last executing test programs:

23.176592326s ago: executing program 1 (id=162):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000004, 0x31, 0xffffffffffffffff, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffffffffffffff, "9868c8f2d993a1d7787878e42e07271508d4ca7b3eb69a80b70b111f3ba4cad6", 0x200, 0x3, 0x0, 0x1b}, 0x3c)
ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000200)={@empty, @private1={0xfc, 0x1, '\x00', 0x1}})

23.110962884s ago: executing program 1 (id=163):
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='rcu_utilization\x00', r3}, 0x18)
syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
inotify_init1(0x0)
write$binfmt_elf64(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4600040000000000000000000003003e00ebffffff94020000000000004000"/46], 0x78)
close(r4)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2004c041}, 0x0)

22.252584266s ago: executing program 1 (id=170):
syz_clone3(&(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x58)

22.201444324s ago: executing program 1 (id=172):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)

22.142482006s ago: executing program 1 (id=173):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x30, r2})

21.978772528s ago: executing program 1 (id=174):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc6}, 0x50)

21.9501306s ago: executing program 32 (id=174):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x42, 0x40, 0xc6}, 0x50)

2.480550385s ago: executing program 3 (id=409):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x7}, 0x18)
socket(0x28, 0x803, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2)
mount(0x0, &(0x7f0000000640)='./file0/bus\x00', &(0x7f0000000080)='ramfs\x00', 0x11248b8, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, <r5=>r2, {0x2, 0x1}}, './file0\x00'})
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r8)
sendmsg$L2TP_CMD_SESSION_GET(r5, 0x0, 0x8000)
creat(&(0x7f0000000240)='./file0/bus\x00', 0x82)
acct(&(0x7f0000000100)='./file0/bus\x00')
chroot(&(0x7f0000000040)='./file1\x00')
mlock(&(0x7f0000002000/0x2000)=nil, 0x2000)
read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020)

1.580592523s ago: executing program 3 (id=413):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0xd, 0x42, 0x44}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38)

1.580301102s ago: executing program 3 (id=414):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f00000002c0), &(0x7f0000000240)=r2}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.489983621s ago: executing program 3 (id=415):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0)

1.29818162s ago: executing program 0 (id=417):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="38000300010003", 0x7)

1.297994867s ago: executing program 0 (id=418):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1})
preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, 0x5fae, 0x5)

1.296658585s ago: executing program 0 (id=419):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x5, 0xb, 0x6, 0xfffffff0, 0x9})

1.200554741s ago: executing program 0 (id=420):
syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000002440)=ANY=[], 0x1, 0x5e97, &(0x7f0000005e00)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)
creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x36)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)
link(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000ec0)='./file5\x00')

1.019804943s ago: executing program 0 (id=421):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "e6fb1c4cc7848c35c1e2d7fff427b706"}, @md5sig={0x13, 0x12, "45d7cb3485609d0400b75c20d03d4ae9"}]}}}}}}}, 0x0)

940.383409ms ago: executing program 2 (id=422):
sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="043e0b06c90009000a00"], 0xe)

940.087408ms ago: executing program 0 (id=423):
openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r0)

327.201611ms ago: executing program 3 (id=424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x4000001, r0, 0x4}, 0x38)

326.952858ms ago: executing program 3 (id=425):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f2303d20422c02124070e702030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)={0x40, 0xe, 0x1, 'l'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

99.694293ms ago: executing program 2 (id=426):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa98}, [@ldst={0x3, 0x0, 0x3, 0x1, 0xa, 0x61}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

99.373679ms ago: executing program 2 (id=427):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x44080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)

50.102369ms ago: executing program 2 (id=428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1d4}}, 0x0)

291.92µs ago: executing program 2 (id=429):
r0 = syz_open_dev$evdev(&(0x7f00000003c0), 0x1ff, 0x60000)
ioctl$EVIOCGABS2F(r0, 0x8018456f, 0x0)

0s ago: executing program 2 (id=430):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c34779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d810b4de0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b28d35033a6f652886ee8d43d7ebf2d546b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x185242, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:59026' (ED25519) to the list of known hosts.
syzkaller login: [   48.086939][ T5836] cgroup: Unknown subsys name 'net'
[   48.179262][ T5836] cgroup: Unknown subsys name 'cpuset'
[   48.183499][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   49.957648][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   53.949264][ T5237] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   53.953563][ T5237] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   53.956173][ T5237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   53.959137][ T5237] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   53.962057][ T5237] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   53.990243][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   53.993186][ T5237] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   53.995941][ T5237] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.006975][ T5237] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.009827][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.013491][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.016493][ T5858] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.019667][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.022737][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.029647][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.192471][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   54.213699][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   54.245687][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   54.304567][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.307723][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.310614][ T5848] bridge_slave_0: entered allmulticast mode
[   54.313730][ T5848] bridge_slave_0: entered promiscuous mode
[   54.333471][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.335903][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.338993][ T5848] bridge_slave_1: entered allmulticast mode
[   54.341601][ T5848] bridge_slave_1: entered promiscuous mode
[   54.348403][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.351281][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.354103][ T5856] bridge_slave_0: entered allmulticast mode
[   54.357595][ T5856] bridge_slave_0: entered promiscuous mode
[   54.385102][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.388211][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.390907][ T5856] bridge_slave_1: entered allmulticast mode
[   54.393166][ T5856] bridge_slave_1: entered promiscuous mode
[   54.404044][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.408513][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.411345][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.414247][ T5853] bridge_slave_0: entered allmulticast mode
[   54.418051][ T5853] bridge_slave_0: entered promiscuous mode
[   54.430494][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.434103][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.437143][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.439942][ T5853] bridge_slave_1: entered allmulticast mode
[   54.443046][ T5853] bridge_slave_1: entered promiscuous mode
[   54.447820][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.467447][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.479393][ T5848] team0: Port device team_slave_0 added
[   54.483170][ T5848] team0: Port device team_slave_1 added
[   54.520889][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.523575][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.534040][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.540101][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.544153][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.547778][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.558181][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.563480][ T5856] team0: Port device team_slave_0 added
[   54.567542][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.582861][ T5856] team0: Port device team_slave_1 added
[   54.602095][ T5853] team0: Port device team_slave_0 added
[   54.622898][ T5853] team0: Port device team_slave_1 added
[   54.625621][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.628253][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.637499][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.654205][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.656688][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.665127][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.680555][ T5848] hsr_slave_0: entered promiscuous mode
[   54.682778][ T5848] hsr_slave_1: entered promiscuous mode
[   54.697560][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.699779][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.708247][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.715564][ T5856] hsr_slave_0: entered promiscuous mode
[   54.719493][ T5856] hsr_slave_1: entered promiscuous mode
[   54.722204][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   54.724510][ T5856] Cannot create hsr debugfs directory
[   54.728362][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.730515][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.739574][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.840598][ T5853] hsr_slave_0: entered promiscuous mode
[   54.843422][ T5853] hsr_slave_1: entered promiscuous mode
[   54.846014][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   54.848682][ T5853] Cannot create hsr debugfs directory
[   54.953451][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.967144][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.975676][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.983361][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   55.004681][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.011958][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.016229][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.025430][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.045726][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.048472][ T5848] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.051374][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.054150][ T5848] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.071045][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.078562][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.091145][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.100433][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.107348][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.110131][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.113141][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.115734][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.162691][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.165588][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.168765][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.171681][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.178490][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.181694][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.185176][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.188964][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.192611][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.195715][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.218498][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.235760][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.248176][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   55.262276][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.265244][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.271346][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   55.281081][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.283913][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.294118][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.297128][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.307481][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.310373][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.346051][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.383782][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   55.397615][   T69] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.400554][   T69] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.422757][   T69] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.425538][   T69] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.517848][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.560081][ T5856] veth0_vlan: entered promiscuous mode
[   55.566087][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.573898][ T5856] veth1_vlan: entered promiscuous mode
[   55.616183][ T5856] veth0_macvtap: entered promiscuous mode
[   55.628167][ T5856] veth1_macvtap: entered promiscuous mode
[   55.632207][ T5848] veth0_vlan: entered promiscuous mode
[   55.641259][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.649732][ T5848] veth1_vlan: entered promiscuous mode
[   55.662180][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.673690][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.681232][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.685147][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.694325][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.710174][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.714571][ T5848] veth0_macvtap: entered promiscuous mode
[   55.730992][ T5848] veth1_macvtap: entered promiscuous mode
[   55.737872][ T5853] veth0_vlan: entered promiscuous mode
[   55.755287][ T5853] veth1_vlan: entered promiscuous mode
[   55.770053][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.787925][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.794569][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.801300][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.825703][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.830266][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.835927][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.840224][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.844916][ T5853] veth0_macvtap: entered promiscuous mode
[   55.851268][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.856048][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.861207][ T5853] veth1_macvtap: entered promiscuous mode
[   55.888420][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.894860][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.904893][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.927613][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.934683][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.938688][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.942009][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.947654][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.950613][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.983527][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.994825][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.031536][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.033971][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.040421][   T55] Bluetooth: hci1: command tx timeout
[   56.042322][   T55] Bluetooth: hci2: command tx timeout
[   56.044339][   T55] Bluetooth: hci0: command tx timeout
[   56.077241][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.080261][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.306563][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   56.456569][ T5914] usb 2-1: Using ep0 maxpacket: 32
[   56.460433][ T5914] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[   56.465263][ T5914] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[   56.468203][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[   56.471530][ T5914] usb 2-1: Product: syz
[   56.473084][ T5914] usb 2-1: Manufacturer: syz
[   56.474650][ T5914] usb 2-1: SerialNumber: syz
[   56.478412][ T5914] usb 2-1: config 0 descriptor??
[   56.480930][ T5923] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   56.691472][ T5893] usb 2-1: USB disconnect, device number 2
[   56.951466][ T5937] netlink: 'syz.2.10': attribute type 1 has an invalid length.
[   57.760663][ T5960] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure
[   57.839243][ T5964] loop1: detected capacity change from 0 to 4096
[   57.847084][ T5965] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   57.853353][ T5964] NILFS (loop1): DAT doesn't have a block to manage vblocknr = 648518346341351424
[   57.858917][ T5964] NILFS error (device loop1): nilfs_bmap_truncate: broken bmap (inode number=12)
[   57.862293][ T5964] Remounting filesystem read-only
[   57.863983][ T5964] NILFS (loop1): error -5 truncating bmap (ino=12)
[   57.874009][ T5848] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   57.926354][ T5969] Driver unsupported XDP return value 0 on prog  (id 3) dev N/A, expect packet loss!
[   58.101457][ T5971] loop2: detected capacity change from 0 to 32768
[   58.105105][ T5971] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.23 (5971)
[   58.114191][ T5971] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   58.120597][ T5971] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   58.127146][   T55] Bluetooth: hci2: command tx timeout
[   58.127164][ T5859] Bluetooth: hci1: command tx timeout
[   58.128987][ T5850] Bluetooth: hci0: command tx timeout
[   58.170772][ T5971] BTRFS info (device loop2): enabling ssd optimizations
[   58.172941][ T5971] BTRFS info (device loop2): enabling free space tree
[   58.220381][ T5864] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   58.288153][ T5971] syz.2.23 (5971) used greatest stack depth: 18440 bytes left
[   58.291495][ T5856] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   58.730416][ T6008] netlink: 76 bytes leftover after parsing attributes in process `syz.2.31'.
[   59.545901][ T6021] sock: sock_set_timeout: `syz.1.36' (pid 6021) tries to set negative timeout
[   59.745014][ T6023] loop1: detected capacity change from 0 to 40427
[   59.770937][ T6023] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   59.774911][ T6023] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   59.867927][ T4581] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   59.995196][ T6029] syz.1.37: attempt to access beyond end of device
[   59.995196][ T6029] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   60.027219][ T4581] usb 3-1: Using ep0 maxpacket: 32
[   60.044772][ T4581] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   60.051550][ T4581] usb 3-1: config 0 has no interface number 0
[   60.074647][ T4581] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   60.078764][ T4581] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.082072][ T4581] usb 3-1: Product: syz
[   60.083998][ T4581] usb 3-1: Manufacturer: syz
[   60.085961][ T4581] usb 3-1: SerialNumber: syz
[   60.089893][ T4581] usb 3-1: config 0 descriptor??
[   60.093772][ T4581] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   60.196580][   T55] Bluetooth: hci1: command tx timeout
[   60.198509][ T5850] Bluetooth: hci0: command tx timeout
[   60.200333][   T55] Bluetooth: hci2: command tx timeout
[   60.298915][ T4581] usb 3-1: qt2_attach - failed to power on unit: -71
[   60.305923][ T4581] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71
[   60.314731][ T4581] usb 3-1: USB disconnect, device number 2
[   60.326092][ T5859] Bluetooth: hci2: unexpected event 0x2f length: 763 > 260
[   60.495316][ T5848] syz-executor: attempt to access beyond end of device
[   60.495316][ T5848] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   60.508397][ T5848] CPU: 1 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   60.508417][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.508426][ T5848] Call Trace:
[   60.508441][ T5848]  <TASK>
[   60.508453][ T5848]  dump_stack_lvl+0x189/0x250
[   60.508476][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.508491][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   60.508504][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   60.508519][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   60.508568][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   60.508590][ T5848]  f2fs_write_end_io+0x886/0xb60
[   60.508609][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   60.508628][ T5848]  __submit_merged_write_cond+0x255/0x530
[   60.508646][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   60.508672][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   60.508691][ T5848]  ? __switch_to+0xdae/0x1670
[   60.508722][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.508736][ T5848]  ? trace_sched_exit_tp+0x36/0x110
[   60.508754][ T5848]  ? __schedule+0x17ae/0x4cc0
[   60.508769][ T5848]  ? folios_put_refs+0x560/0x640
[   60.508789][ T5848]  ? __pfx_folios_put_refs+0x10/0x10
[   60.508806][ T5848]  ? __pfx___schedule+0x10/0x10
[   60.508826][ T5848]  ? filemap_get_folios_tag+0xed/0x630
[   60.508839][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.508854][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   60.508874][ T5848]  do_writepages+0x32e/0x550
[   60.508892][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.508907][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   60.508924][ T5848]  filemap_fdatawrite+0x199/0x240
[   60.508944][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   60.508975][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.508990][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   60.509007][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   60.509026][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[   60.509049][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   60.509079][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[   60.509095][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[   60.509110][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   60.509122][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[   60.509143][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   60.509159][ T5848]  deactivate_locked_super+0xbc/0x130
[   60.509177][ T5848]  cleanup_mnt+0x425/0x4c0
[   60.509194][ T5848]  task_work_run+0x1d4/0x260
[   60.509214][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   60.509230][ T5848]  ? __x64_sys_umount+0x122/0x160
[   60.509247][ T5848]  ? __pfx___x64_sys_umount+0x10/0x10
[   60.509265][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.509288][ T5848]  exit_to_user_mode_loop+0xec/0x110
[   60.509307][ T5848]  do_syscall_64+0x2bd/0x3b0
[   60.509326][ T5848]  ? rcu_is_watching+0x15/0xb0
[   60.509340][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.509354][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.509368][ T5848] RIP: 0033:0x7f29ae38ff17
[   60.509381][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   60.509393][ T5848] RSP: 002b:00007ffcab3d6b38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   60.509409][ T5848] RAX: 0000000000000000 RBX: 00007f29ae411c05 RCX: 00007f29ae38ff17
[   60.509417][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcab3d6bf0
[   60.509426][ T5848] RBP: 00007ffcab3d6bf0 R08: 0000000000000000 R09: 0000000000000000
[   60.509435][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcab3d7c80
[   60.509443][ T5848] R13: 00007f29ae411c05 R14: 000000000000ea33 R15: 00007ffcab3d7cc0
[   60.509458][ T5848]  </TASK>
[   60.509464][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   60.939674][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.42'.
[   61.237043][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   61.386566][ T5854] usb 3-1: Using ep0 maxpacket: 16
[   61.390050][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10
[   61.394347][ T5854] usb 3-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00
[   61.399492][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.406354][ T5854] usb 3-1: config 0 descriptor??
[   61.824892][ T5854] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[   61.830638][ T5854] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[   61.833558][ T5854] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[   61.836354][ T5854] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[   61.839928][ T5854] uclogic 0003:5543:0781.0001: unknown main item tag 0x0
[   61.844154][ T5854] uclogic 0003:5543:0781.0001: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.2-1/input0
[   62.026175][  T795] usb 3-1: USB disconnect, device number 3
[   62.068035][ T4581] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   62.216549][ T4581] usb 2-1: Using ep0 maxpacket: 32
[   62.220498][ T4581] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.226946][ T4581] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   62.233188][ T4581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.236633][ T4581] usb 2-1: Product: syz
[   62.238417][ T4581] usb 2-1: Manufacturer: syz
[   62.240333][ T4581] usb 2-1: SerialNumber: syz
[   62.243914][ T4581] usb 2-1: config 0 descriptor??
[   62.250769][ T4581] usb 2-1: bad CDC descriptors
[   62.253130][ T4581] usb 2-1: unsupported MDLM descriptors
[   62.287094][ T5859] Bluetooth: hci2: command tx timeout
[   62.288765][   T55] Bluetooth: hci0: command tx timeout
[   62.316625][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   62.449034][ T4581] usb 2-1: USB disconnect, device number 3
[   62.479021][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.482361][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.486045][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   62.491476][ T5854] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   62.494713][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.498326][ T5854] usb 1-1: config 0 descriptor??
[   62.597761][ T6066] loop2: detected capacity change from 0 to 8
[   62.613163][ T6066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.53'.
[   62.629673][ T6066] openvswitch: netlink: nsh attr 2656 is out of range max 3
[   62.635579][ T6066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   62.954273][ T5854] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[   62.968822][ T5854] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   63.051426][ T6071] loop1: detected capacity change from 0 to 128
[   63.067172][ T6071] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   63.072189][ T6071] ext4 filesystem being mounted at /23/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   63.122372][ T6071] syz.1.55 (pid 6071) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   63.184974][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   63.192396][ T6062] loop0: detected capacity change from 0 to 1024
[   63.272988][  T795] usb 1-1: USB disconnect, device number 2
[   63.282249][ T6075] loop1: detected capacity change from 0 to 1024
[   63.309584][ T6075] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 5)!
[   63.348501][ T6075] EXT4-fs (loop1): group descriptors corrupted!
[   63.403346][ T6075] loop1: detected capacity change from 0 to 1044
[   63.409790][ T6075] EXT4-fs (loop1): failed to parse options in superblock: 
[   63.422236][ T6075] EXT4-fs (loop1): Unsupported encryption level 3
[   63.593050][ T6077] loop1: detected capacity change from 0 to 1024
[   63.634895][ T6077] netlink: 'syz.1.57': attribute type 29 has an invalid length.
[   63.643382][ T6077] netlink: 'syz.1.57': attribute type 29 has an invalid length.
[   63.651310][ T6077] netlink: 500 bytes leftover after parsing attributes in process `syz.1.57'.
[   63.937509][ T6097] loop1: detected capacity change from 0 to 256
[   63.959389][ T6097] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[   63.973023][ T6097] exFAT-fs (loop1): start_clu is invalid cluster(0x0)
[   64.146550][  T795] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[   64.348021][  T795] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   64.350791][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   64.354487][  T795] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   64.359976][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   64.363380][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   64.368121][  T795] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   64.370796][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   64.374185][  T795] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   64.378754][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   64.382398][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   64.387506][  T795] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[   64.389991][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[   64.393631][  T795] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   64.398881][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   64.403084][  T795] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[   64.409232][  T795] usb 3-1: string descriptor 0 read error: -22
[   64.411719][  T795] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[   64.415184][  T795] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.423504][  T795] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[   64.436554][   T47] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   64.586610][   T47] usb 2-1: Using ep0 maxpacket: 32
[   64.590205][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.593549][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.597119][   T47] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   64.600158][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.603796][   T47] usb 2-1: config 0 descriptor??
[   64.607457][   T47] hub 2-1:0.0: USB hub found
[   64.808957][   T47] hub 2-1:0.0: 1 port detected
[   65.103742][ T6108] loop0: detected capacity change from 0 to 32768
[   65.114557][ T6108] =======================================================
[   65.114557][ T6108] WARNING: The mand mount option has been deprecated and
[   65.114557][ T6108]          and is ignored by this kernel. Remove the mand
[   65.114557][ T6108]          option from the mount to silence this warning.
[   65.114557][ T6108] =======================================================
[   65.184262][ T6108] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.205308][ T6108] XFS (loop0): Ending clean mount
[   65.208867][ T6108] XFS (loop0): Quotacheck needed: Please wait.
[   65.224549][ T6108] XFS (loop0): Quotacheck: Done.
[   65.243240][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.418589][  T795] hub 2-1:0.0: activate --> -90
[   65.656561][ T5893] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   65.806581][ T5893] usb 1-1: Using ep0 maxpacket: 16
[   65.810929][ T5893] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.815931][ T5893] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[   65.819498][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.823638][ T6121] usb 2-1: USB disconnect, device number 4
[   65.823928][  T795] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[   65.827978][ T5893] usb 1-1: config 0 descriptor??
[   65.838131][  T795] usb 2-1-port1: connect-debounce failed
[   66.245291][ T5893] dragonrise 0003:0079:0006.0003: item fetching failed at offset 4/5
[   66.248465][ T5893] dragonrise 0003:0079:0006.0003: parse failed
[   66.250365][ T5893] dragonrise 0003:0079:0006.0003: probe with driver dragonrise failed with error -22
[   66.373327][ T6123] loop1: detected capacity change from 0 to 16
[   66.378574][ T6123] erofs (device loop1): mounted with root inode @ nid 36.
[   66.459261][ T6124] syz.1.74: attempt to access beyond end of device
[   66.459261][ T6124] loop1: rw=524288, sector=128, nr_sectors = 8 limit=16
[   66.473646][   T47] usb 1-1: USB disconnect, device number 3
[   66.481778][ T6124] syz.1.74: attempt to access beyond end of device
[   66.481778][ T6124] loop1: rw=524288, sector=0, nr_sectors = 1024 limit=16
[   66.525528][ T6124] erofs (device loop1): read error -95 @ 1 of nid 89
[   66.547636][   T33] audit: type=1800 audit(1756196532.139:2): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.74" name="file2" dev="loop1" ino=89 res=0 errno=0
[   66.861709][   T10] usb 3-1: USB disconnect, device number 4
[   67.161508][ T6132] trusted_key: encrypted_key: key trusted:syz not found
[   67.289014][ T6134] netlink: 'syz.0.78': attribute type 2 has an invalid length.
[   67.426397][ T6127] loop2: detected capacity change from 0 to 32768
[   67.895856][ T6148] loop0: detected capacity change from 0 to 164
[   67.964469][ T6154] mmap: syz.0.87 (6154) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   68.002516][ T6156] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[   68.081697][ T6152] loop2: detected capacity change from 0 to 32768
[   68.085580][ T6152] btrfs: Deprecated parameter 'usebackuproot'
[   68.087910][ T6152] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   68.091148][ T6152] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.86 (6152)
[   68.099584][ T6152] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   68.105247][ T6152] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm
[   68.115701][ T6152] BTRFS warning (device loop2 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   68.123389][ T6152] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 2048
[   68.129038][ T6152] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[   68.138760][ T6152] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[   68.163116][ T6152] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[   68.170092][ T6152] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[   68.185059][ T6152] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[   68.195865][ T6152] workqueue: max_active 2097158 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[   68.222930][   T69] BTRFS warning (device loop2 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0xb929531db417ae5491593d99afe1510df15bdaa63fb6603d26a93ec9245f098d found 0xf965c027f6d77b9b4c342b08291e847dd441e9aad90b1a136fd7cdfc868701cd level 0, ignored
[   68.240510][   T36] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x70d0bf4416057dec1c405852a49d2c6d902d8b71010d18d8d723d3736d6a6d44 level 0, ignored
[   68.252133][   T36] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0x40de0d5385bab233876729785d53dcfc8423daa8a61a4fd383291ab23ffba869 level 0, ignored
[   68.273215][ T6152] BTRFS info (device loop2 state CS): enabling ssd optimizations
[   68.278308][ T6152] BTRFS info (device loop2 state CS): turning off barriers
[   68.281487][ T6152] BTRFS info (device loop2 state CS): disabling log replay at mount time
[   68.323352][ T6152] BTRFS info (device loop2 state CS): enabling disk space caching
[   68.334382][ T6152] BTRFS info (device loop2 state CS): force clearing of disk cache
[   68.338679][ T6152] BTRFS info (device loop2 state CS): trying to use backup root at mount time
[   68.341890][ T6152] BTRFS info (device loop2 state CS): ignoring bad roots
[   68.344580][ T6152] BTRFS info (device loop2 state CS): ignoring data csums
[   68.347950][ T6152] BTRFS info (device loop2 state CS): ignoring meta csums
[   68.350160][ T6152] BTRFS info (device loop2 state CS): ignoring unknown super block flags
[   68.381804][ T6195] loop0: detected capacity change from 0 to 64
[   68.420240][ T5856] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   68.435745][ T6194] loop1: detected capacity change from 0 to 4096
[   68.453505][ T6198] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.465766][ T6194] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[   68.469664][ T6194] Remounting filesystem read-only
[   68.493342][ T5848] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   68.576205][ T6206] loop2: detected capacity change from 0 to 128
[   68.724733][ T6200] loop1: detected capacity change from 0 to 32768
[   68.735762][ T6200] XFS: noikeep mount option is deprecated.
[   68.771270][ T6200] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.797210][ T6200] XFS (loop1): Ending clean mount
[   68.800519][ T6200] XFS (loop1): Quotacheck needed: Please wait.
[   68.807979][ T6200] XFS (loop1): Quotacheck: Done.
[   68.839440][ T6209] loop2: detected capacity change from 0 to 32768
[   68.885927][ T6209] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   68.885949][ T6209]   allowing incompatible features above 0.0: (unknown version)
[   68.885958][ T6209]   features: 
[   68.899906][ T6209] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   68.903233][ T6209] bcachefs (loop2): initializing new filesystem
[   68.909247][ T5848] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   68.912521][ T6209] bcachefs (loop2): going read-write
[   68.916966][ T6209] bcachefs (loop2): marking superblocks
[   68.926056][ T6209] bcachefs (loop2): initializing freespace
[   68.933154][ T6209] bcachefs (loop2): done initializing freespace
[   68.937279][ T6209] bcachefs (loop2): reading snapshots table
[   68.939349][ T6209] bcachefs (loop2): reading snapshots done
[   68.946395][ T6209] bcachefs (loop2): done starting filesystem
[   68.979564][ T6209] syz.2.105 (6209) used greatest stack depth: 16112 bytes left
[   68.983757][ T5856] bcachefs (loop2): shutting down
[   68.985693][ T5856] bcachefs (loop2): going read-only
[   68.988125][ T5856] bcachefs (loop2): finished waiting for writes to stop
[   68.990834][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   69.000333][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[   69.003399][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 5
[   69.005845][ T5856] bcachefs (loop2): marking filesystem clean
[   69.017110][ T5856] bcachefs (loop2): shutdown complete
[   69.487673][ T6237] loop0: detected capacity change from 0 to 1024
[   69.670857][ T6233] syz.1.106 (6233): drop_caches: 2
[   69.674455][ T6233] syz.1.106 (6233): drop_caches: 2
[   69.816592][   T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   69.990217][   T10] usb 1-1: config 129 has an invalid interface number: 180 but max is 0
[   69.997901][   T10] usb 1-1: config 129 has no interface number 0
[   70.001278][   T10] usb 1-1: config 129 interface 180 has no altsetting 0
[   70.004522][   T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=6251, bcdDevice=9a.87
[   70.012763][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.244144][   T10] usb 1-1: string descriptor 0 read error: -71
[   70.260796][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6251
[   70.267363][   T10] gspca_sn9c20x: Write register 1000 failed -71
[   70.269539][   T10] gspca_sn9c20x: Device initialization failed
[   70.271925][   T10] gspca_sn9c20x 1-1:129.180: probe with driver gspca_sn9c20x failed with error -71
[   70.281809][   T10] usb 1-1: USB disconnect, device number 4
[   71.267399][ T6266] loop0: detected capacity change from 0 to 32768
[   71.277981][ T6266] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.120 (6266)
[   71.304226][ T6266] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   71.308369][ T6266] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   71.318573][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   71.320553][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   71.393244][ T6266] BTRFS info (device loop0): rebuilding free space tree
[   71.405067][ T6266] BTRFS info (device loop0): setting nodatasum
[   71.416534][ T6266] BTRFS info (device loop0): enabling ssd optimizations
[   71.420772][ T6266] BTRFS info (device loop0): turning off barriers
[   71.426915][ T6266] BTRFS info (device loop0): turning on flush-on-commit
[   71.429390][ T6266] BTRFS info (device loop0): turning on sync discard
[   71.431911][ T6266] BTRFS info (device loop0): enabling free space tree
[   71.435938][ T6266] BTRFS info (device loop0): force clearing of disk cache
[   71.438646][ T6266] BTRFS info (device loop0): doing ref verification
[   71.497710][ T5853] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   71.638286][ T6316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   71.748606][ T6318] syz.2.136(6318): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[   71.911325][ T6324] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[   71.983351][ T6330] loop2: detected capacity change from 0 to 512
[   71.992522][ T6330] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.000976][ T6330] FAT-fs (loop2): FAT read failed (blocknr 1568)
[   72.099564][ T6336] loop2: detected capacity change from 0 to 4096
[   72.111143][ T6336] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   72.121568][ T6336] ntfs3(loop2): ino=1a, mi_enum_attr
[   72.123677][ T6336] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   72.133904][   T33] audit: type=1800 audit(1756196537.729:3): pid=6336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file2" dev="loop2" ino=31 res=0 errno=0
[   72.436366][ T6352] loop2: detected capacity change from 0 to 32768
[   72.448322][ T6352] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x2ec/0x400, xfs_sb block 0x0 
[   72.454497][ T6352] XFS (loop2): Unmount and run xfs_repair
[   72.462199][ T6352] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   72.465226][ T6352] 00000000: 58 46 53 42 00 00 04 00 00 00 00 00 00 00 20 00  XFSB.......... .
[   72.469012][ T6352] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   72.472490][ T6352] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   72.476110][ T6352] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40  ....... ......$@
[   72.479810][ T6352] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[   72.483150][ T6352] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[   72.487532][ T6352] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[   72.491007][ T6352] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[   72.494452][ T6352] XFS (loop2): SB validate failed with error -74.
[   72.733692][ T6361] loop2: detected capacity change from 0 to 40427
[   72.737313][ T6361] F2FS-fs (loop2): invalid crc value
[   72.755296][ T6361] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   72.759072][ T6361] F2FS-fs (loop2): Start checkpoint disabled!
[   72.762345][ T6361] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   72.830718][ T6364] F2FS-fs (loop2): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   72.839567][ T6364] syz.2.155: attempt to access beyond end of device
[   72.839567][ T6364] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   72.918252][ T6366] loop0: detected capacity change from 0 to 4096
[   73.246685][   T47] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   73.552376][   T47] usb 1-1: Using ep0 maxpacket: 32
[   73.560198][   T47] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[   73.564264][   T47] usb 1-1: config 0 interface 0 has no altsetting 0
[   73.567234][   T47] usb 1-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[   73.570983][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.575240][ T1092] kworker/u9:5: attempt to access beyond end of device
[   73.575240][ T1092] loop2: rw=2049, sector=45104, nr_sectors = 16 limit=40427
[   73.575308][   T47] usb 1-1: config 0 descriptor??
[   73.589044][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   73.589063][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.589071][ T1092] Workqueue: writeback wb_workfn (flush-7:2)
[   73.589094][ T1092] Call Trace:
[   73.589100][ T1092]  <TASK>
[   73.589105][ T1092]  dump_stack_lvl+0x189/0x250
[   73.589125][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.589141][ T1092]  ? __pfx_queue_work_on+0x10/0x10
[   73.589154][ T1092]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.589172][ T1092]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.589201][ T1092]  f2fs_handle_critical_error+0x37c/0x540
[   73.589223][ T1092]  f2fs_write_end_io+0x886/0xb60
[   73.589242][ T1092]  __submit_merged_bio+0x27a/0x6a0
[   73.589261][ T1092]  __submit_merged_write_cond+0x255/0x530
[   73.589281][ T1092]  f2fs_write_data_pages+0x261d/0x3000
[   73.589310][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.589352][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589365][ T1092]  ? lock_release+0x4b/0x3e0
[   73.589389][ T1092]  ? f2fs_write_meta_pages+0x357/0x450
[   73.589434][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.589453][ T1092]  do_writepages+0x32e/0x550
[   73.589476][ T1092]  __writeback_single_inode+0x145/0xff0
[   73.589494][ T1092]  ? do_raw_spin_unlock+0x4d/0x240
[   73.589511][ T1092]  writeback_sb_inodes+0x6c7/0x1010
[   73.589535][ T1092]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   73.589564][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589579][ T1092]  wb_writeback+0x43b/0xaf0
[   73.589598][ T1092]  ? queue_io+0x2f1/0x590
[   73.589614][ T1092]  ? __pfx_wb_writeback+0x10/0x10
[   73.589633][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589647][ T1092]  wb_workfn+0x409/0xef0
[   73.589664][ T1092]  ? __pfx_wb_workfn+0x10/0x10
[   73.589677][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589691][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589704][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.589717][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589730][ T1092]  ? lock_acquire+0x5f/0x360
[   73.589749][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589761][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.589773][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.589786][ T1092]  process_scheduled_works+0xae1/0x17b0
[   73.589807][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.589826][ T1092]  worker_thread+0x8a0/0xda0
[   73.589846][ T1092]  kthread+0x711/0x8a0
[   73.589862][ T1092]  ? __pfx_worker_thread+0x10/0x10
[   73.589875][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.589890][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.589901][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.589915][ T1092]  ret_from_fork+0x3fc/0x770
[   73.589930][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[   73.589945][ T1092]  ? __switch_to_asm+0x39/0x70
[   73.589961][ T1092]  ? __switch_to_asm+0x33/0x70
[   73.589977][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.589992][ T1092]  ret_from_fork_asm+0x1a/0x30
[   73.590014][ T1092]  </TASK>
[   73.590020][ T1092] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   73.713976][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[   73.714012][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   73.714021][ T1092] Workqueue: writeback wb_workfn (flush-7:2)
[   73.714044][ T1092] Call Trace:
[   73.714049][ T1092]  <TASK>
[   73.714056][ T1092]  dump_stack_lvl+0x189/0x250
[   73.714076][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[   73.714092][ T1092]  ? __pfx_queue_work_on+0x10/0x10
[   73.714105][ T1092]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   73.714124][ T1092]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   73.714145][ T1092]  f2fs_handle_critical_error+0x37c/0x540
[   73.714167][ T1092]  f2fs_write_end_io+0x886/0xb60
[   73.714193][ T1092]  __submit_merged_bio+0x27a/0x6a0
[   73.714215][ T1092]  __submit_merged_write_cond+0x255/0x530
[   73.714235][ T1092]  f2fs_write_data_pages+0x261d/0x3000
[   73.714268][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.714315][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714329][ T1092]  ? lock_release+0x4b/0x3e0
[   73.714355][ T1092]  ? f2fs_write_meta_pages+0x357/0x450
[   73.714375][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   73.714420][ T1092]  do_writepages+0x32e/0x550
[   73.714447][ T1092]  __writeback_single_inode+0x145/0xff0
[   73.714464][ T1092]  ? do_raw_spin_unlock+0x4d/0x240
[   73.714481][ T1092]  writeback_sb_inodes+0x6c7/0x1010
[   73.714509][ T1092]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   73.714541][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714558][ T1092]  wb_writeback+0x43b/0xaf0
[   73.714577][ T1092]  ? queue_io+0x2f1/0x590
[   73.714593][ T1092]  ? __pfx_wb_writeback+0x10/0x10
[   73.714612][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714632][ T1092]  wb_workfn+0x409/0xef0
[   73.714651][ T1092]  ? __pfx_wb_workfn+0x10/0x10
[   73.714664][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714677][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714693][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.714704][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714721][ T1092]  ? lock_acquire+0x5f/0x360
[   73.714741][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714754][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.714765][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[   73.714778][ T1092]  process_scheduled_works+0xae1/0x17b0
[   73.714802][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[   73.714823][ T1092]  worker_thread+0x8a0/0xda0
[   73.714846][ T1092]  kthread+0x711/0x8a0
[   73.714864][ T1092]  ? __pfx_worker_thread+0x10/0x10
[   73.714877][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.714892][ T1092]  ? rcu_is_watching+0x15/0xb0
[   73.714906][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.714921][ T1092]  ret_from_fork+0x3fc/0x770
[   73.714937][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[   73.714952][ T1092]  ? __switch_to_asm+0x39/0x70
[   73.714969][ T1092]  ? __switch_to_asm+0x33/0x70
[   73.714983][ T1092]  ? __pfx_kthread+0x10/0x10
[   73.714998][ T1092]  ret_from_fork_asm+0x1a/0x30
[   73.715019][ T1092]  </TASK>
[   73.715025][ T1092] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   74.006397][   T47] smartjoyplus 0003:6666:8801.0004: unknown main item tag 0x2
[   74.012771][   T47] smartjoyplus 0003:6666:8801.0004: hidraw0: USB HID vf.fe Device [HID 6666:8801] on usb-dummy_hcd.0-1/input0
[   74.017896][   T47] smartjoyplus 0003:6666:8801.0004: no output reports found
[   74.210061][   T47] usb 1-1: USB disconnect, device number 5
[   74.375567][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.422807][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.427010][ T6121] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   74.472965][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.530442][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.546094][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.549246][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.551945][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.555102][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.558866][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.578478][ T6121] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   74.581969][ T6121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.589683][ T6121] usb 3-1: config 0 descriptor??
[   74.598488][ T6121] cp210x 3-1:0.0: cp210x converter detected
[   74.624416][   T12] bridge_slave_1: left allmulticast mode
[   74.626160][   T12] bridge_slave_1: left promiscuous mode
[   74.629075][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.632390][   T12] bridge_slave_0: left allmulticast mode
[   74.634696][   T12] bridge_slave_0: left promiscuous mode
[   74.637617][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.743857][ T6405] loop0: detected capacity change from 0 to 512
[   74.748517][ T6405] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   74.753378][ T6405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[   74.756384][ T6405] EXT4-fs (loop0): orphan cleanup on readonly fs
[   74.756840][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.759194][ T6405] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.176: bad orphan inode 267
[   74.765648][ T6405] EXT4-fs (loop0): Remounting filesystem read-only
[   74.770287][ T6405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[   74.770395][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.778947][   T12] bond0 (unregistering): Released all slaves
[   74.801560][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   74.942637][ T6402] chnl_net:caif_netlink_parms(): no params data found
[   74.973698][   T12] hsr_slave_0: left promiscuous mode
[   74.976961][   T12] hsr_slave_1: left promiscuous mode
[   74.981328][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.984193][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.987848][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.990160][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.994833][   T12] veth1_macvtap: left promiscuous mode
[   74.996903][   T12] veth0_macvtap: left promiscuous mode
[   74.998696][   T12] veth1_vlan: left promiscuous mode
[   75.000346][   T12] veth0_vlan: left promiscuous mode
[   75.000774][ T6121] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121
[   75.081786][   T12] team0 (unregistering): Port device team_slave_1 removed
[   75.087519][   T12] team0 (unregistering): Port device team_slave_0 removed
[   75.103638][ T6415] loop0: detected capacity change from 0 to 32768
[   75.130730][ T6415] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   75.159928][ T6415] XFS (loop0): Ending clean mount
[   75.164357][ T6415] XFS (loop0): Quotacheck needed: Please wait.
[   75.178048][ T6415] XFS (loop0): Quotacheck: Done.
[   75.203729][ T6121] usb 3-1: cp210x converter now attached to ttyUSB0
[   75.225242][ T5853] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   75.268529][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.271405][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.274247][ T6402] bridge_slave_0: entered allmulticast mode
[   75.288765][ T6402] bridge_slave_0: entered promiscuous mode
[   75.292544][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.295285][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.307470][ T6402] bridge_slave_1: entered allmulticast mode
[   75.310435][ T6402] bridge_slave_1: entered promiscuous mode
[   75.339111][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.344338][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.367625][ T6402] team0: Port device team_slave_0 added
[   75.370608][ T6402] team0: Port device team_slave_1 added
[   75.407357][ T6121] usb 3-1: USB disconnect, device number 5
[   75.414820][ T6121] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   75.419622][ T6121] cp210x 3-1:0.0: device disconnected
[   75.438468][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0
[   75.440739][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.454537][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   75.460759][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1
[   75.462802][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   75.510478][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   75.527198][ T6440] netlink: 'syz.0.179': attribute type 21 has an invalid length.
[   75.530168][ T6440] IPv6: NLM_F_CREATE should be specified when creating new route
[   75.684633][ T6402] hsr_slave_0: entered promiscuous mode
[   75.686830][ T6402] hsr_slave_1: entered promiscuous mode
[   75.751467][ T6402] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   75.756606][ T6402] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   75.760527][ T6402] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   75.764342][ T6402] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   75.779576][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.782190][ T6402] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.808142][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0
[   75.813746][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.828845][ T6402] 8021q: adding VLAN 0 to HW filter on device team0
[   75.835991][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.838919][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   75.848138][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.850659][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   75.942121][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.969151][ T6402] veth0_vlan: entered promiscuous mode
[   75.973464][ T6402] veth1_vlan: entered promiscuous mode
[   76.015804][ T6402] veth0_macvtap: entered promiscuous mode
[   76.021586][ T6465] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   76.028099][ T6402] veth1_macvtap: entered promiscuous mode
[   76.046674][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.056079][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.064815][ T5900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.073426][ T5900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.082371][ T5900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.085464][ T5900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.112035][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.119368][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.131775][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.134492][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.171500][ T6470] blkio.reset_stats is deprecated
[   76.279879][ T6121] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   76.402003][ T6494] loop0: detected capacity change from 0 to 128
[   76.428279][ T6121] usb 3-1: config 0 has an invalid interface number: 182 but max is 1
[   76.431712][ T6121] usb 3-1: config 0 has no interface number 1
[   76.434203][ T6121] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[   76.451101][ T6121] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.458716][ T6121] usb 3-1: config 0 descriptor??
[   76.596959][ T5859] Bluetooth: hci0: command tx timeout
[   76.677276][ T6499] loop0: detected capacity change from 0 to 32768
[   76.840947][ T6499] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[   76.840966][ T6499]   allowing incompatible features above 0.0: (unknown version)
[   76.841039][ T6499]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   76.887048][ T6499] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   76.890148][ T6499] bcachefs (loop0): initializing new filesystem
[   76.908881][ T6499] bcachefs (loop0): going read-write
[   76.920362][ T6499] bcachefs (loop0): marking superblocks
[   76.950328][ T6499] bcachefs (loop0): initializing freespace
[   76.960984][ T6499] bcachefs (loop0): done initializing freespace
[   76.976132][ T6499] bcachefs (loop0): reading snapshots table
[   76.978490][ T6499] bcachefs (loop0): reading snapshots done
[   77.014540][ T6499] bcachefs (loop0): done starting filesystem
[   77.144695][   T33] audit: type=1800 audit(1756196542.739:4): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="file1" dev="loop0" ino=4098 res=0 errno=0
[   77.187144][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   77.210289][ T5853] bcachefs (loop0): shutting down
[   77.216070][ T5853] bcachefs (loop0): going read-only
[   77.219186][ T5853] bcachefs (loop0): finished waiting for writes to stop
[   77.225087][ T5853] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3
[   77.273692][ T5853] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4
[   77.278334][ T5853] bcachefs (loop0): clean shutdown complete, journal seq 5
[   77.281519][ T5853] bcachefs (loop0): marking filesystem clean
[   77.310850][ T5853] bcachefs (loop0): shutdown complete
[   77.361729][   T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   77.365879][   T10] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.370423][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[   77.372889][   T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   77.378758][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.387130][   T10] usb 4-1: config 0 descriptor??
[   77.801674][  T795] usb 3-1: USB disconnect, device number 6
[   77.809733][ T6464] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[   78.000542][   T10] usb 4-1: string descriptor 0 read error: -22
[   78.407429][   T10] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71
[   78.413952][   T10] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71
[   78.425918][   T10] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71
[   78.431192][   T10] uclogic 0003:256C:006D.0005: failed probing parameters: -71
[   78.438524][   T10] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71
[   78.448201][   T10] usb 4-1: USB disconnect, device number 2
[   78.663166][ T6547] PKCS7: Unknown OID: [4] 0.38.35.41.951690.11253
[   78.665189][ T6547] PKCS7: Only support pkcs7_signedData type
[   78.686679][ T5859] Bluetooth: hci0: command tx timeout
[   79.006727][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.017254][ T6551] Zero length message leads to an empty skb
[   79.177756][   T10] usb 1-1: Using ep0 maxpacket: 32
[   79.192741][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   79.205607][   T10] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[   79.224795][   T10] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[   79.229427][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.232375][   T10] usb 1-1: Product: syz
[   79.234049][   T10] usb 1-1: Manufacturer: syz
[   79.235731][   T10] usb 1-1: SerialNumber: syz
[   79.448819][   T10] usb 1-1: Invalid number of CPorts: 0
[   79.450715][   T10] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -22
[   79.653665][   T47] usb 1-1: USB disconnect, device number 6
[   80.171742][ T6563] loop3: detected capacity change from 0 to 32768
[   80.175655][ T6563] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.215 (6563)
[   80.188345][ T6563] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   80.193282][ T6563] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   80.202212][   T33] audit: type=1326 audit(1756196545.799:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab67f8ebe9 code=0x7ffc0000
[   80.212444][   T33] audit: type=1326 audit(1756196545.799:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab67f8ebe9 code=0x7ffc0000
[   80.227096][   T33] audit: type=1326 audit(1756196545.809:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.216" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fab67f8ebe9 code=0x7ffc0000
[   80.247738][   T33] audit: type=1326 audit(1756196545.809:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.0.216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab67f8ebe9 code=0x0
[   80.286873][ T6563] BTRFS info (device loop3): enabling ssd optimizations
[   80.291717][ T6563] BTRFS info (device loop3): enabling free space tree
[   80.294181][ T6563] BTRFS info (device loop3): use zstd compression, level 3
[   80.312578][   T33] audit: type=1800 audit(1756196545.909:9): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="file0" dev="loop3" ino=258 res=0 errno=0
[   80.335401][ T6402] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   80.439615][ T6577] loop2: detected capacity change from 0 to 32768
[   80.453148][ T6577] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[   80.453148][ T6577] 
[   80.457044][ T6577] ERROR: (device loop2): remounting filesystem as read-only
[   80.498129][ T6593] netlink: 'syz.3.222': attribute type 4 has an invalid length.
[   80.507607][ T6593] netlink: 'syz.3.222': attribute type 4 has an invalid length.
[   80.690154][ T6602] loop3: detected capacity change from 0 to 4096
[   80.693275][ T6602] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   80.817133][ T5859] Bluetooth: hci0: command tx timeout
[   81.072353][ T6617] loop0: detected capacity change from 0 to 64
[   81.109210][ T6619] policy can only be matched on NF_INET_PRE_ROUTING
[   81.109222][ T6619] unable to load match
[   81.237370][ T5893] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.387620][ T5893] usb 4-1: Using ep0 maxpacket: 8
[   81.391844][ T5893] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[   81.400124][ T5893] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   81.404084][ T5893] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   81.496772][ T5893] usb 4-1: Product: syz
[   81.502468][ T5893] usb 4-1: Manufacturer: syz
[   81.507884][ T5893] usb 4-1: SerialNumber: syz
[   81.532920][ T6633] loop2: detected capacity change from 0 to 512
[   81.555247][ T6633] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.238: Invalid inode bitmap blk 4 in block_group 0
[   81.567426][  T794] cfg80211: failed to load regulatory.db
[   81.585756][ T6633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.616940][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.654623][ T6629] ptrace attach of ""[6630] was attempted by "/syz-executor exec"[6629]
[   81.739305][ T5893] usb 4-1: Invalid connection information received from device
[   81.822260][ T6645] kAFS: unable to lookup cell ''
[   81.943074][  T794] usb 4-1: USB disconnect, device number 3
[   82.056622][ T5893] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   82.136607][ T5854] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.206633][ T5893] usb 3-1: Using ep0 maxpacket: 32
[   82.209945][ T5893] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[   82.213011][ T5893] usb 3-1: config 0 has no interface number 0
[   82.215370][ T5893] usb 3-1: config 0 interface 196 has no altsetting 0
[   82.219722][ T5893] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[   82.223009][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.226375][ T5893] usb 3-1: Product: syz
[   82.228155][ T5893] usb 3-1: Manufacturer: syz
[   82.230205][ T5893] usb 3-1: SerialNumber: syz
[   82.234003][ T5893] usb 3-1: config 0 descriptor??
[   82.286621][ T5854] usb 1-1: Using ep0 maxpacket: 32
[   82.290614][ T5854] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   82.293189][ T5854] usb 1-1: config 0 has no interface number 0
[   82.297316][ T5854] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   82.300148][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.302644][ T5854] usb 1-1: Product: syz
[   82.303993][ T5854] usb 1-1: Manufacturer: syz
[   82.305473][ T5854] usb 1-1: SerialNumber: syz
[   82.308968][ T5854] usb 1-1: config 0 descriptor??
[   82.312468][ T5854] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   82.447222][ T5893] ipheth 3-1:0.196: Unable to find endpoints
[   82.457046][ T5893] usb 3-1: USB disconnect, device number 7
[   82.521578][ T5854] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   82.529509][ T5854] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   82.579271][ T6664] loop3: detected capacity change from 0 to 1024
[   82.582702][ T6664] hfsplus: bad catalog folder entry
[   82.658851][ T6669] loop3: detected capacity change from 0 to 4096
[   82.664931][ T6669] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   82.836790][ T5859] Bluetooth: hci0: command tx timeout
[   82.879298][ T6669] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   82.920988][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   82.921505][  T795] usb 1-1: USB disconnect, device number 7
[   82.934424][  T795] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   82.950416][  T795] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   82.959046][  T795] quatech2 1-1:0.51: device disconnected
[   82.988973][ T6676] loop2: detected capacity change from 0 to 1024
[   82.992061][ T6676] EXT4-fs: inline encryption not supported
[   82.994507][ T6676] EXT4-fs: Ignoring removed i_version option
[   83.018328][ T6676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.041894][ T6676] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[   83.071939][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.346619][ T5893] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   83.506729][ T5893] usb 4-1: Using ep0 maxpacket: 16
[   83.522708][ T5893] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[   83.533101][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.551131][ T5893] usb 4-1: config 0 descriptor??
[   83.571330][ T5893] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   83.917032][ T5893] usb 4-1: Detected FT232B
[   84.161096][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   84.168431][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   84.175984][ T5893] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   84.184771][ T5893] usb 4-1: USB disconnect, device number 4
[   84.195406][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   84.217540][ T5893] ftdi_sio 4-1:0.0: device disconnected
[   84.362303][ T6705] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.112364][ T6731] loop0: detected capacity change from 0 to 8192
[   85.521720][ T6746] loop0: detected capacity change from 0 to 16384
[   85.532747][ T6746] bcachefs: bch2_fs_parse_param() Error parsing option move_ios_in_flight: option_value
[   85.616170][ T6759] netlink: 'syz.3.295': attribute type 11 has an invalid length.
[   85.748398][ T6765] loop0: detected capacity change from 0 to 256
[   85.785017][ T6765] FAT-fs (loop0): Directory bread(block 64) failed
[   85.788019][ T6765] FAT-fs (loop0): Directory bread(block 65) failed
[   85.790791][ T6765] FAT-fs (loop0): Directory bread(block 66) failed
[   85.793458][ T6765] FAT-fs (loop0): Directory bread(block 67) failed
[   85.797483][ T6765] FAT-fs (loop0): Directory bread(block 68) failed
[   85.799667][ T6765] FAT-fs (loop0): Directory bread(block 69) failed
[   85.801824][ T6765] FAT-fs (loop0): Directory bread(block 70) failed
[   85.803999][ T6765] FAT-fs (loop0): Directory bread(block 71) failed
[   85.806224][ T6765] FAT-fs (loop0): Directory bread(block 72) failed
[   85.810228][ T6765] FAT-fs (loop0): Directory bread(block 73) failed
[   85.973321][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   85.986278][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.992029][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.300'.
[   85.993203][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   86.000085][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   86.004449][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   86.253010][ T6780] block device autoloading is deprecated and will be removed.
[   86.287298][ T6775] md2: using deprecated bitmap file support
[   86.289363][ T6775] md2: error: bitmap file must be a regular file
[   86.427688][ T6786] loop2: detected capacity change from 0 to 1764
[   86.432376][ T6786] ISOFS: Bad logical zone size 23846
[   86.476522][ T4581] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.626538][ T4581] usb 1-1: Using ep0 maxpacket: 32
[   86.636039][ T4581] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   86.646794][ T4581] usb 1-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   86.665277][ T4581] usb 1-1: config 1 interface 0 has no altsetting 0
[   86.670224][ T4581] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   86.673785][ T4581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.685201][ T4581] usb 1-1: Product: syz
[   86.687901][ T4581] usb 1-1: Manufacturer: 톲폻稀뢇
[   86.690647][ T4581] usb 1-1: SerialNumber: syz
[   86.718362][ T5854] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   86.855229][ T6809] loop3: detected capacity change from 0 to 32768
[   86.858809][ T6809] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.312 (6809)
[   86.865745][ T6809] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   86.870530][ T6809] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   86.876187][ T5854] usb 3-1: config 0 has an invalid interface number: 23 but max is 0
[   86.879509][ T5854] usb 3-1: config 0 has no interface number 0
[   86.881961][ T5854] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   86.886252][ T5854] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[   86.897052][ T5854] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[   86.900790][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.904004][ T5854] usb 3-1: Product: syz
[   86.905714][ T5854] usb 3-1: Manufacturer: syz
[   86.908466][ T5854] usb 3-1: SerialNumber: syz
[   86.919819][ T5854] usb 3-1: config 0 descriptor??
[   86.921143][ T4581] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[   86.922685][ T6790] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   86.931060][ T6809] BTRFS info (device loop3): enabling ssd optimizations
[   86.933712][ T6809] BTRFS info (device loop3): enabling free space tree
[   86.936613][ T6790] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   86.940845][ T5854] ums-usbat 3-1:0.23: USB Mass Storage device detected
[   86.941010][ T4581] usb 1-1: USB disconnect, device number 8
[   86.946307][ T6809] BTRFS info (device loop3): use zstd compression, level 3
[   86.978458][   T33] audit: type=1800 audit(1756196552.579:10): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.312" name="file1" dev="loop3" ino=260 res=0 errno=0
[   86.996800][   T33] audit: type=1804 audit(1756196552.589:11): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.312" name="/newroot/58/file0/file1" dev="loop3" ino=260 res=1 errno=0
[   87.056363][ T6402] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   87.178631][ T5854] ums-usbat 3-1:0.23: probe with driver ums-usbat failed with error -5
[   87.187071][ T5854] usb 3-1: USB disconnect, device number 8
[   87.262077][ T6844] loop3: detected capacity change from 0 to 4096
[   87.281328][ T6844] ntfs3(loop3): ino=18, mi_enum_attr
[   87.283262][ T6844] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   87.285730][ T6844] ntfs3(loop3): ino=1a, mi_enum_attr
[   87.391094][ T6853] loop3: detected capacity change from 0 to 512
[   87.393547][ T6853] EXT4-fs: Ignoring removed bh option
[   87.395450][ T6853] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[   87.399436][ T6853] EXT4-fs (loop3): invalid journal inode
[   87.401952][ T6853] EXT4-fs (loop3): can't get journal size
[   87.405999][ T6853] EXT4-fs (loop3): 1 truncate cleaned up
[   87.408853][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.429348][ T6402] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.475085][ T6862] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0)
[   87.538741][ T6871] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   87.675236][ T6878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.332'.
[   88.552935][ T6925] loop0: detected capacity change from 0 to 32768
[   88.556381][ T6925] btrfs: Deprecated parameter 'usebackuproot'
[   88.560649][ T6925] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   88.565649][ T6925] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.347 (6925)
[   88.574561][ T6925] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.578995][ T6925] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   88.582568][ T6925] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   88.616841][ T6925] BTRFS info (device loop0): setting nodatasum
[   88.620327][ T6925] BTRFS info (device loop0): setting nodatacow
[   88.622971][ T6925] BTRFS info (device loop0): turning on sync discard
[   88.625741][ T6925] BTRFS info (device loop0): enabling disk space caching
[   88.629351][ T4581] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   88.632894][ T6925] BTRFS info (device loop0): force clearing of disk cache
[   88.636009][ T6925] BTRFS info (device loop0): trying to use backup root at mount time
[   88.651255][ T6925] btrfs: Deprecated parameter 'usebackuproot'
[   88.653904][ T6925] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   88.658787][ T6925] BTRFS warning (device loop0 state M): remount supports changing free space tree only from RO to RW
[   88.663223][ T6925] BTRFS info (device loop0 state M): enabling free space tree
[   88.666378][ T6925] BTRFS info (device loop0 state M): force clearing of disk cache
[   88.725032][ T6925] BTRFS info (device loop0 state M): trying to use backup root at mount time
[   88.728688][ T6925] BTRFS info (device loop0 state M): disabling disk space caching
[   88.761234][ T5853] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.798894][ T4581] usb 4-1: Using ep0 maxpacket: 16
[   88.819573][ T4581] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.824531][ T4581] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[   88.832967][ T6946] loop2: detected capacity change from 0 to 1024
[   88.841027][ T4581] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.845009][ T4581] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   88.849640][ T6946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.855118][ T4581] usb 4-1: SerialNumber: syz
[   88.860362][ T4581] cdc_acm 4-1:1.0: skipping garbage
[   88.909631][ T6948] loop0: detected capacity change from 0 to 2048
[   88.923389][ T6948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.936688][ T6948] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   89.050697][ T6956] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[   89.074491][   T10] usb 4-1: USB disconnect, device number 5
[   89.617170][  T795] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   89.778276][ T6978] loop3: detected capacity change from 0 to 40427
[   89.780981][ T6978] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   89.784116][ T6978] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   89.787990][ T6978] F2FS-fs (loop3): invalid crc value
[   89.791698][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.797286][  T795] usb 3-1: Using ep0 maxpacket: 8
[   89.811172][  T795] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.815062][  T795] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   89.827604][ T6978] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   89.831876][ T6978] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   89.834597][  T795] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   89.838297][ T6978] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   89.851352][  T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.859948][  T795] usb 3-1: config 0 descriptor??
[   89.895100][ T6986] loop0: detected capacity change from 0 to 4096
[   89.904951][ T6986] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[   89.917947][ T6986] ntfs3(loop0): Failed to load $Extend (-22).
[   89.920574][ T6986] ntfs3(loop0): Failed to initialize $Extend.
[   89.932646][ T6986] ntfs3(loop0): ino=21, "bus" direct i/o + compressed not supported
[   90.148816][ T6991] loop3: detected capacity change from 0 to 32768
[   90.152124][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.366 (6991)
[   90.252757][ T6991] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.256004][ T6991] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[   90.304688][ T6991] BTRFS info (device loop3): setting nodatasum
[   90.306910][ T6991] BTRFS info (device loop3): enabling ssd optimizations
[   90.309199][ T6991] BTRFS info (device loop3): enabling free space tree
[   90.311478][ T6991] BTRFS info (device loop3): enabling auto defrag
[   90.313675][ T6991] BTRFS info (device loop3): max_inline set to 0
[   90.323283][   T33] audit: type=1800 audit(1756196555.919:12): pid=6991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.366" name="bus" dev="loop3" ino=263 res=0 errno=0
[   90.347497][ T6402] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   90.395557][ T7015] netlink: 5 bytes leftover after parsing attributes in process `syz.3.369'.
[   90.581036][ T4581] usb 3-1: USB disconnect, device number 9
[   90.627382][ T7023] loop3: detected capacity change from 0 to 32768
[   90.655382][ T7023] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   90.671244][ T7023] XFS (loop3): Ending clean mount
[   90.674022][ T7023] XFS (loop3): Quotacheck needed: Please wait.
[   90.688160][ T7023] XFS (loop3): Quotacheck: Done.
[   90.716667][ T6402] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   90.923135][ T7048] loop3: detected capacity change from 0 to 256
[   90.926259][ T7048] exfat: Deprecated parameter 'utf8'
[   90.933622][ T7048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[   91.905995][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'.
[   91.944001][ T7055] loop2: detected capacity change from 0 to 32768
[   91.954877][ T7062] netlink: 'syz.3.386': attribute type 1 has an invalid length.
[   91.961250][ T7062] netlink: 224 bytes leftover after parsing attributes in process `syz.3.386'.
[   91.974566][ T7055] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   91.985912][ T7055] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.010057][ T7055] XFS (loop2): Ending clean mount
[   92.012522][ T7055] XFS (loop2): Quotacheck needed: Please wait.
[   92.021026][ T7055] XFS (loop2): Quotacheck: Done.
[   92.067432][ T5856] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.171373][ T7075] loop3: detected capacity change from 0 to 32768
[   92.180613][ T7075] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.388 (7075)
[   92.245965][ T7075] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   92.256644][ T7075] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   92.276952][ T7075] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   92.355978][ T7075] BTRFS info (device loop3): rebuilding free space tree
[   92.362555][ T7075] BTRFS info (device loop3): disabling free space tree
[   92.365344][ T7075] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   92.376487][ T7075] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   92.383609][ T7075] BTRFS info (device loop3): setting nodatasum
[   92.386926][ T7075] BTRFS info (device loop3): allowing degraded mounts
[   92.390446][ T7075] BTRFS info (device loop3): enabling disk space caching
[   92.393450][ T7075] BTRFS info (device loop3): force clearing of disk cache
[   92.397116][ T7075] BTRFS info (device loop3): force zlib compression, level 3
[   92.425412][   T33] audit: type=1326 audit(1756196558.019:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd8ebe9 code=0x7ffc0000
[   92.443080][   T33] audit: type=1326 audit(1756196558.039:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd8ebe9 code=0x7ffc0000
[   92.451493][ T5850] Bluetooth: hci0: command 0x0405 tx timeout
[   92.455666][   T33] audit: type=1326 audit(1756196558.039:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f143bd8ebe9 code=0x7ffc0000
[   92.471630][   T33] audit: type=1326 audit(1756196558.039:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd8ebe9 code=0x7ffc0000
[   92.476756][ T6402] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   92.479642][   T33] audit: type=1326 audit(1756196558.039:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7094 comm="syz.2.390" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f143bd8ebe9 code=0x7ffc0000
[   92.687532][ T7101] io-wq is not configured for unbound workers
[   92.814655][ T7114] netlink: 36 bytes leftover after parsing attributes in process `syz.2.399'.
[   92.873134][ T7119] loop2: detected capacity change from 0 to 256
[   92.876248][ T7119] exfat: Deprecated parameter 'utf8'
[   92.885884][ T7119] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d)
[   92.943350][ T7122] loop2: detected capacity change from 0 to 2048
[   92.969159][ T6537]  loop2: p1 < >
[   92.970577][ T6537] loop2: partition table partially beyond EOD, truncated
[   92.973490][ T6537] loop2: p1 start 524289 is beyond EOD, truncated
[   92.976810][ T7122]  loop2: p1 < >
[   92.978469][ T7122] loop2: partition table partially beyond EOD, truncated
[   92.981290][ T7122] loop2: p1 start 524289 is beyond EOD, truncated
[   93.149671][ T5859] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[   93.392373][ T7133] loop2: detected capacity change from 0 to 32768
[   93.397089][ T7133] bcachefs (/dev/loop2): error validating superblock: Invalid superblock layout: max_size_bits too high
[   93.401831][ T7133] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_sb_max_size_bits
[   93.645054][ T7137] lo speed is unknown, defaulting to 1000
[   93.647885][ T7137] lo speed is unknown, defaulting to 1000
[   93.651909][ T7137] lo speed is unknown, defaulting to 1000
[   93.658743][ T7137] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   93.677431][ T7137] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   93.770942][ T7137] lo speed is unknown, defaulting to 1000
[   93.775655][ T7137] lo speed is unknown, defaulting to 1000
[   93.779697][ T7137] lo speed is unknown, defaulting to 1000
[   94.363110][ T7146] loop2: detected capacity change from 0 to 1024
[   94.366239][ T7146] EXT4-fs: inline encryption not supported
[   94.394139][ T7146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.421192][ T5856] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /143/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[   94.432472][ T5856] EXT4-fs (loop2): Remounting filesystem read-only
[   94.440575][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.767142][ T7143] Process accounting resumed
[   94.963422][ T7153] loop0: detected capacity change from 0 to 32768
[   95.103309][ T7169] loop0: detected capacity change from 0 to 128
[   95.112445][ T7169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[   95.115157][ T7169] System zones: 1-3, 19-19, 35-36
[   95.123335][ T7169] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   95.127652][ T5914] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   95.130351][ T7169] ext4 filesystem being mounted at /118/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   95.143898][ T7169] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1803188595 (only 1 groups)
[   95.157072][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   95.286632][ T5914] usb 4-1: Using ep0 maxpacket: 16
[   95.290999][ T7172] loop0: detected capacity change from 0 to 32768
[   95.292276][ T5914] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[   95.298264][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.301431][ T5914] usb 4-1: Product: syz
[   95.303052][ T5914] usb 4-1: Manufacturer: syz
[   95.304821][ T5914] usb 4-1: SerialNumber: syz
[   95.309681][ T5914] usb 4-1: config 0 descriptor??
[   95.313613][ T5914] appledisplay 4-1:0.0: Could not find int-in endpoint
[   95.317921][ T5914] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   95.470296][ T5859] Bluetooth: to_multiplier 40360 > 3200
[   95.518229][  T795] usb 4-1: USB disconnect, device number 6
[   95.666611][ T5854] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   95.828226][ T5854] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   95.832637][ T5854] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   95.836793][ T5854] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   95.840564][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.847320][ T7178] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   95.854573][ T5854] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   96.069264][  T795] usb 1-1: USB disconnect, device number 9
[   96.325142][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'.
[   96.341073][ T4581] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   96.344557][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.428'.
[   96.508770][ T7195] loop2: detected capacity change from 0 to 32768
[   96.516888][ T4581] usb 4-1: Using ep0 maxpacket: 32
[   96.522261][   T33] audit: type=1800 audit(1756196562.119:18): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.430" name="file1" dev="loop2" ino=4 res=0 errno=0
[   96.532624][ T4581] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[   96.533224][  T115] ------------[ cut here ]------------
[   96.535697][ T4581] usb 4-1: config 0 has no interface number 0
[   96.538171][  T115] WARNING: CPU: 0 PID: 115 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[   96.543720][  T115] Modules linked in:
[   96.545009][ T4581] usb 4-1: config 0 interface 12 has no altsetting 0
[   96.545471][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[   96.552842][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.557162][  T115] RIP: 0010:dbAdjTree+0x454/0x4e0
[   96.559184][  T115] Code: 5a ff ff ff e8 6d 2e 81 fe eb 05 e8 66 2e 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 de 3d 08 cc e8 4d 2e 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[   96.566791][  T115] RSP: 0018:ffffc9000241f988 EFLAGS: 00010293
[   96.569053][  T115] RAX: ffffffff833e7ce3 RBX: ffff888022f76010 RCX: ffff8881060d0000
[   96.569559][ T4581] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[   96.571974][  T115] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[   96.575965][ T4581] usb 4-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[   96.578772][  T115] RBP: 0000000000020056 R08: ffffea00008bdd87 R09: 1ffffd4000117bb0
[   96.582016][ T4581] usb 4-1: Product: syz
[   96.584761][  T115] R10: dffffc0000000000 R11: fffff94000117bb1 R12: ffff888022f76018
[   96.587153][ T4581] usb 4-1: Manufacturer: syz
[   96.589672][  T115] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[   96.591166][ T4581] usb 4-1: SerialNumber: syz
[   96.594124][  T115] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[   96.598455][ T4581] usb 4-1: config 0 descriptor??
[   96.599519][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   96.603553][  T115] CR2: 00007ffcd3a6beb8 CR3: 0000000112952000 CR4: 00000000000006f0
[   96.607542][  T115] Call Trace:
[   96.608779][  T115]  <TASK>
[   96.609858][  T115]  ? __pfx_lock_metapage+0x10/0x10
[   96.611414][  T115]  dbJoin+0x238/0x300
[   96.612935][  T115]  ? do_read_cache_folio+0x4c6/0x590
[   96.614437][  T115]  dbFreeBits+0x4e1/0xdb0
[   96.615772][  T115]  dbFree+0x336/0x650
[   96.617548][  T115]  txFreeMap+0x7ff/0xde0
[   96.619259][  T115]  txUpdateMap+0x308/0x9c0
[   96.621115][  T115]  jfs_lazycommit+0x43f/0xa90
[   96.623052][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.625404][  T115]  ? __pfx_default_wake_function+0x10/0x10
[   96.627640][  T115]  ? __kthread_parkme+0x7b/0x200
[   96.629377][  T115]  ? __kthread_parkme+0x1a1/0x200
[   96.631474][  T115]  kthread+0x711/0x8a0
[   96.633146][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.635245][  T115]  ? __pfx_kthread+0x10/0x10
[   96.637214][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.639310][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.641361][  T115]  ? __pfx_kthread+0x10/0x10
[   96.643070][  T115]  ret_from_fork+0x3fc/0x770
[   96.644802][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[   96.646878][  T115]  ? __switch_to_asm+0x39/0x70
[   96.648804][  T115]  ? __switch_to_asm+0x33/0x70
[   96.650696][  T115]  ? __pfx_kthread+0x10/0x10
[   96.652548][  T115]  ret_from_fork_asm+0x1a/0x30
[   96.654446][  T115]  </TASK>
[   96.655698][  T115] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   96.658536][  T115] CPU: 0 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[   96.661917][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.665754][  T115] Call Trace:
[   96.667165][  T115]  <TASK>
[   96.668403][  T115]  dump_stack_lvl+0x99/0x250
[   96.670181][  T115]  ? __asan_memcpy+0x40/0x70
[   96.671737][  T115]  ? __pfx_dump_stack_lvl+0x10/0x10
[   96.673502][  T115]  ? __pfx__printk+0x10/0x10
[   96.675306][  T115]  vpanic+0x281/0x750
[   96.676852][  T115]  ? __pfx__printk+0x10/0x10
[   96.678619][  T115]  ? __pfx_vpanic+0x10/0x10
[   96.680357][  T115]  ? is_bpf_text_address+0x26/0x2b0
[   96.682397][  T115]  panic+0xb9/0xc0
[   96.683909][  T115]  ? __pfx_panic+0x10/0x10
[   96.685633][  T115]  __warn+0x31b/0x4b0
[   96.687191][  T115]  ? dbAdjTree+0x454/0x4e0
[   96.688907][  T115]  ? dbAdjTree+0x454/0x4e0
[   96.690645][  T115]  report_bug+0x2be/0x4f0
[   96.692336][  T115]  ? dbAdjTree+0x454/0x4e0
[   96.694128][  T115]  ? dbAdjTree+0x454/0x4e0
[   96.695983][  T115]  ? dbAdjTree+0x456/0x4e0
[   96.697770][  T115]  handle_bug+0x84/0x160
[   96.699462][  T115]  exc_invalid_op+0x1a/0x50
[   96.701293][  T115]  asm_exc_invalid_op+0x1a/0x20
[   96.703316][  T115] RIP: 0010:dbAdjTree+0x454/0x4e0
[   96.705286][  T115] Code: 5a ff ff ff e8 6d 2e 81 fe eb 05 e8 66 2e 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 43 de 3d 08 cc e8 4d 2e 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[   96.712866][  T115] RSP: 0018:ffffc9000241f988 EFLAGS: 00010293
[   96.715314][  T115] RAX: ffffffff833e7ce3 RBX: ffff888022f76010 RCX: ffff8881060d0000
[   96.718374][  T115] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[   96.721300][  T115] RBP: 0000000000020056 R08: ffffea00008bdd87 R09: 1ffffd4000117bb0
[   96.724282][  T115] R10: dffffc0000000000 R11: fffff94000117bb1 R12: ffff888022f76018
[   96.727217][  T115] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[   96.730229][  T115]  ? dbAdjTree+0x453/0x4e0
[   96.731963][  T115]  ? dbAdjTree+0x453/0x4e0
[   96.733787][  T115]  ? __pfx_lock_metapage+0x10/0x10
[   96.735865][  T115]  dbJoin+0x238/0x300
[   96.737409][  T115]  ? do_read_cache_folio+0x4c6/0x590
[   96.739454][  T115]  dbFreeBits+0x4e1/0xdb0
[   96.741162][  T115]  dbFree+0x336/0x650
[   96.742795][  T115]  txFreeMap+0x7ff/0xde0
[   96.744408][  T115]  txUpdateMap+0x308/0x9c0
[   96.746171][  T115]  jfs_lazycommit+0x43f/0xa90
[   96.747977][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.750064][  T115]  ? __pfx_default_wake_function+0x10/0x10
[   96.752445][  T115]  ? __kthread_parkme+0x7b/0x200
[   96.754364][  T115]  ? __kthread_parkme+0x1a1/0x200
[   96.756336][  T115]  kthread+0x711/0x8a0
[   96.757920][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   96.759933][  T115]  ? __pfx_kthread+0x10/0x10
[   96.761696][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[   96.763762][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[   96.765838][  T115]  ? __pfx_kthread+0x10/0x10
[   96.767661][  T115]  ret_from_fork+0x3fc/0x770
[   96.769478][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[   96.771490][  T115]  ? __switch_to_asm+0x39/0x70
[   96.773398][  T115]  ? __switch_to_asm+0x33/0x70
[   96.775336][  T115]  ? __pfx_kthread+0x10/0x10
[   96.777182][  T115]  ret_from_fork_asm+0x1a/0x30
[   96.779032][  T115]  </TASK>
[   96.780974][  T115] Kernel Offset: disabled
[   96.782713][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:22:42  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81a02385 RBX=ffffffff81a02344 RCX=ffff8881060d0000 RDX=0000000000000000
RSI=ffffffff8be33660 RDI=ffffffff8be33620 RBP=ffffc9000241f650 RSP=ffffc9000241f540
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c15
R12=dffffc0000000000 R13=1ffff92000483eac R14=0000000000000200 R15=000000000000004e
RIP=ffffffff81a02373 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcd3a6beb8 CR3=0000000112952000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=00007f49a8b87498 00007f49a8b87470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f49a8b87478 00007f49a8b874c0
XMM06=00007f49a8b874b8 00007f49a8b874b0 XMM07=00007f49a8b874a8 00007f49a8b874a0
XMM08=0000000000000000 00007f49a8a12ee7 XMM09=0000000000000000 00007f49a8a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000001bcfc RDI=000000000001bcfd RBP=00000000000003f8 RSP=ffffc90007466b10
R8 =ffff88801f7c0237 R9 =1ffff11003ef8046 R10=dffffc0000000000 R11=ffffffff854f1f00
R12=dffffc0000000000 R13=ffffffff99afa8e5 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c277094 CR3=0000000112b4a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=ffffff0000000000 ffff000000000000 XMM03=00000000000000ff ffffffffff000000
XMM04=0000000000000000 0000000000000000 XMM05=312f312a64732f2a 2e6463685f00312d
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000ff0000 XMM09=312f316273752f30 2e6463685f796d6d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
