last executing test programs:

2m11.661310644s ago: executing program 1 (id=2240):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbfb, {0x2, 0x20, 0x56, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})

2m11.661002363s ago: executing program 1 (id=2241):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="911046000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

2m11.599261432s ago: executing program 1 (id=2242):
r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0xeee, 0x1a1040)
unshare(0x2a000400)
fcntl$setflags(r0, 0x2, 0x0)

2m11.598890229s ago: executing program 1 (id=2243):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x84)
lseek(r0, 0x1, 0x0)

2m11.49401309s ago: executing program 1 (id=2244):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30]}}}}]})
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x420, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}]})

2m11.187894472s ago: executing program 1 (id=2245):
socket$kcm(0x2, 0xa, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = memfd_secret(0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440100001a00ffff2abd7000030000000a01010100000000000000000000000000000000000000000000000000000001000000004e240000000020a01100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d46c000000fc010000000000000000000000000000000000000100000000000000000000000000000000000000fdffffffffffffffff07000000000000fcffff"], 0x144}}, 0x40040)
r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r0})
io_uring_enter(r2, 0x2d3c, 0x0, 0x0, 0x0, 0x0)

2m11.057028917s ago: executing program 32 (id=2245):
socket$kcm(0x2, 0xa, 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socket$inet_smc(0x2b, 0x1, 0x0)
r1 = memfd_secret(0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440100001a00ffff2abd7000030000000a01010100000000000000000000000000000000000000000000000000000001000000004e240000000020a01100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d46c000000fc010000000000000000000000000000000000000100000000000000000000000000000000000000fdffffffffffffffff07000000000000fcffff"], 0x144}}, 0x40040)
r2 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[@ANYRES64=r5], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r6, 0x0, r0})
io_uring_enter(r2, 0x2d3c, 0x0, 0x0, 0x0, 0x0)

1m26.846973443s ago: executing program 0 (id=2662):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000001400)="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", 0x571, 0x6d91fb6102dc910c, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x30, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast1, @mcast2}}}}}}}, 0x0)
sendmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="0f86eabc3b111c6b135dde956c8de9f596ad81cf9c1c19d387f036934f94d35f09f6ac1207c1570df55fcaf907398c0c32d2ac9e7fbcda8ed0b9b989", 0x3c}, {0x0}], 0x2}}], 0x1, 0x4061)

1m26.846329021s ago: executing program 0 (id=2664):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x56209516, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x0, 0x2018, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})

1m26.846069905s ago: executing program 0 (id=2665):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d800000012"], 0xd8}, 0x1, 0x0, 0x0, 0x44040}, 0x0)

1m26.730528872s ago: executing program 0 (id=2667):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@test_dummy_encryption}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000000c0)='./bus\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m26.665010051s ago: executing program 0 (id=2668):
syz_usb_connect(0x2, 0x26, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xba, 0x3e, 0x5e, 0x10, 0x1410, 0x9010, 0x23c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14, 0x1, 0x6, 0x75, 0x80, 0x0, [{{0x9, 0x4, 0xd0, 0xfd, 0x0, 0x2, 0x6, 0x0, 0x21, [@generic={0x2, 0x9}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x96, 0x0})

1m26.306894773s ago: executing program 0 (id=2669):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040))

1m26.229215146s ago: executing program 33 (id=2669):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001040))

2.60477223s ago: executing program 3 (id=3596):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=")
syz_mount_image$bfs(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x1, 0xb0, &(0x7f0000000500)="$eJzs1z9KA0EcBeC3i/in0QN4hz2BIB5FrEQ7K0XIiXKVHCFtqhRp00wIky3CErKkWQLfBzPwm1fMFNO8xXb+nMekzJJym73S+/n9+3r/rnsGmuERV6fNZ+6S3Kf+gTbJ+q1mTeq83Px/9CvJzdRvBgAALtOmy+vqaO5y6APnjaoCLw8no/I06hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACACe0CAAD//73NIaI=")
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[], [], 0x2f})

2.483940069s ago: executing program 3 (id=3598):
syz_usb_connect(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xd, 0x15, 0x13, 0x10, 0x424, 0x12c, 0x5861, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x94, 0x6, 0x2, 0xc5, 0xc7, 0x77, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x9, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x4, 0x9, 0x5}}]}}]}}]}}, 0x0)

2.483728231s ago: executing program 4 (id=3599):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000001c931, 0xffffffffffffffff, 0x0)

2.454058999s ago: executing program 4 (id=3600):
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88821000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000)

2.289563002s ago: executing program 4 (id=3601):
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000351000/0x2000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)=<r5=>0x0)
syz_open_procfs$pagemap(r5, &(0x7f0000000280))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x10e, &(0x7f0000000700)={[{@debug}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x402}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@minixdf}, {@errors_remount}]}, 0x3, 0x468, &(0x7f0000000a80)="$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")

1.140713572s ago: executing program 4 (id=3607):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='0\x00', 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35b", 0x6)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40)
mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil)

1.001599228s ago: executing program 4 (id=3608):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x40, r0, 0x1, 0x0, 0x1, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb2, 0x3e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}]]}, 0x40}}, 0x0)

1.001071524s ago: executing program 4 (id=3609):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040080010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, "741cb976"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_disconnect(r0)

836.193099ms ago: executing program 2 (id=3610):
pipe(&(0x7f00000001c0))
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x1000000, 0x800, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x8, 0x3, 0x1ff, 0x3d, 0x963, 0x3, 0x53, 0x2, 0x1, 0xc})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x8000)
syz_emit_ethernet(0x6a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaa"], 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x600, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
gettid()

835.937506ms ago: executing program 2 (id=3611):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x4000010)

835.563912ms ago: executing program 2 (id=3612):
fsopen(&(0x7f00000001c0)='reiserfs\x00', 0x0)

738.502225ms ago: executing program 2 (id=3613):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f1585231b560608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})

738.226544ms ago: executing program 2 (id=3614):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003})
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file1\x00')

732.683838ms ago: executing program 3 (id=3615):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})

633.371464ms ago: executing program 3 (id=3616):
keyctl$clear(0x3, 0xfffffffffffffffd)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x40000000, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)='(\\%\xd5y\xd4e/\']\\\x81\xac', 0x0)

370.543122ms ago: executing program 3 (id=3617):
r0 = socket(0x80000000000000a, 0x2, 0x0)
bind$802154_dgram(r0, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x9, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0xfff, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
close(r0)

297.196887ms ago: executing program 3 (id=3618):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x443f, &(0x7f00000088c0)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000240)='.\x00', &(0x7f0000000000), 0x0, 0x0, 0x0)

0s ago: executing program 2 (id=3619):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x4}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'tunl0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f00000000c0)='?', 0x1, 0x0, &(0x7f0000000540)={0x11, 0x8847, r2, 0x1, 0xfd, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

 Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  318.159399][T12970] XFS (loop3): Ending clean mount
[  318.170401][T12970] XFS (loop3): Quotacheck needed: Please wait.
[  318.237767][ T5847] Bluetooth: hci1: command tx timeout
[  318.343604][T12970] XFS (loop3): Quotacheck: Done.
[  318.356466][ T5886] team0 (unregistering): Port device team_slave_1 removed
[  318.410038][ T5886] team0 (unregistering): Port device team_slave_0 removed
[  318.449426][T11715] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  318.885576][T12984] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[  319.837374][T13000] loop3: detected capacity change from 0 to 4096
[  319.972253][T13000] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  320.030318][T11715] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  320.109780][T13006] program syz.2.2703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  320.261698][T12854] veth0_macvtap: entered promiscuous mode
[  320.276275][T12854] veth1_macvtap: entered promiscuous mode
[  320.314119][T12854] batman_adv: batadv0: Interface activated: batadv_slave_0
[  320.350875][T12854] batman_adv: batadv0: Interface activated: batadv_slave_1
[  320.376361][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  320.464529][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  320.469493][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  320.486678][ T5847] Bluetooth: hci1: command tx timeout
[  320.513808][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  321.649991][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.653024][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  321.705537][T13030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  321.717742][ T3563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  321.720802][ T3563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.065587][T13052] loop4: detected capacity change from 0 to 512
[  322.989784][ T5847] Bluetooth: hci1: command tx timeout
[  323.296847][T13069] loop3: detected capacity change from 0 to 1024
[  323.299577][T13069] EXT4-fs: Ignoring removed nobh option
[  323.346826][T13069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  324.096664][T13075] loop2: detected capacity change from 0 to 131072
[  324.099934][T13075] F2FS-fs (loop2): Test dummy encryption mode enabled
[  324.105266][T13075] F2FS-fs (loop2): invalid crc value
[  324.147403][T13075] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  324.154006][T13075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  324.223320][T13072] loop4: detected capacity change from 0 to 32768
[  324.252384][T13072] XFS: ikeep mount option is deprecated.
[  324.327579][T13072] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  324.433049][T13072] XFS (loop4): Ending clean mount
[  324.442119][T13072] XFS (loop4): Quotacheck needed: Please wait.
[  324.531230][T13072] XFS (loop4): Quotacheck: Done.
[  324.735263][T12854] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  325.043957][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.351735][T13129] vivid-004: disconnect
[  325.384892][T13120] vivid-004: reconnect
[  325.849141][T13148] loop4: detected capacity change from 0 to 32768
[  325.888520][T13148] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  325.910516][T13148] (syz.4.2734,13148,1):ocfs2_mknod:505 ERROR: status = -31
[  325.919794][T13148] (syz.4.2734,13148,1):ocfs2_mkdir:661 ERROR: status = -31
[  325.981783][T12854] ocfs2: Unmounting device (7,4) on (node local)
[  326.483888][T13204] loop4: detected capacity change from 0 to 1024
[  326.500022][   T10] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  326.518361][T13204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  326.523565][T13204] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  326.569091][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.683387][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  326.693788][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[  326.700084][   T10] usb 3-1: config 4 has an invalid interface number: 32 but max is 0
[  326.703478][   T10] usb 3-1: config 4 has no interface number 0
[  326.717616][   T10] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  326.721366][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.725173][   T10] usb 3-1: Product: syz
[  326.727364][   T10] usb 3-1: Manufacturer: syz
[  326.729261][   T10] usb 3-1: SerialNumber: syz
[  326.748759][   T24] usb 4-1: new low-speed USB device number 16 using dummy_hcd
[  326.917391][   T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  326.920903][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.928975][   T24] usb 4-1: config 0 descriptor??
[  327.074678][   T10] usb 3-1: Found UVC 0.02 device syz (17dc:0202)
[  327.077714][   T10] usb 3-1: No valid video chain found.
[  327.093776][   T10] usb 3-1: USB disconnect, device number 49
[  328.788839][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2760'.
[  328.998497][T13288] loop4: detected capacity change from 0 to 256
[  329.002855][T13288] exfat: Unknown parameter 'sys_tz'
[  329.085419][T13290] loop4: detected capacity change from 0 to 4096
[  329.100001][T13290] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  329.116624][T13290] ntfs3(loop4): ino=19, mi_enum_attr
[  329.118813][T13290] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  329.219532][   T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71
[  329.224627][   T24] asix 4-1:0.0: probe with driver asix failed with error -71
[  329.231458][   T24] usb 4-1: USB disconnect, device number 16
[  329.323830][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  329.326458][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  330.293397][T13302] loop3: detected capacity change from 0 to 32768
[  330.297640][T13302] btrfs: Deprecated parameter 'usebackuproot'
[  330.300032][T13302] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  330.304836][T13302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2771 (13302)
[  330.352028][T13302] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  330.364179][T13302] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  330.372808][T13302] BTRFS info (device loop3): using free-space-tree
[  330.451137][ T3563] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  330.470835][T13302] BTRFS warning (device loop3): couldn't read tree root
[  330.478976][T13302] BTRFS warning (device loop3): try to load backup roots slot 1
[  330.485872][ T3622] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  330.490398][T13302] BTRFS warning (device loop3): couldn't read tree root
[  330.493246][T13302] BTRFS warning (device loop3): try to load backup roots slot 2
[  330.496199][ T3563] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  330.502981][T13302] BTRFS warning (device loop3): couldn't read tree root
[  330.522336][T13302] BTRFS warning (device loop3): try to load backup roots slot 3
[  330.589198][T13302] BTRFS info (device loop3): rebuilding free space tree
[  330.618511][T13302] BTRFS info (device loop3): checking UUID tree
[  331.382330][T13338] loop2: detected capacity change from 0 to 16
[  331.393213][T13338] erofs (device loop2): mounted with root inode @ nid 36.
[  331.459322][T11715] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  331.464173][   T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  331.630434][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  331.633658][   T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.634592][T13343] team_slave_0: entered promiscuous mode
[  331.639947][T13343] team_slave_1: entered promiscuous mode
[  331.642564][T13343] bond_slave_0: entered promiscuous mode
[  331.645709][   T24] usb 5-1: config 1 interface 1 has no altsetting 1
[  331.647561][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.649077][T13343] bond_slave_1: entered promiscuous mode
[  331.651818][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.651830][   T24] usb 5-1: Product: syz
[  331.654331][T13343] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  331.666581][   T24] usb 5-1: Manufacturer: syz
[  331.668900][   T24] usb 5-1: SerialNumber: syz
[  331.764785][T13347] loop2: detected capacity change from 0 to 128
[  332.215713][T13351] loop3: detected capacity change from 0 to 65536
[  332.221350][   T24] usb 5-1: selecting invalid altsetting 1
[  332.223818][   T24] cdc_ncm 5-1:1.0: bind() failure
[  332.232799][T13351] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  332.238130][   T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  332.240582][   T24] cdc_ncm 5-1:1.1: bind() failure
[  332.250596][T13351] XFS (loop3): Ending clean mount
[  332.285591][   T33] audit: type=1800 audit(1755104535.659:111): pid=13351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2784" name="file2" dev="loop3" ino=42 res=0 errno=0
[  332.412771][T13367] bfs: Unknown parameter 'ip6_vti0'
[  332.506937][   T24] usb 5-1: USB disconnect, device number 2
[  332.972646][T11715] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  333.350991][T13387] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2793'.
[  333.498499][   T47] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  333.512730][T13393] loop3: detected capacity change from 0 to 2048
[  333.518017][T13393] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  333.525236][T13393] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  333.530665][T13393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  333.610987][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2797'.
[  333.664289][   T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  333.671276][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 34151, setting to 64
[  333.682420][   T47] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=d4.aa
[  333.687524][   T47] usb 5-1: New USB device strings: Mfr=16, Product=150, SerialNumber=0
[  333.697569][   T47] usb 5-1: Product: syz
[  333.700332][   T47] usb 5-1: Manufacturer: syz
[  333.705263][   T47] usb 5-1: config 0 descriptor??
[  333.710054][T13383] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  333.727140][   T47] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input26
[  333.734405][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.738738][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.741640][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.744556][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.747473][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.750660][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.754536][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.757426][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.761294][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.764265][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.767379][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.778077][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.781165][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.784163][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.787611][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.790493][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.793752][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.796632][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.799416][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.805392][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.809180][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.812200][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.815361][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.818958][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.821807][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.824846][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.827620][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.830436][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.833657][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.836453][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.839307][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.842171][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.845095][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.848478][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.851357][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.854265][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.857353][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.860551][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.864072][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.867142][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.870042][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.872924][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.875778][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.887835][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.891196][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.894545][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.897483][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.900554][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.903454][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.906254][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.909049][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.912543][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.915446][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.918304][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.921395][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.924176][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.927464][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.930362][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.933424][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.936361][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.936521][ T5282] usb 5-1: control msg error: -71
[  333.939192][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.945187][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.948042][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.950843][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.953921][    C0] usb 5-1: pegasus_irq - urb shutting down with status: -2
[  333.958180][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.961000][ T5282] usb 5-1: control msg error: -71
[  333.961081][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.963292][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.965994][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.968723][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.971483][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.974947][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.977827][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.980598][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.983406][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.986325][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.989681][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.992403][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.995143][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  333.998125][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.000961][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.004336][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.007102][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.010005][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.012768][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.015776][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.018669][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.021863][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.024619][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.027407][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.030265][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.033243][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.036521][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.039182][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.041941][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.044563][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.047292][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.050066][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.053509][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.056180][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.058951][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.061890][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.064716][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.068018][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.070776][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.073572][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.076349][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.079483][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.082867][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.085827][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.088589][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.091256][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.093966][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.096657][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.099944][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.102625][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.105309][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.108022][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.110662][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.112181][T13413] fuse: Bad value for 'fd'
[  334.114109][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.120616][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.123497][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.126360][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.129974][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.135268][    C0] usb 5-1: pegasus_irq - urb shutting down with status: -2
[  334.150853][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.154365][    C0] usb 5-1: pegasus_irq - nonzero urb status received: -71
[  334.155365][   T47] usb 5-1: USB disconnect, device number 3
[  334.156999][    C0] usb 5-1: pegasus_irq - usb_submit_urb failed with result -19
[  334.171590][ T5282] usb 5-1: control msg error: -19
[  334.473527][ T5899] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  334.564513][T13430] loop4: detected capacity change from 0 to 4096
[  334.570763][T13430] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  334.647075][ T5899] usb 3-1: Using ep0 maxpacket: 16
[  334.656780][ T5899] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  334.673601][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.677036][ T5899] usb 3-1: Product: syz
[  334.678701][ T5899] usb 3-1: Manufacturer: syz
[  334.679879][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  334.680707][ T5899] usb 3-1: SerialNumber: syz
[  334.687904][ T5899] usb 3-1: config 0 descriptor??
[  334.783391][T13436] loop4: detected capacity change from 0 to 8
[  334.791058][T13436] unable to read xattr id index table
[  334.869315][    T9] usb 4-1: Using ep0 maxpacket: 8
[  334.877734][    T9] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  334.880801][    T9] usb 4-1: config 2 has no interface number 0
[  334.882668][    T9] usb 4-1: config 2 interface 31 has no altsetting 0
[  334.893362][    T9] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  334.902046][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.904470][    T9] usb 4-1: Product: syz
[  334.905755][    T9] usb 4-1: Manufacturer: syz
[  334.933165][    T9] usb 4-1: SerialNumber: syz
[  334.937303][  T975] usb 3-1: USB disconnect, device number 50
[  335.183333][T13449] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2822'.
[  335.231610][T13451] loop4: detected capacity change from 0 to 512
[  335.239894][T13451] EXT4-fs: Ignoring removed i_version option
[  335.255768][T13451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.345714][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.408752][    T9] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22
[  335.426488][    T9] usb 4-1: USB disconnect, device number 17
[  336.073388][T13459] loop2: detected capacity change from 0 to 32768
[  336.079765][T13459] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  336.211011][T13472] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2829'.
[  336.217394][T13472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2829'.
[  336.225289][T13472] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2829'.
[  336.231724][T13472] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2829'.
[  336.236899][T13472] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2829'.
[  336.475984][T13478] loop2: detected capacity change from 0 to 512
[  336.528585][T13478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  336.536372][T13478] ext4 filesystem being mounted at /1028/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  336.545187][T13484] loop3: detected capacity change from 0 to 512
[  336.559551][T13484] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2834: bad orphan inode 15
[  336.560579][T13486] proc: Bad value for 'gid'
[  336.570154][T13484] ext4_test_bit(bit=14, block=5) = 0
[  336.578159][T13484] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.608057][T13484] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1
[  336.621532][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  336.682533][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.002351][T13510] loop2: detected capacity change from 0 to 128
[  337.014326][T13510] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  337.018560][T13510] ext4 filesystem being mounted at /1032/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  337.061880][T13510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.2843: bg 0: bad block bitmap checksum
[  337.097344][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  337.181357][T13493] loop4: detected capacity change from 0 to 32768
[  337.367024][ T3563] read_mapping_page failed!
[  337.372454][ T3563] ERROR: (device loop4): txCommit: 
[  337.372454][ T3563] 
[  337.395841][ T3563] ERROR: (device loop4): remounting filesystem as read-only
[  337.405244][ T3563] jfs_write_inode: jfs_commit_inode failed!
[  337.906490][T13529] loop4: detected capacity change from 0 to 32768
[  338.000852][T13529] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.042949][T13542] loop3: detected capacity change from 0 to 256
[  338.063647][T13529] XFS (loop4): Ending clean mount
[  338.067352][T13529] XFS (loop4): Quotacheck needed: Please wait.
[  338.072990][T13542] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[  338.080050][T13542] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  338.096129][T13542] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  338.102927][   T33] audit: type=1800 audit(1755104541.022:112): pid=13542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2851" name="file1" dev="loop3" ino=1048688 res=0 errno=0
[  338.124023][T13529] XFS (loop4): Quotacheck: Done.
[  338.150477][T12854] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.436861][T13538] loop2: detected capacity change from 0 to 32768
[  338.455188][T13538] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.488993][T13538] XFS (loop2): Ending clean mount
[  338.495305][T13538] XFS (loop2): Quotacheck needed: Please wait.
[  338.524760][T13563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2854'.
[  338.547471][T13538] XFS (loop2): Quotacheck: Done.
[  338.561603][T13547] loop3: detected capacity change from 0 to 32768
[  338.602979][ T5852] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.615087][T13547] JBD2: Ignoring recovery information on journal
[  338.699476][T13547] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  338.867641][T11715] ocfs2: Unmounting device (7,3) on (node local)
[  339.519820][T13581] loop2: detected capacity change from 0 to 32768
[  339.532353][T13581] XFS: noikeep mount option is deprecated.
[  339.561036][T13581] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  339.613459][T13581] XFS (loop2): Ending clean mount
[  339.621365][T13581] XFS (loop2): Quotacheck needed: Please wait.
[  339.683652][T13581] XFS (loop2): Quotacheck: Done.
[  339.692926][T13613] netlink: 'syz.4.2863': attribute type 1 has an invalid length.
[  339.696696][T13613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2863'.
[  339.731508][ T5852] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  339.783804][T13615] loop4: detected capacity change from 0 to 2048
[  339.848709][T13615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.914793][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.924508][   T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  340.097299][   T10] usb 4-1: Using ep0 maxpacket: 16
[  340.108449][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.113004][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  340.117353][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  340.140069][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  340.151060][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  340.167993][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  340.171005][   T10] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  340.174257][   T10] usb 4-1: Manufacturer: syz
[  340.185716][   T10] usb 4-1: config 0 descriptor??
[  340.303808][T13625] loop4: detected capacity change from 0 to 32768
[  340.314052][T13625] BTRFS warning: excessive commit interval 2147483647, use with care
[  340.321599][T13625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2867 (13625)
[  340.329776][T13625] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.333341][T13625] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  340.336456][T13625] BTRFS error (device loop4): cannot disable free-space-tree
[  340.338901][T13625] BTRFS info (device loop4): disk space caching is enabled
[  340.341066][T13625] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  340.345409][T13625] BTRFS error (device loop4): open_ctree failed: -22
[  340.443296][   T47] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  340.475682][   T10] rc_core: IR keymap rc-hauppauge not found
[  340.477601][   T10] Registered IR keymap rc-empty
[  340.479207][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.508483][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.542816][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  340.560356][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input27
[  340.566805][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.584230][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.605841][   T47] usb 3-1: Using ep0 maxpacket: 32
[  340.607845][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.614331][   T47] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  340.618684][   T47] usb 3-1: config 0 has no interface number 0
[  340.621004][   T47] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  340.624376][   T47] usb 3-1: config 0 interface 85 has no altsetting 0
[  340.629883][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.632886][   T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  340.635961][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.640830][   T47] usb 3-1: Product: syz
[  340.642654][   T47] usb 3-1: Manufacturer: syz
[  340.644838][   T47] usb 3-1: SerialNumber: syz
[  340.649911][   T47] usb 3-1: config 0 descriptor??
[  340.651123][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.681862][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.714493][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.737898][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.757494][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.790922][   T10] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  340.825578][   T10] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  340.829297][   T10] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  340.946206][   T10] usb 4-1: USB disconnect, device number 18
[  341.100181][T13646] loop4: detected capacity change from 0 to 1024
[  341.109569][T13646] EXT4-fs: Ignoring removed oldalloc option
[  341.122174][T13646] EXT4-fs: Ignoring removed bh option
[  341.125872][   T47] appletouch 3-1:0.85: Failed to request geyser raw mode
[  341.130439][   T47] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  341.159436][   T47] usb 3-1: USB disconnect, device number 51
[  341.184345][T13646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.807045][T13655] (unnamed net_device) (uninitialized): option ad_select: invalid value (254)
[  341.984852][T13663] loop2: detected capacity change from 0 to 47
[  342.085226][T13666] autofs4:pid:13666:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a)
[  342.103623][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  342.768036][T13690] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode
[  342.771503][T13690] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  343.000484][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  343.081066][T13697] loop4: detected capacity change from 0 to 32768
[  343.090569][T13697] (syz.4.2885,13697,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780. Applying ECC.
[  343.173574][T13697] (syz.4.2885,13697,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xfaa975d8, computed 0x12eb5780
[  343.184904][T13697] (syz.4.2885,13697,0):ocfs2_verify_volume:2331 ERROR: status = -5
[  343.195474][   T10] usb 4-1: Using ep0 maxpacket: 16
[  343.208451][T13697] (syz.4.2885,13697,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  343.214028][T13697] (syz.4.2885,13697,0):ocfs2_fill_super:1177 ERROR: status = -5
[  343.232044][   T10] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  343.236214][   T10] usb 4-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  343.263621][   T10] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  343.267092][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.282078][   T10] usb 4-1: Product: syz
[  343.287668][   T10] usb 4-1: Manufacturer: syz
[  343.289588][   T10] usb 4-1: SerialNumber: syz
[  343.612941][T13720] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  343.899374][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  343.934838][T13728] loop4: detected capacity change from 0 to 32768
[  343.958915][   T33] audit: type=1800 audit(1755104546.431:113): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2895" name="file1" dev="loop4" ino=4 res=0 errno=0
[  343.984267][  T975] usb 4-1: USB disconnect, device number 19
[  344.072868][    T9] usb 3-1: Using ep0 maxpacket: 8
[  344.083143][    T9] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.087102][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  344.089481][    T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  344.092307][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.097364][    T9] usb 3-1: config 0 descriptor??
[  344.516901][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  344.558413][    T9] isku 0003:1E7D:319C.001D: hidraw0: USB HID v5.59 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0
[  344.610652][T13740] qrtr: Invalid version 0
[  344.679368][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  344.696167][ T5899] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  344.700186][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  344.707785][ T5899] usb 5-1: Product: syz
[  344.709514][ T5899] usb 5-1: Manufacturer: syz
[  344.711482][ T5899] usb 5-1: SerialNumber: syz
[  344.716063][ T5899] usb 5-1: config 0 descriptor??
[  344.721220][ T5899] gspca_main: sq930x-2.14.0 probing 2770:930c
[  344.774761][    T9] usb 3-1: USB disconnect, device number 52
[  345.044869][T13758] netlink: 'syz.3.2910': attribute type 5 has an invalid length.
[  345.231646][T13766] loop3: detected capacity change from 0 to 256
[  345.237546][T13766] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  345.250164][T13766] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  345.565867][T13782] cgroup: Unknown subsys name '@﬽4*oңhoU'
[  345.714544][T13794] loop2: detected capacity change from 0 to 8
[  345.859091][T13801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2928'.
[  345.864703][ T5899] gspca_sq930x: reg_w 0105 0f00 failed -71
[  346.098867][ T5899] gspca_sq930x: Sensor ov9630 not yet treated
[  346.101302][ T5899] sq930x 5-1:0.0: probe with driver sq930x failed with error -22
[  346.119066][ T5899] usb 5-1: USB disconnect, device number 4
[  346.212896][T13820] loop3: detected capacity change from 0 to 1024
[  346.276555][   T27] hfsplus: b-tree write err: -5, ino 4
[  346.372441][T13825] loop3: detected capacity change from 0 to 512
[  346.393250][T13825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  346.410557][T13825] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  346.500558][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.524237][T13821] loop2: detected capacity change from 0 to 40427
[  346.533872][T13821] F2FS-fs (loop2): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[  346.548198][T13821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  346.567850][T13821] F2FS-fs (loop2): invalid crc value
[  346.671345][T13821] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  346.684849][T13821] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  346.687575][T13821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  346.723041][   T33] audit: type=1800 audit(1755104548.969:114): pid=13821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2937" name="file1" dev="loop2" ino=10 res=0 errno=0
[  346.772582][T13844] loop3: detected capacity change from 0 to 1024
[  346.789434][T13834] loop4: detected capacity change from 0 to 32768
[  346.792298][ T5852] syz-executor: attempt to access beyond end of device
[  346.792298][ T5852] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  346.798167][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  346.798201][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  346.798207][ T5852] Call Trace:
[  346.798212][ T5852]  <TASK>
[  346.798218][ T5852]  dump_stack_lvl+0x189/0x250
[  346.798234][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.798244][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  346.798253][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  346.798263][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  346.798278][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  346.798293][ T5852]  f2fs_write_end_io+0x886/0xb60
[  346.798314][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  346.798327][ T5852]  __submit_merged_write_cond+0x255/0x530
[  346.798341][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[  346.798352][ T5852]  ? __lock_acquire+0xab9/0xd20
[  346.798381][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.798415][ T5852]  ? __mod_zone_page_state+0xd7/0x140
[  346.798432][ T5852]  ? folios_put_refs+0x560/0x640
[  346.798448][ T5852]  ? __lock_acquire+0xab9/0xd20
[  346.798490][ T5852]  ? do_raw_spin_lock+0x121/0x290
[  346.798508][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  346.798517][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  346.798529][ T5852]  do_writepages+0x32e/0x550
[  346.798547][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  346.798559][ T5852]  filemap_fdatawrite+0x199/0x240
[  346.798571][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  346.798606][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  346.798618][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[  346.798638][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[  346.798663][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  346.798699][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  346.798713][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  346.798727][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  346.798737][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  346.798751][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  346.798761][ T5852]  deactivate_locked_super+0xbc/0x130
[  346.798772][ T5852]  cleanup_mnt+0x425/0x4c0
[  346.798782][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.798793][ T5852]  task_work_run+0x1d4/0x260
[  346.798806][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  346.798815][ T5852]  ? __x64_sys_umount+0x122/0x160
[  346.798828][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  346.798843][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  346.798854][ T5852]  do_syscall_64+0x2bd/0x3b0
[  346.798864][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.798875][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.798886][ T5852]  ? exc_page_fault+0x9f/0xf0
[  346.798900][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.798912][ T5852] RIP: 0033:0x7f48f138ff17
[  346.798931][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  346.798940][ T5852] RSP: 002b:00007ffca9a56538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  346.798954][ T5852] RAX: 0000000000000000 RBX: 00007f48f1411c05 RCX: 00007f48f138ff17
[  346.798963][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9a565f0
[  346.798971][ T5852] RBP: 00007ffca9a565f0 R08: 0000000000000000 R09: 0000000000000000
[  346.798978][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca9a57680
[  346.798984][ T5852] R13: 00007f48f1411c05 R14: 000000000005143e R15: 00007ffca9a576c0
[  346.798999][ T5852]  </TASK>
[  346.802340][ T5852] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  346.864685][T13844] hfsplus: extend alloc file! (8192,512,17039360)
[  346.990084][T13834] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[  346.990107][T13834]   allowing incompatible features above 0.0: (unknown version)
[  346.990117][T13834]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  347.039357][T13834] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  347.057052][T13834] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  347.059531][T13834] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  347.059531][T13834]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  347.093421][T13834] bcachefs (loop4): btree node read error at btree lru level 0/0
[  347.093497][T13834]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  347.093506][T13834]   loop4 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  347.093512][T13834]   loop4 btree validate error
[  347.093516][T13834]   flagging btree lru lost data
[  347.093520][T13834]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  347.093526][T13834]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  347.093531][T13834]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  347.093537][T13834]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  347.093542][T13834]   ret btree_node_read_err_bad_node
[  347.152766][T13834] bcachefs (loop4): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  347.159245][T13834] bcachefs (loop4): btree node read error at btree freespace level 0/0
[  347.159258][T13834]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  347.159271][T13834]   loop4 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  347.159282][T13834]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  347.159290][T13834]   loop4 btree validate error
[  347.159297][T13834]   flagging btree freespace lost data
[  347.159305][T13834]   ret btree_node_read_err_bad_node
[  347.189507][T13834] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  347.202137][T13834] bcachefs (loop4): check_topology... done
[  347.206106][T13834] bcachefs (loop4): accounting_read... done
[  347.209000][T13834] bcachefs (loop4): alloc_read... done
[  347.211443][T13834] bcachefs (loop4): snapshots_read... done
[  347.215854][T13834] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  347.219736][T13834] bcachefs (loop4): done starting filesystem
[  347.257481][T12854] bcachefs (loop4): shutting down
[  347.281901][T12854] bcachefs (loop4): shutdown complete
[  347.345691][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  347.357073][T13849] loop2: detected capacity change from 0 to 40427
[  347.365749][T13849] F2FS-fs (loop2): Image doesn't support compression
[  347.373704][T13849] F2FS-fs (loop2): build fault injection rate: 3
[  347.376576][T13849] F2FS-fs (loop2): build fault injection type: 0x35f7
[  347.386196][T13849] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x2e45/0x6ff0
[  347.518314][    T9] usb 4-1: Using ep0 maxpacket: 32
[  347.522135][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  347.525443][    T9] usb 4-1: config 0 has no interface number 0
[  347.530783][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  347.534952][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.538065][    T9] usb 4-1: Product: syz
[  347.545142][    T9] usb 4-1: Manufacturer: syz
[  347.546756][    T9] usb 4-1: SerialNumber: syz
[  347.553127][    T9] usb 4-1: config 0 descriptor??
[  347.563094][    T9] smsc95xx v2.0.0
[  348.475346][T13871] overlayfs: workdir and upperdir must be separate subtrees
[  348.661013][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  348.665817][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  348.671093][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  348.675417][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  348.682430][    T9] usb 4-1: USB disconnect, device number 20
[  348.952470][T13885] loop2: detected capacity change from 0 to 1024
[  349.366253][   T33] audit: type=1326 audit(1755104551.424:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.2.2972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  349.375953][   T33] audit: type=1326 audit(1755104551.433:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.2.2972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  349.388303][   T33] audit: type=1326 audit(1755104551.442:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.2.2972" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  349.399199][   T33] audit: type=1326 audit(1755104551.442:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.2.2972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  349.408376][   T33] audit: type=1326 audit(1755104551.442:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13902 comm="syz.2.2972" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  349.447026][T13908] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2973'.
[  349.450714][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2973'.
[  349.524585][T13912] loop4: detected capacity change from 0 to 16
[  349.530839][T13912] erofs (device loop4): mounted with root inode @ nid 36.
[  349.865935][T13926] loop2: detected capacity change from 0 to 8
[  350.464231][T13941] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  350.470204][T13941] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  350.605862][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  350.768667][   T10] usb 4-1: Using ep0 maxpacket: 32
[  350.772840][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.785675][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34047, setting to 1024
[  350.801134][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  350.815053][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.841622][   T10] usb 4-1: config 0 descriptor??
[  350.844573][T13935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  350.860881][   T10] hub 4-1:0.0: USB hub found
[  351.081497][   T10] hub 4-1:0.0: 1 port detected
[  351.429154][    T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  351.528352][T13989] loop4: detected capacity change from 0 to 64
[  351.637492][    T9] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  351.640851][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.655761][T13990] syz.4.3011: attempt to access beyond end of device
[  351.655761][T13990] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  351.674163][    T9] usb 3-1: config 0 descriptor??
[  351.691559][T13990] buffer_io_error: 6566 callbacks suppressed
[  351.691607][T13990] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  351.701717][T13990] syz.4.3011: attempt to access beyond end of device
[  351.701717][T13990] loop4: rw=0, sector=16777216, nr_sectors = 2 limit=64
[  351.718947][T13990] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  351.937835][    T9] kaweth 3-1:0.0: Firmware present in device.
[  352.158547][    T9] kaweth 3-1:0.0: Statistics collection: 0
[  352.161105][    T9] kaweth 3-1:0.0: Multicast filter limit: 0
[  352.165183][    T9] kaweth 3-1:0.0: MTU: 0
[  352.168075][    T9] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  352.255979][   T10] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  352.261023][  T975] usb 4-1: USB disconnect, device number 21
[  352.381201][    T9] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  352.428145][    T9] usb 3-1: USB disconnect, device number 53
[  352.758683][T13999] loop4: detected capacity change from 0 to 1024
[  352.764948][T13999] ext4: Unknown parameter 'uid<00000000000000000000'
[  352.784798][   T33] audit: type=1326 audit(1755104554.581:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  352.812569][   T33] audit: type=1326 audit(1755104554.581:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  352.828452][   T33] audit: type=1326 audit(1755104554.581:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  352.840840][   T33] audit: type=1326 audit(1755104554.618:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14001 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9eb89c14a5 code=0x7ffc0000
[  352.854270][   T33] audit: type=1326 audit(1755104554.618:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  352.867070][   T33] audit: type=1326 audit(1755104554.618:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  352.875632][   T33] audit: type=1326 audit(1755104554.618:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13998 comm="syz.4.3015" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f9eb898ebe9 code=0x7ffc0000
[  353.196792][T14021] loop3: detected capacity change from 0 to 22
[  353.203204][T14021] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  353.226045][T14021] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  353.628759][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  353.730663][T14041] loop2: detected capacity change from 0 to 1024
[  353.735287][T14041] EXT4-fs: Ignoring removed orlov option
[  353.738066][T14041] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  353.848941][T14041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  353.877410][T14041] EXT4-fs (loop2): Online defrag not supported with bigalloc
[  353.911638][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  353.940221][   T24] usb 5-1: Using ep0 maxpacket: 32
[  353.944333][   T24] usb 5-1: config 4 has an invalid interface number: 128 but max is 0
[  353.946907][   T24] usb 5-1: config 4 has no interface number 0
[  353.948810][   T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.952389][   T24] usb 5-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.956040][   T24] usb 5-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[  353.959544][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.984313][   T24] hub 5-1:4.128: USB hub found
[  354.108957][T14050] Set syz0 is full, maxelem 0 reached
[  354.111828][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3036'.
[  354.201260][T14054] loop2: detected capacity change from 0 to 256
[  354.204284][   T24] hub 5-1:4.128: config failed, can't read hub descriptor (err -90)
[  354.337382][T14060] loop2: detected capacity change from 0 to 128
[  354.350466][T14060] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  354.363494][T14060] ext4 filesystem being mounted at /1105/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  354.390388][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  354.445284][T14063] loop2: detected capacity change from 0 to 164
[  354.545379][   T47] usb 5-1: USB disconnect, device number 5
[  354.593309][   T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  354.640060][T14067] 9pnet_virtio: no channels available for device 127.0.0.1
[  354.759046][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  354.763197][   T24] usb 4-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  354.767087][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.775869][   T24] usb 4-1: config 0 descriptor??
[  355.008459][T14079] loop4: detected capacity change from 0 to 512
[  355.016154][T14079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  355.024302][T14079] EXT4-fs (loop4): 1 truncate cleaned up
[  355.028940][T14079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.095935][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  355.219236][   T24] sigmamicro 0003:1C4F:0059.001E: unknown main item tag 0x3
[  355.223780][   T24] sigmamicro 0003:1C4F:0059.001E: hidraw0: USB HID v0.05 Device [HID 1c4f:0059] on usb-dummy_hcd.3-1/input0
[  355.444287][ T5899] usb 4-1: USB disconnect, device number 22
[  355.726737][T14100] loop4: detected capacity change from 0 to 32768
[  355.731323][T14100] XFS: noikeep mount option is deprecated.
[  355.772637][T14100] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  355.816475][T14100] XFS (loop4): Ending clean mount
[  355.822516][T14100] XFS (loop4): Quotacheck needed: Please wait.
[  355.876654][T14100] XFS (loop4): Quotacheck: Done.
[  355.903828][T12854] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  356.168005][T14120] loop3: detected capacity change from 0 to 2048
[  356.184059][T14120] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  356.275341][T14120] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  356.283993][T14120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  357.200825][T14140] loop2: detected capacity change from 0 to 4096
[  357.209713][T14140] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  357.282090][T14140] ntfs3(loop2): ino=1a, mi_enum_attr
[  357.285033][T14140] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  357.287939][T14140] ntfs3(loop2): ino=1a, mi_enum_attr
[  357.295017][T14140] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  357.319546][T14140] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  357.424599][T14154] trusted_key: syz.4.3078 sent an empty control message without MSG_MORE.
[  357.549784][   T33] kauditd_printk_skb: 32 callbacks suppressed
[  357.549796][   T33] audit: type=1326 audit(1755104558.974:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48f1385ba7 code=0x7ffc0000
[  357.558594][   T33] audit: type=1326 audit(1755104558.974:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48f132add9 code=0x7ffc0000
[  357.566782][   T33] audit: type=1326 audit(1755104558.974:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48f1385ba7 code=0x7ffc0000
[  357.573811][   T33] audit: type=1326 audit(1755104558.974:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48f132add9 code=0x7ffc0000
[  357.580640][   T33] audit: type=1326 audit(1755104558.974:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48f1385ba7 code=0x7ffc0000
[  357.588742][   T33] audit: type=1326 audit(1755104558.983:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48f132add9 code=0x7ffc0000
[  357.596069][   T33] audit: type=1326 audit(1755104558.983:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48f1385ba7 code=0x7ffc0000
[  357.602928][   T33] audit: type=1326 audit(1755104558.983:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48f132add9 code=0x7ffc0000
[  357.611131][   T33] audit: type=1326 audit(1755104558.983:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f48f1385ba7 code=0x7ffc0000
[  357.617868][   T33] audit: type=1326 audit(1755104558.983:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14161 comm="syz.2.3082" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48f132add9 code=0x7ffc0000
[  357.839341][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3086'.
[  357.907394][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'.
[  357.914442][T14177] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3088'.
[  357.978250][T14181] cgroup: none used incorrectly
[  358.422168][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'.
[  358.425590][T14208] openvswitch: netlink: Unknown nsh attribute 0
[  358.433720][T14208] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.693105][T14219] loop4: detected capacity change from 0 to 128
[  358.698581][T14219] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  358.705771][T14219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  359.791737][ T5847] Bluetooth: hci0: unexpected event for opcode 0x1004
[  360.030506][T14250] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  360.034878][T14250] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[  360.177753][   T24] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  360.345717][   T24] usb 5-1: Using ep0 maxpacket: 16
[  360.351241][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.362417][   T24] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  360.362480][T14256] netlink: 'syz.2.3122': attribute type 1 has an invalid length.
[  360.369306][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  360.370955][T14256] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3122'.
[  360.373851][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  360.382346][   T24] usb 5-1: SerialNumber: syz
[  360.757498][   T10] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  361.083576][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.093345][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.097653][   T10] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  361.101076][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.108702][T14270] loop3: detected capacity change from 0 to 8
[  361.120246][   T10] usb 3-1: config 0 descriptor??
[  361.120639][T14270] SQUASHFS error: zlib decompression failed, data probably corrupt
[  361.125794][T14270] SQUASHFS error: Failed to read block 0x9b: -5
[  361.129343][T14270] SQUASHFS error: Unable to read metadata cache entry [99]
[  361.133499][T14270] SQUASHFS error: Unable to read inode 0x127
[  361.216576][T14272] ceph: No source
[  361.267239][ T5847] Bluetooth: hci0: unexpected event for opcode 0x1804
[  361.570927][   T10] cp2112 0003:10C4:EA90.001F: unknown main item tag 0x0
[  361.584526][   T10] cp2112 0003:10C4:EA90.001F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  361.634084][T14290] loop3: detected capacity change from 0 to 512
[  361.640422][T14290] EXT4-fs: Ignoring removed i_version option
[  361.643111][T14290] EXT4-fs: Ignoring removed nobh option
[  361.647108][T14290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  361.657200][T14290] EXT4-fs (loop3): 1 truncate cleaned up
[  361.661088][T14290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  361.739316][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  361.783698][   T10] cp2112 0003:10C4:EA90.001F: error requesting version
[  361.789729][   T10] cp2112 0003:10C4:EA90.001F: probe with driver cp2112 failed with error -71
[  361.791498][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3139'.
[  361.801733][   T10] usb 3-1: USB disconnect, device number 54
[  361.904993][T14302] loop3: detected capacity change from 0 to 256
[  361.924748][T14302] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  362.395079][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  362.405452][T14310] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3147'.
[  362.495181][T14312] loop2: detected capacity change from 0 to 8192
[  362.562268][   T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  362.565658][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.569431][   T24] usb 4-1: Product: syz
[  362.571287][   T24] usb 4-1: Manufacturer: syz
[  362.577565][   T24] usb 4-1: SerialNumber: syz
[  362.587583][   T24] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  362.599283][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.658104][   T47] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  362.890099][ T5899] usb 4-1: USB disconnect, device number 23
[  363.001203][   T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  363.071373][   T10] usb 5-1: USB disconnect, device number 6
[  363.178239][   T24] usb 3-1: Using ep0 maxpacket: 8
[  363.186811][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7
[  363.191804][   T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  363.194791][   T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  363.199612][   T24] usb 3-1: Product: syz
[  363.201018][   T24] usb 3-1: Manufacturer: syz
[  363.202541][   T24] usb 3-1: SerialNumber: syz
[  363.393176][T14324] loop4: detected capacity change from 0 to 32768
[  363.432639][   T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for unknown use
[  363.435274][   T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  363.437615][   T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2
[  363.650553][   T24] usb 3-1: palm_os_3_probe - error -71 getting bytes available request
[  363.654122][   T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected
[  363.668804][   T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  363.675554][   T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  363.682731][   T24] usb 3-1: USB disconnect, device number 55
[  363.703625][   T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  363.716212][   T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  363.719973][   T24] visor 3-1:1.0: device disconnected
[  363.721033][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'.
[  363.787132][T14326] loop4: detected capacity change from 0 to 32768
[  363.810124][T14326] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3155 (14326)
[  363.813695][   T47] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  363.818253][   T47] ath9k_htc: Failed to initialize the device
[  363.828322][ T5899] usb 4-1: ath9k_htc: USB layer deinitialized
[  363.854450][T14326] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  363.865048][T14326] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  363.870008][T14326] BTRFS info (device loop4 state S): using free-space-tree
[  363.924416][  T277] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xb6869543 level 0, ignored
[  363.937303][T14326] BTRFS error (device loop4 state S): failed to find fsid c9fe44da-de57-406a-8241-570000000000 when attempting to open seed devices
[  363.946539][T14348] loop3: detected capacity change from 0 to 128
[  363.952494][T14348] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  363.966183][T14326] BTRFS error (device loop4 state S): failed to read chunk tree: -2
[  363.972531][T14348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.032947][T14326] BTRFS error (device loop4 state S): open_ctree failed: -2
[  364.156036][T14352] Failed to get privilege flags for destination (handle=0x2:0x0)
[  364.229396][T14356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3163'.
[  364.348994][T14360] loop2: detected capacity change from 0 to 256
[  364.489996][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3167'.
[  364.493944][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3167'.
[  364.504101][T14365] erspan0: entered promiscuous mode
[  364.510449][T14365] gretap0: entered promiscuous mode
[  364.513548][T14365] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  364.799909][T14368] loop2: detected capacity change from 0 to 32768
[  364.804122][T14368] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3168 (14368)
[  365.048576][   T55] Bluetooth: hci1: command 0x0406 tx timeout
[  365.069432][T14363] loop3: detected capacity change from 0 to 131072
[  365.075658][T14363] F2FS-fs (loop3): invalid crc value
[  365.132467][T14363] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  365.137176][T14363] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  365.142931][T14368] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  365.160266][T14368] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  365.166692][T14368] BTRFS info (device loop2): using free-space-tree
[  365.553307][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  365.560080][T14393] loop4: detected capacity change from 0 to 40427
[  365.582188][T14393] F2FS-fs (loop4): invalid crc value
[  365.625821][T14393] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  365.629926][T14393] F2FS-fs (loop4): Start checkpoint disabled!
[  365.634100][T14393] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  365.907879][T14397] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  366.326684][   T86] kworker/u9:3: attempt to access beyond end of device
[  366.326684][   T86] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  366.334075][   T86] CPU: 0 UID: 0 PID: 86 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  366.334099][   T86] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  366.334108][   T86] Workqueue: writeback wb_workfn (flush-7:4)
[  366.334132][   T86] Call Trace:
[  366.334139][   T86]  <TASK>
[  366.334146][   T86]  dump_stack_lvl+0x189/0x250
[  366.334169][   T86]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.334186][   T86]  ? __pfx_queue_work_on+0x10/0x10
[  366.334200][   T86]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  366.334217][   T86]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  366.334241][   T86]  f2fs_handle_critical_error+0x37c/0x540
[  366.334265][   T86]  f2fs_write_end_io+0x886/0xb60
[  366.334296][   T86]  __submit_merged_bio+0x27a/0x6a0
[  366.334321][   T86]  __submit_merged_write_cond+0x255/0x530
[  366.334345][   T86]  f2fs_write_data_pages+0x261d/0x3000
[  366.334389][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  366.334425][   T86]  ? __lock_acquire+0xab9/0xd20
[  366.334439][   T86]  ? look_up_lock_class+0x74/0x170
[  366.334457][   T86]  ? __lock_acquire+0xab9/0xd20
[  366.334471][   T86]  ? __lock_acquire+0xab9/0xd20
[  366.334491][   T86]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  366.334503][   T86]  do_writepages+0x32e/0x550
[  366.334517][   T86]  ? reacquire_held_locks+0x127/0x1d0
[  366.334524][   T86]  ? writeback_sb_inodes+0x384/0x1010
[  366.334539][   T86]  __writeback_single_inode+0x145/0xff0
[  366.334550][   T86]  ? do_raw_spin_unlock+0x4d/0x240
[  366.334562][   T86]  writeback_sb_inodes+0x6c7/0x1010
[  366.334586][   T86]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  366.334644][   T86]  ? rcu_is_watching+0x15/0xb0
[  366.334659][   T86]  wb_writeback+0x43b/0xaf0
[  366.334673][   T86]  ? queue_io+0x391/0x590
[  366.334684][   T86]  ? __pfx_wb_writeback+0x10/0x10
[  366.334699][   T86]  ? _raw_spin_unlock_irq+0x23/0x50
[  366.334710][   T86]  wb_workfn+0x409/0xef0
[  366.334727][   T86]  ? __pfx_wb_workfn+0x10/0x10
[  366.334738][   T86]  ? __lock_acquire+0xab9/0xd20
[  366.334755][   T86]  ? process_scheduled_works+0x9ef/0x17b0
[  366.334767][   T86]  ? _raw_spin_unlock_irq+0x23/0x50
[  366.334774][   T86]  ? process_scheduled_works+0x9ef/0x17b0
[  366.334781][   T86]  ? process_scheduled_works+0x9ef/0x17b0
[  366.334790][   T86]  process_scheduled_works+0xae1/0x17b0
[  366.334813][   T86]  ? __pfx_process_scheduled_works+0x10/0x10
[  366.334835][   T86]  worker_thread+0x8a0/0xda0
[  366.334845][   T86]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  366.334858][   T86]  ? __kthread_parkme+0x7b/0x200
[  366.334872][   T86]  kthread+0x711/0x8a0
[  366.334883][   T86]  ? __pfx_worker_thread+0x10/0x10
[  366.334891][   T86]  ? __pfx_kthread+0x10/0x10
[  366.334901][   T86]  ? _raw_spin_unlock_irq+0x23/0x50
[  366.334909][   T86]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.334917][   T86]  ? __pfx_kthread+0x10/0x10
[  366.334927][   T86]  ret_from_fork+0x3fc/0x770
[  366.334938][   T86]  ? __pfx_ret_from_fork+0x10/0x10
[  366.334949][   T86]  ? __switch_to_asm+0x39/0x70
[  366.334959][   T86]  ? __switch_to_asm+0x33/0x70
[  366.334967][   T86]  ? __pfx_kthread+0x10/0x10
[  366.334978][   T86]  ret_from_fork_asm+0x1a/0x30
[  366.334996][   T86]  </TASK>
[  366.335001][   T86] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  366.412501][T14400] loop2: detected capacity change from 0 to 32768
[  366.557659][T14400] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  366.606352][T14400] XFS (loop2): Ending clean mount
[  366.657445][ T5852] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  366.820186][T14402] loop3: detected capacity change from 0 to 32768
[  366.836537][T14402] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section ext: field too small (64 < 88)
[  366.836537][T14402] ext (size 64):
[  366.836537][T14402] Recovery passes required:      recovery_pass_empty,scan_for_btree_nodes,accounting_read,stripes_read,set_may_go_rw,journal_replay,check_btree_backpointers,check_backpointers_to_extents,bucket_gens_init,reconstruct_snapshots,check_snapshot_trees,check_snapshots,check_subvols,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_unreachable_inodes,check_nlinks,resume_logged_ops,fix_reflink_p
[  366.836537][T14402] Errors to silently fix:        jset_unknown_csum,bkey_at_pos_max,alloc_key_empty_but_have_data,lru_entry_bad,btree_ptr_val_too_big,btree_ptr_v2_val_too_big,extent_ptrs_invalid_entry,extent_ptrs_no_ptrs,extent_ptrs_redundant_crc,extent_ptrs_unwritten,extent_ptrs_written_and_unwritten,ptr_to_invalid_device,ptr_to_duplicate_device,ptr_after_last_bucket,ptr_before_first_bucket,ptr_to_missing_alloc_key,ptr_to_missing_replicas_entry,ptr_too_stale,stale_dirty_ptr,ptr_crc_uncompress
[  366.836665][T14402] bcachefs: bch2_fs_get_tree() error: invalid_sb_ext
[  366.866988][    C0] hpet_rtc_timer_reinit: 65 callbacks suppressed
[  366.867002][    C0] hpet: Lost 1 RTC interrupts
[  367.179984][T14420] loop2: detected capacity change from 0 to 32768
[  367.183658][T14420] btrfs: Deprecated parameter 'usebackuproot'
[  367.185576][T14420] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  367.190274][T14420] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.3176 (14420)
[  367.202983][T14420] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.214904][T14420] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  367.218289][T14420] BTRFS info (device loop2): disk space caching is enabled
[  367.221783][T14420] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  367.256643][T14417] loop4: detected capacity change from 0 to 32768
[  367.261416][T14417] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3173 (14417)
[  367.274010][T14417] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  367.278259][T14417] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  367.282600][T14417] BTRFS info (device loop4): using free-space-tree
[  367.344663][   T47] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  367.409421][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  367.554425][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  367.558787][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  367.580067][   T47] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  367.612722][T14459] input: syz0 as /devices/virtual/input/input29
[  367.615843][   T47] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  367.615868][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.623916][   T47] usb 4-1: config 0 descriptor??
[  367.638141][T14424] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  367.652576][T12854] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  368.120991][   T47] aureal 0003:0755:2626.0020: unknown main item tag 0x6
[  368.123747][   T47] aureal 0003:0755:2626.0020: report_id 29495 is invalid
[  368.132124][   T47] aureal 0003:0755:2626.0020: item 0 2 1 8 parsing failed
[  368.135642][   T47] aureal 0003:0755:2626.0020: probe with driver aureal failed with error -22
[  368.342067][   T47] usb 4-1: USB disconnect, device number 24
[  368.384987][   T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  368.547301][   T24] usb 3-1: Using ep0 maxpacket: 8
[  368.554480][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  368.559212][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  368.563121][   T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49526, setting to 1024
[  368.569113][T14471] loop4: detected capacity change from 0 to 32768
[  368.571802][   T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  368.576085][   T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.579758][T14471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3185 (14471)
[  368.581809][   T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  368.593192][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.612460][T14471] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.617057][T14471] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  368.631442][T14471] BTRFS info (device loop4): using free-space-tree
[  368.820787][   T24] usb 3-1: GET_CAPABILITIES returned 0
[  368.825161][T12854] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  368.829533][   T24] usbtmc 3-1:16.0: can't read capabilities
[  369.158742][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.190255][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.194095][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.197932][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.201754][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.212769][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.216644][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.220500][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.224296][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.227953][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.242564][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.246690][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.250434][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.254118][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.257788][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.263492][T14489] loop3: detected capacity change from 0 to 40427
[  369.264966][    C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  369.271939][T14489] F2FS-fs (loop3): invalid crc value
[  369.293677][  T975] usb 3-1: USB disconnect, device number 56
[  369.401119][T14489] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  369.407016][T14489] F2FS-fs (loop3): Start checkpoint disabled!
[  369.410992][T14489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  369.467916][  T277] kworker/u9:4: attempt to access beyond end of device
[  369.467916][  T277] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  369.474771][  T277] CPU: 0 UID: 0 PID: 277 Comm: kworker/u9:4 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  369.474794][  T277] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  369.474802][  T277] Workqueue: writeback wb_workfn (flush-7:3)
[  369.474827][  T277] Call Trace:
[  369.474833][  T277]  <TASK>
[  369.474840][  T277]  dump_stack_lvl+0x189/0x250
[  369.474864][  T277]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.474882][  T277]  ? __pfx_queue_work_on+0x10/0x10
[  369.474897][  T277]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  369.474912][  T277]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.474939][  T277]  f2fs_handle_critical_error+0x37c/0x540
[  369.474964][  T277]  f2fs_write_end_io+0x886/0xb60
[  369.475001][  T277]  __submit_merged_bio+0x27a/0x6a0
[  369.475023][  T277]  __submit_merged_write_cond+0x255/0x530
[  369.475053][  T277]  f2fs_write_data_pages+0x261d/0x3000
[  369.475102][  T277]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.475132][  T277]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  369.475183][  T277]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  369.475202][  T277]  ? look_up_lock_class+0x74/0x170
[  369.475228][  T277]  ? trace_f2fs_writepages+0x7f/0x200
[  369.475244][  T277]  ? f2fs_write_node_pages+0x478/0x6e0
[  369.475267][  T277]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  369.475323][  T277]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  369.475345][  T277]  do_writepages+0x32e/0x550
[  369.475370][  T277]  ? reacquire_held_locks+0x127/0x1d0
[  369.475385][  T277]  ? writeback_sb_inodes+0x384/0x1010
[  369.475412][  T277]  __writeback_single_inode+0x145/0xff0
[  369.475430][  T277]  ? do_raw_spin_unlock+0x4d/0x240
[  369.475452][  T277]  writeback_sb_inodes+0x6c7/0x1010
[  369.475494][  T277]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  369.475551][  T277]  ? rcu_is_watching+0x15/0xb0
[  369.475575][  T277]  wb_writeback+0x43b/0xaf0
[  369.475601][  T277]  ? queue_io+0x391/0x590
[  369.475622][  T277]  ? __pfx_wb_writeback+0x10/0x10
[  369.475649][  T277]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.475670][  T277]  wb_workfn+0x409/0xef0
[  369.475699][  T277]  ? __pfx_wb_workfn+0x10/0x10
[  369.475720][  T277]  ? __lock_acquire+0xab9/0xd20
[  369.475751][  T277]  ? process_scheduled_works+0x9ef/0x17b0
[  369.475771][  T277]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.475786][  T277]  ? process_scheduled_works+0x9ef/0x17b0
[  369.475800][  T277]  ? process_scheduled_works+0x9ef/0x17b0
[  369.475815][  T277]  process_scheduled_works+0xae1/0x17b0
[  369.475857][  T277]  ? __pfx_process_scheduled_works+0x10/0x10
[  369.475895][  T277]  worker_thread+0x8a0/0xda0
[  369.475914][  T277]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  369.475938][  T277]  ? __kthread_parkme+0x7b/0x200
[  369.475962][  T277]  kthread+0x711/0x8a0
[  369.475983][  T277]  ? __pfx_worker_thread+0x10/0x10
[  369.475997][  T277]  ? __pfx_kthread+0x10/0x10
[  369.476017][  T277]  ? _raw_spin_unlock_irq+0x23/0x50
[  369.476032][  T277]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.476051][  T277]  ? __pfx_kthread+0x10/0x10
[  369.476069][  T277]  ret_from_fork+0x3fc/0x770
[  369.476088][  T277]  ? __pfx_ret_from_fork+0x10/0x10
[  369.476109][  T277]  ? __switch_to_asm+0x39/0x70
[  369.476127][  T277]  ? __switch_to_asm+0x33/0x70
[  369.476142][  T277]  ? __pfx_kthread+0x10/0x10
[  369.476161][  T277]  ret_from_fork_asm+0x1a/0x30
[  369.476195][  T277]  </TASK>
[  369.476202][  T277] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  369.855078][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3194'.
[  369.886226][T14509] loop3: detected capacity change from 0 to 512
[  369.904919][T14509] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.909375][T14509] ext4 filesystem being mounted at /271/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  369.919283][   T10] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  369.938500][T14509] EXT4-fs (loop3): shut down requested (2)
[  369.963543][T14514] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3196'.
[  370.088049][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  370.091913][   T10] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  370.097656][   T10] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  370.101223][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.106460][   T10] usb 5-1: config 0 descriptor??
[  370.123332][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  370.127003][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  370.138997][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  370.148494][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  370.151730][   T10] usb 5-1: media controller created
[  370.158049][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  370.180065][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  370.192122][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  370.207715][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30
[  370.232331][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  370.236676][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  370.365629][   T10] usb 5-1: USB disconnect, device number 7
[  370.426511][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  370.911863][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  371.409794][T14535] ptrace attach of "/syz-executor exec"[12854] was attempted by "\x22"[14535]
[  371.412729][T14537] netlink: 'syz.2.3207': attribute type 21 has an invalid length.
[  371.415137][T14537] netlink: 'syz.2.3207': attribute type 15 has an invalid length.
[  371.430151][T14537] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3207'.
[  371.432885][T14537] IPv6: NLM_F_CREATE should be specified when creating new route
[  371.435286][T14537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  371.437933][T14537] IPv6: NLM_F_CREATE should be set when creating new route
[  371.440530][T14537] IPv6: NLM_F_CREATE should be set when creating new route
[  371.442975][T14537] IPv6: NLM_F_CREATE should be set when creating new route
[  371.476804][T14535] loop4: detected capacity change from 0 to 4096
[  371.517279][   T33] audit: type=1800 audit(1755104571.868:234): pid=14535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3206" name="file1" dev="loop4" ino=33 res=0 errno=0
[  371.717232][T14535] ntfs3(loop4): ino=1f, mi_enum_attr
[  371.838735][T14554] misc userio: Begin command sent, but we're already running
[  372.155090][   T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  372.288364][T14566] loop4: detected capacity change from 0 to 256
[  372.318284][   T10] usb 3-1: Using ep0 maxpacket: 8
[  372.330148][   T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  372.333763][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.335272][T14566] FAT-fs (loop4): Directory bread(block 64) failed
[  372.340650][T14566] FAT-fs (loop4): Directory bread(block 65) failed
[  372.343338][T14566] FAT-fs (loop4): Directory bread(block 66) failed
[  372.345936][T14566] FAT-fs (loop4): Directory bread(block 67) failed
[  372.348577][T14566] FAT-fs (loop4): Directory bread(block 68) failed
[  372.352818][T14566] FAT-fs (loop4): Directory bread(block 69) failed
[  372.355500][T14566] FAT-fs (loop4): Directory bread(block 70) failed
[  372.361132][   T10] usb 3-1: Product: syz
[  372.362835][   T10] usb 3-1: Manufacturer: syz
[  372.364739][   T10] usb 3-1: SerialNumber: syz
[  372.368764][T14566] FAT-fs (loop4): Directory bread(block 71) failed
[  372.369182][   T10] usb 3-1: config 0 descriptor??
[  372.371506][T14566] FAT-fs (loop4): Directory bread(block 72) failed
[  372.389724][T14566] FAT-fs (loop4): Directory bread(block 73) failed
[  372.405650][T14568] loop3: detected capacity change from 0 to 1024
[  372.454064][T14568] hfsplus: bad catalog file entry
[  372.487039][   T27] hfsplus: b-tree write err: -5, ino 3
[  372.489320][   T27] hfsplus: bad catalog file entry
[  372.602839][   T47] usb 3-1: USB disconnect, device number 57
[  372.621694][T14574] loop3: detected capacity change from 0 to 2048
[  372.646868][T14574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  372.671138][T14574] EXT4-fs (loop3): shut down requested (2)
[  372.704606][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  372.859469][T14572] loop4: detected capacity change from 0 to 32768
[  372.863549][T14572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3222 (14572)
[  372.881909][T14572] BTRFS info (device loop4 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  372.886225][T14572] BTRFS info (device loop4 state S): using crc32c (crc32c-lib) checksum algorithm
[  372.889846][T14572] BTRFS info (device loop4 state S): using free-space-tree
[  372.931394][   T27] BTRFS warning (device loop4 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  372.949617][ T1234] BTRFS warning (device loop4 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  372.955867][   T27] BTRFS warning (device loop4 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  372.966877][T14572] BTRFS error (device loop4 state S): failed to load root free space
[  373.025793][T14572] BTRFS error (device loop4 state S): open_ctree failed: -2
[  373.137863][T14578] loop3: detected capacity change from 0 to 32768
[  373.157081][T14578] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3225 (14578)
[  373.187017][T14578] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  373.195841][T14578] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  373.198959][T14578] BTRFS info (device loop3): using free-space-tree
[  373.321263][T14607] loop2: detected capacity change from 0 to 512
[  373.336860][T14607] EXT4-fs: Ignoring removed nobh option
[  373.417781][T14614] CIFS mount error: No usable UNC path provided in device string!
[  373.417781][T14614] 
[  373.421835][T14614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  373.426699][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.3227: corrupted inode contents
[  373.440417][T11715] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  373.466523][T14607] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #3: comm syz.2.3227: mark_inode_dirty error
[  373.493823][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #3: comm syz.2.3227: corrupted inode contents
[  373.499810][T14607] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3227: mark_inode_dirty error
[  373.511583][T14607] Quota error (device loop2): write_blk: dquota write failed
[  373.514749][T14607] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  373.530936][T14607] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3227: Failed to acquire dquot type 0
[  373.549087][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3227: corrupted inode contents
[  373.592500][T14607] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #16: comm syz.2.3227: mark_inode_dirty error
[  373.598262][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3227: corrupted inode contents
[  373.618507][T14607] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3227: mark_inode_dirty error
[  373.623693][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3227: corrupted inode contents
[  373.642199][T14607] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  373.645853][T14607] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3227: corrupted inode contents
[  373.651004][T14607] EXT4-fs error (device loop2): ext4_truncate:4666: inode #16: comm syz.2.3227: mark_inode_dirty error
[  373.668488][T14607] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  373.673357][T14607] EXT4-fs (loop2): 1 truncate cleaned up
[  373.684204][T14607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.704381][T14607] ext4 filesystem being mounted at /1179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  373.774960][T14607] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  373.944757][T14624] loop4: detected capacity change from 0 to 2048
[  373.980703][T14627] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  374.494800][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'.
[  374.506193][T14645] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3244'.
[  374.516838][T14645] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3244'.
[  374.641006][T14651] loop4: detected capacity change from 0 to 4096
[  374.877085][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  375.084686][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.088700][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.094849][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  375.098376][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  375.101743][   T10] usb 4-1: SerialNumber: syz
[  375.202723][T14673] loop4: detected capacity change from 0 to 128
[  375.207290][T14673] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  375.213983][T14673] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  375.442325][   T10] usb 4-1: 0:2 : does not exist
[  375.456116][   T10] usb 4-1: USB disconnect, device number 25
[  375.477054][ T6983] udevd[6983]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  376.043215][T14683] loop3: detected capacity change from 0 to 256
[  376.057573][T14683] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  376.317164][T14706] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3271'.
[  376.479110][T14714] overlayfs: failed to resolve './file0': -2
[  376.589427][T14715] loop3: detected capacity change from 0 to 164
[  376.615662][T14715] iso9660: Corrupted directory entry in block 0 of inode 1792
[  377.290126][T14728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3278'.
[  377.654799][T14746] Bluetooth: (null): Invalid header checksum
[  377.877452][T14756] syz_tun: entered allmulticast mode
[  377.968811][T14764] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3296'.
[  377.971679][T14764] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3296'.
[  378.110968][T14776] can0: slcan on ptm0.
[  378.147650][T14775] can0 (unregistered): slcan off ptm0.
[  378.199102][T14785] loop4: detected capacity change from 0 to 1024
[  378.551526][T14808] loop3: detected capacity change from 0 to 512
[  378.583799][T14808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  378.614323][T14811] loop4: detected capacity change from 0 to 2048
[  378.646988][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.662899][T14812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  378.757738][T14812] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  378.760679][T14815] loop3: detected capacity change from 0 to 512
[  378.766989][T14812] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  378.785008][T14812] Remounting filesystem read-only
[  378.788487][T12854] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  378.838209][T14817] overlayfs: failed to clone upperpath
[  379.159225][T14815] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  379.169065][T14815] System zones: 0-2, 18-18, 34-35
[  379.179178][T14815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.201653][T14815] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  379.264738][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.359909][T14828] pim6reg1: entered allmulticast mode
[  380.075895][T14850] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3332'.
[  380.250016][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'.
[  380.253575][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'.
[  380.257288][T14866] netlink: 'syz.3.3340': attribute type 30 has an invalid length.
[  380.311966][T14868] loop3: detected capacity change from 0 to 4096
[  380.331981][T14868] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  380.340090][T14868] ntfs3(loop3): ino=1e, "file1" attr_set_size
[  380.464942][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  380.630515][   T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  380.634877][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  380.642913][   T24] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  380.646633][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  380.651916][   T24] usb 5-1: SerialNumber: syz
[  380.884702][   T24] usb 5-1: 0:2 : does not exist
[  380.904077][   T24] usb 5-1: USB disconnect, device number 8
[  380.922530][ T6983] udevd[6983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.580477][   T33] audit: type=1800 audit(1755104581.154:235): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3361" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=35254 res=0 errno=0
[  381.597479][T14910] x_tables: ip_tables: udp match: only valid for protocol 17
[  384.240691][T14997] loop3: detected capacity change from 0 to 128
[  384.251965][T14997] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  384.259789][T14997] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  384.413335][T11715] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  385.251124][T15009] syz.4.3403 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  385.305291][T15013] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3405'.
[  385.319017][T15013] gretap0: entered promiscuous mode
[  385.334042][T15013] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3405'.
[  385.337665][T15013] 0{X: renamed from gretap0
[  385.344889][T15013] 0{X: left promiscuous mode
[  385.346967][T15013] 0{X: entered allmulticast mode
[  385.351910][T15013] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[  385.480594][T15020] loop4: detected capacity change from 0 to 2048
[  385.502826][T15020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  385.762381][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'.
[  385.774689][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3416'.
[  385.847361][T15044] loop3: detected capacity change from 0 to 256
[  385.866908][T15044] FAT-fs (loop3): Directory bread(block 64) failed
[  385.869085][T15044] FAT-fs (loop3): Directory bread(block 65) failed
[  385.871308][T15044] FAT-fs (loop3): Directory bread(block 66) failed
[  385.873494][T15044] FAT-fs (loop3): Directory bread(block 67) failed
[  385.876290][T15044] FAT-fs (loop3): Directory bread(block 68) failed
[  385.880823][T15044] FAT-fs (loop3): Directory bread(block 69) failed
[  385.884323][T15044] FAT-fs (loop3): Directory bread(block 70) failed
[  385.886456][T15044] FAT-fs (loop3): Directory bread(block 71) failed
[  385.888573][T15044] FAT-fs (loop3): Directory bread(block 72) failed
[  385.891831][T15044] FAT-fs (loop3): Directory bread(block 73) failed
[  385.907697][T15048] loop4: detected capacity change from 0 to 512
[  385.929424][T15048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  385.936521][T15048] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  386.017765][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.048930][T15054] loop3: detected capacity change from 0 to 24
[  386.093548][T15056] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  386.096573][T15056] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  386.104080][T15056] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  386.514602][T15076] loop3: detected capacity change from 0 to 256
[  386.523321][T15076] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  386.539872][T15076] exFAT-fs (loop3): start_clu is invalid cluster(0xffffffff)
[  386.884434][T15100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'.
[  386.907048][T15090] loop3: detected capacity change from 0 to 32768
[  386.922328][T15090] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3442 (15090)
[  386.939903][T15090] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  386.945343][T15090] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  386.948331][T15090] BTRFS info (device loop3): using free-space-tree
[  387.107303][   T33] audit: type=1804 audit(1755104586.249:236): pid=15090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3442" name="/newroot/364/file0/file1" dev="loop3" ino=260 res=1 errno=0
[  387.165736][T11715] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  387.419718][T15122] loop4: detected capacity change from 0 to 32768
[  387.426876][T15122] (syz.4.3450,15122,0):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 9.0, should be 0.90
[  387.430689][T15122] (syz.4.3450,15122,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  387.434333][T15122] (syz.4.3450,15122,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  387.437769][T15122] (syz.4.3450,15122,0):ocfs2_fill_super:1177 ERROR: status = -22
[  387.674616][T15130] loop3: detected capacity change from 0 to 32768
[  387.727816][T15130] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.761081][T15130] XFS (loop3): Ending clean mount
[  387.770448][T15130] XFS (loop3): Quotacheck needed: Please wait.
[  387.828975][T15130] XFS (loop3): Quotacheck: Done.
[  387.832290][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  387.867048][T11715] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.905624][    C0] hpet: Lost 1 RTC interrupts
[  388.016641][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  388.020045][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  388.023355][    T9] usb 5-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  388.026148][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.050967][    T9] usb 5-1: config 0 descriptor??
[  388.053143][T15132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  388.340403][T15152] loop3: detected capacity change from 0 to 512
[  388.376893][T15152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  388.387287][T15152] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  388.438334][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.514998][    T9] gembird 0003:11FF:3331.0021: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.4-1/input0
[  388.608952][T15161] loop3: detected capacity change from 0 to 512
[  388.612704][T15161] EXT4-fs: Ignoring removed orlov option
[  388.617980][T15161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  388.621505][T15161] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  388.627181][T15161] EXT4-fs (loop3): orphan cleanup on readonly fs
[  388.630093][T15161] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3462: Invalid inode bitmap blk 0 in block_group 0
[  388.639799][T15161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  388.665649][T11715] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.740601][    T9] usb 5-1: USB disconnect, device number 9
[  388.910779][T15174] bpf: Bad value for 'mode'
[  389.350853][T15186] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  389.496193][T15193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'.
[  389.664094][T15202] loop4: detected capacity change from 0 to 256
[  389.680319][T15202] FAT-fs (loop4): Directory bread(block 64) failed
[  389.684193][T15202] FAT-fs (loop4): Directory bread(block 65) failed
[  389.696734][T15202] FAT-fs (loop4): Directory bread(block 66) failed
[  389.698748][T15202] FAT-fs (loop4): Directory bread(block 67) failed
[  389.700703][T15202] FAT-fs (loop4): Directory bread(block 68) failed
[  389.703084][T15202] FAT-fs (loop4): Directory bread(block 69) failed
[  389.705054][T15202] FAT-fs (loop4): Directory bread(block 70) failed
[  389.730394][T15202] FAT-fs (loop4): Directory bread(block 71) failed
[  389.732944][T15202] FAT-fs (loop4): Directory bread(block 72) failed
[  389.735395][T15202] FAT-fs (loop4): Directory bread(block 73) failed
[  390.001379][T15212] loop3: detected capacity change from 0 to 4096
[  390.006222][T15212] ntfs3(loop3): ino=3, Correct links count -> 2.
[  390.038592][T15212] ntfs3(loop3): ino=1a, mi_enum_attr
[  390.053109][T15212] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  390.194174][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  390.383328][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118fe1000: rx timeout, send abort
[  390.443209][    T9] usb 5-1: Using ep0 maxpacket: 32
[  390.488509][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  390.495173][    T9] usb 5-1: config 0 has no interface number 0
[  390.501601][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  390.526326][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  390.540677][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.549314][    T9] usb 5-1: Product: syz
[  390.551036][    T9] usb 5-1: Manufacturer: syz
[  390.554295][    T9] usb 5-1: SerialNumber: syz
[  390.582249][    T9] usb 5-1: config 0 descriptor??
[  390.600952][    T9] smsc75xx v1.0.0
[  390.602480][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  390.606352][    T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  390.925154][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f5400: rx timeout, send abort
[  390.927840][    C0] vcan0: j1939_tp_rxtimer: 0xffff888118fe1000: abort rx timeout. Force session deactivation
[  391.045802][T15209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.051020][T15209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.058811][ T5912] usb 5-1: USB disconnect, device number 10
[  391.339171][T15245] loop3: detected capacity change from 0 to 1024
[  391.349483][T15245] hfsplus: failed to load root directory
[  391.365044][   T33] audit: type=1326 audit(1755104590.190:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.384505][   T33] audit: type=1326 audit(1755104590.190:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.414022][   T33] audit: type=1326 audit(1755104590.199:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.423384][   T33] audit: type=1326 audit(1755104590.199:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.446487][   T33] audit: type=1326 audit(1755104590.199:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.456936][   T33] audit: type=1326 audit(1755104590.199:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.464367][   T33] audit: type=1326 audit(1755104590.199:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.471485][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f5400: abort rx timeout. Force session deactivation
[  391.477046][   T33] audit: type=1326 audit(1755104590.199:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15248 comm="syz.2.3501" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  391.905614][T15281] loop3: detected capacity change from 0 to 256
[  391.920881][T15281] exfat: Deprecated parameter 'namecase'
[  391.928079][T15281] exfat: Deprecated parameter 'utf8'
[  391.930227][T15281] exFAT-fs (loop3): bogus fat length
[  391.932092][T15281] exFAT-fs (loop3): failed to read boot sector
[  391.934004][T15281] exFAT-fs (loop3): failed to recognize exfat type
[  393.196693][T15284] loop4: detected capacity change from 0 to 131072
[  393.199579][T15284] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  393.202514][T15284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  393.206297][T15284] F2FS-fs (loop4): invalid crc value
[  393.251681][T15284] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  393.255616][T15284] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  393.257782][T15284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  393.545235][T15301] loop3: detected capacity change from 0 to 40427
[  393.553502][T15301] F2FS-fs (loop3): Invalid log blocks per segment (3279)
[  393.563471][T15301] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  393.568684][T15301] F2FS-fs (loop3): invalid crc value
[  393.570888][T15301] F2FS-fs (loop3): invalid journal entries nats 0 sits 50950
[  393.573205][T15301] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-22)
[  393.894753][T15327] tipc: Started in network mode
[  393.896357][T15327] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  393.911346][T15327] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa
[  393.914270][T15327] tipc: Enabled bearer <udp:syz0>, priority 10
[  394.401938][T15356] loop4: detected capacity change from 0 to 1024
[  394.434714][T15358] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  394.453210][T15356] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  394.491009][T15356] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  394.540245][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.562454][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3551'.
[  394.625626][T15364] vxlan0: entered promiscuous mode
[  394.631789][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  394.635385][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  394.638618][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  394.641631][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  394.706660][T15372] loop4: detected capacity change from 0 to 4096
[  394.721154][T15372] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  394.726830][T15372] ntfs3(loop4): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  395.305937][  T975] tipc: Node number set to 1
[  395.320405][T15372] ntfs3(loop4): ino=19, mi_enum_attr
[  395.323126][T15372] ntfs3(loop4): ino=18, mi_enum_attr
[  395.553059][T15387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'.
[  395.646419][T15391] loop4: detected capacity change from 0 to 256
[  395.661535][T15391] FAT-fs (loop4): Directory bread(block 64) failed
[  395.666036][T15391] FAT-fs (loop4): Directory bread(block 65) failed
[  395.668141][T15391] FAT-fs (loop4): Directory bread(block 66) failed
[  395.670243][T15391] FAT-fs (loop4): Directory bread(block 67) failed
[  395.672760][T15391] FAT-fs (loop4): Directory bread(block 68) failed
[  395.675529][T15391] FAT-fs (loop4): Directory bread(block 69) failed
[  395.681986][T15391] FAT-fs (loop4): Directory bread(block 70) failed
[  395.684144][T15391] FAT-fs (loop4): Directory bread(block 71) failed
[  395.686487][T15391] FAT-fs (loop4): Directory bread(block 72) failed
[  395.690405][T15391] FAT-fs (loop4): Directory bread(block 73) failed
[  395.819338][T15385] loop3: detected capacity change from 0 to 32768
[  395.876755][T15385] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.887379][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  395.890113][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  395.928290][T15385] XFS (loop3): Ending clean mount
[  395.931518][T15385] XFS (loop3): Quotacheck needed: Please wait.
[  396.007159][T15385] XFS (loop3): Quotacheck: Done.
[  396.043414][T11715] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.150305][T15411] bond0: Device is already in use.
[  396.351565][ T5847] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  396.380900][T15420] loop3: detected capacity change from 0 to 256
[  396.458585][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  396.458602][   T33] audit: type=1326 audit(1755104594.879:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  396.471191][   T33] audit: type=1326 audit(1755104594.879:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  396.479264][   T33] audit: type=1326 audit(1755104594.879:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  396.487821][   T33] audit: type=1326 audit(1755104594.879:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f48f138ec23 code=0x7ffc0000
[  396.498421][   T33] audit: type=1326 audit(1755104594.879:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f48f138d69f code=0x7ffc0000
[  396.507836][   T33] audit: type=1326 audit(1755104594.888:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f48f138ec77 code=0x7ffc0000
[  396.517294][   T33] audit: type=1326 audit(1755104594.888:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f48f138d550 code=0x7ffc0000
[  396.526316][   T33] audit: type=1326 audit(1755104594.888:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f48f138d84a code=0x7ffc0000
[  396.542329][   T33] audit: type=1326 audit(1755104594.888:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  396.563835][   T33] audit: type=1326 audit(1755104594.888:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15426 comm="syz.2.3576" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f48f138ebe9 code=0x7ffc0000
[  396.858768][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3587'.
[  397.049538][T15472] loop3: detected capacity change from 0 to 2048
[  397.069490][T15472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  397.087075][T15474] loop4: detected capacity change from 0 to 256
[  397.092074][T15474] exfat: Deprecated parameter 'namecase'
[  397.119441][T15474] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  397.238322][T15480] syz_tun: entered promiscuous mode
[  397.242171][T15480] syz_tun: left promiscuous mode
[  397.561459][   T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  397.754880][T15492] loop4: detected capacity change from 0 to 512
[  397.767334][T15492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  397.793448][T15492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c0a8, mo2=0002]
[  397.797630][T15492] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.3601: missing EA_INODE flag
[  397.804262][T15492] EXT4-fs (loop4): Remounting filesystem read-only
[  397.806458][T15492] EXT4-fs (loop4): 1 orphan inode deleted
[  397.809022][T15492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  397.864762][   T10] usb 4-1: Using ep0 maxpacket: 16
[  397.867950][   T10] usb 4-1: config 7 has an invalid interface number: 148 but max is 0
[  397.870825][   T10] usb 4-1: config 7 has no interface number 0
[  397.873613][   T10] usb 4-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  397.878064][   T10] usb 4-1: config 7 interface 148 has no altsetting 0
[  397.883775][   T10] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61
[  397.891830][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  397.895225][   T10] usb 4-1: Product: syz
[  397.896973][   T10] usb 4-1: Manufacturer: syz
[  397.899239][   T10] usb 4-1: SerialNumber: syz
[  398.470813][   T10] usb 4-1: probing VID:PID(0424:012C)   
[  398.474679][   T10] usb 4-1: vub300 testing UNKNOWN EndPoint(0) 01
[  398.476969][   T10] usb 4-1: vub300 ignoring EndPoint(0) 01
[  398.478991][   T10] usb 4-1: vub300 testing UNKNOWN EndPoint(1) 05
[  398.481028][   T10] usb 4-1: vub300 ignoring EndPoint(1) 05
[  398.484028][   T10] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs
[  398.486793][   T10] vub300 4-1:7.148: probe with driver vub300 failed with error -22
[  398.493108][   T10] usb 4-1: USB disconnect, device number 26
[  398.526132][T12854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  398.955974][ T5912] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  399.134047][ T5912] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  399.139384][ T5912] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.143255][ T5912] usb 5-1: config 0 interface 0 has no altsetting 0
[  399.145831][ T5912] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  399.149301][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.160712][ T5912] usb 5-1: config 0 descriptor??
[  399.643228][T15529] loop3: detected capacity change from 0 to 32768
[  399.662619][T15529] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  399.683944][T15529] 
[  399.685056][T15529] ======================================================
[  399.687856][T15529] WARNING: possible circular locking dependency detected
[  399.690646][T15529] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  399.694269][T15529] ------------------------------------------------------
[  399.697313][T15529] syz.3.3618/15529 is trying to acquire lock:
[  399.699774][T15529] ffff88804a496f40 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.704983][T15529] 
[  399.704983][T15529] but task is already holding lock:
[  399.707905][T15529] ffff88804a491578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  399.711738][T15529] 
[  399.711738][T15529] which lock already depends on the new lock.
[  399.711738][T15529] 
[  399.715777][T15529] 
[  399.715777][T15529] the existing dependency chain (in reverse order) is:
[  399.719340][T15529] 
[  399.719340][T15529] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  399.722468][T15529]        lock_acquire+0x120/0x360
[  399.724521][T15529]        down_read+0x46/0x2e0
[  399.726440][T15529]        ocfs2_init_acl+0x2f9/0x720
[  399.728517][T15529]        ocfs2_mknod+0x1321/0x2050
[  399.730590][T15529]        ocfs2_create+0x1a5/0x440
[  399.732627][T15529]        path_openat+0x14f4/0x3830
[  399.734719][T15529]        do_filp_open+0x1fa/0x410
[  399.736723][T15529]        do_sys_openat2+0x121/0x1c0
[  399.738798][T15529]        __x64_sys_openat+0x138/0x170
[  399.741059][T15529]        do_syscall_64+0xfa/0x3b0
[  399.742936][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.744895][T15529] 
[  399.744895][T15529] -> #4 (jbd2_handle){++++}-{0:0}:
[  399.747301][T15529]        lock_acquire+0x120/0x360
[  399.749351][T15529]        start_this_handle+0x1fa7/0x21c0
[  399.751616][T15529]        jbd2__journal_start+0x2c1/0x5b0
[  399.753871][T15529]        jbd2_journal_start+0x2a/0x40
[  399.756004][T15529]        ocfs2_start_trans+0x376/0x6d0
[  399.758209][T15529]        ocfs2_mknod+0xe93/0x2050
[  399.759802][T15529]        ocfs2_create+0x1a5/0x440
[  399.761551][T15529]        path_openat+0x14f4/0x3830
[  399.763589][T15529]        do_filp_open+0x1fa/0x410
[  399.765612][T15529]        do_sys_openat2+0x121/0x1c0
[  399.767698][T15529]        __x64_sys_openat+0x138/0x170
[  399.769825][T15529]        do_syscall_64+0xfa/0x3b0
[  399.771791][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.774301][T15529] 
[  399.774301][T15529] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  399.777358][T15529]        lock_acquire+0x120/0x360
[  399.779157][T15529]        down_read+0x46/0x2e0
[  399.780600][T15529]        ocfs2_start_trans+0x36a/0x6d0
[  399.782235][T15529]        ocfs2_mknod+0xe93/0x2050
[  399.783802][T15529]        ocfs2_create+0x1a5/0x440
[  399.785829][T15529]        path_openat+0x14f4/0x3830
[  399.787870][T15529]        do_filp_open+0x1fa/0x410
[  399.789913][T15529]        do_sys_openat2+0x121/0x1c0
[  399.791995][T15529]        __x64_sys_openat+0x138/0x170
[  399.794143][T15529]        do_syscall_64+0xfa/0x3b0
[  399.796173][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.798669][T15529] 
[  399.798669][T15529] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  399.800946][T15529]        lock_acquire+0x120/0x360
[  399.802464][T15529]        ocfs2_start_trans+0x26b/0x6d0
[  399.804141][T15529]        ocfs2_mknod+0xe93/0x2050
[  399.805716][T15529]        ocfs2_create+0x1a5/0x440
[  399.807481][T15529]        path_openat+0x14f4/0x3830
[  399.809562][T15529]        do_filp_open+0x1fa/0x410
[  399.811112][T15529]        do_sys_openat2+0x121/0x1c0
[  399.812673][T15529]        __x64_sys_openat+0x138/0x170
[  399.814330][T15529]        do_syscall_64+0xfa/0x3b0
[  399.816265][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.818707][T15529] 
[  399.818707][T15529] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  399.822769][T15529]        lock_acquire+0x120/0x360
[  399.824686][T15529]        down_write+0x96/0x1f0
[  399.826631][T15529]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  399.829275][T15529]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  399.831885][T15529]        ocfs2_mknod+0xe32/0x2050
[  399.833846][T15529]        ocfs2_create+0x1a5/0x440
[  399.835755][T15529]        path_openat+0x14f4/0x3830
[  399.837808][T15529]        do_filp_open+0x1fa/0x410
[  399.839760][T15529]        do_sys_openat2+0x121/0x1c0
[  399.841755][T15529]        __x64_sys_openat+0x138/0x170
[  399.843819][T15529]        do_syscall_64+0xfa/0x3b0
[  399.845854][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.848405][T15529] 
[  399.848405][T15529] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  399.852542][T15529]        validate_chain+0xb9b/0x2140
[  399.854623][T15529]        __lock_acquire+0xab9/0xd20
[  399.856691][T15529]        lock_acquire+0x120/0x360
[  399.858716][T15529]        down_write+0x96/0x1f0
[  399.860612][T15529]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.863129][T15529]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  399.865807][T15529]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  399.868238][T15529]        ocfs2_xattr_set+0xb70/0x11f0
[  399.870206][T15529]        __vfs_setxattr+0x43c/0x480
[  399.871854][T15529]        __vfs_setxattr_noperm+0x12d/0x660
[  399.873689][T15529]        vfs_setxattr+0x16b/0x2f0
[  399.875282][T15529]        filename_setxattr+0x274/0x600
[  399.876974][T15529]        path_setxattrat+0x364/0x3a0
[  399.878652][T15529]        __x64_sys_setxattr+0xbc/0xe0
[  399.880316][T15529]        do_syscall_64+0xfa/0x3b0
[  399.881870][T15529]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.883836][T15529] 
[  399.883836][T15529] other info that might help us debug this:
[  399.883836][T15529] 
[  399.886933][T15529] Chain exists of:
[  399.886933][T15529]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  399.886933][T15529] 
[  399.891734][T15529]  Possible unsafe locking scenario:
[  399.891734][T15529] 
[  399.894014][T15529]        CPU0                    CPU1
[  399.895662][T15529]        ----                    ----
[  399.897310][T15529]   lock(&oi->ip_xattr_sem);
[  399.898755][T15529]                                lock(jbd2_handle);
[  399.900782][T15529]                                lock(&oi->ip_xattr_sem);
[  399.902922][T15529]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  399.905187][T15529] 
[  399.905187][T15529]  *** DEADLOCK ***
[  399.905187][T15529] 
[  399.907657][T15529] 3 locks held by syz.3.3618/15529:
[  399.909491][T15529]  #0: ffff888047f1c428 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  399.912531][T15529]  #1: ffff88804a491840 (&type->i_mutex_dir_key#19){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  399.916341][T15529]  #2: ffff88804a491578 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  399.919679][T15529] 
[  399.919679][T15529] stack backtrace:
[  399.921517][T15529] CPU: 0 UID: 0 PID: 15529 Comm: syz.3.3618 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  399.921530][T15529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  399.921536][T15529] Call Trace:
[  399.921543][T15529]  <TASK>
[  399.921548][T15529]  dump_stack_lvl+0x189/0x250
[  399.921562][T15529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  399.921572][T15529]  ? __pfx__printk+0x10/0x10
[  399.921584][T15529]  ? print_lock_name+0xde/0x100
[  399.921595][T15529]  print_circular_bug+0x2ee/0x310
[  399.921606][T15529]  check_noncircular+0x134/0x160
[  399.921615][T15529]  validate_chain+0xb9b/0x2140
[  399.921624][T15529]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  399.921635][T15529]  ? look_up_lock_class+0x74/0x170
[  399.921645][T15529]  ? register_lock_class+0x51/0x320
[  399.921657][T15529]  __lock_acquire+0xab9/0xd20
[  399.921670][T15529]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.921682][T15529]  lock_acquire+0x120/0x360
[  399.921693][T15529]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.921707][T15529]  down_write+0x96/0x1f0
[  399.921717][T15529]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.921730][T15529]  ? __pfx_down_write+0x10/0x10
[  399.921742][T15529]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  399.921758][T15529]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  399.921767][T15529]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.921776][T15529]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  399.921784][T15529]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  399.921792][T15529]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  399.921804][T15529]  ? stack_depot_save_flags+0x41b/0x860
[  399.921815][T15529]  ? kasan_save_track+0x4f/0x80
[  399.921824][T15529]  ? kasan_save_track+0x3e/0x80
[  399.921833][T15529]  ? __kasan_kmalloc+0x93/0xb0
[  399.921848][T15529]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  399.921860][T15529]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  399.921873][T15529]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  399.921882][T15529]  ? ocfs2_xattr_set+0xb70/0x11f0
[  399.921891][T15529]  ? __vfs_setxattr+0x43c/0x480
[  399.921902][T15529]  ? __vfs_setxattr_noperm+0x12d/0x660
[  399.921913][T15529]  ? vfs_setxattr+0x16b/0x2f0
[  399.921924][T15529]  ? filename_setxattr+0x274/0x600
[  399.921936][T15529]  ? path_setxattrat+0x364/0x3a0
[  399.921943][T15529]  ? __x64_sys_setxattr+0xbc/0xe0
[  399.921955][T15529]  ? do_syscall_64+0xfa/0x3b0
[  399.921964][T15529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.921979][T15529]  ? __kasan_kmalloc+0x93/0xb0
[  399.921989][T15529]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  399.922002][T15529]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  399.922015][T15529]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  399.922027][T15529]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  399.922038][T15529]  ? __lock_acquire+0xab9/0xd20
[  399.922050][T15529]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  399.922060][T15529]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  399.922069][T15529]  ? ocfs2_xattr_set+0xb36/0x11f0
[  399.922078][T15529]  ? up_write+0x1c4/0x420
[  399.922086][T15529]  ? ocfs2_xattr_set+0x334/0x11f0
[  399.922094][T15529]  ocfs2_xattr_set+0xb70/0x11f0
[  399.922106][T15529]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  399.922114][T15529]  ? ocfs2_permission+0x107/0x1b0
[  399.922124][T15529]  ? __pfx_ocfs2_permission+0x10/0x10
[  399.922136][T15529]  ? inode_permission+0x149/0x470
[  399.922144][T15529]  ? __pfx_ocfs2_permission+0x10/0x10
[  399.922154][T15529]  ? look_up_lock_class+0x74/0x170
[  399.922163][T15529]  ? register_lock_class+0x51/0x320
[  399.922175][T15529]  ? posix_xattr_acl+0x93/0xc0
[  399.922184][T15529]  ? evm_protect_xattr+0x4d4/0xa90
[  399.922193][T15529]  ? __pfx_evm_protect_xattr+0x10/0x10
[  399.922201][T15529]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  399.922209][T15529]  __vfs_setxattr+0x43c/0x480
[  399.922222][T15529]  __vfs_setxattr_noperm+0x12d/0x660
[  399.922234][T15529]  vfs_setxattr+0x16b/0x2f0
[  399.922246][T15529]  ? __pfx_vfs_setxattr+0x10/0x10
[  399.922256][T15529]  ? mnt_get_write_access+0x223/0x2a0
[  399.922267][T15529]  filename_setxattr+0x274/0x600
[  399.922280][T15529]  ? __pfx_filename_setxattr+0x10/0x10
[  399.922291][T15529]  ? getname_flags+0x1e5/0x540
[  399.922299][T15529]  path_setxattrat+0x364/0x3a0
[  399.922309][T15529]  ? __pfx_path_setxattrat+0x10/0x10
[  399.922317][T15529]  ? do_futex+0x333/0x420
[  399.922331][T15529]  ? rcu_is_watching+0x15/0xb0
[  399.922340][T15529]  __x64_sys_setxattr+0xbc/0xe0
[  399.922351][T15529]  do_syscall_64+0xfa/0x3b0
[  399.922361][T15529]  ? lockdep_hardirqs_on+0x9c/0x150
[  399.922397][T15529]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.922407][T15529]  ? exc_page_fault+0x9f/0xf0
[  399.922416][T15529]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  399.922425][T15529] RIP: 0033:0x7f9d7298ebe9
[  399.922435][T15529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  399.922444][T15529] RSP: 002b:00007f9d73766038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  399.922453][T15529] RAX: ffffffffffffffda RBX: 00007f9d72bb5fa0 RCX: 00007f9d7298ebe9
[  399.922460][T15529] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000240
[  399.922467][T15529] RBP: 00007f9d72a11e19 R08: 0000000000000000 R09: 0000000000000000
[  399.922472][T15529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  399.922477][T15529] R13: 00007f9d72bb6038 R14: 00007f9d72bb5fa0 R15: 00007ffdaa25c638
[  399.922486][T15529]  </TASK>
[  400.112907][ T5912] usb 5-1: string descriptor 0 read error: -71
[  400.127137][ T5912] uclogic 0003:256C:006D.0022: failed retrieving string descriptor #200: -71
[  400.130074][ T5912] uclogic 0003:256C:006D.0022: failed retrieving pen parameters: -71
[  400.132519][ T5912] uclogic 0003:256C:006D.0022: failed probing pen v2 parameters: -71
[  400.135006][ T5912] uclogic 0003:256C:006D.0022: failed probing parameters: -71
[  400.137391][ T5912] uclogic 0003:256C:006D.0022: probe with driver uclogic failed with error -71
[  400.142269][ T5912] usb 5-1: USB disconnect, device number 11
[  400.155270][T11715] ocfs2: Unmounting device (7,3) on (node local)
[  403.511088][  T975] TC_ACT_REPEAT abuse ?
[  404.206504][  T975] TC_ACT_REPEAT abuse ?

VM DIAGNOSIS:
17:03:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000115b RDI=000000000000115c RBP=00000000000003f8 RSP=ffffc90002b1e4b0
R8 =ffff888021810237 R9 =1ffff11004302046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af1910 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f9d737666c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f9d729733e0 CR3=0000000124352000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=75663d79636e6572 65686f632c6c6c75
XMM04=652c736b636f6c66 6c61636f6c2c6c6c XMM05=0000000000000000 00007f9d737656e0
XMM06=00007f9d737656e0 00007f9d73765560 XMM07=00007f9d737655a0 00007f9d73765580
XMM08=0000000000000000 0000000000000dbe XMM09=0000000000000000 00007f9d72a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff847e521f RBX=dffffc0000000000 RCX=ffff88810c849cc0 RDX=0000000000000000
RSI=000000005cf0fdab RDI=00000000f061b721 RBP=00000000f061b721 RSP=ffffc90007297868
R8 =ffff88810c849cc0 R9 =0000000000000003 R10=0000000000000009 R11=ffffffff847d2390
R12=ffffc90007297b68 R13=0000000000000016 R14=ffff88810964b628 R15=000000005cf0fdab
RIP=ffffffff810014b0 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd0a6a98c80 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30e1dff8 CR3=0000000109ff4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=2f68637461772f76 6564752f6e75722f
XMM02=0000000000000000 ff0000000000ff00 XMM03=000000ff00000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=622d383864342d63 6666352d63333536
XMM06=656431626632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00ffff00ffffffff ffffffffffffffff XMM09=6600003300000000 333a37622f396533
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
