last executing test programs:

2m23.222740162s ago: executing program 0 (id=1619):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)}, 0x80890)
pipe(&(0x7f0000000580))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1e4}}, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r4, &(0x7f0000002080)=0x64, 0x23b)

2m22.082135869s ago: executing program 0 (id=1621):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0xf00, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m21.542112047s ago: executing program 0 (id=1624):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = fsopen(&(0x7f0000000040)='nfs4\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
eventfd2(0xb0, 0x0)
openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
io_uring_enter(r4, 0x54, 0x4, 0x1, 0x0, 0x0)

2m20.479583954s ago: executing program 0 (id=1625):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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")
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
request_key(0x0, &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000100)={0x0})

2m19.4302577s ago: executing program 0 (id=1628):
open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
userfaultfd(0x801)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2m17.714424816s ago: executing program 0 (id=1631):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)
close(r5)
fcntl$setstatus(r4, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]})
r6 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)
gettid()
ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

2m16.846793539s ago: executing program 32 (id=1631):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4)
close(r5)
fcntl$setstatus(r4, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]})
r6 = shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000ffd000/0x3000)=nil)
shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x5000)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x3)
gettid()
ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'})

13.202978959s ago: executing program 3 (id=1906):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

12.852960694s ago: executing program 3 (id=1907):
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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")
lseek(0xffffffffffffffff, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
setuid(0x0)

9.125409301s ago: executing program 3 (id=1917):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="47000000010081", 0x7)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

8.910027844s ago: executing program 4 (id=1918):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x32})

8.843531475s ago: executing program 4 (id=1919):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20)

8.717804557s ago: executing program 4 (id=1920):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0)
tkill(r3, 0x13)
tkill(r3, 0x12)
wait4(r3, 0x0, 0x8, &(0x7f0000000080))

7.665381943s ago: executing program 4 (id=1922):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000440)='./bus\x00', 0x11d)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r3, 0x2008002)
sendfile(r2, r3, 0x0, 0x80000001)
syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0)

7.18725803s ago: executing program 1 (id=1924):
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000700)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0)
dup3(r2, r0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="fb", 0x1}, {0x0}], 0x2)

6.921440295s ago: executing program 1 (id=1925):
accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc")
lseek(0xffffffffffffffff, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
setuid(0x0)

6.870153415s ago: executing program 2 (id=1926):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x0)
flock(r4, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

5.587473335s ago: executing program 4 (id=1927):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_mount_image$xfs(&(0x7f0000000480), &(0x7f0000009740)='./file0\x00', 0x4000040, &(0x7f0000000200), 0x1, 0x97ef, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x22244068, 0xf, 0x8003, 0x7fa, 0x5, 0x0, 0x0, 0x2, 0x2}}, 0xfee1)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81008e, &(0x7f0000003f80)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6572726f72733d636f6e74696e75652c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d7374726963742c636f6465706167653d3935302c696f636861727365743d63703836302c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c696f636861727365743d63703933322c6e6f6e756d7461696c3d302c6e66732c726f6469722c757466383d312c73686f72746e616d653d6d697865642c757466383d302c00e23bb66df271dc392ed708", @ANYRES16], 0x4, 0x2ba, &(0x7f00000001c0)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)

5.494179956s ago: executing program 2 (id=1928):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x32})

5.398679877s ago: executing program 3 (id=1929):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20)

5.077227872s ago: executing program 3 (id=1930):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xb24d547a82164f02, 0x0)
sendfile(r2, r3, 0x0, 0xfffe82)
sendmmsg$unix(r0, &(0x7f0000000000), 0x400000000000041, 0x0)

4.969955704s ago: executing program 2 (id=1931):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/119)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x100000000000000, 0x0})

4.54321618s ago: executing program 2 (id=1932):
r0 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRESOCT=0x0], 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10)
write$binfmt_misc(r2, &(0x7f0000000100), 0x6)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)

3.296096779s ago: executing program 1 (id=1933):
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000700)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x1204020, 0x1, 0x4, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x24c01, 0x0)
dup3(r2, r0, 0x0)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="fb", 0x1}, {0x0}], 0x2)

2.925527635s ago: executing program 1 (id=1934):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

2.687188789s ago: executing program 3 (id=1935):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x18)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
creat(&(0x7f0000000440)='./bus\x00', 0x11d)
r2 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0)
r3 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe)
ftruncate(r3, 0x2008002)
sendfile(r2, r3, 0x0, 0x80000001)
syz_usb_connect$hid(0x5, 0x3f, 0x0, 0x0)

2.574788671s ago: executing program 1 (id=1936):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000d40)={[{@test_dummy_encryption}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3DFoJFUcBvBvZnc9c7fIqY0gqCAiGghnJ9icjcKJHIeIoMKJiI1yEWKCXWJlY6G1SiqbIHZGS0kTbBTBKmqK2AgaLAwWiqzMTiJJXGNgkx3J/H4wuzM78+b/htnv7TbzArTWxSSXk3SSTCfpJSn2H3BPvVzc3VyeWr+eDAZP/VIMj6u3a3vtLiRZSvJwkrWyyCvdZGH1ua3fNh6//+353n0frj47NdGL3LW9tfnkzgdX3/rkykMLX33z09Uil9M/cF0nrxjxWbdIbjuNYv8TRbfpHnAc1974+Nsq97cnuXeY/17K1Dfvnbmb1np58P1/a/vuz1/fOcm+AidvMOhVv4FLA6B1yiT9FOVMknq9LGdm6v/w33XOl6/Ozr0+/fLs/I2Xmh6pgJPSTzYf++zcpxcO5f/HTp1/4Cx54sBWlf+nr618X63vdJrqE9CEKv/TLyw+EPmH1pF/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aC/5h7PtxSP2HSP/5Wn1C2jW/vwDAO0yONf0E8hAU5oefwAAAAAAAAAAAAAAAAAAgH9anlq/vrdMquYX7yXbjybpjqrf2Z2A7Obh6/lfi+qwvxV1s7E8f/eYJxjTRw0/fX3LD83W//KuZusv3kiW3kxyqds99P37c5Bi7Anwbv2P/b2jJuibgEeeabb+HyvN1r+ykXxejT+XRo0/Ze4Yvo8ef/rV/Ruz/mu/j3kCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJuavAAAA///41m/U")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000001440)=""/126, 0x7e, 0x0)
flock(r4, 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

1.27014885s ago: executing program 2 (id=1937):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18)
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r5 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c)
r6 = dup2(r5, r5)
sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

1.167850792s ago: executing program 1 (id=1938):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0000d63f9a8eecdeb60ddb0700000000", 0x20)

32.719559ms ago: executing program 4 (id=1939):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

0s ago: executing program 2 (id=1940):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000002c0)=""/119)
clock_settime(0x0, &(0x7f0000000040)={0x77359400})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x100000000000000, 0x0})

kernel console output (not intermixed with test programs):

 access beyond end of device
[  546.795134][ T9689] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  546.802604][   T23] usb 4-1: USB disconnect, device number 20
[  546.818217][ T5772] Bluetooth: hci4: Opcode 0x0c03 failed: -19
[  546.828082][ T9689] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  547.109779][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  547.150570][    T9] usb 3-1: Using ep0 maxpacket: 8
[  547.157405][    T9] usb 3-1: no configurations
[  547.169995][    T9] usb 3-1: can't read configurations, error -22
[  547.339973][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  547.393547][    T9] usb 3-1: Using ep0 maxpacket: 8
[  547.402488][    T9] usb 3-1: no configurations
[  547.409342][    T9] usb 3-1: can't read configurations, error -22
[  547.416266][    T9] usb usb3-port1: unable to enumerate USB device
[  547.952349][ T5814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  547.962760][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.976787][ T5814] usb 1-1: can't set config #1, error -71
[  547.984704][ T5814] usb 1-1: USB disconnect, device number 23
[  548.033798][ T9967] syzkaller0: entered promiscuous mode
[  548.186028][ T9967] syzkaller0: entered allmulticast mode
[  549.868781][ T9976] Driver unsupported XDP return value 0 on prog  (id 212) dev N/A, expect packet loss!
[  549.916230][ T9979] loop0: detected capacity change from 0 to 64
[  551.347691][ T9986] loop3: detected capacity change from 0 to 1024
[  551.429988][ T9986] hfsplus: bad catalog entry type
[  551.609524][ T3477] hfsplus: b-tree write err: -5, ino 4
[  553.949761][ T5810] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  554.012357][T10006] syzkaller0: entered promiscuous mode
[  554.037196][T10006] syzkaller0: entered allmulticast mode
[  554.087338][T10008] loop1: detected capacity change from 0 to 256
[  554.106387][ T5814] usb 3-1: new low-speed USB device number 29 using dummy_hcd
[  554.142529][ T5810] usb 4-1: Using ep0 maxpacket: 8
[  554.155699][ T5810] usb 4-1: unable to read config index 0 descriptor/start: -61
[  554.172525][ T5810] usb 4-1: can't read configurations, error -61
[  554.306212][ T5814] usb 3-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  554.339946][ T5814] usb 3-1: config 1 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  554.340408][ T5810] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  554.367576][ T5814] usb 3-1: config 1 interface 0 has no altsetting 0
[  554.376709][T10013] loop0: detected capacity change from 0 to 64
[  554.550366][ T5810] usb 4-1: Using ep0 maxpacket: 8
[  554.558441][ T5810] usb 4-1: unable to read config index 0 descriptor/start: -61
[  554.571182][ T5810] usb 4-1: can't read configurations, error -61
[  554.585673][ T5810] usb usb4-port1: attempt power cycle
[  554.630992][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  554.657844][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.688248][ T5814] usb 3-1: can't set config #1, error -71
[  554.706986][ T5814] usb 3-1: USB disconnect, device number 29
[  555.067552][ T5810] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  555.431084][ T5810] usb 4-1: device not accepting address 23, error -71
[  556.311340][T10034] syzkaller0: entered promiscuous mode
[  556.346202][T10034] syzkaller0: entered allmulticast mode
[  557.160085][ T5834] usb 1-1: new low-speed USB device number 24 using dummy_hcd
[  557.522873][ T5834] usb 1-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  557.533118][ T5834] usb 1-1: config 1 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  557.546266][ T5834] usb 1-1: config 1 interface 0 has no altsetting 0
[  557.569941][ T5810] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  558.519884][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  558.540799][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61
[  558.548781][ T5810] usb 2-1: can't read configurations, error -61
[  558.719890][ T5810] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  558.939971][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  558.948271][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61
[  558.959759][ T5810] usb 2-1: can't read configurations, error -61
[  558.968633][ T5810] usb usb2-port1: attempt power cycle
[  558.999999][   T23] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  559.199724][   T23] usb 4-1: Using ep0 maxpacket: 8
[  559.207711][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  559.219018][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  559.228916][   T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  559.239564][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  559.250972][   T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  559.261179][   T23] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  559.270524][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.289544][   T23] usb 4-1: config 0 descriptor??
[  559.295648][T10054] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  559.379960][ T5810] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  559.420514][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  559.429020][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61
[  559.441999][ T5810] usb 2-1: can't read configurations, error -61
[  559.531436][   T23] usb 4-1: USB disconnect, device number 25
[  559.533560][ T5772] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  559.600315][ T5810] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  559.630675][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  559.638956][ T5810] usb 2-1: unable to read config index 0 descriptor/start: -61
[  559.646923][ T5810] usb 2-1: can't read configurations, error -61
[  559.654590][ T5810] usb usb2-port1: unable to enumerate USB device
[  559.876385][ T5834] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  559.904409][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.940106][ T5834] usb 1-1: can't set config #1, error -71
[  559.950170][ T5834] usb 1-1: USB disconnect, device number 24
[  561.889766][ T5810] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  562.096537][ T5810] usb 2-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  562.125015][ T5810] usb 2-1: config 1 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  562.158251][ T5810] usb 2-1: config 1 interface 0 has no altsetting 0
[  562.649868][ T5738] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  562.839840][ T5738] usb 3-1: Using ep0 maxpacket: 8
[  562.851266][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  562.882812][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  562.905866][ T5738] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  562.926381][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  562.941904][ T5738] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  562.957280][ T5738] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  562.968660][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.988027][ T5738] usb 3-1: config 0 descriptor??
[  563.005339][T10094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  564.181068][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  564.187617][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  564.247838][   T23] usb 3-1: USB disconnect, device number 30
[  564.330057][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  564.596734][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  564.618577][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.638991][ T5810] usb 2-1: can't set config #1, error -71
[  564.661951][ T5810] usb 2-1: USB disconnect, device number 17
[  565.340349][T10126] loop2: detected capacity change from 0 to 1024
[  566.480980][ T6425] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  566.902065][ T6425] usb 2-1: config 1 interface 0 altsetting 144 endpoint 0x1 is Bulk; changing to Interrupt
[  566.915367][ T6425] usb 2-1: config 1 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  566.930166][ T6425] usb 2-1: config 1 interface 0 has no altsetting 0
[  566.949874][   T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  567.139883][   T23] usb 3-1: Using ep0 maxpacket: 8
[  567.147253][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  567.159083][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  567.168969][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  567.178907][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  567.191013][   T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  567.201315][   T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  567.210473][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.222733][   T23] usb 3-1: config 0 descriptor??
[  567.242434][T10139] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  567.487535][   T23] usb 3-1: USB disconnect, device number 31
[  567.490096][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  567.900897][T10157] loop0: detected capacity change from 0 to 1024
[  568.598144][T10163] loop2: detected capacity change from 0 to 40427
[  568.638676][ T6425] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  568.649961][ T6425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.816248][T10163] F2FS-fs (loop2): invalid crc value
[  568.849053][ T6425] usb 2-1: can't set config #1, error -71
[  568.962593][ T6425] usb 2-1: USB disconnect, device number 18
[  569.108154][T10163] F2FS-fs (loop2): Found nat_bits in checkpoint
[  569.327205][T10163] F2FS-fs (loop2): Start checkpoint disabled!
[  569.347840][T10163] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  570.154560][   T34] kworker/u4:2: attempt to access beyond end of device
[  570.154560][   T34] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  570.190581][   T34] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  570.559538][T10182] loop0: detected capacity change from 0 to 1024
[  570.851228][T10173] loop1: detected capacity change from 0 to 32768
[  570.975520][T10173] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  571.209790][ T6425] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  571.236126][T10173] XFS (loop1): Ending clean mount
[  571.355907][ T5768] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  571.429826][ T6425] usb 1-1: Using ep0 maxpacket: 8
[  571.444122][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  571.454789][ T5738] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  571.469885][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  571.513214][ T6425] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  571.543924][ T6425] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  571.578280][ T6425] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  571.599283][ T6425] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  571.636437][ T6425] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.659315][ T6425] usb 1-1: config 0 descriptor??
[  571.670037][ T5738] usb 3-1: Using ep0 maxpacket: 8
[  571.677001][T10187] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  571.685822][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  571.714552][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  571.734331][ T5738] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  571.744908][ T5738] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  571.756854][ T5738] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  571.777753][ T5738] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  571.797378][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.838165][ T5738] usb 3-1: config 0 descriptor??
[  571.881357][T10203] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  571.919560][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  571.928733][ T6425] usb 1-1: USB disconnect, device number 25
[  572.644821][ T5086] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  572.645206][ T6425] usb 3-1: USB disconnect, device number 32
[  572.892228][T10205] loop3: detected capacity change from 0 to 32768
[  572.968507][T10205] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  573.187278][T10205] XFS (loop3): Ending clean mount
[  573.389884][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  573.645087][T10230] syzkaller0: entered promiscuous mode
[  573.660066][T10230] syzkaller0: entered allmulticast mode
[  575.191516][T10258] fuse: Unknown parameter 'group_i00000000000000000000'
[  577.174932][T10276] loop0: detected capacity change from 0 to 1024
[  577.288242][T10280] fuse: Unknown parameter 'group_id00000000000000000000'
[  577.317218][   T48] hfsplus: b-tree write err: -5, ino 4
[  579.121666][T10306] loop0: detected capacity change from 0 to 1024
[  579.364975][ T1089] hfsplus: b-tree write err: -5, ino 4
[  579.450829][T10308] fuse: Unknown parameter 'group_id00000000000000000000'
[  579.761109][T10313] loop0: detected capacity change from 0 to 1024
[  580.670475][T10326] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  581.548296][T10332] loop0: detected capacity change from 0 to 256
[  581.573093][T10330] loop1: detected capacity change from 0 to 1024
[  582.542220][ T2942] hfsplus: b-tree write err: -5, ino 4
[  582.822701][T10339] fuse: Unknown parameter 'group_id00000000000000000000'
[  582.951367][ T1126] Bluetooth: hci4: Frame reassembly failed (-84)
[  583.269768][T10344] UBIFS error (pid: 10344): cannot open "./file0", error -22
[  583.726835][T10347] loop1: detected capacity change from 0 to 1024
[  584.095955][T10356] loop1: detected capacity change from 0 to 64
[  584.413166][T10364] loop3: detected capacity change from 0 to 1024
[  584.482558][ T2942] hfsplus: b-tree write err: -5, ino 4
[  584.924484][T10369] fuse: Bad value for 'user_id'
[  584.949742][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  585.765531][T10377] loop2: detected capacity change from 0 to 1024
[  586.512306][T10373] loop1: detected capacity change from 0 to 40427
[  586.533272][T10373] F2FS-fs (loop1): invalid crc value
[  586.548583][T10373] F2FS-fs (loop1): Found nat_bits in checkpoint
[  586.672831][T10386] loop2: detected capacity change from 0 to 1024
[  586.673717][T10373] F2FS-fs (loop1): Start checkpoint disabled!
[  586.711714][T10373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  586.908934][   T48] hfsplus: b-tree write err: -5, ino 4
[  587.373171][ T1089] kworker/u4:5: attempt to access beyond end of device
[  587.373171][ T1089] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  587.389217][ T1089] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  587.441707][T10396] fuse: Bad value for 'user_id'
[  587.966977][ T2942] Bluetooth: hci4: Frame reassembly failed (-84)
[  588.040692][T10405] UBIFS error (pid: 10405): cannot open "./file0", error -22
[  589.989999][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  589.991179][ T5772] Bluetooth: hci4: command 0x1003 tx timeout
[  590.728790][T10421] fuse: Bad value for 'user_id'
[  590.778262][T10423] loop3: detected capacity change from 0 to 1024
[  590.957787][T10425] loop1: detected capacity change from 0 to 256
[  591.024994][T10425] exfat: Bad value for 'uid'
[  591.142207][ T5785] blk_print_req_error: 9 callbacks suppressed
[  591.142225][ T5785] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  591.388841][T10425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1389'.
[  593.498256][T10437] loop1: detected capacity change from 0 to 512
[  593.571396][T10437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  593.598013][T10437] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  596.817613][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  597.238625][ T1142] Bluetooth: hci4: Frame reassembly failed (-84)
[  597.530597][T10456] UBIFS error (pid: 10456): cannot open "./file0", error -22
[  598.465034][T10468] loop2: detected capacity change from 0 to 512
[  598.507710][T10468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  598.539480][T10473] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  598.573927][T10468] ext4 filesystem being mounted at /344/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  598.799126][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  599.269914][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  599.270245][ T5772] Bluetooth: hci4: command 0x1003 tx timeout
[  601.269409][T10505] loop3: detected capacity change from 0 to 512
[  601.433148][T10505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  601.535179][T10505] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  601.612616][T10503] loop1: detected capacity change from 0 to 40427
[  601.642838][T10503] F2FS-fs (loop1): invalid crc value
[  601.657096][T10503] F2FS-fs (loop1): Found nat_bits in checkpoint
[  601.724970][T10503] F2FS-fs (loop1): Start checkpoint disabled!
[  601.749511][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  601.762655][T10503] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  602.824682][ T3477] kworker/u4:10: attempt to access beyond end of device
[  602.824682][ T3477] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  602.951913][ T3477] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  603.125122][   T34] Bluetooth: hci4: Frame reassembly failed (-84)
[  603.155368][T10523] UBIFS error (pid: 10523): cannot open "./file0", error -22
[  604.322438][T10535] loop3: detected capacity change from 0 to 512
[  604.381847][T10535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  604.456629][T10535] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  604.593843][T10543] loop2: detected capacity change from 0 to 1024
[  604.634121][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  605.111310][ T5772] Bluetooth: hci4: command 0x1003 tx timeout
[  605.111530][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  605.791916][T10548] loop1: detected capacity change from 0 to 40427
[  605.828453][T10548] F2FS-fs (loop1): invalid crc value
[  605.851088][T10548] F2FS-fs (loop1): Found nat_bits in checkpoint
[  605.905621][T10548] F2FS-fs (loop1): Start checkpoint disabled!
[  605.928837][T10548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  606.697719][T10560] loop0: detected capacity change from 0 to 256
[  606.733154][T10560] exfat: Bad value for 'uid'
[  606.953767][ T1089] kworker/u4:5: attempt to access beyond end of device
[  606.953767][ T1089] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  607.058534][ T1089] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  607.452004][T10570] loop0: detected capacity change from 0 to 164
[  607.476853][T10570] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  608.518691][T10580] loop1: detected capacity change from 0 to 164
[  609.067934][T10582] loop0: detected capacity change from 0 to 40427
[  609.206439][T10582] F2FS-fs (loop0): invalid crc value
[  609.279490][T10582] F2FS-fs (loop0): Found nat_bits in checkpoint
[  609.376158][T10586] loop1: detected capacity change from 0 to 40427
[  609.390914][T10582] F2FS-fs (loop0): Start checkpoint disabled!
[  609.396218][T10586] F2FS-fs (loop1): invalid crc value
[  609.413663][T10586] F2FS-fs (loop1): Found nat_bits in checkpoint
[  609.416804][T10582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  609.478272][T10586] F2FS-fs (loop1): Start checkpoint disabled!
[  609.488949][T10586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  610.959917][ T1126] kworker/u4:7: attempt to access beyond end of device
[  610.959917][ T1126] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  611.014680][ T1126] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  611.121610][   T59] kworker/u4:4: attempt to access beyond end of device
[  611.121610][   T59] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  611.180070][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  614.377267][T10621] loop2: detected capacity change from 0 to 1024
[  614.827701][T10626] overlayfs: failed to resolve './file1': -2
[  615.184057][T10627] loop0: detected capacity change from 0 to 164
[  616.042368][T10627] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  618.090952][T10637] loop2: detected capacity change from 0 to 164
[  618.152976][T10637] rock: directory entry would overflow storage
[  618.159295][T10637] rock: sig=0x66, size=4, remaining=3
[  618.183488][T10637] rock: directory entry would overflow storage
[  618.190345][T10637] rock: sig=0x66, size=4, remaining=3
[  618.570729][T10648] loop2: detected capacity change from 0 to 1024
[  619.623878][T10654] loop2: detected capacity change from 0 to 40427
[  619.674546][T10654] F2FS-fs (loop2): invalid crc value
[  619.689275][T10654] F2FS-fs (loop2): Found nat_bits in checkpoint
[  619.751178][T10654] F2FS-fs (loop2): Start checkpoint disabled!
[  619.767535][T10654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  621.229837][ T5812] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  621.254843][T10668] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.270886][T10668] bond0: (slave rose0): Enslaving as an active interface with an up link
[  621.503577][ T5812] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  621.546759][ T5812] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  621.658668][ T5812] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  621.731744][ T5812] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  621.880267][T10674] loop0: detected capacity change from 0 to 1024
[  622.546661][ T5812] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  622.560307][ T5812] usb 4-1: config 0 interface 0 has no altsetting 0
[  622.622039][ T2942] kworker/u4:9: attempt to access beyond end of device
[  622.622039][ T2942] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  622.638852][ T2942] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  622.708380][ T5812] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  622.717799][ T5812] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  622.727703][ T5812] usb 4-1: Product: syz
[  622.732106][ T5812] usb 4-1: Manufacturer: syz
[  622.736778][ T5812] usb 4-1: SerialNumber: syz
[  622.760999][ T5812] usb 4-1: config 0 descriptor??
[  622.765405][ T1089] hfsplus: b-tree write err: -5, ino 3
[  622.785404][T10666] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  622.812188][ T5812] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  622.851386][ T5812] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  623.305638][T10684] loop0: detected capacity change from 0 to 1024
[  623.811572][ T5810] usb 4-1: USB disconnect, device number 26
[  624.015563][ T5810] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  624.509335][T10691] overlayfs: failed to resolve './file1': -2
[  624.975448][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  625.005315][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  626.579853][ T5811] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  626.718521][T10699] loop3: detected capacity change from 0 to 40427
[  626.736648][T10699] F2FS-fs (loop3): invalid crc value
[  626.771265][T10699] F2FS-fs (loop3): Found nat_bits in checkpoint
[  626.812656][ T5811] usb 2-1: Using ep0 maxpacket: 8
[  626.842712][T10699] F2FS-fs (loop3): Start checkpoint disabled!
[  626.875070][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  626.932294][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  626.971944][T10699] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  627.379358][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  627.394954][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  627.406659][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  627.504117][ T5811] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  627.957953][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.057463][ T5811] usb 2-1: config 0 descriptor??
[  628.099438][T10701] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  628.337926][   T48] kworker/u4:3: attempt to access beyond end of device
[  628.337926][   T48] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  628.376628][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  628.390715][ T5814] usb 2-1: USB disconnect, device number 19
[  628.430106][   T48] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  630.183989][T10742] loop3: detected capacity change from 0 to 164
[  630.282444][T10742] rock: directory entry would overflow storage
[  630.289088][T10742] rock: sig=0x66, size=4, remaining=3
[  630.878828][T10757] loop3: detected capacity change from 0 to 164
[  630.995147][T10757] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  631.009826][T10750] loop0: detected capacity change from 0 to 40427
[  631.033978][T10750] F2FS-fs (loop0): invalid crc value
[  631.063506][T10750] F2FS-fs (loop0): Found nat_bits in checkpoint
[  631.186648][T10750] F2FS-fs (loop0): Start checkpoint disabled!
[  631.269755][T10750] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  632.745372][   T59] kworker/u4:4: attempt to access beyond end of device
[  632.745372][   T59] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  632.820770][   T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  633.311550][T10776] fuse: Bad value for 'rootmode'
[  635.128441][T10790] Bluetooth: MGMT ver 1.22
[  635.488529][ T6425] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  636.479749][   T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  636.899843][   T23] usb 1-1: Using ep0 maxpacket: 8
[  636.911243][ T6425] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  636.931463][ T6425] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  636.942117][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  636.966874][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  636.977098][ T6425] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  636.999162][ T6425] usb 4-1: config 1 has no interface number 1
[  637.006059][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  637.015906][ T6425] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  637.028725][T10810] fuse: Unknown parameter 'use00000000000000000000'
[  637.036011][   T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  637.048248][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  637.058891][   T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  637.071945][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  637.072173][ T6425] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  637.089898][ T6425] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.098187][ T6425] usb 4-1: Product: syz
[  637.105822][   T23] usb 1-1: config 0 descriptor??
[  637.110971][ T6425] usb 4-1: Manufacturer: syz
[  637.115612][ T6425] usb 4-1: SerialNumber: syz
[  637.121739][T10788] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  637.483253][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  637.500733][ T5812] usb 1-1: USB disconnect, device number 26
[  638.138527][ T6425] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  638.147880][ T6425] usb 4-1: MIDIStreaming interface descriptor not found
[  638.229106][ T6425] usb 4-1: USB disconnect, device number 27
[  640.006869][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  642.386534][T10836] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  645.344936][ T5738] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  645.559721][ T5738] usb 1-1: Using ep0 maxpacket: 8
[  645.582459][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  645.614225][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  645.649775][ T5738] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  645.656612][T10855] loop1: detected capacity change from 0 to 32768
[  645.671440][T10855] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1519 (10855)
[  645.702481][T10855] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  645.712873][T10855] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  645.715806][ T5738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  645.721794][T10855] BTRFS info (device loop1): setting nodatacow, compression disabled
[  645.721870][T10855] BTRFS info (device loop1): enabling auto defrag
[  645.721934][T10855] BTRFS info (device loop1): max_inline at 0
[  645.721955][T10855] BTRFS info (device loop1): using free space tree
[  645.881034][ T5738] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  645.899797][T10855] BTRFS info (device loop1): auto enabling async discard
[  645.929730][ T5738] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  645.949477][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  646.005684][ T5738] usb 1-1: config 0 descriptor??
[  646.030984][T10849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  646.097255][T10879] fuse: Unknown parameter 'use00000000000000000000'
[  647.077642][ T5810] usb 1-1: USB disconnect, device number 27
[  647.084166][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  647.356960][T10855] BTRFS info (device loop1): space_info DATA+METADATA has 0 free, is not full
[  647.367021][T10855] BTRFS info (device loop1): space_info total=3276800, used=73728, pinned=241664, reserved=45056, may_use=2916352, readonly=0 zone_unusable=0
[  647.384908][T10855] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1441792
[  647.394752][T10855] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  647.402619][T10855] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  647.411537][T10855] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768
[  647.420198][T10855] BTRFS info (device loop1): delayed_refs_rsv: size 1441792 reserved 1441792
[  647.430036][T10855] BTRFS info (device loop1): space_info DATA+METADATA has 0 free, is not full
[  647.439761][T10855] BTRFS info (device loop1): space_info total=3276800, used=73728, pinned=245760, reserved=45056, may_use=2912256, readonly=0 zone_unusable=0
[  647.454354][T10855] BTRFS info (device loop1): global_block_rsv: size 1441792 reserved 1437696
[  647.463961][T10855] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0
[  647.471777][T10855] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0
[  647.479523][T10855] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768
[  647.488439][T10855] BTRFS info (device loop1): delayed_refs_rsv: size 1441792 reserved 1441792
[  647.542385][T10890] loop2: detected capacity change from 0 to 164
[  647.564568][T10890] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  647.785200][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  648.981612][T10911] fuse: Unknown parameter 'user_i00000000000000000000'
[  653.475365][T10939] qrtr: Invalid version 0
[  653.720449][T10946] fuse: Unknown parameter 'user_i00000000000000000000'
[  653.771195][ T5810] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  653.861944][T10948] loop3: detected capacity change from 0 to 164
[  653.936825][T10948] rock: directory entry would overflow storage
[  653.946964][T10948] rock: sig=0x66, size=4, remaining=3
[  653.999850][ T5810] usb 2-1: Using ep0 maxpacket: 8
[  654.032931][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  654.064623][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  654.095140][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  654.109200][T10936] loop0: detected capacity change from 0 to 32768
[  654.129967][ T5810] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  654.170677][T10936] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1536 (10936)
[  654.172341][ T5810] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  654.233601][ T5810] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  654.234428][T10936] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  654.264800][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.319950][T10936] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  654.417982][T10936] BTRFS info (device loop0): setting nodatacow, compression disabled
[  654.468790][ T5810] usb 2-1: config 0 descriptor??
[  654.555551][T10936] BTRFS info (device loop0): enabling auto defrag
[  654.616282][T10940] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  654.742970][T10936] BTRFS info (device loop0): max_inline at 0
[  654.855222][T10936] BTRFS info (device loop0): using free space tree
[  657.921871][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  657.940421][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[  658.043219][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[  658.055917][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  658.067808][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  658.086913][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  658.097978][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  658.118309][ T5810] usb 2-1: USB disconnect, device number 20
[  658.172021][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  658.172715][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  658.234327][T10936] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  658.302950][T10936] BTRFS error (device loop0): open_ctree failed: -12
[  658.313156][T10976] qrtr: Invalid version 0
[  658.969992][T10987] fuse: Unknown parameter 'user_i00000000000000000000'
[  659.175197][T10993] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  659.773337][T10995] loop3: detected capacity change from 0 to 256
[  659.782549][T10995] exfat: Bad value for 'uid'
[  659.803035][T10995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1554'.
[  660.100231][T11000] qrtr: Invalid version 0
[  660.610716][ T5810] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  660.953310][ T5810] usb 4-1: Using ep0 maxpacket: 8
[  661.017052][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  661.048060][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  661.074712][ T5810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  661.086661][ T5810] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  661.165691][ T5810] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  661.187778][ T5810] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  661.198799][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.248786][ T5810] usb 4-1: config 0 descriptor??
[  661.260893][T11002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  661.600047][T11004] loop0: detected capacity change from 0 to 40427
[  661.768219][T11006] loop1: detected capacity change from 0 to 40427
[  661.802408][T11004] F2FS-fs (loop0): invalid crc value
[  661.802459][T11006] F2FS-fs (loop1): invalid crc value
[  661.819495][T11004] F2FS-fs (loop0): Found nat_bits in checkpoint
[  661.819530][T11006] F2FS-fs (loop1): Found nat_bits in checkpoint
[  661.885595][T11004] F2FS-fs (loop0): Start checkpoint disabled!
[  661.896871][T11004] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  661.915964][T11006] F2FS-fs (loop1): Start checkpoint disabled!
[  661.926066][T11006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  661.952433][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  661.961807][ T5814] usb 4-1: USB disconnect, device number 28
[  662.744613][ T3477] kworker/u4:10: attempt to access beyond end of device
[  662.744613][ T3477] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  662.870899][ T3477] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  662.878054][ T3477] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  662.924655][T11016] fuse: Unknown parameter 'user_id00000000000000000000'
[  662.944317][ T3477] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  663.063843][   T59] kworker/u4:4: attempt to access beyond end of device
[  663.063843][   T59] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  663.116605][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  663.138003][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  663.168885][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  663.407438][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1564'.
[  663.628204][T11022] loop3: detected capacity change from 0 to 1024
[  663.844926][T11026] loop2: detected capacity change from 0 to 2048
[  663.853851][T11026] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  665.777047][T11026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  667.130521][T11042] fuse: Unknown parameter 'user_id00000000000000000000'
[  667.338610][T11036] loop2: detected capacity change from 0 to 40427
[  667.436500][T11036] F2FS-fs (loop2): invalid crc value
[  667.471949][T11036] F2FS-fs (loop2): Found nat_bits in checkpoint
[  667.527619][T11036] F2FS-fs (loop2): Start checkpoint disabled!
[  667.590276][T11036] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  668.606783][T11057] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  669.441653][ T1089] kworker/u4:5: attempt to access beyond end of device
[  669.441653][ T1089] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  669.555990][ T1089] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  669.599428][ T1089] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  669.638670][ T1089] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  672.377332][T11078] loop3: detected capacity change from 0 to 40427
[  672.416873][T11078] F2FS-fs (loop3): invalid crc value
[  672.424610][T11078] F2FS-fs (loop3): Found nat_bits in checkpoint
[  672.461650][T11078] F2FS-fs (loop3): Start checkpoint disabled!
[  672.475908][T11078] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  672.549791][ T3045] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  673.018615][ T3045] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  673.056510][ T3045] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  673.114330][ T3045] usb 1-1: config 0 interface 0 altsetting 191 has an invalid endpoint with address 0xFF, skipping
[  673.174956][ T3045] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  673.212311][   T59] kworker/u4:4: attempt to access beyond end of device
[  673.212311][   T59] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  673.227568][   T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  673.235269][ T3045] usb 1-1: config 0 interface 0 has no altsetting 0
[  673.236087][   T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  673.257000][   T59] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  673.318658][ T3045] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  673.339134][ T3045] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  673.375776][ T3045] usb 1-1: Product: syz
[  673.411774][ T3045] usb 1-1: Manufacturer: syz
[  673.417371][ T3045] usb 1-1: SerialNumber: syz
[  673.476007][ T3045] usb 1-1: config 0 descriptor??
[  673.504927][ T3045] ldusb 1-1:0.0: Interrupt in endpoint not found
[  673.703549][T11091] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  674.611255][ T3045] usb 1-1: USB disconnect, device number 28
[  675.721511][T11107] loop3: detected capacity change from 0 to 128
[  675.851221][T11107] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  675.877752][T11107] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  676.840490][ T5767] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  677.198965][T11123] overlayfs: failed to resolve './file1': -2
[  679.795990][T11133] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  684.829410][T11166] loop1: detected capacity change from 0 to 1024
[  686.346051][ T5811] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  686.397127][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  686.403968][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  686.713320][ T5811] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  687.102239][T11184] loop2: detected capacity change from 0 to 40427
[  687.115266][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  687.125949][ T5811] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  687.154470][ T5811] usb 4-1: config 1 has no interface number 1
[  687.160861][T11184] F2FS-fs (loop2): invalid crc value
[  687.173222][ T5811] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  687.192306][T11184] F2FS-fs (loop2): Found nat_bits in checkpoint
[  687.229829][ T5811] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  687.249615][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.257715][ T5811] usb 4-1: Product: syz
[  687.270078][ T5811] usb 4-1: Manufacturer: syz
[  687.274779][ T5811] usb 4-1: SerialNumber: syz
[  687.294506][T11184] F2FS-fs (loop2): Start checkpoint disabled!
[  687.310544][T11184] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  687.611269][ T5811] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  688.368829][ T5811] usb 4-1: MIDIStreaming interface descriptor not found
[  688.618034][ T5811] usb 4-1: USB disconnect, device number 29
[  688.815435][T11198] udevd[11198]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  688.997585][T11202] loop3: detected capacity change from 0 to 1024
[  689.079304][ T1126] kworker/u4:7: attempt to access beyond end of device
[  689.079304][ T1126] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  690.079723][ T1126] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  690.115628][ T1126] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  690.224448][T11211] loop0: detected capacity change from 0 to 164
[  690.302143][T11211] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.081163][ T5771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.148897][ T5771] rock: directory entry would overflow storage
[  691.156725][ T5771] rock: sig=0x4f50, size=4, remaining=3
[  691.165544][ T5771] iso9660: Corrupted directory entry in block 4 of inode 1792
[  691.185495][ T5771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.217948][ T5771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.240380][ T5771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.332779][ T5771] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  691.348662][ T5771] rock: directory entry would overflow storage
[  691.363586][ T5771] rock: sig=0x4f50, size=4, remaining=3
[  691.369238][ T5771] iso9660: Corrupted directory entry in block 3 of inode 1856
[  691.526901][ T5771] VFS: Lookup of '' in iso9660 loop0 would have caused loop
[  691.540894][ T5771] VFS: Lookup of '' in iso9660 loop0 would have caused loop
[  692.971195][T11229] overlayfs: failed to resolve './file1': -2
[  693.253545][T11228] loop3: detected capacity change from 0 to 4096
[  693.480852][   T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.648447][   T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.805301][   T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.818589][T11236] loop1: detected capacity change from 0 to 64
[  693.997647][T11238] loop2: detected capacity change from 0 to 1024
[  694.311108][   T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.174314][ T5768] hfs: node 4:3 still has 1 user(s)!
[  695.385791][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  695.397499][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  695.421017][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  695.438053][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  695.446535][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  695.455619][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  695.496506][ T5086] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  695.530595][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  695.539500][ T5086] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  695.582382][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  695.608129][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  695.690992][ T5086] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  695.835717][   T34] tipc: Left network mode
[  696.600524][T11268] overlayfs: failed to resolve './file1': -2
[  698.655923][ T5086] Bluetooth: hci2: command tx timeout
[  699.308112][T11280] loop2: detected capacity change from 0 to 1024
[  699.557213][T11280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  699.599868][T11280] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  699.941567][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  700.711969][ T5086] Bluetooth: hci2: command tx timeout
[  701.008637][T11250] chnl_net:caif_netlink_parms(): no params data found
[  701.413879][T11311] loop3: detected capacity change from 0 to 1024
[  702.677123][T11250] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.699781][T11250] bridge0: port 1(bridge_slave_0) entered disabled state
[  702.718404][T11250] bridge_slave_0: entered allmulticast mode
[  702.731212][T11250] bridge_slave_0: entered promiscuous mode
[  702.799365][T11250] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.850617][T11250] bridge0: port 2(bridge_slave_1) entered disabled state
[  702.858006][T11250] bridge_slave_1: entered allmulticast mode
[  702.929890][T11250] bridge_slave_1: entered promiscuous mode
[  703.033159][ T5086] Bluetooth: hci2: command tx timeout
[  703.813797][T11315] loop2: detected capacity change from 0 to 32768
[  703.865645][T11315] XFS: ikeep mount option is deprecated.
[  703.956141][T11315] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  704.115929][T11250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  704.167019][T11250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.248323][   T34] hsr_slave_0: left promiscuous mode
[  704.338272][   T34] hsr_slave_1: left promiscuous mode
[  704.386842][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  704.427420][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  704.450912][T11315] XFS (loop2): Ending clean mount
[  704.459105][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  704.477249][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  704.514617][   T34] bridge_slave_1: left allmulticast mode
[  704.527691][   T34] bridge_slave_1: left promiscuous mode
[  704.554831][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  704.597869][T11315] XFS (loop2): Quotacheck needed: Please wait.
[  704.605597][   T34] bridge_slave_0: left allmulticast mode
[  704.635107][   T34] bridge_slave_0: left promiscuous mode
[  704.680992][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  704.823619][T11315] XFS (loop2): Quotacheck: Done.
[  704.930505][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  704.955361][   T34] veth1_macvtap: left promiscuous mode
[  704.962716][   T34] veth0_macvtap: left promiscuous mode
[  704.972131][   T34] veth1_vlan: left promiscuous mode
[  704.979111][   T34] veth0_vlan: left promiscuous mode
[  705.031674][T11359] loop1: detected capacity change from 0 to 128
[  705.114623][ T5086] Bluetooth: hci2: command tx timeout
[  705.146503][T11359] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  705.166946][T11359] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  705.312732][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  707.602201][T11387] loop3: detected capacity change from 0 to 128
[  707.680593][T11387] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  707.733474][T11387] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  707.828641][T11391] loop1: detected capacity change from 0 to 1024
[  707.905147][ T5767] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  708.578544][   T34] team0 (unregistering): Port device team_slave_1 removed
[  708.606923][T11385] loop2: detected capacity change from 0 to 32768
[  708.639388][T11385] XFS: ikeep mount option is deprecated.
[  708.702103][ T9689] Bluetooth: hci4: Frame reassembly failed (-84)
[  708.751519][T11385] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  708.814857][   T34] team0 (unregistering): Port device team_slave_0 removed
[  708.852614][T11400] UBIFS error (pid: 11400): cannot open "./file0", error -22
[  709.055562][T11385] XFS (loop2): Ending clean mount
[  709.073042][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  709.124346][T11385] XFS (loop2): Quotacheck needed: Please wait.
[  709.205584][T11385] XFS (loop2): Quotacheck: Done.
[  709.310180][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  710.125006][ T5777] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  710.716290][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  711.363150][   T34] bond0 (unregistering): Released all slaves
[  713.385603][T11424] syz.2.1673 (11424): drop_caches: 2
[  713.405055][T11250] team0: Port device team_slave_0 added
[  713.423199][T11250] team0: Port device team_slave_1 added
[  713.812361][T11250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  713.849750][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  713.883896][T11433] loop1: detected capacity change from 0 to 1024
[  713.958568][T11250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  713.971176][T11436] UBIFS error (pid: 11436): cannot open "./file0", error -22
[  714.241924][T11250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  714.758501][T11250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  714.948552][T11250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  715.242147][T11250] hsr_slave_0: entered promiscuous mode
[  715.256947][T11250] hsr_slave_1: entered promiscuous mode
[  716.090895][ T5772] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  716.097968][ T5086] Bluetooth: hci4: command 0x1003 tx timeout
[  716.350539][T11454] syz.2.1686 (11454): drop_caches: 2
[  717.181265][T11250] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  717.203446][T11470] loop3: detected capacity change from 0 to 1024
[  717.230548][T11250] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  717.428682][T11250] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  717.871443][T11250] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  719.126229][T11250] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.185826][T11489] syz.3.1694 (11489): drop_caches: 2
[  719.474637][T11250] 8021q: adding VLAN 0 to HW filter on device team0
[  719.531559][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  719.539583][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  719.614208][ T6030] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.622210][ T6030] bridge0: port 2(bridge_slave_1) entered forwarding state
[  719.773426][ T6030] Bluetooth: hci4: Frame reassembly failed (-84)
[  719.866538][T11498] UBIFS error (pid: 11498): cannot open "./file0", error -22
[  720.911585][T11513] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  721.734946][T11515] loop3: detected capacity change from 0 to 1024
[  721.905911][ T5086] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  722.765272][T11250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  723.501609][T11536] syz.1.1705 (11536): drop_caches: 2
[  723.507845][T11536] syz.1.1705 (11536): drop_caches: 2
[  724.169156][T11542] loop2: detected capacity change from 0 to 64
[  724.532748][T11545] loop3: detected capacity change from 0 to 32768
[  724.679946][T11545] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  724.770240][T11545] XFS (loop3): Ending clean mount
[  724.931136][ T5811] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  724.971797][ T5811] XFS (loop3): Unmount and run xfs_repair
[  724.978562][ T5811] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  724.997238][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  725.006848][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  725.018437][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  725.063833][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  725.099041][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  725.186842][T11563] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  725.276056][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  725.474812][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  725.711035][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  725.970124][T11545] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  725.984011][T11545] XFS (loop3): page discard on page ffffea000148c140, inode 0x1146, pos 4096.
[  726.002961][T11570] loop1: detected capacity change from 0 to 1024
[  726.056786][ T3045] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  726.110663][ T3045] XFS (loop3): Unmount and run xfs_repair
[  726.119506][ T3045] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  726.140193][ T3045] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  726.166795][ T3045] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  726.180259][ T3045] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  726.193125][ T3045] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  726.205420][ T3045] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  726.218882][ T3045] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  726.231935][ T3045] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  726.276644][ T3045] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  726.289941][T11545] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  726.302247][T11545] XFS (loop3): page discard on page ffffea00013f8d00, inode 0x1146, pos 8192.
[  726.335578][ T5738] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  726.594824][ T5738] XFS (loop3): Unmount and run xfs_repair
[  726.794057][ T5738] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  726.819415][ T5738] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  726.835355][ T5738] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  726.847839][ T5738] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  726.862257][ T5738] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  726.894569][ T5738] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  726.923781][ T5738] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  726.972216][ T5738] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  726.980895][T11250] veth0_vlan: entered promiscuous mode
[  727.028488][ T5738] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  727.061029][T11545] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  727.073550][T11545] XFS (loop3): page discard on page ffffea00013f9d00, inode 0x1146, pos 16384.
[  727.085878][ T5738] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  727.102675][T11250] veth1_vlan: entered promiscuous mode
[  727.115625][ T5738] XFS (loop3): Unmount and run xfs_repair
[  727.122151][ T5738] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  727.141064][ T5738] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  727.194988][ T5738] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  727.224642][ T5738] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  727.265988][ T5738] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  727.306602][ T5738] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  727.323414][T11250] veth0_macvtap: entered promiscuous mode
[  727.337435][ T5738] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  727.371313][ T5738] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  727.378009][T11250] veth1_macvtap: entered promiscuous mode
[  727.390913][ T5738] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  727.401804][T11545] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  727.414507][T11545] XFS (loop3): page discard on page ffffea00013fac00, inode 0x1146, pos 32768.
[  727.431228][ T5738] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  727.449232][ T5738] XFS (loop3): Unmount and run xfs_repair
[  727.462046][ T5738] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  727.470115][ T5738] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  727.483138][ T5738] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  727.498282][ T5738] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  728.046638][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.096258][ T5738] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  728.127197][ T5738] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  728.127451][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.146723][ T5738] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  728.154190][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.174785][ T5738] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  728.177423][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.199659][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  728.214515][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.286844][ T5738] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  728.289641][T11250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.318331][T11545] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  728.330697][T11545] XFS (loop3): page discard on page ffffea0001378480, inode 0x1146, pos 65536.
[  728.365894][ T5811] loop3: writeback error on inode 4422, offset 0, sector 8776
[  728.386306][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.415391][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.425528][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.436571][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.451181][T11250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  728.476152][ T5767] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  728.479693][T11250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  728.553757][T11250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.615073][T11250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.653262][T11250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.694342][T11250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.729670][T11250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  729.273440][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.325987][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.470676][ T6030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.478621][ T6030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  732.310175][T11608] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  732.783908][T11616] loop3: detected capacity change from 0 to 64
[  735.418480][T11650] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  736.098259][T11655] loop1: detected capacity change from 0 to 1024
[  736.830622][T11669] loop3: detected capacity change from 0 to 64
[  737.078347][ T5767] hfs: node 4:3 still has 1 user(s)!
[  737.678983][T11662] loop4: detected capacity change from 0 to 32768
[  738.508413][T11662] JBD2: Ignoring recovery information on journal
[  738.744794][T11662] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  739.540445][T11697] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  740.167389][T11662] overlayfs: upper fs does not support tmpfile.
[  740.246488][T11662] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  740.298200][T11662] overlayfs: upper fs missing required features.
[  740.491215][T11662] syz.4.1733 (11662) used greatest stack depth: 18736 bytes left
[  740.765781][T11250] ocfs2: Unmounting device (7,4) on (node local)
[  740.985070][T11711] loop3: detected capacity change from 0 to 8
[  741.794373][T11710] SQUASHFS error: zlib decompression failed, data probably corrupt
[  741.802898][T11710] SQUASHFS error: Failed to read block 0x4e8: -5
[  741.814211][   T28] audit: type=1800 audit(2000000035.670:2): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1742" name="file1" dev="loop3" ino=5 res=0 errno=0
[  741.833968][    C1] vkms_vblank_simulate: vblank timer overrun
[  743.838537][T11729] loop1: detected capacity change from 0 to 128
[  743.886673][T11729] EXT4-fs (loop1): Test dummy encryption mode enabled
[  743.986897][T11729] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  744.064540][T11729] ext4 filesystem being mounted at /430/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  744.512581][T11740] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  745.404703][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  745.689159][T11750] loop1: detected capacity change from 0 to 1024
[  746.070945][T11723] loop4: detected capacity change from 0 to 32768
[  746.078699][T11723] XFS: ikeep mount option is deprecated.
[  746.576952][T11723] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop4": -EINTR
[  747.947347][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  748.209299][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  748.829845][ T5834] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  749.349653][ T5834] usb 5-1: Using ep0 maxpacket: 8
[  749.503401][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  749.518739][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  749.529388][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  749.581820][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  749.659408][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  749.734000][ T5834] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  749.770680][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.805887][ T5834] usb 5-1: config 0 descriptor??
[  749.841624][T11766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  750.316915][ T3045] usb 5-1: USB disconnect, device number 2
[  750.320128][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  750.527633][T11784] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  751.902148][T11790] loop2: detected capacity change from 0 to 32768
[  751.919420][T11790] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1762 (11790)
[  751.935322][T11790] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  751.945944][T11790] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  751.955439][T11790] BTRFS info (device loop2): setting nodatacow, compression disabled
[  751.964290][T11790] BTRFS info (device loop2): enabling auto defrag
[  751.971708][T11790] BTRFS info (device loop2): max_inline at 0
[  751.978381][T11790] BTRFS info (device loop2): using free space tree
[  752.123115][T11790] BTRFS info (device loop2): auto enabling async discard
[  752.492830][T11808] loop4: detected capacity change from 0 to 4096
[  752.513919][ T5777] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  753.788656][T11827] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1766'.
[  755.453531][T11842] loop2: detected capacity change from 0 to 512
[  755.608947][T11842] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  756.933023][T11857] loop2: detected capacity change from 0 to 1024
[  757.039984][   T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  757.050013][ T6425] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  757.117790][T11835] loop3: detected capacity change from 0 to 32768
[  757.256502][T11835] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  757.257089][T11835] (syz.3.1768,11835,0):ocfs2_initialize_super:2287 ERROR: status = -12
[  757.303951][ T6425] usb 5-1: Using ep0 maxpacket: 8
[  757.328927][T11835] (syz.3.1768,11835,0):ocfs2_fill_super:1178 ERROR: status = -12
[  757.351632][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  757.378604][   T23] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  757.417050][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  757.440317][   T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  757.483569][ T6425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  757.515993][   T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  757.555540][ T6425] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  757.604949][   T23] usb 2-1: config 1 has no interface number 1
[  757.624438][   T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  757.639629][ T6425] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  757.656306][ T6425] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  757.678070][   T23] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  757.693720][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.707404][ T6425] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  757.719604][   T23] usb 2-1: Product: syz
[  757.724117][   T23] usb 2-1: Manufacturer: syz
[  757.734464][ T6425] usb 5-1: config 0 descriptor??
[  757.740845][   T23] usb 2-1: SerialNumber: syz
[  757.769214][T11855] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  758.003420][   T23] usb 2-1: Quirk or no altest; falling back to MIDI 1.0
[  758.023591][   T23] usb 2-1: MIDIStreaming interface descriptor not found
[  758.344470][   T23] usb 2-1: USB disconnect, device number 21
[  758.782867][T11744] usb 5-1: USB disconnect, device number 3
[  758.792709][ T5086] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  759.010236][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  759.219245][T11877] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1778'.
[  761.200161][ T5811] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  761.774947][ T5811] usb 5-1: Using ep0 maxpacket: 16
[  761.890071][ T5811] usb 5-1: config 0 has no interfaces?
[  761.900610][ T5811] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  761.915412][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.923922][ T5811] usb 5-1: Product: syz
[  761.928156][ T5811] usb 5-1: Manufacturer: syz
[  761.933519][ T5811] usb 5-1: SerialNumber: syz
[  761.961328][ T5811] usb 5-1: config 0 descriptor??
[  762.282775][T11906] loop3: detected capacity change from 0 to 1024
[  762.907992][T11888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1781'.
[  763.077134][T11895] loop2: detected capacity change from 0 to 32768
[  763.172685][T11895] JBD2: Ignoring recovery information on journal
[  763.189426][   T23] usb 5-1: USB disconnect, device number 4
[  763.261809][T11895] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  763.367364][T11895] overlayfs: upper fs does not support tmpfile.
[  763.447365][T11895] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  763.482194][T11895] overlayfs: upper fs missing required features.
[  763.577341][T11904] loop1: detected capacity change from 0 to 32768
[  763.699690][T11904] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  763.807694][T11904] JBD2: Ignoring recovery information on journal
[  763.857315][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  764.020156][T11904] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  764.210625][T11929] netlink: 892 bytes leftover after parsing attributes in process `syz.4.1788'.
[  764.472985][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[  765.384097][ T5811] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  766.042211][ T5811] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  766.051637][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  766.090821][ T5811] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  766.117485][ T5811] usb 3-1: config 1 has no interface number 1
[  766.130436][ T5811] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  766.189345][ T5811] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  766.212858][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.223042][ T5811] usb 3-1: Product: syz
[  766.227304][ T5811] usb 3-1: Manufacturer: syz
[  766.245852][ T5811] usb 3-1: SerialNumber: syz
[  767.389495][ T5811] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  767.396682][ T5811] usb 3-1: MIDIStreaming interface descriptor not found
[  767.429288][ T5811] usb 3-1: USB disconnect, device number 33
[  767.562366][T11206] udevd[11206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  769.002011][T11980] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1800'.
[  769.262262][T11978] loop1: detected capacity change from 0 to 40427
[  769.299719][T11978] F2FS-fs (loop1): invalid crc value
[  769.338427][T11978] F2FS-fs (loop1): Found nat_bits in checkpoint
[  769.400128][T11978] F2FS-fs (loop1): Start checkpoint disabled!
[  769.431845][T11978] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  770.039915][T11960] loop4: detected capacity change from 0 to 32768
[  770.409682][T11960] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  770.410174][T11960] (syz.4.1794,11960,0):ocfs2_initialize_super:2287 ERROR: status = -12
[  770.454308][T11960] (syz.4.1794,11960,0):ocfs2_fill_super:1178 ERROR: status = -12
[  771.690013][ T5812] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  772.739115][ T1142] kworker/u4:8: attempt to access beyond end of device
[  772.739115][ T1142] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  772.767470][ T1142] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  772.786657][ T5812] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  772.825252][ T5812] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  772.871073][ T5812] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  772.895194][ T5812] usb 5-1: config 1 has no interface number 1
[  772.929660][ T5812] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  772.994840][ T5812] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  773.045229][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.064281][ T5812] usb 5-1: Product: syz
[  773.069067][ T5812] usb 5-1: Manufacturer: syz
[  773.079149][ T5812] usb 5-1: SerialNumber: syz
[  773.338125][ T5812] usb 5-1: Quirk or no altest; falling back to MIDI 1.0
[  773.368241][ T5812] usb 5-1: MIDIStreaming interface descriptor not found
[  773.479732][ T5812] usb 5-1: USB disconnect, device number 5
[  773.605922][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  774.086552][T12044] loop4: detected capacity change from 0 to 64
[  777.378680][T12067] loop2: detected capacity change from 0 to 32768
[  777.466221][T12067] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  777.566843][T12067] XFS (loop2): Ending clean mount
[  777.683017][ T5811] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  777.984394][ T5811] XFS (loop2): Unmount and run xfs_repair
[  778.209299][ T5811] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  778.269873][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  778.339629][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  778.387327][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  778.426459][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  778.456096][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  778.481719][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  778.519182][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  778.569374][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  778.603391][T12067] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  778.615530][T12067] XFS (loop2): page discard on page ffffea00013b2dc0, inode 0x1146, pos 4096.
[  778.627886][ T5811] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  778.655510][ T5811] XFS (loop2): Unmount and run xfs_repair
[  778.675803][ T5811] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  778.699477][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  778.717643][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  778.731564][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  778.747486][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  778.759324][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  778.772143][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  778.782916][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  778.807480][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  778.824718][T12067] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  778.836881][T12067] XFS (loop2): page discard on page ffffea00016feb00, inode 0x1146, pos 8192.
[  778.853798][ T5811] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  778.875736][ T5811] XFS (loop2): Unmount and run xfs_repair
[  778.887752][ T5811] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  778.901069][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  778.935472][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  778.958311][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  778.987391][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  779.019853][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  779.045528][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  779.059727][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.074742][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  779.104749][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.124400][T12067] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  779.137381][T12067] XFS (loop2): page discard on page ffffea000168a300, inode 0x1146, pos 16384.
[  779.155128][ T5811] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  779.167229][ T5811] XFS (loop2): Unmount and run xfs_repair
[  779.174200][ T5811] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  779.183974][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  779.196231][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  779.215769][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  779.234458][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  779.251358][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  779.261410][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  779.273723][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  779.290466][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.301117][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  779.316517][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.328578][    T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  779.345386][T12067] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  779.358872][T12067] XFS (loop2): page discard on page ffffea00013ac600, inode 0x1146, pos 32768.
[  779.368866][T11744] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  779.379793][    T9] usb 4-1: config 1 has no interface number 1
[  779.386071][    T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  779.400098][ T5811] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  779.414077][ T5811] XFS (loop2): Unmount and run xfs_repair
[  779.421280][ T5811] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  779.443263][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  779.452917][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.461195][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  779.473159][T12102] loop1: detected capacity change from 0 to 64
[  779.480213][    T9] usb 4-1: Product: syz
[  779.484444][    T9] usb 4-1: Manufacturer: syz
[  779.489093][    T9] usb 4-1: SerialNumber: syz
[  779.494529][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  779.504986][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  779.540192][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  779.553845][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  779.590131][T11744] usb 5-1: Using ep0 maxpacket: 8
[  779.598229][T11744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  779.616819][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  779.629914][T11744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  779.649915][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.659222][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  779.668712][T11744] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  779.683286][T11744] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  779.694186][T12067] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  779.701102][ T5768] hfs: node 4:3 still has 1 user(s)!
[  779.706924][T12067] XFS (loop2): page discard on page ffffea0001473140, inode 0x1146, pos 65536.
[  779.765386][ T5738] loop2: writeback error on inode 4422, offset 0, sector 8776
[  779.767292][T11744] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  779.771224][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  779.776323][T11744] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  779.803254][    T9] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  779.812135][    T9] usb 4-1: MIDIStreaming interface descriptor not found
[  779.919722][T11744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.980491][T11744] usb 5-1: config 0 descriptor??
[  780.084401][ T5086] Bluetooth: hci4: urb ffff888030c72d00 submission failed (90)
[  780.096048][    T9] usb 4-1: USB disconnect, device number 30
[  780.217797][T11744] usb 5-1: USB disconnect, device number 6
[  780.283521][T11200] udevd[11200]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  781.440801][T12126] UBIFS error (pid: 12126): cannot open "./file0", error -22
[  783.275217][T12134] loop2: detected capacity change from 0 to 40427
[  783.314898][T12134] F2FS-fs (loop2): invalid crc value
[  783.334095][T12134] F2FS-fs (loop2): Found nat_bits in checkpoint
[  783.374679][T12134] F2FS-fs (loop2): Start checkpoint disabled!
[  783.396099][T12134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  784.320991][T12148] loop1: detected capacity change from 0 to 64
[  784.610198][ T5768] hfs: node 4:3 still has 1 user(s)!
[  784.854251][T12154] loop1: detected capacity change from 0 to 1024
[  784.917598][   T59] kworker/u4:4: attempt to access beyond end of device
[  784.917598][   T59] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  784.948802][   T59] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  786.070009][ T5834] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  786.289708][ T5834] usb 5-1: Using ep0 maxpacket: 8
[  786.298683][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  786.311366][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  786.346893][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  786.377521][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  786.405904][ T5834] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  786.453100][ T5834] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  786.697897][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.784765][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'.
[  787.128276][ T5834] usb 5-1: config 0 descriptor??
[  787.167413][ T5086] Bluetooth: hci4: urb ffff88802beb7c00 submission failed (90)
[  787.276342][ T1102] Bluetooth: hci5: Frame reassembly failed (-84)
[  787.381973][ T5834] usb 5-1: USB disconnect, device number 7
[  787.453016][T12190] UBIFS error (pid: 12190): cannot open "./file0", error -22
[  788.213630][T12198] loop1: detected capacity change from 0 to 40427
[  788.258518][T12198] F2FS-fs (loop1): invalid crc value
[  788.273936][T12198] F2FS-fs (loop1): Found nat_bits in checkpoint
[  788.312477][T12198] F2FS-fs (loop1): Start checkpoint disabled!
[  788.327265][T12198] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  789.269766][ T5086] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  789.738554][T12209] loop4: detected capacity change from 0 to 64
[  790.159001][T11250] hfs: node 4:3 still has 1 user(s)!
[  790.272560][T12193] loop3: detected capacity change from 0 to 32768
[  790.377144][T12193] JBD2: Ignoring recovery information on journal
[  790.677884][T12193] JBD2: journal reset failed
[  790.693989][T12193] (syz.3.1839,12193,1):ocfs2_journal_load:1167 ERROR: Failed to load journal!
[  790.729897][T12193] (syz.3.1839,12193,1):ocfs2_check_volume:2434 ERROR: ocfs2 journal load failed! -4
[  790.828217][   T59] kworker/u4:4: attempt to access beyond end of device
[  790.828217][   T59] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  790.859085][   T59] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  792.020481][T12239] loop4: detected capacity change from 0 to 8
[  792.109048][T12239] SQUASHFS error: zlib decompression failed, data probably corrupt
[  792.118026][T12239] SQUASHFS error: Failed to read block 0x4e8: -5
[  792.142711][   T28] audit: type=1800 audit(2000000014.460:3): pid=12239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1846" name="file1" dev="loop4" ino=5 res=0 errno=0
[  793.116275][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'.
[  793.643514][T12229] loop3: detected capacity change from 0 to 32768
[  793.826122][T12229] JBD2: Ignoring recovery information on journal
[  793.999140][T12229] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  794.220328][T12229] overlayfs: upper fs does not support tmpfile.
[  794.238707][T12229] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  794.272417][T12229] overlayfs: upper fs missing required features.
[  794.427881][ T5767] ocfs2: Unmounting device (7,3) on (node local)
[  794.920199][T12250] loop1: detected capacity change from 0 to 32768
[  795.010102][T12250] JBD2: Ignoring recovery information on journal
[  795.097856][T12250] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  795.205135][T12265] loop2: detected capacity change from 0 to 64
[  795.397933][ T5777] hfs: node 4:3 still has 1 user(s)!
[  795.407605][ T5768] ocfs2: Unmounting device (7,1) on (node local)
[  796.396172][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1859'.
[  797.730039][T12269] loop2: detected capacity change from 0 to 32768
[  797.840269][T12269] JBD2: Ignoring recovery information on journal
[  797.991315][T12269] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  798.160199][T12269] overlayfs: upper fs does not support tmpfile.
[  798.187900][T12269] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  798.221371][T12269] overlayfs: upper fs missing required features.
[  798.387398][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  798.628121][T12281] loop4: detected capacity change from 0 to 32768
[  798.655476][T12281] XFS: ikeep mount option is deprecated.
[  798.706669][T12281] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  798.799163][T12299] fuse: Invalid rootmode
[  798.890694][T12281] XFS (loop4): Ending clean mount
[  798.903753][T12281] XFS (loop4): Quotacheck needed: Please wait.
[  799.109120][T12281] XFS (loop4): Quotacheck: Done.
[  799.185968][T12301] loop2: detected capacity change from 0 to 32768
[  799.248196][T12301] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  799.412673][T12301] XFS (loop2): Ending clean mount
[  799.466379][ T5814] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  799.494246][ T5814] XFS (loop2): Unmount and run xfs_repair
[  799.518764][ T5814] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  799.548884][ T5814] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  799.578674][ T5814] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  799.595959][T11250] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  799.608820][ T5814] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  799.636881][ T5814] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  799.663521][ T5814] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  799.688032][ T5814] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  799.722117][ T5814] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  799.763286][ T5814] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  799.814403][T12301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  799.826136][T12301] XFS (loop2): page discard on page ffffea00016c4c00, inode 0x1146, pos 4096.
[  799.859936][ T5834] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  799.884308][ T5834] XFS (loop2): Unmount and run xfs_repair
[  799.899878][ T5834] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  799.917751][ T5834] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  799.938056][ T5834] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  799.965003][ T5834] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  799.995041][ T5834] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  800.019819][ T5834] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  800.039792][ T5834] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  800.069338][ T5834] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  800.093704][ T5834] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  800.103466][T12305] loop3: detected capacity change from 0 to 32768
[  800.122112][T12301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  800.134024][T12301] XFS (loop2): page discard on page ffffea00013aac00, inode 0x1146, pos 8192.
[  800.149373][    T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  800.170843][    T9] XFS (loop2): Unmount and run xfs_repair
[  800.189721][T12305] JBD2: Ignoring recovery information on journal
[  800.207732][    T9] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  800.259672][    T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  800.268627][    T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  800.297345][    T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  800.316852][T12305] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  800.353205][    T9] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  800.375152][    T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  800.413139][    T9] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  800.433095][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  800.445589][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  800.458805][T12301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  800.472542][T12301] XFS (loop2): page discard on page ffffea000137cc00, inode 0x1146, pos 16384.
[  800.499609][ T5834] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  800.507828][    T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  800.555056][    T9] XFS (loop2): Unmount and run xfs_repair
[  800.564719][    T9] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  800.580137][ T5767] ocfs2: Unmounting device (7,3) on (node local)
[  800.609029][    T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  800.659722][ T5834] usb 5-1: device descriptor read/64, error -71
[  800.675215][    T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  800.701755][T12322] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  800.736901][    T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  800.846788][    T9] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  800.997637][    T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  801.134403][    T9] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  801.238034][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  801.347479][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  801.451308][T12301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  801.466441][T12301] XFS (loop2): page discard on page ffffea00013a5400, inode 0x1146, pos 32768.
[  801.487734][    T9] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  801.503848][    T9] XFS (loop2): Unmount and run xfs_repair
[  801.537959][    T9] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  801.557939][    T9] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  801.580291][    T9] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  801.615758][    T9] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  801.659747][    T9] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  801.694434][    T9] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  801.705764][    T9] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  801.717964][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  801.734104][    T9] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  801.746373][T12301] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  801.749885][ T5834] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  801.758307][T12301] XFS (loop2): page discard on page ffffea00016c4c40, inode 0x1146, pos 65536.
[  801.801010][T11744] loop2: writeback error on inode 4422, offset 0, sector 8776
[  801.865688][ T5777] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  802.010191][ T5834] usb 5-1: device descriptor read/64, error -71
[  802.153370][ T5834] usb usb5-port1: attempt power cycle
[  802.414149][T12324] loop3: detected capacity change from 0 to 32768
[  802.427083][T12324] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1868 (12324)
[  802.500528][T12324] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  802.521334][T12324] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  802.558878][T12324] BTRFS info (device loop3): enabling ssd optimizations
[  802.559766][ T5834] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  802.580053][T12324] BTRFS info (device loop3): using free space tree
[  802.655647][ T5834] usb 5-1: device descriptor read/8, error -71
[  802.929772][ T5834] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  802.940205][T12347] fuse: Invalid rootmode
[  802.990439][ T5834] usb 5-1: device descriptor read/8, error -71
[  803.029823][T12324] BTRFS info (device loop3): auto enabling async discard
[  803.061908][T12354] loop1: detected capacity change from 0 to 16
[  803.116055][ T5834] usb usb5-port1: unable to enumerate USB device
[  803.133440][T12354] erofs: (device loop1): mounted with root inode @ nid 36.
[  803.336967][ T5767] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  803.685711][T12362] loop4: detected capacity change from 0 to 32768
[  803.749047][T12362] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  803.943181][T12362] XFS (loop4): Ending clean mount
[  804.015616][ T5834] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  804.075864][ T5834] XFS (loop4): Unmount and run xfs_repair
[  804.164190][ T5834] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  804.194931][ T5834] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  804.248069][ T5834] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  804.362040][T12380] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  804.426547][ T5834] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  804.582599][ T5834] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  804.735981][ T5834] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  804.878791][ T5834] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  804.990669][ T5834] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  805.069691][ T5834] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  805.129384][T12362] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  805.141868][T12362] XFS (loop4): page discard on page ffffea00005dfbc0, inode 0x1146, pos 4096.
[  805.166289][ T5834] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  805.200384][ T5834] XFS (loop4): Unmount and run xfs_repair
[  805.228861][ T5834] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  805.257800][ T5834] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  805.279825][ T5834] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  805.340833][ T5834] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  805.404485][ T5834] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  805.426999][ T5834] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  805.438139][ T5834] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  805.526186][T12386] loop3: detected capacity change from 0 to 8
[  805.720173][T12386] SQUASHFS error: zlib decompression failed, data probably corrupt
[  805.728419][T12386] SQUASHFS error: Failed to read block 0x4e8: -5
[  805.751279][   T28] audit: type=1800 audit(2000000011.860:4): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1882" name="file1" dev="loop3" ino=5 res=0 errno=0
[  806.173057][ T5834] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  806.182462][ T5834] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  806.191477][T12362] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  806.203054][T12362] XFS (loop4): page discard on page ffffea00014a0e80, inode 0x1146, pos 8192.
[  806.325797][T12390] fuse: Invalid rootmode
[  806.363502][T11744] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  806.405513][T11744] XFS (loop4): Unmount and run xfs_repair
[  806.441441][T11744] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  806.481960][T11744] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  806.533594][T11744] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  806.546719][T11744] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  806.560836][T11744] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  807.355274][T11744] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  807.365836][T11744] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  807.375066][T11744] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  807.384637][T11744] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  807.393894][T12362] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  807.406797][T12362] XFS (loop4): page discard on page ffffea00013a6000, inode 0x1146, pos 16384.
[  807.417808][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  807.447173][   T23] XFS (loop4): Unmount and run xfs_repair
[  807.473599][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  807.493326][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  807.508467][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  807.522727][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  807.533539][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  807.570970][ T5814] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  807.836102][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  807.976111][ T5814] usb 4-1: device descriptor read/64, error -71
[  808.023684][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  808.169760][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  808.229645][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  808.238667][T12362] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  808.251030][T12362] XFS (loop4): page discard on page ffffea00013eb400, inode 0x1146, pos 32768.
[  808.303324][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  808.341177][ T5814] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  808.359234][   T23] XFS (loop4): Unmount and run xfs_repair
[  808.828466][T12404] loop1: detected capacity change from 0 to 32768
[  809.280452][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  809.287015][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  809.854535][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  809.884686][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  809.921012][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  810.283151][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  810.299928][T12404] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  810.314725][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  810.325553][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  810.338025][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  810.352872][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  810.362524][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  810.377336][T12362] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  810.389035][T12362] XFS (loop4): page discard on page ffffea000162e400, inode 0x1146, pos 65536.
[  810.425860][ T5814] usb 4-1: device descriptor read/64, error -71
[  810.432528][ T5834] loop4: writeback error on inode 4422, offset 0, sector 8776
[  810.452577][T11250] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  810.550359][ T5814] usb usb4-port1: attempt power cycle
[  810.640015][T12404] XFS (loop1): Ending clean mount
[  811.020096][ T5768] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  811.943550][T12422] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  812.311932][T12426] loop3: detected capacity change from 0 to 1024
[  812.787938][T12429] fuse: Bad value for 'rootmode'
[  812.855188][T12424] loop4: detected capacity change from 0 to 32768
[  812.906133][T12424] JBD2: Ignoring recovery information on journal
[  813.018338][T12424] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  813.111068][T12424] overlayfs: upper fs does not support tmpfile.
[  813.126557][T12424] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  813.145953][T12424] overlayfs: upper fs missing required features.
[  813.273849][T11250] ocfs2: Unmounting device (7,4) on (node local)
[  814.359654][T11744] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  814.420000][   T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  814.681290][   T23] usb 5-1: device descriptor read/64, error -71
[  815.129996][   T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  815.310348][   T23] usb 5-1: device descriptor read/64, error -71
[  815.347544][T11744] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  815.359621][T11744] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.381345][T11744] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  815.393875][T11744] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  815.423336][T11744] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  815.438449][T11744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.455695][T11744] usb 3-1: Product: syz
[  815.460758][T11744] usb 3-1: Manufacturer: syz
[  815.465791][T11744] usb 3-1: SerialNumber: syz
[  815.599687][ T5738] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  815.704667][T12449] loop3: detected capacity change from 0 to 32768
[  815.713374][   T23] usb usb5-port1: attempt power cycle
[  815.735397][T11744] usb 3-1: 0:2 : does not exist
[  815.753698][T12449] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  815.775697][ T5738] usb 2-1: device descriptor read/64, error -71
[  815.795131][T11744] usb 3-1: USB disconnect, device number 34
[  815.797290][T12449] XFS (loop3): Ending clean mount
[  815.838219][ T5770] udevd[5770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  815.867212][ T5767] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  816.090067][ T5738] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  816.169700][   T23] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  816.201559][   T23] usb 5-1: device descriptor read/8, error -71
[  816.259860][ T5738] usb 2-1: device descriptor read/64, error -71
[  816.380268][ T5738] usb usb2-port1: attempt power cycle
[  816.469970][   T23] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  816.511805][   T23] usb 5-1: device descriptor read/8, error -71
[  816.651280][   T23] usb usb5-port1: unable to enumerate USB device
[  817.275703][T12466] fuse: Bad value for 'rootmode'
[  817.670007][ T5738] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  817.727834][T12471] overlayfs: failed to resolve './file1': -2
[  817.734725][ T5738] usb 2-1: device descriptor read/8, error -71
[  817.781704][T12473] loop3: detected capacity change from 0 to 1024
[  818.010370][ T5738] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  818.050697][ T5738] usb 2-1: device descriptor read/8, error -71
[  818.192233][ T5738] usb usb2-port1: unable to enumerate USB device
[  819.820108][ T5738] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  819.989676][ T5738] usb 2-1: device descriptor read/64, error -71
[  820.259663][ T5738] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  820.429632][ T5738] usb 2-1: device descriptor read/64, error -71
[  820.552648][ T5738] usb usb2-port1: attempt power cycle
[  820.979668][ T5738] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  821.020395][ T5738] usb 2-1: device descriptor read/8, error -71
[  821.221210][T12493] fuse: Bad value for 'rootmode'
[  821.299901][ T5738] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  821.371097][ T5738] usb 2-1: device descriptor read/8, error -71
[  821.503758][ T5738] usb usb2-port1: unable to enumerate USB device
[  821.595715][ T5086] Bluetooth: hci2: command 0x0406 tx timeout
[  821.836635][T12495] loop2: detected capacity change from 0 to 32768
[  821.845229][ T5738] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  821.883039][T12495] JBD2: Ignoring recovery information on journal
[  822.009681][ T5738] usb 4-1: device descriptor read/64, error -71
[  822.028557][T12495] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  822.148889][T12495] overlayfs: upper fs does not support tmpfile.
[  822.167650][T12495] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  822.183568][T12495] overlayfs: upper fs missing required features.
[  822.247406][ T5777] ocfs2: Unmounting device (7,2) on (node local)
[  822.289979][ T5738] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  822.471085][ T5738] usb 4-1: device descriptor read/64, error -71
[  822.621792][ T5738] usb usb4-port1: attempt power cycle
[  823.478379][T12522] fuse: Unknown parameter 'use00000000000000000000'
[  823.845510][T12526] loop2: detected capacity change from 0 to 128
[  823.878426][T12526] EXT4-fs (loop2): Test dummy encryption mode enabled
[  823.898990][T12525] loop1: detected capacity change from 0 to 1024
[  824.005998][T12526] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  824.108289][ T5738] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  824.123769][T12526] ext4 filesystem being mounted at /476/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  824.155915][ T5738] usb 4-1: device descriptor read/8, error -71
[  824.517340][ T5738] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  825.075780][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  825.094162][ T5738] usb 4-1: device descriptor read/8, error -71
[  825.218058][ T5738] usb usb4-port1: unable to enumerate USB device
[  826.459740][T11744] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  826.669821][T11744] usb 3-1: device descriptor read/64, error -71
[  826.740335][T12538] loop3: detected capacity change from 0 to 32768
[  826.780950][T12538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1930 (12538)
[  826.888344][T12538] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  826.911202][T12538] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  826.985609][T12538] BTRFS info (device loop3): setting nodatacow, compression disabled
[  827.171723][T12545] loop4: detected capacity change from 0 to 32768
[  827.190215][T11744] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  827.216055][T12538] BTRFS info (device loop3): enabling auto defrag
[  827.235576][T12538] BTRFS info (device loop3): max_inline at 0
[  827.246390][T12538] BTRFS info (device loop3): using free space tree
[  827.292250][T12545] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  827.350855][T11744] usb 3-1: device descriptor read/64, error -71
[  827.434618][T12538] BTRFS info (device loop3): auto enabling async discard
[  827.473600][T12545] XFS (loop4): Ending clean mount
[  827.480106][T11744] usb usb3-port1: attempt power cycle
[  827.508149][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  827.535919][T12571] fuse: Unknown parameter 'use00000000000000000000'
[  827.555136][   T23] XFS (loop4): Unmount and run xfs_repair
[  827.585214][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  827.598375][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  827.613035][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  827.655322][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  827.686311][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  827.696802][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  827.707633][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  827.720323][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  827.744864][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  827.754887][T12545] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  827.774223][T12545] XFS (loop4): page discard on page ffffea0001377dc0, inode 0x1146, pos 4096.
[  827.796918][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  827.835846][   T23] XFS (loop4): Unmount and run xfs_repair
[  827.858062][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  827.884600][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  827.899098][ T5767] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  827.909927][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  827.910377][T11744] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  827.918914][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  827.918980][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  827.918996][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  827.919011][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  827.919025][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  827.981153][T11744] usb 3-1: device descriptor read/8, error -71
[  827.981657][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  828.022210][T12545] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  828.034898][T12545] XFS (loop4): page discard on page ffffea0001219b80, inode 0x1146, pos 8192.
[  828.043290][T12578] loop1: detected capacity change from 0 to 128
[  828.048450][ T5811] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  828.079249][ T5811] XFS (loop4): Unmount and run xfs_repair
[  828.097226][ T5811] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  828.119398][ T5811] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  828.127375][T12578] EXT4-fs (loop1): Test dummy encryption mode enabled
[  828.133513][ T5811] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  828.149933][ T5811] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  828.161523][ T5811] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  828.171566][ T5811] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  828.181378][ T5811] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  828.190680][ T5811] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  828.200925][ T5811] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  828.203829][T12578] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  828.210842][T12545] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  828.235605][T12545] XFS (loop4): page discard on page ffffea00012e9700, inode 0x1146, pos 16384.
[  828.250978][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  828.279754][T11744] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  828.287963][T12578] ext4 filesystem being mounted at /480/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  828.293089][   T23] XFS (loop4): Unmount and run xfs_repair
[  828.324191][T11744] usb 3-1: device descriptor read/8, error -71
[  828.450186][T11744] usb usb3-port1: unable to enumerate USB device
[  828.577285][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  828.586597][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  828.595689][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  828.606383][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  828.615651][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  828.624960][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  828.634561][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  828.647229][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  828.671377][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  828.681421][T12545] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  828.695221][T12545] XFS (loop4): page discard on page ffffea00012cce00, inode 0x1146, pos 32768.
[  828.753869][   T23] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  829.039742][   T23] XFS (loop4): Unmount and run xfs_repair
[  829.055988][   T23] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  829.078607][   T23] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  829.105172][   T23] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  829.146045][   T23] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  829.188941][   T23] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  829.261668][   T23] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  829.317331][   T23] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  829.664214][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  829.679905][   T23] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  830.269817][   T23] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  830.279083][T12545] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  830.291189][T12545] XFS (loop4): page discard on page ffffea00012811c0, inode 0x1146, pos 65536.
[  830.558753][T11250] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  830.866013][ T5834] ==================================================================
[  830.874247][ T5834] BUG: KASAN: slab-use-after-free in iomap_finish_ioend+0x586/0x620
[  830.882295][ T5834] Read of size 8 at addr ffff888078f3cfa0 by task kworker/1:4/5834
[  830.890395][ T5834] 
[  830.892742][ T5834] CPU: 1 PID: 5834 Comm: kworker/1:4 Not tainted 6.6.93-syzkaller #0
[  830.901006][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  830.911644][ T5834] Workqueue: xfs-conv/loop4 xfs_end_io
[  830.917252][ T5834] Call Trace:
[  830.920575][ T5834]  <TASK>
[  830.923616][ T5834]  dump_stack_lvl+0x16c/0x230
[  830.928535][ T5834]  ? read_lock_is_recursive+0x20/0x20
[  830.933944][ T5834]  ? show_regs_print_info+0x20/0x20
[  830.939287][ T5834]  ? load_image+0x3b0/0x3b0
[  830.944098][ T5834]  ? _raw_spin_lock_irqsave+0xb4/0xf0
[  830.949713][ T5834]  ? __virt_addr_valid+0x18c/0x540
[  830.954897][ T5834]  ? __virt_addr_valid+0x469/0x540
[  830.960060][ T5834]  print_report+0xac/0x230
[  830.964521][ T5834]  kasan_report+0x151/0x180
[  830.969087][ T5834]  ? iomap_finish_ioend+0x586/0x620
[  830.974336][ T5834]  iomap_finish_ioend+0x586/0x620
[  830.979425][ T5834]  iomap_finish_ioends+0x117/0x2b0
[  830.984888][ T5834]  ? lock_chain_count+0x20/0x20
[  830.989883][ T5834]  ? iomap_page_mkwrite+0xf30/0xf30
[  830.995133][ T5834]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  831.001163][ T5834]  ? extract_iter_to_sg+0x1eb0/0x1eb0
[  831.006573][ T5834]  ? iomap_ioend_try_merge+0x96/0x5a0
[  831.012031][ T5834]  xfs_end_ioend+0x367/0x470
[  831.016676][ T5834]  xfs_end_io+0x254/0x2d0
[  831.021041][ T5834]  ? xfs_setfilesize+0x410/0x410
[  831.026003][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  831.032378][ T5834]  ? process_scheduled_works+0x957/0x15b0
[  831.038865][ T5834]  ? process_scheduled_works+0x957/0x15b0
[  831.046813][ T5834]  process_scheduled_works+0xa45/0x15b0
[  831.056801][ T5834]  ? assign_work+0x400/0x400
[  831.062500][ T5834]  ? assign_work+0x39e/0x400
[  831.069065][ T5834]  worker_thread+0xa55/0xfc0
[  831.074430][ T5834]  kthread+0x2fa/0x390
[  831.079066][ T5834]  ? pr_cont_work+0x560/0x560
[  831.085078][ T5834]  ? kthread_blkcg+0xd0/0xd0
[  831.089935][ T5834]  ret_from_fork+0x48/0x80
[  831.094479][ T5834]  ? kthread_blkcg+0xd0/0xd0
[  831.099112][ T5834]  ret_from_fork_asm+0x11/0x20
[  831.104105][ T5834]  </TASK>
[  831.107299][ T5834] 
[  831.109912][ T5834] Allocated by task 12545:
[  831.114699][ T5834]  kasan_set_track+0x4e/0x70
[  831.119455][ T5834]  __kasan_slab_alloc+0x6c/0x80
[  831.124343][ T5834]  slab_post_alloc_hook+0x6e/0x4d0
[  831.129650][ T5834]  kmem_cache_alloc_lru+0x115/0x2e0
[  831.134897][ T5834]  xfs_inode_alloc+0x80/0x6c0
[  831.139681][ T5834]  xfs_iget+0xa94/0x2db0
[  831.144208][ T5834]  xfs_lookup+0x250/0x400
[  831.149347][ T5834]  xfs_vn_lookup+0x119/0x1e0
[  831.154138][ T5834]  path_openat+0x10b8/0x3190
[  831.158856][ T5834]  do_filp_open+0x1c5/0x3d0
[  831.163395][ T5834]  do_sys_openat2+0x12c/0x1c0
[  831.168145][ T5834]  __x64_sys_openat+0x139/0x160
[  831.173038][ T5834]  do_syscall_64+0x55/0xb0
[  831.177494][ T5834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  831.183528][ T5834] 
[  831.185871][ T5834] Freed by task 1102:
[  831.189887][ T5834]  kasan_set_track+0x4e/0x70
[  831.194593][ T5834]  kasan_save_free_info+0x2e/0x50
[  831.199652][ T5834]  ____kasan_slab_free+0x126/0x1e0
[  831.204814][ T5834]  slab_free_freelist_hook+0x130/0x1b0
[  831.210299][ T5834]  kmem_cache_free+0xf8/0x280
[  831.214995][ T5834]  rcu_core+0xcc4/0x1720
[  831.219751][ T5834]  handle_softirqs+0x280/0x820
[  831.225152][ T5834]  do_softirq+0xed/0x180
[  831.229603][ T5834]  __local_bh_enable_ip+0x178/0x1c0
[  831.235371][ T5834]  batadv_nc_purge_paths+0x311/0x3a0
[  831.240873][ T5834]  batadv_nc_worker+0x328/0x610
[  831.245822][ T5834]  process_scheduled_works+0xa45/0x15b0
[  831.252300][ T5834]  worker_thread+0xa55/0xfc0
[  831.257098][ T5834]  kthread+0x2fa/0x390
[  831.261238][ T5834]  ret_from_fork+0x48/0x80
[  831.265860][ T5834]  ret_from_fork_asm+0x11/0x20
[  831.270942][ T5834] 
[  831.273632][ T5834] Last potentially related work creation:
[  831.279477][ T5834]  kasan_save_stack+0x3e/0x60
[  831.284357][ T5834]  __kasan_record_aux_stack+0xaf/0xc0
[  831.290402][ T5834]  call_rcu+0x14f/0x920
[  831.294588][ T5834]  xfs_icwalk_ag+0x138d/0x1a80
[  831.299905][ T5834]  xfs_reclaim_inodes+0x18c/0x260
[  831.305045][ T5834]  xfs_unmount_flush_inodes+0xaf/0xc0
[  831.311781][ T5834]  xfs_unmountfs+0xc4/0x270
[  831.316380][ T5834]  xfs_fs_put_super+0x65/0x140
[  831.321917][ T5834]  generic_shutdown_super+0x134/0x2b0
[  831.327435][ T5834]  kill_block_super+0x44/0x90
[  831.332178][ T5834]  xfs_kill_sb+0x15/0x50
[  831.336469][ T5834]  deactivate_locked_super+0x97/0x100
[  831.341893][ T5834]  cleanup_mnt+0x429/0x4c0
[  831.346541][ T5834]  task_work_run+0x1ce/0x250
[  831.351487][ T5834]  exit_to_user_mode_loop+0xe6/0x110
[  831.356927][ T5834]  exit_to_user_mode_prepare+0xb1/0x140
[  831.362560][ T5834]  syscall_exit_to_user_mode+0x1a/0x50
[  831.368146][ T5834]  do_syscall_64+0x61/0xb0
[  831.373387][ T5834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  831.379323][ T5834] 
[  831.381664][ T5834] Second to last potentially related work creation:
[  831.388351][ T5834]  kasan_save_stack+0x3e/0x60
[  831.393150][ T5834]  __kasan_record_aux_stack+0xaf/0xc0
[  831.398550][ T5834]  insert_work+0x3d/0x310
[  831.403334][ T5834]  __queue_work+0xc39/0x1020
[  831.408051][ T5834]  queue_work_on+0x121/0x1e0
[  831.412689][ T5834]  xfs_end_bio+0xf4/0x200
[  831.417046][ T5834]  iomap_writepages+0x1ba/0x210
[  831.421957][ T5834]  xfs_vm_writepages+0x103/0x160
[  831.427181][ T5834]  do_writepages+0x3a2/0x600
[  831.431792][ T5834]  filemap_fdatawrite_wbc+0x122/0x180
[  831.437182][ T5834]  file_write_and_wait_range+0x171/0x240
[  831.442838][ T5834]  xfs_file_fsync+0x197/0x9c0
[  831.447540][ T5834]  xfs_file_buffered_write+0x854/0x940
[  831.453030][ T5834]  do_iter_write+0x79a/0xc70
[  831.457652][ T5834]  do_pwritev+0x205/0x340
[  831.462040][ T5834]  do_syscall_64+0x55/0xb0
[  831.466582][ T5834]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  831.472631][ T5834] 
[  831.475072][ T5834] The buggy address belongs to the object at ffff888078f3cd80
[  831.475072][ T5834]  which belongs to the cache xfs_inode of size 1808
[  831.489600][ T5834] The buggy address is located 544 bytes inside of
[  831.489600][ T5834]  freed 1808-byte region [ffff888078f3cd80, ffff888078f3d490)
[  831.503778][ T5834] 
[  831.506295][ T5834] The buggy address belongs to the physical page:
[  831.512731][ T5834] page:ffffea0001e3ce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078f38000 pfn:0x78f38
[  831.524386][ T5834] head:ffffea0001e3ce00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  831.533346][ T5834] memcg:ffff8880774b6c01
[  831.537743][ T5834] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  831.545946][ T5834] page_type: 0xffffffff()
[  831.550410][ T5834] raw: 00fff00000000840 ffff888018b7e000 dead000000000122 0000000000000000
[  831.559527][ T5834] raw: ffff888078f38000 000000008010000c 00000001ffffffff ffff8880774b6c01
[  831.571356][ T5834] page dumped because: kasan: bad access detected
[  831.578903][ T5834] page_owner tracks the page as allocated
[  831.584905][ T5834] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0x1d20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL|__GFP_RECLAIMABLE), pid 6695, tgid 6694 (syz.3.253), ts 177978057226, free_ts 119696100925
[  831.617572][ T5834]  post_alloc_hook+0x1cd/0x210
[  831.622693][ T5834]  get_page_from_freelist+0x195c/0x19f0
[  831.628537][ T5834]  __alloc_pages+0x1e3/0x460
[  831.634992][ T5834]  alloc_slab_page+0x5d/0x170
[  831.639902][ T5834]  new_slab+0x87/0x2e0
[  831.644199][ T5834]  ___slab_alloc+0xc6d/0x12f0
[  831.649534][ T5834]  kmem_cache_alloc_lru+0x1ae/0x2e0
[  831.655133][ T5834]  xfs_inode_alloc+0x80/0x6c0
[  831.660126][ T5834]  xfs_iget+0xa94/0x2db0
[  831.664943][ T5834]  xfs_mountfs+0xdac/0x1d20
[  831.669591][ T5834]  xfs_fs_fill_super+0x112f/0x13a0
[  831.675462][ T5834]  get_tree_bdev+0x3e4/0x510
[  831.680341][ T5834]  vfs_get_tree+0x8c/0x280
[  831.684803][ T5834]  do_new_mount+0x24b/0xa40
[  831.689969][ T5834]  __se_sys_mount+0x2da/0x3c0
[  831.695474][ T5834]  do_syscall_64+0x55/0xb0
[  831.700239][ T5834] page last free stack trace:
[  831.705294][ T5834]  free_unref_page_prepare+0x7ce/0x8e0
[  831.711570][ T5834]  free_unref_page+0x32/0x2e0
[  831.716284][ T5834]  __unfreeze_partials+0x1cf/0x210
[  831.723225][ T5834]  put_cpu_partial+0x17c/0x250
[  831.729162][ T5834]  __slab_free+0x31d/0x410
[  831.733632][ T5834]  qlist_free_all+0x75/0xe0
[  831.738436][ T5834]  kasan_quarantine_reduce+0x143/0x160
[  831.744977][ T5834]  __kasan_slab_alloc+0x22/0x80
[  831.749947][ T5834]  slab_post_alloc_hook+0x6e/0x4d0
[  831.755856][ T5834]  kmem_cache_alloc+0x11e/0x2e0
[  831.760744][ T5834]  vm_area_dup+0x27/0x270
[  831.765402][ T5834]  copy_mm+0xc08/0x1c20
[  831.770561][ T5834]  copy_process+0x16d3/0x3d70
[  831.776406][ T5834]  kernel_clone+0x21b/0x840
[  831.781134][ T5834]  __x64_sys_clone+0x18c/0x1e0
[  831.787249][ T5834]  do_syscall_64+0x55/0xb0
[  831.791791][ T5834] 
[  831.796658][ T5834] Memory state around the buggy address:
[  831.804231][ T5834]  ffff888078f3ce80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  831.813194][ T5834]  ffff888078f3cf00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  831.823223][ T5834] >ffff888078f3cf80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  831.831922][ T5834]                                ^
[  831.837263][ T5834]  ffff888078f3d000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  831.847039][ T5834]  ffff888078f3d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  831.856602][ T5834] ==================================================================
[  831.907963][ T5834] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  831.915348][ T5834] CPU: 1 PID: 5834 Comm: kworker/1:4 Not tainted 6.6.93-syzkaller #0
[  831.923458][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  831.933559][ T5834] Workqueue: xfs-conv/loop4 xfs_end_io
[  831.939889][ T5834] Call Trace:
[  831.943205][ T5834]  <TASK>
[  831.946271][ T5834]  dump_stack_lvl+0x16c/0x230
[  831.952264][ T5834]  ? show_regs_print_info+0x20/0x20
[  831.957701][ T5834]  ? load_image+0x3b0/0x3b0
[  831.962528][ T5834]  panic+0x2c0/0x710
[  831.966495][ T5834]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  831.972809][ T5834]  ? bpf_jit_dump+0xd0/0xd0
[  831.977469][ T5834]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  831.983449][ T5834]  ? _raw_spin_unlock+0x40/0x40
[  831.988367][ T5834]  check_panic_on_warn+0x84/0xa0
[  831.993467][ T5834]  end_report+0x6f/0x140
[  831.997788][ T5834]  kasan_report+0x160/0x180
[  832.002455][ T5834]  ? iomap_finish_ioend+0x586/0x620
[  832.007825][ T5834]  iomap_finish_ioend+0x586/0x620
[  832.013191][ T5834]  iomap_finish_ioends+0x117/0x2b0
[  832.018450][ T5834]  ? lock_chain_count+0x20/0x20
[  832.023526][ T5834]  ? iomap_page_mkwrite+0xf30/0xf30
[  832.028882][ T5834]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[  832.035013][ T5834]  ? extract_iter_to_sg+0x1eb0/0x1eb0
[  832.041328][ T5834]  ? iomap_ioend_try_merge+0x96/0x5a0
[  832.046764][ T5834]  xfs_end_ioend+0x367/0x470
[  832.051415][ T5834]  xfs_end_io+0x254/0x2d0
[  832.056066][ T5834]  ? xfs_setfilesize+0x410/0x410
[  832.061088][ T5834]  ? _raw_spin_unlock_irq+0x23/0x50
[  832.066353][ T5834]  ? process_scheduled_works+0x957/0x15b0
[  832.072745][ T5834]  ? process_scheduled_works+0x957/0x15b0
[  832.078519][ T5834]  process_scheduled_works+0xa45/0x15b0
[  832.084320][ T5834]  ? assign_work+0x400/0x400
[  832.089105][ T5834]  ? assign_work+0x39e/0x400
[  832.093720][ T5834]  worker_thread+0xa55/0xfc0
[  832.098345][ T5834]  kthread+0x2fa/0x390
[  832.102776][ T5834]  ? pr_cont_work+0x560/0x560
[  832.108000][ T5834]  ? kthread_blkcg+0xd0/0xd0
[  832.113129][ T5834]  ret_from_fork+0x48/0x80
[  832.117746][ T5834]  ? kthread_blkcg+0xd0/0xd0
[  832.124516][ T5834]  ret_from_fork_asm+0x11/0x20
[  832.129761][ T5834]  </TASK>
[  832.133759][ T5834] Kernel Offset: disabled
[  832.139880][ T5834] Rebooting in 86400 seconds..