last executing test programs:

14.926810491s ago: executing program 0 (id=316):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0xff, 0x252, &(0x7f0000000540)="$eJzsmb9rFEEUx7+zu7d3hAS0sLE5i4ARkr3dPZU0gloqgpCIWh5mDTGTnNxdkTvwR7Cx8Q/wb7DWIoVY2NmIhZVFDAQstLRRcGR+Zed+rTm4zvcp5t68eTPvvZndN3ALgiD+Ww6+/tx/cXV5dRHALOZRNvpvfm7jOfZfXvolI77f9rA3uB4DIETeD/7hPwTw7ooPPNXLCvFLuOPzZs1V4QMVrbsFD+fM+G0wRDZWIdFiBoa7Rv3AkW3w4Bm71+Rr9zd4FssmkU0qmzog+uL/scuwBu1eemBOfO1ub7PBgWtMCTxraQ0vCevHasYKwdE6PAtG2BTtX4CDfXlCl5wtkOd15/mzXdmPjD6Gp/ZSksBDYg6mDoYVo19GGVEUVU03S5z8Twf5+r4+Nid/J9xKUbaV4o2YtnByqdDGJjHGxj74ztBbIzw+hDPEUBzGH3GsmIUQTyZJMBx3BNMQ7Dt/zFnSdHIXXnV4Vphr5ga9N0dsQm9z8RUwUYKs3cUJnZ7WMHOUl03SH4ZnHU77Ed1zNY8GbUJM0Zetm0NDn2Y4v2E1qLS7H6+boVN965zpfwuOhLDoIcnrJwuAs8aUQYjAuRVqna2HtXa3t7Sx1VjP1rPtNK1fjM/H8YW0pmqzbgvqX0XVpxmn/pX0lTFgJ52H2Gl0Oq1kB+i0ktD209eqdSruypvmdzXPU/XPw8JvIcz1UlJpl0fHo+6/sp7HVG/BHxs8QRAEQRAEQRAEQRAEQRBEAdXP+tf8dT03i6pnPoTpD1ViNEF6U034GwAA//89J0vl")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20)
futex(0x0, 0x80, 0x300, 0x0, 0x0, 0xb0024000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
fadvise64(r0, 0x25, 0x0, 0x3)

12.976405762s ago: executing program 0 (id=323):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x20004450)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

11.491492705s ago: executing program 0 (id=328):
socket(0xa, 0x5, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6)

11.326664358s ago: executing program 2 (id=330):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]})
dup3(r2, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB])
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

11.031670054s ago: executing program 0 (id=332):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff5000/0x8000)=nil, &(0x7f0000483000/0x4000)=nil, &(0x7f0000adb000/0x4000)=nil, &(0x7f000000b000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket(0x11, 0x2, 0x0)
setsockopt(r0, 0x107, 0x5, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b121", 0x10)
close(0x3)

10.706402741s ago: executing program 4 (id=334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r8)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9.675740833s ago: executing program 3 (id=335):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x4000000)

9.34845666s ago: executing program 2 (id=337):
syz_init_net_socket$x25(0x9, 0x5, 0x0)

9.279834061s ago: executing program 3 (id=338):
socket(0xa, 0x3, 0x3a)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0x8, 0x6, @remote}, 0x14)

9.023565647s ago: executing program 4 (id=340):
r0 = timerfd_create(0x8, 0x800)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

8.987284108s ago: executing program 2 (id=341):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000050)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
chown(&(0x7f0000000080)='./file1\x00', r5, r6)

8.88777823s ago: executing program 3 (id=342):
socket(0xa, 0x5, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]})
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x6)

8.104695627s ago: executing program 1 (id=343):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)

7.333971393s ago: executing program 3 (id=344):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r1 = dup2(r0, r0)
recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0)

6.591850499s ago: executing program 4 (id=345):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)})
landlock_restrict_self(0xffffffffffffffff, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0)

6.54039714s ago: executing program 1 (id=346):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)

6.406477203s ago: executing program 2 (id=347):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x35, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffe9c, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]})
dup3(r2, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB])
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f00000002c0)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '', @void}}}]})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
shmctl$SHM_INFO(0x0, 0xe, 0x0)

5.539853561s ago: executing program 4 (id=348):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x1c, r1, 0x537, 0x70bd25, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4000000)

5.388085824s ago: executing program 3 (id=349):
mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000180)={0x0, 0x3, 0xc, @string={0xc, 0x3, "9c162f1987f515e025b6"}}, 0x0, 0x0}, 0x0)

5.242045138s ago: executing program 1 (id=350):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3ae, 0x4, 0x69b0, 0x9, 0xffffffff, 0xbb31}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.14315322s ago: executing program 4 (id=351):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)

4.19151872s ago: executing program 0 (id=352):
socket(0xa, 0x3, 0x3a)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r0, &(0x7f0000000500)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r1, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64], 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0x8, 0x6, @remote}, 0x14)

4.147614701s ago: executing program 4 (id=353):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@discard}, {@nodioread_nolock}, {@usrquota}, {@lazytime}, {@stripe}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r1 = syz_open_dev$video(0x0, 0x8, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050002000000050004000000000014000780080011400000000005001500040000000d000300686173683a6e6574"], 0x5c}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xa}, [@NDA_DST_MAC={0xa}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r6, 0x0, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp={0x2, 0x2, 0x39565559, 0x1, 0x0, [{0x7, 0x1}, {0x2, 0x535}, {0x7, 0x1ff}, {0x5, 0x338b}, {0x4, 0x2}, {0x4, 0xffffff96}, {0xe, 0x6}, {0x401000, 0x4a}], 0x2, 0x7, 0x7, 0x0, 0x2}})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000040), 0x4, 0x523, &(0x7f00000018c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x90}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

3.509209685s ago: executing program 1 (id=354):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x20004450)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x805, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0)

2.581671015s ago: executing program 2 (id=355):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x801, &(0x7f0000000240)=ANY=[], 0xff, 0x252, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40000, 0x20)
futex(0x0, 0x80, 0x300, 0x0, 0x0, 0xb0024000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x1, 0x5001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
fadvise64(r0, 0x25, 0x0, 0x3)

2.526701016s ago: executing program 1 (id=356):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$audio(0xffffffffffffff9c, 0x0, 0xc4103, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = fsopen(0x0, 0x0)
fsmount(r1, 0x0, 0x0)
r2 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, 0x0)
r3 = inotify_init1(0x800)
r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x44000160)
r5 = dup(r3)
inotify_rm_watch(r5, r4)

2.399533838s ago: executing program 0 (id=357):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(0x0, r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f0000000480)={&(0x7f0000000540)={0x3c, r2, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2f}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000050)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000000))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000005b00)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
chown(&(0x7f0000000080)='./file1\x00', r5, r6)

499.911439ms ago: executing program 2 (id=358):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5)
syz_open_dev$video(&(0x7f0000001f80), 0x3, 0x20000)
write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d)

123.449127ms ago: executing program 3 (id=359):
fsync(0xffffffffffffffff)
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=360):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @short={0x2, 0x2}}, 0x14)
sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010)
fsopen(0x0, 0x0)

kernel console output (not intermixed with test programs):

tree log
[   88.201175][ T4526] BTRFS info (device loop4): using free space tree
[   88.294342][ T4552] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x8d2f696c, utbl_chksum : 0xe619d30d)
[   88.394468][ T4526] BTRFS error (device loop4): open_ctree failed: -12
[   88.505384][ T4556] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   88.601816][ T4556] EXT4-fs (loop1): 1 truncate cleaned up
[   88.607608][ T4556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   88.787321][ T4274] EXT4-fs (loop1): unmounting filesystem.
[   91.350962][ T4615] loop0: detected capacity change from 0 to 32768
[   91.427095][ T4615] JBD2: Ignoring recovery information on journal
[   91.533594][ T4615] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   91.800681][ T4271] ocfs2: Unmounting device (7,0) on (node local)
[   92.043219][ T4637] tmpfs: Unknown parameter '/dev/media#'
[   94.293461][ T4632] loop4: detected capacity change from 0 to 32768
[   94.334255][ T4632] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.49 (4632)
[   94.411832][ T4632] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   94.441622][ T4632] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   94.451871][ T4632] BTRFS info (device loop4): setting nodatasum
[   94.477258][ T4632] BTRFS info (device loop4): using free space tree
[   94.743846][ T4668] loop3: detected capacity change from 0 to 32768
[   94.759008][ T4668] (syz.3.62,4668,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.773672][ T4668] (syz.3.62,4668,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   94.898689][ T4668] JBD2: Ignoring recovery information on journal
[   94.928445][ T4632] BTRFS error (device loop4): open_ctree failed: -12
[   94.936103][ T4668] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   94.958851][ T4413] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (4413)
[   94.973338][   T26] audit: type=1804 audit(1783191105.335:4): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.62" name="/newroot/13/file0/file1" dev="loop3" ino=16978 res=1 errno=0
[   95.057618][ T4683] loop1: detected capacity change from 0 to 256
[   95.699548][ T4653] loop0: detected capacity change from 0 to 32768
[   95.817341][ T4653] JBD2: Ignoring recovery information on journal
[   95.979355][ T4653] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   96.057556][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[   96.170472][ T4271] ocfs2: Unmounting device (7,0) on (node local)
[   96.181611][ T4432] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   96.391681][ T4432] usb 2-1: Using ep0 maxpacket: 8
[   97.018434][ T4432] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.029887][ T4432] usb 2-1: config 0 interface 0 has no altsetting 0
[   97.036762][ T4432] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   97.045930][ T4432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.057086][ T4432] usb 2-1: config 0 descriptor??
[   97.355188][ T4708] Zero length message leads to an empty skb
[   97.545618][ T4432] usbhid 2-1:0.0: can't add hid device: -71
[   97.792107][ T4432] usbhid: probe of 2-1:0.0 failed with error -71
[   97.845968][ T4432] usb 2-1: USB disconnect, device number 3
[   98.207640][ T4720] loop3: detected capacity change from 0 to 32768
[   98.237853][ T4720] (syz.3.76,4720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   98.253696][ T4720] (syz.3.76,4720,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   98.308734][ T4720] JBD2: Ignoring recovery information on journal
[   98.355220][ T4720] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   98.387860][   T26] audit: type=1804 audit(1783191108.745:5): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.76" name="/newroot/16/file0/file1" dev="loop3" ino=16978 res=1 errno=0
[   98.868503][ T4732] loop1: detected capacity change from 0 to 512
[   98.908033][ T4733] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   99.198452][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[   99.256705][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   99.558721][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  100.687848][ T4725] loop4: detected capacity change from 0 to 32768
[  100.854620][ T4725] JBD2: Ignoring recovery information on journal
[  101.057294][ T4725] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  101.301770][ T4317] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.449584][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  101.501706][ T4317] usb 2-1: Using ep0 maxpacket: 8
[  101.508702][ T4317] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.557241][ T4743] loop2: detected capacity change from 0 to 32768
[  101.601661][ T4317] usb 2-1: config 0 interface 0 has no altsetting 0
[  101.626473][ T4317] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  101.810499][ T4743] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.844144][ T4776] tmpfs: Unknown parameter '/dev/media#'
[  101.886458][ T4743] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  101.947421][ T4743] BTRFS info (device loop2): using free space tree
[  102.278186][ T4743] BTRFS info (device loop2): enabling ssd optimizations
[  102.373039][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.382955][ T4317] usb 2-1: config 0 descriptor??
[  102.803328][ T4317] usbhid 2-1:0.0: can't add hid device: -71
[  102.811966][ T4317] usbhid: probe of 2-1:0.0 failed with error -71
[  102.836301][ T4317] usb 2-1: USB disconnect, device number 4
[  103.061819][ T4820] loop4: detected capacity change from 0 to 16
[  103.068855][ T4820] erofs: Unknown parameter 'mptcp_pm'
[  103.189935][ T4284] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.618387][ T4834] tmpfs: Unknown parameter '/dev/media#'
[  104.015134][ T4289] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  104.024730][ T4289] Bluetooth: hci2: Injecting HCI hardware error event
[  104.036823][ T4283] Bluetooth: hci2: hardware error 0x00
[  104.594745][ T4844] netem: change failed
[  104.620164][ T4844] device syzkaller0 entered promiscuous mode
[  104.650521][ T4844] tipc: Started in network mode
[  104.662330][ T4844] tipc: Node identity 7625eab84afe, cluster identity 4711
[  104.914701][ T4844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  105.091860][ T4844] tipc: Resetting bearer <eth:syzkaller0>
[  105.157308][ T4843] tipc: Resetting bearer <eth:syzkaller0>
[  105.220275][ T4843] tipc: Disabling bearer <eth:syzkaller0>
[  105.291895][ T4824] loop3: detected capacity change from 0 to 32768
[  105.415578][ T4824] JBD2: Ignoring recovery information on journal
[  105.544491][ T4824] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  106.046458][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  106.141772][ T4283] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  106.504456][ T4876] loop1: detected capacity change from 0 to 2048
[  106.755547][ T4876]  loop1: p1 < > p4
[  106.755547][ T4876]  p4: <netbsd: >
[  106.783341][ T4876] loop1: p4 size 722688 extends beyond EOD, truncated
[  106.821685][ T4283] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  106.830491][ T4283] Bluetooth: hci0: Injecting HCI hardware error event
[  106.847860][ T4289] Bluetooth: hci0: hardware error 0x00
[  106.905962][ T4886] loop3: detected capacity change from 0 to 64
[  106.919557][ T4886] hfs: unable to parse mount options
[  107.715608][ T4894] tmpfs: Unknown parameter '/dev/media#'
[  108.169051][ T3637] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  108.211804][ T3637] Buffer I/O error on dev loop1, logical block 0, async page read
[  108.221019][ T3637] ldm_validate_partition_table(): Disk read failed.
[  108.271625][ T3637] Dev loop1: unable to read RDB block 0
[  108.277244][ T3637]  loop1: unable to read partition table
[  108.298407][ T3637] loop1: partition table beyond EOD, truncated
[  108.507317][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  108.567179][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  108.673069][ T4913] overlayfs: failed to set xattr on upper
[  108.679171][ T4913] overlayfs: ...falling back to index=off,metacopy=off.
[  108.891756][ T4289] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  110.096389][ T4904] loop3: detected capacity change from 0 to 32768
[  110.118291][ T4904] gfs2: Bad value for 'quota'
[  110.398923][ T4919] loop2: detected capacity change from 0 to 32768
[  110.444633][ T4935] tmpfs: Unknown parameter '/dev/media#'
[  110.711744][ T4579] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  110.807555][ T4919] XFS (loop2): Mounting V5 Filesystem
[  111.255322][ T4919] XFS (loop2): Ending clean mount
[  111.383269][ T4579] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.403953][ T4945] netem: change failed
[  111.409282][ T4579] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  111.437358][ T4579] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.467605][ T4946] device syzkaller0 entered promiscuous mode
[  111.475979][ T4579] usb 1-1: config 0 descriptor??
[  111.496218][ T4945] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  111.561076][ T4945] tipc: Resetting bearer <eth:syzkaller0>
[  111.598230][ T4944] tipc: Resetting bearer <eth:syzkaller0>
[  111.635301][ T4944] tipc: Disabling bearer <eth:syzkaller0>
[  111.653352][ T4284] XFS (loop2): Unmounting Filesystem
[  111.683664][ T4929] loop4: detected capacity change from 0 to 32768
[  111.709105][ T4929] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.133 (4929)
[  111.732157][ T4579] usbhid 1-1:0.0: can't add hid device: -71
[  111.739300][ T4579] usbhid: probe of 1-1:0.0 failed with error -71
[  111.774247][ T4929] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.786977][ T4929] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  111.788920][ T4579] usb 1-1: USB disconnect, device number 2
[  111.830226][ T4929] BTRFS info (device loop4): setting nodatacow, compression disabled
[  111.853616][ T4929] BTRFS info (device loop4): disabling tree log
[  111.860045][ T4929] BTRFS info (device loop4): max_inline at 0
[  111.869131][ T4929] BTRFS info (device loop4): using free space tree
[  112.431577][ T4317] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  112.641623][ T4317] usb 1-1: Using ep0 maxpacket: 32
[  112.653232][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.711283][ T4317] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  112.760156][ T4317] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.800965][ T4317] usb 1-1: config 0 descriptor??
[  112.826010][ T4317] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  112.915127][ T4980] device vlan2 entered promiscuous mode
[  112.920744][ T4980] device bond0 entered promiscuous mode
[  112.940272][ T4317] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  112.957067][ T4980] device bond_slave_0 entered promiscuous mode
[  112.989624][ T4980] device bond_slave_1 entered promiscuous mode
[  113.153127][ T4967] loop2: detected capacity change from 0 to 32768
[  113.193914][ T4967] (syz.2.138,4967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.278546][ T4967] (syz.2.138,4967,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  113.327845][ T4273] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  113.346540][ T4967] JBD2: Ignoring recovery information on journal
[  113.436423][ T4967] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.665919][ T5002] usb 1-1: USB disconnect, device number 3
[  113.680851][ T5002] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  113.737508][ T5000] hub 8-0:1.0: USB hub found
[  113.743818][ T5000] hub 8-0:1.0: 1 port detected
[  113.908213][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  116.799306][ T5024] tmpfs: Unknown parameter '/dev/media#'
[  118.380357][ T5017] loop3: detected capacity change from 0 to 32768
[  118.454891][ T5029] loop4: detected capacity change from 0 to 512
[  118.488704][ T5017] JBD2: Ignoring recovery information on journal
[  118.582706][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.156'.
[  118.644398][ T5029] EXT4-fs (loop4): 1 truncate cleaned up
[  118.665491][ T5017] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  118.690768][ T5029] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  118.745493][ T5039] loop2: detected capacity change from 0 to 1764
[  118.922185][   T26] audit: type=1800 audit(1783191129.275:6): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.150" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  119.407023][ T5017] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024
[  119.452224][ T5017] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  119.462249][ T5017] OCFS2: File system is now read-only.
[  119.467728][ T5017] (syz.3.150,5017,0):ocfs2_search_chain:1783 ERROR: status = -30
[  119.475724][ T5017] (syz.3.150,5017,0):ocfs2_search_chain:1893 ERROR: status = -30
[  119.483584][ T5017] (syz.3.150,5017,0):ocfs2_claim_suballoc_bits:1972 ERROR: status = -30
[  119.492081][ T5017] (syz.3.150,5017,0):ocfs2_claim_suballoc_bits:2015 ERROR: status = -30
[  119.500447][ T5017] (syz.3.150,5017,0):__ocfs2_claim_clusters:2387 ERROR: status = -30
[  119.518494][ T5017] (syz.3.150,5017,0):__ocfs2_claim_clusters:2395 ERROR: status = -30
[  119.553664][ T5017] (syz.3.150,5017,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30
[  119.590066][ T5017] (syz.3.150,5017,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30
[  119.617264][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  119.632359][ T5017] (syz.3.150,5017,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30
[  119.649377][ T5045] loop2: detected capacity change from 0 to 512
[  119.669164][ T5017] (syz.3.150,5017,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30
[  119.699208][ T5045] EXT4-fs: Ignoring removed nomblk_io_submit option
[  119.741781][ T5017] (syz.3.150,5017,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30
[  119.813243][ T5017] (syz.3.150,5017,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30
[  119.855384][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.158: inode #1: comm syz.2.158: iget: illegal inode #
[  119.934824][ T5017] (syz.3.150,5017,1):ocfs2_reserve_clusters_with_limit:1188 ERROR: status = -30
[  119.954347][ T5045] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.158: error while reading EA inode 1 err=-117
[  120.629092][ T5052] netlink: 64 bytes leftover after parsing attributes in process `syz.0.159'.
[  120.665747][ T5017] (syz.3.150,5017,0):ocfs2_reserve_clusters_with_limit:1237 ERROR: status = -30
[  120.712344][ T5045] EXT4-fs (loop2): 1 orphan inode deleted
[  120.731076][ T5017] (syz.3.150,5017,0):ocfs2_lock_allocators:2704 ERROR: status = -30
[  120.761701][ T4317] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  120.786092][ T5045] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  120.829178][ T5017] (syz.3.150,5017,0):ocfs2_write_begin_nolock:1746 ERROR: status = -30
[  120.889405][ T5017] (syz.3.150,5017,0):ocfs2_dio_wr_get_block:2245 ERROR: status = -30
[  120.948336][ T5017] (syz.3.150,5017,0):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -5
[  120.981783][ T4317] usb 5-1: Using ep0 maxpacket: 32
[  121.050204][ T4317] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  121.100511][ T5017] syz.3.150 (5017) used greatest stack depth: 18496 bytes left
[  121.131342][ T4317] usb 5-1: config 0 has no interface number 0
[  121.171105][ T4317] usb 5-1: config 0 interface 184 has no altsetting 0
[  121.208479][ T4317] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  121.258557][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  121.302596][ T5040] loop1: detected capacity change from 0 to 32768
[  121.312358][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.329527][ T5040] (syz.1.157,5040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.340908][ T4317] usb 5-1: Product: syz
[  121.347054][ T4317] usb 5-1: Manufacturer: syz
[  121.976715][ T5040] (syz.1.157,5040,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  122.031875][ T4317] usb 5-1: SerialNumber: syz
[  122.049280][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  122.057877][ T4317] usb 5-1: config 0 descriptor??
[  122.083115][ T4317] smsc75xx v1.0.0
[  122.092982][ T5040] (syz.1.157,5040,0):ocfs2_initialize_super:2286 ERROR: status = -12
[  122.136872][ T5040] (syz.1.157,5040,0):ocfs2_fill_super:1176 ERROR: status = -12
[  122.512046][  T129] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  122.753325][ T5069] process 'syz.2.165' launched './file2' with NULL argv: empty string added
[  123.125517][ T4317] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  123.138240][ T4317] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  123.241717][  T129] usb 4-1: Using ep0 maxpacket: 8
[  123.248706][ T5073] tmpfs: Unknown parameter '/dev/media#'
[  123.258301][  T129] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.350755][ T4317] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  123.441138][  T129] usb 4-1: config 0 interface 0 has no altsetting 0
[  123.457411][ T4317] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  123.531494][  T129] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  123.584205][ T4317] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  123.689835][  T129] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.794176][ T4317] smsc75xx: probe of 5-1:0.184 failed with error -71
[  123.912083][  T129] usb 4-1: config 0 descriptor??
[  123.943418][ T4317] usb 5-1: USB disconnect, device number 2
[  124.344271][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.346717][ T5085] loop2: detected capacity change from 0 to 512
[  124.351944][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.366426][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.374139][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.381469][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.390017][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.398514][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.406417][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.415044][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.492797][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.534048][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  124.730088][ T5085] EXT4-fs (loop2): 1 truncate cleaned up
[  124.789145][ T5085] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  124.832560][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.001628][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.021159][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.027989][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.034733][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.041472][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.069595][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.121989][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.128784][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.193907][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.205758][ T5091] loop4: detected capacity change from 0 to 256
[  125.212557][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.219290][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.246826][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.280354][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.323674][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.330500][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.361636][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.368404][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.384190][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.390989][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.417975][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.425886][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.437232][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.444484][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.451249][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.458272][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.473255][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.480126][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.494016][  T129] lua 0003:1E7D:2C2E.0002: unknown main item tag 0x0
[  125.511405][ T5100] loop1: detected capacity change from 0 to 512
[  125.538915][  T129] lua 0003:1E7D:2C2E.0002: hidraw0: USB HID v0.06 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0
[  125.572981][ T5100] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0002]
[  125.591336][  T129] usb 4-1: USB disconnect, device number 2
[  125.629715][ T5100] System zones: 1-12
[  125.645072][ T4284] EXT4-fs (loop2): unmounting filesystem.
[  125.705783][ T5102] fido_id[5102]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  125.744788][ T5100] EXT4-fs (loop1): 1 truncate cleaned up
[  125.750521][ T5100] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.945483][ T5108] loop2: detected capacity change from 0 to 16
[  126.829713][ T5108] erofs: (device loop2): mounted with root inode @ nid 36.
[  126.874821][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  127.155572][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  127.164878][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  127.175386][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.185101][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  127.194235][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.203619][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  127.213363][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  127.223088][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  127.232283][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.241758][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  127.250809][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.260236][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  127.269509][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  127.278762][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  127.287917][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  127.297137][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  127.307362][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  127.316586][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  127.326320][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.335760][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  127.345317][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.354761][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  127.364024][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  127.373240][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  127.382463][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  127.391665][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.401266][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  127.410479][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.419889][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  127.429597][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  127.438799][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.448646][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  127.457862][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.467305][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  127.476488][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.485888][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  127.495037][ T5114] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  127.504458][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  127.513661][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  127.522894][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  127.533737][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  127.543000][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  127.552214][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  127.561483][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  127.570751][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  127.580130][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  127.590581][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  127.599697][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  127.608771][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  127.618021][ T5114] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  127.627527][ T5114] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  127.637148][ T5114] syz.2.173: attempt to access beyond end of device
[  127.637148][ T5114] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  127.651017][ T5114] syz.2.173: attempt to access beyond end of device
[  127.651017][ T5114] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  127.665089][ T5114] syz.2.173: attempt to access beyond end of device
[  127.665089][ T5114] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  127.678913][ T5114] syz.2.173: attempt to access beyond end of device
[  127.678913][ T5114] loop2: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  127.695261][ T5114] syz.2.173: attempt to access beyond end of device
[  127.695261][ T5114] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[  127.708865][ T5114] syz.2.173: attempt to access beyond end of device
[  127.708865][ T5114] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  127.722427][ T5114] syz.2.173: attempt to access beyond end of device
[  127.722427][ T5114] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  128.698175][ T5116] loop1: detected capacity change from 0 to 1024
[  128.725010][ T5116] EXT4-fs: inline encryption not supported
[  128.792000][ T5116] EXT4-fs: Ignoring removed bh option
[  128.925864][ T5121] tmpfs: Unknown parameter '/dev/media#'
[  129.742134][ T5116] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  129.798039][ T5130] loop0: detected capacity change from 0 to 512
[  129.829506][   T26] audit: type=1800 audit(1783191140.185:7): pid=5116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.181" name="file1" dev="loop1" ino=15 res=0 errno=0
[  129.872264][ T5130] EXT4-fs (loop0): 1 truncate cleaned up
[  129.956703][ T5130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  130.050047][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  130.136797][ T5002] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  130.371720][ T5002] usb 4-1: Using ep0 maxpacket: 8
[  130.385289][ T5002] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  130.385418][ T5002] usb 4-1: config 0 interface 0 has no altsetting 0
[  130.385578][ T5002] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  130.385658][ T5002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.490243][ T5002] usb 4-1: config 0 descriptor??
[  130.515423][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  130.597404][ T5145] loop1: detected capacity change from 0 to 256
[  130.622609][ T5146] loop0: detected capacity change from 0 to 512
[  130.640567][ T5142] comedi: valid board names for 8255 driver are:
[  130.640607][ T5142]  8255
[  130.640612][ T5142] comedi: valid board names for vmk80xx driver are:
[  130.640616][ T5142]  vmk80xx
[  130.640619][ T5142] comedi: valid board names for usbduxsigma driver are:
[  130.640624][ T5142]  usbduxsigma
[  130.640627][ T5142] comedi: valid board names for usbduxfast driver are:
[  130.640632][ T5142]  usbduxfast
[  130.640652][ T5142] comedi: valid board names for usbdux driver are:
[  130.640657][ T5142]  usbdux
[  130.640660][ T5142] comedi: valid board names for ni6501 driver are:
[  130.640665][ T5142]  ni6501
[  130.640668][ T5142] comedi: valid board names for dt9812 driver are:
[  130.640672][ T5142]  dt9812
[  130.640676][ T5142] comedi: valid board names for ni_labpc_cs driver are:
[  130.640681][ T5142]  ni_labpc_cs
[  130.640684][ T5142] comedi: valid board names for ni_daq_700 driver are:
[  130.640689][ T5142]  ni_daq_700
[  130.640692][ T5142] comedi: valid board names for labpc_pci driver are:
[  130.640696][ T5142]  labpc_pci
[  130.640700][ T5142] comedi: valid board names for adl_pci9118 driver are:
[  130.640704][ T5142]  pci9118dg
[  130.640708][ T5142]  pci9118hg
[  130.640711][ T5142]  pci9118hr
[  130.640715][ T5142] comedi: valid board names for 8255_pci driver are:
[  130.640719][ T5142]  8255_pci
[  130.640722][ T5142] comedi: valid board names for s526 driver are:
[  130.640727][ T5142]  s526
[  130.640730][ T5142] comedi: valid board names for multiq3 driver are:
[  130.640735][ T5142]  multiq3
[  130.640738][ T5142] comedi: valid board names for pcmuio driver are:
[  130.640742][ T5142]  pcmuio48
[  130.640746][ T5142]  pcmuio96
[  130.640749][ T5142] comedi: valid board names for pcmmio driver are:
[  130.640753][ T5142]  pcmmio
[  130.640757][ T5142] comedi: valid board names for pcmda12 driver are:
[  130.640761][ T5142]  pcmda12
[  130.640765][ T5142] comedi: valid board names for pcmad driver are:
[  130.640769][ T5142]  pcmad12
[  130.640787][ T5142]  pcmad16
[  130.640791][ T5142] comedi: valid board names for ni_labpc driver are:
[  130.640795][ T5142]  lab-pc-1200
[  130.640799][ T5142]  lab-pc-1200ai
[  130.640802][ T5142]  lab-pc+
[  130.640805][ T5142] comedi: valid board names for atmio16 driver are:
[  130.640810][ T5142]  atmio16
[  130.640813][ T5142]  atmio16d
[  130.640817][ T5142] comedi: valid board names for ni_at_ao driver are:
[  130.640821][ T5142]  at-ao-6
[  130.640824][ T5142]  at-ao-10
[  130.640827][ T5142] comedi: valid board names for ni_at_a2150 driver are:
[  130.640832][ T5142]  ni_at_a2150
[  130.640835][ T5142] comedi: valid board names for adq12b driver are:
[  130.640839][ T5142]  adq12b
[  130.640842][ T5142] comedi: valid board names for mpc624 driver are:
[  130.640846][ T5142]  mpc624
[  130.640849][ T5142] comedi: valid board names for c6xdigio driver are:
[  130.640854][ T5142]  c6xdigio
[  130.640857][ T5142] comedi: valid board names for aio_iiro_16 driver are:
[  130.640861][ T5142]  aio_iiro_16
[  130.640864][ T5142] comedi: valid board names for aio_aio12_8 driver are:
[  130.640868][ T5142]  aio_aio12_8
[  130.640872][ T5142]  aio_ai12_8
[  130.640875][ T5142]  aio_ao12_4
[  130.640878][ T5142] comedi: valid board names for fl512 driver are:
[  130.640882][ T5142]  fl512
[  130.640885][ T5142] comedi: valid board names for dmm32at driver are:
[  130.640890][ T5142]  dmm32at
[  130.640893][ T5142] comedi: valid board names for dt282x driver are:
[  130.640897][ T5142]  dt2821
[  130.640900][ T5142]  dt2821-f
[  130.640903][ T5142]  dt2821-g
[  130.640921][ T5142]  dt2823
[  130.640925][ T5142]  dt2824-pgh
[  130.640928][ T5142]  dt2824-pgl
[  130.640931][ T5142]  dt2825
[  130.640934][ T5142]  dt2827
[  130.640938][ T5142]  dt2828
[  130.640941][ T5142]  dt2829
[  130.640944][ T5142]  dt21-ez
[  130.640947][ T5142]  dt23-ez
[  130.640950][ T5142]  dt24-ez
[  130.640954][ T5142]  dt24-ez-pgl
[  130.640957][ T5142] comedi: valid board names for dt2817 driver are:
[  130.640961][ T5142]  dt2817
[  130.640964][ T5142] comedi: valid board names for dt2815 driver are:
[  130.640968][ T5142]  dt2815
[  130.640971][ T5142] comedi: valid board names for dt2814 driver are:
[  130.640976][ T5142]  dt2814
[  130.640979][ T5142] comedi: valid board names for dt2811 driver are:
[  130.640983][ T5142]  dt2811-pgh
[  130.640986][ T5142]  dt2811-pgl
[  130.640989][ T5142] comedi: valid board names for dt2801 driver are:
[  130.640993][ T5142]  dt2801
[  130.640997][ T5142] comedi: valid board names for das6402 driver are:
[  130.641001][ T5142]  das6402-12
[  130.641004][ T5142]  das6402-16
[  130.641007][ T5142] comedi: valid board names for das1800 driver are:
[  130.641011][ T5142]  das-1701st
[  130.641015][ T5142]  das-1701st-da
[  130.641018][ T5142]  das-1702st
[  130.641021][ T5142]  das-1702st-da
[  130.641024][ T5142]  das-1702hr
[  130.641028][ T5142]  das-1702hr-da
[  130.641031][ T5142]  das-1701ao
[  130.641034][ T5142]  das-1702ao
[  130.641037][ T5142]  das-1801st
[  130.641062][ T5142]  das-1801st-da
[  130.641066][ T5142]  das-1802st
[  130.641070][ T5142]  das-1802st-da
[  130.641073][ T5142]  das-1802hr
[  130.641076][ T5142]  das-1802hr-da
[  130.641080][ T5142]  das-1801hc
[  130.641084][ T5142]  das-1802hc
[  130.641087][ T5142]  das-1801ao
[  130.641090][ T5142]  das-1802ao
[  130.641094][ T5142] comedi: valid board names for das800 driver are:
[  130.641098][ T5142]  das-800
[  130.641102][ T5142]  cio-das800
[  130.641105][ T5142]  das-801
[  130.641108][ T5142]  cio-das801
[  130.641112][ T5142]  das-802
[  130.641115][ T5142]  cio-das802
[  130.641118][ T5142]  cio-das802/16
[  130.641122][ T5142] comedi: valid board names for isa-das08 driver are:
[  130.641126][ T5142]  isa-das08
[  130.641130][ T5142]  das08-pgm
[  130.641133][ T5142]  das08-pgh
[  130.641136][ T5142]  das08-pgl
[  130.641140][ T5142]  das08-aoh
[  130.641143][ T5142]  das08-aol
[  130.641146][ T5142]  das08-aom
[  130.641150][ T5142]  das08/jr-ao
[  130.641153][ T5142]  das08jr-16-ao
[  130.641157][ T5142]  pc104-das08
[  130.641161][ T5142]  das08jr/16
[  130.641164][ T5142] comedi: valid board names for das16m1 driver are:
[  130.641169][ T5142]  das16m1
[  130.641172][ T5142] comedi: valid board names for dac02 driver are:
[  130.641177][ T5142]  dac02
[  130.641180][ T5142] comedi: valid board names for rti802 driver are:
[  130.641199][ T5142]  rti802
[  130.641203][ T5142] comedi: valid board names for rti800 driver are:
[  130.641207][ T5142]  rti800
[  130.641210][ T5142]  rti815
[  130.641214][ T5142] comedi: valid board names for pcm3724 driver are:
[  130.641218][ T5142]  pcm3724
[  130.641221][ T5142] comedi: valid board names for pcl818 driver are:
[  130.641225][ T5142]  pcl818l
[  130.641229][ T5142]  pcl818h
[  130.641232][ T5142]  pcl818hd
[  130.641236][ T5142]  pcl818hg
[  130.641239][ T5142]  pcl818
[  130.641243][ T5142]  pcl718
[  130.641246][ T5142]  pcm3718
[  130.641250][ T5142] comedi: valid board names for pcl816 driver are:
[  130.641254][ T5142]  pcl816
[  130.641257][ T5142]  pcl814b
[  130.641261][ T5142] comedi: valid board names for pcl812 driver are:
[  130.641265][ T5142]  pcl812
[  130.641268][ T5142]  pcl812pg
[  130.641272][ T5142]  acl8112pg
[  130.641275][ T5142]  acl8112dg
[  130.641278][ T5142]  acl8112hg
[  130.641282][ T5142]  a821pgl
[  130.641285][ T5142]  a821pglnda
[  130.641289][ T5142]  a821pgh
[  130.641292][ T5142]  a822pgl
[  130.641295][ T5142]  a822pgh
[  130.641298][ T5142]  a823pgl
[  130.641302][ T5142]  a823pgh
[  130.641305][ T5142]  pcl813
[  130.641308][ T5142]  pcl813b
[  130.641311][ T5142]  acl8113
[  130.641315][ T5142]  iso813
[  130.641333][ T5142]  acl8216
[  130.641336][ T5142]  a826pg
[  130.641340][ T5142] comedi: valid board names for pcl730 driver are:
[  130.641344][ T5142]  pcl730
[  130.641347][ T5142]  iso730
[  130.641350][ T5142]  acl7130
[  130.641353][ T5142]  pcm3730
[  130.641356][ T5142]  pcl725
[  130.641360][ T5142]  p8r8dio
[  130.641363][ T5142]  acl7225b
[  130.641366][ T5142]  p16r16dio
[  130.641369][ T5142]  pcl733
[  130.641372][ T5142]  pcl734
[  130.641376][ T5142]  opmm-1616-xt
[  130.641379][ T5142]  pearl-mm-p
[  130.641382][ T5142]  ir104-pbf
[  130.641386][ T5142] comedi: valid board names for pcl726 driver are:
[  130.641390][ T5142]  pcl726
[  130.641393][ T5142]  pcl727
[  130.641396][ T5142]  pcl728
[  130.641399][ T5142]  acl6126
[  130.641402][ T5142]  acl6128
[  130.641406][ T5142] comedi: valid board names for pcl724 driver are:
[  130.641410][ T5142]  pcl724
[  130.641413][ T5142]  pcl722
[  130.641416][ T5142]  pcl731
[  130.641419][ T5142]  acl7122
[  130.641422][ T5142]  acl7124
[  130.641425][ T5142]  pet48dio
[  130.641429][ T5142]  pcmio48
[  130.641432][ T5142]  onyx-mm-dio
[  130.641435][ T5142] comedi: valid board names for pcl711 driver are:
[  130.641439][ T5142]  pcl711
[  130.641442][ T5142]  pcl711b
[  130.641446][ T5142]  acl8112hg
[  130.641449][ T5142]  acl8112dg
[  130.641464][ T5142] comedi: valid board names for amplc_pc263 driver are:
[  130.641469][ T5142]  pc263
[  130.641472][ T5142] comedi: valid board names for amplc_pc236 driver are:
[  130.641476][ T5142]  pc36at
[  130.641480][ T5142] comedi: valid board names for amplc_dio200 driver are:
[  130.641484][ T5142]  pc212e
[  130.641487][ T5142]  pc214e
[  130.641490][ T5142]  pc215e
[  130.641493][ T5142]  pc218e
[  130.641497][ T5142]  pc272e
[  130.641500][ T5142] comedi: valid board names for comedi_parport driver are:
[  130.641504][ T5142]  comedi_parport
[  130.641568][ T5142] comedi: valid board names for comedi_test driver are:
[  130.641577][ T5142]  comedi_test
[  130.641582][ T5142] comedi: valid board names for comedi_bond driver are:
[  130.641613][ T5142]  comedi_bond
[  130.922564][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  130.987243][ T5146] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  131.013443][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.013570][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.013664][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.013758][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.013852][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.013954][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014048][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014143][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014234][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014327][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014422][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.014489][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.762575][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.762709][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.762806][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.762902][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763008][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763121][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763215][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763340][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763474][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763545][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.763786][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.840203][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.862119][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.868888][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.875642][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.882408][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.889123][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.895905][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.903041][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.909771][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.916571][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.923597][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.930334][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.938445][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.945438][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.952280][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.959001][ T5002] lua 0003:1E7D:2C2E.0003: unknown main item tag 0x0
[  131.970990][ T5002] lua 0003:1E7D:2C2E.0003: hidraw0: USB HID v0.06 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0
[  132.001155][ T5002] usb 4-1: USB disconnect, device number 3
[  132.979056][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.991025][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.055226][ T5150] fido_id[5150]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  133.060804][ T5158] loop0: detected capacity change from 0 to 16
[  133.255393][ T5163] loop1: detected capacity change from 0 to 32768
[  133.270743][ T5163] (syz.1.194,5163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.291666][ T5163] (syz.1.194,5163,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  133.315134][ T5158] erofs: (device loop0): mounted with root inode @ nid 36.
[  133.336042][ T5163] JBD2: Ignoring recovery information on journal
[  133.541316][ T5163] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  133.567577][   T26] audit: type=1804 audit(1783191143.925:8): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.194" name="/newroot/39/file0/file1" dev="loop1" ino=16978 res=1 errno=0
[  133.645259][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36
[  133.654496][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36
[  133.663714][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.673521][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36
[  133.682612][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.692018][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36
[  133.701239][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36
[  133.710619][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36
[  133.719943][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.729465][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36
[  133.738695][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.748306][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36
[  133.757552][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36
[  133.766764][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36
[  133.777698][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36
[  133.786913][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36
[  133.796411][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36
[  133.805726][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36
[  133.814906][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.824332][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36
[  133.833560][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.842996][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36
[  133.853285][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36
[  133.862542][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36
[  133.871821][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36
[  133.882168][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.891623][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36
[  133.900721][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.910172][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36
[  133.919375][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36
[  133.928677][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.938159][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36
[  133.947334][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.956849][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36
[  133.966031][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.975459][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36
[  133.984605][ T5170] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  133.994030][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36
[  134.003228][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[  134.012377][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[  134.021753][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36
[  134.031219][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36
[  134.040628][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36
[  134.049865][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36
[  134.059300][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36
[  134.068653][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  134.078098][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  134.087341][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36
[  134.097470][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36
[  134.106803][ T5170] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  134.116305][ T5170] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[  134.125548][ T5170] syz.0.192: attempt to access beyond end of device
[  134.125548][ T5170] loop0: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  134.139425][ T5170] syz.0.192: attempt to access beyond end of device
[  134.139425][ T5170] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  134.153699][ T5170] syz.0.192: attempt to access beyond end of device
[  134.153699][ T5170] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16
[  134.167648][ T5170] syz.0.192: attempt to access beyond end of device
[  134.167648][ T5170] loop0: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  134.182349][ T5170] syz.0.192: attempt to access beyond end of device
[  134.182349][ T5170] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16
[  134.196018][ T5170] syz.0.192: attempt to access beyond end of device
[  134.196018][ T5170] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16
[  134.209725][ T5170] syz.0.192: attempt to access beyond end of device
[  134.209725][ T5170] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  135.757064][ T5180] netlink: 'syz.4.200': attribute type 10 has an invalid length.
[  136.015294][ T5180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.036833][ T5185] syz.0.201 uses obsolete (PF_INET,SOCK_PACKET)
[  136.080949][ T5180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.107124][ T5187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'.
[  136.117496][ T4274] ocfs2: Unmounting device (7,1) on (node local)
[  136.148600][ T5180] bond0 (unregistering): Released all slaves
[  136.941070][ T5193] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'.
[  137.935770][ T5198] loop1: detected capacity change from 0 to 8192
[  137.983337][ T5198] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.464580][ T4998] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  138.671615][ T4998] usb 2-1: Using ep0 maxpacket: 8
[  138.684760][ T4998] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.697197][ T4998] usb 2-1: config 0 interface 0 has no altsetting 0
[  138.706146][ T4998] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  138.717992][ T4998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.718393][ T5200] loop4: detected capacity change from 0 to 32768
[  138.775047][ T4998] usb 2-1: config 0 descriptor??
[  139.199657][ T5200] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  139.199657][ T5200] 
[  139.220329][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.229641][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.242638][ T5200] ERROR: (device loop4): remounting filesystem as read-only
[  139.291712][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.306212][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.316697][ T5200] ialloc: diAlloc returned -5!
[  139.343706][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.371717][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.378491][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.405615][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.438939][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.463774][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.481214][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.496199][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.510932][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.523883][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.539774][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.551796][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.583032][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.595143][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.612017][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.633779][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.650873][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.707882][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.724052][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.735403][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.747650][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.754828][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.767178][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.774503][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.781295][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.795307][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.827917][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.836151][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.848264][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.864617][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.871368][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.899511][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.914869][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.926005][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.956854][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  139.977391][ T4998] lua 0003:1E7D:2C2E.0004: unknown main item tag 0x0
[  140.008616][ T4998] lua 0003:1E7D:2C2E.0004: hidraw0: USB HID v0.06 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  140.131936][ T4998] usb 2-1: USB disconnect, device number 5
[  140.188694][ T5226] loop2: detected capacity change from 0 to 16
[  140.217021][ T5226] erofs: (device loop2): mounted with root inode @ nid 36.
[  140.485022][ T5223] loop3: detected capacity change from 0 to 8192
[  140.619369][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  140.628606][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  140.638903][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.648539][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  140.657702][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.667071][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  140.676638][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  140.685756][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  140.694996][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.704338][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  140.713443][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.722790][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  140.732210][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  140.742319][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  140.751407][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  140.760618][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  140.770650][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  140.780026][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  140.789222][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.798577][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  140.807694][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.817050][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  140.826314][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  140.835526][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  140.844939][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  140.854071][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.863426][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  140.872535][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.881882][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  140.891060][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  140.900305][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.909664][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  140.918800][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.928150][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  140.937365][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.946731][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  140.955849][ T5232] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  140.965195][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  140.974379][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  140.983484][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  140.993163][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  141.002815][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  141.012287][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  141.021566][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  141.031255][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  141.040990][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  141.050780][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  141.060032][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  141.069159][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  141.078682][ T5232] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  141.088112][ T5232] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  141.097583][ T5232] syz.2.217: attempt to access beyond end of device
[  141.097583][ T5232] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  141.111618][ T5232] syz.2.217: attempt to access beyond end of device
[  141.111618][ T5232] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  141.126157][ T5232] syz.2.217: attempt to access beyond end of device
[  141.126157][ T5232] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  141.140507][ T5232] syz.2.217: attempt to access beyond end of device
[  141.140507][ T5232] loop2: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  141.155139][ T5232] syz.2.217: attempt to access beyond end of device
[  141.155139][ T5232] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[  141.169008][ T5232] syz.2.217: attempt to access beyond end of device
[  141.169008][ T5232] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  141.182844][ T5232] syz.2.217: attempt to access beyond end of device
[  141.182844][ T5232] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  141.699954][ T5234] loop1: detected capacity change from 0 to 512
[  141.815693][ T5234] EXT4-fs (loop1): 1 truncate cleaned up
[  141.869322][ T5234] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  141.896301][ T5227] fido_id[5227]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  142.091762][ T4998] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.330192][ T4998] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  142.352000][ T4998] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.365163][ T4998] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  142.378604][ T4998] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.395543][ T4998] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  142.406263][ T4998] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  142.420853][ T4998] usb 1-1: Product: syz
[  142.425663][ T4998] usb 1-1: Manufacturer: syz
[  142.469240][ T4998] cdc_wdm 1-1:1.0: skipping garbage
[  142.474846][ T4998] cdc_wdm 1-1:1.0: skipping garbage
[  142.509409][ T4998] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  142.515805][ T4998] cdc_wdm 1-1:1.0: Unknown control protocol
[  142.697813][ T4998] usb 1-1: USB disconnect, device number 4
[  143.131690][ T5239] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  143.245131][ T4274] EXT4-fs (loop1): unmounting filesystem.
[  143.311751][ T4998] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  145.721836][ T5274] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  145.757510][ T5274] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  145.795800][ T5274] Bluetooth: hci1: Suspend notifier action (1) failed: -4
[  145.827371][ T5274] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  145.847940][ T5274] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  145.874190][ T5274] Bluetooth: hci3: Suspend notifier action (1) failed: -4
[  145.893725][ T5274] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  145.910860][ T5274] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  145.932872][ T5274] Bluetooth: hci4: Suspend notifier action (1) failed: -4
[  146.624882][ T5270] loop0: detected capacity change from 0 to 32768
[  146.878935][ T5270] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.229 (5270)
[  146.932355][ T5270] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  146.943087][ T5270] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  146.952405][ T5270] BTRFS info (device loop0): setting nodatacow, compression disabled
[  146.960761][ T5270] BTRFS info (device loop0): disabling tree log
[  146.967424][ T5270] BTRFS info (device loop0): max_inline at 0
[  146.973812][ T5270] BTRFS info (device loop0): using free space tree
[  147.772797][ T4289] Bluetooth: hci1: command 0x0c1a tx timeout
[  147.852080][ T4289] Bluetooth: hci3: command 0x0c1a tx timeout
[  147.983642][ T4289] Bluetooth: hci4: command 0x0c1a tx timeout
[  148.040321][ T5309] afs: Unknown parameter ''
[  148.453718][ T5270] BTRFS error (device loop0): open_ctree failed: -12
[  148.619107][ T5307] infiniband syz1: set active
[  148.654267][ T4413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4413)
[  148.670634][ T5307] infiniband syz1: added bond0
[  148.680138][ T5307] rdma_rxe: unable to create cq
[  149.535225][ T5307] infiniband syz1: Couldn't create ib_mad CQ
[  149.581110][ T5307] infiniband syz1: Couldn't open port 1
[  149.719617][ T5307] RDS/IB: syz1: added
[  149.738404][ T5307] smc: adding ib device syz1 with port count 1
[  149.763309][ T5307] smc:    ib device syz1 port 1 has pnetid 
[  149.832561][ T4682] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  149.853398][ T4289] Bluetooth: hci1: command 0x0406 tx timeout
[  149.931669][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  150.011745][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  150.026459][ T4682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.036936][ T4682] usb 4-1: config 0 interface 0 has no altsetting 0
[  150.046679][ T4682] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  150.056339][ T4682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.065306][ T4682] usb 4-1: Product: syz
[  150.069783][ T4682] usb 4-1: Manufacturer: syz
[  150.074847][ T4682] usb 4-1: SerialNumber: syz
[  150.089302][ T4682] usb 4-1: config 0 descriptor??
[  150.099380][ T4682] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  150.142812][ T4682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  150.165478][ T4682] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  150.191067][ T4682] usb 4-1: media controller created
[  150.216978][ T5324] loop2: detected capacity change from 0 to 32768
[  150.235369][ T4682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  150.267847][ T5324] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.244 (5324)
[  150.327934][ T5324] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  150.347761][ T5324] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  150.380963][ T5324] BTRFS info (device loop2): use zlib compression, level 3
[  150.393466][ T5324] BTRFS info (device loop2): using free space tree
[  150.538918][ T5324] BTRFS info (device loop2): enabling ssd optimizations
[  150.557410][   T26] audit: type=1800 audit(1783191160.915:9): pid=5324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.244" name="file1" dev="loop2" ino=260 res=0 errno=0
[  150.667392][ T4682] DVB: Unable to find symbol tda10046_attach()
[  150.677530][ T4682] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  150.721867][ T4682] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  150.970674][ T4682] dvb_usb_m920x: probe of 4-1:0.0 failed with error -71
[  151.001463][ T4682] usb 4-1: USB disconnect, device number 4
[  152.143112][ T4284] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  152.212548][ T5364] loop4: detected capacity change from 0 to 16
[  152.245656][ T5364] erofs: (device loop4): mounted with root inode @ nid 36.
[  153.625257][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 87 @ nid 36
[  153.634500][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 86 @ nid 36
[  153.644141][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.653559][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 83 @ nid 36
[  153.662641][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.672058][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 82 @ nid 36
[  153.681199][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 79 @ nid 36
[  153.690376][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 78 @ nid 36
[  153.699533][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.708869][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 76 @ nid 36
[  153.717951][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.727281][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 75 @ nid 36
[  153.736469][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 74 @ nid 36
[  153.745874][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 72 @ nid 36
[  153.754926][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 71 @ nid 36
[  153.763978][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 70 @ nid 36
[  153.773443][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 63 @ nid 36
[  153.782544][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 61 @ nid 36
[  153.791627][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.800910][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 59 @ nid 36
[  153.810007][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.819330][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 58 @ nid 36
[  153.828401][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 56 @ nid 36
[  153.837481][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 54 @ nid 36
[  153.846844][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 50 @ nid 36
[  153.855969][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.865333][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 47 @ nid 36
[  153.874593][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.883908][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 46 @ nid 36
[  153.892952][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 45 @ nid 36
[  153.902008][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.911282][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 43 @ nid 36
[  153.920320][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.929629][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 42 @ nid 36
[  153.938904][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.948502][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 41 @ nid 36
[  153.957581][ T5372] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  153.966918][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 40 @ nid 36
[  153.975978][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 39 @ nid 36
[  153.985024][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 38 @ nid 36
[  153.994122][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 36 @ nid 36
[  154.003228][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 31 @ nid 36
[  154.012332][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 26 @ nid 36
[  154.021387][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 24 @ nid 36
[  154.030509][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 19 @ nid 36
[  154.039616][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 13 @ nid 36
[  154.048802][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36
[  154.058032][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 6 @ nid 36
[  154.066993][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 4 @ nid 36
[  154.076038][ T5372] erofs: (device loop4): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  154.085421][ T5372] erofs: (device loop4): z_erofs_readahead: readahead error at page 0 @ nid 36
[  154.094425][ T5372] syz.4.254: attempt to access beyond end of device
[  154.094425][ T5372] loop4: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  154.108149][ T5372] syz.4.254: attempt to access beyond end of device
[  154.108149][ T5372] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  154.122045][ T5372] syz.4.254: attempt to access beyond end of device
[  154.122045][ T5372] loop4: rw=524288, sector=720, nr_sectors = 128 limit=16
[  154.136681][ T5372] syz.4.254: attempt to access beyond end of device
[  154.136681][ T5372] loop4: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  154.151004][ T5372] syz.4.254: attempt to access beyond end of device
[  154.151004][ T5372] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16
[  154.164692][ T5372] syz.4.254: attempt to access beyond end of device
[  154.164692][ T5372] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16
[  154.178114][ T5372] syz.4.254: attempt to access beyond end of device
[  154.178114][ T5372] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  154.533701][ T5387] loop0: detected capacity change from 0 to 1024
[  154.642228][ T5387] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  154.732022][ T5398] device syzkaller0 entered promiscuous mode
[  154.746897][ T5398] tipc: Started in network mode
[  154.756379][ T5398] tipc: Node identity a2a8b92888b7, cluster identity 4711
[  154.766227][ T5398] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.801736][ T5398] tipc: Resetting bearer <eth:syzkaller0>
[  154.918801][ T5395] tipc: Resetting bearer <eth:syzkaller0>
[  155.602777][ T5399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.260'.
[  155.636316][ T5395] tipc: Disabling bearer <eth:syzkaller0>
[  155.644147][ T4271] EXT4-fs (loop0): unmounting filesystem.
[  155.821871][   T41] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  156.212838][   T41] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  156.715212][   T41] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  156.724395][   T41] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  156.734920][   T41] usb 4-1: config 220 has no interface number 2
[  156.742647][   T41] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  156.756298][   T41] usb 4-1: config 220 interface 0 has no altsetting 0
[  156.763546][   T41] usb 4-1: config 220 interface 76 has no altsetting 0
[  156.770436][   T41] usb 4-1: config 220 interface 1 has no altsetting 0
[  156.783412][ T5403] sctp: failed to load transform for md5: -2
[  156.793098][   T41] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  156.802865][   T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.810926][   T41] usb 4-1: Product: syz
[  156.816221][   T41] usb 4-1: Manufacturer: syz
[  156.820846][   T41] usb 4-1: SerialNumber: syz
[  157.031639][ T5376] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  157.100581][   T41] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  157.117372][   T41] usb 4-1: No valid video chain found.
[  157.194167][ T5425] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  157.203227][ T5425] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  157.212574][ T5425] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  157.221369][ T5425] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  157.230797][ T5425] device geneve2 entered promiscuous mode
[  157.295954][   T41] usb 4-1: selecting invalid altsetting 0
[  157.337307][   T41] usb 4-1: selecting invalid altsetting 0
[  157.343255][   T41] usbtest: probe of 4-1:220.1 failed with error -22
[  157.359606][   T41] usb 4-1: USB disconnect, device number 5
[  159.678377][ T5430] loop2: detected capacity change from 0 to 16
[  159.765130][ T5430] erofs: (device loop2): mounted with root inode @ nid 36.
[  159.881640][ T5376] usb 1-1: device not accepting address 6, error -71
[  160.018274][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  160.027437][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  160.036563][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.045868][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  160.054906][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.064213][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  160.073350][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  160.082449][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  160.091490][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.100849][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  160.109915][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.119221][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  160.128330][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  160.137435][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  160.146506][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  160.155583][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  160.164710][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  160.173804][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  160.182882][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.192191][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  160.201211][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.210535][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  160.219613][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  160.228665][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  160.237757][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  160.246860][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.256172][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  160.265218][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.274537][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  160.283615][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  160.292701][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.302046][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  160.311077][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.320386][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  160.329446][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.338770][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  160.347830][ T5435] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  160.357140][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  160.366200][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  160.375269][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  160.384376][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  160.393491][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  160.402611][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  160.411703][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  160.420786][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  160.429917][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  160.439018][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  160.448006][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  160.456977][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  160.466525][ T5435] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  160.475925][ T5435] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  160.484934][ T5435] syz.2.268: attempt to access beyond end of device
[  160.484934][ T5435] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  160.498935][ T5435] syz.2.268: attempt to access beyond end of device
[  160.498935][ T5435] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  160.512859][ T5435] syz.2.268: attempt to access beyond end of device
[  160.512859][ T5435] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  160.526500][ T5435] syz.2.268: attempt to access beyond end of device
[  160.526500][ T5435] loop2: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  160.540799][ T5435] syz.2.268: attempt to access beyond end of device
[  160.540799][ T5435] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[  160.554271][ T5435] syz.2.268: attempt to access beyond end of device
[  160.554271][ T5435] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  160.568703][ T5435] syz.2.268: attempt to access beyond end of device
[  160.568703][ T5435] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  160.822685][ T5446] netem: change failed
[  160.872465][ T5446] device syzkaller0 entered promiscuous mode
[  160.919338][ T5446] tipc: Started in network mode
[  160.982945][ T5446] tipc: Node identity 1ad809d50549, cluster identity 4711
[  160.998584][ T5446] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  161.011652][ T4998] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.059960][ T5446] tipc: Resetting bearer <eth:syzkaller0>
[  161.108239][ T5444] tipc: Resetting bearer <eth:syzkaller0>
[  161.184529][ T5444] tipc: Disabling bearer <eth:syzkaller0>
[  161.221697][ T4998] usb 4-1: Using ep0 maxpacket: 16
[  161.235547][ T4998] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  161.306528][ T4998] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.325645][ T5462] loop2: detected capacity change from 0 to 8
[  161.352449][ T4998] usb 4-1: Product: syz
[  161.391608][ T4998] usb 4-1: Manufacturer: syz
[  161.396270][ T4998] usb 4-1: SerialNumber: syz
[  162.266039][ T4998] usb 4-1: config 0 descriptor??
[  162.744718][ T4998] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  162.772668][ T4998] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  162.797061][ T4998] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  162.818871][ T4998] usb 4-1: media controller created
[  162.839823][ T4998] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  162.945160][ T4998] zl10353_read_register: readreg error (reg=127, ret==0)
[  162.973102][ T4998] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  162.981071][ T4998] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  163.015366][ T4998] usb 4-1: USB disconnect, device number 6
[  163.023242][ T5002] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  163.172493][ T5476] loop4: detected capacity change from 0 to 32768
[  163.204115][ T4998] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  163.225451][ T5478] loop2: detected capacity change from 0 to 16
[  163.238905][ T5476] (syz.4.285,5476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.252596][ T5476] (syz.4.285,5476,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.291661][ T5002] usb 1-1: Using ep0 maxpacket: 32
[  163.298743][ T5002] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.314826][ T5476] JBD2: Ignoring recovery information on journal
[  163.333621][ T5002] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.342790][ T5478] erofs: (device loop2): mounted with root inode @ nid 36.
[  163.348272][ T5002] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  163.363985][ T5002] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  163.374271][ T5476] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  163.405348][   T26] audit: type=1804 audit(1783191173.765:10): pid=5476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.285" name="/newroot/70/file0/file1" dev="loop4" ino=16978 res=1 errno=0
[  163.530003][ T5002] usb 1-1: Product: syz
[  163.534583][ T5002] usb 1-1: Manufacturer: syz
[  163.582548][ T5002] hub 1-1:4.0: USB hub found
[  163.593242][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  163.602390][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  163.611494][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.620861][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  163.629992][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.639334][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  163.648538][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  163.657616][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  163.666801][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.676880][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  163.686043][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.695438][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  163.704597][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  163.713714][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  163.722855][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  163.731952][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  163.741125][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  163.750282][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  163.759387][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.768778][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  163.777883][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.787833][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  163.796954][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  163.806101][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  163.815257][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  163.824380][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.833724][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  163.842838][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.852218][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  163.861270][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  163.870419][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.879780][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  163.889463][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.898840][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  163.907970][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.917342][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  163.926443][ T5481] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  163.935774][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  163.944886][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  163.954006][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  163.963149][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  163.972325][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  163.981433][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  163.991138][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  164.000354][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  164.009568][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  164.018694][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  164.027724][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  164.036727][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  164.046876][ T5481] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  164.056367][ T5481] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  164.065693][ T5481] syz.2.286: attempt to access beyond end of device
[  164.065693][ T5481] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  164.079386][ T5481] syz.2.286: attempt to access beyond end of device
[  164.079386][ T5481] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  164.093769][ T5481] syz.2.286: attempt to access beyond end of device
[  164.093769][ T5481] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  164.161240][ T5002] hub 1-1:4.0: 2 ports detected
[  164.742939][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  164.859011][   T26] audit: type=1326 audit(1783191175.215:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  164.973459][   T26] audit: type=1326 audit(1783191175.215:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.070057][   T26] audit: type=1326 audit(1783191175.215:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.188537][   T26] audit: type=1326 audit(1783191175.215:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.304860][   T26] audit: type=1326 audit(1783191175.215:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.411707][   T26] audit: type=1326 audit(1783191175.215:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.437915][ T5002] hub 1-1:4.0: activate --> -90
[  165.494508][   T26] audit: type=1326 audit(1783191175.215:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.538288][   T26] audit: type=1326 audit(1783191175.215:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5486 comm="syz.2.288" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  165.856589][ T5006] usb 1-1: USB disconnect, device number 8
[  165.873526][ T5002] usb 1-1-port2: config error
[  166.638155][ T5510] loop2: detected capacity change from 0 to 16
[  166.689890][ T5510] erofs: (device loop2): mounted with root inode @ nid 36.
[  166.950534][ T5487] loop4: detected capacity change from 0 to 32768
[  166.982781][ T5487] (syz.4.289,5487,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  166.999670][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  167.008888][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  167.018589][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.028016][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  167.037670][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.047044][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  167.057105][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  167.063387][ T5487] (syz.4.289,5487,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  167.066268][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  167.088656][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.098045][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  167.107183][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.116555][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  167.125717][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  167.134893][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  167.144030][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  167.153260][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  167.163320][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  167.172575][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  167.181698][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.185939][ T5487] JBD2: Ignoring recovery information on journal
[  167.190977][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  167.191002][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.191016][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  167.191051][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  167.234695][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  167.243905][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  167.253043][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.263296][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  167.272544][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.282002][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  167.291069][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  167.300452][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.309954][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  167.319075][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.328494][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  167.337629][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.347047][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  167.356149][ T5516] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  167.366373][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  167.375606][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  167.384750][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  167.393998][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  167.403318][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  167.412555][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  167.421733][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  167.430888][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  167.440184][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  167.449413][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  167.458892][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  167.468609][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  167.477800][ T5516] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  167.487273][ T5516] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  167.496358][ T5516] bio_check_eod: 4 callbacks suppressed
[  167.496372][ T5516] syz.2.298: attempt to access beyond end of device
[  167.496372][ T5516] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  167.517243][ T5516] syz.2.298: attempt to access beyond end of device
[  167.517243][ T5516] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  167.531325][ T5516] syz.2.298: attempt to access beyond end of device
[  167.531325][ T5516] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  167.545085][ T5516] syz.2.298: attempt to access beyond end of device
[  167.545085][ T5516] loop2: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  167.559465][ T5516] syz.2.298: attempt to access beyond end of device
[  167.559465][ T5516] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[  167.572964][ T5516] syz.2.298: attempt to access beyond end of device
[  167.572964][ T5516] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  167.586478][ T5516] syz.2.298: attempt to access beyond end of device
[  167.586478][ T5516] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  167.707314][ T5487] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  167.851853][ T5006] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  168.657760][ T4273] ocfs2: Unmounting device (7,4) on (node local)
[  168.772132][ T5006] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  168.793462][ T5006] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  168.810649][ T5006] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  168.821935][ T5006] usb 1-1: config 220 has no interface number 2
[  168.828260][ T5006] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  168.842001][ T5006] usb 1-1: config 220 interface 0 has no altsetting 0
[  168.848809][ T5006] usb 1-1: config 220 interface 76 has no altsetting 0
[  168.861867][ T5006] usb 1-1: config 220 interface 1 has no altsetting 0
[  168.906855][ T5006] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  168.961687][ T5006] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.980189][ T5006] usb 1-1: Product: syz
[  168.990356][ T5006] usb 1-1: Manufacturer: syz
[  169.000523][ T5006] usb 1-1: SerialNumber: syz
[  169.258854][ T5006] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  169.271722][ T5006] usb 1-1: No valid video chain found.
[  169.289637][ T5006] usb 1-1: selecting invalid altsetting 0
[  169.399070][ T5006] usb 1-1: selecting invalid altsetting 0
[  169.405639][ T5006] usbtest: probe of 1-1:220.1 failed with error -22
[  169.434337][ T5006] usb 1-1: USB disconnect, device number 9
[  169.592111][ T4339] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  169.839104][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.876179][ T4339] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  169.902107][ T5554] loop1: detected capacity change from 0 to 2048
[  169.958075][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.964823][ T5554]  loop1: p2 p3 p7
[  170.007335][ T4339] usb 3-1: config 0 descriptor??
[  170.081175][ T5557] tmpfs: Unknown parameter '/dev/media#'
[  170.271250][ T3637]  loop1: p2 p3 p7
[  170.536765][ T4339] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor
[  170.841467][ T5559] loop0: detected capacity change from 0 to 16
[  170.842294][ T4339] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0005/input/input6
[  170.881429][ T5559] erofs: (device loop0): mounted with root inode @ nid 36.
[  170.882278][ T4274] __loop_clr_fd: partition scan of loop1 failed (rc=-16)
[  170.899362][ T4413] I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.924697][ T4406] I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.939076][ T5050] I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  170.991855][ T4413] I/O error, dev loop1, sector 608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.001988][ T4406] I/O error, dev loop1, sector 208 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.011328][ T4406] Buffer I/O error on dev loop1p3, logical block 8, async page read
[  171.020059][ T5050] I/O error, dev loop1, sector 408 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.041669][ T4413] Buffer I/O error on dev loop1p2, logical block 8, async page read
[  171.060976][ T5050] Buffer I/O error on dev loop1p7, logical block 8, async page read
[  171.129729][ T4406] I/O error, dev loop1, sector 209 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.199887][ T4406] Buffer I/O error on dev loop1p3, logical block 9, async page read
[  171.222639][ T5050] I/O error, dev loop1, sector 409 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.232578][ T5050] Buffer I/O error on dev loop1p7, logical block 9, async page read
[  171.240687][ T5050] I/O error, dev loop1, sector 410 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.250189][ T5050] Buffer I/O error on dev loop1p7, logical block 10, async page read
[  171.267297][ T4413] I/O error, dev loop1, sector 609 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  171.271654][ T5050] Buffer I/O error on dev loop1p7, logical block 11, async page read
[  171.284976][ T4406] Buffer I/O error on dev loop1p3, logical block 10, async page read
[  171.294786][ T4413] Buffer I/O error on dev loop1p2, logical block 9, async page read
[  171.306626][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36
[  171.315902][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36
[  171.325146][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.334582][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36
[  171.343728][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.353227][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36
[  171.363254][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36
[  171.372868][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36
[  171.382093][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.392341][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36
[  171.401390][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.410804][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36
[  171.415454][ T5050] Buffer I/O error on dev loop1p7, logical block 12, async page read
[  171.419931][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36
[  171.437170][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36
[  171.446314][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36
[  171.455469][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36
[  171.465569][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36
[  171.474754][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36
[  171.483903][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.493279][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36
[  171.502400][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.511833][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36
[  171.520978][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36
[  171.530175][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36
[  171.539532][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36
[  171.548725][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.558156][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36
[  171.567679][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.577037][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36
[  171.586151][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36
[  171.595339][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.604731][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 43 @ nid 36
[  171.614053][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.623418][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36
[  171.632511][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.641867][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36
[  171.651791][ T5566] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  171.661677][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36
[  171.670871][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36
[  171.679957][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36
[  171.689206][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 36 @ nid 36
[  171.698410][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36
[  171.707602][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36
[  171.716746][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36
[  171.725933][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 19 @ nid 36
[  171.735771][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36
[  171.744975][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36
[  171.754051][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 36
[  171.763081][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36
[  171.772276][ T5566] erofs: (device loop0): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  171.781708][ T5566] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[  171.783753][ T4406] udevd[4406]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  171.790706][ T5566] syz.0.316: attempt to access beyond end of device
[  171.790706][ T5566] loop0: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  171.804538][ T5050] udevd[5050]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  171.814149][ T5566] syz.0.316: attempt to access beyond end of device
[  171.814149][ T5566] loop0: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  171.837989][ T5566] syz.0.316: attempt to access beyond end of device
[  171.837989][ T5566] loop0: rw=524288, sector=720, nr_sectors = 128 limit=16
[  171.899861][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  171.950231][ T4339] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[  171.968006][ T4339] usb 3-1: USB disconnect, device number 2
[  172.122134][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  172.135090][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  172.173775][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  172.213554][ T4350] udevd[4350]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  172.214237][ T4392] udevd[4392]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  172.235562][   T26] audit: type=1326 audit(1783191182.595:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  172.272725][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  172.303268][ T5584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.323'.
[  172.419184][ T5579] fido_id[5579]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  172.545389][ T5590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'.
[  172.709222][ T5594] loop2: detected capacity change from 0 to 32768
[  172.718005][   T26] audit: type=1326 audit(1783191182.625:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  172.744729][ T5594] (syz.2.327,5594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  172.758337][ T5594] (syz.2.327,5594,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  172.781739][   T26] audit: type=1326 audit(1783191182.625:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  172.811153][   T26] audit: type=1326 audit(1783191182.685:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  172.848401][ T5594] JBD2: Ignoring recovery information on journal
[  172.870203][ T5594] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.371764][   T26] audit: type=1326 audit(1783191182.685:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  173.397467][   T26] audit: type=1326 audit(1783191182.685:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  173.449218][ T4413] udevd[4413]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  173.501678][   T26] audit: type=1326 audit(1783191182.685:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  173.612063][ T5565] loop4: detected capacity change from 0 to 32768
[  173.685725][ T5565] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.319 (5565)
[  173.721728][   T26] audit: type=1326 audit(1783191182.685:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5581 comm="syz.2.324" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fb47e39de59 code=0x7ffc0000
[  173.970121][   T26] audit: type=1804 audit(1783191183.255:27): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.327" name="/newroot/49/file0/file1" dev="loop2" ino=16978 res=1 errno=0
[  174.256195][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  175.239168][ T5624] tmpfs: Unknown parameter '/dev/media#'
[  175.259354][ T5629] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  176.057202][ T5649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'.
[  176.939977][ T5652] loop2: detected capacity change from 0 to 32768
[  176.957375][ T5652] (syz.2.341,5652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.971134][ T5652] (syz.2.341,5652,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  177.008131][ T5652] JBD2: Ignoring recovery information on journal
[  177.030504][ T5652] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  177.065283][   T26] audit: type=1804 audit(1783191187.425:28): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.341" name="/newroot/52/file0/file1" dev="loop2" ino=16978 res=1 errno=0
[  179.703787][ T4284] ocfs2: Unmounting device (7,2) on (node local)
[  179.847069][ T5682] netem: change failed
[  179.862929][ T5682] device syzkaller0 entered promiscuous mode
[  179.888339][ T5682] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  179.915994][ T5680] tipc: Resetting bearer <eth:syzkaller0>
[  180.001878][ T5001] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  180.148050][ T5680] tipc: Disabling bearer <eth:syzkaller0>
[  180.216208][ T5001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.264653][ T5001] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.355719][ T5001] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  180.416825][ T5001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.485437][ T5001] usb 4-1: config 0 descriptor??
[  180.617210][ T5689] tmpfs: Unknown parameter '/dev/media#'
[  181.506512][ T5694] netlink: 16 bytes leftover after parsing attributes in process `syz.1.354'.
[  181.834809][ T5001] usb 4-1: string descriptor 0 read error: -22
[  182.343220][ T5693] loop4: detected capacity change from 0 to 4096
[  182.350517][ T5693] EXT4-fs: Ignoring removed orlov option
[  182.353810][ T5001] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0006/input/input7
[  182.413887][ T5693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  182.431225][ T5702] loop2: detected capacity change from 0 to 16
[  182.492620][ T5001] uclogic 0003:256C:006D.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input0
[  182.507426][ T5702] erofs: (device loop2): mounted with root inode @ nid 36.
[  182.677846][ T4998] usb 4-1: USB disconnect, device number 7
[  183.647776][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36
[  183.656891][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36
[  183.666026][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.675541][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36
[  183.684968][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.694405][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36
[  183.704315][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36
[  183.713372][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36
[  183.724291][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.733623][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36
[  183.742656][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.752234][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36
[  183.763209][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36
[  183.772549][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36
[  183.781894][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36
[  183.791102][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36
[  183.800495][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36
[  183.809819][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36
[  183.819254][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.828798][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36
[  183.838087][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.847623][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36
[  183.856909][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36
[  183.866216][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36
[  183.875519][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36
[  183.884787][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.894128][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36
[  183.903378][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.912894][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36
[  183.922153][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36
[  183.931372][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.941088][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 43 @ nid 36
[  183.950307][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.959818][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36
[  183.969044][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.978526][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36
[  183.988016][ T5709] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36
[  183.997490][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36
[  184.006719][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36
[  184.015759][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36
[  184.025042][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 36 @ nid 36
[  184.034357][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36
[  184.043674][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36
[  184.052966][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36
[  184.062301][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 19 @ nid 36
[  184.073400][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36
[  184.082763][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36
[  184.092345][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 6 @ nid 36
[  184.101561][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36
[  184.111178][ T5709] erofs: (device loop2): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36
[  184.120781][ T5709] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36
[  184.129970][ T5709] bio_check_eod: 4 callbacks suppressed
[  184.129978][ T5709] syz.2.355: attempt to access beyond end of device
[  184.129978][ T5709] loop2: rw=524288, sector=16392, nr_sectors = 16 limit=16
[  184.149495][ T5709] syz.2.355: attempt to access beyond end of device
[  184.149495][ T5709] loop2: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  184.163646][ T5709] syz.2.355: attempt to access beyond end of device
[  184.163646][ T5709] loop2: rw=524288, sector=720, nr_sectors = 128 limit=16
[  184.211706][ T5709] syz.2.355: attempt to access beyond end of device
[  184.211706][ T5709] loop2: rw=524288, sector=13478624032, nr_sectors = 128 limit=16
[  184.227397][ T5709] syz.2.355: attempt to access beyond end of device
[  184.227397][ T5709] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16
[  184.241215][ T5709] syz.2.355: attempt to access beyond end of device
[  184.241215][ T5709] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16
[  184.254892][ T5709] syz.2.355: attempt to access beyond end of device
[  184.254892][ T5709] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16
[  184.684517][ T5708] loop0: detected capacity change from 0 to 32768
[  184.699849][ T5708] (syz.0.357,5708,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.713392][ T5708] (syz.0.357,5708,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  184.811117][ T5708] JBD2: Ignoring recovery information on journal
[  184.885466][ T5708] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  184.916118][   T26] audit: type=1804 audit(1783191195.275:29): pid=5708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.357" name="/newroot/78/file0/file1" dev="loop0" ino=16978 res=1 errno=0
[  185.142595][ T5707] 
[  185.144978][ T5707] ======================================================
[  185.152004][ T5707] WARNING: possible circular locking dependency detected
[  185.159056][ T5707] syzkaller #0 Not tainted
[  185.163480][ T5707] ------------------------------------------------------
[  185.170506][ T5707] syz.4.353/5707 is trying to acquire lock:
[  185.176412][ T5707] ffff8880508220a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  185.185333][ T5707] 
[  185.185333][ T5707] but task is already holding lock:
[  185.192705][ T5707] ffff8880560520a0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  185.202052][ T5707] 
[  185.202052][ T5707] which lock already depends on the new lock.
[  185.202052][ T5707] 
[  185.212466][ T5707] 
[  185.212466][ T5707] the existing dependency chain (in reverse order) is:
[  185.221496][ T5707] 
[  185.221496][ T5707] -> #5 (&ei->i_data_sem){++++}-{3:3}:
[  185.229167][ T5707]        down_read+0x42/0x2d0
[  185.233866][ T5707]        ext4_map_blocks+0x338/0x1a90
[  185.239281][ T5707]        ext4_append+0x22d/0x560
[  185.244251][ T5707]        ext4_init_new_dir+0x2b8/0x550
[  185.249744][ T5707]        ext4_mkdir+0x4c3/0xc90
[  185.254622][ T5707]        vfs_mkdir+0x386/0x570
[  185.259416][ T5707]        do_mkdirat+0x1d8/0x440
[  185.264289][ T5707]        __x64_sys_mkdir+0x6a/0x80
[  185.269428][ T5707]        do_syscall_64+0x4c/0xa0
[  185.274399][ T5707]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.280838][ T5707] 
[  185.280838][ T5707] -> #4 (jbd2_handle){++++}-{0:0}:
[  185.288160][ T5707]        wait_transaction_locked+0x1bf/0x270
[  185.294165][ T5707]        start_this_handle+0x7e7/0x2240
[  185.299736][ T5707]        jbd2__journal_start+0x2b7/0x5a0
[  185.305400][ T5707]        jbd2_journal_start+0x26/0x30
[  185.310797][ T5707]        ocfs2_start_trans+0x3b0/0x6f0
[  185.316284][ T5707]        ocfs2_release_dquot+0x474/0xbf0
[  185.321943][ T5707]        quota_release_workfn+0x361/0x5e0
[  185.327697][ T5707]        process_one_work+0x8ab/0x1160
[  185.332530][ T5715] fido_id[5715]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  185.333203][ T5707]        worker_thread+0xaf5/0x12a0
[  185.333229][ T5707]        kthread+0x29d/0x330
[  185.357160][ T5707]        ret_from_fork+0x1f/0x30
[  185.362122][ T5707] 
[  185.362122][ T5707] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  185.370653][ T5707]        down_read+0x42/0x2d0
[  185.375348][ T5707]        ocfs2_start_trans+0x3a4/0x6f0
[  185.380841][ T5707]        ocfs2_modify_bh+0xe0/0x4c0
[  185.386067][ T5707]        ocfs2_local_read_info+0x1499/0x1820
[  185.392075][ T5707]        dquot_load_quota_sb+0x72f/0xa80
[  185.397735][ T5707]        dquot_load_quota_inode+0x2d3/0x5c0
[  185.403645][ T5707]        ocfs2_enable_quotas+0x1c0/0x4a0
[  185.409288][ T5707]        ocfs2_fill_super+0x434e/0x5020
[  185.414915][ T5707]        mount_bdev+0x28a/0x3c0
[  185.419771][ T5707]        legacy_get_tree+0xe6/0x180
[  185.424966][ T5707]        vfs_get_tree+0x88/0x270
[  185.429891][ T5707]        do_new_mount+0x247/0xa40
[  185.434902][ T5707]        __se_sys_mount+0x2e3/0x3d0
[  185.440091][ T5707]        do_syscall_64+0x4c/0xa0
[  185.445017][ T5707]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.451419][ T5707] 
[  185.451419][ T5707] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  185.458909][ T5707]        ocfs2_start_trans+0x2a5/0x6f0
[  185.464370][ T5707]        ocfs2_acquire_dquot+0x69a/0xb80
[  185.469991][ T5707]        dqget+0x713/0xbb0
[  185.474420][ T5707]        __dquot_initialize+0x3a9/0xd00
[  185.479951][ T5707]        ocfs2_get_init_inode+0x144/0x1b0
[  185.485658][ T5707]        ocfs2_mknod+0xb90/0x2580
[  185.490670][ T5707]        ocfs2_create+0x1b6/0x4b0
[  185.495682][ T5707]        path_openat+0x11b9/0x2f10
[  185.500778][ T5707]        do_filp_open+0x1ee/0x420
[  185.505787][ T5707]        do_sys_openat2+0x14b/0x4f0
[  185.510980][ T5707]        __x64_sys_openat+0x135/0x160
[  185.516357][ T5707]        do_syscall_64+0x4c/0xa0
[  185.521281][ T5707]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.527697][ T5707] 
[  185.527697][ T5707] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  185.536566][ T5707]        down_write+0x36/0x60
[  185.541230][ T5707]        ocfs2_create_local_dquot+0x19a/0x1900
[  185.547567][ T5707]        ocfs2_acquire_dquot+0x7e6/0xb80
[  185.553208][ T5707]        dqget+0x713/0xbb0
[  185.557635][ T5707]        __dquot_initialize+0x3a9/0xd00
[  185.563173][ T5707]        ocfs2_get_init_inode+0x144/0x1b0
[  185.568888][ T5707]        ocfs2_mknod+0xb90/0x2580
[  185.573989][ T5707]        ocfs2_create+0x1b6/0x4b0
[  185.579037][ T5707]        path_openat+0x11b9/0x2f10
[  185.584172][ T5707]        do_filp_open+0x1ee/0x420
[  185.589213][ T5707]        do_sys_openat2+0x14b/0x4f0
[  185.594416][ T5707]        __x64_sys_openat+0x135/0x160
[  185.599779][ T5707]        do_syscall_64+0x4c/0xa0
[  185.604719][ T5707]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.611157][ T5707] 
[  185.611157][ T5707] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  185.618818][ T5707]        __lock_acquire+0x2d18/0x7c40
[  185.624184][ T5707]        lock_acquire+0x1bb/0x4a0
[  185.629196][ T5707]        __mutex_lock+0x12d/0xae0
[  185.634226][ T5707]        dquot_commit+0x5a/0x410
[  185.639157][ T5707]        ext4_write_dquot+0x1f0/0x360
[  185.644519][ T5707]        mark_all_dquot_dirty+0xf9/0x400
[  185.650143][ T5707]        __dquot_alloc_space+0x5f6/0xe50
[  185.655760][ T5707]        ext4_mb_new_blocks+0xf55/0x44d0
[  185.661430][ T5707]        ext4_ext_map_blocks+0x18d1/0x6640
[  185.667226][ T5707]        ext4_map_blocks+0x9d7/0x1a90
[  185.672587][ T5707]        ext4_getblk+0x1c5/0x720
[  185.677508][ T5707]        ext4_bread+0x26/0x170
[  185.682281][ T5707]        ext4_append+0x2bb/0x560
[  185.687207][ T5707]        ext4_init_new_dir+0x2b8/0x550
[  185.692741][ T5707]        ext4_mkdir+0x4c3/0xc90
[  185.697581][ T5707]        vfs_mkdir+0x386/0x570
[  185.702325][ T5707]        do_mkdirat+0x1d8/0x440
[  185.707159][ T5707]        __x64_sys_mkdirat+0x85/0x90
[  185.712425][ T5707]        do_syscall_64+0x4c/0xa0
[  185.717348][ T5707]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.723743][ T5707] 
[  185.723743][ T5707] other info that might help us debug this:
[  185.723743][ T5707] 
[  185.733958][ T5707] Chain exists of:
[  185.733958][ T5707]   &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem
[  185.733958][ T5707] 
[  185.746625][ T5707]  Possible unsafe locking scenario:
[  185.746625][ T5707] 
[  185.754056][ T5707]        CPU0                    CPU1
[  185.759407][ T5707]        ----                    ----
[  185.764753][ T5707]   lock(&ei->i_data_sem);
[  185.769175][ T5707]                                lock(jbd2_handle);
[  185.775745][ T5707]                                lock(&ei->i_data_sem);
[  185.782663][ T5707]   lock(&dquot->dq_lock);
[  185.787066][ T5707] 
[  185.787066][ T5707]  *** DEADLOCK ***
[  185.787066][ T5707] 
[  185.795200][ T5707] 4 locks held by syz.4.353/5707:
[  185.800205][ T5707]  #0: ffff888040a98460 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  185.809341][ T5707]  #1: ffff888056342c20 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x20b/0x450
[  185.819945][ T5707]  #2: ffff8880560520a0 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x914/0x1a90
[  185.829718][ T5707]  #3: ffffffff8cc74e68 (dquot_srcu){....}-{0:0}, at: __dquot_alloc_space+0x16e/0xe50
[  185.839275][ T5707] 
[  185.839275][ T5707] stack backtrace:
[  185.845168][ T5707] CPU: 1 PID: 5707 Comm: syz.4.353 Not tainted syzkaller #0
[  185.852435][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  185.862575][ T5707] Call Trace:
[  185.865837][ T5707]  <TASK>
[  185.868752][ T5707]  dump_stack_lvl+0x188/0x24e
[  185.873444][ T5707]  ? load_image+0x410/0x410
[  185.877932][ T5707]  ? show_regs_print_info+0x12/0x12
[  185.883117][ T5707]  ? print_circular_bug+0x12b/0x1a0
[  185.888305][ T5707]  check_noncircular+0x296/0x330
[  185.893235][ T5707]  ? add_chain_block+0x9b0/0x9b0
[  185.898184][ T5707]  ? lockdep_lock+0xf1/0x1f0
[  185.902764][ T5707]  ? _find_first_zero_bit+0xd2/0x100
[  185.908036][ T5707]  __lock_acquire+0x2d18/0x7c40
[  185.912894][ T5707]  ? __bfs+0x27a/0x560
[  185.916961][ T5707]  ? add_chain_block+0x9b0/0x9b0
[  185.921915][ T5707]  ? lockdep_lock+0xf1/0x1f0
[  185.926492][ T5707]  ? verify_lock_unused+0x140/0x140
[  185.931672][ T5707]  ? lockdep_unlock+0x142/0x2e0
[  185.936527][ T5707]  ? mark_lock+0x94/0x320
[  185.940840][ T5707]  ? __lock_acquire+0x1465/0x7c40
[  185.945849][ T5707]  lock_acquire+0x1bb/0x4a0
[  185.950337][ T5707]  ? dquot_commit+0x5a/0x410
[  185.954916][ T5707]  ? __might_sleep+0xd0/0xd0
[  185.959494][ T5707]  ? read_lock_is_recursive+0x10/0x10
[  185.964858][ T5707]  __mutex_lock+0x12d/0xae0
[  185.969378][ T5707]  ? dquot_commit+0x5a/0x410
[  185.973963][ T5707]  ? __might_sleep+0xd0/0xd0
[  185.978551][ T5707]  ? dquot_commit+0x5a/0x410
[  185.983129][ T5707]  ? mutex_lock_nested+0x10/0x10
[  185.988081][ T5707]  ? ext4_journal_check_start+0x17d/0x240
[  185.993788][ T5707]  dquot_commit+0x5a/0x410
[  185.998192][ T5707]  ext4_write_dquot+0x1f0/0x360
[  186.003040][ T5707]  mark_all_dquot_dirty+0xf9/0x400
[  186.008144][ T5707]  __dquot_alloc_space+0x5f6/0xe50
[  186.013244][ T5707]  ? __dquot_alloc_space+0x16e/0xe50
[  186.018538][ T5707]  ext4_mb_new_blocks+0xf55/0x44d0
[  186.023641][ T5707]  ? ext4_find_extent+0x372/0xde0
[  186.028659][ T5707]  ? rcu_is_watching+0x11/0xa0
[  186.033441][ T5707]  ? memset+0x1e/0x40
[  186.037419][ T5707]  ? ext4_mb_pa_callback+0xd0/0xd0
[  186.042537][ T5707]  ? ext4_inode_to_goal_block+0x313/0x450
[  186.048245][ T5707]  ext4_ext_map_blocks+0x18d1/0x6640
[  186.053542][ T5707]  ? ext4_ext_release+0x10/0x10
[  186.058410][ T5707]  ? rwsem_write_trylock+0x135/0x1c0
[  186.063720][ T5707]  ? ext4_es_lookup_extent+0x638/0xb00
[  186.069211][ T5707]  ext4_map_blocks+0x9d7/0x1a90
[  186.074097][ T5707]  ? ext4_issue_zeroout+0x250/0x250
[  186.079352][ T5707]  ext4_getblk+0x1c5/0x720
[  186.083810][ T5707]  ? ext4_get_block_unwritten+0x100/0x100
[  186.089525][ T5707]  ? __ext4_new_inode+0x326d/0x3b50
[  186.094718][ T5707]  ext4_bread+0x26/0x170
[  186.098946][ T5707]  ext4_append+0x2bb/0x560
[  186.103354][ T5707]  ? ext4_init_new_dir+0x550/0x550
[  186.108455][ T5707]  ? dquot_initialize+0x20/0x20
[  186.113289][ T5707]  ext4_init_new_dir+0x2b8/0x550
[  186.118219][ T5707]  ext4_mkdir+0x4c3/0xc90
[  186.122535][ T5707]  ? ext4_symlink+0x940/0x940
[  186.127196][ T5707]  ? inode_permission+0xef/0x480
[  186.132120][ T5707]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  186.137127][ T5707]  ? security_inode_mkdir+0xb3/0x100
[  186.142393][ T5707]  vfs_mkdir+0x386/0x570
[  186.146639][ T5707]  do_mkdirat+0x1d8/0x440
[  186.150949][ T5707]  ? vfs_mkdir+0x570/0x570
[  186.155346][ T5707]  __x64_sys_mkdirat+0x85/0x90
[  186.160096][ T5707]  do_syscall_64+0x4c/0xa0
[  186.164501][ T5707]  ? clear_bhb_loop+0x60/0xb0
[  186.169164][ T5707]  ? clear_bhb_loop+0x60/0xb0
[  186.173841][ T5707]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.179746][ T5707] RIP: 0033:0x7f535919de59
[  186.184148][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  186.203748][ T5707] RSP: 002b:00007f5359f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  186.212153][ T5707] RAX: ffffffffffffffda RBX: 00007f5359426090 RCX: 00007f535919de59
[  186.220111][ T5707] RDX: 00000000000001c2 RSI: 0000200000000540 RDI: ffffffffffffff9c
[  186.228070][ T5707] RBP: 00007f5359233e6f R08: 0000000000000000 R09: 0000000000000000
[  186.236024][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  186.243979][ T5707] R13: 00007f5359426128 R14: 00007f5359426090 R15: 00007ffd1a010988
[  186.251943][ T5707]  </TASK>
[  186.371673][ T5375] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  186.795441][ T4271] ocfs2: Unmounting device (7,0) on (node local)
[  186.851660][ T5375] usb 4-1: Using ep0 maxpacket: 32
[  186.860655][ T5375] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  186.871937][ T5375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.887530][ T5375] usb 4-1: selecting invalid altsetting 3
[  186.894073][ T5375] comedi comedi5: could not set alternate setting 3 in high speed
[  186.903032][ T5375] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  186.914862][ T5375] usbduxsigma: probe of 4-1:128.0 failed with error -22
[  187.098537][ T5375] usb 4-1: USB disconnect, device number 8
[  187.737607][ T5713] Set syz1 is full, maxelem 65536 reached
[  187.785986][ T4273] EXT4-fs (loop4): unmounting filesystem.
[  191.211655][ T4283] Bluetooth: hci1: command 0x0406 tx timeout
[  191.211665][ T4289] Bluetooth: hci3: command 0x0406 tx timeout
[  191.211685][ T4289] Bluetooth: hci4: command 0x0406 tx timeout
[  194.255050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.261377][ T1277] ieee802154 phy1 wpan1: encryption failed: -22