865507][T19858] ntfs3(loop5): ino=20, mi_enum_attr
[  518.867161][T19858] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  519.882168][T19872] loop3: detected capacity change from 0 to 32768
[  519.887747][T19872] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  519.890833][T19872] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  519.909042][T19872] XFS (loop3): Ending clean mount
[  519.912247][T19872] XFS (loop3): Quotacheck needed: Please wait.
[  519.954813][T19872] XFS (loop3): Quotacheck: Done.
[  519.960458][T19882] loop6: detected capacity change from 0 to 4096
[  519.997582][T19883] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  520.016536][ T7608] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  520.046981][T19885] loop5: detected capacity change from 0 to 128
[  520.049728][T19885] EXT4-fs: Ignoring removed nobh option
[  520.091445][T19885] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  520.096098][T19885] ext4 filesystem being mounted at /360/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  520.131972][ T5858] NILFS (loop6): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  520.153661][ T5858] NILFS error (device loop6): nilfs_bmap_truncate: broken bmap (inode number=12)
[  520.163159][T19885] fscrypt (loop5, inode 12): Reserved bits set in encryption policy
[  520.184483][ T5858] Remounting filesystem read-only
[  520.186139][ T5858] NILFS (loop6): error -5 truncating bmap (ino=12)
[  520.214822][T16931] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  520.332594][T19893] PM: Enabling pm_trace changes system date and time during resume.
[  520.332594][T19893] PM: Correct system time has to be restored manually after resume.
[  520.334710][T19891] loop5: detected capacity change from 0 to 4096
[  520.341868][T19891] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  520.370926][T19891] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  520.373221][T19891] ntfs3(loop5): ino=5, mi_enum_attr
[  520.377580][T19891] ntfs3(loop5): ino=5, "/" mi_enum_attr
[  520.804823][ T1792] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  520.966561][ T1792] usb 4-1: Using ep0 maxpacket: 8
[  520.971132][ T1792] usb 4-1: config 162 has an invalid interface number: 239 but max is 0
[  520.974347][ T1792] usb 4-1: config 162 has no interface number 0
[  520.977491][ T5823] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  520.983750][ T5823] Bluetooth: hci0: Injecting HCI hardware error event
[  520.987730][ T1792] usb 4-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  520.990722][ T5823] Bluetooth: hci0: hardware error 0x00
[  520.992618][ T1792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.996560][ T1792] usb 4-1: Product: syz
[  520.998485][ T1792] usb 4-1: Manufacturer: syz
[  521.000568][ T1792] usb 4-1: SerialNumber: syz
[  521.229219][ T1792] go7007 4-1:162.239: The Lifeview TV Walker Ultra is not supported. Sorry!
[  521.234163][ T1792] usb 4-1: USB disconnect, device number 64
[  521.383453][T19910] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5418'.
[  521.516796][T19918] loop6: detected capacity change from 0 to 512
[  521.524707][T19918] FAT-fs (loop6): error, corrupted file size (i_pos 51, 9216)
[  521.846474][T19932] gre1: entered promiscuous mode
[  521.974380][T19938] loop3: detected capacity change from 0 to 1024
[  521.977748][T19938] EXT4-fs: Ignoring removed orlov option
[  521.989657][T19938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.024761][ T7608] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.080088][T19942] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5433'.
[  522.486857][T19959] Falling back ldisc for ptm0.
[  522.855571][T19966] loop3: detected capacity change from 0 to 32768
[  523.123132][   T58] block nbd1: Receive control failed (result -32)
[  523.164719][T19977] syzkaller1: entered promiscuous mode
[  523.167163][T19977] syzkaller1: entered allmulticast mode
[  523.241791][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  523.407918][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  523.465244][T19982] loop5: detected capacity change from 0 to 2048
[  523.487031][T19982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  523.498650][   T33] audit: type=1800 audit(1762393410.533:187): pid=19982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5449" name="bus" dev="loop5" ino=18 res=0 errno=0
[  523.544382][T16931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.584195][T19987] loop5: detected capacity change from 0 to 128
[  523.627601][T19989] loop5: detected capacity change from 0 to 2048
[  523.633109][T19989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  523.644399][   T33] audit: type=1800 audit(1762393410.671:188): pid=19989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5451" name="file1" dev="loop5" ino=1367 res=0 errno=0
[  524.265719][T20004] loop3: detected capacity change from 0 to 4096
[  524.268472][T20004] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  524.278799][T20004] ntfs3(loop3): ino=18, mi_enum_attr
[  524.280429][T20004] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  524.288135][T20004] ntfs3(loop3): ino=0, attr_set_size
[  524.596091][ T9676] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  524.769365][ T9676] usb 4-1: Using ep0 maxpacket: 8
[  524.773440][ T9676] usb 4-1: config 0 has an invalid interface number: 88 but max is 3
[  524.776661][ T9676] usb 4-1: config 0 has an invalid interface number: 250 but max is 3
[  524.779757][ T9676] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.783647][ T9676] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 4
[  524.786965][ T9676] usb 4-1: config 0 has no interface number 0
[  524.789367][ T9676] usb 4-1: config 0 has no interface number 1
[  524.792540][ T9676] usb 4-1: config 0 interface 88 has no altsetting 0
[  524.795150][ T9676] usb 4-1: config 0 interface 250 has no altsetting 0
[  524.797761][ T9676] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=12.b3
[  524.801446][ T9676] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.806923][ T9676] usb 4-1: config 0 descriptor??
[  525.040352][ T9676] usb 4-1: string descriptor 0 read error: -71
[  525.047188][ T9676] usb 4-1: USB disconnect, device number 65
[  525.053960][T20014] loop6: detected capacity change from 0 to 512
[  525.056838][T20014] EXT4-fs: Ignoring removed bh option
[  525.058811][T20014] EXT4-fs: Ignoring removed mblk_io_submit option
[  525.061458][T20014] EXT4-fs (loop6): Test dummy encryption mode enabled
[  525.071342][T20014] EXT4-fs error (device loop6): ext4_orphan_get:1392: comm syz.6.5463: inode #13: comm syz.6.5463: iget: illegal inode #
[  525.075431][T20017] loop5: detected capacity change from 0 to 512
[  525.077825][T20017] msdos: Bad value for 'time_offset'
[  525.080624][T20014] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.5463: couldn't read orphan inode 13 (err -117)
[  525.084984][T20014] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.111660][T19582] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.462050][T20023] loop6: detected capacity change from 0 to 40427
[  525.465952][T20023] F2FS-fs (loop6): build fault injection rate: 771
[  525.470074][T20023] F2FS-fs (loop6): invalid crc value
[  525.501825][T20023] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  525.505463][T20023] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  525.517069][ T5858] usb 6-1: new full-speed USB device number 22 using dummy_hcd
[  525.548434][T19582] syz-executor: attempt to access beyond end of device
[  525.548434][T19582] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  525.554838][T19582] CPU: 1 UID: 0 PID: 19582 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  525.554853][T19582] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  525.554859][T19582] Call Trace:
[  525.554863][T19582]  <TASK>
[  525.554867][T19582]  dump_stack_lvl+0x189/0x250
[  525.554885][T19582]  ? __pfx_dump_stack_lvl+0x10/0x10
[  525.554899][T19582]  ? __pfx_queue_work_on+0x10/0x10
[  525.554912][T19582]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  525.554926][T19582]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  525.554948][T19582]  f2fs_handle_critical_error+0x37c/0x540
[  525.554964][T19582]  f2fs_write_end_io+0x886/0xb60
[  525.554979][T19582]  __submit_merged_bio+0x27a/0x6a0
[  525.554993][T19582]  __submit_merged_write_cond+0x255/0x530
[  525.555007][T19582]  f2fs_write_data_pages+0x261d/0x3000
[  525.555029][T19582]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  525.555058][T19582]  ? folio_unqueue_deferred_split+0x93/0x230
[  525.555070][T19582]  ? folios_put_refs+0x584/0x670
[  525.555082][T19582]  ? __pfx_folios_put_refs+0x10/0x10
[  525.555090][T19582]  ? rcu_is_watching+0x15/0xb0
[  525.555102][T19582]  ? __lock_acquire+0xab9/0xd20
[  525.555117][T19582]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  525.555125][T19582]  do_writepages+0x32e/0x550
[  525.555144][T19582]  ? do_raw_spin_unlock+0x4d/0x240
[  525.555165][T19582]  filemap_fdatawrite+0x199/0x240
[  525.555183][T19582]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  525.555219][T19582]  ? do_raw_spin_unlock+0x4d/0x240
[  525.555231][T19582]  f2fs_sync_dirty_inodes+0x31f/0x830
[  525.555249][T19582]  f2fs_write_checkpoint+0x93e/0x2440
[  525.555262][T19582]  ? stack_depot_save_flags+0x40/0x860
[  525.555302][T19582]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  525.555327][T19582]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  525.555335][T19582]  ? kfree+0x19a/0x6d0
[  525.555350][T19582]  kill_f2fs_super+0x2cc/0x6d0
[  525.555361][T19582]  ? __pfx_kill_f2fs_super+0x10/0x10
[  525.555384][T19582]  ? shrinker_free+0x2ce/0x3e0
[  525.555400][T19582]  deactivate_locked_super+0xbc/0x130
[  525.555419][T19582]  cleanup_mnt+0x425/0x4c0
[  525.555435][T19582]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.555456][T19582]  task_work_run+0x1d4/0x260
[  525.555470][T19582]  ? __pfx_task_work_run+0x10/0x10
[  525.555479][T19582]  ? __x64_sys_umount+0x122/0x160
[  525.555491][T19582]  ? exit_to_user_mode_loop+0x40/0x130
[  525.555501][T19582]  exit_to_user_mode_loop+0xe9/0x130
[  525.555508][T19582]  do_syscall_64+0x2bd/0xfa0
[  525.555519][T19582]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.555528][T19582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.555536][T19582]  ? exc_page_fault+0xab/0x100
[  525.555546][T19582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  525.555554][T19582] RIP: 0033:0x7f911bf902f7
[  525.555563][T19582] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  525.555570][T19582] RSP: 002b:00007ffd6f619e88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  525.555587][T19582] RAX: 0000000000000000 RBX: 00007f911c011d7d RCX: 00007f911bf902f7
[  525.555593][T19582] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd6f619f40
[  525.555597][T19582] RBP: 00007ffd6f619f40 R08: 000000000000c088 R09: 0000000000000000
[  525.555603][T19582] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd6f61afd0
[  525.555608][T19582] R13: 00007f911c011d7d R14: 000000000007af0b R15: 00007ffd6f61b010
[  525.555622][T19582]  </TASK>
[  525.555626][T19582] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  525.681131][ T5858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  525.686322][ T5858] usb 6-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00
[  525.689585][ T5858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  525.714398][ T5858] usb 6-1: config 0 descriptor??
[  525.726210][T20032] loop3: detected capacity change from 0 to 4096
[  525.840329][T20036] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  526.173139][ T5858] wacom 0003:056A:00E3.0023: hidraw0: USB HID v0.02 Device [HID 056a:00e3] on usb-dummy_hcd.5-1/input0
[  526.387116][   T24] usb 6-1: USB disconnect, device number 22
[  526.882131][ T1792] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  527.046401][ T1792] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  527.049201][ T1792] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  527.052094][ T1792] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  527.055483][ T1792] usb 4-1: config 220 has no interface number 2
[  527.057550][ T1792] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  527.061403][ T1792] usb 4-1: config 220 interface 0 has no altsetting 0
[  527.063455][ T1792] usb 4-1: config 220 interface 76 has no altsetting 0
[  527.065707][ T1792] usb 4-1: config 220 interface 1 has no altsetting 0
[  527.070569][ T1792] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  527.074036][ T1792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.076480][ T1792] usb 4-1: Product: syz
[  527.078047][ T1792] usb 4-1: Manufacturer: syz
[  527.079866][ T1792] usb 4-1: SerialNumber: syz
[  527.313376][ T1792] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  527.324258][ T1792] uvcvideo 4-1:220.0: No valid video chain found.
[  527.326928][ T1792] usb 4-1: selecting invalid altsetting 0
[  527.348245][ T1792] usb 4-1: selecting invalid altsetting 0
[  527.350381][ T1792] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  527.355161][ T1792] usb 4-1: USB disconnect, device number 66
[  527.721797][T19906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  527.725330][T19906] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  527.731577][T19906] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  527.734781][T19906] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  527.737291][T19906] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  527.767289][T20072] lo speed is unknown, defaulting to 1000
[  527.864037][T20072] chnl_net:caif_netlink_parms(): no params data found
[  527.936371][T20072] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.938506][T20072] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.940748][T20072] bridge_slave_0: entered allmulticast mode
[  527.944456][T20072] bridge_slave_0: entered promiscuous mode
[  527.948707][T20072] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.951331][T20072] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.955002][T20072] bridge_slave_1: entered allmulticast mode
[  527.958127][T20072] bridge_slave_1: entered promiscuous mode
[  527.999930][T20072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.005691][T20072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.011155][T20085] loop3: detected capacity change from 0 to 128
[  528.033675][T20072] team0: Port device team_slave_0 added
[  528.038215][T20072] team0: Port device team_slave_1 added
[  528.063791][T20072] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.067244][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.074948][T20072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.079263][T20072] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.081198][T20072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.090950][T20072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.132210][T20087] loop3: detected capacity change from 0 to 2048
[  528.136663][T20087] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  528.146982][T20072] hsr_slave_0: entered promiscuous mode
[  528.148809][T20087] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  528.150297][T20072] hsr_slave_1: entered promiscuous mode
[  528.152368][T20087] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  528.154887][T20072] debugfs: 'hsr0' already exists in 'hsr'
[  528.157716][T20087] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[  528.159751][T20072] Cannot create hsr debugfs directory
[  528.185452][ T7608] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  528.190200][ T7608] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  528.379673][T20072] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  528.386918][T20072] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  528.392911][T20072] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  528.398528][T20072] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  528.456396][T20072] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.466948][T20072] 8021q: adding VLAN 0 to HW filter on device team0
[  528.471825][ T3043] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.473887][ T3043] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.487402][ T3043] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.489530][ T3043] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.503530][T20072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  528.506826][T20072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  528.595713][T19906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  528.603197][T19906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  528.612556][T19906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  528.622401][T19906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  528.625700][T20072] 8021q: adding VLAN 0 to HW filter on device batadv0
[  528.627000][T19906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  528.672051][T20098] lo speed is unknown, defaulting to 1000
[  528.783643][T20098] chnl_net:caif_netlink_parms(): no params data found
[  528.847862][T20098] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.849858][T20098] bridge0: port 1(bridge_slave_0) entered disabled state
[  528.852424][T20098] bridge_slave_0: entered allmulticast mode
[  528.856709][T20098] bridge_slave_0: entered promiscuous mode
[  528.860553][T20098] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.862727][T20098] bridge0: port 2(bridge_slave_1) entered disabled state
[  528.865385][T20098] bridge_slave_1: entered allmulticast mode
[  528.868152][T20098] bridge_slave_1: entered promiscuous mode
[  528.900273][T20098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  528.911070][T20098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.931733][T20072] veth0_vlan: entered promiscuous mode
[  528.935149][T20098] team0: Port device team_slave_0 added
[  528.939035][T20098] team0: Port device team_slave_1 added
[  528.959200][T20098] batman_adv: batadv0: Adding interface: batadv_slave_0
[  528.961270][T20098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.970260][T20098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  528.975319][T20098] batman_adv: batadv0: Adding interface: batadv_slave_1
[  528.977270][T20098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  528.984950][T20098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  528.989375][T20072] veth1_vlan: entered promiscuous mode
[  529.036718][T20098] hsr_slave_0: entered promiscuous mode
[  529.040677][T20098] hsr_slave_1: entered promiscuous mode
[  529.043619][T20098] debugfs: 'hsr0' already exists in 'hsr'
[  529.045717][T20098] Cannot create hsr debugfs directory
[  529.167716][T20072] veth0_macvtap: entered promiscuous mode
[  529.185019][T20072] veth1_macvtap: entered promiscuous mode
[  529.206538][T20072] batman_adv: batadv0: Interface activated: batadv_slave_0
[  529.233995][T20072] batman_adv: batadv0: Interface activated: batadv_slave_1
[  529.278954][T20098] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  529.285927][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.295692][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.301191][T20098] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  529.312565][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.315700][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.321898][T20098] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  529.332314][T20098] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  529.433496][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.436311][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.471249][ T3043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.483272][ T3043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.501456][T20098] 8021q: adding VLAN 0 to HW filter on device bond0
[  529.523796][T20098] 8021q: adding VLAN 0 to HW filter on device team0
[  529.542285][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.545363][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  529.559714][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.562182][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  529.772967][T20098] 8021q: adding VLAN 0 to HW filter on device batadv0
[  529.921953][T20147] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  529.992049][ T5823] Bluetooth: hci1: command tx timeout
[  530.000482][T20098] veth0_vlan: entered promiscuous mode
[  530.017784][T20098] veth1_vlan: entered promiscuous mode
[  530.053521][T20152] loop7: detected capacity change from 0 to 128
[  530.054099][T20098] veth0_macvtap: entered promiscuous mode
[  530.062599][T20098] veth1_macvtap: entered promiscuous mode
[  530.071971][   T33] audit: type=1800 audit(1762393416.606:189): pid=20152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5506" name="file1" dev="loop7" ino=1048718 res=0 errno=0
[  530.082042][T20098] batman_adv: batadv0: Interface activated: batadv_slave_0
[  530.095267][T20098] batman_adv: batadv0: Interface activated: batadv_slave_1
[  530.104883][T17722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  530.108123][T17722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  530.115130][T17722] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  530.118439][T17722] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  530.208613][ T3569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.211502][ T3569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.234323][ T3569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  530.236645][ T3569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  530.251164][T20155] loop7: detected capacity change from 0 to 16
[  530.264956][T20155] erofs (device loop7): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  530.267738][T20155] erofs (device loop7): EXPERIMENTAL metadata compression support in use. Use at your own risk!
[  530.275868][T20155] erofs (device loop7): bogus i_mode (0) @ nid 916717819658240
[  530.363465][T20161] loop6: detected capacity change from 0 to 128
[  530.374091][T20161] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  530.378968][T20161] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  530.463019][T19582] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  530.546438][T20179] Bluetooth: MGMT ver 1.23
[  530.691224][T20194] loop7: detected capacity change from 0 to 128
[  530.694494][T20194] FAT-fs (loop7): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  530.703555][   T33] audit: type=1800 audit(1762393417.188:190): pid=20194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5524" name="file2" dev="loop7" ino=1048724 res=0 errno=0
[  530.723988][T20194] syz.7.5524: attempt to access beyond end of device
[  530.723988][T20194] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128
[  530.858844][ T5823] Bluetooth: hci2: command tx timeout
[  530.871549][T20205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5529'.
[  530.874556][T20205] bridge_slave_1: left allmulticast mode
[  530.876226][T20205] bridge_slave_1: left promiscuous mode
[  530.878077][T20205] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.889430][T20205] bridge_slave_0: left allmulticast mode
[  530.893390][T20205] bridge_slave_0: left promiscuous mode
[  530.895391][T20205] bridge0: port 1(bridge_slave_0) entered disabled state
[  530.912980][T20200] loop7: detected capacity change from 0 to 4096
[  532.245418][ T5823] Bluetooth: hci1: command tx timeout
[  532.556702][T20254] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.5549' sets config #0
[  532.562870][T20254] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.5549' sets config #1
[  533.111931][ T5823] Bluetooth: hci2: command tx timeout
[  534.512117][ T5823] Bluetooth: hci1: command tx timeout
[  535.392057][ T5823] Bluetooth: hci2: command tx timeout
[  535.944389][T20276] loop8: detected capacity change from 0 to 512
[  535.951712][T20276] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  535.971113][T20276] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  535.976196][T20276] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  535.984346][T20276] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  536.001546][T20098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  536.322121][T20286] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5561'.
[  536.339238][T20286] bond1: (slave gre0): Device is not bonding slave
[  536.342340][T20286] bond1: option active_slave: invalid value (gre0)
[  536.346513][T20286] bond1 (unregistering): Released all slaves
[  536.480538][T20291] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5563'.
[  536.752173][ T5823] Bluetooth: hci1: command tx timeout
[  537.430277][T20304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5569'.
[  537.583270][T20314] loop8: detected capacity change from 0 to 512
[  537.586023][T20314] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem
[  537.592334][T20314] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5574: bg 0: block 104: invalid block bitmap
[  537.596269][T20314] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  537.599501][T20314] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5574: invalid indirect mapped block 1 (level 1)
[  537.607056][T20314] EXT4-fs (loop8): 1 truncate cleaned up
[  537.610379][T20314] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  537.618402][   T33] audit: type=1800 audit(1762393423.565:191): pid=20314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5574" name="file2" dev="loop8" ino=18 res=0 errno=0
[  537.629873][ T5823] Bluetooth: hci2: command tx timeout
[  537.646121][T20098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.723930][T20319] loop8: detected capacity change from 0 to 512
[  537.734627][T20319] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.5576: invalid block
[  537.741884][T20319] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5576: invalid indirect mapped block 4294967295 (level 1)
[  537.753299][T20319] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.5576: invalid indirect mapped block 4294967295 (level 1)
[  537.758448][T20319] EXT4-fs (loop8): 2 truncates cleaned up
[  537.763905][T20319] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  537.785307][T20098] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  537.857499][T20324] BUG: sleeping function called from invalid context at fs/inode.c:1928
[  537.861697][T20324] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 20324, name: syz.8.5578
[  537.865428][T20324] preempt_count: 1, expected: 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  537.869603][T20324] RCU nest depth: 0, expected: 0
[  537.871543][T20324] 2 locks held by syz.8.5578/20324:
[  537.874025][T20324]  #0: ffff8881187660e0 (&type->s_umount_key#84){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  537.878432][T20324]  #1: ffff888118766998 (&s->s_inode_list_lock){+.+.}-{3:3}, at: hook_sb_delete+0xae/0xbd0
[  537.882697][T20324] Preemption disabled at:
[  537.882709][T20324] [<0000000000000000>] 0x0
[  537.886187][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.8.5578 Not tainted syzkaller #0 PREEMPT(full) 
[  537.886208][T20324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  537.886220][T20324] Call Trace:
[  537.886227][T20324]  <TASK>
[  537.886236][T20324]  dump_stack_lvl+0x189/0x250
[  537.886263][T20324]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.886285][T20324]  ? __pfx__printk+0x10/0x10
[  537.886303][T20324]  ? print_lock_name+0xde/0x100
[  537.886323][T20324]  __might_resched+0x495/0x610
[  537.886346][T20324]  ? __pfx___might_resched+0x10/0x10
[  537.886361][T20324]  ? __lock_acquire+0xab9/0xd20
[  537.886388][T20324]  iput+0x2b/0xc50
[  537.886405][T20324]  ? hook_sb_delete+0x1a8/0xbd0
[  537.886430][T20324]  hook_sb_delete+0x6b5/0xbd0
[  537.886450][T20324]  ? hook_sb_delete+0x1a8/0xbd0
[  537.886473][T20324]  ? __pfx_hook_sb_delete+0x10/0x10
[  537.886492][T20324]  ? __pfx_fsnotify_sb_delete+0x10/0x10
[  537.886505][T20324]  ? evict_inodes+0x684/0x6d0
[  537.886521][T20324]  ? __pfx_evict_inodes+0x10/0x10
[  537.886541][T20324]  security_sb_delete+0x80/0x150
[  537.886563][T20324]  generic_shutdown_super+0xaa/0x2c0
[  537.886584][T20324]  kill_litter_super+0x76/0xb0
[  537.886605][T20324]  deactivate_locked_super+0xbc/0x130
[  537.886625][T20324]  cleanup_mnt+0x425/0x4c0
[  537.886641][T20324]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.886663][T20324]  task_work_run+0x1d4/0x260
[  537.886687][T20324]  ? __pfx_task_work_run+0x10/0x10
[  537.886707][T20324]  ? __x64_sys_umount+0x122/0x160
[  537.886731][T20324]  ? exit_to_user_mode_loop+0x40/0x130
[  537.886749][T20324]  exit_to_user_mode_loop+0xe9/0x130
[  537.886764][T20324]  do_syscall_64+0x2bd/0xfa0
[  537.886809][T20324]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.886828][T20324]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.886843][T20324]  ? exc_page_fault+0xab/0x100
[  537.886865][T20324]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.886879][T20324] RIP: 0033:0x7f8df678efc9
[  537.886903][T20324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  537.886917][T20324] RSP: 002b:00007f8df76e9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  537.886933][T20324] RAX: 0000000000000000 RBX: 00007f8df69e5fa0 RCX: 00007f8df678efc9
[  537.886944][T20324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0
[  537.886955][T20324] RBP: 00007f8df6811f91 R08: 0000000000000000 R09: 0000000000000000
[  537.886965][T20324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  537.886974][T20324] R13: 00007f8df69e6038 R14: 00007f8df69e5fa0 R15: 00007ffc9acf3c68
[  537.887001][T20324]  </TASK>
[  538.518606][T17722] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.642215][T17722] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.705987][T17722] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.774858][T17722] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  538.907559][T17722] bridge_slave_1: left allmulticast mode
[  538.909838][T17722] bridge_slave_1: left promiscuous mode
[  538.912106][T17722] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.920787][T17722] bridge_slave_0: left allmulticast mode
[  538.922882][T17722] bridge_slave_0: left promiscuous mode
[  538.925049][T17722] bridge0: port 1(bridge_slave_0) entered disabled state
[  539.453023][T17722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.457583][T17722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.462452][T17722] bond0 (unregistering): Released all slaves
[  539.738475][T17722] hsr_slave_0: left promiscuous mode
[  539.740534][T17722] hsr_slave_1: left promiscuous mode
[  539.742883][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  539.745027][T17722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  539.747522][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  539.749704][T17722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  539.778575][T17722] veth1_macvtap: left promiscuous mode
[  539.780621][T17722] veth0_macvtap: left promiscuous mode
[  539.782462][T17722] veth1_vlan: left promiscuous mode
[  539.784061][T17722] veth0_vlan: left promiscuous mode
[  540.402802][T17722] team0 (unregistering): Port device team_slave_1 removed
[  540.464950][T17722] team0 (unregistering): Port device team_slave_0 removed
[  541.513002][T17722] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.593345][T17722] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.654910][T17722] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.710693][T17722] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  541.826417][T17722] bridge_slave_1: left allmulticast mode
[  541.828502][T17722] bridge_slave_1: left promiscuous mode
[  541.832742][T17722] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.837855][T17722] bridge_slave_0: left allmulticast mode
[  541.839980][T17722] bridge_slave_0: left promiscuous mode
[  541.842260][T17722] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.398885][T17722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  542.405938][T17722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  542.410237][T17722] bond0 (unregistering): Released all slaves
[  542.725665][T17722] hsr_slave_0: left promiscuous mode
[  542.728144][T17722] hsr_slave_1: left promiscuous mode
[  542.730079][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.732367][T17722] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.735577][T17722] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.738321][T17722] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.758590][T17722] veth1_macvtap: left promiscuous mode
[  542.760730][T17722] veth0_macvtap: left promiscuous mode
[  542.762906][T17722] veth1_vlan: left promiscuous mode
[  542.765993][T17722] veth0_vlan: left promiscuous mode
[  543.445559][T17722] team0 (unregistering): Port device team_slave_1 removed
[  543.510754][T17722] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
01:44:06  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff997d9a00 RBX=ffffffff8df3d620 RCX=0000000000000000 RDX=0000000000000001
RSI=0000000000000000 RDI=ffff88810e0a9d00 RBP=ffffffff81738d25 RSP=ffffc9000411ec68
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc9000411eeb8 R11=ffffffff81ac2f50
R12=0000000000000002 R13=ffffffff8df3d620 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d566c RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f521df17d60 CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f521d3b76c3 00007f521d3b76c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=0100080004878010 000f800401c70800
XMM06=080141ba0032656c 69662f2e01ffffff XMM07=ffffffffffef080f 8003000800048780
XMM08=10000e800401c708 00080141ba003065 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff81738d42 RCX=22f7f9b748988d00 RDX=0000000000000000
RSI=ffffffff81738d42 RDI=ffffffff8df3d620 RBP=ffffffff81738d25 RSP=ffffc90000a085b8
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90000a08798 R11=ffffffff81ac2f50
R12=0000000000000002 R13=ffffffff8df3d620 R14=ffffffff8df3d620 R15=0000000000000000
RIP=ffffffff8225aac0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f8df76e96c0 ffffffff 00c00000
GS =0000 ffff8882a9f3d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f8df76e8fc8 CR3=00000001b0f32000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f8df69b7498 00007f8df69b7470 XMM03=00007f8df69b74a8 00007f8df69b74a0
XMM04=00007f8df751d100 00007f8df69b7460 XMM05=00007f8df69b7478 00007f8df69b74c0
XMM06=00007f8df69b74b8 00007f8df69b74b0 XMM07=00007f8df69b74a8 00007f8df69b74a0
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f8df681315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
