last executing test programs:

5.370145015s ago: executing program 3 (id=1631):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0)

3.953958988s ago: executing program 3 (id=1639):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000800)={0x2c, &(0x7f0000000500)={0x0, 0x14, 0xd, "09586c02bddbb9d4f0217cf425"}, 0x0, 0x0, 0x0, 0x0})

3.477235415s ago: executing program 2 (id=1647):
syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
close(0x3)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)

2.218043825s ago: executing program 1 (id=1650):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xf82, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"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"}}}}, 0xf90)

2.215810575s ago: executing program 0 (id=1651):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0)

2.066082538s ago: executing program 3 (id=1652):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, 0x0, 0x0)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)

2.044492278s ago: executing program 2 (id=1653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xffe)

2.012152478s ago: executing program 1 (id=1654):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0)

1.995389879s ago: executing program 0 (id=1655):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000840)='./file0\x00', 0x2010000, &(0x7f0000000c80)=ANY=[@ANYBLOB="756e695f786c6174653d302c757466383d312c696f636861727365743d63703835302c73686f72746e616d653d6d697865642c636f6465706167653d3836352c756e695f786c6174653d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c7569643d4e8a6113d9cdb0be20f02f0527ab8396a152a46b6a0c542969d88ea04d82a3095268d75bdfba4a48dcae247e573ff9530846e4002b66680bc435e34ad338fc2290199d35ed6c11a2bc08dab815e7bbfd2b0947a0f42082cea30702b8ac91e3de3cb736a63afae858ebbc0ca140d112e26d7ea97f5265d0ce26bebfd6b568b1e96c093b4495e4dbaa399af6c26097bb42baa267734f400a0e002868fb933416e100ddb7a59a234cc4674736531698a96701b06863bb070d9f4a7f2cf8c2b4c79cb1fdb25b327e", @ANYRESHEX=0x0, @ANYBLOB=',iocharset=utf8,utf8=0,uni_xlate=0,\x00'], 0x41, 0x282, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
listen(0xffffffffffffffff, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.866033651s ago: executing program 1 (id=1656):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})

1.788466732s ago: executing program 0 (id=1657):
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, 0x0)

843.402527ms ago: executing program 1 (id=1658):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue1\x00', 0x3})

789.970458ms ago: executing program 2 (id=1659):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb00000800060000000000080005000000030024000780080005"], 0xd0}}, 0x0)

789.549038ms ago: executing program 3 (id=1660):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x38}, @ptr={0x70742a85, 0x4000000, &(0x7f0000000280)=""/235, 0xeb, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x3c}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

735.694278ms ago: executing program 0 (id=1661):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x3, r1, 0x0, &(0x7f00000001c0)="cd", 0x1, 0x3})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000000)="b7", 0x1, 0xffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x13})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000000480)='}', 0x1, 0x7ff})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)="fe", 0x1, 0xd372})

657.12288ms ago: executing program 0 (id=1662):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0xf82, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}, {"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"}}}}, 0xf90)

546.244571ms ago: executing program 2 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x3}]}]}]}]}, 0x38}}, 0x0)

545.307902ms ago: executing program 3 (id=1664):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000002440)=ANY=[@ANYBLOB="666f7263652c6e6c733d6575632d6a702c626172726965722c747970653d883b7f382c756d61736b3d30303030303030303030303030303030303030303030362c666f7263652c626172726965722c747970653d49d388242c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c005dc15e246d930a23b5f4093707c10226afb28f3e2838bb917886a27afece1cbcf9ae2d32c2c3f5bf4bb6fcd73d5c59e463cd173c188e1eefaba6fceaeb5840cbeb145a56ad674e7f2f8c49eaf5b1c65eb6d762300b8c5c2ff69671e6b209000000"], 0x2, 0x6e2, &(0x7f0000000c80)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

428.930293ms ago: executing program 2 (id=1665):
sendmsg(0xffffffffffffffff, 0x0, 0x8001)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, 0x0, 0x0)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x60, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7ff, 0x1, @void, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

368.927084ms ago: executing program 0 (id=1666):
syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000780)={[{@pquota}, {@dax_never}, {@ikeep}, {@gquota}, {@nogrpid}, {@bsdgroups}, {@grpid}, {@quota}]}, 0x1, 0x9838, &(0x7f000001c740)="$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")

341.692205ms ago: executing program 3 (id=1667):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000,\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0)
write$dsp(0xffffffffffffffff, 0x0, 0x0)

254.802466ms ago: executing program 2 (id=1668):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_open_dev$hiddev(&(0x7f0000000000), 0x7f, 0x40000)
userfaultfd(0x1)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x200}, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0x6, 0x8, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0xda6, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x9, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffff9f, 0x5, 0x735, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

118.181838ms ago: executing program 1 (id=1669):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
close(0x3)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r2, 0x0, 0x0)
listen(r2, 0x80)
accept$netrom(r2, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e)

0s ago: executing program 1 (id=1670):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0})

kernel console output (not intermixed with test programs):

72.584547][ T8455] overlayfs: missing 'lowerdir'
[  272.669639][ T8471] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.717080][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.737818][ T8471] XFS (loop0): Ending clean mount
[  272.770616][ T8471] XFS (loop0): Quotacheck needed: Please wait.
[  272.870959][ T8471] XFS (loop0): Quotacheck: Done.
[  272.914466][   T28] audit: type=1800 audit(2000000151.868:63): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  273.046227][   T28] audit: type=1800 audit(2000000152.018:64): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.781" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  273.298155][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  274.336665][ T8434] tipc: Disabling bearer <eth:syzkaller0>
[  274.739779][ T8491] loop2: detected capacity change from 0 to 32768
[  274.827567][ T8491] JBD2: Ignoring recovery information on journal
[  274.960265][ T8491] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  275.096831][ T8506] loop0: detected capacity change from 0 to 256
[  275.114254][ T8506] exfat: Unknown parameter 'zero_size_dir'
[  275.297880][ T5794] ocfs2: Unmounting device (7,2) on (node local)
[  275.875196][ T8518] loop3: detected capacity change from 0 to 4096
[  275.938019][ T8525] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.480753][ T8543] loop2: detected capacity change from 0 to 256
[  276.503890][ T8543] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.539545][ T5158] udevd[5158]: worker [5803] terminated by signal 33 (Unknown signal 33)
[  276.549229][ T5158] udevd[5158]: worker [5803] failed while handling '/devices/virtual/block/loop2'
[  276.720638][ T8552] loop0: detected capacity change from 0 to 128
[  276.986783][ T8557] loop2: detected capacity change from 0 to 4096
[  277.049559][ T8561] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  277.587001][ T8563] loop3: detected capacity change from 0 to 32768
[  277.613381][ T8563] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  277.680792][   T28] audit: type=1800 audit(2000000156.648:65): pid=8563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.816" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  277.851136][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  278.101164][ T8579] loop2: detected capacity change from 0 to 256
[  278.186495][ T8579] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  279.018541][ T8594] loop3: detected capacity change from 0 to 32768
[  279.063592][ T8594] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  279.094605][   T28] audit: type=1800 audit(2000000158.068:66): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.828" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  279.418770][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  280.410330][ T8627] loop3: detected capacity change from 0 to 32768
[  280.444143][ T8627] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  280.452816][ T8627] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  280.481548][ T5898] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  280.523034][ T8627] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  280.618757][ T8627] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  280.684110][ T5898] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6
[  280.716060][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.755632][ T5898] usb 1-1: config 0 descriptor??
[  281.279294][ T5898] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  281.303690][ T5898] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  281.315077][ T5898] mxuport: probe of 1-1:0.0 failed with error -71
[  281.325224][ T5898] usb 1-1: USB disconnect, device number 17
[  281.618074][ T8653] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  281.728194][ T8653] syzkaller0: entered promiscuous mode
[  281.734013][ T8653] syzkaller0: entered allmulticast mode
[  281.740447][ T8653] tipc: Resetting bearer <eth:syzkaller0>
[  281.847557][ T8651] tipc: Resetting bearer <eth:syzkaller0>
[  282.063595][ T8663] loop3: detected capacity change from 0 to 256
[  282.107527][ T8663] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  282.128648][ T8663] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  282.169057][ T8663] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  282.276385][   T28] audit: type=1800 audit(2000000161.229:67): pid=8663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.856" name="file1" dev="loop3" ino=1048606 res=0 errno=0
[  282.338959][ T8667] loop0: detected capacity change from 0 to 256
[  282.474669][ T8668] erofs: (device nullb0): erofs_read_superblock: cannot find valid erofs superblock
[  282.577247][ T8663] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  282.637263][ T8663] exFAT-fs (loop3): Filesystem has been set read-only
[  282.711229][ T8663] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  283.462876][ T8677] loop3: detected capacity change from 0 to 32768
[  283.582365][ T8677] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  283.615714][   T28] audit: type=1800 audit(2000000162.589:68): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.861" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  283.664508][ T8690] loop0: detected capacity change from 0 to 128
[  283.972646][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  284.659933][ T8704] overlayfs: missing 'lowerdir'
[  286.259580][ T8719] loop3: detected capacity change from 0 to 32768
[  286.333687][ T8719] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  286.444460][ T8719] XFS (loop3): Ending clean mount
[  286.452394][ T8719] XFS (loop3): Quotacheck needed: Please wait.
[  286.536128][ T8719] XFS (loop3): Quotacheck: Done.
[  286.694133][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  287.127820][ T8733] overlayfs: missing 'workdir'
[  287.177838][ T8735] loop3: detected capacity change from 0 to 512
[  287.298078][ T8735] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.323883][ T8735] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.368178][ T8651] tipc: Disabling bearer <eth:syzkaller0>
[  287.504778][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.871169][  T787] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  288.091102][  T787] usb 3-1: Using ep0 maxpacket: 8
[  288.109146][  T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  288.148454][  T787] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  288.163171][ T8750] loop3: detected capacity change from 0 to 32768
[  288.197015][  T787] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  288.238832][  T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.293778][ T8750] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  288.302959][  T787] usb 3-1: Product: syz
[  288.302980][  T787] usb 3-1: Manufacturer: syz
[  288.302997][  T787] usb 3-1: SerialNumber: syz
[  288.320531][  T787] usb 3-1: config 0 descriptor??
[  288.394258][   T28] audit: type=1800 audit(2000000167.329:69): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.892" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  288.672880][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  288.915780][  T787] usb 3-1: USB disconnect, device number 13
[  289.403618][ T8773] loop3: detected capacity change from 0 to 512
[  289.412017][ T5898] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  289.450856][ T8773] EXT4-fs error (device loop3): ext4_quota_enable:7129: inode #3: comm syz.3.901: unexpected EA_INODE flag
[  289.464903][ T8773] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.901: Bad quota inode: 3, type: 0
[  289.476253][ T8773] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  289.491628][ T8773] EXT4-fs (loop3): mount failed
[  289.608423][ T8780] loop2: detected capacity change from 0 to 128
[  289.644823][ T5898] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6
[  289.665140][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.687996][ T5898] usb 1-1: config 0 descriptor??
[  289.925478][ T8786] loop2: detected capacity change from 0 to 256
[  290.010557][ T8786] FAT-fs (loop2): Directory bread(block 64) failed
[  290.029827][ T8786] FAT-fs (loop2): Directory bread(block 65) failed
[  290.050781][ T8786] FAT-fs (loop2): Directory bread(block 66) failed
[  290.077751][ T8786] FAT-fs (loop2): Directory bread(block 67) failed
[  290.085013][ T8786] FAT-fs (loop2): Directory bread(block 68) failed
[  290.109118][ T8786] FAT-fs (loop2): Directory bread(block 69) failed
[  290.133379][ T8786] FAT-fs (loop2): Directory bread(block 70) failed
[  290.148845][ T8786] FAT-fs (loop2): Directory bread(block 71) failed
[  290.159542][ T8786] FAT-fs (loop2): Directory bread(block 72) failed
[  290.167544][ T8786] FAT-fs (loop2): Directory bread(block 73) failed
[  290.251318][ T8784] loop3: detected capacity change from 0 to 40427
[  290.259384][ T5898] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  290.268312][ T8784] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  290.275392][ T8784] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  290.291077][ T5898] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  290.301781][ T5898] mxuport: probe of 1-1:0.0 failed with error -71
[  290.322699][ T5898] usb 1-1: USB disconnect, device number 18
[  290.328705][ T8784] F2FS-fs (loop3): invalid crc value
[  290.361909][ T8784] F2FS-fs (loop3): Found nat_bits in checkpoint
[  290.441112][ T8784] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  290.448223][ T8784] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  290.782809][ T5898] IPVS: starting estimator thread 0...
[  290.823697][ T5786] syz-executor: attempt to access beyond end of device
[  290.823697][ T5786] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  290.896065][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  290.947864][ T8794] IPVS: using max 17 ests per chain, 40800 per kthread
[  291.156578][ T8802] loop0: detected capacity change from 0 to 512
[  291.224012][ T8802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.236919][ T8802] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.282018][ T8802] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  291.301702][ T8802] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  291.315190][ T8802] EXT4-fs (loop0): This should not happen!! Data will be lost
[  291.315190][ T8802] 
[  291.327539][ T8802] EXT4-fs (loop0): Total free blocks count 0
[  291.335078][ T8802] EXT4-fs (loop0): Free/Dirty block details
[  291.341523][ T8802] EXT4-fs (loop0): free_blocks=65280
[  291.346878][ T8802] EXT4-fs (loop0): dirty_blocks=33
[  291.352535][ T8802] EXT4-fs (loop0): Block reservation details
[  291.358584][ T8802] EXT4-fs (loop0): i_reserved_data_blocks=33
[  291.450467][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.660891][ T5861] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  292.091183][ T8821] loop3: detected capacity change from 0 to 32768
[  292.099764][ T5861] usb 3-1: device descriptor read/64, error -71
[  292.126748][ T8821] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.219507][ T8821] XFS (loop3): Ending clean mount
[  292.229265][ T8821] XFS (loop3): Quotacheck needed: Please wait.
[  292.304082][ T8821] XFS (loop3): Quotacheck: Done.
[  292.330373][   T28] audit: type=1800 audit(2000000171.299:70): pid=8821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.919" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  292.393160][ T5861] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  292.440878][   T28] audit: type=1800 audit(2000000171.409:71): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.919" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  292.451569][ T5898] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  292.582809][ T5861] usb 3-1: device descriptor read/64, error -71
[  292.822490][ T5861] usb usb3-port1: attempt power cycle
[  292.860869][ T5898] usb 1-1: Using ep0 maxpacket: 32
[  292.873894][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  292.884655][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  292.899832][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.911453][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.921592][ T5898] usb 1-1: config 0 descriptor??
[  292.927814][ T8837] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  292.948949][ T5898] hub 1-1:0.0: bad descriptor, ignoring hub
[  292.958507][ T5898] hub: probe of 1-1:0.0 failed with error -5
[  292.966529][ T5898] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  293.240831][ T5861] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  293.274340][ T5861] usb 3-1: device descriptor read/8, error -71
[  293.971269][ T5861] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  294.021851][ T5861] usb 3-1: device descriptor read/8, error -71
[  294.153892][ T5861] usb usb3-port1: unable to enumerate USB device
[  294.295008][ T5798] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  294.306597][ T5798] CPU: 0 PID: 5798 Comm: kworker/u5:5 Not tainted 6.6.100-syzkaller #0
[  294.314892][ T5798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  294.324991][ T5798] Workqueue: hci0 hci_rx_work
[  294.329755][ T5798] Call Trace:
[  294.333090][ T5798]  <TASK>
[  294.336075][ T5798]  dump_stack_lvl+0x16c/0x230
[  294.340819][ T5798]  ? show_regs_print_info+0x20/0x20
[  294.346155][ T5798]  ? load_image+0x3b0/0x3b0
[  294.350737][ T5798]  sysfs_create_dir_ns+0x256/0x280
[  294.355909][ T5798]  ? hci_rx_work+0x43a/0xd80
[  294.360554][ T5798]  ? sysfs_warn_dup+0xa0/0xa0
[  294.365305][ T5798]  ? do_raw_spin_unlock+0x121/0x230
[  294.370576][ T5798]  kobject_add_internal+0x6b8/0xc70
[  294.375844][ T5798]  kobject_add+0x156/0x220
[  294.380314][ T5798]  ? __rwlock_init+0x150/0x150
[  294.385140][ T5798]  ? kobject_init+0x1e0/0x1e0
[  294.389870][ T5798]  ? _raw_spin_unlock+0x28/0x40
[  294.394775][ T5798]  ? get_device_parent+0x366/0x390
[  294.399934][ T5798]  device_add+0x408/0xc20
[  294.404313][ T5798]  hci_conn_add_sysfs+0xd5/0x1e0
[  294.409324][ T5798]  le_conn_complete_evt+0xc37/0x1220
[  294.414668][ T5798]  ? hci_event_packet+0x4a7/0x1210
[  294.419833][ T5798]  ? trace_contention_end+0x39/0xe0
[  294.425083][ T5798]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[  294.431386][ T5798]  ? __copy_skb_header+0xa7/0x550
[  294.436485][ T5798]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[  294.442151][ T5798]  ? skb_pull_data+0xfb/0x200
[  294.446871][ T5798]  hci_le_enh_conn_complete_evt+0x189/0x460
[  294.452793][ T5798]  ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0
[  294.459226][ T5798]  ? hci_remote_host_features_evt+0x160/0x160
[  294.465337][ T5798]  hci_event_packet+0x795/0x1210
[  294.470340][ T5798]  ? bis_list+0x290/0x290
[  294.474700][ T5798]  ? lockdep_hardirqs_on+0x98/0x150
[  294.479919][ T5798]  ? hci_send_to_monitor+0xd7/0x4f0
[  294.485150][ T5798]  hci_rx_work+0x43a/0xd80
[  294.489597][ T5798]  ? process_scheduled_works+0x957/0x15b0
[  294.495362][ T5798]  process_scheduled_works+0xa45/0x15b0
[  294.500949][ T5798]  ? assign_work+0x400/0x400
[  294.505571][ T5798]  ? assign_work+0x39e/0x400
[  294.510182][ T5798]  worker_thread+0xa55/0xfc0
[  294.514822][ T5798]  kthread+0x2fa/0x390
[  294.518903][ T5798]  ? pr_cont_work+0x560/0x560
[  294.523600][ T5798]  ? kthread_blkcg+0xd0/0xd0
[  294.528200][ T5798]  ret_from_fork+0x48/0x80
[  294.532805][ T5798]  ? kthread_blkcg+0xd0/0xd0
[  294.537408][ T5798]  ret_from_fork_asm+0x11/0x20
[  294.542206][ T5798]  </TASK>
[  294.550747][ T5798] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  294.565065][ T5798] Bluetooth: hci0: failed to register connection device
[  294.610035][ T8862] loop3: detected capacity change from 0 to 2048
[  294.663898][ T7276] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  295.352120][ T5861] usb 1-1: USB disconnect, device number 19
[  295.639142][ T8865] loop2: detected capacity change from 0 to 40427
[  295.683044][ T8865] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  295.703584][ T8865] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  295.751663][ T8865] F2FS-fs (loop2): invalid crc value
[  295.821632][ T8865] F2FS-fs (loop2): Found nat_bits in checkpoint
[  296.194562][ T8865] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  296.213522][ T8865] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  296.580688][ T5798] Bluetooth: hci0: command 0x0406 tx timeout
[  297.271280][  T787] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  297.323955][ T8918] loop2: detected capacity change from 0 to 512
[  297.354825][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.953: casefold flag without casefold feature
[  297.372872][ T8918] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.953: couldn't read orphan inode 15 (err -117)
[  297.394155][ T8918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.421797][   T28] audit: type=1800 audit(2000000176.399:72): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.953" name="file1" dev="loop2" ino=18 res=0 errno=0
[  297.480551][  T787] usb 4-1: Using ep0 maxpacket: 32
[  297.498415][  T787] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[  297.525944][ T8920] loop0: detected capacity change from 0 to 4096
[  297.539897][  T787] usb 4-1: config 0 has no interface number 0
[  297.556543][  T787] usb 4-1: config 0 interface 68 has no altsetting 0
[  297.560079][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  297.577363][  T787] usb 4-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=58.31
[  297.586727][  T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.594863][  T787] usb 4-1: Product: syz
[  297.599059][  T787] usb 4-1: Manufacturer: syz
[  297.603762][  T787] usb 4-1: SerialNumber: syz
[  297.630211][  T787] usb 4-1: config 0 descriptor??
[  297.665189][ T8925] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  297.675586][  T787] peak_usb 4-1:0.68 can0: sending cmd f=0x6 n=0x1 failure: -22
[  297.700634][  T787] peak_usb 4-1:0.68: unable to read PCAN-USB serial number (err -22)
[  298.083349][  T787] peak_usb: probe of 4-1:0.68 failed with error -22
[  298.095118][  T787] usb 4-1: USB disconnect, device number 16
[  298.131964][ T8928] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  299.449621][ T8940] capability: warning: `syz.2.960' uses deprecated v2 capabilities in a way that may be insecure
[  299.775545][ T8951] loop3: detected capacity change from 0 to 1024
[  299.829418][ T8951] EXT4-fs: Ignoring removed orlov option
[  299.846434][ T8949] loop0: detected capacity change from 0 to 4096
[  299.878504][ T8951] EXT4-fs: Ignoring removed nomblk_io_submit option
[  299.925346][ T8951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  299.984312][ T8949] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  300.264506][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.967'.
[  300.285488][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.530424][ T8969] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  300.595516][ T8967] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.729641][ T8967] syzkaller0: entered promiscuous mode
[  300.735387][ T8967] syzkaller0: entered allmulticast mode
[  300.745834][ T8967] tipc: Resetting bearer <eth:syzkaller0>
[  300.783489][ T8966] tipc: Resetting bearer <eth:syzkaller0>
[  301.076505][ T8963] loop0: detected capacity change from 0 to 32768
[  301.167763][ T8963]  loop0: p1 p2 p3
[  301.526977][ T8982] loop0: detected capacity change from 0 to 4096
[  301.575533][ T8983] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  301.824785][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  301.837882][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  301.855366][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  304.465239][ T8966] tipc: Disabling bearer <eth:syzkaller0>
[  305.594062][ T9028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  305.972097][ T9021] loop3: detected capacity change from 0 to 32768
[  306.000359][ T9035] loop0: detected capacity change from 0 to 4096
[  306.039584][ T9021] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  306.063779][ T9042] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.119507][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'.
[  306.228188][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  306.551104][ T9052] loop0: detected capacity change from 0 to 16
[  306.604918][ T9052] erofs: (device loop0): mounted with root inode @ nid 36.
[  307.344997][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1009'.
[  307.428892][ T9070] loop0: detected capacity change from 0 to 4096
[  307.473518][ T9070] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[  307.528790][ T9075] loop3: detected capacity change from 0 to 4096
[  307.682882][ T9078] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.800248][ T9082] loop2: detected capacity change from 0 to 128
[  308.086527][ T9087] loop0: detected capacity change from 0 to 1024
[  308.136330][ T9091] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  308.303486][ T9089] loop3: detected capacity change from 0 to 32768
[  308.315676][ T9089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.1016 (9089)
[  308.334277][ T9089] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  308.344639][ T9089] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  308.353530][ T9089] BTRFS info (device loop3): enabling disk space caching
[  308.360705][ T9089] BTRFS info (device loop3): turning off barriers
[  308.367162][ T9089] BTRFS info (device loop3): force clearing of disk cache
[  308.374355][ T9089] BTRFS info (device loop3): enabling ssd optimizations
[  308.381346][ T9089] BTRFS info (device loop3): using spread ssd allocation scheme
[  308.388991][ T9089] BTRFS info (device loop3): enabling free space tree
[  308.395892][ T9089] BTRFS info (device loop3): trying to use backup root at mount time
[  308.404043][ T9089] BTRFS info (device loop3): using free space tree
[  308.426389][   T28] audit: type=1800 audit(2000000187.400:73): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1015" name="file1" dev="loop0" ino=20 res=0 errno=0
[  308.564857][   T12] BTRFS warning (device loop3): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x09baaddde01c70d9f564d40d40bbd1072cb01ca9c506f6ee2b940aea4af18207 level 0
[  308.671944][ T9089] BTRFS warning (device loop3): failed to read root (objectid=4): -5
[  308.680329][ T9089] BTRFS warning (device loop3): try to load backup roots slot 1
[  308.688858][ T9089] BTRFS warning (device loop3): global root 2 0 already exists
[  308.696544][ T9089] BTRFS error (device loop3): failed to load root extent
[  308.703677][ T9089] BTRFS warning (device loop3): try to load backup roots slot 2
[  308.732623][   T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  308.764180][ T9089] BTRFS warning (device loop3): couldn't read tree root
[  308.774549][ T9089] BTRFS warning (device loop3): try to load backup roots slot 3
[  308.801430][   T48] BTRFS warning (device loop3): checksum verify failed on logical 5251072 mirror 1 wanted 0x3733e4df68c3b780deac4f047b3ac85a180e047a8c6c5314b53c1b8a9369ce12 found 0x14b35fdb1819392a43b7915d2192f571ea07cbff49835ef44835d3e0976a7a91 level 0
[  308.888119][ T9089] BTRFS error (device loop3): failed to load root extent
[  308.918802][ T9109] loop2: detected capacity change from 0 to 4096
[  308.948548][ T9109] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  308.963470][ T9089] BTRFS error (device loop3): open_ctree failed: -5
[  308.996992][ T5793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by udevd (5793)
[  309.822598][ T9126] loop0: detected capacity change from 0 to 4096
[  309.905858][ T9134] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.040100][   T27] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  310.240416][   T27] usb 3-1: Using ep0 maxpacket: 32
[  310.247921][   T27] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  310.264202][   T27] usb 3-1: config 0 has no interface number 0
[  310.284343][   T27] usb 3-1: config 0 interface 184 has no altsetting 0
[  310.302654][   T27] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  310.322976][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.346831][   T27] usb 3-1: Product: syz
[  310.354129][   T27] usb 3-1: Manufacturer: syz
[  310.358779][   T27] usb 3-1: SerialNumber: syz
[  310.374999][   T27] usb 3-1: config 0 descriptor??
[  310.383126][   T27] smsc75xx v1.0.0
[  310.616880][ T9149] loop0: detected capacity change from 0 to 1024
[  310.648344][ T9149] EXT4-fs: Ignoring removed orlov option
[  310.698495][ T9149] EXT4-fs: Ignoring removed nomblk_io_submit option
[  310.784574][ T9149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  311.086855][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  311.296860][ T9160] loop0: detected capacity change from 0 to 64
[  311.347116][   T28] audit: type=1800 audit(2000000190.320:74): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1035" name="file1" dev="loop0" ino=18 res=0 errno=0
[  311.632977][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  311.699489][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  311.758021][ T9166] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.775639][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  311.777865][ T9162] loop3: detected capacity change from 0 to 32768
[  311.794222][ T9162] XFS: ikeep mount option is deprecated.
[  311.834051][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  311.847747][ T9166] syzkaller0: entered promiscuous mode
[  311.854553][ T9166] syzkaller0: entered allmulticast mode
[  311.861522][ T9166] tipc: Resetting bearer <eth:syzkaller0>
[  311.872315][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  311.882703][ T9162] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  311.895639][   T27] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  311.906802][ T9165] tipc: Resetting bearer <eth:syzkaller0>
[  311.910236][   T27] smsc75xx: probe of 3-1:0.184 failed with error -71
[  311.941167][   T27] usb 3-1: USB disconnect, device number 18
[  311.998427][ T9162] XFS (loop3): Ending clean mount
[  312.022240][ T9162] XFS (loop3): Quotacheck needed: Please wait.
[  312.128042][ T9162] XFS (loop3): Quotacheck: Done.
[  312.443439][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.857146][ T9184] loop2: detected capacity change from 0 to 32768
[  312.916033][ T9184] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  312.991622][ T9184] XFS (loop2): Ending clean mount
[  313.009976][ T9184] XFS (loop2): Quotacheck needed: Please wait.
[  313.169486][ T9200] loop3: detected capacity change from 0 to 1024
[  313.177183][ T9200] EXT4-fs: Ignoring removed orlov option
[  313.195457][ T9200] EXT4-fs: Ignoring removed nomblk_io_submit option
[  313.260249][ T9184] XFS (loop2): Quotacheck: Done.
[  313.273659][   T28] audit: type=1800 audit(2000000192.250:75): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  313.319388][ T9200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.423058][   T28] audit: type=1800 audit(2000000192.400:76): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1044" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  313.517280][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.756566][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  315.604179][ T9165] tipc: Disabling bearer <eth:syzkaller0>
[  316.053564][ T9223] loop2: detected capacity change from 0 to 1024
[  316.095024][ T9223] EXT4-fs: Ignoring removed orlov option
[  316.168051][ T9223] EXT4-fs: Ignoring removed nomblk_io_submit option
[  316.221195][ T9223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  316.364322][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  316.573264][ T9244] loop3: detected capacity change from 0 to 128
[  317.099209][ T9257] loop3: detected capacity change from 0 to 1024
[  317.141531][ T9257] EXT4-fs: Ignoring removed orlov option
[  317.147245][ T9257] EXT4-fs: Ignoring removed nomblk_io_submit option
[  317.287751][ T9257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  317.411493][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  317.417967][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  317.434059][ T9262] loop2: detected capacity change from 0 to 256
[  317.493322][ T9262] FAT-fs (loop2): Directory bread(block 64) failed
[  317.509611][ T9262] FAT-fs (loop2): Directory bread(block 65) failed
[  317.516292][ T9262] FAT-fs (loop2): Directory bread(block 66) failed
[  317.516526][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  317.545389][ T9262] FAT-fs (loop2): Directory bread(block 67) failed
[  317.561024][ T9262] FAT-fs (loop2): Directory bread(block 68) failed
[  317.572018][ T9262] FAT-fs (loop2): Directory bread(block 69) failed
[  317.578825][ T9262] FAT-fs (loop2): Directory bread(block 70) failed
[  317.587362][ T9262] FAT-fs (loop2): Directory bread(block 71) failed
[  317.599000][ T9262] FAT-fs (loop2): Directory bread(block 72) failed
[  317.619484][ T9262] FAT-fs (loop2): Directory bread(block 73) failed
[  317.847018][ T9269] loop0: detected capacity change from 0 to 128
[  317.969472][ T5896] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  318.027897][ T9271] process 'syz.2.1072' launched './file0' with NULL argv: empty string added
[  318.189496][ T5896] usb 4-1: Using ep0 maxpacket: 16
[  318.204448][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  318.225781][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  318.246475][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  318.267105][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.292248][ T5896] usb 4-1: Product: syz
[  318.301148][ T5896] usb 4-1: Manufacturer: syz
[  318.305822][ T5896] usb 4-1: SerialNumber: syz
[  318.547759][ T5896] usb 4-1: 0:2 : does not exist
[  318.589872][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  318.642825][ T5896] usb 4-1: USB disconnect, device number 17
[  318.755452][ T7276] udevd[7276]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  318.846409][ T9294] loop2: detected capacity change from 0 to 1024
[  319.076760][ T9300] loop0: detected capacity change from 0 to 1024
[  319.085656][ T9300] EXT4-fs: Ignoring removed orlov option
[  319.112316][ T9300] EXT4-fs: Ignoring removed nomblk_io_submit option
[  319.170650][ T9300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  319.272526][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.603698][ T3448] hfsplus: b-tree write err: -5, ino 4
[  320.215231][ T9328] loop3: detected capacity change from 0 to 4096
[  320.234978][ T9328] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  320.596682][ T9338] ntfs3: loop3: Inode r=1b is not in use!
[  320.627557][ T9338] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  320.668327][ T9338] ntfs3: loop3: Inode r=1b is not in use!
[  320.767216][ T9344] program syz.2.1101 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  321.009921][    C1] sd 0:0:1:0: [sda] tag#2099 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  321.020639][    C1] sd 0:0:1:0: [sda] tag#2099 CDB: Write(6) 0a 00 00 00 00 00
[  321.174448][ T5861] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  321.391201][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.406848][ T5861] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  321.429598][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.472707][ T5861] usb 1-1: config 0 descriptor??
[  321.800148][ T9366] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  321.819327][  T786] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  321.940543][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  321.969168][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  321.976482][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  322.020219][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  322.027565][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  322.040564][ T9374] loop2: detected capacity change from 0 to 1024
[  322.048097][ T9374] EXT4-fs: Ignoring removed orlov option
[  322.059604][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  322.079536][ T5861] nintendo 0003:057E:200E.0007: unknown main item tag 0x0
[  322.087143][ T9374] EXT4-fs: Ignoring removed nomblk_io_submit option
[  322.087387][  T786] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  322.120813][ T5861] nintendo 0003:057E:200E.0007: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0
[  322.136071][  T786] usb 4-1: config 0 has no interface number 0
[  322.146282][  T786] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  322.172055][ T9374] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  322.185650][  T786] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  322.200880][  T786] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  322.210625][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.218920][  T786] usb 4-1: Product: syz
[  322.223845][  T786] usb 4-1: Manufacturer: syz
[  322.228492][  T786] usb 4-1: SerialNumber: syz
[  322.240333][  T786] usb 4-1: config 0 descriptor??
[  322.246607][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  322.255271][ T5861] nintendo 0003:057E:200E.0007: Failed charging grip handshake
[  322.269300][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  322.289164][ T5861] nintendo 0003:057E:200E.0007: Failed to initialize controller; ret=-110
[  322.300998][  T786] smsc95xx v2.0.0
[  322.324574][ T5861] nintendo 0003:057E:200E.0007: probe - fail = -110
[  322.331821][ T5861] nintendo: probe of 0003:057E:200E.0007 failed with error -110
[  322.345469][ T5861] usb 1-1: USB disconnect, device number 20
[  322.362429][ T9381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1117'.
[  322.385743][ T9379] fido_id[9379]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  322.401267][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  322.520045][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  322.527381][ T9360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  322.754476][  T786] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  322.765430][  T786] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  323.415518][ T9392] loop0: detected capacity change from 0 to 32768
[  323.474494][ T9392]  loop0: p1 p2 p3
[  323.525498][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1125'.
[  323.554342][ T9402] team_slave_0: entered promiscuous mode
[  323.560871][ T9402] team_slave_1: entered promiscuous mode
[  323.568599][ T9402] macvtap1: entered promiscuous mode
[  323.577872][ T9402] team0: entered promiscuous mode
[  323.587962][ T9402] macvtap1: entered allmulticast mode
[  323.609282][ T9402] team0: entered allmulticast mode
[  323.633297][ T9402] team_slave_0: entered allmulticast mode
[  323.659117][ T9402] team_slave_1: entered allmulticast mode
[  323.666653][ T9402] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  323.802152][ T9405] binder: 9404:9405 unknown command 0
[  323.817214][ T9405] binder: 9404:9405 ioctl c0306201 2000000003c0 returned -22
[  324.013491][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  324.028664][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  324.064793][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  324.214687][ T9413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1131'.
[  324.228920][  T786] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71
[  324.240908][  T786] smsc95xx: probe of 4-1:0.67 failed with error -71
[  324.261420][  T786] usb 4-1: USB disconnect, device number 18
[  324.296165][ T9413] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  324.669346][  T787] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  324.873316][  T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  324.899293][  T787] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  324.929402][  T787] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  324.949056][  T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.963350][  T787] usb 1-1: config 0 descriptor??
[  325.676838][ T9448] loop2: detected capacity change from 0 to 256
[  325.728670][ T9448] FAT-fs (loop2): Directory bread(block 64) failed
[  325.739318][ T9448] FAT-fs (loop2): Directory bread(block 65) failed
[  325.749192][ T9448] FAT-fs (loop2): Directory bread(block 66) failed
[  325.758231][ T9448] FAT-fs (loop2): Directory bread(block 67) failed
[  325.765217][ T9448] FAT-fs (loop2): Directory bread(block 68) failed
[  325.785616][ T9448] FAT-fs (loop2): Directory bread(block 69) failed
[  325.797277][ T9448] FAT-fs (loop2): Directory bread(block 70) failed
[  325.806931][ T9448] FAT-fs (loop2): Directory bread(block 71) failed
[  325.815355][ T9448] FAT-fs (loop2): Directory bread(block 72) failed
[  325.822320][ T9448] FAT-fs (loop2): Directory bread(block 73) failed
[  326.467706][ T9455] loop2: detected capacity change from 0 to 32768
[  326.495061][ T9460] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  326.517542][ T9455] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  326.654161][ T9455] XFS (loop2): Ending clean mount
[  326.668055][ T9455] XFS (loop2): Quotacheck needed: Please wait.
[  326.773586][ T9455] XFS (loop2): Quotacheck: Done.
[  326.820076][   T28] audit: type=1800 audit(2000000205.791:77): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1149" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  326.945068][   T28] audit: type=1800 audit(2000000205.921:78): pid=9473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1149" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  327.125250][ T9477] o2cb: This node has not been configured.
[  327.131615][ T9477] o2cb: Cluster check failed. Fix errors before retrying.
[  327.138939][ T9477] (syz.3.1155,9477,1):user_dlm_register:674 ERROR: status = -22
[  327.146801][ T9477] (syz.3.1155,9477,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  327.224048][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  327.251747][ T9479] loop3: detected capacity change from 0 to 256
[  327.294034][ T9479] FAT-fs (loop3): Directory bread(block 64) failed
[  327.301484][ T9479] FAT-fs (loop3): Directory bread(block 65) failed
[  327.308151][ T9479] FAT-fs (loop3): Directory bread(block 66) failed
[  327.315104][ T9479] FAT-fs (loop3): Directory bread(block 67) failed
[  327.322438][ T9479] FAT-fs (loop3): Directory bread(block 68) failed
[  327.329304][ T9479] FAT-fs (loop3): Directory bread(block 69) failed
[  327.337653][ T9479] FAT-fs (loop3): Directory bread(block 70) failed
[  327.344462][ T9479] FAT-fs (loop3): Directory bread(block 71) failed
[  327.351369][ T9479] FAT-fs (loop3): Directory bread(block 72) failed
[  327.358052][ T9479] FAT-fs (loop3): Directory bread(block 73) failed
[  327.398636][  T787] usb 1-1: USB disconnect, device number 21
[  327.584303][ T9483] loop3: detected capacity change from 0 to 1024
[  327.602305][ T9483] EXT4-fs: Ignoring removed orlov option
[  327.608025][ T9483] EXT4-fs: Ignoring removed nomblk_io_submit option
[  327.703470][ T9487] binder: 9486:9487 unknown command 0
[  327.712336][ T9483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  327.729285][ T9487] binder: 9486:9487 ioctl c0306201 2000000003c0 returned -22
[  327.751027][ T9487] binder_alloc: 9486: binder_alloc_buf, no vma
[  327.965336][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  328.165951][ T9499] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  328.274762][ T9499] syzkaller0: entered promiscuous mode
[  328.298840][ T9499] syzkaller0: entered allmulticast mode
[  328.307126][ T9499] tipc: Resetting bearer <eth:syzkaller0>
[  328.338341][ T9497] tipc: Resetting bearer <eth:syzkaller0>
[  328.967603][  T786] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  329.207130][  T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  329.234552][  T786] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  329.258901][  T786] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.270830][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.304038][  T786] usb 1-1: config 0 descriptor??
[  331.337957][  T786] usb 1-1: USB disconnect, device number 22
[  331.530021][ T9497] tipc: Disabling bearer <eth:syzkaller0>
[  331.546791][ T9506] netlink: 'syz.2.1157': attribute type 33 has an invalid length.
[  331.562064][ T9506] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1157'.
[  331.574803][ T9507] netlink: 'syz.2.1157': attribute type 10 has an invalid length.
[  331.627587][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.660729][ T9507] team0: Port device bond0 added
[  331.740093][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  332.028845][ T9528] loop2: detected capacity change from 0 to 32768
[  332.112963][ T9528] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.235102][ T9528] XFS (loop2): Ending clean mount
[  332.282884][ T9528] XFS (loop2): Quotacheck needed: Please wait.
[  332.371806][ T9528] XFS (loop2): Quotacheck: Done.
[  332.439679][ T9548] loop0: detected capacity change from 0 to 1024
[  332.459488][ T9548] EXT4-fs: Ignoring removed orlov option
[  332.465241][ T9548] EXT4-fs: Ignoring removed nomblk_io_submit option
[  332.486646][   T28] audit: type=1804 audit(2000000211.461:79): pid=9528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1176" name="/newroot/277/file0/bus" dev="loop2" ino=9290 res=1 errno=0
[  332.549518][   T27] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  332.584435][ T9548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.608452][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  332.652051][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.768712][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  332.804600][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  332.839068][   T27] usb 4-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18
[  332.851522][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.893173][   T27] usb 4-1: Product: syz
[  332.897509][   T27] usb 4-1: Manufacturer: syz
[  332.913940][ T9553] loop0: detected capacity change from 0 to 1024
[  332.928791][   T27] usb 4-1: SerialNumber: syz
[  332.935631][ T9553] EXT4-fs: Ignoring removed orlov option
[  332.947457][   T27] usb 4-1: config 0 descriptor??
[  332.959344][ T9553] EXT4-fs: Ignoring removed nomblk_io_submit option
[  333.042537][ T9553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.108015][ T9558] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  333.208804][   T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  333.250494][   T27] usb 4-1: USB disconnect, device number 19
[  333.264809][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.298364][ T9562] binder: 9561:9562 unknown command 1074553619
[  333.352811][ T6109] udevd[6109]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  333.357173][ T9562] binder: 9561:9562 ioctl c0306201 200000000540 returned -22
[  333.393105][ T9564] binder: 9561:9564 unknown command 1074553620
[  333.403888][ T9564] binder: 9561:9564 ioctl c0306201 200000000640 returned -22
[  334.018873][  T787] IPVS: starting estimator thread 0...
[  334.110442][ T9582] IPVS: using max 17 ests per chain, 40800 per kthread
[  334.281540][ T9589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'.
[  334.400712][ T9591] binder: 9590:9591 unknown command 1074553619
[  334.407114][ T9591] binder: 9590:9591 ioctl c0306201 200000000540 returned -22
[  334.504292][ T9596] binder: 9590:9596 unknown command 1074553620
[  334.520641][ T9596] binder: 9590:9596 ioctl c0306201 200000000640 returned -22
[  334.607962][ T9577] loop2: detected capacity change from 0 to 32768
[  334.652092][ T9577] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  334.777636][ T9577] XFS (loop2): Ending clean mount
[  334.797464][ T9577] XFS (loop2): Quotacheck needed: Please wait.
[  334.894606][ T9577] XFS (loop2): Quotacheck: Done.
[  334.916714][   T28] audit: type=1800 audit(2000000213.891:80): pid=9577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  335.023637][   T28] audit: type=1800 audit(2000000214.001:81): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1192" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  335.346100][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  335.605391][ T9614] loop3: detected capacity change from 0 to 1024
[  335.615966][ T9614] EXT4-fs: Ignoring removed orlov option
[  335.625209][ T9614] EXT4-fs: Ignoring removed nomblk_io_submit option
[  335.736152][ T9614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.890683][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  335.906236][ T9622] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  336.026357][ T9626] random: crng reseeded on system resumption
[  336.748596][ T5861] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  336.958423][ T5861] usb 3-1: Using ep0 maxpacket: 8
[  336.985645][ T5861] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  337.004679][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.023994][ T5861] usb 3-1: Product: syz
[  337.035310][ T5861] usb 3-1: Manufacturer: syz
[  337.049565][ T5861] usb 3-1: SerialNumber: syz
[  337.063131][ T5861] usb 3-1: config 0 descriptor??
[  337.109960][ T5861] usb 3-1: selecting invalid altsetting 3
[  337.130798][ T5861] comedi comedi5: could not set alternate setting 3 in high speed
[  337.148447][ T5861] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  337.159210][ T9636] loop0: detected capacity change from 0 to 32768
[  337.173130][ T5861] usbdux: probe of 3-1:0.0 failed with error -22
[  337.207860][ T9636] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  337.285772][ T9638] loop3: detected capacity change from 0 to 32768
[  337.322057][ T9638]  loop3: p1 p2 p3
[  337.406825][  T787] usb 3-1: USB disconnect, device number 19
[  337.453496][ T9636] XFS (loop0): Ending clean mount
[  337.471202][ T9636] XFS (loop0): Quotacheck needed: Please wait.
[  337.543192][ T9636] XFS (loop0): Quotacheck: Done.
[  337.611965][   T28] audit: type=1800 audit(2000000216.592:82): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1212" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  337.742810][   T28] audit: type=1800 audit(2000000216.722:83): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1212" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  338.851361][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  338.865161][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  338.880653][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  338.898681][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  338.933852][ T9666] netlink: 'syz.2.1221': attribute type 10 has an invalid length.
[  339.071270][ T9663] loop3: detected capacity change from 0 to 40427
[  339.096547][ T9663] F2FS-fs (loop3): Found nat_bits in checkpoint
[  339.193677][ T9663] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  339.333510][ T9663] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[  339.343376][ T9663] CPU: 1 PID: 9663 Comm: syz.3.1220 Not tainted 6.6.100-syzkaller #0
[  339.351521][ T9663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  339.361642][ T9663] Call Trace:
[  339.364959][ T9663]  <TASK>
[  339.367925][ T9663]  dump_stack_lvl+0x16c/0x230
[  339.372656][ T9663]  ? show_regs_print_info+0x20/0x20
[  339.377899][ T9663]  ? f2fs_get_next_page_offset+0x690/0x690
[  339.383938][ T9663]  ? __asan_memset+0x22/0x40
[  339.388584][ T9663]  ? __lookup_extent_tree+0xba0/0xba0
[  339.394005][ T9663]  f2fs_is_valid_blkaddr+0xe39/0x1580
[  339.399438][ T9663]  f2fs_get_read_data_page+0x3a4/0x5c0
[  339.405039][ T9663]  ? f2fs_reserve_block+0x240/0x240
[  339.410303][ T9663]  f2fs_find_data_page+0x9f/0x3a0
[  339.415474][ T9663]  f2fs_readdir+0x464/0x8c0
[  339.420130][ T9663]  ? f2fs_fill_dentries+0xbb0/0xbb0
[  339.425480][ T9663]  ? read_lock_is_recursive+0x20/0x20
[  339.430907][ T9663]  ? lockdep_hardirqs_on+0x98/0x150
[  339.436328][ T9663]  ? __fdget_pos+0x2a3/0x330
[  339.440965][ T9663]  ? mutex_lock_nested+0x20/0x20
[  339.445944][ T9663]  ? end_current_label_crit_section+0x149/0x170
[  339.452259][ T9663]  ? down_read_killable+0x1d0/0x340
[  339.457509][ T9663]  ? fsnotify_perm+0x271/0x5e0
[  339.462332][ T9663]  iterate_dir+0x1c2/0x580
[  339.466799][ T9663]  ? 0xffffffff81000000
[  339.471003][ T9663]  __se_sys_getdents+0xe9/0x260
[  339.475909][ T9663]  ? __x64_sys_getdents+0x80/0x80
[  339.480998][ T9663]  ? fillonedir+0x430/0x430
[  339.485547][ T9663]  ? 0xffffffff81000000
[  339.489744][ T9663]  ? lockdep_hardirqs_on+0x98/0x150
[  339.495019][ T9663]  do_syscall_64+0x55/0xb0
[  339.499476][ T9663]  ? clear_bhb_loop+0x40/0x90
[  339.504187][ T9663]  ? clear_bhb_loop+0x40/0x90
[  339.508904][ T9663]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  339.514844][ T9663] RIP: 0033:0x7f268e38e9a9
[  339.519298][ T9663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  339.538948][ T9663] RSP: 002b:00007f268f128038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  339.547427][ T9663] RAX: ffffffffffffffda RBX: 00007f268e5b5fa0 RCX: 00007f268e38e9a9
[  339.555448][ T9663] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000004
[  339.563467][ T9663] RBP: 00007f268e410d69 R08: 0000000000000000 R09: 0000000000000000
[  339.571567][ T9663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  339.579572][ T9663] R13: 0000000000000000 R14: 00007f268e5b5fa0 R15: 00007ffef1458578
[  339.587605][ T9663]  ? 0xffffffff81000000
[  339.591799][ T9663]  </TASK>
[  340.087748][ T9683] loop0: detected capacity change from 0 to 1024
[  340.278637][   T12] hfsplus: b-tree write err: -5, ino 4
[  340.457749][ T9688] loop0: detected capacity change from 0 to 1024
[  340.578482][   T12] hfsplus: b-tree write err: -5, ino 4
[  340.591855][ T9675] loop2: detected capacity change from 0 to 32768
[  340.662108][ T9675] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  340.715485][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1232'.
[  340.724866][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'.
[  340.734464][ T9696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1232'.
[  340.789940][   T28] audit: type=1800 audit(2000000219.762:84): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1223" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  341.097520][ T9692] loop3: detected capacity change from 0 to 32768
[  341.150807][ T5794] ocfs2: Unmounting device (7,2) on (node local)
[  341.177339][ T9702] loop0: detected capacity change from 0 to 64
[  341.202999][ T9692]  loop3: p1 p2 p3
[  341.553640][ T9710] loop0: detected capacity change from 0 to 1024
[  341.563142][ T9707] loop3: detected capacity change from 0 to 1024
[  341.609704][ T9707] EXT4-fs: Ignoring removed orlov option
[  341.615437][ T9707] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.723595][ T9707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  341.758385][   T11] hfsplus: b-tree write err: -5, ino 4
[  341.790640][ T9717] fuse: Bad value for 'fd'
[  341.865893][ T9719] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.917606][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.933367][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  341.939653][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  341.947795][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  341.972868][ T9719] syzkaller0: entered promiscuous mode
[  341.996692][ T9719] syzkaller0: entered allmulticast mode
[  342.029443][ T9719] tipc: Resetting bearer <eth:syzkaller0>
[  342.029477][ T9721] loop0: detected capacity change from 0 to 1024
[  342.118610][ T9718] tipc: Resetting bearer <eth:syzkaller0>
[  342.220517][   T42] hfsplus: b-tree write err: -5, ino 4
[  342.874120][ T9742] loop0: detected capacity change from 0 to 64
[  342.951133][ T9734] loop3: detected capacity change from 0 to 32768
[  342.996483][ T9734]  loop3: p1 p2 p3
[  343.562451][ T9748] loop0: detected capacity change from 0 to 32768
[  343.605350][ T9748] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  343.654850][ T9748] XFS (loop0): Ending clean mount
[  343.663508][ T9748] XFS (loop0): Quotacheck needed: Please wait.
[  343.682599][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  343.701732][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  343.711109][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  343.838387][ T9748] XFS (loop0): Quotacheck: Done.
[  343.873399][   T28] audit: type=1800 audit(2000000222.832:85): pid=9748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1252" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  343.992121][   T28] audit: type=1800 audit(2000000222.962:86): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1252" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  344.193753][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  344.253061][ T9761] loop3: detected capacity change from 0 to 1024
[  344.261797][ T9761] EXT4-fs: Ignoring removed orlov option
[  344.267499][ T9761] EXT4-fs: Ignoring removed nomblk_io_submit option
[  344.328424][ T9761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.475133][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.029528][ T9768] loop0: detected capacity change from 0 to 40427
[  345.065824][ T9768] F2FS-fs (loop0): Found nat_bits in checkpoint
[  345.151704][ T9768] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  345.223241][ T9768] F2FS-fs (loop0): Inconsistent error blkaddr:5633, sit bitmap:0
[  345.232313][ T9768] CPU: 1 PID: 9768 Comm: syz.0.1254 Not tainted 6.6.100-syzkaller #0
[  345.240394][ T9768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  345.250549][ T9768] Call Trace:
[  345.253919][ T9768]  <TASK>
[  345.256881][ T9768]  dump_stack_lvl+0x16c/0x230
[  345.261582][ T9768]  ? show_regs_print_info+0x20/0x20
[  345.266787][ T9768]  ? f2fs_get_next_page_offset+0x690/0x690
[  345.272614][ T9768]  ? __asan_memset+0x22/0x40
[  345.277234][ T9768]  ? __lookup_extent_tree+0xba0/0xba0
[  345.282628][ T9768]  f2fs_is_valid_blkaddr+0xe39/0x1580
[  345.288011][ T9768]  f2fs_get_read_data_page+0x3a4/0x5c0
[  345.293484][ T9768]  ? f2fs_reserve_block+0x240/0x240
[  345.298708][ T9768]  f2fs_find_data_page+0x9f/0x3a0
[  345.303745][ T9768]  f2fs_readdir+0x464/0x8c0
[  345.308283][ T9768]  ? f2fs_fill_dentries+0xbb0/0xbb0
[  345.313498][ T9768]  ? read_lock_is_recursive+0x20/0x20
[  345.318883][ T9768]  ? lockdep_hardirqs_on+0x98/0x150
[  345.324100][ T9768]  ? __fdget_pos+0x2a3/0x330
[  345.328734][ T9768]  ? mutex_lock_nested+0x20/0x20
[  345.333686][ T9768]  ? end_current_label_crit_section+0x149/0x170
[  345.339950][ T9768]  ? down_read_killable+0x1d0/0x340
[  345.345261][ T9768]  ? fsnotify_perm+0x271/0x5e0
[  345.350063][ T9768]  iterate_dir+0x1c2/0x580
[  345.354489][ T9768]  ? 0xffffffff81000000
[  345.358652][ T9768]  __se_sys_getdents+0xe9/0x260
[  345.363519][ T9768]  ? __x64_sys_getdents+0x80/0x80
[  345.368559][ T9768]  ? fillonedir+0x430/0x430
[  345.373075][ T9768]  ? 0xffffffff81000000
[  345.377247][ T9768]  ? lockdep_hardirqs_on+0x98/0x150
[  345.382464][ T9768]  do_syscall_64+0x55/0xb0
[  345.386893][ T9768]  ? clear_bhb_loop+0x40/0x90
[  345.391580][ T9768]  ? clear_bhb_loop+0x40/0x90
[  345.396263][ T9768]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  345.402175][ T9768] RIP: 0033:0x7efc8bd8e9a9
[  345.406603][ T9768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.426309][ T9768] RSP: 002b:00007efc8cb8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  345.434733][ T9768] RAX: ffffffffffffffda RBX: 00007efc8bfb5fa0 RCX: 00007efc8bd8e9a9
[  345.442725][ T9768] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000004
[  345.450706][ T9768] RBP: 00007efc8be10d69 R08: 0000000000000000 R09: 0000000000000000
[  345.458686][ T9768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.466665][ T9768] R13: 0000000000000000 R14: 00007efc8bfb5fa0 R15: 00007fff00cc8598
[  345.474656][ T9768]  ? 0xffffffff81000000
[  345.478828][ T9768]  </TASK>
[  346.102702][ T9776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1258'.
[  346.426497][ T9782] loop0: detected capacity change from 0 to 1024
[  346.498454][   T11] hfsplus: b-tree write err: -5, ino 4
[  346.840231][ T9788] loop0: detected capacity change from 0 to 1024
[  346.849026][ T9788] EXT4-fs: Ignoring removed orlov option
[  346.854722][ T9788] EXT4-fs: Ignoring removed nomblk_io_submit option
[  346.905888][ T9788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  346.975279][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.119031][ T9718] tipc: Disabling bearer <eth:syzkaller0>
[  347.128065][ T9792] netlink: 'syz.0.1265': attribute type 33 has an invalid length.
[  347.137352][ T9792] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1265'.
[  347.323805][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1269'.
[  347.747900][ T9804] loop3: detected capacity change from 0 to 32768
[  347.778377][ T9804] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1271 (9804)
[  347.824531][ T9804] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  347.835070][ T9804] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  347.844337][ T9804] BTRFS info (device loop3): setting nodatacow, compression disabled
[  347.852672][ T9804] BTRFS info (device loop3): max_inline at 0
[  347.858747][ T9804] BTRFS info (device loop3): using free space tree
[  348.244083][ T9804] BTRFS info (device loop3): auto enabling async discard
[  348.337684][   T28] audit: type=1800 audit(2000000227.282:87): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1271" name="bus" dev="loop3" ino=263 res=0 errno=0
[  348.661929][ T9836] netlink: 'syz.1.1277': attribute type 33 has an invalid length.
[  348.688185][ T9836] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1277'.
[  349.161343][ T5786] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  349.244914][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1280'.
[  349.732777][ T9858] netlink: 'syz.2.1287': attribute type 33 has an invalid length.
[  349.796583][ T9858] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1287'.
[  350.321168][ T9875] loop0: detected capacity change from 0 to 1024
[  350.335414][ T9875] EXT4-fs: Ignoring removed orlov option
[  350.364026][ T9875] EXT4-fs: Ignoring removed nomblk_io_submit option
[  350.395511][ T9875] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.536035][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.056801][ T9889] netlink: 'syz.0.1299': attribute type 33 has an invalid length.
[  351.077524][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1299'.
[  351.146560][ T9889] netlink: 'syz.0.1299': attribute type 10 has an invalid length.
[  351.227281][ T9889] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.239685][ T9889] team0: Port device bond0 added
[  351.687539][ T5834] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  351.827899][ T9903] loop0: detected capacity change from 0 to 32768
[  351.891086][ T9903]  loop0: p1 p2 p3
[  351.899343][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.917490][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  351.948277][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  351.978794][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.012154][ T5834] usb 4-1: config 0 descriptor??
[  352.021187][ T5834] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  352.343732][ T9917] syzkaller0: entered promiscuous mode
[  352.353941][ T9917] syzkaller0: entered allmulticast mode
[  352.629960][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  352.644296][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  352.661980][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  353.347486][ T5861] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  353.527479][ T5861] usb 1-1: Using ep0 maxpacket: 16
[  353.536619][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  353.548790][ T5861] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  353.563005][ T5861] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  353.572647][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.581295][ T5861] usb 1-1: Product: syz
[  353.585700][ T5861] usb 1-1: Manufacturer: syz
[  353.592184][ T5861] usb 1-1: SerialNumber: syz
[  353.872324][ T5861] usb 1-1: 0:2 : does not exist
[  353.893271][ T5861] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  353.933459][ T5861] usb 1-1: USB disconnect, device number 23
[  353.995910][ T7276] udevd[7276]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  354.397933][ T5861] usb 4-1: USB disconnect, device number 20
[  355.068948][ T9936] loop0: detected capacity change from 0 to 32768
[  355.157398][ T9936]  loop0: p1 p2 p3
[  355.560784][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  355.561009][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  355.582819][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  355.777621][ T9928] netlink: 'syz.1.1314': attribute type 33 has an invalid length.
[  355.785495][ T9928] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1314'.
[  355.796076][ T9931] netlink: 'syz.1.1314': attribute type 10 has an invalid length.
[  355.834316][ T9931] 8021q: adding VLAN 0 to HW filter on device bond0
[  355.864598][ T9931] bond0: entered promiscuous mode
[  355.887403][ T9931] bond_slave_0: entered promiscuous mode
[  355.893308][ T9931] bond_slave_1: entered promiscuous mode
[  355.917886][ T9931] bond0: entered allmulticast mode
[  355.928615][ T9931] bond_slave_0: entered allmulticast mode
[  355.944645][ T9931] bond_slave_1: entered allmulticast mode
[  355.964473][ T9931] team0: Port device bond0 added
[  355.999839][ T9940] loop0: detected capacity change from 0 to 1024
[  356.023631][ T9940] EXT4-fs: Ignoring removed orlov option
[  356.067271][ T9940] EXT4-fs: Ignoring removed nomblk_io_submit option
[  356.149459][ T9940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  356.219355][ T9944] loop2: detected capacity change from 0 to 4096
[  356.265867][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  356.309446][ T9950] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  356.546976][ T9952] loop0: detected capacity change from 0 to 64
[  356.995467][  T786] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  357.107774][ T9964] netlink: 'syz.0.1330': attribute type 33 has an invalid length.
[  357.115700][ T9964] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1330'.
[  357.133462][ T9964] netlink: 'syz.0.1330': attribute type 10 has an invalid length.
[  357.219226][  T786] usb 3-1: Using ep0 maxpacket: 8
[  357.250656][  T786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13
[  357.269725][  T786] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  357.286699][  T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.305408][  T786] usb 3-1: Product: syz
[  357.317277][  T786] usb 3-1: Manufacturer: syz
[  357.321933][  T786] usb 3-1: SerialNumber: syz
[  357.349814][  T786] usb 3-1: config 0 descriptor??
[  357.360557][  T786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  357.482099][ T9970] loop0: detected capacity change from 0 to 1024
[  357.665325][   T12] hfsplus: b-tree write err: -5, ino 4
[  358.060662][ T9974] loop3: detected capacity change from 0 to 40427
[  358.103550][ T9974] F2FS-fs (loop3): Found nat_bits in checkpoint
[  358.165717][ T9974] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  358.445324][ T9993] loop0: detected capacity change from 0 to 1024
[  358.454595][ T9993] EXT4-fs: Ignoring removed orlov option
[  358.477445][ T9993] EXT4-fs: Ignoring removed nomblk_io_submit option
[  358.544238][ T9993] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  358.655248][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  358.887170][ T5898] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  359.077547][ T5861] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  359.085313][ T5898] usb 4-1: Using ep0 maxpacket: 16
[  359.098849][ T5898] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  359.114342][ T5898] usb 4-1: config 0 has no interface number 0
[  359.125617][ T5898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  359.136713][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.155783][ T5898] usb 4-1: Product: syz
[  359.160508][ T5898] usb 4-1: Manufacturer: syz
[  359.165205][ T5898] usb 4-1: SerialNumber: syz
[  359.173939][ T5898] usb 4-1: config 0 descriptor??
[  359.187821][ T5898] hub 4-1:0.132: bad descriptor, ignoring hub
[  359.194232][ T5898] hub: probe of 4-1:0.132 failed with error -5
[  359.207375][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input20
[  359.311189][ T5861] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  359.332683][ T5861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.348496][ T5861] usb 1-1: config 0 descriptor??
[  359.357982][ T5861] cp210x 1-1:0.0: cp210x converter detected
[  359.466001][ T5896] usb 4-1: USB disconnect, device number 21
[  359.822163][  T786] gspca_zc3xx: reg_w_i err -71
[  359.827083][ T5861] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[  359.834690][ T5861] cp210x 1-1:0.0: querying part number failed
[  359.844170][ T5861] usb 1-1: cp210x converter now attached to ttyUSB0
[  359.853286][ T5861] usb 1-1: USB disconnect, device number 24
[  359.884397][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  359.894570][ T5861] cp210x 1-1:0.0: device disconnected
[  360.132072][T10021] loop3: detected capacity change from 0 to 1024
[  360.143933][T10021] EXT4-fs: Ignoring removed orlov option
[  360.150190][T10021] EXT4-fs: Ignoring removed nomblk_io_submit option
[  360.175364][T10021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.237534][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  360.522504][  T786] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  360.534109][  T786] gspca_zc3xx: probe of 3-1:0.0 failed with error -71
[  360.552073][  T786] usb 3-1: USB disconnect, device number 20
[  360.597372][ T5898] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  360.623822][T10032] loop2: detected capacity change from 0 to 1024
[  360.742979][T10039] netlink: 'syz.0.1357': attribute type 10 has an invalid length.
[  360.768570][   T12] hfsplus: b-tree write err: -5, ino 4
[  360.799859][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  360.858575][ T5898] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  360.887036][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.939878][ T5898] usb 4-1: config 0 descriptor??
[  360.966520][ T5898] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  361.076037][T10049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1361'.
[  361.207042][  T786] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  361.398718][  T786] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  361.407012][  T786] usb 3-1: config 0 has no interface number 0
[  361.413147][  T786] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  361.424074][  T786] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  361.439962][  T786] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  361.449148][  T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.457445][  T786] usb 3-1: Product: syz
[  361.461633][  T786] usb 3-1: Manufacturer: syz
[  361.466261][  T786] usb 3-1: SerialNumber: syz
[  361.473131][  T786] usb 3-1: config 0 descriptor??
[  361.479093][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  361.486318][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  361.496078][  T786] smsc95xx v2.0.0
[  361.702418][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  361.711504][T10041] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  361.928087][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  361.950320][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  362.112131][T10069] netlink: 'syz.1.1369': attribute type 10 has an invalid length.
[  362.137293][T10060] loop0: detected capacity change from 0 to 32768
[  362.179745][T10060]  loop0: p1 p2 p3
[  362.496680][T10078] loop0: detected capacity change from 0 to 1024
[  362.663688][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[  362.678405][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  362.682740][ T2967] hfsplus: b-tree write err: -5, ino 4
[  362.690116][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[  363.186999][  T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  363.198397][  T786] smsc95xx: probe of 3-1:0.67 failed with error -71
[  363.209288][  T786] usb 3-1: USB disconnect, device number 21
[  363.218549][ T5898] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  363.327933][    T8] usb 4-1: USB disconnect, device number 22
[  363.406895][ T5898] usb 1-1: Using ep0 maxpacket: 32
[  363.418735][ T5898] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  363.428831][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.437105][ T5898] usb 1-1: Product: syz
[  363.441427][ T5898] usb 1-1: Manufacturer: syz
[  363.446237][ T5898] usb 1-1: SerialNumber: syz
[  363.461079][ T5898] usb 1-1: config 0 descriptor??
[  363.475556][ T5898] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  363.887421][ T5898] gspca_stk1135: reg_w 0x0 err -71
[  363.897370][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.903770][ T5898] gspca_stk1135: Sensor write failed
[  363.914292][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.921157][ T5898] gspca_stk1135: Sensor write failed
[  363.931785][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.939364][ T5898] gspca_stk1135: Sensor read failed
[  363.944832][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.951758][ T5898] gspca_stk1135: Sensor read failed
[  363.956873][ T5896] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  363.957482][ T5898] gspca_stk1135: Detected sensor type unknown (0x0)
[  363.971857][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.979232][ T5898] gspca_stk1135: Sensor read failed
[  363.984727][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  363.991442][ T5898] gspca_stk1135: Sensor read failed
[  363.997194][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  364.003561][ T5898] gspca_stk1135: Sensor write failed
[  364.009842][ T5898] gspca_stk1135: serial bus timeout: status=0x00
[  364.016212][ T5898] gspca_stk1135: Sensor write failed
[  364.022119][ T5898] stk1135: probe of 1-1:0.0 failed with error -71
[  364.031691][ T5898] usb 1-1: USB disconnect, device number 25
[  364.156864][ T5896] usb 4-1: Using ep0 maxpacket: 16
[  364.191279][T10094] loop2: detected capacity change from 0 to 32768
[  364.198337][ T5896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  364.208576][ T5896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  364.238544][ T5896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  364.251768][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.263003][ T5896] usb 4-1: Product: syz
[  364.274517][ T5896] usb 4-1: Manufacturer: syz
[  364.280966][T10094]  loop2: p1 p2 p3
[  364.287617][ T5896] usb 4-1: SerialNumber: syz
[  364.637040][ T5896] usb 4-1: 0:2 : does not exist
[  364.648775][ T5896] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  364.707098][ T5896] usb 4-1: USB disconnect, device number 23
[  364.780553][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  364.828355][ T7276] udevd[7276]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  364.835147][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  364.871415][ T5973] udevd[5973]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory
[  364.891696][    T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  365.091120][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  365.101299][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  365.115912][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  365.125397][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.143592][    T8] usb 1-1: config 0 descriptor??
[  365.153841][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  365.309314][T10111] loop3: detected capacity change from 0 to 1024
[  365.316778][T10111] EXT4-fs: Ignoring removed orlov option
[  365.322816][T10111] EXT4-fs: Ignoring removed nomblk_io_submit option
[  365.366237][T10111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.456586][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.638742][T10121] loop2: detected capacity change from 0 to 1024
[  365.730240][ T3448] hfsplus: b-tree write err: -5, ino 4
[  365.863289][T10126] input: syz0 as /devices/virtual/input/input21
[  366.444157][T10124] loop3: detected capacity change from 0 to 32768
[  366.499261][T10124]  loop3: p1 p2 p3
[  366.696831][ T5898] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  366.761327][ T5158] udevd[5158]: worker [7276] terminated by signal 33 (Unknown signal 33)
[  366.770614][ T5158] udevd[5158]: worker [7276] failed while handling '/devices/virtual/block/loop3'
[  366.896801][ T5898] usb 3-1: Using ep0 maxpacket: 16
[  366.908797][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  366.924329][ T5898] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.936520][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.946192][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.954665][ T5898] usb 3-1: Product: syz
[  366.959053][ T5898] usb 3-1: Manufacturer: syz
[  366.963767][ T5898] usb 3-1: SerialNumber: syz
[  366.994580][ T6109] udevd[6109]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  367.215933][ T5898] usb 3-1: 0:2 : does not exist
[  367.228988][ T5898] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  367.255181][ T5898] usb 3-1: USB disconnect, device number 22
[  367.620742][  T786] usb 1-1: USB disconnect, device number 26
[  368.004205][T10161] loop0: detected capacity change from 0 to 2048
[  368.021446][T10161] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[  368.062274][T10161] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.177526][  T786] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  368.416748][  T786] usb 4-1: Using ep0 maxpacket: 8
[  369.059075][  T786] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[  369.078456][  T786] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  369.087725][  T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.095753][  T786] usb 4-1: Product: syz
[  369.100638][  T786] usb 4-1: Manufacturer: syz
[  369.105292][  T786] usb 4-1: SerialNumber: syz
[  369.117319][  T786] usb 4-1: config 0 descriptor??
[  369.129343][  T786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  369.314131][T10177] netlink: 'syz.1.1417': attribute type 10 has an invalid length.
[  369.506788][   T27] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  369.556685][    T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  369.657966][T10187] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709
[  369.705147][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.715237][   T27] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  369.724657][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.736786][   T27] usb 3-1: config 0 descriptor??
[  369.749511][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  369.767388][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  369.781650][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  369.791245][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.803041][    T8] usb 1-1: config 0 descriptor??
[  369.815144][    T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  370.161204][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  370.168827][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  370.176400][    C1] raw-gadget.1 gadget.2: ignoring, device is not running
[  370.183701][   T27] usbhid 3-1:0.0: can't add hid device: -32
[  370.189846][   T27] usbhid: probe of 3-1:0.0 failed with error -32
[  370.205563][   T27] usb 3-1: USB disconnect, device number 23
[  370.991836][T10206] loop2: detected capacity change from 0 to 4096
[  371.040175][T10211] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  371.078557][   T28] audit: type=1800 audit(2000000250.054:88): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1428" name="file1" dev="loop2" ino=15 res=0 errno=0
[  371.385745][  T786] gspca_zc3xx: reg_w_i err -71
[  372.046362][  T786] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  372.052745][  T786] gspca_zc3xx: probe of 4-1:0.0 failed with error -71
[  372.086635][  T786] usb 4-1: USB disconnect, device number 24
[  372.320800][ T5896] usb 1-1: USB disconnect, device number 27
[  372.701887][T10233] loop0: detected capacity change from 0 to 32768
[  372.709087][T10233] XFS: ikeep mount option is deprecated.
[  372.778682][T10233] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  372.839408][T10233] XFS (loop0): Ending clean mount
[  372.863928][T10233] XFS (loop0): Quotacheck needed: Please wait.
[  372.893989][T10245] overlayfs: failed to clone upperpath
[  372.903253][ T2967] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  372.946502][ T2967] XFS (loop0): Unmount and run xfs_repair
[  372.956058][ T2967] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  372.964868][ T2967] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  372.979006][ T2967] 00000010: 00 00 00 00 00 00 00 17 00 00 00 01 00 00 00 10  ................
[  372.993138][ T2967] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  373.003358][ T2967] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  373.012904][ T2967] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  373.023128][ T2967] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  373.052161][ T2967] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  373.075244][ T2967] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  373.095481][ T2967] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  373.142740][T10233] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  373.181804][T10233] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  373.302664][ T5798] Bluetooth: hci3: command 0x0406 tx timeout
[  373.726392][   T27] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  373.926250][   T27] usb 4-1: Using ep0 maxpacket: 32
[  373.935641][   T27] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  373.945365][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.953470][   T27] usb 4-1: Product: syz
[  373.958109][ T5896] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  373.965897][   T27] usb 4-1: Manufacturer: syz
[  373.972202][   T27] usb 4-1: SerialNumber: syz
[  373.980430][   T27] usb 4-1: config 0 descriptor??
[  373.989309][   T27] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  374.169000][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.179110][ T5896] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  374.188634][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.202515][   T27] gspca_stk1135: reg_w 0x2 err -71
[  374.210860][ T5896] usb 1-1: config 0 descriptor??
[  374.220248][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.227453][   T27] gspca_stk1135: Sensor write failed
[  374.233050][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.239493][   T27] gspca_stk1135: Sensor write failed
[  374.244975][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.252371][   T27] gspca_stk1135: Sensor read failed
[  374.257999][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.264429][   T27] gspca_stk1135: Sensor read failed
[  374.270094][   T27] gspca_stk1135: Detected sensor type unknown (0x0)
[  374.286236][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.292660][   T27] gspca_stk1135: Sensor read failed
[  374.298045][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.304462][   T27] gspca_stk1135: Sensor read failed
[  374.313820][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.336269][   T27] gspca_stk1135: Sensor write failed
[  374.341787][   T27] gspca_stk1135: serial bus timeout: status=0x00
[  374.359709][   T27] gspca_stk1135: Sensor write failed
[  374.376559][   T27] stk1135: probe of 4-1:0.0 failed with error -71
[  374.396677][   T27] usb 4-1: USB disconnect, device number 25
[  374.657089][ T5896] usbhid 1-1:0.0: can't add hid device: -71
[  374.679708][ T5896] usbhid: probe of 1-1:0.0 failed with error -71
[  374.690619][ T5896] usb 1-1: USB disconnect, device number 28
[  374.803887][T10280] loop3: detected capacity change from 0 to 1024
[  374.812995][T10280] EXT4-fs: Ignoring removed orlov option
[  374.820583][T10280] EXT4-fs: Ignoring removed nomblk_io_submit option
[  374.843320][T10280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.916779][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  375.034190][T10286] loop3: detected capacity change from 0 to 4096
[  375.045781][T10286] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  375.312647][T10288] syzkaller1: entered promiscuous mode
[  375.320039][T10288] syzkaller1: entered allmulticast mode
[  375.546230][    T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  375.762253][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.787244][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.813124][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  375.831470][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  375.840704][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.851577][    T8] usb 1-1: config 0 descriptor??
[  375.988330][T10295] loop2: detected capacity change from 0 to 40427
[  376.039559][T10295] F2FS-fs (loop2): Found nat_bits in checkpoint
[  376.217859][T10295] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  376.357322][T10295] F2FS-fs (loop2): Inconsistent error blkaddr:5633, sit bitmap:0
[  376.398986][    T8] usbhid 1-1:0.0: can't add hid device: -71
[  376.413606][    T8] usbhid: probe of 1-1:0.0 failed with error -71
[  376.416503][T10295] CPU: 1 PID: 10295 Comm: syz.2.1457 Not tainted 6.6.100-syzkaller #0
[  376.423858][    T8] usb 1-1: USB disconnect, device number 29
[  376.428131][T10295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  376.428147][T10295] Call Trace:
[  376.428155][T10295]  <TASK>
[  376.428165][T10295]  dump_stack_lvl+0x16c/0x230
[  376.428197][T10295]  ? show_regs_print_info+0x20/0x20
[  376.428218][T10295]  ? f2fs_get_next_page_offset+0x690/0x690
[  376.466172][T10295]  ? __asan_memset+0x22/0x40
[  376.470828][T10295]  ? __lookup_extent_tree+0xba0/0xba0
[  376.476257][T10295]  f2fs_is_valid_blkaddr+0xe39/0x1580
[  376.481691][T10295]  f2fs_get_read_data_page+0x3a4/0x5c0
[  376.487222][T10295]  ? f2fs_reserve_block+0x240/0x240
[  376.492496][T10295]  f2fs_find_data_page+0x9f/0x3a0
[  376.497586][T10295]  f2fs_readdir+0x464/0x8c0
[  376.502175][T10295]  ? f2fs_fill_dentries+0xbb0/0xbb0
[  376.507428][T10295]  ? read_lock_is_recursive+0x20/0x20
[  376.512843][T10295]  ? kvm_sched_clock_read+0x11/0x20
[  376.518094][T10295]  ? __fdget_pos+0x2a3/0x330
[  376.522743][T10295]  ? mutex_lock_nested+0x20/0x20
[  376.527727][T10295]  ? end_current_label_crit_section+0x149/0x170
[  376.534051][T10295]  ? down_read_killable+0x1d0/0x340
[  376.539317][T10295]  ? fsnotify_perm+0x271/0x5e0
[  376.544135][T10295]  iterate_dir+0x1c2/0x580
[  376.548600][T10295]  ? 0xffffffff81000000
[  376.552832][T10295]  __se_sys_getdents+0xe9/0x260
[  376.557731][T10295]  ? __x64_sys_getdents+0x80/0x80
[  376.562808][T10295]  ? fillonedir+0x430/0x430
[  376.567444][T10295]  ? 0xffffffff81000000
[  376.571643][T10295]  ? lockdep_hardirqs_on+0x98/0x150
[  376.576904][T10295]  do_syscall_64+0x55/0xb0
[  376.581347][T10295]  ? clear_bhb_loop+0x40/0x90
[  376.586041][T10295]  ? clear_bhb_loop+0x40/0x90
[  376.590753][T10295]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  376.596701][T10295] RIP: 0033:0x7f914cd8e9a9
[  376.601153][T10295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  376.620977][T10295] RSP: 002b:00007f914db8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  376.629449][T10295] RAX: ffffffffffffffda RBX: 00007f914cfb5fa0 RCX: 00007f914cd8e9a9
[  376.637537][T10295] RDX: 0000000000000058 RSI: ffffffff81000000 RDI: 0000000000000004
[  376.645566][T10295] RBP: 00007f914ce10d69 R08: 0000000000000000 R09: 0000000000000000
[  376.653575][T10295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  376.661594][T10295] R13: 0000000000000000 R14: 00007f914cfb5fa0 R15: 00007ffe97ffa8a8
[  376.669604][T10295]  ? 0xffffffff81000000
[  376.673786][T10295]  </TASK>
[  376.808267][T10315] loop3: detected capacity change from 0 to 1024
[  376.838098][T10315] EXT4-fs: Ignoring removed orlov option
[  376.843822][T10315] EXT4-fs: Ignoring removed nomblk_io_submit option
[  376.937606][T10315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.150695][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.224608][T10320] loop0: detected capacity change from 0 to 512
[  377.256552][T10320] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  377.397062][T10320] EXT4-fs (loop0): 1 truncate cleaned up
[  377.404322][T10320] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  377.556839][   T28] audit: type=1800 audit(2000000256.544:89): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1465" name="file2" dev="loop0" ino=16 res=0 errno=0
[  377.584694][T10327] loop2: detected capacity change from 0 to 1024
[  377.595258][T10327] EXT4-fs: Ignoring removed orlov option
[  377.605861][T10327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  377.677356][T10327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  377.729700][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.831569][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  377.962525][T10336] netlink: 'syz.2.1469': attribute type 33 has an invalid length.
[  377.971331][T10336] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1469'.
[  377.986395][T10336] netlink: 'syz.2.1469': attribute type 10 has an invalid length.
[  378.354894][T10340] loop3: detected capacity change from 0 to 32768
[  378.386151][ T5896] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  378.414784][T10340] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  378.505623][T10340] XFS (loop3): Ending clean mount
[  378.516414][T10340] XFS (loop3): Quotacheck needed: Please wait.
[  378.577682][T10340] XFS (loop3): Quotacheck: Done.
[  378.597846][ T5896] usb 3-1: Using ep0 maxpacket: 16
[  378.605175][   T28] audit: type=1800 audit(2000000257.584:90): pid=10340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1471" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  378.628834][ T5896] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  378.645204][ T5896] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  378.659489][ T5896] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  378.661377][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  378.673110][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0
[  378.691283][ T5896] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  378.704354][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.719361][ T5896] usb 3-1: config 0 descriptor??
[  378.823222][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  378.830637][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  378.969299][T10341] loop2: detected capacity change from 0 to 2048
[  379.048843][T10341] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  379.299437][T10357] loop3: detected capacity change from 0 to 1024
[  379.327339][T10357] EXT4-fs: Ignoring removed orlov option
[  379.333078][T10357] EXT4-fs: Ignoring removed nomblk_io_submit option
[  379.433470][T10357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  379.493670][ T5896] usb 3-1: USB disconnect, device number 24
[  379.590638][T10365] loop0: detected capacity change from 0 to 512
[  379.627023][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  379.700269][T10365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  379.744972][T10365] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  379.901995][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  380.136076][T10374] loop3: detected capacity change from 0 to 1024
[  380.323458][   T11] hfsplus: b-tree write err: -5, ino 4
[  380.565335][T10383] input: syz1 as /devices/virtual/input/input22
[  380.667384][T10376] loop2: detected capacity change from 0 to 32768
[  380.699417][T10376] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  380.817773][T10376] XFS (loop2): Ending clean mount
[  380.827834][T10376] XFS (loop2): Quotacheck needed: Please wait.
[  380.947187][T10376] XFS (loop2): Quotacheck: Done.
[  380.974693][   T28] audit: type=1800 audit(2000000259.954:91): pid=10376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1481" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  381.088460][ T5794] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  381.191247][T10405] loop0: detected capacity change from 0 to 64
[  381.559998][T10411] loop0: detected capacity change from 0 to 512
[  381.635364][T10411] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.1492: bg 0: block 288: padding at end of block bitmap is not set
[  381.654711][ T5898] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  381.671610][T10411] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  381.725522][T10411] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.1492: attempt to clear invalid blocks 1024 len 1
[  381.780973][T10411] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1492: invalid indirect mapped block 1819239214 (level 0)
[  381.799371][T10411] EXT4-fs (loop0): 1 truncate cleaned up
[  381.812103][T10411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  381.844777][ T5898] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  381.861417][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.897620][ T5898] usb 3-1: config 0 descriptor??
[  381.917087][ T5898] cp210x 3-1:0.0: cp210x converter detected
[  382.046627][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  382.052886][T10419] syzkaller1: entered promiscuous mode
[  382.065209][T10419] syzkaller1: entered allmulticast mode
[  382.337554][ T5898] usb 3-1: cp210x converter now attached to ttyUSB0
[  382.593707][   T23] usb 3-1: USB disconnect, device number 25
[  382.694292][   T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  382.701236][T10427] loop0: detected capacity change from 0 to 32768
[  382.761718][   T23] cp210x 3-1:0.0: device disconnected
[  382.780356][T10427] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  382.809262][T10439] loop3: detected capacity change from 0 to 1024
[  382.970894][T10427] XFS (loop0): Ending clean mount
[  382.997822][T10427] XFS (loop0): Quotacheck needed: Please wait.
[  383.026532][ T3448] hfsplus: b-tree write err: -5, ino 4
[  383.180688][T10427] XFS (loop0): Quotacheck: Done.
[  383.239264][   T28] audit: type=1800 audit(2000000262.224:92): pid=10427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1498" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  383.338724][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  383.959440][T10456] syzkaller1: entered promiscuous mode
[  383.974554][T10456] syzkaller1: entered allmulticast mode
[  384.241053][T10465] loop3: detected capacity change from 0 to 1024
[  384.272533][T10465] EXT4-fs: Ignoring removed orlov option
[  384.314610][T10465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  384.333632][T10470] binder: BINDER_SET_CONTEXT_MGR already set
[  384.358750][T10470] binder: 10469:10470 ioctl 4018620d 200000000040 returned -16
[  384.373831][T10465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  384.474615][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.659368][ T5777] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  384.857925][ T5777] usb 1-1: config index 0 descriptor too short (expected 41054, got 18)
[  384.875639][ T5777] usb 1-1: config 0 has too many interfaces: 243, using maximum allowed: 32
[  384.897081][ T5777] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  384.916814][ T5777] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 243
[  384.923286][T10479] loop3: detected capacity change from 0 to 32768
[  384.946681][ T5777] usb 1-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e
[  384.953639][T10479] XFS: ikeep mount option is deprecated.
[  384.959421][ T5777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.991295][ T5777] usb 1-1: Product: syz
[  385.000732][T10479] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  385.008039][ T5777] usb 1-1: Manufacturer: syz
[  385.014432][ T5777] usb 1-1: SerialNumber: syz
[  385.048229][ T5777] usb 1-1: config 0 descriptor??
[  385.073104][T10479] XFS (loop3): Ending clean mount
[  385.114911][T10479] XFS (loop3): Quotacheck needed: Please wait.
[  385.163171][   T27] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  385.185711][   T27] XFS (loop3): Unmount and run xfs_repair
[  385.215759][   T27] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  385.223246][   T27] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  385.258900][   T27] 00000010: 00 00 00 00 00 00 00 17 00 00 00 01 00 00 00 10  ................
[  385.278489][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  385.309326][   T27] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  385.325556][   T27] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  385.344786][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  385.365037][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  385.385983][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  385.395855][   T48] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  385.439516][T10479] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  385.476926][T10479] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  385.497689][T10502] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1521'.
[  385.507048][T10502] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1521'.
[  385.519438][T10502] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  385.774207][T10506] loop2: detected capacity change from 0 to 1024
[  385.814040][T10506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  385.943005][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  386.328393][T10522] syzkaller1: entered promiscuous mode
[  386.339217][T10522] syzkaller1: entered allmulticast mode
[  386.583525][T10526] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  386.930322][T10528] loop3: detected capacity change from 0 to 32768
[  386.970612][T10528] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.050691][T10528] XFS (loop3): Ending clean mount
[  387.071477][T10528] XFS (loop3): Quotacheck needed: Please wait.
[  387.168585][T10528] XFS (loop3): Quotacheck: Done.
[  387.186988][   T28] audit: type=1800 audit(2000000266.174:93): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1533" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  387.210567][   T28] audit: type=1800 audit(2000000266.194:94): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1533" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  387.319443][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  387.403485][ T5777] usb 1-1: USB disconnect, device number 30
[  387.632676][T10544] loop0: detected capacity change from 0 to 1024
[  387.643808][T10544] EXT4-fs: Ignoring removed orlov option
[  387.684796][T10544] EXT4-fs: Ignoring removed nomblk_io_submit option
[  387.741612][T10544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  387.894451][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  387.964743][   T27] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  388.028968][T10557] netlink: 'syz.1.1543': attribute type 11 has an invalid length.
[  388.037069][T10557] netlink: 'syz.1.1543': attribute type 11 has an invalid length.
[  388.051301][T10556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  388.061504][T10559] loop0: detected capacity change from 0 to 1024
[  388.094944][T10559] EXT4-fs: Ignoring removed orlov option
[  388.139738][T10559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  388.172927][   T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.184155][   T27] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  388.193724][   T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.204867][   T27] usb 3-1: config 0 descriptor??
[  388.626080][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.712788][   T27] usbhid 3-1:0.0: can't add hid device: -71
[  388.738488][   T27] usbhid: probe of 3-1:0.0 failed with error -71
[  388.783671][   T27] usb 3-1: USB disconnect, device number 26
[  388.814290][T10567] netlink: 'syz.0.1545': attribute type 33 has an invalid length.
[  388.835650][T10567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1545'.
[  388.853779][T10567] netlink: 'syz.0.1545': attribute type 10 has an invalid length.
[  388.908547][T10555] loop3: detected capacity change from 0 to 32768
[  388.926479][T10555] XFS: ikeep mount option is deprecated.
[  388.956813][T10555] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  389.007062][T10555] XFS (loop3): Ending clean mount
[  389.023040][T10555] XFS (loop3): Quotacheck needed: Please wait.
[  389.047574][   T27] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[  389.077287][   T27] XFS (loop3): Unmount and run xfs_repair
[  389.083077][   T27] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  389.103349][   T27] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  389.118382][T10579] binder: 10578:10579 ioctl c0306201 0 returned -14
[  389.125060][   T27] 00000010: 00 00 00 00 00 00 00 17 00 00 00 01 00 00 00 10  ................
[  389.146999][T10579] binder: 10578:10579 unknown command 0
[  389.152623][T10579] binder: 10578:10579 ioctl c0306201 2000000003c0 returned -22
[  389.165501][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  389.174403][   T27] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  389.196782][   T27] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  389.215437][   T27] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  389.224461][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  389.255582][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  389.269226][   T48] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[  389.329176][T10555] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  389.371860][T10555] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  390.006749][T10590] loop0: detected capacity change from 0 to 32768
[  390.024121][T10590] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1553 (10590)
[  390.106776][T10590] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  390.117148][T10590] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  390.126299][T10590] BTRFS info (device loop0): turning on sync discard
[  390.133047][T10590] BTRFS info (device loop0): use zlib compression, level 3
[  390.140394][T10590] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  390.151357][T10590] BTRFS info (device loop0): trying to use backup root at mount time
[  390.159503][T10590] BTRFS info (device loop0): disabling tree log
[  390.165868][T10590] BTRFS info (device loop0): max_inline at 0
[  390.171894][T10590] BTRFS info (device loop0): using free space tree
[  390.213878][T10598] loop3: detected capacity change from 0 to 64
[  390.299134][ T3448] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  390.313692][T10590] BTRFS error (device loop0): failed to load root extent
[  390.320988][T10590] BTRFS warning (device loop0): try to load backup roots slot 1
[  390.329957][   T48] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  390.413581][T10590] BTRFS warning (device loop0): couldn't read tree root
[  390.420954][T10590] BTRFS warning (device loop0): try to load backup roots slot 2
[  390.430636][   T11] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  390.458787][T10590] BTRFS warning (device loop0): couldn't read tree root
[  390.466304][T10590] BTRFS warning (device loop0): try to load backup roots slot 3
[  390.516939][T10590] BTRFS info (device loop0): rebuilding free space tree
[  390.537433][T10590] BTRFS info (device loop0): checking UUID tree
[  390.844322][ T5790] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  390.850931][T10621] loop2: detected capacity change from 0 to 1024
[  390.909845][T10621] EXT4-fs: Ignoring removed orlov option
[  390.934384][T10621] EXT4-fs: Ignoring removed nomblk_io_submit option
[  390.946466][ T5898] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  391.002643][T10621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  391.066715][ T5793] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (5793)
[  391.167650][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.187571][ T5898] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  391.209432][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.233450][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.287314][ T5898] usb 4-1: config 0 descriptor??
[  391.571368][T10634] 9pnet: Could not find request transport: n
[  391.720562][ T5898] usbhid 4-1:0.0: can't add hid device: -71
[  391.738891][ T5898] usbhid: probe of 4-1:0.0 failed with error -71
[  391.768102][ T5898] usb 4-1: USB disconnect, device number 26
[  391.994445][T10652] netlink: 'syz.0.1570': attribute type 33 has an invalid length.
[  392.018195][T10652] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1570'.
[  392.096192][T10657] netlink: 'syz.0.1570': attribute type 10 has an invalid length.
[  392.112495][T10656] loop2: detected capacity change from 0 to 1024
[  392.133289][T10656] EXT4-fs: Ignoring removed orlov option
[  392.161209][T10656] EXT4-fs: Ignoring removed nomblk_io_submit option
[  392.191282][T10656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  392.510386][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  392.819903][T10670] syzkaller1: entered promiscuous mode
[  392.831357][T10670] syzkaller1: entered allmulticast mode
[  392.946545][T10675] loop3: detected capacity change from 0 to 4096
[  392.958705][T10675] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  393.049831][T10675] ntfs3: loop3: Failed to initialize $Extend/$Reparse.
[  393.142820][   T28] audit: type=1800 audit(2000000272.115:95): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1580" name="file1" dev="loop3" ino=24 res=0 errno=0
[  393.414894][ T5786] ntfs3: loop3: ino=1a, ntfs_sync_fs failed, -22.
[  394.208769][T10691] netlink: 'syz.3.1585': attribute type 33 has an invalid length.
[  394.250973][T10691] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1585'.
[  394.303238][T10691] netlink: 'syz.3.1585': attribute type 10 has an invalid length.
[  394.388883][T10691] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.431330][T10691] team0: Port device bond0 added
[  394.561192][T10695] loop0: detected capacity change from 0 to 32768
[  394.598059][T10695] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  394.635183][ T5896] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  394.644572][T10708] loop3: detected capacity change from 0 to 64
[  394.828317][T10695] XFS (loop0): Ending clean mount
[  394.842698][T10695] XFS (loop0): Quotacheck needed: Please wait.
[  394.851835][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  394.884072][ T5896] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  394.903048][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.934603][ T5896] usb 3-1: config 0 descriptor??
[  395.003552][T10695] XFS (loop0): Quotacheck: Done.
[  395.024916][   T28] audit: type=1800 audit(2000000273.995:96): pid=10695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1589" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  395.090689][   T28] audit: type=1800 audit(2000000274.065:97): pid=10717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1589" name="file1" dev="loop0" ino=9286 res=0 errno=0
[  395.326743][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.474866][ T5896] usbhid 3-1:0.0: can't add hid device: -71
[  395.506423][ T5896] usbhid: probe of 3-1:0.0 failed with error -71
[  395.525424][ T5896] usb 3-1: USB disconnect, device number 27
[  395.860004][T10734] syzkaller1: entered promiscuous mode
[  395.866047][T10734] syzkaller1: entered allmulticast mode
[  396.024117][T10737] loop3: detected capacity change from 0 to 64
[  396.105449][ T5896] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  396.326829][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  396.339666][ T5896] usb 1-1: config 0 has no interface number 0
[  396.350491][ T5896] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  396.380092][ T5896] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  396.405873][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  396.417816][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.574564][T10748] pimreg: entered allmulticast mode
[  396.768475][T10746] loop3: detected capacity change from 0 to 32768
[  396.776879][ T5896] usb 1-1: Product: syz
[  396.781098][ T5896] usb 1-1: Manufacturer: syz
[  396.786119][ T5896] usb 1-1: SerialNumber: syz
[  396.793331][ T5896] usb 1-1: config 0 descriptor??
[  396.799629][T10732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  396.807641][T10732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  396.817153][ T5896] smsc95xx v2.0.0
[  396.840789][T10746] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  396.976210][T10746] XFS (loop3): Ending clean mount
[  396.987121][T10746] XFS (loop3): Quotacheck needed: Please wait.
[  397.045922][T10732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  397.065274][T10732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  397.123323][T10760] binder: 10759:10760 unknown command 0
[  397.141071][T10746] XFS (loop3): Quotacheck: Done.
[  397.146479][T10760] binder: 10759:10760 ioctl c0306201 2000000003c0 returned -22
[  397.170666][   T28] audit: type=1800 audit(2000000276.145:98): pid=10746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1606" name="file1" dev="loop3" ino=9286 res=0 errno=0
[  397.335283][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  397.385663][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  397.465306][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  397.868200][T10772] loop2: detected capacity change from 0 to 32768
[  397.916113][T10772] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  397.991557][ T5794] ocfs2: Unmounting device (7,2) on (node local)
[  398.052868][T10780] netlink: 'syz.1.1618': attribute type 10 has an invalid length.
[  398.125536][T10782] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1617'.
[  398.281514][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  398.305418][T10786] binder: 10785:10786 unknown command 0
[  398.311186][T10786] binder: 10785:10786 ioctl c0306201 2000000003c0 returned -22
[  398.311407][ T5896] smsc95xx: probe of 1-1:0.67 failed with error -32
[  398.999839][T10806] netlink: 'syz.3.1627': attribute type 10 has an invalid length.
[  399.132432][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'.
[  399.748037][   T23] usb 1-1: USB disconnect, device number 31
[  400.218892][T10826] binder: 10825:10826 ioctl c0306201 200000000080 returned -14
[  400.765161][T10834] netlink: 'syz.0.1638': attribute type 10 has an invalid length.
[  400.918332][T10843] binder: 10841:10843 unknown command 0
[  400.924138][T10843] binder: 10841:10843 ioctl c0306201 2000000003c0 returned -22
[  401.064752][ T5898] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  401.164995][  T786] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  401.257136][ T5898] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  401.266442][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.276975][ T5898] usb 4-1: config 0 descriptor??
[  401.285217][ T5898] cp210x 4-1:0.0: cp210x converter detected
[  401.347215][  T786] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.357317][  T786] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  401.366493][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.377854][  T786] usb 1-1: config 0 descriptor??
[  401.424854][ T5896] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  401.646852][ T5896] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  401.676468][ T5896] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  401.703198][ T5896] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  401.706673][ T5898] usb 4-1: cp210x converter now attached to ttyUSB0
[  401.722805][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.747261][T10852] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  401.774412][ T5896] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  401.835911][  T786] usbhid 1-1:0.0: can't add hid device: -71
[  401.841994][  T786] usbhid: probe of 1-1:0.0 failed with error -71
[  401.857980][  T786] usb 1-1: USB disconnect, device number 32
[  401.910098][ T5898] usb 4-1: USB disconnect, device number 27
[  401.924298][ T5898] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  401.938387][ T5898] cp210x 4-1:0.0: device disconnected
[  401.973293][    T8] usb 3-1: USB disconnect, device number 28
[  402.468731][T10863] netlink: 'syz.0.1651': attribute type 10 has an invalid length.
[  402.673378][T10873] loop0: detected capacity change from 0 to 256
[  402.687418][T10873] FAT-fs (loop0): Unrecognized mount option "uid=NŠaÙÍ°¾ ð/'«ƒ–¡R¤kjT)iØŽ M‚£	Rh×[ߺJHÜ®$~W?ùSFä" or missing value
[  402.738819][T10873] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  403.885463][T10885] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1659'.
[  403.914134][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1659'.
[  403.952400][T10889] binder: 10888:10889 unknown command 0
[  403.977679][T10889] binder: 10888:10889 ioctl c0306201 2000000003c0 returned -22
[  403.992228][T10891] syzkaller1: entered promiscuous mode
[  403.999685][T10891] syzkaller1: entered allmulticast mode
[  404.120540][T10895] loop3: detected capacity change from 0 to 1024
[  404.257762][   T11] hfsplus: b-tree write err: -5, ino 4
[  404.447935][T10901] loop3: detected capacity change from 0 to 128
[  404.502617][T10901] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  404.562710][T10901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  404.629634][T10901] ------------[ cut here ]------------
[  404.635923][T10901] WARNING: CPU: 1 PID: 10901 at fs/udf/truncate.c:224 udf_truncate_extents+0xd46/0xeb0
[  404.645717][T10901] Modules linked in:
[  404.649668][T10901] CPU: 1 PID: 10901 Comm: syz.3.1667 Not tainted 6.6.100-syzkaller #0
[  404.658673][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  404.669101][T10901] RIP: 0010:udf_truncate_extents+0xd46/0xeb0
[  404.675241][T10901] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4a 4f 8e fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8
[  404.695100][T10901] RSP: 0018:ffffc900040cf8e0 EFLAGS: 00010287
[  404.701233][T10901] RAX: ffffffff82f74636 RBX: 1ffff1100c23426f RCX: 0000000000080000
[  404.709475][T10901] RDX: ffffc9000cdeb000 RSI: 0000000000007f55 RDI: 0000000000007f56
[  404.717688][T10901] RBP: ffffc900040cfac0 R08: ffff88802b093c00 R09: 0000000000000002
[  404.725946][T10901] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  404.733976][T10901] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  404.742426][T10901] FS:  00007f268f1286c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  404.751490][T10901] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  404.758495][T10901] CR2: 000000110c2ac79c CR3: 0000000079f2b000 CR4: 00000000003506e0
[  404.766904][T10901] Call Trace:
[  404.770233][T10901]  <TASK>
[  404.773225][T10901]  ? udf_discard_prealloc+0x570/0x570
[  404.778718][T10901]  ? udf_write_failed+0x178/0x1b0
[  404.783815][T10901]  ? __lock_acquire+0x7c80/0x7c80
[  404.788952][T10901]  ? __rwlock_init+0x90/0x150
[  404.793688][T10901]  ? down_write+0x162/0x1f0
[  404.798309][T10901]  ? do_raw_spin_unlock+0x121/0x230
[  404.803570][T10901]  udf_write_failed+0x180/0x1b0
[  404.808560][T10901]  udf_write_begin+0x21f/0x430
[  404.813394][T10901]  generic_perform_write+0x2fb/0x5b0
[  404.819040][T10901]  ? generic_file_direct_write+0x3e0/0x3e0
[  404.825154][T10901]  ? __mnt_drop_write_file+0xc3/0x100
[  404.830604][T10901]  ? __generic_file_write_iter+0xf7/0x230
[  404.836495][T10901]  ? udf_file_write_iter+0x2b1/0x620
[  404.841847][T10901]  udf_file_write_iter+0x2c0/0x620
[  404.847087][T10901]  vfs_write+0x43b/0x940
[  404.851394][T10901]  ? file_end_write+0x250/0x250
[  404.856402][T10901]  ? __fget_files+0x44a/0x4d0
[  404.861162][T10901]  ? __fdget_pos+0x2a3/0x330
[  404.866166][T10901]  ? ksys_write+0x75/0x250
[  404.870652][T10901]  ksys_write+0x147/0x250
[  404.875108][T10901]  ? __ia32_sys_read+0x90/0x90
[  404.879939][T10901]  ? lockdep_hardirqs_on+0x98/0x150
[  404.885290][T10901]  do_syscall_64+0x55/0xb0
[  404.889761][T10901]  ? clear_bhb_loop+0x40/0x90
[  404.894553][T10901]  ? clear_bhb_loop+0x40/0x90
[  404.899306][T10901]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  404.905361][T10901] RIP: 0033:0x7f268e38e9a9
[  404.909823][T10901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  404.929950][T10901] RSP: 002b:00007f268f128038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  404.938472][T10901] RAX: ffffffffffffffda RBX: 00007f268e5b5fa0 RCX: 00007f268e38e9a9
[  404.946676][T10901] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004
[  404.954740][T10901] RBP: 00007f268e410d69 R08: 0000000000000000 R09: 0000000000000000
[  404.962762][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  404.971165][T10901] R13: 0000000000000000 R14: 00007f268e5b5fa0 R15: 00007ffef1458578
[  404.979336][T10901]  </TASK>
[  404.982398][T10901] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  404.989815][T10901] CPU: 1 PID: 10901 Comm: syz.3.1667 Not tainted 6.6.100-syzkaller #0
[  404.998015][T10901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  405.008379][T10901] Call Trace:
[  405.011699][T10901]  <TASK>
[  405.014664][T10901]  dump_stack_lvl+0x16c/0x230
[  405.019392][T10901]  ? show_regs_print_info+0x20/0x20
[  405.024642][T10901]  ? load_image+0x3b0/0x3b0
[  405.029293][T10901]  panic+0x2c0/0x710
[  405.033252][T10901]  ? bpf_jit_dump+0xd0/0xd0
[  405.037829][T10901]  __warn+0x2e0/0x470
[  405.041846][T10901]  ? udf_truncate_extents+0xd46/0xeb0
[  405.047240][T10901]  ? udf_truncate_extents+0xd46/0xeb0
[  405.052627][T10901]  report_bug+0x2be/0x4f0
[  405.056974][T10901]  ? udf_truncate_extents+0xd46/0xeb0
[  405.062361][T10901]  ? udf_truncate_extents+0xd46/0xeb0
[  405.067750][T10901]  ? udf_truncate_extents+0xd48/0xeb0
[  405.073148][T10901]  handle_bug+0xcf/0x120
[  405.077413][T10901]  exc_invalid_op+0x1a/0x50
[  405.081934][T10901]  asm_exc_invalid_op+0x1a/0x20
[  405.086808][T10901] RIP: 0010:udf_truncate_extents+0xd46/0xeb0
[  405.092894][T10901] Code: 65 48 8b 04 25 28 00 00 00 48 3b 84 24 80 01 00 00 75 70 44 89 e0 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4a 4f 8e fe <0f> 0b eb 8e 44 89 e9 80 e1 07 38 c1 0f 8c ec f3 ff ff 4c 89 ef e8
[  405.112910][T10901] RSP: 0018:ffffc900040cf8e0 EFLAGS: 00010287
[  405.119359][T10901] RAX: ffffffff82f74636 RBX: 1ffff1100c23426f RCX: 0000000000080000
[  405.127368][T10901] RDX: ffffc9000cdeb000 RSI: 0000000000007f55 RDI: 0000000000007f56
[  405.135361][T10901] RBP: ffffc900040cfac0 R08: ffff88802b093c00 R09: 0000000000000002
[  405.143521][T10901] R10: 0000000000000001 R11: 0000000000000002 R12: 0000000000000000
[  405.151516][T10901] R13: 0000000000000000 R14: 000000000000000a R15: 000000000000000a
[  405.159512][T10901]  ? udf_truncate_extents+0xd46/0xeb0
[  405.164925][T10901]  ? udf_discard_prealloc+0x570/0x570
[  405.170403][T10901]  ? udf_write_failed+0x178/0x1b0
[  405.175479][T10901]  ? __lock_acquire+0x7c80/0x7c80
[  405.180522][T10901]  ? __rwlock_init+0x90/0x150
[  405.185215][T10901]  ? down_write+0x162/0x1f0
[  405.189740][T10901]  ? do_raw_spin_unlock+0x121/0x230
[  405.194959][T10901]  udf_write_failed+0x180/0x1b0
[  405.199832][T10901]  udf_write_begin+0x21f/0x430
[  405.204626][T10901]  generic_perform_write+0x2fb/0x5b0
[  405.210032][T10901]  ? generic_file_direct_write+0x3e0/0x3e0
[  405.215855][T10901]  ? __mnt_drop_write_file+0xc3/0x100
[  405.221255][T10901]  ? __generic_file_write_iter+0xf7/0x230
[  405.227060][T10901]  ? udf_file_write_iter+0x2b1/0x620
[  405.232458][T10901]  udf_file_write_iter+0x2c0/0x620
[  405.237598][T10901]  vfs_write+0x43b/0x940
[  405.241862][T10901]  ? file_end_write+0x250/0x250
[  405.246736][T10901]  ? __fget_files+0x44a/0x4d0
[  405.251434][T10901]  ? __fdget_pos+0x2a3/0x330
[  405.256035][T10901]  ? ksys_write+0x75/0x250
[  405.260478][T10901]  ksys_write+0x147/0x250
[  405.264828][T10901]  ? __ia32_sys_read+0x90/0x90
[  405.269614][T10901]  ? lockdep_hardirqs_on+0x98/0x150
[  405.274837][T10901]  do_syscall_64+0x55/0xb0
[  405.279267][T10901]  ? clear_bhb_loop+0x40/0x90
[  405.283950][T10901]  ? clear_bhb_loop+0x40/0x90
[  405.288637][T10901]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  405.294553][T10901] RIP: 0033:0x7f268e38e9a9
[  405.298982][T10901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.318602][T10901] RSP: 002b:00007f268f128038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  405.327038][T10901] RAX: ffffffffffffffda RBX: 00007f268e5b5fa0 RCX: 00007f268e38e9a9
[  405.335023][T10901] RDX: 00000000fffffdab RSI: 0000200000000000 RDI: 0000000000000004
[  405.343013][T10901] RBP: 00007f268e410d69 R08: 0000000000000000 R09: 0000000000000000
[  405.350996][T10901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  405.358982][T10901] R13: 0000000000000000 R14: 00007f268e5b5fa0 R15: 00007ffef1458578
[  405.366985][T10901]  </TASK>
[  405.370339][T10901] Kernel Offset: disabled
[  405.374817][T10901] Rebooting in 86400 seconds..