last executing test programs:

2m17.29770381s ago: executing program 2 (id=511):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0)
pwritev(r0, &(0x7f00000000c0), 0x300, 0xffffff7f, 0x0)

2m17.297420205s ago: executing program 2 (id=512):
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1, '\x00'}}}}}, 0x0)

2m17.205560955s ago: executing program 2 (id=513):
futex(&(0x7f0000000540)=0x2, 0x8c, 0x1, 0x0, 0x0, 0x2)

2m17.205145045s ago: executing program 2 (id=514):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@nouid32}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount(&(0x7f0000000080)=@nullb, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

2m17.082115908s ago: executing program 2 (id=515):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f00000019c0)={0x2, 0x0, {&(0x7f0000001880)=""/13, 0xd, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)

2m16.774528082s ago: executing program 2 (id=518):
r0 = socket(0xa, 0x5, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

2m16.559704718s ago: executing program 32 (id=518):
r0 = socket(0xa, 0x5, 0x0)
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0))
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r2, 0x2def, 0x9566, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c)

1m58.496110629s ago: executing program 1 (id=663):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0x9, 0x97, 0xe, 0x4, 0x63, 0x80, 0xff, 0x2, 0x3, 0xff, 0x0, 0x8}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x3}, 0x8)

1m58.415728271s ago: executing program 1 (id=664):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES64=r0], 0x40}}, 0x0)

1m58.338529334s ago: executing program 1 (id=665):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x108c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000480)=""/179, 0xb3}], 0x1, 0x4f, 0x0)

1m57.426109877s ago: executing program 1 (id=666):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1m57.046070935s ago: executing program 1 (id=667):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xaf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
mkdir(&(0x7f0000000100)='./file0\x00', 0x60)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYRES8=0x0], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r0, 0x9, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000000000000bc100800000000001fa000000000000095000000000000003410e07a7ba42cf22d811521428a4312094f169b10291cfd9ba6484318f1bc00f2580e4040981e638464d543355a5b900a65c86b13c9894c4cfde4ba0d07fc1d42099c8b749b2a6f1d4346570074af36c0295ad0d93e7bd51e7c4b2c8401b06b0dee3de5a4b09fa31aa78458779590dac7016c1e73b522a8e98427293b2ca2c1255c86d1366fb2dc46e6e4cf09388550e42b2e3fc155341deef1a336f7835f6aa2ecd8e04e19034a0d8a377d14"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="556e7d285f78d00c2bdac27c80f6468b109323b5a70fa203bfbc9dbc8adef5ead05290b86d6c36ab2e8a85e7bc89523d20becc2e979533c2f9bcfb8e7d5257dcd62f7a3297e7c06958f5bfcad7f2536d1d585e267adc46c8d2f84692dc40e7a741d77eae1290e6d914a03d0269a81abdef3dceff71763e4b7fc7c61d6654d2b9a81aeba85ebba7c10f165bea658d2df6f584bf3a93c34c7c81b434c2ee764bc61fbc3b28163b74103bcc2a442e72ed379611d378433996197a53f45745f3ea1c", 0xc0}], 0x1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x31, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1m56.215623644s ago: executing program 1 (id=674):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x80, @generic=0x101})

1m56.020704999s ago: executing program 33 (id=674):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x6, 0x0, 0x80, @generic=0x101})

3.038209955s ago: executing program 4 (id=1685):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}])
dup3(r0, r1, 0x6700000000000000)

2.859127228s ago: executing program 0 (id=1686):
r0 = syz_open_dev$media(&(0x7f0000000080), 0x34, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)=<r1=>0xffffffffffffffff)
ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0)

2.85892168s ago: executing program 0 (id=1687):
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=0x0, @ANYBLOB="08005084e8fa05"], 0x24}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0)
syz_usb_connect$cdc_ecm(0x4, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0xe, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0xf7, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8001, 0xffff, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x1, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x7, 0x2, 0x4}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

2.797575353s ago: executing program 4 (id=1688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)

2.723427513s ago: executing program 4 (id=1689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&\x00', @ANYBLOB], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0)

1.836086722s ago: executing program 4 (id=1690):
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x3, 0x0, 0x0, {[@md5sig={0x13, 0x12, "d242d7728c9386c4a0ac7e05bafbae38"}]}}}}}}}, 0x0)

1.835504735s ago: executing program 4 (id=1691):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@dioread_nolock}, {@delalloc}, {@inlinecrypt}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8001}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0xfd, 0x142, &(0x7f00000002c0)="$eJzskE9LMlEUh595/fe+b4oGBhYUQYvEMMcR22skCdlA4KZVoBMFmqIQLq11iz7ALIqglfgZylaWQtjncBe0LK53LII27e+zufc85/CDc7b+ASFwIdmsVesNq9m0yst7ZiGnoUnvA/5OftV6QwyXpb/LwJF43TA+k/oh8AeoWOulWkXU4wxEgewMHB570JGz/4ULC1exko6LrkBvTjrjB5dy3IIbskHpRN77NayKvNmvvFegZXuczeKx20VXhrZT2mvdzuPuoJ+Px5asCyM3f+OPuChaXhA7t+yXRD/+nOh2RsNBYccsmMOUYWyk9KSup0fm0yCfbl/i3vafwr7mHAmZ5xUZRTjXwNagM8kb32sBoHf1ZlaDvrC4+0kItO+daZLslA4inqnh86NQKBQKhUKhUCgUCsVv+QgAAP//tQVW5w==")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, 0xe0)
sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)=',', 0x1}], 0x1)

1.333035365s ago: executing program 0 (id=1694):
r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080)=<r1=>0x0, &(0x7f0000000340))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x95d, 0xfa39, 0x61, 0x0, 0x0)
io_uring_enter(r0, 0xedd, 0x8acb, 0x41, 0x0, 0x0)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)

1.136235952s ago: executing program 3 (id=1696):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000f80))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
fstat(r0, &(0x7f0000000fc0))

1.047638664s ago: executing program 3 (id=1697):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

967.979428ms ago: executing program 0 (id=1698):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x10800, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'tunl0\x00'}}, 0x1e)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)

889.284957ms ago: executing program 3 (id=1699):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a00000e100000095"], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x8f, &(0x7f0000000600)=""/143, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)

794.698571ms ago: executing program 3 (id=1700):
r0 = socket$kcm(0xa, 0x3, 0x3a)
sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{0x0, 0x39}, {&(0x7f0000000640)='%', 0x1}], 0x2, 0x0, 0x0, 0x900}, 0x40000)

603.825316ms ago: executing program 4 (id=1701):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f000000a5c0)="$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")
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x200006}}, {@fatal_errors_bug}, {@rescue={'rescue', 0x3d, 'all'}}, {@fatal_errors_bug}, {@clear_cache}, {@datasum}, {@space_cache}, {@enospc_debug}, {@treelog}, {@nobarrier}]}, 0x9, 0x55b3, &(0x7f0000000580)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='.\x00', 0x2042023, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

374.11423ms ago: executing program 3 (id=1702):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x200200, &(0x7f00000000c0)=ANY=[], 0x1, 0x3c6, &(0x7f0000000c00)="$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")
open(&(0x7f0000000180)='./file0/file0\x00', 0x40, 0x8)

198.653242ms ago: executing program 3 (id=1703):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x27, 0xae, 0x91, 0x40, 0x5ac, 0x259, 0xf0b2, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x0, 0x0, 0x3, 0x72, 0x2}}]}}]}}, 0x0)

2.182832ms ago: executing program 0 (id=1704):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x402, 0x3}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x3}, 0x8)
sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)

0s ago: executing program 0 (id=1705):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

kernel console output (not intermixed with test programs):

408330][ T9118] FAT-fs (loop3): Directory bread(block 68) failed
[  183.411737][ T9118] FAT-fs (loop3): Directory bread(block 69) failed
[  183.415546][ T9118] FAT-fs (loop3): Directory bread(block 70) failed
[  183.420887][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.421514][ T9118] FAT-fs (loop3): Directory bread(block 71) failed
[  183.427979][ T9118] FAT-fs (loop3): Directory bread(block 72) failed
[  183.430699][ T9118] FAT-fs (loop3): Directory bread(block 73) failed
[  183.512571][  T974] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  183.710088][  T974] usb 5-1: Using ep0 maxpacket: 16
[  183.714157][  T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  183.728275][  T974] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  183.732404][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.741945][  T974] usb 5-1: Product: syz
[  183.743765][  T974] usb 5-1: Manufacturer: syz
[  183.752145][  T974] usb 5-1: SerialNumber: syz
[  183.759324][  T974] usb 5-1: config 0 descriptor??
[  183.771339][  T974] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  183.827535][  T791] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  183.985929][  T974] usb 5-1: USB disconnect, device number 7
[  183.996314][  T791] usb 4-1: Using ep0 maxpacket: 32
[  184.011289][  T791] usb 4-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  184.014921][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.037392][  T791] usb 4-1: config 0 descriptor??
[  184.048173][  T791] rndis_host 4-1:0.0: probe with driver rndis_host failed with error -22
[  184.059358][ T9131] loop0: detected capacity change from 0 to 32768
[  184.095533][ T9131] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  184.136220][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  184.259749][  T974] usb 4-1: USB disconnect, device number 12
[  184.396964][ T9139] loop0: detected capacity change from 0 to 64
[  184.422127][ T9139] syz.0.1133: attempt to access beyond end of device
[  184.422127][ T9139] loop0: rw=0, sector=1024, nr_sectors = 2 limit=64
[  184.435755][ T9139] Buffer I/O error on dev loop0, logical block 512, async page read
[  184.439274][ T9139] syz.0.1133: attempt to access beyond end of device
[  184.439274][ T9139] loop0: rw=0, sector=113152, nr_sectors = 2 limit=64
[  184.444214][ T9139] Buffer I/O error on dev loop0, logical block 56576, async page read
[  184.691944][   T33] audit: type=1326 audit(1755337939.566:14474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.700892][   T33] audit: type=1326 audit(1755337939.566:14475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.712467][   T33] audit: type=1326 audit(1755337939.566:14476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.722626][   T33] audit: type=1326 audit(1755337939.566:14477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.743519][   T33] audit: type=1326 audit(1755337939.566:14478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.752915][   T33] audit: type=1326 audit(1755337939.576:14479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.764963][   T33] audit: type=1326 audit(1755337939.576:14480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.777468][   T33] audit: type=1326 audit(1755337939.576:14481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.805722][   T33] audit: type=1326 audit(1755337939.576:14482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  184.821956][   T33] audit: type=1326 audit(1755337939.576:14483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9152 comm="syz.0.1139" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x7ffc0000
[  185.012833][ T9165] loop0: detected capacity change from 0 to 512
[  185.155507][ T9159] loop3: detected capacity change from 0 to 32768
[  185.162471][ T9159] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1142 (9159)
[  185.179561][ T9159] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.183503][ T9159] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  185.190804][ T9159] BTRFS info (device loop3): using free-space-tree
[  185.295164][ T5853] Bluetooth: hci0: link tx timeout
[  185.297860][ T5853] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  185.362534][ T7237] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.635819][  T791] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  185.785964][  T791] usb 1-1: Using ep0 maxpacket: 32
[  185.791152][  T791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  185.797299][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  185.805711][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  185.815820][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  185.821024][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  185.831355][  T791] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  185.834763][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.839741][  T791] usb 1-1: Product: syz
[  185.841300][  T791] usb 1-1: Manufacturer: syz
[  185.842832][  T791] usb 1-1: SerialNumber: syz
[  185.858294][  T791] usb 1-1: config 0 descriptor??
[  185.887846][ T9188] loop4: detected capacity change from 0 to 32768
[  185.896562][ T9188] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1149 (9188)
[  185.936230][ T9188] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.939471][ T9188] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  185.943009][ T9196] loop3: detected capacity change from 0 to 8192
[  185.943617][ T9188] BTRFS info (device loop4): using free-space-tree
[  186.002492][ T9196]  loop3: p1 p2 p3 p4
[  186.021033][ T9196] loop3: p2 start 1929383950 is beyond EOD, truncated
[  186.027206][ T9196] loop3: p3 start 331777 is beyond EOD, truncated
[  186.029665][ T9196] loop3: p4 size 262144 extends beyond EOD, truncated
[  186.260323][ T7728] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.285201][ T5978] udevd[5978]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  186.289130][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  186.294282][  T791] iforce 1-1:0.0: usb_submit_urb failed: -32
[  186.302409][  T791] input input13: Device does not respond to id packet M
[  186.319892][  T791] iforce 1-1:0.0: usb_submit_urb failed: -32
[  186.322428][  T791] input input13: Device does not respond to id packet P
[  186.345327][  T791] iforce 1-1:0.0: usb_submit_urb failed: -32
[  186.348757][  T791] input input13: Device does not respond to id packet B
[  186.562047][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1154'.
[  186.567167][  T791] iforce 1-1:0.0: usb_submit_urb failed: -71
[  186.570836][  T791] iforce 1-1:0.0: usb_submit_urb failed: -71
[  186.576159][  T791] iforce 1-1:0.0: usb_submit_urb failed: -71
[  186.586248][  T791] iforce 1-1:0.0: usb_submit_urb failed: -71
[  186.590672][  T791] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13
[  186.607896][  T791] usb 1-1: USB disconnect, device number 20
[  186.663696][ T5234] Bluetooth: hci0: link tx timeout
[  186.669109][ T5234] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[  186.798495][ T9219] loop3: detected capacity change from 0 to 32768
[  186.820076][ T9219] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  186.844335][ T9219] XFS (loop3): Ending clean mount
[  186.889959][ T7237] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  187.299685][ T9249] loop3: detected capacity change from 0 to 1764
[  187.323636][ T9249] iso9660: Corrupted directory entry in block 2 of inode 1920
[  187.348391][ T5234] Bluetooth: hci0: command 0x0406 tx timeout
[  187.385778][  T974] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  187.405988][ T5917] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  187.555933][ T5917] usb 1-1: Using ep0 maxpacket: 16
[  187.556293][  T974] usb 5-1: config 39 has an invalid interface number: 2 but max is 0
[  187.561594][  T974] usb 5-1: config 39 has no interface number 0
[  187.564102][  T974] usb 5-1: config 39 interface 2 has no altsetting 0
[  187.566490][ T5917] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  187.571262][ T5917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  187.582233][  T974] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36
[  187.584767][ T5917] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  187.586113][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.592435][ T5917] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  187.599598][  T974] usb 5-1: Product: syz
[  187.601053][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  187.601660][  T974] usb 5-1: Manufacturer: syz
[  187.611525][ T5917] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.616740][  T974] usb 5-1: SerialNumber: syz
[  187.619118][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  187.622909][ T5917] usb 1-1: SerialNumber: syz
[  187.630181][ T9243] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  187.826102][  T791] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  187.842470][  T974] mdc800 5-1:39.2: probe fails -> wrong Interface
[  187.858027][  T974] usb 5-1: USB disconnect, device number 8
[  187.858183][ T5917] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  187.868588][ T5917] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  187.883995][ T5917] usb 1-1: USB disconnect, device number 21
[  187.980081][  T791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  187.984298][  T791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0
[  187.988836][  T791] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.992749][  T791] usb 4-1: config 0 interface 0 has no altsetting 0
[  187.998862][  T791] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  188.002481][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.005560][  T791] usb 4-1: Product: syz
[  188.007627][  T791] usb 4-1: Manufacturer: syz
[  188.009423][  T791] usb 4-1: SerialNumber: syz
[  188.013903][  T791] usb 4-1: config 0 descriptor??
[  188.022659][  T791] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  188.026390][  T791] em28xx 4-1:0.0: Device initialization failed.
[  188.028958][  T791] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  188.230886][ T5917] usb 4-1: USB disconnect, device number 13
[  188.414222][ T9265] loop4: detected capacity change from 0 to 256
[  188.437595][ T9265] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  188.449717][  T974] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  188.452190][  T974] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  188.454602][  T974] hid-generic 0003:0004:0000.000D: unknown main item tag 0x0
[  188.477508][  T974] hid-generic 0003:0004:0000.000D: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  189.219349][ T9272] loop0: detected capacity change from 0 to 131072
[  189.224071][ T9272] F2FS-fs (loop0): invalid crc value
[  189.240102][ T9299] loop4: detected capacity change from 0 to 256
[  189.255909][   T47] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  189.278804][ T9272] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.282707][ T9272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  189.417644][   T47] usb 4-1: Using ep0 maxpacket: 16
[  189.430205][   T47] usb 4-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00
[  189.433720][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.446028][   T47] usb 4-1: Product: syz
[  189.447695][   T47] usb 4-1: Manufacturer: syz
[  189.451970][   T47] usb 4-1: SerialNumber: syz
[  189.458115][   T47] usb 4-1: config 0 descriptor??
[  189.462816][   T47] usb-storage 4-1:0.0: USB Mass Storage device detected
[  189.665936][   T47] usb 4-1: USB disconnect, device number 14
[  189.695928][  T791] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  189.847537][  T791] usb 5-1: Using ep0 maxpacket: 32
[  189.863923][  T791] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  189.867406][  T791] usb 5-1: config 0 has no interface number 0
[  189.869862][  T791] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 123, changing to 10
[  189.874503][  T791] usb 5-1: config 0 interface 85 has no altsetting 0
[  189.887031][  T791] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  189.890570][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.893733][  T791] usb 5-1: Product: syz
[  189.900154][  T791] usb 5-1: Manufacturer: syz
[  189.902067][  T791] usb 5-1: SerialNumber: syz
[  189.916474][  T791] usb 5-1: config 0 descriptor??
[  190.552156][  T791] appletouch 5-1:0.85: Geyser mode initialized.
[  190.561147][ T9314] loop3: detected capacity change from 0 to 4096
[  190.598227][  T791] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input14
[  190.601724][ T9314] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  190.617772][ T9314] ntfs3(loop3): ino=3, mi_enum_attr
[  190.759356][  T791] usb 5-1: USB disconnect, device number 9
[  190.813701][  T791] appletouch 5-1:0.85: input: appletouch disconnected
[  191.032807][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[  191.460454][ T9336] loop4: detected capacity change from 0 to 256
[  191.464044][ T9336] exfat: Deprecated parameter 'namecase'
[  191.482861][ T9328] loop0: detected capacity change from 0 to 32768
[  191.489984][ T9336] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  191.509883][ T9328] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.529461][ T9328] XFS (loop0): Ending clean mount
[  191.585294][ T5855] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.765991][  T791] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  191.925858][  T791] usb 5-1: Using ep0 maxpacket: 8
[  191.934184][  T791] usb 5-1: config 0 has an invalid interface number: 122 but max is 0
[  191.943342][  T791] usb 5-1: config 0 has an invalid descriptor of length 138, skipping remainder of the config
[  191.955774][  T791] usb 5-1: config 0 has no interface number 0
[  191.958379][  T791] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  191.965782][  T791] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8
[  191.969534][  T791] usb 5-1: config 0 interface 122 altsetting 0 has an endpoint descriptor with address 0x26, changing to 0x6
[  191.974344][  T791] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x6 has invalid maxpacket 30788, setting to 64
[  191.978777][  T791] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8
[  191.986364][  T791] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  191.989766][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.992827][  T791] usb 5-1: Product: syz
[  191.994400][  T791] usb 5-1: Manufacturer: syz
[  191.997372][  T791] usb 5-1: SerialNumber: syz
[  192.001713][  T791] usb 5-1: config 0 descriptor??
[  192.004526][ T9336] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  192.169500][ T9350] loop0: detected capacity change from 0 to 32768
[  192.211154][ T9350] find_entry called with index = 0
[  192.216056][  T791] usb 5-1: NFC: intf ffff8880328ad000 id ffffffff8eb53ba0
[  192.234931][  T791] usb 5-1: USB disconnect, device number 10
[  192.502746][ T9361] loop0: detected capacity change from 0 to 128
[  192.516122][ T9361] FAT-fs (loop0): Directory bread(block 414) failed
[  192.518766][ T9361] FAT-fs (loop0): Directory bread(block 415) failed
[  192.522471][ T9361] FAT-fs (loop0): Directory bread(block 416) failed
[  192.527399][ T9361] FAT-fs (loop0): Directory bread(block 417) failed
[  192.529991][ T9361] FAT-fs (loop0): Directory bread(block 418) failed
[  192.532643][ T9361] FAT-fs (loop0): Directory bread(block 419) failed
[  192.535493][ T9361] FAT-fs (loop0): Directory bread(block 420) failed
[  192.542773][ T9361] FAT-fs (loop0): Directory bread(block 421) failed
[  192.720326][ T9359] loop3: detected capacity change from 0 to 32768
[  192.759704][ T9359] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  192.802991][ T9367] loop4: detected capacity change from 0 to 256
[  192.812553][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  192.812570][   T33] audit: type=1804 audit(1755337947.686:14486): pid=9359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1204" name="/newroot/218/file1/bus" dev="loop3" ino=17058 res=1 errno=0
[  192.828643][ T9367] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d)
[  192.970768][ T7237] ocfs2: Unmounting device (7,3) on (node local)
[  193.118818][ T9363] loop0: detected capacity change from 0 to 40427
[  193.128482][ T9363] F2FS-fs (loop0): Image doesn't support compression
[  193.131096][ T9363] F2FS-fs (loop0): build fault injection rate: 690
[  193.142003][ T9363] F2FS-fs (loop0): invalid crc value
[  193.228341][ T9363] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.234913][ T9363] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.390241][ T9379] loop3: detected capacity change from 0 to 32768
[  193.409607][ T9379] (syz.3.1210,9379,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  193.409642][ T9379] (syz.3.1210,9379,1):ocfs2_check_volume:2432 ERROR: status = -27
[  193.419270][ T9379] (syz.3.1210,9379,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  193.423907][ T9379] (syz.3.1210,9379,1):ocfs2_fill_super:1177 ERROR: status = -27
[  193.517486][  T791] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  193.676140][  T791] usb 5-1: Using ep0 maxpacket: 16
[  193.690016][  T791] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.693982][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  193.703983][ T9394] loop0: detected capacity change from 0 to 512
[  193.706859][  T791] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  193.709038][ T9394] EXT4-fs: Ignoring removed oldalloc option
[  193.713632][ T9394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  193.724231][  T791] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  193.724686][ T9394] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #11: comm syz.0.1219: corrupted in-inode xattr: invalid ea_ino
[  193.735685][  T791] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.737271][ T9394] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1219: couldn't read orphan inode 11 (err -117)
[  193.750180][ T9394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.760635][  T791] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  193.764123][  T791] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  193.776436][  T791] usb 5-1: Manufacturer: syz
[  193.784420][  T791] usb 5-1: config 0 descriptor??
[  193.801295][ T9390] loop3: detected capacity change from 0 to 8192
[  193.831251][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.856970][ T5860]  loop3: p1 p2 p4 < >
[  193.858801][ T5860] loop3: partition table partially beyond EOD, truncated
[  193.861792][ T5860] loop3: p1 start 16777216 is beyond EOD, truncated
[  193.864498][ T5860] loop3: p2 size 515840 extends beyond EOD, truncated
[  193.883857][ T5860] loop3: p4 start 16777216 is beyond EOD, truncated
[  193.898642][ T9390]  loop3: p1 p2 p4 < >
[  193.905057][ T9390] loop3: partition table partially beyond EOD, truncated
[  193.909059][ T9390] loop3: p1 start 16777216 is beyond EOD, truncated
[  193.911468][ T9390] loop3: p2 size 515840 extends beyond EOD, truncated
[  193.920268][ T9390] loop3: p4 start 16777216 is beyond EOD, truncated
[  193.990413][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  194.009596][ T5860] udevd[5860]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  194.060312][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.062881][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.095822][  T791] rc_core: IR keymap rc-hauppauge not found
[  194.098202][  T791] Registered IR keymap rc-empty
[  194.102050][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.115823][   T47] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  194.115885][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.138585][  T791] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  194.148907][  T791] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15
[  194.157636][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.176180][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.205845][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.229351][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.238890][ T9401] loop3: detected capacity change from 0 to 32768
[  194.256155][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.272443][ T5234] Bluetooth: hci2: Malformed LE Event: 0x0d
[  194.273674][   T47] usb 1-1: unable to get BOS descriptor or descriptor too short
[  194.285974][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.291236][   T47] usb 1-1: unable to read config index 0 descriptor/start: -71
[  194.293692][   T47] usb 1-1: can't read configurations, error -71
[  194.316002][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.347211][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.381109][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.396170][  T791] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  194.429317][  T791] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  194.435682][  T791] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  194.498055][  T791] usb 5-1: USB disconnect, device number 11
[  194.526873][ T9405] loop3: detected capacity change from 0 to 4096
[  194.549064][ T9405] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  194.551816][ T9405] ntfs3(loop3): Failed to load $Extend (-22).
[  194.554021][ T9405] ntfs3(loop3): Failed to initialize $Extend.
[  194.585240][ T9405] ntfs3(loop3): ino=1b, "file0" ntfs_readdir
[  194.671193][ T9409] loop3: detected capacity change from 0 to 512
[  194.695009][ T9409] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.703120][ T9409] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.786556][  T176] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  194.798426][  T176] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1029 with error 28
[  194.805265][  T176] EXT4-fs (loop3): This should not happen!! Data will be lost
[  194.805265][  T176] 
[  194.810130][  T176] EXT4-fs (loop3): Total free blocks count 0
[  194.813159][  T176] EXT4-fs (loop3): Free/Dirty block details
[  194.815518][  T176] EXT4-fs (loop3): free_blocks=65280
[  194.820419][  T176] EXT4-fs (loop3): dirty_blocks=1029
[  194.822550][  T176] EXT4-fs (loop3): Block reservation details
[  194.824867][  T176] EXT4-fs (loop3): i_reserved_data_blocks=1029
[  194.853117][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.378050][ T9428] loop4: detected capacity change from 0 to 32768
[  195.417115][ T9428] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  195.467363][ T7728] ocfs2: Unmounting device (7,4) on (node local)
[  195.792613][ T9441] loop4: detected capacity change from 0 to 1024
[  195.822169][ T9441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.834274][ T9441] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1237: bg 0: block 494: padding at end of block bitmap is not set
[  195.849991][ T9441] EXT4-fs (loop4): Remounting filesystem read-only
[  195.852742][ T9441] EXT4-fs (loop4): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[  195.882199][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.322953][ T9420] loop3: detected capacity change from 0 to 262144
[  196.385556][ T9420] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.388943][   T47] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  196.392304][ T9420] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  196.557948][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.561552][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.564843][   T47] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  196.587955][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.607392][   T47] usb 1-1: config 0 descriptor??
[  197.019656][   T47] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2
[  197.022295][   T47] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x2
[  197.028556][   T47] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  197.221360][   T47] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device
[  197.224216][   T47] pyra 0003:1E7D:2CF6.000E: couldn't install mouse
[  197.238851][   T47] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -71
[  197.248455][   T47] usb 1-1: USB disconnect, device number 23
[  197.475796][ T7394] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  197.606795][  T974] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  197.648154][ T7394] usb 4-1: config 0 interface 0 has no altsetting 0
[  197.650878][ T7394] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  197.654647][ T7394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.660985][ T7394] usb 4-1: config 0 descriptor??
[  197.758631][  T974] usb 5-1: config 0 has an invalid interface number: 168 but max is 0
[  197.761269][  T974] usb 5-1: config 0 has no interface number 0
[  197.770747][  T974] usb 5-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  197.774852][  T974] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  197.779926][  T974] usb 5-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  197.783957][  T974] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  197.790441][  T974] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.794433][  T974] usb 5-1: config 0 descriptor??
[  197.798336][ T9469] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  198.088186][ T7394] logitech 0003:046D:C294.000F: unknown main item tag 0x6
[  198.091171][ T7394] logitech 0003:046D:C294.000F: item fetching failed at offset 5/7
[  198.093985][ T7394] logitech 0003:046D:C294.000F: parse failed
[  198.101539][ T7394] logitech 0003:046D:C294.000F: probe with driver logitech failed with error -22
[  198.291034][ T7394] usb 4-1: USB disconnect, device number 15
[  198.298882][  T974] usb 5-1: string descriptor 0 read error: -71
[  198.303840][  T974] keyspan 5-1:0.168: Keyspan 2 port adapter converter detected
[  198.309422][  T974] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 1
[  198.317052][  T974] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 84
[  198.320405][  T974] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 2
[  198.326735][  T974] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  198.333047][  T974] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 88
[  198.336344][  T974] keyspan 5-1:0.168: found no endpoint descriptor for endpoint 6
[  198.340669][  T974] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  198.346966][  T974] usb 5-1: USB disconnect, device number 12
[  198.358273][  T974] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  198.367274][  T974] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  198.371535][  T974] keyspan 5-1:0.168: device disconnected
[  198.985777][  T974] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  199.065776][   T47] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  199.085813][ T7394] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  199.139098][  T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.143315][  T974] usb 1-1: config 0 has no interfaces?
[  199.145518][  T974] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  199.149977][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.158695][  T974] usb 1-1: config 0 descriptor??
[  199.215801][   T47] usb 5-1: Using ep0 maxpacket: 32
[  199.220757][   T47] usb 5-1: unable to get BOS descriptor or descriptor too short
[  199.225282][   T47] usb 5-1: config 7 has an invalid interface number: 187 but max is 0
[  199.228807][   T47] usb 5-1: config 7 has no interface number 0
[  199.231608][   T47] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  199.235884][   T47] usb 5-1: config 7 interface 187 has no altsetting 0
[  199.241418][   T47] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  199.245137][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.249429][   T47] usb 5-1: Product: syz
[  199.251215][   T47] usb 5-1: Manufacturer: syz
[  199.253117][   T47] usb 5-1: SerialNumber: syz
[  199.263688][ T7394] usb 4-1: config 0 has an invalid interface number: 93 but max is 0
[  199.270524][ T7394] usb 4-1: config 0 has no interface number 0
[  199.276126][ T7394] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  199.279793][ T7394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.282964][ T7394] usb 4-1: Product: syz
[  199.284739][ T7394] usb 4-1: Manufacturer: syz
[  199.286818][ T7394] usb 4-1: SerialNumber: syz
[  199.295411][ T7394] usb 4-1: config 0 descriptor??
[  199.375212][ T5917] usb 1-1: USB disconnect, device number 24
[  199.471607][   T47] usb 5-1: Unknown endpoint type found, address 0x07
[  199.474308][   T47] usb 5-1: Unknown endpoint type found, address 0x03
[  199.479347][   T47] usb 5-1: Not enough endpoints found in device, aborting!
[  199.504060][ T7394] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in cold state, will try to load a firmware
[  199.525435][ T7394] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  199.528493][ T7394] dib0700: firmware download failed at 7 with -22
[  199.536468][ T7394] usb 4-1: USB disconnect, device number 16
[  199.668803][   T47] usb 5-1: USB disconnect, device number 13
[  200.453742][ T9510] loop0: detected capacity change from 0 to 32768
[  200.504914][ T9510] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  200.558648][ T9510] XFS (loop0): Ending clean mount
[  200.576254][ T9510] XFS (loop0): Quotacheck needed: Please wait.
[  200.665563][ T9510] XFS (loop0): Quotacheck: Done.
[  201.020430][ T5855] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  201.657087][  T791] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  201.809846][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.814516][  T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.818824][  T791] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  201.823850][  T791] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  201.829685][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.835090][  T791] usb 1-1: config 0 descriptor??
[  202.295815][   T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  202.445776][   T24] usb 5-1: Using ep0 maxpacket: 8
[  202.451757][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  202.456175][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  202.459900][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.470661][   T24] usb 5-1: config 0 descriptor??
[  202.471362][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.475521][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.484849][   T24] gspca_main: vc032x-2.14.0 probing 046d:0892
[  202.489382][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.493452][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.496737][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.499580][  T791] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  202.511792][  T791] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  202.877276][ T9542] loop3: detected capacity change from 0 to 32768
[  202.890315][ T9542] JBD2: Ignoring recovery information on journal
[  202.922002][ T9542] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  202.964275][ T7237] ocfs2: Unmounting device (7,3) on (node local)
[  203.295573][   T24] gspca_vc032x: reg_w err -71
[  203.305422][   T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  203.317754][   T24] usb 5-1: USB disconnect, device number 14
[  203.466115][ T9552] loop3: detected capacity change from 0 to 32768
[  203.473487][ T9552] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  203.482631][ T9552] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  203.520287][ T9552] syz.3.1278 (9552) used greatest stack depth: 18352 bytes left
[  203.534972][ T7237] ocfs2: Unmounting device (7,3) on (node local)
[  203.640608][ T9556] loop3: detected capacity change from 0 to 1024
[  203.645237][ T9556] EXT4-fs: Ignoring removed bh option
[  203.675121][ T9556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.691008][ T9556] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  203.697412][ T9556] EXT4-fs (loop3): Remounting filesystem read-only
[  203.711653][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.988444][ T9563] loop4: detected capacity change from 0 to 32768
[  204.000629][ T9563] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  204.029050][ T7728] ocfs2: Unmounting device (7,4) on (node local)
[  204.208310][ T9571] netlink: 'syz.4.1284': attribute type 5 has an invalid length.
[  204.652333][ T7394] usb 1-1: USB disconnect, device number 25
[  204.910852][   T27] Bluetooth: (null): Invalid header checksum
[  204.915952][   T27] Bluetooth: (null): Invalid header checksum
[  204.961436][ T9590] loop3: detected capacity change from 0 to 1024
[  204.969215][ T9590] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  204.984210][ T9590] JBD2: no valid journal superblock found
[  204.987724][ T9590] EXT4-fs (loop3): Could not load journal inode
[  205.011926][   T27] Bluetooth: (null): Invalid header checksum
[  205.109024][ T9594] loop3: detected capacity change from 0 to 64
[  205.124439][ T1167] Bluetooth: (null): Invalid header checksum
[  205.227502][ T1167] Bluetooth: (null): Invalid header checksum
[  205.242238][ T9596] loop3: detected capacity change from 0 to 64
[  205.253476][ T9596] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3
[  205.432443][ T9602] loop0: detected capacity change from 0 to 128
[  205.460785][ T9602] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.482664][ T9602] ext4 filesystem being mounted at /401/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  205.846433][ T5855] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  206.528364][ T9637] program syz.3.1312 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  207.121023][ T9649] loop0: detected capacity change from 0 to 1024
[  207.166639][ T9651] loop4: detected capacity change from 0 to 8
[  207.173492][   T33] audit: type=1800 audit(1755337962.046:14487): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1319" name="file1" dev="loop0" ino=20 res=0 errno=0
[  207.189443][   T33] audit: type=1800 audit(1755337962.046:14488): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1319" name="file1" dev="loop0" ino=20 res=0 errno=0
[  207.239448][ T9651] SQUASHFS error: Corrupted symlink
[  207.815857][   T47] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  207.987405][   T47] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  207.990586][   T47] usb 5-1: config 0 has no interface number 0
[  207.992990][   T47] usb 5-1: config 0 interface 29 has no altsetting 0
[  207.998817][   T47] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  208.002442][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.005223][   T47] usb 5-1: Product: syz
[  208.009201][   T47] usb 5-1: Manufacturer: syz
[  208.011050][   T47] usb 5-1: SerialNumber: syz
[  208.018306][   T47] usb 5-1: config 0 descriptor??
[  208.044054][ T9656] loop0: detected capacity change from 0 to 32768
[  208.075503][ T9656] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  208.104735][ T9663] max out of range
[  208.210795][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  208.252188][   T47] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71
[  208.255105][   T47] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71)
[  208.346948][   T47] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71
[  208.353821][   T47] usb 5-1: USB disconnect, device number 15
[  208.416089][ T5884] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  208.583114][ T9680] loop0: detected capacity change from 0 to 8
[  208.583162][ T5884] usb 4-1: unable to get BOS descriptor or descriptor too short
[  208.588123][ T9680] unable to read id index table
[  208.595276][ T5884] usb 4-1: config 6 has an invalid interface number: 200 but max is 0
[  208.605148][ T5884] usb 4-1: config 6 has no interface number 0
[  208.616059][ T5884] usb 4-1: config 6 interface 200 has no altsetting 0
[  208.629302][ T5884] usb 4-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f
[  208.630255][ T9682] loop0: detected capacity change from 0 to 64
[  208.632344][ T5884] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.638434][ T5884] usb 4-1: Product: syz
[  208.640140][ T5884] usb 4-1: Manufacturer: syz
[  208.645169][ T5884] usb 4-1: SerialNumber: syz
[  208.755090][ T9683] syz.0.1331: attempt to access beyond end of device
[  208.755090][ T9683] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  208.788820][ T9683] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  208.800205][ T9683] syz.0.1331: attempt to access beyond end of device
[  208.800205][ T9683] loop0: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  208.805496][ T9683] Buffer I/O error on dev loop0, logical block 8388608, async page read
[  209.139587][ T7394] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  209.295857][ T7394] usb 5-1: Using ep0 maxpacket: 16
[  209.302665][ T7394] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  209.307847][ T7394] usb 5-1: config 0 interface 0 has no altsetting 0
[  209.310333][ T7394] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  209.315403][ T7394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.327752][ T7394] usb 5-1: config 0 descriptor??
[  209.828993][ T7394] cougar 0003:060B:500A.0011: usage count exceeds max: fixing up report descriptor
[  209.844352][ T7394] cougar 0003:060B:500A.0011: unexpected long global item
[  209.849814][ T7394] cougar 0003:060B:500A.0011: parse failed
[  209.852440][ T7394] cougar 0003:060B:500A.0011: probe with driver cougar failed with error -22
[  210.017158][ T5917] usb 5-1: USB disconnect, device number 16
[  210.361776][ T9693] loop0: detected capacity change from 0 to 256
[  210.364647][ T9693] vfat: Unknown parameter 'shorname'
[  210.621213][ T9695] loop0: detected capacity change from 0 to 128
[  210.967386][ T9703] loop4: detected capacity change from 0 to 1024
[  210.987875][ T9703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.992706][ T9703] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  211.009324][   T33] audit: type=1800 audit(1755337965.886:14489): pid=9703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1338" name="file1" dev="loop4" ino=15 res=0 errno=0
[  211.042518][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.129577][ T9710] loop4: detected capacity change from 0 to 128
[  211.143106][ T9710] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.147945][ T9710] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.177858][ T7728] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.247059][ T9713] ieee802154 phy0 wpan0: encryption failed: -22
[  211.288655][ T5884] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state.
[  211.295513][ T5884] dvb-usb: bulk message failed: -71 (3/0)
[  211.306986][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  211.311545][ T5884] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T)
[  211.314752][ T5884] usb 4-1: media controller created
[  211.332268][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  211.394716][ T5884] dvb-usb: bulk message failed: -71 (6/0)
[  211.416145][ T5884] dvb-usb: bulk message failed: -71 (6/0)
[  211.418499][ T5884] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T'
[  211.438133][ T5884] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input16
[  211.468296][ T5884] dvb-usb: schedule remote query interval to 150 msecs.
[  211.475695][ T5884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected.
[  211.489960][ T5884] usb 4-1: USB disconnect, device number 17
[  211.632635][ T5884] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected.
[  211.634673][ T9713] loop3: detected capacity change from 0 to 40427
[  211.667678][ T9713] F2FS-fs (loop3): build fault injection rate: 771
[  211.678600][ T9713] F2FS-fs (loop3): invalid crc value
[  211.721666][ T9713] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  211.725991][ T9713] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  211.757048][ T7237] syz-executor: attempt to access beyond end of device
[  211.757048][ T7237] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  211.761377][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  211.761393][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.761398][ T7237] Call Trace:
[  211.761403][ T7237]  <TASK>
[  211.761408][ T7237]  dump_stack_lvl+0x189/0x250
[  211.761427][ T7237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.761437][ T7237]  ? __pfx_queue_work_on+0x10/0x10
[  211.761446][ T7237]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  211.761459][ T7237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.761475][ T7237]  f2fs_handle_critical_error+0x37c/0x540
[  211.761491][ T7237]  f2fs_write_end_io+0x886/0xb60
[  211.761509][ T7237]  __submit_merged_bio+0x27a/0x6a0
[  211.761523][ T7237]  __submit_merged_write_cond+0x255/0x530
[  211.761538][ T7237]  f2fs_write_data_pages+0x261d/0x3000
[  211.761567][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.761601][ T7237]  ? __mod_zone_page_state+0xd7/0x140
[  211.761619][ T7237]  ? folios_put_refs+0x560/0x640
[  211.761635][ T7237]  ? __lock_acquire+0xab9/0xd20
[  211.761650][ T7237]  ? do_raw_spin_lock+0x121/0x290
[  211.761666][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.761675][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.761687][ T7237]  do_writepages+0x32e/0x550
[  211.761703][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.761714][ T7237]  filemap_fdatawrite+0x199/0x240
[  211.761725][ T7237]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  211.761760][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.761771][ T7237]  f2fs_sync_dirty_inodes+0x31f/0x830
[  211.761787][ T7237]  f2fs_write_checkpoint+0x95a/0x1df0
[  211.761808][ T7237]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  211.761837][ T7237]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  211.761845][ T7237]  ? kfree+0x18e/0x440
[  211.761856][ T7237]  ? kill_f2fs_super+0x298/0x6c0
[  211.761868][ T7237]  kill_f2fs_super+0x2c3/0x6c0
[  211.761879][ T7237]  ? __pfx_kill_f2fs_super+0x10/0x10
[  211.761885][ T7237]  ? radix_tree_delete_item+0x2b6/0x400
[  211.761900][ T7237]  ? shrinker_free+0x2ce/0x3e0
[  211.761910][ T7237]  deactivate_locked_super+0xbc/0x130
[  211.761921][ T7237]  cleanup_mnt+0x425/0x4c0
[  211.761930][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.761942][ T7237]  task_work_run+0x1d4/0x260
[  211.761954][ T7237]  ? __pfx_task_work_run+0x10/0x10
[  211.761962][ T7237]  ? __x64_sys_umount+0x122/0x160
[  211.761975][ T7237]  ? exit_to_user_mode_loop+0x40/0x110
[  211.761989][ T7237]  exit_to_user_mode_loop+0xec/0x110
[  211.762000][ T7237]  do_syscall_64+0x2bd/0x3b0
[  211.762010][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.762019][ T7237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.762028][ T7237]  ? exc_page_fault+0x9f/0xf0
[  211.762043][ T7237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.762050][ T7237] RIP: 0033:0x7fbd5b18ff17
[  211.762060][ T7237] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  211.762067][ T7237] RSP: 002b:00007ffc93c97378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  211.762077][ T7237] RAX: 0000000000000000 RBX: 00007fbd5b211c05 RCX: 00007fbd5b18ff17
[  211.762083][ T7237] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc93c97430
[  211.762088][ T7237] RBP: 00007ffc93c97430 R08: 0000000000000000 R09: 0000000000000000
[  211.762092][ T7237] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc93c984c0
[  211.762097][ T7237] R13: 00007fbd5b211c05 R14: 0000000000033aa1 R15: 00007ffc93c98500
[  211.762112][ T7237]  </TASK>
[  211.762116][ T7237] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  211.767235][ T9715] loop4: detected capacity change from 0 to 32768
[  211.786131][ T7237] CPU: 1 UID: 0 PID: 7237 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  211.786147][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  211.786154][ T7237] Call Trace:
[  211.786157][ T7237]  <TASK>
[  211.786161][ T7237]  dump_stack_lvl+0x189/0x250
[  211.786179][ T7237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.786188][ T7237]  ? __pfx_queue_work_on+0x10/0x10
[  211.786197][ T7237]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  211.786210][ T7237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  211.786224][ T7237]  f2fs_handle_critical_error+0x37c/0x540
[  211.786240][ T7237]  f2fs_write_end_io+0x886/0xb60
[  211.786256][ T7237]  __submit_merged_bio+0x27a/0x6a0
[  211.786269][ T7237]  __submit_merged_write_cond+0x255/0x530
[  211.786283][ T7237]  f2fs_write_data_pages+0x261d/0x3000
[  211.786309][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.786363][ T7237]  ? __mod_zone_page_state+0xd7/0x140
[  211.786383][ T7237]  ? folios_put_refs+0x560/0x640
[  211.786398][ T7237]  ? __lock_acquire+0xab9/0xd20
[  211.786414][ T7237]  ? do_raw_spin_lock+0x121/0x290
[  211.786428][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.786438][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  211.786449][ T7237]  do_writepages+0x32e/0x550
[  211.786465][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.786476][ T7237]  filemap_fdatawrite+0x199/0x240
[  211.786488][ T7237]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  211.786519][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  211.786530][ T7237]  f2fs_sync_dirty_inodes+0x31f/0x830
[  211.786545][ T7237]  f2fs_write_checkpoint+0x95a/0x1df0
[  211.786563][ T7237]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  211.786589][ T7237]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  211.786596][ T7237]  ? kfree+0x18e/0x440
[  211.786607][ T7237]  ? kill_f2fs_super+0x298/0x6c0
[  211.786618][ T7237]  kill_f2fs_super+0x2c3/0x6c0
[  211.786628][ T7237]  ? __pfx_kill_f2fs_super+0x10/0x10
[  211.786634][ T7237]  ? radix_tree_delete_item+0x2b6/0x400
[  211.786648][ T7237]  ? shrinker_free+0x2ce/0x3e0
[  211.786661][ T7237]  deactivate_locked_super+0xbc/0x130
[  211.786678][ T7237]  cleanup_mnt+0x425/0x4c0
[  211.786691][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.786706][ T7237]  task_work_run+0x1d4/0x260
[  211.786723][ T7237]  ? __pfx_task_work_run+0x10/0x10
[  211.786737][ T7237]  ? __x64_sys_umount+0x122/0x160
[  211.786752][ T7237]  ? exit_to_user_mode_loop+0x40/0x110
[  211.786766][ T7237]  exit_to_user_mode_loop+0xec/0x110
[  211.786776][ T7237]  do_syscall_64+0x2bd/0x3b0
[  211.786794][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  211.786810][ T7237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.786824][ T7237]  ? exc_page_fault+0x9f/0xf0
[  211.786837][ T7237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.786844][ T7237] RIP: 0033:0x7fbd5b18ff17
[  211.786854][ T7237] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  211.786862][ T7237] RSP: 002b:00007ffc93c97378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  211.786871][ T7237] RAX: 0000000000000000 RBX: 00007fbd5b211c05 RCX: 00007fbd5b18ff17
[  211.786877][ T7237] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc93c97430
[  211.786881][ T7237] RBP: 00007ffc93c97430 R08: 0000000000000000 R09: 0000000000000000
[  211.786886][ T7237] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc93c984c0
[  211.786891][ T7237] R13: 00007fbd5b211c05 R14: 0000000000033aa1 R15: 00007ffc93c98500
[  211.786905][ T7237]  </TASK>
[  211.786909][ T7237] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  211.795533][ T9715] bcachefs (/dev/loop4): error reading default superblock: unknown checksum type 63
[  211.837228][ T9717] loop0: detected capacity change from 0 to 32768
[  211.858081][ T9715] syz.4.1341: attempt to access beyond end of device
[  211.858081][ T9715] loop4: rw=6144, sector=4611686018427418624, nr_sectors = 16 limit=32768
[  211.971949][ T9717] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.972952][ T9715] bcachefs (/dev/loop4): error reading superblock: checksum error, type crc32c_nonzero: got 575417db should be 49607f70IO error: -5
[  212.023666][ T9717] XFS (loop0): Ending clean mount
[  212.024661][ T9715] bcachefs: bch2_fs_get_tree() error: EIO
[  212.039139][ T9717] XFS (loop0): Quotacheck needed: Please wait.
[  212.101876][ T9717] XFS (loop0): Quotacheck: Done.
[  212.176425][ T5855] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  212.389717][ T9732] netlink: 'syz.4.1347': attribute type 11 has an invalid length.
[  212.392454][ T9732] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1347'.
[  212.460708][ T9736] loop4: detected capacity change from 0 to 64
[  212.765526][ T9738] loop0: detected capacity change from 0 to 32768
[  212.776097][ T9738] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1345 (9738)
[  212.796651][ T5917] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  212.826043][ T9738] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  212.830022][ T9738] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  212.833636][ T9738] BTRFS info (device loop0): using free-space-tree
[  212.844879][ T9750] loop3: detected capacity change from 0 to 64
[  212.961518][ T9767] Bluetooth: MGMT ver 1.23
[  212.962001][ T5917] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  212.981458][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.984632][ T5917] usb 5-1: Product: syz
[  212.995088][ T5917] usb 5-1: Manufacturer: syz
[  212.997593][ T5917] usb 5-1: SerialNumber: syz
[  213.018441][ T5855] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  213.025512][ T5917] usb 5-1: config 0 descriptor??
[  213.043616][ T5917] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  213.051934][ T5917] pctv452e: pctv452e_power_ctrl: 1
[  213.051934][ T5917] 
[  213.055550][ T5917] usb 5-1: selecting invalid altsetting 3
[  213.058452][ T5917] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  213.058452][ T5917] 
[  213.062442][ T5917] dvb-usb: bulk message failed: -22 (5/0)
[  213.114777][ T5917] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  213.155431][ T5917] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19)
[  213.252199][   T47] usb 5-1: USB disconnect, device number 17
[  213.272136][ T9775] loop3: detected capacity change from 0 to 1024
[  213.319865][ T9775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.364409][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.381051][ T9779] loop0: detected capacity change from 0 to 512
[  213.396914][ T9779] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1359: corrupted in-inode xattr: invalid ea_ino
[  213.401524][ T9779] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1359: couldn't read orphan inode 15 (err -117)
[  213.407654][ T9779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.428023][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.569615][ T9786] loop3: detected capacity change from 0 to 4096
[  213.679434][ T9784] loop0: detected capacity change from 0 to 32768
[  213.696737][ T9784] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  213.886600][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  214.025395][ T9806] loop0: detected capacity change from 0 to 256
[  214.030716][ T9806] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.034113][ T9806] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  214.040733][ T9806] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  214.146206][   T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  214.337020][   T47] usb 5-1: Using ep0 maxpacket: 32
[  214.564082][   T47] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  214.569292][   T47] usb 5-1: config 0 has no interface number 0
[  214.588647][   T47] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  214.594025][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.599751][   T47] usb 5-1: Product: syz
[  214.601857][   T47] usb 5-1: Manufacturer: syz
[  214.604141][   T47] usb 5-1: SerialNumber: syz
[  214.659399][   T47] usb 5-1: config 0 descriptor??
[  214.780576][   T47] hub 5-1:0.89: bad descriptor, ignoring hub
[  214.784050][   T47] hub 5-1:0.89: probe with driver hub failed with error -5
[  214.797576][   T47] option 5-1:0.89: GSM modem (1-port) converter detected
[  214.841881][   T47] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0
[  215.055889][   T47] usb 5-1: USB disconnect, device number 18
[  215.073258][   T47] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  215.079240][   T47] option 5-1:0.89: device disconnected
[  215.388855][ T9821] loop0: detected capacity change from 0 to 1024
[  215.875737][   T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  215.885766][ T7394] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  216.035746][ T7394] usb 1-1: Using ep0 maxpacket: 16
[  216.035842][   T47] usb 5-1: Using ep0 maxpacket: 32
[  216.040020][ T7394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.042613][   T47] usb 5-1: config 252 has an invalid interface number: 91 but max is 0
[  216.044127][ T7394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.048053][   T47] usb 5-1: config 252 has no interface number 0
[  216.052593][ T7394] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  216.053411][   T47] usb 5-1: config 252 interface 91 has no altsetting 0
[  216.058315][ T7394] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  216.063722][   T47] usb 5-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice=7f.92
[  216.064345][ T7394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.068312][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.073969][   T47] usb 5-1: Product: syz
[  216.075487][ T7394] usb 1-1: config 0 descriptor??
[  216.079691][   T47] usb 5-1: Manufacturer: syz
[  216.081580][   T47] usb 5-1: SerialNumber: syz
[  216.305786][   T47] usb 5-1: USB disconnect, device number 19
[  216.492910][ T7394] HID 045e:07da: Invalid code 65791 type 1
[  216.509973][ T7394] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0012/input/input17
[  216.530366][ T7394] microsoft 0003:045E:07DA.0012: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  216.697120][ T7394] usb 1-1: USB disconnect, device number 26
[  216.748961][   T47] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  216.896029][   T47] usb 4-1: Using ep0 maxpacket: 16
[  216.915257][   T47] usb 4-1: config 7 has an invalid interface number: 247 but max is 0
[  216.919231][   T47] usb 4-1: config 7 has no interface number 0
[  216.922525][   T47] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  216.936648][   T47] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  216.949416][   T47] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22
[  216.957609][   T47] usb 4-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147
[  216.965828][   T47] usb 4-1: Product: syz
[  216.967881][   T47] usb 4-1: Manufacturer: syz
[  216.969936][   T47] usb 4-1: SerialNumber: syz
[  217.037342][   T47] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device.
[  217.220571][ T7394] usb 4-1: USB disconnect, device number 18
[  218.253045][ T9848] program syz.3.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  218.262818][ T9850] loop0: detected capacity change from 0 to 512
[  218.268814][ T9850] EXT4-fs (loop0): Test dummy encryption mode enabled
[  218.286205][ T9850] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended
[  218.298697][ T9850] EXT4-fs (loop0): Errors on filesystem, clearing orphan list.
[  218.313996][ T9850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.350183][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.395347][ T9854] loop4: detected capacity change from 0 to 4096
[  218.421239][   T33] audit: type=1800 audit(1755337973.296:14490): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1393" name="/" dev="9p" ino=2 res=0 errno=0
[  218.461018][   T33] audit: type=1800 audit(1755337973.336:14491): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1391" name="file1" dev="loop4" ino=30 res=0 errno=0
[  218.485939][ T9854] ntfs3(loop4): ino=1e, "file1" attr_set_size
[  218.489685][   T33] audit: type=1800 audit(1755337973.346:14492): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1391" name="file1" dev="loop4" ino=30 res=0 errno=0
[  218.518674][ T9860] loop0: detected capacity change from 0 to 512
[  218.553685][ T9860] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1394: bad orphan inode 13
[  218.578702][   T47] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  218.587392][ T9860] ext4_test_bit(bit=12, block=4) = 1
[  218.593521][ T9860] is_bad_inode(inode)=0
[  218.595223][ T9860] NEXT_ORPHAN(inode)=0
[  218.601525][ T9860] max_ino=32
[  218.602831][ T9860] i_nlink=1
[  218.609551][ T9860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.629219][ T9860] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1394: Unrecognised inode hash code 20
[  218.633080][ T9860] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1394: Corrupt directory, running e2fsck is recommended
[  218.637987][ T9860] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.1394: Unrecognised inode hash code 20
[  218.638541][ T9863] loop4: detected capacity change from 0 to 4096
[  218.642064][ T9860] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1394: Corrupt directory, running e2fsck is recommended
[  218.661854][ T9863] NILFS (loop4): invalid segment: Inconsistency found
[  218.664533][ T9863] NILFS (loop4): trying rollback from an earlier position
[  218.686067][ T9863] NILFS (loop4): recovery complete
[  218.687094][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.693691][ T9864] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.745923][   T47] usb 4-1: Using ep0 maxpacket: 32
[  218.752130][   T47] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  218.756955][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.769961][   T47] usb 4-1: config 0 descriptor??
[  218.989459][   T47] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  218.999629][   T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  219.004491][   T47] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  219.010899][   T47] usb 4-1: media controller created
[  219.050713][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.192973][ T9868] loop0: detected capacity change from 0 to 32768
[  219.198237][   T47] az6027: usb out operation failed. (-71)
[  219.208362][   T47] az6027: usb out operation failed. (-71)
[  219.210532][   T47] stb0899_attach: Driver disabled by Kconfig
[  219.214551][ T9878] loop4: detected capacity change from 0 to 1024
[  219.218480][   T47] az6027: no front-end attached
[  219.218480][   T47] 
[  219.226421][ T9878] EXT4-fs: Ignoring removed nobh option
[  219.228500][ T9878] EXT4-fs: Ignoring removed bh option
[  219.238887][   T47] az6027: usb out operation failed. (-71)
[  219.241155][   T47] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  219.244596][ T9868] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.264015][ T9878] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1402: bad orphan inode 32767
[  219.266437][   T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  219.288434][ T9878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.292450][   T47] dvb-usb: schedule remote query interval to 400 msecs.
[  219.298013][   T47] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  219.305445][   T47] usb 4-1: USB disconnect, device number 19
[  219.334987][ T9868] XFS (loop0): Ending clean mount
[  219.342712][ T9868] XFS (loop0): Quotacheck needed: Please wait.
[  219.389315][   T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  219.394868][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.423535][ T9868] XFS (loop0): Quotacheck: Done.
[  219.507582][ T5855] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  219.706510][ T5884] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  219.821224][ T9896] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1406'.
[  219.854654][ T9898] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  219.858705][ T9900] loop0: detected capacity change from 0 to 256
[  219.868392][ T5884] usb 5-1: Using ep0 maxpacket: 32
[  219.883745][ T9900] FAT-fs (loop0): Directory bread(block 64) failed
[  219.888905][ T9900] FAT-fs (loop0): Directory bread(block 65) failed
[  219.891064][ T5884] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  219.891585][ T9900] FAT-fs (loop0): Directory bread(block 66) failed
[  219.894488][ T5884] usb 5-1: config 0 has no interface number 0
[  219.898493][ T9900] FAT-fs (loop0): Directory bread(block 67) failed
[  219.905114][ T9900] FAT-fs (loop0): Directory bread(block 68) failed
[  219.919590][ T5884] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=d8.af
[  219.923268][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.925433][ T9900] FAT-fs (loop0): Directory bread(block 69) failed
[  219.929837][ T9900] FAT-fs (loop0): Directory bread(block 70) failed
[  219.932322][ T9900] FAT-fs (loop0): Directory bread(block 71) failed
[  219.935282][ T9900] FAT-fs (loop0): Directory bread(block 72) failed
[  219.942292][ T5884] usb 5-1: Product: syz
[  219.944052][ T5884] usb 5-1: Manufacturer: syz
[  219.950456][ T5884] usb 5-1: SerialNumber: syz
[  219.953018][ T9900] FAT-fs (loop0): Directory bread(block 73) failed
[  219.958207][ T5884] usb 5-1: config 0 descriptor??
[  220.052690][ T9904] loop0: detected capacity change from 0 to 2048
[  220.106875][ T9904]  loop0: p1 < > p4 < >
[  220.183963][ T5884] usb 5-1: USB disconnect, device number 20
[  220.196183][ T7394] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  220.199886][ T9906] loop0: detected capacity change from 0 to 256
[  220.221616][ T6019] udevd[6019]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  220.231111][ T9906] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x76dfe2a7, utbl_chksum : 0xe619d30d)
[  220.238836][ T9906] exFAT-fs (loop0): failed to load alloc-bitmap
[  220.241410][ T9906] exFAT-fs (loop0): failed to recognize exfat type
[  220.342548][ T9910] loop0: detected capacity change from 0 to 1024
[  220.361220][ T9910] hfsplus: extend alloc file! (8192,512,17039360)
[  220.387562][ T7394] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  220.396072][ T7394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.402118][ T7394] usb 4-1: config 0 descriptor??
[  220.417918][ T7394] cp210x 4-1:0.0: cp210x converter detected
[  220.777955][  T791] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  220.813640][ T7394] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  220.823585][ T7394] usb 4-1: cp210x converter now attached to ttyUSB0
[  220.937721][  T791] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[  220.940318][  T791] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  220.943104][  T791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[  220.946985][  T791] usb 1-1: config 1 has no interface number 0
[  220.949408][  T791] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  220.953028][  T791] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  220.958604][  T791] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  220.962148][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.965817][   T47] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  220.978412][  T791] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[  221.021077][  T974] usb 4-1: USB disconnect, device number 20
[  221.034124][  T974] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  221.044113][  T974] cp210x 4-1:0.0: device disconnected
[  221.115875][   T47] usb 5-1: Using ep0 maxpacket: 16
[  221.123092][   T47] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[  221.126864][   T47] usb 5-1: config 0 has no interface number 0
[  221.129416][   T47] usb 5-1: config 0 interface 101 has no altsetting 0
[  221.134747][   T47] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  221.140051][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.143391][   T47] usb 5-1: Product: syz
[  221.145066][   T47] usb 5-1: Manufacturer: syz
[  221.148089][   T47] usb 5-1: SerialNumber: syz
[  221.152669][   T47] usb 5-1: config 0 descriptor??
[  221.160024][   T47] ums-onetouch 5-1:0.101: USB Mass Storage device detected
[  221.180305][  T791] snd_usb_pod 1-1:1.1: invalid control EP
[  221.182580][  T791] snd_usb_pod 1-1:1.1: cannot start listening: -22
[  221.185498][  T791] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[  221.189247][  T791] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22
[  221.363235][  T791] usb 5-1: USB disconnect, device number 21
[  221.385200][   T47] usb 1-1: USB disconnect, device number 27
[  221.566221][ T9920] loop3: detected capacity change from 0 to 512
[  221.592540][ T9920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.597811][ T9920] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  221.626667][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.678855][ T9924] program syz.3.1418 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  221.771745][ T9926] loop3: detected capacity change from 0 to 4096
[  221.780159][ T9926] ntfs3(loop3): ino=0, mi_enum_attr
[  221.792021][ T9926] ntfs3(loop3): ino=0, mi_enum_attr
[  221.794224][ T9926] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  222.135848][   T47] usb 4-1: new full-speed USB device number 21 using dummy_hcd
[  222.177153][ T9945] sp0: Synchronizing with TNC
[  222.276879][  T791] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  222.309877][   T47] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  222.316463][   T47] usb 4-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  222.319869][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.322928][   T47] usb 4-1: Product: syz
[  222.324782][   T47] usb 4-1: Manufacturer: syz
[  222.327082][   T47] usb 4-1: SerialNumber: syz
[  222.336688][   T47] usb 4-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  222.431806][  T791] usb 1-1: config 0 has an invalid interface number: 101 but max is 0
[  222.434920][  T791] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  222.439133][  T791] usb 1-1: config 0 has no interface number 0
[  222.442335][  T791] usb 1-1: config 0 interface 101 has no altsetting 0
[  222.445073][  T791] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  222.450526][  T791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.458514][  T791] usb 1-1: config 0 descriptor??
[  222.525850][ T7394] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  222.672543][ T5917] usb 1-1: USB disconnect, device number 28
[  222.680707][ T7394] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  222.683588][ T7394] usb 5-1: config 0 has no interface number 0
[  222.686574][ T7394] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  222.689642][ T7394] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  222.693457][ T7394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.698770][ T7394] usb 5-1: config 0 descriptor??
[  222.712297][ T7394] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input19
[  222.906420][ T5917] usb 5-1: USB disconnect, device number 22
[  222.948521][   T47] usb 4-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  222.960042][   T47] usb 4-1: USB disconnect, device number 21
[  223.499038][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'.
[  224.025789][ T5884] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  224.175661][ T5884] usb 5-1: Using ep0 maxpacket: 8
[  224.180673][ T5884] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17
[  224.187182][ T5884] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  224.191009][ T5884] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  224.194421][ T5884] usb 5-1: Product: syz
[  224.196429][ T5884] usb 5-1: Manufacturer: syz
[  224.198458][ T5884] usb 5-1: SerialNumber: syz
[  224.203385][ T5884] usb 5-1: config 0 descriptor??
[  224.412819][ T5884] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  224.645770][   T47] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  224.664350][ T9996] loop0: detected capacity change from 0 to 512
[  224.667353][ T9996] EXT4-fs: Ignoring removed i_version option
[  224.669901][ T9996] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  224.679774][ T9996] EXT4-fs (loop0): 1 truncate cleaned up
[  224.683186][ T9996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.795928][   T47] usb 4-1: Using ep0 maxpacket: 32
[  224.804777][   T47] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  224.808688][   T47] usb 4-1: config 0 has no interface number 0
[  224.811532][   T47] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  224.819122][   T47] usb 4-1: config 0 interface 85 has no altsetting 0
[  224.833396][   T47] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  224.837712][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.841312][   T47] usb 4-1: Product: syz
[  224.843300][   T47] usb 4-1: Manufacturer: syz
[  224.845386][   T47] usb 4-1: SerialNumber: syz
[  224.857374][   T47] usb 4-1: config 0 descriptor??
[  225.283145][ T9992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.293411][ T9992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  225.505727][   T47] appletouch 4-1:0.85: Geyser mode initialized.
[  225.523495][   T47] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input20
[  225.622792][ T5884] gspca_sunplus: reg_w_riv err -71
[  225.628830][ T5884] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  225.644546][ T5884] usb 5-1: USB disconnect, device number 23
[  225.755691][ T5917] usb 4-1: USB disconnect, device number 22
[  225.800639][ T5917] appletouch 4-1:0.85: input: appletouch disconnected
[  225.984349][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.255861][ T5917] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  226.333757][T10007] loop3: detected capacity change from 0 to 8
[  226.352786][T10007] cramfs: Error -5 while decompressing!
[  226.354761][T10007] cramfs: ffffffff99beb628(26)->ffff88802b630000(4096)
[  226.358737][T10007] cramfs: Error -5 while decompressing!
[  226.360531][T10007] cramfs: ffffffff99beb642(26)->ffff88802b631000(4096)
[  226.362737][T10007] cramfs: Error -3 while decompressing!
[  226.364451][T10007] cramfs: ffffffff99beb65c(16)->ffff888038fef000(4096)
[  226.367008][T10007] cramfs: Error -5 while decompressing!
[  226.368858][T10007] cramfs: ffffffff99beb628(26)->ffff88802b630000(4096)
[  226.398129][T10009] loop3: detected capacity change from 0 to 64
[  226.407919][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short
[  226.415053][ T5917] usb 1-1: not running at top speed; connect to a high speed hub
[  226.421719][ T5917] usb 1-1: config 253 has an invalid interface number: 153 but max is 0
[  226.427822][ T5917] usb 1-1: config 253 has no interface number 0
[  226.434991][ T5917] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=56.96
[  226.438541][ T7394] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  226.441626][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.444062][ T5917] usb 1-1: Product: syz
[  226.445336][ T5917] usb 1-1: Manufacturer: syz
[  226.450548][ T5917] usb 1-1: SerialNumber: syz
[  226.598721][ T7394] usb 5-1: config 0 has an invalid interface number: 20 but max is 0
[  226.602180][ T7394] usb 5-1: config 0 has no interface number 0
[  226.604940][ T7394] usb 5-1: config 0 interface 20 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.609592][ T7394] usb 5-1: config 0 interface 20 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.613931][ T7394] usb 5-1: config 0 interface 20 has no altsetting 0
[  226.617238][ T7394] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  226.620935][ T7394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.628189][ T7394] usb 5-1: config 0 descriptor??
[  226.668233][ T5917] usbhid 1-1:253.153: couldn't find an input interrupt endpoint
[  226.674990][ T5917] usb 1-1: USB disconnect, device number 29
[  226.756251][ T5884] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  226.905773][ T5884] usb 4-1: Using ep0 maxpacket: 16
[  226.910032][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  226.913594][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.917065][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  226.921211][ T5884] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  226.923994][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.929326][ T5884] usb 4-1: config 0 descriptor??
[  227.040120][ T7394] logitech-djreceiver 0003:046D:C534.0013: unknown main item tag 0x0
[  227.043029][ T7394] logitech-djreceiver 0003:046D:C534.0013: unknown main item tag 0x0
[  227.046931][ T7394] logitech-djreceiver 0003:046D:C534.0013: unknown main item tag 0x0
[  227.050988][ T7394] logitech-djreceiver 0003:046D:C534.0013: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input20
[  227.245069][   T47] usb 5-1: USB disconnect, device number 24
[  227.337933][ T5884] shield 0003:0955:7214.0014: unknown main item tag 0x0
[  227.340111][ T5884] shield 0003:0955:7214.0014: item fetching failed at offset 2/5
[  227.344370][ T5884] shield 0003:0955:7214.0014: Parse failed
[  227.350370][ T5884] shield 0003:0955:7214.0014: probe with driver shield failed with error -22
[  227.360765][T10019] loop0: detected capacity change from 0 to 512
[  227.368435][T10019] EXT4-fs: Ignoring removed mblk_io_submit option
[  227.379124][T10019] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  227.383193][T10019] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal
[  227.537779][ T5917] usb 4-1: USB disconnect, device number 23
[  227.568903][T10023] loop0: detected capacity change from 0 to 1024
[  227.592112][T10023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.609861][T10023] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  227.613055][T10023] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  227.628783][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.916197][T10041] loop4: detected capacity change from 0 to 2048
[  227.952999][T10041] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  227.960390][T10041] ext4 filesystem being mounted at /254/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.080563][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  228.112364][T10048] input: syz1 as /devices/virtual/input/input21
[  228.206283][  T974] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  228.369661][  T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  228.372479][T10054] loop3: detected capacity change from 0 to 128
[  228.376290][  T974] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  228.376316][  T974] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98
[  228.376327][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.392589][  T974] usb 1-1: config 0 descriptor??
[  228.446396][T10054] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  228.452938][T10054] ext4 filesystem being mounted at /294/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  228.510988][T10050] loop4: detected capacity change from 0 to 4096
[  228.534487][T10050] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  228.589478][T10050] ntfs3(loop4): Failed to initialize MFT zone (-22).
[  228.789739][ T7237] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.165949][   T47] usb 1-1: USB disconnect, device number 30
[  229.266539][ T7394] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  229.342243][T10059] loop4: detected capacity change from 0 to 32768
[  229.357012][T10059] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.388077][T10059] XFS (loop4): Ending clean mount
[  229.396883][T10059] XFS (loop4): Quotacheck needed: Please wait.
[  229.431392][T10059] XFS (loop4): Quotacheck: Done.
[  229.439523][ T7394] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  229.442362][ T7394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.445275][   T33] audit: type=1800 audit(1755337984.316:14493): pid=10059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1477" name="bus" dev="loop4" ino=9291 res=0 errno=0
[  229.452354][ T7394] usb 4-1: Product: syz
[  229.453687][ T7394] usb 4-1: Manufacturer: syz
[  229.455145][ T7394] usb 4-1: SerialNumber: syz
[  229.461780][ T7728] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.463438][ T7394] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  229.495369][  T791] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  229.966025][T10078] loop4: detected capacity change from 0 to 32768
[  230.073914][T10078] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  230.073929][T10078]   allowing incompatible features above 0.0: (unknown version)
[  230.073934][T10078]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  230.089382][T10078] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  230.092804][T10078] bcachefs (loop4): initializing new filesystem
[  230.105037][T10078] bcachefs (loop4): going read-write
[  230.119501][T10078] bcachefs (loop4): marking superblocks
[  230.144880][T10078] bcachefs (loop4): initializing freespace
[  230.150214][T10078] bcachefs (loop4): done initializing freespace
[  230.155233][T10078] bcachefs (loop4): reading snapshots table
[  230.157855][T10078] bcachefs (loop4): reading snapshots done
[  230.182566][T10078] bcachefs (loop4): done starting filesystem
[  230.199510][  T974] usb 4-1: USB disconnect, device number 24
[  230.266021][ T7394] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  230.438571][ T7394] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  230.442257][ T7394] usb 1-1: config 0 has no interface number 0
[  230.444325][ T7394] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  230.448846][ T7394] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.452424][ T7394] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  230.455388][ T7394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.459558][ T7394] usb 1-1: config 0 descriptor??
[  230.512248][T10078] syz.4.1481 (10078) used greatest stack depth: 15056 bytes left
[  230.536004][  T791] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  230.538616][  T791] ath9k_htc: Failed to initialize the device
[  230.543425][  T974] usb 4-1: ath9k_htc: USB layer deinitialized
[  230.604117][ T7728] bcachefs (loop4): shutting down
[  230.607008][ T7728] bcachefs (loop4): going read-only
[  230.609804][ T7728] bcachefs (loop4): finished waiting for writes to stop
[  230.619532][ T7728] bcachefs (loop4): flushing journal and stopping allocators, journal seq 4
[  230.684039][ T7728] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  230.691817][ T7728] bcachefs (loop4): clean shutdown complete, journal seq 5
[  230.694866][ T7728] bcachefs (loop4): marking filesystem clean
[  230.728967][ T7728] bcachefs (loop4): shutdown complete
[  230.873953][ T7394] uclogic 0003:256C:006D.0015: interface is invalid, ignoring
[  231.027827][  T791] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  231.073056][ T7394] usb 1-1: USB disconnect, device number 31
[  231.175760][  T791] usb 4-1: Using ep0 maxpacket: 16
[  231.179444][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  231.182730][  T791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[  231.185891][  T791] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  231.188933][  T791] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  231.193771][  T791] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  231.196835][  T791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.199472][  T791] usb 4-1: Product: syz
[  231.200780][  T791] usb 4-1: Manufacturer: syz
[  231.202233][  T791] usb 4-1: SerialNumber: syz
[  231.205361][  T791] usb 4-1: config 0 descriptor??
[  231.214099][  T791] mcba_usb 4-1:0.0: Can't find endpoints
[  231.415466][  T974] usb 4-1: USB disconnect, device number 25
[  232.172506][T10123] loop0: detected capacity change from 0 to 8192
[  232.262336][T10114] loop4: detected capacity change from 0 to 32768
[  232.285088][T10114] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  232.306404][T10114] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  232.402198][T10133] loop3: detected capacity change from 0 to 256
[  232.408512][T10133] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.424267][T10133] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  232.431348][T10133] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  232.441791][ T7728] ocfs2: Unmounting device (7,4) on (node local)
[  232.444449][T10133] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  232.468022][   T33] audit: type=1800 audit(1755337987.346:14494): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1499" name="file0" dev="loop3" ino=1048678 res=0 errno=0
[  232.499740][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  232.503251][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1498'.
[  232.523573][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1498'.
[  232.535296][T10135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1498'.
[  232.544171][T10135] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1498'.
[  232.613993][ T5234] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  233.088420][T10162] hugetlbfs: Bad value for 'size'
[  233.123271][T10160] loop3: detected capacity change from 0 to 4096
[  233.247365][T10166] loop0: detected capacity change from 0 to 256
[  233.250763][T10166] exfat: Deprecated parameter 'utf8'
[  233.253084][T10166] exfat: Deprecated parameter 'namecase'
[  233.255504][T10166] exfat: Deprecated parameter 'namecase'
[  233.267400][T10166] exfat: Deprecated parameter 'utf8'
[  233.277638][T10169] loop3: detected capacity change from 0 to 16
[  233.288475][T10166] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x5270ca8d, utbl_chksum : 0xe619d30d)
[  233.293435][T10169] erofs (device loop3): mounted with root inode @ nid 36.
[  233.322599][T10169] erofs (device loop3): corrupted dir block 8200 @ nid 36
[  233.363270][T10156] loop4: detected capacity change from 0 to 40427
[  233.373158][T10156] F2FS-fs: heap/no_heap options were deprecated
[  233.384603][T10156] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  233.392995][T10156] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  233.395841][T10156] F2FS-fs (loop4): old and new quota format mixing
[  233.642665][T10181] loop4: detected capacity change from 0 to 512
[  233.645417][T10181] EXT4-fs: Ignoring removed mblk_io_submit option
[  233.659880][T10181] EXT4-fs: Ignoring removed mblk_io_submit option
[  233.680036][T10181] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  233.688939][T10181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  233.694246][T10181] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1520: corrupted in-inode xattr: e_value size too large
[  233.702630][T10181] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1520: couldn't read orphan inode 15 (err -117)
[  233.719148][T10181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.740657][T10181] EXT4-fs (loop4): shut down requested (1)
[  233.816298][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.101057][T10207] loop0: detected capacity change from 0 to 1024
[  234.123487][T10207] hfsplus: keylen 65060 too large
[  234.125292][T10207] hfsplus: xattr searching failed
[  234.245712][ T7394] usb 5-1: new low-speed USB device number 25 using dummy_hcd
[  234.402635][ T7394] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  234.406943][ T7394] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  234.410353][ T7394] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  234.414531][ T7394] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8
[  234.423541][ T7394] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  234.434465][ T7394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.467788][T10203] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  234.479695][ T7394] hub 5-1:1.0: bad descriptor, ignoring hub
[  234.482233][ T7394] hub 5-1:1.0: probe with driver hub failed with error -5
[  234.496998][ T7394] cdc_wdm 5-1:1.0: skipping garbage
[  234.499285][ T7394] cdc_wdm 5-1:1.0: skipping garbage
[  234.501823][ T7394] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  234.841530][ T7394] usb 5-1: USB disconnect, device number 25
[  235.226046][T10222] binder: 10221:10222 unknown command 0
[  235.228391][T10222] binder: 10221:10222 ioctl c0306201 200000000080 returned -22
[  235.551595][T10230] loop0: detected capacity change from 0 to 256
[  235.563602][T10230] FAT-fs (loop0): bogus logical sector size 65535
[  235.568653][T10230] FAT-fs (loop0): Can't find a valid FAT filesystem
[  235.627207][  T974] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  235.775693][  T974] usb 5-1: Using ep0 maxpacket: 16
[  235.781272][  T974] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  235.786192][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.793431][T10225] loop3: detected capacity change from 0 to 40427
[  235.797243][  T974] usb 5-1: Product: syz
[  235.799053][  T974] usb 5-1: Manufacturer: syz
[  235.800478][  T974] usb 5-1: SerialNumber: syz
[  235.806790][T10225] F2FS-fs (loop3): build fault injection rate: 771
[  235.814000][  T974] r8152-cfgselector 5-1: Unknown version 0x0000
[  235.823365][  T974] r8152-cfgselector 5-1: config 0 descriptor??
[  235.827455][  T974] hub 5-1:0.0: bad descriptor, ignoring hub
[  235.829809][T10225] F2FS-fs (loop3): invalid crc value
[  235.844677][  T974] hub 5-1:0.0: probe with driver hub failed with error -5
[  235.901140][T10225] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  235.905984][T10225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  235.934387][   T33] audit: type=1800 audit(1755337990.806:14495): pid=10225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1536" name="file1" dev="loop3" ino=10 res=0 errno=0
[  235.958265][ T7237] syz-executor: attempt to access beyond end of device
[  235.958265][ T7237] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  235.963871][ T7237] CPU: 0 UID: 0 PID: 7237 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  235.963888][ T7237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  235.963894][ T7237] Call Trace:
[  235.963898][ T7237]  <TASK>
[  235.963903][ T7237]  dump_stack_lvl+0x189/0x250
[  235.963921][ T7237]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.963931][ T7237]  ? __pfx_queue_work_on+0x10/0x10
[  235.963940][ T7237]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  235.963952][ T7237]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  235.963969][ T7237]  f2fs_handle_critical_error+0x37c/0x540
[  235.963985][ T7237]  f2fs_write_end_io+0x886/0xb60
[  235.964002][ T7237]  __submit_merged_bio+0x27a/0x6a0
[  235.964017][ T7237]  __submit_merged_write_cond+0x255/0x530
[  235.964031][ T7237]  f2fs_write_data_pages+0x261d/0x3000
[  235.964060][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.964096][ T7237]  ? __lock_acquire+0xab9/0xd20
[  235.964110][ T7237]  ? css_rstat_updated+0x23a/0x4f0
[  235.964126][ T7237]  ? __lock_acquire+0xab9/0xd20
[  235.964141][ T7237]  ? do_raw_spin_lock+0x121/0x290
[  235.964157][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  235.964166][ T7237]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  235.964178][ T7237]  do_writepages+0x32e/0x550
[  235.964195][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  235.964206][ T7237]  filemap_fdatawrite+0x199/0x240
[  235.964217][ T7237]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  235.964252][ T7237]  ? do_raw_spin_unlock+0x4d/0x240
[  235.964263][ T7237]  f2fs_sync_dirty_inodes+0x31f/0x830
[  235.964279][ T7237]  f2fs_write_checkpoint+0x95a/0x1df0
[  235.964299][ T7237]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  235.964328][ T7237]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  235.964336][ T7237]  ? kfree+0x18e/0x440
[  235.964347][ T7237]  ? kill_f2fs_super+0x298/0x6c0
[  235.964358][ T7237]  kill_f2fs_super+0x2c3/0x6c0
[  235.964369][ T7237]  ? __pfx_kill_f2fs_super+0x10/0x10
[  235.964376][ T7237]  ? radix_tree_delete_item+0x2b6/0x400
[  235.964391][ T7237]  ? shrinker_free+0x2ce/0x3e0
[  235.964402][ T7237]  deactivate_locked_super+0xbc/0x130
[  235.964419][ T7237]  cleanup_mnt+0x425/0x4c0
[  235.964429][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.964442][ T7237]  task_work_run+0x1d4/0x260
[  235.964455][ T7237]  ? __pfx_task_work_run+0x10/0x10
[  235.964464][ T7237]  ? __x64_sys_umount+0x122/0x160
[  235.964477][ T7237]  ? exit_to_user_mode_loop+0x40/0x110
[  235.964491][ T7237]  exit_to_user_mode_loop+0xec/0x110
[  235.964502][ T7237]  do_syscall_64+0x2bd/0x3b0
[  235.964512][ T7237]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.964522][ T7237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.964530][ T7237]  ? exc_page_fault+0x9f/0xf0
[  235.964541][ T7237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.964548][ T7237] RIP: 0033:0x7fbd5b18ff17
[  235.964557][ T7237] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  235.964564][ T7237] RSP: 002b:00007ffc93c97378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  235.964574][ T7237] RAX: 0000000000000000 RBX: 00007fbd5b211c05 RCX: 00007fbd5b18ff17
[  235.964579][ T7237] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc93c97430
[  235.964584][ T7237] RBP: 00007ffc93c97430 R08: 0000000000000000 R09: 0000000000000000
[  235.964589][ T7237] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc93c984c0
[  235.964594][ T7237] R13: 00007fbd5b211c05 R14: 0000000000039932 R15: 00007ffc93c98500
[  235.964609][ T7237]  </TASK>
[  235.964612][ T7237] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  236.051276][T10238] loop0: detected capacity change from 0 to 32768
[  236.104980][T10238] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  236.140049][T10238] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  236.208900][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  236.347574][  T974] r8152-cfgselector 5-1: USB disconnect, device number 26
[  236.388064][T10245] loop3: detected capacity change from 0 to 1024
[  236.424562][   T33] audit: type=1800 audit(1755337991.296:14496): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1544" name="file1" dev="loop3" ino=20 res=0 errno=0
[  236.433291][   T33] audit: type=1800 audit(1755337991.306:14497): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1544" name="file1" dev="loop3" ino=20 res=0 errno=0
[  236.640690][T10254] loop0: detected capacity change from 0 to 8192
[  236.817753][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'.
[  236.830124][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'.
[  237.131402][T10264] loop0: detected capacity change from 0 to 1024
[  237.150632][T10264] hfsplus: bad catalog entry type
[  237.387904][T10266] loop0: detected capacity change from 0 to 40427
[  237.393031][T10266] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[  237.396300][T10266] F2FS-fs (loop0): build fault injection rate: 771
[  237.408141][T10266] F2FS-fs (loop0): invalid crc value
[  237.458884][T10266] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  237.464328][T10266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  237.493106][T10271] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  237.735069][   T33] audit: type=1400 audit(1755337992.606:14498): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  238.045792][ T7394] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  238.080580][    C0] vkms_vblank_simulate: vblank timer overrun
[  238.239108][ T7394] usb 4-1: config 8 has an invalid interface number: 79 but max is 0
[  238.246827][ T7394] usb 4-1: config 8 has no interface number 0
[  238.249536][ T7394] usb 4-1: config 8 interface 79 altsetting 9 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  238.259271][ T7394] usb 4-1: config 8 interface 79 has no altsetting 0
[  238.272890][ T7394] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=bc.04
[  238.287984][ T7394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.292909][ T7394] usb 4-1: Product: syz
[  238.294569][ T7394] usb 4-1: Manufacturer: syz
[  238.301781][ T7394] usb 4-1: SerialNumber: syz
[  238.311657][T10281] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  238.524430][ T7394] radio-si470x 4-1:8.79: could not find interrupt in endpoint
[  238.529666][ T7394] radio-si470x 4-1:8.79: probe with driver radio-si470x failed with error -5
[  238.546859][T10311] loop0: detected capacity change from 0 to 4096
[  238.551041][T10311] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  238.556621][ T7394] radio-raremono 4-1:8.79: this is not Thanko's Raremono.
[  238.573387][ T7394] usbhid 4-1:8.79: couldn't find an input interrupt endpoint
[  238.596867][ T7394] usb 4-1: USB disconnect, device number 26
[  238.767733][T10318] loop4: detected capacity change from 0 to 16
[  238.789764][T10318] erofs (device loop4): mounted with root inode @ nid 36.
[  240.083333][ T5234] Bluetooth: hci0: link tx timeout
[  240.092689][ T5234] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  241.958373][T10339] loop0: detected capacity change from 0 to 32768
[  242.001982][T10339] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  242.031227][T10339] (syz.0.1575,10339,0):ocfs2_reflink_ioctl:4417 ERROR: status = -14
[  242.063443][ T5855] (syz-executor,5855,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  242.081969][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  242.083214][T10361] loop3: detected capacity change from 0 to 1024
[  242.097717][T10361] EXT4-fs: inline encryption not supported
[  242.103984][T10361] EXT4-fs: Ignoring removed bh option
[  242.128658][T10361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.147682][ T5234] Bluetooth: hci0: command 0x0406 tx timeout
[  242.216939][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  242.439098][ T7237] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.458489][T10372] loop4: detected capacity change from 0 to 512
[  242.529019][T10372] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002]
[  242.543374][T10372] System zones: 1-12
[  242.547347][T10372] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1582: corrupted in-inode xattr: e_value size too large
[  242.553561][T10372] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1582: couldn't read orphan inode 15 (err -117)
[  242.571356][T10372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  242.661012][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  242.855751][ T5884] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  243.005761][ T5884] usb 4-1: Using ep0 maxpacket: 8
[  243.010161][ T5884] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  243.014596][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.020646][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.024534][ T5884] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  243.031021][  T974] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  243.034307][ T5884] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  243.039211][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.053512][ T5884] usb 4-1: config 0 descriptor??
[  243.185751][  T974] usb 5-1: Using ep0 maxpacket: 32
[  243.192747][  T974] usb 5-1: unable to get BOS descriptor or descriptor too short
[  243.200422][  T974] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  243.204672][  T974] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  243.209908][  T974] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  243.222138][  T974] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  243.227044][  T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.230430][  T974] usb 5-1: Product: syz
[  243.235173][  T974] usb 5-1: Manufacturer: syz
[  243.238773][  T974] usb 5-1: SerialNumber: syz
[  243.281761][  T974] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  243.288330][  T974] cdc_ncm 5-1:1.0: bind() failure
[  243.471800][ T5884] redragon 0003:0C45:760B.0016: Fixing Redragon ASURA report descriptor.
[  243.481274][ T5884] redragon 0003:0C45:760B.0016: unknown main item tag 0x6
[  243.494067][ T5884] redragon 0003:0C45:760B.0016: item fetching failed at offset 7/133
[  243.507913][ T5884] redragon 0003:0C45:760B.0016: probe with driver redragon failed with error -22
[  243.528167][ T7394] usb 5-1: USB disconnect, device number 27
[  243.680533][  T791] usb 4-1: USB disconnect, device number 27
[  243.809861][   T33] audit: type=1326 audit(1755337998.686:14499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10426 comm="syz.0.1591" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f256bd8ebe9 code=0x0
[  244.262592][T10439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'.
[  244.539687][T10443] loop3: detected capacity change from 0 to 32768
[  244.689196][T10449] loop4: detected capacity change from 0 to 8
[  244.714014][T10449] SQUASHFS error: Unable to read inode 0xa7
[  245.153733][T10466] loop3: detected capacity change from 0 to 32768
[  245.200383][   T55] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  245.206079][   T55] Bluetooth: hci2: unexpected event for opcode 0x2062
[  245.249841][T10466] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  245.249862][T10466]   allowing incompatible features above 0.0: (unknown version)
[  245.249867][T10466]   features: 
[  245.262919][T10466] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  245.268645][T10466] bcachefs (loop3): initializing new filesystem
[  245.276350][T10466] bcachefs (loop3): going read-write
[  245.284756][T10466] bcachefs (loop3): marking superblocks
[  245.306859][T10466] bcachefs (loop3): initializing freespace
[  245.316272][T10466] bcachefs (loop3): done initializing freespace
[  245.321706][T10466] bcachefs (loop3): reading snapshots table
[  245.323938][T10466] bcachefs (loop3): reading snapshots done
[  245.350386][T10485] loop0: detected capacity change from 0 to 512
[  245.354317][T10485] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  245.355856][T10466] bcachefs (loop3): done starting filesystem
[  245.382576][T10485] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  245.417201][T10485] EXT4-fs (loop0): 1 truncate cleaned up
[  245.419788][T10485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  245.434965][   T33] audit: type=1800 audit(1755338000.306:14500): pid=10485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1612" name="file1" dev="loop0" ino=15 res=0 errno=0
[  245.468230][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.471573][ T7237] bcachefs (loop3): shutting down
[  245.473839][ T7237] bcachefs (loop3): going read-only
[  245.477279][ T7237] bcachefs (loop3): finished waiting for writes to stop
[  245.519300][ T7237] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  245.590848][T10493] loop4: detected capacity change from 0 to 512
[  245.594444][T10493] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  245.610867][ T7237] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  245.642481][ T7237] bcachefs (loop3): clean shutdown complete, journal seq 4
[  245.647280][ T7237] bcachefs (loop3): marking filesystem clean
[  245.680443][T10493] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.684871][T10493] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.718192][T10493] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #15: comm syz.4.1616: corrupted xattr block 19: overlapping e_value 
[  245.723892][ T7237] bcachefs (loop3): shutdown complete
[  245.725521][T10493] EXT4-fs (loop4): Remounting filesystem read-only
[  246.103569][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.181535][T10505] loop4: detected capacity change from 0 to 128
[  246.363961][T10511] loop4: detected capacity change from 0 to 4096
[  246.375865][T10511] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  246.386379][T10511] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  246.389365][T10511] ntfs3(loop4): Failed to load $MFTMirr (-22).
[  246.512666][T10513] loop4: detected capacity change from 0 to 2048
[  246.523158][T10513] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=26504, location=26504
[  246.530311][T10513] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  246.589087][T10517] loop4: detected capacity change from 0 to 1024
[  246.613761][T10519] loop0: detected capacity change from 0 to 1024
[  246.641339][T10517] hfsplus: invalid xattr key length: 0
[  246.668960][ T3859] hfsplus: b-tree write err: -5, ino 8
[  246.803645][T10521] loop4: detected capacity change from 0 to 4096
[  246.886306][T10521] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  246.989287][ T7728] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22.
[  247.064436][T10527] loop4: detected capacity change from 0 to 16
[  247.079774][T10527] erofs (device loop4): mounted with root inode @ nid 36.
[  247.100823][T10527] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36
[  247.129248][T10527] erofs (device loop4): read error -117 @ 43 of nid 36
[  248.198693][T10536] loop4: detected capacity change from 0 to 1024
[  248.239224][T10536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.252551][T10536] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  248.280830][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  248.287543][T10540] loop0: detected capacity change from 0 to 2048
[  248.297248][T10540] udf: Unexpected value for 'undelete'
[  248.664593][T10544] loop0: detected capacity change from 0 to 40427
[  248.674641][T10544] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  248.686703][T10544] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  248.690723][T10544] F2FS-fs (loop0): invalid crc value
[  248.768020][T10544] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  248.779405][T10544] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  248.782256][T10544] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  248.839589][   T33] audit: type=1800 audit(1755338003.716:14501): pid=10544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1634" name="file1" dev="loop0" ino=10 res=0 errno=0
[  248.851547][T10544] syz.0.1634: attempt to access beyond end of device
[  248.851547][T10544] loop0: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  248.866405][T10548] loop4: detected capacity change from 0 to 32768
[  248.870235][T10548] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1636 (10548)
[  248.879409][T10544] syz.0.1634: attempt to access beyond end of device
[  248.879409][T10544] loop0: rw=0, sector=77888, nr_sectors = 8 limit=40427
[  248.887567][T10548] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.891577][T10548] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  248.895163][T10548] BTRFS info (device loop4): using free-space-tree
[  249.184804][ T7728] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.263359][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  249.282592][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  249.288258][   T55] Bluetooth: hci2: hardware error 0x00
[  249.540881][T10584] loop0: detected capacity change from 0 to 16
[  249.570397][T10584] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  249.575452][T10584] cramfs: wrong endianness
[  249.687919][T10591] tap0: tun_chr_ioctl cmd 1074025677
[  249.691254][T10591] tap0: linktype set to 270
[  249.693754][T10589] loop3: detected capacity change from 0 to 4096
[  249.777680][T10592] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  249.817345][T10589] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  249.828509][T10589] Remounting filesystem read-only
[  250.052733][T10606] loop3: detected capacity change from 0 to 512
[  250.057671][T10606] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  250.277144][   T47] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  250.426818][   T47] usb 5-1: Using ep0 maxpacket: 8
[  250.433649][   T47] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  250.442866][   T47] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  250.447602][   T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  250.466032][   T47] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  250.469861][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.474518][   T47] usb 5-1: Product: syz
[  250.479048][   T47] usb 5-1: Manufacturer: syz
[  250.480942][   T47] usb 5-1: SerialNumber: syz
[  250.482918][T10622] binder: 10621:10622 ioctl c018620b 200000000000 returned -14
[  250.487171][   T47] usb 5-1: config 0 descriptor??
[  250.494297][   T47] imon_raw 5-1:0.0: IR endpoint missing
[  250.544850][T10624] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  250.548679][T10624] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  250.689540][T10628] loop0: detected capacity change from 0 to 4096
[  250.700117][   T47] usb 5-1: USB disconnect, device number 28
[  250.705267][T10628] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  250.711431][T10628] ntfs3(loop0): ino=1, mi_enum_attr
[  250.714196][T10628] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  250.724622][T10628] ntfs3(loop0): Failed to load $MFTMirr (-22).
[  251.335777][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  251.436589][   T47] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  251.605747][   T47] usb 1-1: Using ep0 maxpacket: 8
[  251.609474][   T47] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  251.612927][   T47] usb 1-1: config 1 has no interface number 1
[  251.615406][   T47] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  251.625298][   T47] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  251.629808][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.632982][   T47] usb 1-1: Product: syz
[  251.634562][   T47] usb 1-1: Manufacturer: syz
[  251.642380][T10653] loop3: detected capacity change from 0 to 32768
[  251.645094][   T47] usb 1-1: SerialNumber: syz
[  251.842966][T10663] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  251.871263][   T47] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  251.873808][   T47] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  251.881929][   T47] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  251.883665][   T47] usb 1-1: 2:1 : invalid channels 0
[  251.912173][   T47] usb 1-1: USB disconnect, device number 32
[  252.110953][T10670] loop4: detected capacity change from 0 to 1764
[  252.188467][T10673] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  252.357012][  T974] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  252.526336][  T974] usb 4-1: Using ep0 maxpacket: 32
[  252.530530][  T974] usb 4-1: config 0 has an invalid interface number: 30 but max is 0
[  252.533634][  T974] usb 4-1: config 0 has no interface number 0
[  252.539834][  T974] usb 4-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0
[  252.543231][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.546792][  T974] usb 4-1: Product: syz
[  252.548579][  T974] usb 4-1: Manufacturer: syz
[  252.550402][  T974] usb 4-1: SerialNumber: syz
[  252.556239][  T974] usb 4-1: config 0 descriptor??
[  252.563962][  T974] quatech2 4-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected
[  252.890770][  T791] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  253.067826][  T974] usb 4-1: qt2_attach - failed to power on unit: -71
[  253.070959][  T974] quatech2 4-1:0.30: probe with driver quatech2 failed with error -71
[  253.072141][  T791] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  253.078905][  T974] usb 4-1: USB disconnect, device number 28
[  253.080810][  T791] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  253.085190][  T791] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  253.090903][  T791] usb 1-1: config 220 has no interface number 2
[  253.093486][  T791] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  253.103159][  T791] usb 1-1: config 220 interface 0 has no altsetting 0
[  253.106873][  T791] usb 1-1: config 220 interface 76 has no altsetting 0
[  253.109698][  T791] usb 1-1: config 220 interface 1 has no altsetting 0
[  253.115035][  T791] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  253.118590][  T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.121902][  T791] usb 1-1: Product: syz
[  253.123729][  T791] usb 1-1: Manufacturer: syz
[  253.125576][  T791] usb 1-1: SerialNumber: syz
[  253.343222][  T791] usb 1-1: selecting invalid altsetting 0
[  253.345397][  T791] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  253.348523][  T791] usb 1-1: No valid video chain found.
[  253.354556][  T791] usb 1-1: selecting invalid altsetting 0
[  253.358354][  T791] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  253.410903][  T791] usb 1-1: USB disconnect, device number 33
[  253.493015][T10696] loop4: detected capacity change from 0 to 1024
[  253.498983][T10696] EXT4-fs: inline encryption not supported
[  253.519316][T10696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  254.043976][T10711] loop3: detected capacity change from 0 to 256
[  254.057768][T10711] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x0aeab83c, utbl_chksum : 0xe619d30d)
[  254.077527][T10711] exFAT-fs (loop3): valid_size(10) is greater than size(0)
[  254.533587][ T7728] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.960461][T10730] loop3: detected capacity change from 0 to 136
[  254.976572][T10730] Attempt to read inode for relocated directory
[  255.101724][T10728] loop4: detected capacity change from 0 to 32768
[  255.107809][T10728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1701 (10728)
[  255.118143][T10728] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  255.122215][T10728] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  255.126239][T10728] BTRFS info (device loop4): using free-space-tree
[  255.317948][T10752] loop0: detected capacity change from 0 to 512
[  255.321225][T10752] EXT4-fs: Ignoring removed i_version option
[  255.323512][T10752] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  255.377811][T10752] EXT4-fs (loop0): 1 truncate cleaned up
[  255.380898][T10752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.499792][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.502551][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  255.518571][ T5855] EXT4-fs warning (device loop0): ext4_xattr_inode_create:1469: refuse to create EA inode when umounting
[  255.535941][ T5855] ------------[ cut here ]------------
[  255.538227][ T5855] WARNING: CPU: 0 PID: 5855 at fs/ext4/xattr.c:1470 ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.542203][ T5855] Modules linked in:
[  255.544528][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  255.550842][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.554635][ T5855] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.557467][ T5855] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 cb c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  255.565035][ T5855] RSP: 0018:ffffc900031cf3e0 EFLAGS: 00010246
[  255.567473][ T5855] RAX: 8c592cc94f8ac400 RBX: ffff8880233f0000 RCX: 8c592cc94f8ac400
[  255.570541][ T5855] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  255.573585][ T5855] RBP: ffffc900031cf570 R08: ffffc900031cefc7 R09: 1ffff92000639df8
[  255.576924][ T5855] R10: dffffc0000000000 R11: fffff52000639df9 R12: 1ffff92000639e90
[  255.580054][ T5855] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888032229f70
[  255.580274][  T974] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  255.583266][ T5855] FS:  000055556865b500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  255.589731][ T5855] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.592240][ T5855] CR2: 00005590a9c37668 CR3: 0000000107aa4000 CR4: 00000000000006f0
[  255.595292][ T5855] Call Trace:
[  255.597261][ T5855]  <TASK>
[  255.598485][ T5855]  ? __pfx___might_resched+0x10/0x10
[  255.600519][ T5855]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  255.603125][ T5855]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  255.605179][ T5855]  ext4_xattr_block_set+0x223/0x2ac0
[  255.607754][ T5855]  ? __pfx___might_resched+0x10/0x10
[  255.609859][ T5855]  ? __pfx_check_xattrs+0x10/0x10
[  255.611888][ T5855]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  255.614155][ T5855]  ? ext4_xattr_block_find+0x2d4/0x350
[  255.616756][ T5855]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  255.619106][ T5855]  __ext4_expand_extra_isize+0x30d/0x400
[  255.621346][ T5855]  __ext4_mark_inode_dirty+0x46c/0x700
[  255.623535][ T5855]  ext4_dirty_inode+0xd0/0x110
[  255.625362][ T5855]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  255.627935][ T5855]  __mark_inode_dirty+0x2d1/0xdf0
[  255.628831][T10728] BTRFS info (device loop4 state M): resize thread pool 4 -> 2097158
[  255.629982][ T5855]  iput+0x1ee/0x9d0
[  255.630007][ T5855]  __dentry_kill+0x209/0x660
[  255.630023][ T5855]  ? shrink_kill+0x8d/0x2c0
[  255.630038][ T5855]  shrink_kill+0xa9/0x2c0
[  255.633285][T10728] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  255.634877][ T5855]  shrink_dentry_list+0x2e0/0x5e0
[  255.634901][ T5855]  shrink_dcache_parent+0xa1/0x2c0
[  255.634920][ T5855]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  255.634935][ T5855]  ? call_rcu+0x6ff/0x9c0
[  255.634960][ T5855]  do_one_tree+0x23/0xe0
[  255.637732][T10728] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  255.639518][ T5855]  shrink_dcache_for_umount+0xa0/0x170
[  255.639540][ T5855]  generic_shutdown_super+0x67/0x2c0
[  255.639562][ T5855]  kill_block_super+0x44/0x90
[  255.639581][ T5855]  ext4_kill_sb+0x68/0xb0
[  255.641415][T10728] BTRFS warning (device loop4 state M): remount supports changing free space tree only from RO to RW
[  255.646352][ T5855]  deactivate_locked_super+0xbc/0x130
[  255.647870][T10728] BTRFS info (device loop4 state M): disabling log replay at mount time
[  255.650384][ T5855]  cleanup_mnt+0x425/0x4c0
[  255.652156][T10728] BTRFS info (device loop4 state M): force clearing of disk cache
[  255.653868][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.653895][ T5855]  task_work_run+0x1d4/0x260
[  255.653919][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  255.653936][ T5855]  ? __x64_sys_umount+0x122/0x160
[  255.655805][T10728] BTRFS info (device loop4 state M): ignoring bad roots
[  255.655820][T10728] BTRFS info (device loop4 state M): ignoring data csums
[  255.655831][T10728] BTRFS info (device loop4 state M): ignoring meta csums
[  255.655840][T10728] BTRFS info (device loop4 state M): ignoring unknown super block flags
[  255.703420][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  255.705531][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  255.707617][ T5855]  do_syscall_64+0x2bd/0x3b0
[  255.709048][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.710729][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.713036][ T5855]  ? exc_page_fault+0x9f/0xf0
[  255.714911][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.717331][ T5855] RIP: 0033:0x7f256bd8ff17
[  255.719187][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  255.727600][ T5855] RSP: 002b:00007ffdf6b837c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  255.730807][ T5855] RAX: 0000000000000000 RBX: 00007f256be11c05 RCX: 00007f256bd8ff17
[  255.733962][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf6b83880
[  255.737335][ T5855] RBP: 00007ffdf6b83880 R08: 0000000000000000 R09: 0000000000000000
[  255.740924][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf6b84910
[  255.744239][ T5855] R13: 00007f256be11c05 R14: 000000000003e53f R15: 00007ffdf6b84950
[  255.747472][ T5855]  </TASK>
[  255.748795][ T5855] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  255.751676][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  255.756380][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  255.760364][ T5855] Call Trace:
[  255.761719][ T5855]  <TASK>
[  255.762882][ T5855]  dump_stack_lvl+0x99/0x250
[  255.764638][ T5855]  ? __asan_memcpy+0x40/0x70
[  255.766502][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.768493][ T5855]  ? __pfx__printk+0x10/0x10
[  255.770300][ T5855]  vpanic+0x281/0x750
[  255.771897][ T5855]  ? __pfx__printk+0x10/0x10
[  255.773594][ T5855]  ? __pfx_vpanic+0x10/0x10
[  255.775364][ T5855]  ? is_bpf_text_address+0x26/0x2b0
[  255.777287][ T5855]  panic+0xb9/0xc0
[  255.778803][ T5855]  ? __pfx_panic+0x10/0x10
[  255.780513][ T5855]  __warn+0x31b/0x4b0
[  255.782036][ T5855]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.784398][ T5855]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.786829][ T5855]  report_bug+0x2be/0x4f0
[  255.788503][ T5855]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.790963][ T5855]  ? ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.793464][ T5855]  ? ext4_xattr_inode_lookup_create+0xa82/0x1c20
[  255.795929][ T5855]  handle_bug+0x84/0x160
[  255.797593][ T5855]  exc_invalid_op+0x1a/0x50
[  255.799276][ T5855]  asm_exc_invalid_op+0x1a/0x20
[  255.801212][ T5855] RIP: 0010:ext4_xattr_inode_lookup_create+0xa80/0x1c20
[  255.803957][ T5855] Code: 8b 74 24 10 e9 d4 03 00 00 e8 ec b3 3a ff 48 89 df 48 c7 c6 cb c7 97 8d ba bd 05 00 00 48 c7 c1 c0 e3 9f 8b e8 21 28 fc ff 90 <0f> 0b 90 49 c7 c7 ea ff ff ff 4c 8b 74 24 10 e9 bb 03 00 00 48 8d
[  255.811390][ T5855] RSP: 0018:ffffc900031cf3e0 EFLAGS: 00010246
[  255.813750][ T5855] RAX: 8c592cc94f8ac400 RBX: ffff8880233f0000 RCX: 8c592cc94f8ac400
[  255.816829][ T5855] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  255.819808][ T5855] RBP: ffffc900031cf570 R08: ffffc900031cefc7 R09: 1ffff92000639df8
[  255.823592][ T5855] R10: dffffc0000000000 R11: fffff52000639df9 R12: 1ffff92000639e90
[  255.826805][ T5855] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888032229f70
[  255.830089][ T5855]  ? __pfx___might_resched+0x10/0x10
[  255.832298][ T5855]  ? __pfx_ext4_xattr_inode_lookup_create+0x10/0x10
[  255.835023][ T5855]  ? ext4_xattr_block_set+0xd6/0x2ac0
[  255.837275][ T5855]  ext4_xattr_block_set+0x223/0x2ac0
[  255.839507][ T5855]  ? __pfx___might_resched+0x10/0x10
[  255.841714][ T5855]  ? __pfx_check_xattrs+0x10/0x10
[  255.843804][ T5855]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  255.846105][ T5855]  ? ext4_xattr_block_find+0x2d4/0x350
[  255.848232][ T5855]  ext4_expand_extra_isize_ea+0x12d5/0x1ea0
[  255.850525][ T5855]  __ext4_expand_extra_isize+0x30d/0x400
[  255.852934][ T5855]  __ext4_mark_inode_dirty+0x46c/0x700
[  255.855128][ T5855]  ext4_dirty_inode+0xd0/0x110
[  255.857064][ T5855]  ? __pfx_ext4_dirty_inode+0x10/0x10
[  255.859259][ T5855]  __mark_inode_dirty+0x2d1/0xdf0
[  255.861371][ T5855]  iput+0x1ee/0x9d0
[  255.862911][ T5855]  __dentry_kill+0x209/0x660
[  255.864796][ T5855]  ? shrink_kill+0x8d/0x2c0
[  255.866663][ T5855]  shrink_kill+0xa9/0x2c0
[  255.868410][ T5855]  shrink_dentry_list+0x2e0/0x5e0
[  255.870413][ T5855]  shrink_dcache_parent+0xa1/0x2c0
[  255.872804][ T5855]  ? __pfx_shrink_dcache_parent+0x10/0x10
[  255.875188][ T5855]  ? call_rcu+0x6ff/0x9c0
[  255.877036][ T5855]  do_one_tree+0x23/0xe0
[  255.878706][ T5855]  shrink_dcache_for_umount+0xa0/0x170
[  255.881032][ T5855]  generic_shutdown_super+0x67/0x2c0
[  255.883201][ T5855]  kill_block_super+0x44/0x90
[  255.885080][ T5855]  ext4_kill_sb+0x68/0xb0
[  255.886939][ T5855]  deactivate_locked_super+0xbc/0x130
[  255.889056][ T5855]  cleanup_mnt+0x425/0x4c0
[  255.890851][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.893006][ T5855]  task_work_run+0x1d4/0x260
[  255.894907][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  255.896884][ T5855]  ? __x64_sys_umount+0x122/0x160
[  255.898852][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  255.901246][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  255.903484][ T5855]  do_syscall_64+0x2bd/0x3b0
[  255.905371][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.907458][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.909906][ T5855]  ? exc_page_fault+0x9f/0xf0
[  255.911947][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.914869][ T5855] RIP: 0033:0x7f256bd8ff17
[  255.916769][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  255.924676][ T5855] RSP: 002b:00007ffdf6b837c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  255.928695][ T5855] RAX: 0000000000000000 RBX: 00007f256be11c05 RCX: 00007f256bd8ff17
[  255.932052][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdf6b83880
[  255.935369][ T5855] RBP: 00007ffdf6b83880 R08: 0000000000000000 R09: 0000000000000000
[  255.938721][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdf6b84910
[  255.941929][ T5855] R13: 00007f256be11c05 R14: 000000000003e53f R15: 00007ffdf6b84950
[  255.945092][ T5855]  </TASK>
[  255.947054][ T5855] Kernel Offset: disabled
[  255.948913][ T5855] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:53:30  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000078 RBX=0000000000000078 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900031ceb90
R8 =ffff888107478237 R9 =1ffff11020e8f046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98fb R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556865b500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005590a9c37668 CR3=0000000107aa4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fccbd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff99afba60 RBX=ffffffff8e139ee0 RCX=0000000000000001 RDX=0000000000000000
RSI=0000000000000000 RDI=ffff8880229b8000 RBP=ffffffff8172c195 RSP=ffffc900074cf028
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc900074cf278 R11=ffffffff81ac3870
R12=0000000000000002 R13=ffffffff8e139ee0 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff819d5f0b RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fccbdd266c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fccb3bff000 CR3=0000000020900000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007fccbdd255a0 00007fccbdd25580
XMM02=00007fccbdd256e0 00007fccbdd25560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007fccbdd255a0 XMM05=0000000000000000 00007fccbdd256e0
XMM06=00007fccbdd256e0 00007fccbdd25560 XMM07=00007fccbdd255a0 00007fccbdd25580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fccbd012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
