last executing test programs:

12.124265525s ago: executing program 2 (id=826):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000000180)={[{@nolazytime}]}, 0x4, 0x982a, &(0x7f0000009b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x20100, 0x4)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd6f0, 0x0, 0x0, 0xfffffffd})
syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0)

7.895080747s ago: executing program 2 (id=837):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470"], 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0x35c}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

5.458766844s ago: executing program 0 (id=841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x22020400)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='befs\x00', 0x4015, 0x0)
sendto$inet6(r1, &(0x7f0000000280)=':', 0x1, 0x20008800, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x35)

5.353563847s ago: executing program 1 (id=843):
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}], 0x1})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)

5.243872299s ago: executing program 1 (id=844):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x7, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xa, 0x6, 0x6, 0x5, 0x8, 0x4, 0xf, 0x4], 0x3, [0xb, 0x101, 0xad1e, 0x2, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.044369183s ago: executing program 1 (id=846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x22020400)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
sendto$inet6(r1, &(0x7f0000000280)=':', 0x1, 0x20008800, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x35)
shutdown(r1, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e000100000000316c388d80", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x8000)
setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_read_part_table(0x1046, &(0x7f0000001080)="$eJzszUEOwVAYBOBpNS0JrsPGheycgJs4nlPIL21KhANY+L7Fy/9mFhN+qsuQ2qfaQ5L+o2xf1zK5rsfjnKRq9V6MmjTPZHE73WuYq+qzmdIan+Oumz6XeXr7tQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+kRAAD///ffDIA=")

4.031135062s ago: executing program 0 (id=847):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

3.892511155s ago: executing program 1 (id=848):
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0)
listen(0xffffffffffffffff, 0xfffffffe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102376, 0x18fe8)
syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120101023d260d40801b21e45d3501020301090212000103045009"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0})

3.837582556s ago: executing program 0 (id=849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r3, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81)
ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0)
gettid()
readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x100e}], 0x1)
close_range(r6, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x20800000000, 0xb, &(0x7f0000006680))

2.337064765s ago: executing program 2 (id=851):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x0)

2.277680896s ago: executing program 3 (id=852):
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x210020, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000380)={0xaa, 0x9})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
sendmmsg$unix(r5, &(0x7f000000ab80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0x0, 0x0, 0x20000000}}], 0x1, 0x80cc)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=@RTM_GETNSID={0x14, 0x5a, 0x9867f49bca16af, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10000084}, 0x8010)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={<r6=>0x0, @multicast2, @dev}, &(0x7f0000000200)=0xc)
setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0xaa, 0x7fff, @vifc_lcl_ifindex=r6, @multicast1}, 0x10)
ioctl$TCSETSF2(r3, 0x402c542d, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0)

2.232359327s ago: executing program 0 (id=853):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='rcu_utilization\x00', r1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

2.121583909s ago: executing program 3 (id=854):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

2.093927059s ago: executing program 3 (id=855):
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00')
r5 = socket(0x18, 0x800, 0x0)
connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0x1, @multicast, 'wg2\x00'}}, 0x1e)
sendfile(r5, r4, 0x0, 0x8)
write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a4c000000090a010400000000000000000a0000020900010073797a3100000000080005400000001d0900020073797a31e1ff000008000a4000000000080003400000001408000c400080000314000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x24000850}, 0x40)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)

2.06992685s ago: executing program 0 (id=856):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
unshare(0x22020400)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
sendto$inet6(r1, &(0x7f0000000280)=':', 0x1, 0x20008800, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='nv\x00', 0x35)
shutdown(r1, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e000100000000316c388d80", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x24040014}, 0x8000)
setsockopt(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_read_part_table(0x1046, &(0x7f0000001080)="$eJzszUEOwVAYBOBpNS0JrsPGheycgJs4nlPIL21KhANY+L7Fy/9mFhN+qsuQ2qfaQ5L+o2xf1zK5rsfjnKRq9V6MmjTPZHE73WuYq+qzmdIan+Oumz6XeXr7tQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf+kRAAD///ffDIA=")

1.997712412s ago: executing program 2 (id=857):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)

836.112554ms ago: executing program 3 (id=858):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
truncate(0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x2, 0x3, 0x10, 0x10001, 0xffffffff, 0x7fffffff})

761.507955ms ago: executing program 0 (id=859):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470"], 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000001400)={0x0, 0xec25, 0x400, 0x1, 0x35c}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000380)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

706.518496ms ago: executing program 2 (id=860):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./bus\x00', 0x10, &(0x7f0000000100)={[{@rootdir={'rootdir', 0x3d, 0x3}}, {@anchor={'anchor', 0x3d, 0x6}}, {@undelete}, {@uid}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@longad}, {@shortad}, {@uid_forget}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc49, &(0x7f0000001d40)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

526.32411ms ago: executing program 2 (id=861):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0x10c03, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYBLOB="e63aac3f19bcada0d08fd987d1abbc7adc57de046cbba95a01a0af102e32ca91961fd12cc8669e11cb2c186c615db7288ff2e606704da19ebc4fe53341a50bb620a4cbd8c6bc11329a148149240e3359e20ae69cacfa1310050e466ace69aa57c347a5d5401c04282d904ad2bc0c0108a8db27cf939bbcbe37b870dc96a949f1e2d0e14e46da460cda21c0dd4992d661fbe926d0773666088b81bb4e6ad1e6a65bafd33af8d49ab13263e401accac30cd51e8fff09368f0ef8266b8ddac7a06eaac9c37c6faf55db5422d1143496c0197b006c0e1faa94edefde85", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="2e2901cbb7d854aca83d0620b7cad67da36f0eef2a7aa8795da56997395f4d046b1edee5f5cd9347156beabaea5db5bc27b562aa106dd25e63a86d7859433385bdeff4b9af8b06e44deaa54b2ea28d83ea9bc4e5c726275242b80f69701e3a826b0e82a20f57769ffbfcbacfb3e5768d026fa0786489915726dccf9a7b0dcf154934d4aceef363120b91e5cf27605ce825", @ANYRES16, @ANYRESOCT], 0x2, 0x5fbf, &(0x7f0000002080)="$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")
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
open(&(0x7f0000000100)='./file1\x00', 0x202, 0xb320d63513e26186)

197.646586ms ago: executing program 1 (id=862):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp={0x3}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x0)

97.602808ms ago: executing program 3 (id=863):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(r0, 0x0, 0x0)

94.591248ms ago: executing program 1 (id=864):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='rcu_utilization\x00', r1}, 0x18)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

0s ago: executing program 3 (id=865):
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x2000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r0, @ANYBLOB="200001"], 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

Bluetooth: hci0: command tx timeout
[   73.942033][ T5791] Bluetooth: hci1: command tx timeout
[   73.950298][ T5796] Bluetooth: hci2: command tx timeout
[   74.437763][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.453050][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.809504][ T5889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5'.
[   75.974334][ T5791] Bluetooth: hci2: command tx timeout
[   75.975012][ T5785] Bluetooth: hci3: command tx timeout
[   76.214403][ T5791] Bluetooth: hci1: command tx timeout
[   76.247404][ T5902] (null): rxe_set_mtu: Set mtu to 1024
[   76.259498][ T5900] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8
[   76.443994][ T5784] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   76.582780][ T5902] infiniband syz2: set active
[   76.600412][ T5902] infiniband syz2: added bond_slave_0
[   76.657668][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   76.697512][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   76.741486][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   76.753482][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[   76.766775][ T5784] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[   76.778555][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.787095][ T5902] RDS/IB: syz2: added
[   76.787314][ T5784] usb 3-1: Product: syz
[   76.795711][ T5784] usb 3-1: Manufacturer: syz
[   76.825137][ T5902] smc: adding ib device syz2 with port count 1
[   76.927166][ T5902] smc:    ib device syz2 port 1 has pnetid 
[   77.452902][ T5784] usb 3-1: SerialNumber: syz
[   77.526344][ T5784] usb 3-1: config 0 descriptor??
[   77.769282][ T5784] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[   77.775371][ T5916] loop0: detected capacity change from 0 to 1024
[   77.805813][ T5916] hfsplus: unable to parse mount options
[   77.959044][ T5919] ptrace attach of "./syz-executor exec"[5787] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[   78.143107][ T5790] usb 3-1: USB disconnect, device number 2
[   78.614249][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   78.713695][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   79.463537][ T5832] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   79.529817][ T5931] comedi comedi0: Minor 3 could not be opened
[   79.618804][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   80.076928][ T5832] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   80.150561][ T5832] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[   80.163223][ T5832] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   80.176267][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.198160][ T5925] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   80.221633][ T5832] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[   80.532350][ T5941] loop0: detected capacity change from 0 to 1764
[   80.545861][ T5941] =======================================================
[   80.545861][ T5941] WARNING: The mand mount option has been deprecated and
[   80.545861][ T5941]          and is ignored by this kernel. Remove the mand
[   80.545861][ T5941]          option from the mount to silence this warning.
[   80.545861][ T5941] =======================================================
[   80.550408][ T5925] loop2: detected capacity change from 0 to 1024
[   80.580709][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.641458][ T5925] hfsplus: unable to parse mount options
[   80.732790][ T5925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   80.742021][ T5925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   80.987221][ T5790] usb 3-1: USB disconnect, device number 3
[   81.313061][ T5939] loop1: detected capacity change from 0 to 32768
[   81.347119][ T5939] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.19 (5939)
[   81.404164][ T5939] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.424951][ T5939] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   81.444099][ T5939] BTRFS info (device loop1): setting nodatasum
[   81.450306][ T5939] BTRFS info (device loop1): force zlib compression, level 3
[   81.493142][ T5939] BTRFS info (device loop1): enabling ssd optimizations
[   81.513473][ T5939] BTRFS info (device loop1): allowing degraded mounts
[   81.520377][ T5939] BTRFS info (device loop1): using free space tree
[   81.734478][ T5961] loop2: detected capacity change from 0 to 65
[   81.761478][ T5961] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   81.900749][  T786] cfg80211: failed to load regulatory.db
[   81.951012][ T5783] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.026562][   T28] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   83.079036][ T5989] loop3: detected capacity change from 0 to 1764
[   83.375961][ T5993] autofs4:pid:5993:autofs_fill_super: called with bogus options
[   84.135009][   T28] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   84.185936][   T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.202034][   T28] usb 2-1: Product: syz
[   84.208513][   T28] usb 2-1: Manufacturer: syz
[   84.213140][   T28] usb 2-1: SerialNumber: syz
[   84.278130][ T6000] loop2: detected capacity change from 0 to 65
[   84.300676][ T6000] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   84.555839][ T5979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.28'.
[   84.566075][   T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[   84.713757][   T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[   84.747856][   T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[   84.773763][   T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   84.794687][   T28] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   84.806769][   T28] lan78xx: probe of 2-1:1.0 failed with error -71
[   84.818868][ T5999] loop0: detected capacity change from 0 to 32768
[   84.822617][   T28] usb 2-1: USB disconnect, device number 2
[   84.882067][ T5999] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.34 (5999)
[   84.955036][ T5999] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.987476][ T5999] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   84.999076][ T5999] BTRFS info (device loop0): setting nodatasum
[   85.005534][ T5999] BTRFS info (device loop0): force zlib compression, level 3
[   85.013025][ T5999] BTRFS info (device loop0): enabling ssd optimizations
[   85.020321][ T5999] BTRFS info (device loop0): allowing degraded mounts
[   85.027443][ T5999] BTRFS info (device loop0): using free space tree
[   85.191566][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   85.283997][ T5778] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5778)
[   86.153849][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.404024][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.480408][ T6046] autofs4:pid:6046:autofs_fill_super: called with bogus options
[   86.680132][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.914979][ T6049] loop2: detected capacity change from 0 to 65
[   86.954307][ T6049] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[   87.143680][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.178417][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.427711][ T6044] loop3: detected capacity change from 0 to 32768
[   87.481185][ T6044] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   87.587194][ T6044] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[   87.693030][ T6044] XFS (loop3): Starting recovery (logdev: internal)
[   87.804548][ T6044] XFS (loop3): Ending recovery (logdev: internal)
[   88.111025][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   88.163466][ T5784] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.339881][ T6067] loop0: detected capacity change from 0 to 32768
[   88.375502][ T6067] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.383854][ T5784] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.399624][ T5784] usb 3-1: config 0 has no interfaces?
[   88.410577][ T6067] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   88.411082][ T5784] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   88.434013][ T6067] BTRFS info (device loop0): setting nodatasum
[   88.448855][ T6067] BTRFS info (device loop0): force zlib compression, level 3
[   88.460252][ T6067] BTRFS info (device loop0): enabling ssd optimizations
[   88.475884][ T6067] BTRFS info (device loop0): allowing degraded mounts
[   88.475888][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.478569][ T5784] usb 3-1: config 0 descriptor??
[   88.507482][ T6067] BTRFS info (device loop0): using free space tree
[   88.741678][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.076351][  T786] usb 3-1: USB disconnect, device number 4
[   89.189735][ T6097] autofs4:pid:6097:autofs_fill_super: called with bogus options
[   89.649786][ T6103] pim6reg: entered allmulticast mode
[   91.611534][ T6117] loop2: detected capacity change from 0 to 32768
[   91.655959][ T6117] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.60 (6117)
[   91.692808][ T6117] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   91.719469][ T6117] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   91.742125][ T6117] BTRFS info (device loop2): using free space tree
[   91.876209][ T6117] BTRFS info (device loop2): enabling ssd optimizations
[   91.896939][ T6117] BTRFS info (device loop2): auto enabling async discard
[   92.563190][ T6146] autofs4:pid:6146:autofs_fill_super: called with bogus options
[   92.751402][ T6150] loop3: detected capacity change from 0 to 128
[   92.852173][ T6138] loop0: detected capacity change from 0 to 32768
[   92.896102][ T6138] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.62 (6138)
[   92.935532][ T6150] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   93.008411][ T6138] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   93.022341][ T6150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.140949][ T6154] pim6reg: entered allmulticast mode
[   93.222013][ T6138] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   93.459490][ T6138] BTRFS info (device loop0): setting nodatasum
[   93.595393][ T6138] BTRFS info (device loop0): force zlib compression, level 3
[   93.682630][ T6138] BTRFS info (device loop0): enabling ssd optimizations
[   93.715312][ T6138] BTRFS info (device loop0): allowing degraded mounts
[   93.722146][ T6138] BTRFS info (device loop0): using free space tree
[   95.051956][ T5787] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.447965][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.732514][ T6198] autofs4:pid:6198:autofs_fill_super: called with bogus options
[   98.226151][ T6214] loop1: detected capacity change from 0 to 32768
[   98.249296][ T6214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.81 (6214)
[   98.311593][ T6221] loop3: detected capacity change from 0 to 32768
[   98.319002][ T6214] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.347662][ T6221] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.84 (6221)
[   98.353926][ T6214] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   98.408978][ T6221] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   98.414066][ T6214] BTRFS info (device loop1): using free space tree
[   98.472109][ T6221] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   98.503552][ T6221] BTRFS info (device loop3): using free space tree
[   98.560450][ T6214] BTRFS info (device loop1): enabling ssd optimizations
[   98.596892][ T6214] BTRFS info (device loop1): auto enabling async discard
[   98.641807][ T6221] BTRFS info (device loop3): enabling ssd optimizations
[   98.685641][ T6221] BTRFS info (device loop3): auto enabling async discard
[   98.742899][   T27] audit: type=1800 audit(1757674929.728:2): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.84" name="file1" dev="loop3" ino=260 res=0 errno=0
[   98.928368][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   99.156485][ T6261] autofs4:pid:6261:autofs_fill_super: called with bogus options
[  100.037564][ T6278] comedi comedi0: Minor 3 could not be opened
[  100.840956][ T6284] loop2: detected capacity change from 0 to 16
[  100.863099][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  100.925609][ T6284] erofs: (device loop2): mounted with root inode @ nid 36.
[  101.185898][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  101.196919][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 47 @ nid 36
[  101.206135][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36
[  101.216782][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 46 @ nid 36
[  101.226555][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 45 @ nid 36
[  101.236414][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  101.247215][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 43 @ nid 36
[  101.256666][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  101.267428][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 42 @ nid 36
[  101.277910][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  101.288802][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 41 @ nid 36
[  101.298097][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36
[  101.308736][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 40 @ nid 36
[  101.318061][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 39 @ nid 36
[  101.329213][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 38 @ nid 36
[  101.338967][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 36 @ nid 36
[  101.348635][ T6286] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36
[  101.359409][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 31 @ nid 36
[  101.368979][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  101.378434][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  101.388069][ T6286] erofs: (device loop2): z_erofs_readahead: readahead error at folio 19 @ nid 36
[  101.398607][ T6286] syz.2.94: attempt to access beyond end of device
[  101.398607][ T6286] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16
[  101.412666][ T6286] syz.2.94: attempt to access beyond end of device
[  101.412666][ T6286] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[  101.433776][ T6286] syz.2.94: attempt to access beyond end of device
[  101.433776][ T6286] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[  101.448432][ T6286] syz.2.94: attempt to access beyond end of device
[  101.448432][ T6286] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16
[  104.207540][ T6313] loop2: detected capacity change from 0 to 32768
[  104.248024][ T6313] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (6313)
[  104.321339][ T6313] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.361848][ T6313] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  104.404315][ T6313] BTRFS info (device loop2): using free space tree
[  104.660722][ T6338] loop1: detected capacity change from 0 to 32768
[  104.717589][ T6313] BTRFS info (device loop2): enabling ssd optimizations
[  104.734442][ T6313] BTRFS info (device loop2): auto enabling async discard
[  104.744262][ T6338] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.994771][ T6338] XFS (loop1): Ending clean mount
[  105.034478][ T6338] XFS (loop1): Quotacheck needed: Please wait.
[  105.140836][ T6338] XFS (loop1): Quotacheck: Done.
[  105.489283][ T6356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.106'.
[  105.936282][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  106.444201][ T6366] loop1: detected capacity change from 0 to 1024
[  106.467328][ T6366] hfsplus: unable to parse mount options
[  106.549117][ T6367] ptrace attach of "./syz-executor exec"[5783] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  106.675901][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  107.516330][ T6379] comedi comedi0: Minor 3 could not be opened
[  109.024812][ T6398] loop0: detected capacity change from 0 to 32768
[  109.038310][ T6398] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.120 (6398)
[  109.069685][ T6401] loop1: detected capacity change from 0 to 1024
[  109.093506][ T6398] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.104586][ T6401] hfsplus: unable to parse mount options
[  109.122013][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.121'.
[  109.145546][ T6398] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  109.169246][ T6401] ptrace attach of "./syz-executor exec"[5783] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  109.211027][ T6398] BTRFS info (device loop0): using free space tree
[  109.302099][    C0] vkms_vblank_simulate: vblank timer overrun
[  110.654221][ T6398] BTRFS info (device loop0): enabling ssd optimizations
[  110.755666][ T6398] BTRFS info (device loop0): auto enabling async discard
[  111.929878][ T6450] comedi comedi0: Minor 3 could not be opened
[  112.693690][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.841029][ T6482] netlink: 28 bytes leftover after parsing attributes in process `syz.0.140'.
[  114.659135][ T6495] Zero length message leads to an empty skb
[  114.846584][ T6499] loop2: detected capacity change from 0 to 65
[  114.863332][ T6499] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  114.875877][ T6499] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  115.430396][ T6492] loop3: detected capacity change from 0 to 32768
[  115.501809][ T6492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.146 (6492)
[  115.573279][ T6492] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.595255][ T6492] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  115.610141][ T6502] loop0: detected capacity change from 0 to 1764
[  115.623610][ T6492] BTRFS info (device loop3): using free space tree
[  115.749067][ T6514] loop2: detected capacity change from 0 to 128
[  115.819287][ T6514] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  115.890478][ T6514] hpfs: filesystem error: improperly stopped
[  115.902106][ T6514] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  115.910039][ T6514] hpfs: You really don't want any checks? You are crazy...
[  115.918817][ T6514] hpfs: hpfs_map_sector(): read error
[  115.924313][ T6514] hpfs: code page support is disabled
[  115.930879][ T6514] hpfs: hpfs_map_4sectors(): unaligned read
[  115.940060][ T6514] hpfs: hpfs_map_4sectors(): unaligned read
[  115.946317][ T6514] hpfs: filesystem error: unable to find root dir
[  115.957860][ T6492] BTRFS info (device loop3): enabling ssd optimizations
[  115.982516][ T6492] BTRFS info (device loop3): auto enabling async discard
[  116.301193][ T6529] loop2: detected capacity change from 0 to 4096
[  118.896006][ T6554] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  119.125083][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.026491][ T6573] comedi comedi0: Minor 3 could not be opened
[  120.408294][ T6582] loop1: detected capacity change from 0 to 1764
[  120.454824][  T786] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  120.656285][  T786] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  120.668695][  T786] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  120.679301][  T786] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  120.688562][  T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.708211][ T6580] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  120.732626][  T786] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  120.942467][ T6580] loop2: detected capacity change from 0 to 1024
[  120.950766][ T6580] hfsplus: unable to parse mount options
[  121.413439][ T6588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  121.450413][ T6588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  121.476335][ T5852] usb 3-1: USB disconnect, device number 5
[  122.059696][ T6599] loop3: detected capacity change from 0 to 1024
[  122.075026][ T6599] hfsplus: unable to parse mount options
[  122.115516][ T6599] ptrace attach of "./syz-executor exec"[5789] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  122.364175][ T6604] loop2: detected capacity change from 0 to 65
[  122.726459][ T6604] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  123.812519][ T6623] loop2: detected capacity change from 0 to 1764
[  123.895668][ T6630] loop0: detected capacity change from 0 to 1024
[  123.903250][ T6630] hfsplus: unable to parse mount options
[  123.980716][ T5899] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  124.015976][ T6630] ptrace attach of "./syz-executor exec"[5787] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  124.073496][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  124.164502][    C1] vkms_vblank_simulate: vblank timer overrun
[  124.502699][ T5832] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  124.516372][ T5832] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  124.526558][ T5832] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  124.573933][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.595085][ T6627] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  124.616521][ T5832] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  124.840962][ T6627] loop1: detected capacity change from 0 to 1024
[  124.848421][ T6627] hfsplus: unable to parse mount options
[  124.898570][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  124.984517][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.993436][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.002836][ T5832] usb 2-1: USB disconnect, device number 3
[  126.330167][ T6659] loop0: detected capacity change from 0 to 1024
[  126.449987][ T6657] loop2: detected capacity change from 0 to 65
[  126.467604][ T6659] hfsplus: unable to parse mount options
[  126.485722][ T6657] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway
[  126.517678][ T5778] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  126.541269][ T6659] ptrace attach of "./syz-executor exec"[5787] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              
[  127.109619][ T6677] loop0: detected capacity change from 0 to 1764
[  127.849492][ T6680] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.439985][ T6715] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  131.567190][ T6715] loop3: detected capacity change from 0 to 2048
[  131.608939][ T6715] EXT4-fs (loop3): invalid inodes per group: 1
[  131.608939][ T6715] 
[  131.654037][ T6718] mmap: syz.0.216 (6718) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  133.231091][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.237549][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.275177][ T5791] Bluetooth: hci1: link tx timeout
[  133.280918][ T5791] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa
[  133.493767][ T5784] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  134.269058][ T5784] usb 3-1: config 4 has an invalid interface number: 88 but max is 1
[  134.293421][ T5784] usb 3-1: config 4 has an invalid interface number: 29 but max is 1
[  134.322565][ T5784] usb 3-1: config 4 has no interface number 0
[  134.338985][ T5784] usb 3-1: config 4 has no interface number 1
[  134.355601][ T5784] usb 3-1: config 4 interface 88 altsetting 119 has an invalid endpoint with address 0x0, skipping
[  134.387063][ T5784] usb 3-1: config 4 interface 88 altsetting 119 has an invalid endpoint with address 0xD5, skipping
[  134.414961][ T5784] usb 3-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  134.447830][ T5784] usb 3-1: config 4 interface 29 altsetting 9 has an invalid endpoint with address 0xA6, skipping
[  134.479533][ T5784] usb 3-1: config 4 interface 88 has no altsetting 0
[  134.493418][ T5784] usb 3-1: config 4 interface 29 has no altsetting 0
[  134.512761][ T5784] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  134.532397][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.533110][ T6739] loop0: detected capacity change from 0 to 32768
[  134.542516][ T5784] usb 3-1: Product: syz
[  134.561813][ T5784] usb 3-1: Manufacturer: syz
[  134.566812][ T6739] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.223 (6739)
[  134.576848][ T5784] usb 3-1: SerialNumber: syz
[  134.614004][ T6739] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  134.635889][ T6731] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  134.643827][ T6739] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  134.666299][ T6739] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  134.693469][ T6739] BTRFS info (device loop0): use zstd compression, level 3
[  134.731197][ T6739] BTRFS info (device loop0): using free space tree
[  134.910885][ T6739] BTRFS info (device loop0): enabling ssd optimizations
[  134.941959][ T5784] usb 3-1: USB disconnect, device number 6
[  134.963526][ T6739] BTRFS info (device loop0): auto enabling async discard
[  134.995568][ T6742] loop1: detected capacity change from 0 to 32768
[  135.038386][   T27] audit: type=1800 audit(1757674966.018:3): pid=6739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.223" name="file1" dev="loop0" ino=260 res=0 errno=0
[  135.129440][ T6742] JBD2: Ignoring recovery information on journal
[  135.251116][ T6739] syz.0.223 (6739) used greatest stack depth: 20456 bytes left
[  135.290677][ T6742] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  135.326372][ T5787] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  135.424420][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  135.500233][ T5783] ocfs2: Unmounting device (7,1) on (node local)
[  135.527036][ T5778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop0 scanned by udevd (5778)
[  135.681746][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.225'.
[  135.710668][ T6766] vlan0: entered promiscuous mode
[  135.950181][ T6772] loop2: detected capacity change from 0 to 1024
[  136.313931][ T6779] loop3: detected capacity change from 0 to 65
[  136.351984][   T11] hfsplus: b-tree write err: -5, ino 4
[  136.369037][ T6779] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  137.851587][ T6799] loop1: detected capacity change from 0 to 4096
[  138.885275][ T6799] EXT4-fs (loop1): Test dummy encryption mode enabled
[  138.943733][ T6799] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  138.964101][ T6799] System zones: 0-5
[  138.988575][ T6799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.585694][ T6798] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  139.957237][ T6798] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  140.279725][ T6827] pim6reg: entered allmulticast mode
[  140.982221][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.305486][ T6820] loop2: detected capacity change from 0 to 32768
[  142.332887][ T6820] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.241 (6820)
[  142.475972][ T6820] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  142.533958][ T6820] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  142.581745][ T6820] BTRFS info (device loop2): using free space tree
[  142.754471][ T6840] loop3: detected capacity change from 0 to 32768
[  142.779252][ T6840] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.247 (6840)
[  142.841488][ T6840] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  142.866320][ T6840] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  142.887025][ T6840] BTRFS info (device loop3): using free space tree
[  142.981095][ T6820] BTRFS error (device loop2): open_ctree failed: -4
[  143.245490][ T6840] BTRFS info (device loop3): enabling ssd optimizations
[  143.665504][ T6840] BTRFS info (device loop3): auto enabling async discard
[  145.067415][ T6900] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  145.078794][ T6900] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  146.746852][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.526933][ T6915] loop2: detected capacity change from 0 to 32768
[  147.584392][ T6915] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  147.594704][ T6927] loop3: detected capacity change from 0 to 65
[  147.665801][ T6927] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  147.831498][ T6915] XFS (loop2): Ending clean mount
[  147.878685][ T6915] XFS (loop2): Quotacheck needed: Please wait.
[  147.986321][ T6915] XFS (loop2): Quotacheck: Done.
[  148.318767][ T5784] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  148.532870][ T5784] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  148.556115][ T5784] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  148.591395][ T5784] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  148.624653][ T5784] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  148.635691][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  148.654224][ T5784] usb 3-1: SerialNumber: syz
[  148.820983][ T6945] loop1: detected capacity change from 0 to 32768
[  148.844141][ T6945] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.271 (6945)
[  148.904079][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.932455][ T6945] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  148.943211][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  149.074795][ T6945] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  149.093707][ T6945] BTRFS info (device loop1): using free space tree
[  149.887341][ T6945] BTRFS info (device loop1): enabling ssd optimizations
[  149.901214][ T6945] BTRFS info (device loop1): auto enabling async discard
[  151.018375][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  151.353098][ T5784] rndis_wlan 3-1:253.0: RNDIS init failed, -71
[  151.374390][ T5784] rndis_wlan: probe of 3-1:253.0 failed with error -71
[  151.391882][ T5784] rndis_host 3-1:253.0: RNDIS init failed, -71
[  151.423980][ T5784] rndis_host: probe of 3-1:253.0 failed with error -71
[  151.449792][ T5784] usb 3-1: USB disconnect, device number 7
[  151.864622][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  151.942653][ T6991] random: crng reseeded on system resumption
[  152.471266][ T6997] loop1: detected capacity change from 0 to 164
[  152.545950][ T5778] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  153.526116][ T7024] loop1: detected capacity change from 0 to 1764
[  154.292892][ T7030] loop2: detected capacity change from 0 to 4096
[  154.303787][ T7028] loop0: detected capacity change from 0 to 8192
[  154.329384][ T7028] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  154.390534][ T7028] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 2048)
[  154.412069][ T7028] NILFS (loop0): mounting unchecked fs
[  154.452304][ T7028] NILFS (loop0): invalid segment: Checksum error in segment payload
[  154.478747][ T5778] udevd[5778]: incorrect nilfs2 checksum on /dev/loop0
[  154.485242][ T7028] NILFS (loop0): unable to fall back to spare super block
[  154.506161][ T7028] NILFS (loop0): error -22 while searching super root
[  154.593490][ T5778] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  155.815802][ T7063] syz.0.307 uses obsolete (PF_INET,SOCK_PACKET)
[  156.357871][ T7066] netlink: 'syz.2.306': attribute type 10 has an invalid length.
[  156.410300][ T7066] team0: Port device wlan1 added
[  156.764208][ T7071] loop0: detected capacity change from 0 to 65
[  156.842554][ T7071] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  157.843525][ T5885] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  157.859555][ T7082] loop2: detected capacity change from 0 to 1024
[  157.957020][ T7082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.006830][   T27] audit: type=1800 audit(1757674988.998:4): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.311" name="file2" dev="loop2" ino=16 res=0 errno=0
[  158.055419][ T5885] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  158.064249][ T5885] usb 2-1: config 0 has no interface number 0
[  158.070373][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  158.092408][ T5885] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  158.111632][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  158.131958][ T5885] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  158.152285][ T5885] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  158.167247][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.193558][ T5885] usb 2-1: config 0 descriptor??
[  158.203542][ T7078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  158.213044][ T7078] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  158.234859][ T5885] ldusb 2-1:0.55: Interrupt in endpoint not found
[  158.275515][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.373668][ T5785] Bluetooth: hci2: command tx timeout
[  158.449830][ T5885] usb 2-1: USB disconnect, device number 4
[  158.480873][ T7091] comedi comedi0: Minor 3 could not be opened
[  159.733546][ T5852] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  159.973598][ T5852] usb 1-1: Using ep0 maxpacket: 32
[  159.980808][ T5852] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  160.006235][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.030636][ T5852] usb 1-1: config 0 descriptor??
[  160.038392][ T7100] loop1: detected capacity change from 0 to 32768
[  160.088076][ T5852] gspca_main: sq930x-2.14.0 probing 041e:403c
[  160.440435][ T7111] loop1: detected capacity change from 0 to 256
[  160.477633][ T7111] FAT-fs (loop1): Directory bread(block 64) failed
[  160.486044][ T7111] FAT-fs (loop1): Directory bread(block 65) failed
[  160.503908][ T7111] FAT-fs (loop1): Directory bread(block 66) failed
[  160.511249][ T7111] FAT-fs (loop1): Directory bread(block 67) failed
[  160.536443][ T7111] FAT-fs (loop1): Directory bread(block 68) failed
[  160.543030][ T7111] FAT-fs (loop1): Directory bread(block 69) failed
[  160.556214][ T7111] FAT-fs (loop1): Directory bread(block 70) failed
[  160.562788][ T7111] FAT-fs (loop1): Directory bread(block 71) failed
[  160.572598][ T7111] FAT-fs (loop1): Directory bread(block 72) failed
[  160.583660][ T7111] FAT-fs (loop1): Directory bread(block 73) failed
[  161.805824][ T5852] gspca_sq930x: ucbus_write failed -110
[  161.811582][ T5852] sq930x: probe of 1-1:0.0 failed with error -110
[  163.245489][ T7127] lo speed is unknown, defaulting to 1000
[  163.251296][ T7127] lo speed is unknown, defaulting to 1000
[  163.257905][ T7127] lo speed is unknown, defaulting to 1000
[  163.267804][ T7127] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  163.280635][ T7127] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  163.311167][ T7127] lo speed is unknown, defaulting to 1000
[  163.318059][ T7127] lo speed is unknown, defaulting to 1000
[  163.326745][ T7127] lo speed is unknown, defaulting to 1000
[  163.333295][ T7127] lo speed is unknown, defaulting to 1000
[  163.460135][ T5885] usb 1-1: USB disconnect, device number 2
[  163.799463][ T7143] netlink: 'syz.2.332': attribute type 1 has an invalid length.
[  163.810511][ T7143] netlink: 'syz.2.332': attribute type 2 has an invalid length.
[  164.550064][ T7133] loop1: detected capacity change from 0 to 32768
[  164.577082][ T7133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.328 (7133)
[  164.640818][ T7133] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.671591][ T7133] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  164.703505][ T7133] BTRFS info (device loop1): using free space tree
[  164.766517][ T7139] loop3: detected capacity change from 0 to 32768
[  164.786815][ T7164] loop2: detected capacity change from 0 to 64
[  164.823954][ T7139] JBD2: Ignoring recovery information on journal
[  164.840671][ T7133] BTRFS info (device loop1): enabling ssd optimizations
[  164.853949][ T7133] BTRFS info (device loop1): auto enabling async discard
[  164.885468][ T7139] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  165.654140][ T7173] OCFS2: ERROR (device loop3): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total
[  165.688765][ T7173] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  165.723984][ T7175] loop0: detected capacity change from 0 to 1024
[  165.737540][ T7173] OCFS2: File system is now read-only.
[  165.787307][ T7173] (syz.3.331,7173,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  165.813150][ T7173] (syz.3.331,7173,1):ocfs2_claim_metadata:2008 ERROR: status = -30
[  165.836430][ T7173] (syz.3.331,7173,1):ocfs2_claim_metadata:2021 ERROR: status = -30
[  165.860973][ T7173] (syz.3.331,7173,1):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  165.888943][ T7173] (syz.3.331,7173,1):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  165.915431][   T48] hfsplus: b-tree write err: -5, ino 4
[  165.925687][ T7173] (syz.3.331,7173,1):ocfs2_extend_dir:3205 ERROR: status = -30
[  165.939496][ T7173] (syz.3.331,7173,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  165.948974][ T7173] (syz.3.331,7173,1):ocfs2_mknod:298 ERROR: status = -30
[  165.968289][ T7173] (syz.3.331,7173,1):ocfs2_mknod:502 ERROR: status = -30
[  165.983529][ T7173] (syz.3.331,7173,1):ocfs2_mkdir:659 ERROR: status = -30
[  166.034679][ T7173] syz.3.331 (7173) used greatest stack depth: 19560 bytes left
[  166.114470][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  166.594953][ T7191] comedi comedi0: Minor 3 could not be opened
[  167.989324][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.299686][ T7198] loop2: detected capacity change from 0 to 32768
[  168.320492][ T7198] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.344 (7198)
[  168.375902][ T7198] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.387221][ T7198] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  168.400026][ T7198] BTRFS info (device loop2): metadata ratio 2
[  168.449733][ T7198] BTRFS info (device loop2): allowing degraded mounts
[  168.460217][ T7198] BTRFS info (device loop2): force zlib compression, level 3
[  168.478777][ T7198] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  168.502757][ T7198] BTRFS info (device loop2): use zstd compression, level 3
[  168.617537][ T7198] BTRFS info (device loop2): force clearing of disk cache
[  168.625209][ T7198] BTRFS info (device loop2): turning on flush-on-commit
[  168.632870][ T7198] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  168.650907][ T7198] BTRFS info (device loop2): trying to use backup root at mount time
[  168.660574][ T7198] BTRFS info (device loop2): using free space tree
[  168.742956][ T7237] comedi comedi0: Minor 3 could not be opened
[  169.331978][ T7198] BTRFS info (device loop2): enabling ssd optimizations
[  169.373694][ T7198] BTRFS info (device loop2): rebuilding free space tree
[  169.528535][ T5784] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  169.745707][ T5784] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  169.809030][ T5784] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  169.810139][ T5788] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.834674][ T5784] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  169.850007][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.906289][ T7222] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  169.948344][ T5784] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  170.167057][ T7247] loop3: detected capacity change from 0 to 32768
[  170.237726][ T7222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.246706][ T7222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.256544][ T5852] usb 2-1: USB disconnect, device number 5
[  170.313458][ T7247] (syz.3.356,7247,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.350528][ T7247] (syz.3.356,7247,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  170.466291][ T7247] JBD2: Ignoring recovery information on journal
[  170.597752][ T7247] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  170.698343][ T7254] loop2: detected capacity change from 0 to 4096
[  170.834707][ T7256] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  170.972793][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  171.002115][ T7249] loop0: detected capacity change from 0 to 32768
[  171.026250][ T7249] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.358 (7249)
[  171.083073][ T7259] loop1: detected capacity change from 0 to 764
[  171.090027][ T7249] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  171.111507][ T7249] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  171.142084][ T7249] BTRFS info (device loop0): using free space tree
[  171.410794][ T7249] BTRFS info (device loop0): enabling ssd optimizations
[  171.455298][ T7249] BTRFS info (device loop0): auto enabling async discard
[  171.686480][ T7258] lo speed is unknown, defaulting to 1000
[  171.828344][ T7282] loop3: detected capacity change from 0 to 1024
[  171.836244][ T7282] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.846458][ T7282] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  171.857871][ T7282] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  171.866620][ T7282] EXT4-fs (loop3): Test dummy encryption mode enabled
[  171.873837][ T7282] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (37511!=20869)
[  171.884200][ T7282] EXT4-fs (loop3): group descriptors corrupted!
[  172.500044][ T7292] comedi comedi0: Minor 3 could not be opened
[  173.560240][ T7300] loop2: detected capacity change from 0 to 1024
[  173.723624][   T11] hfsplus: b-tree write err: -5, ino 4
[  174.173553][ T5885] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  174.421540][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.721995][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short
[  174.743515][ T5885] usb 3-1: not running at top speed; connect to a high speed hub
[  174.757469][ T5885] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  174.770458][ T5885] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1
[  174.784950][ T5885] usb 3-1: New USB device found, idVendor=1b80, idProduct=e421, bcdDevice=35.5d
[  174.817893][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.837983][ T5885] usb 3-1: Product: syz
[  174.842179][ T5885] usb 3-1: Manufacturer: syz
[  174.863564][ T5885] usb 3-1: SerialNumber: syz
[  175.687454][ T5885] usb 3-1: USB disconnect, device number 8
[  175.759768][ T7312] loop1: detected capacity change from 0 to 64
[  175.971122][ T7312] hfs: unable to locate alternate MDB
[  175.984413][ T7312] hfs: continuing without an alternate MDB
[  177.736192][ T7330] vivid-003: kernel_thread() failed
[  177.931383][ T7334] loop1: detected capacity change from 0 to 512
[  177.971879][ T7334] EXT4-fs: Mount option(s) incompatible with ext3
[  178.277242][ T7338] loop3: detected capacity change from 0 to 4096
[  178.529291][ T7338] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  178.937949][ T7344] loop1: detected capacity change from 0 to 1024
[  179.087067][ T7346] loop3: detected capacity change from 0 to 64
[  179.126352][  T990] hfsplus: b-tree write err: -5, ino 4
[  179.152717][ T7346] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'.
[  179.404516][ T7337] loop2: detected capacity change from 0 to 32768
[  179.426634][ T7337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.378 (7337)
[  179.483824][ T7337] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.518930][ T7337] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  179.603494][ T7337] BTRFS info (device loop2): using free space tree
[  179.636753][ T7351] loop3: detected capacity change from 0 to 8192
[  179.732976][ T7351] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF
[  179.780712][ T7337] BTRFS info (device loop2): enabling ssd optimizations
[  179.804836][ T7351] FAT-fs (loop3): Filesystem has been set read-only
[  179.833588][ T7337] BTRFS info (device loop2): auto enabling async discard
[  180.288226][ T7377] loop3: detected capacity change from 0 to 2048
[  180.371700][ T7377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.456963][ T7377] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.927697][ T7387] fs-verity: sha512 using implementation "sha512-avx2"
[  181.527387][ T7359] loop1: detected capacity change from 0 to 32768
[  181.573569][ T7359] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.784184][ T7359] XFS (loop1): Ending clean mount
[  181.808228][ T7359] XFS (loop1): Quotacheck needed: Please wait.
[  181.880010][ T7359] XFS (loop1): Quotacheck: Done.
[  182.704661][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.752020][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  182.765028][ T7404] loop0: detected capacity change from 0 to 1024
[  182.939240][ T3546] hfsplus: b-tree write err: -5, ino 4
[  183.481773][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.315541][ T7419] loop0: detected capacity change from 0 to 8192
[  185.130643][ T7423] loop1: detected capacity change from 0 to 32768
[  185.167793][ T7426] loop2: detected capacity change from 0 to 32768
[  185.180453][ T7423] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.401 (7423)
[  185.202458][ T7426] JBD2: Ignoring recovery information on journal
[  185.250544][ T7423] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.311848][ T7423] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  185.353548][ T7423] BTRFS info (device loop1): using free space tree
[  185.363051][ T7426] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  185.563518][ T7423] BTRFS info (device loop1): enabling ssd optimizations
[  185.605824][ T7423] BTRFS info (device loop1): auto enabling async discard
[  185.652562][ T5788] ocfs2: Unmounting device (7,2) on (node local)
[  186.372951][ T7449] loop0: detected capacity change from 0 to 32768
[  186.455516][ T7449] JBD2: Ignoring recovery information on journal
[  186.694874][ T7449] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  187.570284][ T7449] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 73 has 4294901761 used bits but only 0 total
[  187.647118][ T7449] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  187.675526][ T7449] OCFS2: File system is now read-only.
[  187.681112][ T7449] (syz.0.403,7449,1):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30
[  187.699766][ T7449] (syz.0.403,7449,1):ocfs2_claim_metadata:2008 ERROR: status = -30
[  187.721700][ T7449] (syz.0.403,7449,1):ocfs2_claim_metadata:2021 ERROR: status = -30
[  187.740637][ T7449] (syz.0.403,7449,1):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  187.757393][ T7477] loop2: detected capacity change from 0 to 4096
[  187.767654][ T7449] (syz.0.403,7449,1):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  187.778016][ T7477] ntfs3: Unknown parameter '00000000000000000000003'
[  187.794516][ T7449] (syz.0.403,7449,1):ocfs2_extend_dir:3205 ERROR: status = -30
[  187.805162][ T7449] (syz.0.403,7449,1):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  187.827528][ T7449] (syz.0.403,7449,1):ocfs2_mknod:298 ERROR: status = -30
[  187.843510][ T7449] (syz.0.403,7449,1):ocfs2_mknod:502 ERROR: status = -30
[  187.859397][ T7449] (syz.0.403,7449,1):ocfs2_mkdir:659 ERROR: status = -30
[  187.993763][ T7449] syz.0.403 (7449) used greatest stack depth: 18736 bytes left
[  188.060007][ T7477] loop2: detected capacity change from 0 to 4096
[  188.099106][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  188.100411][ T7477] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  188.123118][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  188.231233][ T7477] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  188.267005][ T7477] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  188.799227][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.416'.
[  189.027905][ T7493] loop2: detected capacity change from 0 to 164
[  189.256374][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  190.184763][ T7504] loop1: detected capacity change from 0 to 64
[  191.146000][ T7525] loop3: detected capacity change from 0 to 164
[  191.729477][ T5791] Bluetooth: hci3: command 0x0406 tx timeout
[  191.730410][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  192.378545][ T7544] loop2: detected capacity change from 0 to 1024
[  192.392940][ T7544] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  192.458729][ T7544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.483562][ T5832] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  192.532154][ T7549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.434'.
[  192.581554][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.685718][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  192.707915][ T5832] usb 4-1: config 0 has no interfaces?
[  192.723244][ T5832] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  192.748539][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.771126][ T5832] usb 4-1: config 0 descriptor??
[  192.850825][ T7554] loop2: detected capacity change from 0 to 256
[  192.902688][ T7554] FAT-fs (loop2): Directory bread(block 64) failed
[  192.913843][ T7554] FAT-fs (loop2): Directory bread(block 65) failed
[  192.920872][ T7554] FAT-fs (loop2): Directory bread(block 66) failed
[  192.931360][ T7554] FAT-fs (loop2): Directory bread(block 67) failed
[  192.942016][ T7554] FAT-fs (loop2): Directory bread(block 68) failed
[  192.950825][ T7554] FAT-fs (loop2): Directory bread(block 69) failed
[  192.963535][ T7554] FAT-fs (loop2): Directory bread(block 70) failed
[  192.970179][ T7554] FAT-fs (loop2): Directory bread(block 71) failed
[  192.998031][ T7554] FAT-fs (loop2): Directory bread(block 72) failed
[  193.013450][ T7554] FAT-fs (loop2): Directory bread(block 73) failed
[  193.033758][ T5832] usb 4-1: USB disconnect, device number 2
[  193.081297][ T7554] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  193.114018][ T7554] process 'syz.2.439' launched './file0' with NULL argv: empty string added
[  193.198043][ T3546] kworker/u4:13: attempt to access beyond end of device
[  193.198043][ T3546] loop2: rw=1, sector=1224, nr_sectors = 4 limit=256
[  194.551965][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.558387][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.579056][ T7570] loop1: detected capacity change from 0 to 164
[  195.127649][ T7583] loop3: detected capacity change from 0 to 764
[  195.187681][ T5778] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  195.223727][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  195.307490][ T7583] loop3: detected capacity change from 0 to 4096
[  195.328051][ T7583] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  195.427538][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.458338][    T9] usb 1-1: config 0 has no interfaces?
[  195.473482][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  195.513161][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.535024][    T9] usb 1-1: config 0 descriptor??
[  195.853870][ T7588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.451'.
[  195.947251][    T9] usb 1-1: USB disconnect, device number 3
[  197.211068][ T7599] loop1: detected capacity change from 0 to 64
[  197.264571][ T7599] hfs: unable to locate alternate MDB
[  197.269992][ T7599] hfs: continuing without an alternate MDB
[  197.735405][ T7607] loop3: detected capacity change from 0 to 128
[  197.756388][ T7607] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  197.783526][ T7607] hpfs: filesystem error: improperly stopped
[  197.813697][ T7607] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  197.821479][ T7607] hpfs: You really don't want any checks? You are crazy...
[  197.863682][ T7607] hpfs: hpfs_map_sector(): read error
[  197.869112][ T7607] hpfs: code page support is disabled
[  197.895725][ T7607] hpfs: hpfs_map_4sectors(): unaligned read
[  197.901768][ T7607] hpfs: hpfs_map_4sectors(): unaligned read
[  198.150647][ T7607] hpfs: filesystem error: unable to find root dir
[  198.923373][    C0] sched: RT throttling activated
[  199.120372][ T7624] loop2: detected capacity change from 0 to 1024
[  199.256959][   T48] hfsplus: b-tree write err: -5, ino 4
[  199.260605][ T7628] loop1: detected capacity change from 0 to 64
[  199.270967][ T7628] hfs: unable to locate alternate MDB
[  199.277702][ T7628] hfs: continuing without an alternate MDB
[  199.303600][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  199.508474][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.781751][    T9] usb 4-1: config 0 has no interfaces?
[  199.885415][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  199.902991][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.925350][    T9] usb 4-1: config 0 descriptor??
[  200.106654][ T7633] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  200.139685][ T7633] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  200.459049][ T7640] loop2: detected capacity change from 0 to 764
[  200.497123][ T5852] usb 4-1: USB disconnect, device number 3
[  200.626732][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  200.693692][ T7645] loop1: detected capacity change from 0 to 64
[  200.971491][ T7647] loop0: detected capacity change from 0 to 65
[  200.995011][ T7640] loop2: detected capacity change from 0 to 4096
[  201.008205][ T7647] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  201.069776][ T7640] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  203.899552][ T7660] loop1: detected capacity change from 0 to 32768
[  204.076440][ T7665] loop3: detected capacity change from 0 to 40427
[  204.100999][ T7665] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  204.109585][ T7665] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  204.135523][ T7665] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6
[  204.149053][ T7665] F2FS-fs (loop3): invalid crc value
[  204.163908][ T7665] F2FS-fs (loop3): Found nat_bits in checkpoint
[  204.195447][ T7665] F2FS-fs (loop3): Start checkpoint disabled!
[  204.213466][ T7665] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  204.220678][ T7665] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  204.257028][ T7660] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.480 (7660)
[  204.808896][ T7660] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.946816][ T7660] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  204.980146][ T7660] BTRFS info (device loop1): using free space tree
[  205.039054][ T7673] pim6reg: entered allmulticast mode
[  205.239162][ T7660] BTRFS info (device loop1): enabling ssd optimizations
[  205.257755][ T7660] BTRFS info (device loop1): auto enabling async discard
[  205.627200][ T3456] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  205.866082][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  206.124128][ T7703] loop2: detected capacity change from 0 to 4096
[  206.162371][ T7703] EXT4-fs (loop2): Test dummy encryption mode enabled
[  206.211764][ T7703] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  206.246091][ T7703] System zones: 0-5
[  206.286121][ T7703] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  206.497564][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.626447][ T7721] loop2: detected capacity change from 0 to 4096
[  207.645902][ T7705] loop3: detected capacity change from 0 to 32768
[  207.670545][ T7705] (syz.3.490,7705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  207.695619][ T7705] (syz.3.490,7705,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  207.703682][ T7725] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.839790][ T7705] JBD2: Ignoring recovery information on journal
[  208.028100][ T7705] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  208.306358][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  208.323037][ T7741] loop2: detected capacity change from 0 to 4096
[  208.380586][ T7741] EXT4-fs (loop2): Test dummy encryption mode enabled
[  208.443182][ T7741] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  208.478155][ T7741] System zones: 0-5
[  208.503205][ T7741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.760407][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.092868][ T7743] loop0: detected capacity change from 0 to 32768
[  209.151947][ T7743] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.501 (7743)
[  209.539919][ T7743] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  209.739305][ T7743] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  209.913929][ T7743] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  210.025946][ T7743] BTRFS info (device loop0): use zstd compression, level 3
[  210.033287][ T7743] BTRFS info (device loop0): using free space tree
[  210.169443][ T7743] BTRFS info (device loop0): enabling ssd optimizations
[  210.191609][ T7743] BTRFS info (device loop0): auto enabling async discard
[  210.254591][   T27] audit: type=1800 audit(1757675041.228:5): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.501" name="file1" dev="loop0" ino=260 res=0 errno=0
[  210.350670][ T5787] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  210.502585][ T7753] loop3: detected capacity change from 0 to 32768
[  210.678443][ T7753] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  210.801089][ T7806] loop1: detected capacity change from 0 to 4096
[  210.841258][ T7806] EXT4-fs (loop1): Test dummy encryption mode enabled
[  210.879419][ T7806] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  210.933871][   T55] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  210.936748][ T7806] System zones: 0-5
[  210.967609][ T7753] XFS (loop3): Ending clean mount
[  211.000971][ T7806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  211.032770][ T7809] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  211.057565][ T7809] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  211.157480][   T55] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  211.179136][   T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.193752][   T55] usb 3-1: Product: syz
[  211.201798][ T5789] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  211.203221][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.213398][   T55] usb 3-1: Manufacturer: syz
[  211.231466][   T55] usb 3-1: SerialNumber: syz
[  211.439400][ T7813] loop1: detected capacity change from 0 to 4096
[  211.466339][ T7813] ntfs3: Unknown parameter '00000000000000000000003'
[  211.697240][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  211.937241][ T7821] befs: (nullb0): invalid magic header
[  212.399649][ T7821] loop0: detected capacity change from 0 to 8192
[  212.429457][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  212.450522][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  212.493930][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  212.514047][   T55] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  212.547537][   T55] lan78xx: probe of 3-1:1.0 failed with error -71
[  212.621449][   T55] usb 3-1: USB disconnect, device number 9
[  212.896644][ T7827] loop3: detected capacity change from 0 to 4096
[  214.582839][ T7828] loop0: detected capacity change from 0 to 32768
[  214.609431][ T7828] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.521 (7828)
[  214.668980][ T7839] loop2: detected capacity change from 0 to 4096
[  214.719040][ T7839] EXT4-fs (loop2): Test dummy encryption mode enabled
[  214.761522][ T7839] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  214.791053][ T7839] System zones: 0-5
[  214.851345][ T7828] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  214.858342][ T7839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.999318][ T7828] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  215.272992][ T7828] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  215.497136][ T7828] BTRFS info (device loop0): use zstd compression, level 3
[  215.594025][ T7828] BTRFS info (device loop0): using free space tree
[  215.698482][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  215.711599][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  215.747980][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.760591][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  215.775463][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  215.834303][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  215.878099][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  215.919652][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  215.953195][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  215.975980][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  216.008029][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  216.019739][ T7828] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  216.061041][ T7828] BTRFS error (device loop0): open_ctree failed: -12
[  216.210481][ T7868] loop2: detected capacity change from 0 to 4096
[  216.234422][ T7868] ntfs3: Unknown parameter '00000000000000000000003'
[  216.894191][ T7875] loop1: detected capacity change from 0 to 4096
[  216.927478][ T7875] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  217.893769][ T7870] loop3: detected capacity change from 0 to 32768
[  218.063153][ T7870] JBD2: Ignoring recovery information on journal
[  218.158568][ T7886] loop0: detected capacity change from 0 to 128
[  218.178591][ T7872] lo speed is unknown, defaulting to 1000
[  218.204438][ T7870] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  218.262380][ T7886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  218.353689][ T7886] hpfs: filesystem error: improperly stopped
[  218.400799][ T7886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  218.518887][ T7886] hpfs: You really don't want any checks? You are crazy...
[  218.858177][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  218.887117][ T7886] hpfs: hpfs_map_sector(): read error
[  219.043609][ T7886] hpfs: code page support is disabled
[  219.071095][ T7886] hpfs: hpfs_map_4sectors(): unaligned read
[  219.153823][ T7886] hpfs: hpfs_map_4sectors(): unaligned read
[  219.159775][ T7886] hpfs: filesystem error: unable to find root dir
[  219.321943][ T7886] hpfs: hpfs_map_4sectors(): unaligned read
[  219.571899][ T7897] loop2: detected capacity change from 0 to 2048
[  219.611613][ T7900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  220.892140][ T7895] loop3: detected capacity change from 0 to 32768
[  221.023527][ T7895] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.155790][ T7924] loop2: detected capacity change from 0 to 64
[  221.362017][ T7895] XFS (loop3): Ending clean mount
[  221.433904][ T7895] XFS (loop3): Quotacheck needed: Please wait.
[  221.903061][ T7934] loop1: detected capacity change from 0 to 64
[  221.940931][ T7895] XFS (loop3): Quotacheck: Done.
[  221.971999][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.551'.
[  222.358258][ T5789] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.714737][ T7956] loop1: detected capacity change from 0 to 40427
[  223.740957][ T7956] F2FS-fs (loop1): invalid crc value
[  223.761229][ T7956] F2FS-fs (loop1): Found nat_bits in checkpoint
[  223.797293][ T7956] F2FS-fs (loop1): Start checkpoint disabled!
[  223.809179][ T7956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  223.909486][   T27] audit: type=1800 audit(1757675054.898:6): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.561" name="file1" dev="loop1" ino=10 res=0 errno=0
[  224.016355][ T7965] syz.1.561: attempt to access beyond end of device
[  224.016355][ T7965] loop1: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  224.486303][ T7968] loop2: detected capacity change from 0 to 64
[  224.506096][ T2879] kworker/u4:6: attempt to access beyond end of device
[  224.506096][ T2879] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  224.607911][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  224.702263][ T2879] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  225.635069][ T7969] loop0: detected capacity change from 0 to 32768
[  225.649425][ T7969] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.564 (7969)
[  225.691752][ T7969] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  225.704864][ T7969] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  225.716729][ T7969] BTRFS info (device loop0): using free space tree
[  225.841702][ T7969] BTRFS info (device loop0): enabling ssd optimizations
[  225.867544][ T7969] BTRFS info (device loop0): auto enabling async discard
[  225.932417][ T7971] loop3: detected capacity change from 0 to 32768
[  226.001146][ T7971] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.004029][ T5787] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.085308][ T7971] XFS (loop3): Ending clean mount
[  226.104717][ T7971] XFS (loop3): Quotacheck needed: Please wait.
[  226.214708][ T7971] XFS (loop3): Quotacheck: Done.
[  226.693899][ T5852] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  226.983768][ T5852] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  227.143568][ T5852] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  227.239178][ T5852] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  227.262966][ T5852] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.281682][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  227.290335][ T5852] usb 4-1: SerialNumber: syz
[  227.515442][ T7971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.646230][ T7971] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  228.979946][ T8027] loop0: detected capacity change from 0 to 4096
[  228.992611][ T8027] ntfs3: Unknown parameter '00000000000000000000003'
[  229.073835][ T8031] loop2: detected capacity change from 0 to 128
[  229.424412][ T8036] loop0: detected capacity change from 0 to 128
[  229.436274][ T8036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  229.454629][ T8036] hpfs: filesystem error: improperly stopped
[  229.462690][ T8036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  229.470974][ T8036] hpfs: You really don't want any checks? You are crazy...
[  229.479932][ T8036] hpfs: hpfs_map_sector(): read error
[  229.489930][ T8036] hpfs: code page support is disabled
[  229.497391][ T8036] hpfs: hpfs_map_4sectors(): unaligned read
[  229.510196][ T8036] hpfs: hpfs_map_4sectors(): unaligned read
[  229.516248][ T8036] hpfs: filesystem error: unable to find root dir
[  229.702616][ T5852] rndis_wlan 4-1:253.0: RNDIS init failed, -71
[  229.709180][ T5789] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  229.719936][ T5852] rndis_wlan: probe of 4-1:253.0 failed with error -71
[  229.733672][ T5852] rndis_host 4-1:253.0: RNDIS init failed, -71
[  229.740016][ T5852] rndis_host: probe of 4-1:253.0 failed with error -71
[  229.754119][ T5852] usb 4-1: USB disconnect, device number 4
[  231.209204][ T8067] vivid-007: kernel_thread() failed
[  231.472406][ T8063] syz.1.590 (8063) used greatest stack depth: 17960 bytes left
[  231.877173][ T8076] befs: (nullb0): invalid magic header
[  233.016125][ T8089] loop0: detected capacity change from 0 to 32768
[  233.067163][ T8093] loop1: detected capacity change from 0 to 4096
[  233.085647][ T8093] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  233.095040][ T8089] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.177006][ T8089] XFS (loop0): Ending clean mount
[  233.186719][ T8089] XFS (loop0): Quotacheck needed: Please wait.
[  233.369755][ T8089] XFS (loop0): Quotacheck: Done.
[  233.386903][ T8092] lo speed is unknown, defaulting to 1000
[  233.489873][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  233.577016][ T8106] loop3: detected capacity change from 0 to 64
[  233.697923][ T8106] hfs: unable to locate alternate MDB
[  233.714614][ T8106] hfs: continuing without an alternate MDB
[  234.048044][ T8111] loop1: detected capacity change from 0 to 64
[  234.636016][ T8114] vivid-001: kernel_thread() failed
[  234.748790][ T8111] hfs: unable to locate alternate MDB
[  234.765413][ T8111] hfs: continuing without an alternate MDB
[  235.201005][ T8120] befs: (nullb0): invalid magic header
[  236.510707][ T8133] loop1: detected capacity change from 0 to 64
[  236.566119][ T8133] hfs: unable to locate alternate MDB
[  236.585721][ T8133] hfs: continuing without an alternate MDB
[  237.054178][ T8127] loop3: detected capacity change from 0 to 32768
[  237.079667][ T8127] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.607 (8127)
[  237.493128][ T8127] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  237.718131][ T8127] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  237.761275][ T8127] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  237.824821][ T8127] BTRFS info (device loop3): use zstd compression, level 3
[  237.832104][ T8127] BTRFS info (device loop3): using free space tree
[  238.050535][ T8143] loop0: detected capacity change from 0 to 4096
[  238.136537][ T8161] befs: (nullb0): invalid magic header
[  238.561781][ T8143] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  238.755378][ T8127] BTRFS info (device loop3): enabling ssd optimizations
[  238.762389][ T8127] BTRFS info (device loop3): auto enabling async discard
[  238.914555][   T27] audit: type=1800 audit(1757675069.908:7): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.607" name="file1" dev="loop3" ino=260 res=0 errno=0
[  238.950841][ T8168] loop2: detected capacity change from 0 to 256
[  239.032326][ T8168] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  239.090091][ T8141] lo speed is unknown, defaulting to 1000
[  239.192069][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  239.206130][ T8168] syz.2.617: attempt to access beyond end of device
[  239.206130][ T8168] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[  239.256801][ T8168] syz.2.617: attempt to access beyond end of device
[  239.256801][ T8168] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[  239.300241][ T8168] syz.2.617: attempt to access beyond end of device
[  239.300241][ T8168] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[  239.360897][   T27] audit: type=1800 audit(1757675070.348:8): pid=8168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.617" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[  239.399363][ T5778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5778)
[  239.539652][ T8150] loop1: detected capacity change from 0 to 32768
[  239.623910][ T8150] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  239.976891][ T8150] XFS (loop1): Ending clean mount
[  240.016238][ T8150] XFS (loop1): Quotacheck needed: Please wait.
[  240.092550][ T8150] XFS (loop1): Quotacheck: Done.
[  241.006255][ T5783] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  241.998033][ T8224] loop2: detected capacity change from 0 to 164
[  242.172896][ T8206] loop3: detected capacity change from 0 to 32768
[  242.192128][ T8206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.628 (8206)
[  242.244416][ T8206] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  242.281042][ T8206] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  242.293862][ T8206] BTRFS info (device loop3): using free space tree
[  242.366994][ T8206] BTRFS info (device loop3): enabling ssd optimizations
[  242.387809][ T8206] BTRFS info (device loop3): auto enabling async discard
[  242.448439][ T8221] loop0: detected capacity change from 0 to 32768
[  242.607566][ T8221] JBD2: Ignoring recovery information on journal
[  242.648702][ T3456] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  242.726163][ T8246] tipc: Started in network mode
[  242.731298][ T8246] tipc: Node identity c2ec0a55cdb6, cluster identity 4711
[  242.738955][ T8246] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.748031][ T5789] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  242.766026][ T8245] tipc: Disabling bearer <eth:syzkaller0>
[  242.790605][ T8221] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  242.933876][ T5787] ocfs2: Unmounting device (7,0) on (node local)
[  243.373604][ T5885] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  243.664950][ T5885] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  243.696300][ T5885] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  243.745023][ T5885] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  243.780804][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.179250][   T23] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  244.307297][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.316200][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.400070][ T5885] usb 1-1: USB disconnect, device number 4
[  244.429674][   T23] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  244.467214][   T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.504887][ T8270] comedi comedi3: pcl724: I/O port conflict (0xfffffffffffffbff,4)
[  244.523171][   T23] usb 3-1: Product: syz
[  244.527798][   T23] usb 3-1: Manufacturer: syz
[  244.532414][   T23] usb 3-1: SerialNumber: syz
[  244.620764][ T8274] fuse: Bad value for 'fd'
[  244.813171][ T8256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.639'.
[  244.883449][   T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  244.902694][   T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  244.916065][   T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  244.928062][   T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  244.954036][   T23] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  244.964767][   T23] lan78xx: probe of 3-1:1.0 failed with error -71
[  244.984351][   T23] usb 3-1: USB disconnect, device number 10
[  245.101526][ T8281] loop0: detected capacity change from 0 to 164
[  245.135555][ T8276] loop3: detected capacity change from 0 to 32768
[  245.156889][ T5778] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  245.191311][ T8276] JBD2: Ignoring recovery information on journal
[  245.241435][ T8276] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  245.321977][ T5789] ocfs2: Unmounting device (7,3) on (node local)
[  246.611750][ T8292] loop1: detected capacity change from 0 to 4096
[  246.906274][ T8292] ntfs3: Unknown parameter '00000000000000000000003'
[  247.752133][ T8312] vlan2: entered promiscuous mode
[  247.758015][ T8312] macvtap0: entered promiscuous mode
[  247.903485][ T5832] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  248.123536][   T23] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  248.325884][ T5832] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  248.336332][ T5832] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  248.345452][ T5832] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  248.354531][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.405016][   T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  248.415321][   T23] usb 3-1: config 0 has no interfaces?
[  248.421232][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  248.431170][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.440948][   T23] usb 3-1: config 0 descriptor??
[  248.534083][ T5784] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  248.631468][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.640186][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.661366][ T5832] usb 1-1: USB disconnect, device number 5
[  248.749380][   T23] usb 3-1: USB disconnect, device number 11
[  248.758281][ T5784] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  248.770584][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.779405][ T5784] usb 4-1: Product: syz
[  248.784015][ T5784] usb 4-1: Manufacturer: syz
[  248.788616][ T5784] usb 4-1: SerialNumber: syz
[  249.020382][ T8317] netlink: 16 bytes leftover after parsing attributes in process `syz.3.657'.
[  249.185762][ T5784] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  249.767322][ T5784] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  249.955145][ T5784] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  249.994459][ T5784] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  250.010245][ T5784] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  250.054451][ T8324] loop1: detected capacity change from 0 to 64
[  250.072414][ T5784] lan78xx: probe of 4-1:1.0 failed with error -71
[  250.094910][ T8324] hfs: unable to locate alternate MDB
[  250.099731][ T5784] usb 4-1: USB disconnect, device number 5
[  250.114782][ T8328] loop0: detected capacity change from 0 to 164
[  250.122264][ T8324] hfs: continuing without an alternate MDB
[  250.123045][ T8327] overlayfs: failed to resolve './file1': -2
[  251.262613][ T8331] loop3: detected capacity change from 0 to 4096
[  251.340187][ T8331] ntfs3: Unknown parameter '00000000000000000000003'
[  251.425108][ T5778] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.571902][ T8347] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  252.410341][ T8331] loop3: detected capacity change from 0 to 4096
[  252.421639][ T8331] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  252.500937][ T8331] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  252.525710][ T8331] ntfs3: loop3: Failed to initialize $Extend/$ObjId.
[  252.712400][ T8357] loop3: detected capacity change from 0 to 64
[  252.732358][ T8357] hfs: unable to locate alternate MDB
[  252.747879][ T8357] hfs: continuing without an alternate MDB
[  252.754015][ T5784] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  252.868246][ T8347] loop2: detected capacity change from 0 to 32768
[  252.878722][ T8347] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.665 (8347)
[  252.897837][ T8347] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.916927][ T8347] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  252.930123][ T8347] BTRFS info (device loop2): using free space tree
[  252.975204][ T5784] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  252.980390][ T8363] overlayfs: failed to resolve './file1': -2
[  252.996495][ T5784] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  253.009309][ T5784] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  253.019173][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.078645][ T8347] BTRFS info (device loop2): enabling ssd optimizations
[  253.112743][ T8347] BTRFS info (device loop2): auto enabling async discard
[  253.146524][ T8377] loop3: detected capacity change from 0 to 128
[  253.195066][ T8377] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  253.252273][ T8377] hpfs: filesystem error: improperly stopped
[  253.317272][ T8377] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  253.330335][ T8352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.339100][ T8352] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.355067][ T5832] usb 2-1: USB disconnect, device number 6
[  253.399143][ T8377] hpfs: You really don't want any checks? You are crazy...
[  253.431366][ T8377] hpfs: hpfs_map_sector(): read error
[  253.437889][ T5788] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.454807][ T8377] hpfs: code page support is disabled
[  253.460370][ T8377] hpfs: hpfs_map_4sectors(): unaligned read
[  253.506910][ T8377] hpfs: hpfs_map_4sectors(): unaligned read
[  253.512889][ T8377] hpfs: filesystem error: unable to find root dir
[  253.577326][ T8381] loop0: detected capacity change from 0 to 164
[  253.749405][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop2 scanned by udevd (5778)
[  254.771504][ T8396] overlayfs: failed to resolve './file0': -2
[  254.780226][ T8397] loop0: detected capacity change from 0 to 64
[  254.831835][ T8386] loop3: detected capacity change from 0 to 4096
[  254.858196][ T8397] hfs: unable to locate alternate MDB
[  254.905969][ T8397] hfs: continuing without an alternate MDB
[  255.379932][ T8408] loop2: detected capacity change from 0 to 128
[  255.425329][ T8408] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  255.474538][ T8408] hpfs: filesystem error: improperly stopped
[  255.513441][ T8408] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  255.547854][ T8410] loop0: detected capacity change from 0 to 164
[  255.550040][ T8408] hpfs: You really don't want any checks? You are crazy...
[  255.600371][ T8408] hpfs: hpfs_map_sector(): read error
[  255.769307][ T8408] hpfs: code page support is disabled
[  255.977749][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.991522][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  256.346232][ T8408] hpfs: hpfs_map_4sectors(): unaligned read
[  256.505769][ T8408] hpfs: hpfs_map_4sectors(): unaligned read
[  256.576638][ T8408] hpfs: filesystem error: unable to find root dir
[  256.889519][ T8423] overlayfs: failed to resolve './file0': -2
[  256.973690][ T5784] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  257.179642][ T5784] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  257.205342][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.235987][ T5784] usb 1-1: Product: syz
[  257.263595][ T5784] usb 1-1: Manufacturer: syz
[  257.271591][ T5784] usb 1-1: SerialNumber: syz
[  257.517714][ T5784] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  257.541947][ T5784] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  257.646506][ T5784] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  257.668887][ T5784] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  257.735014][ T8440] befs: (nullb0): invalid magic header
[  257.812174][ T8440] loop2: detected capacity change from 0 to 8192
[  258.359564][ T5784] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  258.385629][ T8440] Dev loop2: unable to read RDB block 8
[  258.391614][ T8440]  loop2: unable to read partition table
[  258.397566][ T8440] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  258.415530][ T5784] lan78xx: probe of 1-1:1.0 failed with error -71
[  258.454857][ T5784] usb 1-1: USB disconnect, device number 6
[  258.844764][ T8451] overlayfs: failed to resolve './file0': -2
[  259.371722][ T8466] befs: (nullb0): invalid magic header
[  259.448346][ T8466] loop2: detected capacity change from 0 to 8192
[  260.035827][ T8466] Dev loop2: unable to read RDB block 8
[  260.041627][ T8466]  loop2: unable to read partition table
[  260.048242][ T8466] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  260.554617][ T5784] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  260.869310][ T8461] loop1: detected capacity change from 0 to 40427
[  260.905177][ T8483] loop3: detected capacity change from 0 to 4096
[  260.925324][ T8483] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  260.937636][ T8461] F2FS-fs (loop1): invalid crc value
[  260.948871][ T5784] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  260.960131][ T5784] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.975945][ T8461] F2FS-fs (loop1): Found nat_bits in checkpoint
[  260.992414][ T5784] usb 3-1: Product: syz
[  261.004038][ T5784] usb 3-1: Manufacturer: syz
[  261.019557][ T5784] usb 3-1: SerialNumber: syz
[  261.052095][ T8487] loop0: detected capacity change from 0 to 64
[  261.641458][ T8461] F2FS-fs (loop1): Start checkpoint disabled!
[  261.774506][ T5784] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  261.789975][ T8461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  261.804753][ T5784] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  261.876750][ T5784] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  261.923608][ T5784] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  261.947664][ T5784] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  261.995702][ T8480] lo speed is unknown, defaulting to 1000
[  262.023652][ T5784] lan78xx: probe of 3-1:1.0 failed with error -71
[  262.058310][ T5784] usb 3-1: USB disconnect, device number 12
[  262.276554][ T3456] kworker/u4:10: attempt to access beyond end of device
[  262.276554][ T3456] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  262.328197][ T3456] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  262.363505][ T3456] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  262.786970][ T8498] befs: (nullb0): invalid magic header
[  263.195754][ T8498] loop2: detected capacity change from 0 to 8192
[  263.617799][ T8493] loop0: detected capacity change from 0 to 32768
[  263.666974][ T8504] loop1: detected capacity change from 0 to 128
[  263.669218][ T8493] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  263.688429][   T27] audit: type=1800 audit(1757675094.678:9): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.717" name="bus" dev="loop1" ino=1048599 res=0 errno=0
[  263.804820][ T8509] ieee802154 phy0 wpan0: encryption failed: -22
[  264.018569][ T8493] XFS (loop0): Ending clean mount
[  264.030725][ T8493] XFS (loop0): Quotacheck needed: Please wait.
[  264.288032][ T8493] XFS (loop0): Quotacheck: Done.
[  264.398164][ T8520] befs: (nullb0): invalid magic header
[  264.992636][ T5787] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  265.086714][ T8522] loop2: detected capacity change from 0 to 64
[  265.106971][ T8522] hfs: unable to locate alternate MDB
[  265.112407][ T8522] hfs: continuing without an alternate MDB
[  265.901957][ T8533] comedi comedi0: Minor 3 could not be opened
[  265.939351][ T5852] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  266.266189][ T5852] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  266.366205][ T8541] befs: (nullb0): invalid magic header
[  266.762827][ T8541] loop0: detected capacity change from 0 to 8192
[  266.955637][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.057379][ T8543] loop3: detected capacity change from 0 to 128
[  267.063879][ T5852] usb 2-1: Product: syz
[  267.068071][ T5852] usb 2-1: Manufacturer: syz
[  267.072677][ T5852] usb 2-1: SerialNumber: syz
[  267.149092][   T27] audit: type=1800 audit(1757675098.138:10): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.730" name="bus" dev="loop3" ino=1048600 res=0 errno=0
[  267.309572][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  267.367583][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  267.403845][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  267.433437][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  267.452486][ T5852] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  267.476221][ T5852] lan78xx: probe of 2-1:1.0 failed with error -71
[  267.498881][ T5852] usb 2-1: USB disconnect, device number 7
[  269.064233][ T8560] befs: (nullb0): invalid magic header
[  269.698122][ T8558] loop1: detected capacity change from 0 to 32768
[  270.101937][ T8561] loop3: detected capacity change from 0 to 4096
[  270.128219][ T8547] loop0: detected capacity change from 0 to 32768
[  270.153539][ T8561] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  270.196944][ T8547] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR
[  272.203676][ T8571] loop3: detected capacity change from 0 to 128
[  272.419724][ T8571] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  272.533650][ T8571] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  272.544932][ T8583] loop0: detected capacity change from 0 to 128
[  272.565570][    C1] vkms_vblank_simulate: vblank timer overrun
[  272.621118][   T27] audit: type=1800 audit(1757675103.588:11): pid=8583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.742" name="bus" dev="loop0" ino=1048601 res=0 errno=0
[  272.641688][    C1] vkms_vblank_simulate: vblank timer overrun
[  272.823823][ T8571] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.740: No space for directory leaf checksum. Please run e2fsck -D.
[  272.869589][ T8571] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.740: checksumming directory block 0
[  273.016761][ T5789] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  273.911604][ T8589] loop0: detected capacity change from 0 to 32768
[  274.020590][ T8491] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  274.312272][ T8595] loop1: detected capacity change from 0 to 4096
[  274.321243][ T8595] ntfs3: Unknown parameter '00000000000000000000003'
[  274.400964][ T8597] befs: (nullb0): invalid magic header
[  274.504020][ T5832] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  275.030020][ T5832] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  275.069310][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.121866][ T5832] usb 4-1: Product: syz
[  275.127858][ T5832] usb 4-1: Manufacturer: syz
[  275.132484][ T5832] usb 4-1: SerialNumber: syz
[  275.139212][ T8595] loop1: detected capacity change from 0 to 4096
[  275.161303][ T8595] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  275.244767][ T8595] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  275.254694][ T8601] loop2: detected capacity change from 0 to 2048
[  275.274675][ T8595] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  275.308915][ T8601] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.369422][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.745'.
[  275.386952][ T5832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  275.410210][ T5832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  275.442501][ T5832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  275.524248][ T5832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  275.588437][ T5832] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  276.345114][ T5832] lan78xx: probe of 4-1:1.0 failed with error -71
[  276.461686][ T5832] usb 4-1: USB disconnect, device number 6
[  276.542483][ T8610] loop3: detected capacity change from 0 to 128
[  276.785853][   T27] audit: type=1800 audit(1757675107.768:12): pid=8610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.752" name="bus" dev="loop3" ino=1048602 res=0 errno=0
[  277.372407][ T8617] loop1: detected capacity change from 0 to 1024
[  277.440146][ T8600] loop0: detected capacity change from 0 to 32768
[  277.576386][ T8600] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.628730][ T8629] loop3: detected capacity change from 0 to 16
[  277.646617][ T2879] hfsplus: b-tree write err: -5, ino 4
[  277.732221][ T8600] XFS (loop0): Ending clean mount
[  277.771758][ T8629] erofs: (device loop3): mounted with root inode @ nid 36.
[  277.784706][ T8600] XFS (loop0): Quotacheck needed: Please wait.
[  277.811317][ T8629] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  277.838665][ T8629] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851]
[  277.891426][ T8629] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  277.900468][ T8600] XFS (loop0): Quotacheck: Done.
[  278.181341][ T8638] loop2: detected capacity change from 0 to 4096
[  278.189024][ T8638] ntfs3: Unknown parameter '00000000000000000000003'
[  278.360810][ T5832] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  278.575746][ T5832] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  278.596199][ T5832] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  278.621411][ T5832] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  278.647481][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  278.660664][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  278.667933][ T8636] loop1: detected capacity change from 0 to 32768
[  278.675279][ T5832] usb 1-1: SerialNumber: syz
[  278.972934][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.034300][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.084620][ T8636] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  280.063140][ T8491] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 9
[  280.688006][ T5832] rndis_wlan 1-1:253.0: RNDIS init failed, -71
[  280.724233][ T5832] rndis_wlan: probe of 1-1:253.0 failed with error -71
[  280.738333][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  280.751970][ T5832] rndis_host 1-1:253.0: RNDIS init failed, -71
[  280.765206][ T5832] rndis_host: probe of 1-1:253.0 failed with error -71
[  280.803694][ T5832] usb 1-1: USB disconnect, device number 7
[  281.033618][ T5790] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  281.227649][ T5790] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  281.237069][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.260152][ T5790] usb 2-1: Product: syz
[  281.270256][ T5790] usb 2-1: Manufacturer: syz
[  281.280369][ T5790] usb 2-1: SerialNumber: syz
[  281.520296][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'.
[  281.567245][ T5790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  281.625808][ T5790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71
[  281.657380][ T5790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71
[  281.714453][ T5790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  281.750684][ T5790] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  281.802269][ T5790] lan78xx: probe of 2-1:1.0 failed with error -71
[  282.204126][ T5790] usb 2-1: USB disconnect, device number 8
[  282.414520][ T8654] loop2: detected capacity change from 0 to 32768
[  282.452243][ T8654] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.762 (8654)
[  282.681306][ T8654] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  282.769920][ T8673] befs: (nullb0): invalid magic header
[  283.177102][ T8673] loop1: detected capacity change from 0 to 8192
[  283.215145][ T8654] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  283.397062][ T8654] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  283.456068][ T8654] BTRFS info (device loop2): use zstd compression, level 3
[  283.488302][ T8654] BTRFS info (device loop2): using free space tree
[  283.668424][ T8654] BTRFS info (device loop2): enabling ssd optimizations
[  283.703466][ T8654] BTRFS info (device loop2): auto enabling async discard
[  283.790439][   T27] audit: type=1800 audit(1757675114.768:13): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.762" name="file1" dev="loop2" ino=260 res=0 errno=0
[  283.974191][ T5788] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  284.283181][ T5778] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5778)
[  284.317402][ T8690] loop1: detected capacity change from 0 to 32768
[  284.334088][ T8690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.768 (8690)
[  284.411480][ T8690] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  284.459164][ T8690] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  284.495043][ T8690] BTRFS info (device loop1): using free space tree
[  284.629980][ T8691] loop0: detected capacity change from 0 to 32768
[  284.751741][ T8690] BTRFS info (device loop1): enabling ssd optimizations
[  284.775381][ T8691] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  284.798510][ T8690] BTRFS info (device loop1): auto enabling async discard
[  285.013228][ T8691] XFS (loop0): Ending clean mount
[  285.043777][ T5783] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  285.262366][ T8691] XFS (loop0): Quotacheck needed: Please wait.
[  285.330039][ T8691] XFS (loop0): Quotacheck: Done.
[  285.997570][ T5852] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  286.149436][ T5778] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5778)
[  286.233251][ T5852] usb 1-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  286.250141][ T5852] usb 1-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  286.263016][ T5852] usb 1-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  286.294086][ T5852] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  286.329769][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  286.357893][ T5852] usb 1-1: SerialNumber: syz
[  286.592577][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.634463][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.567324][ T8754] Bluetooth: Invalid byte e8 after esc byte
[  288.044737][ T8759] loop2: detected capacity change from 0 to 32768
[  288.078800][ T8759] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.146116][ T8759] XFS (loop2): Ending clean mount
[  288.154592][ T8759] XFS (loop2): Quotacheck needed: Please wait.
[  288.205746][ T8759] XFS (loop2): Quotacheck: Done.
[  288.545305][ T5787] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  288.627296][ T5852] rndis_wlan 1-1:253.0: RNDIS init failed, -71
[  288.640434][ T5852] rndis_wlan: probe of 1-1:253.0 failed with error -71
[  288.648821][ T5852] rndis_host 1-1:253.0: RNDIS init failed, -71
[  288.655217][ T5852] rndis_host: probe of 1-1:253.0 failed with error -71
[  288.705138][ T5852] usb 1-1: USB disconnect, device number 8
[  289.105056][ T5788] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  289.201508][ T8773] loop0: detected capacity change from 0 to 128
[  289.260192][   T27] audit: type=1800 audit(1757675120.248:14): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.784" name="bus" dev="loop0" ino=1048603 res=0 errno=0
[  289.597195][ T5785] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  291.559753][ T8792] loop0: detected capacity change from 0 to 131072
[  291.576750][ T8792] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0)
[  291.585690][ T8792] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  291.607306][ T8792] F2FS-fs (loop0): invalid crc value
[  291.636149][ T8792] F2FS-fs (loop0): Found nat_bits in checkpoint
[  291.765108][ T8808] loop2: detected capacity change from 0 to 8
[  291.903797][ T8792] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  291.910911][ T8792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  293.383484][ T5839] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  293.492477][ T8815] loop2: detected capacity change from 0 to 32768
[  293.538788][ T8815] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.564014][ T5839] usb 2-1: device descriptor read/64, error -71
[  293.623410][ T8815] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  293.655554][ T8815] XFS (loop2): Starting recovery (logdev: internal)
[  293.697957][ T8815] XFS (loop2): Ending recovery (logdev: internal)
[  293.828058][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.863830][ T5839] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  294.043778][ T5839] usb 2-1: device descriptor read/64, error -71
[  294.255594][ T5839] usb usb2-port1: attempt power cycle
[  294.674214][ T8844] comedi comedi0: Minor 3 could not be opened
[  294.983586][ T5839] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  295.045443][ T5839] usb 2-1: device descriptor read/8, error -71
[  295.202140][ T8851] loop2: detected capacity change from 0 to 4096
[  295.259659][ T8851] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  295.353590][ T5839] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  295.442592][ T5839] usb 2-1: device descriptor read/8, error -71
[  295.573753][ T5839] usb usb2-port1: unable to enumerate USB device
[  295.924065][ T8866] befs: (nullb0): invalid magic header
[  296.315545][ T8866] loop0: detected capacity change from 0 to 8192
[  296.487272][ T8866] Dev loop0: unable to read RDB block 8
[  296.493112][ T8866]  loop0: unable to read partition table
[  296.499651][ T8866] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  296.970751][ T8878] loop2: detected capacity change from 0 to 256
[  296.998837][ T8878] FAT-fs (loop2): Directory bread(block 64) failed
[  297.018213][ T8878] FAT-fs (loop2): Directory bread(block 65) failed
[  297.027293][ T8878] FAT-fs (loop2): Directory bread(block 66) failed
[  297.037531][ T8878] FAT-fs (loop2): Directory bread(block 67) failed
[  297.046798][ T8878] FAT-fs (loop2): Directory bread(block 68) failed
[  297.058530][ T8878] FAT-fs (loop2): Directory bread(block 69) failed
[  297.079401][ T8878] FAT-fs (loop2): Directory bread(block 70) failed
[  297.094960][ T8878] FAT-fs (loop2): Directory bread(block 71) failed
[  297.123669][ T8878] FAT-fs (loop2): Directory bread(block 72) failed
[  297.138199][ T8878] FAT-fs (loop2): Directory bread(block 73) failed
[  297.844224][ T8888] comedi comedi0: Minor 3 could not be opened
[  298.240545][ T8870] loop0: detected capacity change from 0 to 32768
[  299.608354][ T8870] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  299.723865][ T8870] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop0": -EINTR
[  299.725258][ T8870] XFS (loop0): log mount failed
[  299.845552][ T8908] loop2: detected capacity change from 0 to 4096
[  299.862254][ T8908] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  300.834484][ T8913] Bluetooth: MGMT ver 1.22
[  301.022436][ T5839] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  301.315245][ T5839] usb 2-1: device descriptor read/64, error -71
[  301.386638][ T8919] befs: (nullb0): invalid magic header
[  301.783637][ T8919] loop0: detected capacity change from 0 to 8192
[  301.955817][ T5839] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  302.313937][ T5839] usb 2-1: device descriptor read/64, error -71
[  302.331851][ T5778] I/O error, dev loop0, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  303.094053][ T5839] usb usb2-port1: attempt power cycle
[  303.120273][ T8921] loop2: detected capacity change from 0 to 32768
[  303.203280][ T8921] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  303.651143][ T8941] befs: (nullb0): invalid magic header
[  304.542445][ T8921] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  304.606666][ T8921] XFS (loop2): Starting recovery (logdev: internal)
[  304.718273][ T8921] XFS (loop2): Ending recovery (logdev: internal)
[  304.881013][ T8954] befs: (nullb0): invalid magic header
[  305.277744][ T8954] loop1: detected capacity change from 0 to 8192
[  305.495262][ T5788] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  308.277378][ T8980] befs: (nullb0): invalid magic header
[  308.303998][ T5839] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  308.525036][ T5839] usb 3-1: no configurations
[  308.537181][ T5839] usb 3-1: can't read configurations, error -22
[  309.292445][ T8988] loop1: detected capacity change from 0 to 8192
[  309.306073][ T5839] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  309.508454][ T5839] usb 3-1: no configurations
[  309.521789][ T5839] usb 3-1: can't read configurations, error -22
[  309.554174][ T5839] usb usb3-port1: attempt power cycle
[  310.524064][ T5885] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  311.046554][ T5885] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  311.062724][ T5885] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  311.113485][ T5839] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  311.180706][ T5885] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  311.202546][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.208428][ T9004] netlink: 104 bytes leftover after parsing attributes in process `syz.2.851'.
[  311.241110][ T5885] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  311.268732][ T5885] usb 2-1: invalid MIDI out EP 0
[  311.343456][ T5839] usb 3-1: device not accepting address 15, error -71
[  311.415971][ T5885] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[  311.848455][ T9018] loop0: detected capacity change from 0 to 8192
[  312.445292][ T9017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.454113][ T9017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.623745][   T55] usb 2-1: USB disconnect, device number 16
[  312.762115][ T9026] loop2: detected capacity change from 0 to 2048
[  312.800449][ T9026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  312.983529][ T5885] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  313.101801][ T9028] loop2: detected capacity change from 0 to 32768
[  313.155237][ T9028] syz.2.861: attempt to access beyond end of device
[  313.155237][ T9028] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  313.173174][ T9028] lbmIODone: I/O error in JFS log
[  313.174376][ T5885] usb 1-1: no configurations
[  313.179235][ T9028] *** Log Format Error ! ***
[  313.189333][ T9028] lmLogInit: exit(-22)
[  313.193840][ T9028] lmLogOpen: exit(-22)
[  313.213501][ T5885] usb 1-1: can't read configurations, error -22
[  313.275604][ T9028] jfs_dirty_inode called on read-only volume
[  313.282188][ T9028] Is remount racy?
[  313.314506][ T9028] ERROR: (device loop2): txBegin: read-only filesystem
[  313.314506][ T9028] 
[  313.354127][ T9028] ERROR: (device loop2): remounting filesystem as read-only
[  313.361629][ T9028] jfs_dirty_inode called on read-only volume
[  313.374194][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  313.394578][ T9028] Is remount racy?
[  313.399512][ T9028] jfs_dirty_inode called on read-only volume
[  313.413582][ T9028] Is remount racy?
[  313.417415][ T9028] jfs_dirty_inode called on read-only volume
[  313.443508][ T9028] Is remount racy?
[  313.447369][ T9028] INFO: trying to register non-static key.
[  313.453184][ T9028] The code is fine but needs lockdep annotation, or maybe
[  313.460281][ T9028] you didn't initialize this object before use?
[  313.466505][ T9028] turning off the locking correctness validator.
[  313.472833][ T9028] CPU: 1 PID: 9028 Comm: syz.2.861 Not tainted syzkaller #0
[  313.480128][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  313.490195][ T9028] Call Trace:
[  313.493470][ T9028]  <TASK>
[  313.496403][ T9028]  dump_stack_lvl+0x16c/0x230
[  313.501078][ T9028]  ? show_regs_print_info+0x20/0x20
[  313.506268][ T9028]  ? load_image+0x3b0/0x3b0
[  313.510759][ T9028]  ? __is_module_percpu_address+0x219/0x380
[  313.516660][ T9028]  ? __is_kernel_percpu_address+0x133/0x270
[  313.522563][ T9028]  assign_lock_key+0x1f9/0x230
[  313.527328][ T9028]  ? SOFTIRQ_verbose+0x10/0x10
[  313.532086][ T9028]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  313.538058][ T9028]  register_lock_class+0x212/0x890
[  313.543162][ T9028]  ? finish_task_switch+0x265/0x920
[  313.548358][ T9028]  ? is_dynamic_key+0x260/0x260
[  313.553193][ T9028]  ? finish_task_switch+0x32a/0x920
[  313.558375][ T9028]  __lock_acquire+0x17a/0x7c80
[  313.563132][ T9028]  ? verify_lock_unused+0x140/0x140
[  313.568313][ T9028]  ? mark_lock+0x94/0x320
[  313.572626][ T9028]  ? __lock_acquire+0x1334/0x7c80
[  313.577642][ T9028]  lock_acquire+0x197/0x410
[  313.582128][ T9028]  ? __wake_up+0xf8/0x190
[  313.586444][ T9028]  ? read_lock_is_recursive+0x20/0x20
[  313.591801][ T9028]  ? vprintk_emit+0x521/0x600
[  313.596466][ T9028]  ? printk_sprint+0x460/0x460
[  313.601221][ T9028]  _raw_spin_lock_irqsave+0xa8/0xf0
[  313.606409][ T9028]  ? __wake_up+0xf8/0x190
[  313.610726][ T9028]  ? _raw_spin_lock+0x40/0x40
[  313.615388][ T9028]  __wake_up+0xf8/0x190
[  313.619529][ T9028]  ? __wake_up_bit+0x1e0/0x1e0
[  313.624278][ T9028]  ? do_raw_spin_lock+0x121/0x2c0
[  313.629288][ T9028]  ? __rwlock_init+0x150/0x150
[  313.634043][ T9028]  txEnd+0x8a/0x520
[  313.637841][ T9028]  jfs_truncate_nolock+0x1e5/0x2c0
[  313.642942][ T9028]  ? jfs_direct_IO+0x220/0x220
[  313.647692][ T9028]  ? block_truncate_page+0x168/0x9f0
[  313.652965][ T9028]  ? jfs_dirty_inode+0x240/0x240
[  313.657888][ T9028]  jfs_truncate+0xce/0x140
[  313.662292][ T9028]  jfs_setattr+0x4f8/0x750
[  313.666696][ T9028]  ? jfs_fsync+0x1b0/0x1b0
[  313.671098][ T9028]  notify_change+0xb0d/0xe10
[  313.675686][ T9028]  do_truncate+0x19b/0x220
[  313.680090][ T9028]  ? put_page_bootmem+0x2c0/0x2c0
[  313.685102][ T9028]  ? apparmor_file_truncate+0x23f/0x2d0
[  313.690633][ T9028]  ? ima_bprm_check+0x1f0/0x1f0
[  313.695471][ T9028]  path_openat+0x298c/0x3190
[  313.700070][ T9028]  ? do_filp_open+0x3d0/0x3d0
[  313.704745][ T9028]  do_filp_open+0x1c5/0x3d0
[  313.709238][ T9028]  ? vfs_tmpfile+0x490/0x490
[  313.713827][ T9028]  ? _raw_spin_unlock+0x28/0x40
[  313.718662][ T9028]  ? alloc_fd+0x58f/0x630
[  313.722980][ T9028]  do_sys_openat2+0x12c/0x1c0
[  313.727645][ T9028]  ? do_sys_open+0xe0/0xe0
[  313.732053][ T9028]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  313.738023][ T9028]  ? lock_chain_count+0x20/0x20
[  313.742875][ T9028]  __x64_sys_open+0x11f/0x140
[  313.747541][ T9028]  do_syscall_64+0x55/0xb0
[  313.751945][ T9028]  ? clear_bhb_loop+0x40/0x90
[  313.756609][ T9028]  ? clear_bhb_loop+0x40/0x90
[  313.761270][ T9028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  313.767152][ T9028] RIP: 0033:0x7f4f86f8eba9
[  313.771553][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.791151][ T9028] RSP: 002b:00007f4f87e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  313.799555][ T9028] RAX: ffffffffffffffda RBX: 00007f4f871d5fa0 RCX: 00007f4f86f8eba9
[  313.807515][ T9028] RDX: b320d63513e26186 RSI: 0000000000000202 RDI: 0000200000000100
[  313.815489][ T9028] RBP: 00007f4f87011e19 R08: 0000000000000000 R09: 0000000000000000
[  313.823446][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  313.831412][ T9028] R13: 00007f4f871d6038 R14: 00007f4f871d5fa0 R15: 00007fff9f742968
[  313.839375][ T9028]  </TASK>
[  313.842438][ T9028] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  313.854139][ T9028] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  313.862531][ T9028] CPU: 1 PID: 9028 Comm: syz.2.861 Not tainted syzkaller #0
[  313.869820][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  313.879880][ T9028] RIP: 0010:__wake_up_common+0x23c/0x4e0
[  313.885510][ T9028] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 06 6e 78 00 48 ba 00 00 00 00 00 fc
[  313.905107][ T9028] RSP: 0018:ffffc9000bf6f558 EFLAGS: 00010046
[  313.911168][ T9028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  313.919128][ T9028] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc900026b9030
[  313.927090][ T9028] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc9000bf6f600
[  313.935053][ T9028] R10: dffffc0000000000 R11: fffff520017ede94 R12: ffffc900026b9030
[  313.943069][ T9028] R13: ffffc900026b9070 R14: 0000000000000000 R15: 0000000000000000
[  313.951030][ T9028] FS:  00007f4f87e576c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  313.959946][ T9028] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  313.966515][ T9028] CR2: 00007eff8820f000 CR3: 000000002b541000 CR4: 00000000003506e0
[  313.974475][ T9028] Call Trace:
[  313.977743][ T9028]  <TASK>
[  313.980663][ T9028]  __wake_up+0x112/0x190
[  313.984897][ T9028]  ? __wake_up_bit+0x1e0/0x1e0
[  313.989644][ T9028]  ? do_raw_spin_lock+0x121/0x2c0
[  313.994657][ T9028]  ? __rwlock_init+0x150/0x150
[  313.999413][ T9028]  txEnd+0x8a/0x520
[  314.003208][ T9028]  jfs_truncate_nolock+0x1e5/0x2c0
[  314.008310][ T9028]  ? jfs_direct_IO+0x220/0x220
[  314.013058][ T9028]  ? block_truncate_page+0x168/0x9f0
[  314.018335][ T9028]  ? jfs_dirty_inode+0x240/0x240
[  314.023260][ T9028]  jfs_truncate+0xce/0x140
[  314.027665][ T9028]  jfs_setattr+0x4f8/0x750
[  314.032066][ T9028]  ? jfs_fsync+0x1b0/0x1b0
[  314.036467][ T9028]  notify_change+0xb0d/0xe10
[  314.041044][ T9028]  do_truncate+0x19b/0x220
[  314.045446][ T9028]  ? put_page_bootmem+0x2c0/0x2c0
[  314.050453][ T9028]  ? apparmor_file_truncate+0x23f/0x2d0
[  314.055986][ T9028]  ? ima_bprm_check+0x1f0/0x1f0
[  314.060831][ T9028]  path_openat+0x298c/0x3190
[  314.065421][ T9028]  ? do_filp_open+0x3d0/0x3d0
[  314.070093][ T9028]  do_filp_open+0x1c5/0x3d0
[  314.074588][ T9028]  ? vfs_tmpfile+0x490/0x490
[  314.079173][ T9028]  ? _raw_spin_unlock+0x28/0x40
[  314.084011][ T9028]  ? alloc_fd+0x58f/0x630
[  314.088334][ T9028]  do_sys_openat2+0x12c/0x1c0
[  314.093001][ T9028]  ? do_sys_open+0xe0/0xe0
[  314.097401][ T9028]  ? lockdep_hardirqs_on_prepare+0x400/0x760
[  314.103372][ T9028]  ? lock_chain_count+0x20/0x20
[  314.108210][ T9028]  __x64_sys_open+0x11f/0x140
[  314.112874][ T9028]  do_syscall_64+0x55/0xb0
[  314.117280][ T9028]  ? clear_bhb_loop+0x40/0x90
[  314.121941][ T9028]  ? clear_bhb_loop+0x40/0x90
[  314.126601][ T9028]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.132486][ T9028] RIP: 0033:0x7f4f86f8eba9
[  314.136888][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.156485][ T9028] RSP: 002b:00007f4f87e57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  314.164883][ T9028] RAX: ffffffffffffffda RBX: 00007f4f871d5fa0 RCX: 00007f4f86f8eba9
[  314.172842][ T9028] RDX: b320d63513e26186 RSI: 0000000000000202 RDI: 0000200000000100
[  314.180798][ T9028] RBP: 00007f4f87011e19 R08: 0000000000000000 R09: 0000000000000000
[  314.188758][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  314.196715][ T9028] R13: 00007f4f871d6038 R14: 00007f4f871d5fa0 R15: 00007fff9f742968
[  314.204677][ T9028]  </TASK>
[  314.207693][ T9028] Modules linked in:
[  314.211586][ T9028] ---[ end trace 0000000000000000 ]---
[  314.217029][ T9028] RIP: 0010:__wake_up_common+0x23c/0x4e0
[  314.222656][ T9028] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 06 6e 78 00 48 ba 00 00 00 00 00 fc
[  314.242248][ T9028] RSP: 0018:ffffc9000bf6f558 EFLAGS: 00010046
[  314.248301][ T9028] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000
[  314.256256][ T9028] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc900026b9030
[  314.264213][ T9028] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc9000bf6f600
[  314.272170][ T9028] R10: dffffc0000000000 R11: fffff520017ede94 R12: ffffc900026b9030
[  314.280127][ T9028] R13: ffffc900026b9070 R14: 0000000000000000 R15: 0000000000000000
[  314.288099][ T9028] FS:  00007f4f87e576c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  314.297026][ T9028] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  314.303602][ T9028] CR2: 00007eff8820f000 CR3: 000000002b541000 CR4: 00000000003506e0
[  314.311567][ T9028] Kernel panic - not syncing: Fatal exception
[  314.318095][ T9028] Kernel Offset: disabled
[  314.322407][ T9028] Rebooting in 86400 seconds..