last executing test programs:

57.791734229s ago: executing program 3 (id=893):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000b80)="44cc0261a80e92e3f7e365a895f5e7bcb61e5c1e97532d48c275e1ff8103516158093605ede492a0845cac087b554db092bb1dd27cd6ada633e029e0b816208a5d19d92cce0dd077fec18fef5d37b9c46bde76a5a5f4016856b20fc1e6a4c25c608aa59069e64fdfac0eddadc39af12b3e0f08059740199709a64939b873e6ca4e7326aed63a92cb0403c3588433e06f1058cb212c4e4b18d455a1a98406f43d2402811a19d7dca988ac98072fb4868ddecbde11a4fa47938d3db352daf011916fa57a9682914bab30b04a123455f47b7e2a2334c54b4595ff12d29e5fcd7cddedb0d2e66601e2d215219fbca3f3cb2ebd49dcce1b4e629f603054513f205d25b58d08ab84bd03357d4efe9af374770017058eb3341858ce60553df91e81a14f1f8eb37423f435d4129ac7f426eacf703e6fde4a70ad619cb33a7056e34b47d096213250cdd02a7e05c8b98dc099785eaa092595def6f396911ca2e18e59e99a00e841efb24d038029be71d5fe2a1c0b20f8afbfa9cd882fd24f5b7903414d41eae5e117e793ff2efbea4252e2246ac487dd06d54871c23dcad45312f53ff2de304f2b2e2a94b6cdc69684d383307b1b037d68e3cb7b1d6952b5a0b24b93055d5b905b347a46a384441706eb98d097462184795228e10b2511387194f8bc9457bd8041e420c5f7db0d74cf22867ff63c0076195adc0b2a631daf439959a2695906fc2e1e9216105009e661226702cd6913ac6aa1aa284e9262585d353a58c5d3d7a31695ef2c55d3e6770ace1f73d9c79c470b697444224121241c0bebb52263fba6441ac3219186dd7c1fa7b9eae8d04a012a013f7ae7bf741b1a3cc26deebc2bad6acda471d9ea79f6c437d775169fb85d06d942e095c6f60bbdf2d9508c741457fe9da43b6e0c8b7f58d7ce51f2dffd08b75dee9539330e24cbfb6802afc7dd6009d5e218e8c0ff59c4b14aae045ebca6f5d1222bfd0c80d5586a77468ddca6a80dd2c91b5ac9782f63644d3dbf436d6495f37494deac2b8d51be5f7e9be6b94732508cbbac1029d590f5c7d92ba4b089a26d336bddcc30ae1e53287bbc1b3e82903231b9b4b20fb6b7734de02f4825e50dd218daa99e8ebc383c1378933d0e8e42ed32f5d47f43ac6a918b2fd344fefbd7dbe034c254e5b915699c9c51c6786f2d716a56163862c1e0bfffb7e3e0add774606825c1f1b731cd5fc816109d5e52adaebf42b0640d73b50eb13a6d05c2b9609fe6fc3f3a3fb7efe3b979c4352e6bd12ace78b5a861bdffe3dda8c0cae3f2a26f4a06d82147fbd53b22152189013058852d18133efcc8b18b94e1605ad103f6e8cbd6af7adda13b520a33490446fe96a81e26ac26caf1ab57959351aed55567b69f524b2d19d3a867a59a7fa9294e7c7d8674c2da976edf33e3c94323c3c01d7bc14ff977e47de88535bab75cf4dcb7cc02e939a362b581a184a496bf98a6655cad4f220768b0690306533e8ad881198819bb5fedb694a8d00cabbfb5c188e06bce3e1be5b8b440634d1f8790c43fe0f8a0d810cfc9b5db9ce892d8523d91ca097d95b934e7a65a3a626810eadcdbf607767976cbd719543561957f2449c9f457d70ed512bc6ba8f066760d44a8d94e4fcb3ccf26b149850f579241617c39d5456ef1bad7cc7dc8ea99ff0cbb71280c6591db8db59d66a38e250ae66b8a2c3298ff15d78859160474f8829e8c073bd09a59a4c12970a2d912c720d302614dd8d888b4eca23288e385a721086505d3f30bf20d5ed6ac71aa76b8987a7db2e0ab6a12c0a7d1ff6269483692912083cc95ff94aa10f8d0a82e323439187402e9add9f7fff5b979ba20f9e711813d67a6792f7808199a36cb14b740c697abef6d758e1cf8688b7b0753074fa89279fdf4d86d267b4e45bb48aa083d79c4381966ac13647da4417ee7080417a5ae16d4cec4fcc33247c9eb9f19a81b92b036cfe9ae0fe2201704880f5568adf5d28eb28cb6274cab8d19be27fc341f39ba0c4080b42e848d91b5e0c7b322aba958b9d1aaab409b85291d98ad3dc7a27cdfb993e688758b53cc44e66ac56ba536a845be37daf1daaf79e5fb0f24b5ae6588614567dbb79699de00e06085928b8c56016d3378a6513d5c4d60316cc02d68ecec58a7433d11cb2ea6d282accc8cd9217cad0a65d98325fea399b1edfe2997ed622479b560d64424ed9a0cfa38667e3e5f739892ccffa326c0aa2412b58d39bf5693ce5d1881c335326edf32ba52bf70c0f96bebfc02dfd2fff95b3b37d192cb55391a6f9abc1ff233c2a3cedfc3f5d5b814d032aefc9d2106f6ff898ca9ae6446bd3a2b714be539b07954a220fb591c89b7e972c8ca410ecd9930e062146daa931693f78466689145ceff8b4a53a7ca7f4b20785406945c5a6abc639cb584fb964a9bb428d554ba10c3f2e79f30b267bb9589edffee011ea45d3ba02700255af20eb38fb2ffb0c23650a4008b2cbcaa313a93b6a6f366bf904a6670dc24cceed23b4378e7970b1429cb291c05c03a235d15640dd4199f80cc0c7511d2d77345aca8e0a365ee5bae58b99d25e681c823f49ef5130f05976d958f731fc25939809fac4b711a80ec4658488ea9b9d6969ec52986da5025e09ae2a31956eb52cd3c22a0a5d5fdbca9b0d26163a371ca62b34f22ce1a0344cc18c3dcf0d60318db6ad8a2c1aa2aaef2579ac116f9719e2aeccbed3669a4796580707c8e0be2e692040bf72c788fc033cc8ad5ec382f0aa6e6a788ef001d00b4ad4c8e7808c9c318dfe4e5f833dcd2abd5da4273c17b41639bd0640e97775a1d1da5afdd9b0331e1e837a54399cf200606a6b3b2a34e1cd3b30d7ec4dadb5e8dc9805e4dd81fc5e7c8ebb1eec23a34841ba057fe881c857d85bf7ce683136cc028add608f1be82a0f3b7439ed99828e6e36737d2e0b6087fb804e383d27e156740a968de53d44c0929685b79acaaa8e4974ef51505aa4eaf3beed225f2c258dd3aa68ab54fd721c282f76d6dc3ec1b54866d6450e5e3c47449ea2d067e5823ba4d4a834f61cd08b7c5d8c9d72ff04768bab2cfd6293c81573bde70348da9ced4b201bed3cc86aa5e807f9a4a4feb68af97ee4faf495da25652fe76e2287b6f9332c5e5102409c2d6fb1fc1f789bc3df2e86ff05d58cbbe98d1f3b518a7307af3b1ccdacb006a2aa5a9590a8f80e25c94cd97f952fe965c4e6aa021180b63112fd4a0d79415b7bbc667caa075494043efd39880e9972cc68f66140b2a43c9cf", 0x905}], 0x1}, 0xc805)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132})
write$cgroup_subtree(r0, &(0x7f0000001480)=ANY=[], 0xc54c295c)

56.651105997s ago: executing program 3 (id=897):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000069f74a20b810b41b6534010243010902120001000010000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002480)={&(0x7f0000002440)=[{0x4, 0x2800, 0xfe, &(0x7f00000059c0)="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"}], 0x1})

54.912991319s ago: executing program 3 (id=903):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x10b, 0x0, 0x9}]})

54.55367573s ago: executing program 3 (id=905):
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
syz_open_dev$sndpcmc(0x0, 0x1, 0x0)
fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/fib_triestat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil)
shmdt(0x0)
read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020)

53.241721087s ago: executing program 3 (id=907):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21801, 0x6536d5ef40a93735}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x81}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, &(0x7f0000000340))

52.996509291s ago: executing program 3 (id=910):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x200048a, &(0x7f00000004c0)=ANY=[], 0x1, 0x22d, &(0x7f0000000d00)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

40.117942069s ago: executing program 1 (id=956):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

40.006006155s ago: executing program 1 (id=957):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f", 0x5dc, 0x0, 0x0, 0x0)

39.832676586s ago: executing program 1 (id=958):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000780)={0x2, &(0x7f0000000600)=[{0x2}, {0x6}]})

39.678839095s ago: executing program 1 (id=959):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', 0x2000010, &(0x7f0000000e00)=ANY=[], 0x4, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x49)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x7a00, 0x8, 0x1e)

39.41408335s ago: executing program 1 (id=960):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaa4e37754f17a153ec0067"], 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

38.91023339s ago: executing program 1 (id=961):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)

38.426891378s ago: executing program 32 (id=961):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0xfe, 0x0, [{0x7, 0xfffffffe, 0x0, 0x9, 0x2, 0x6}, {0x40000000, 0x8001, 0x1, 0x3, 0x1000, 0x0, 0xd}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)

37.826329514s ago: executing program 33 (id=910):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x200048a, &(0x7f00000004c0)=ANY=[], 0x1, 0x22d, &(0x7f0000000d00)="$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")
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0)

6.7950428s ago: executing program 5 (id=1042):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x28}, 0x0)

6.438110011s ago: executing program 0 (id=1045):
syz_mount_image$ocfs2(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f0000000500)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cc85bf8e749e04e", @ANYRES16, @ANYRESOCT, @ANYRES16], 0x11, 0x445c, &(0x7f0000004a80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140))
mknod$loop(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1)
rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

5.817631317s ago: executing program 5 (id=1049):
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2208412, &(0x7f0000000b40)=ANY=[], 0x1, 0x5557, &(0x7f0000006440)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x63)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.818827636s ago: executing program 0 (id=1053):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x4000, 0xf000, 0x0, 0x7, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x85}, {0x25000, 0xdddd8000, 0x4, 0x8, 0x0, 0x4, 0x81, 0x0, 0x80, 0x24, 0x4, 0x2}, {0x10b002, 0x0, 0xa, 0xfe, 0x80, 0x0, 0x3}, {0x1000, 0x8080000, 0x642f06d6fa0ee40d, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfd, 0x1c, 0x1a, 0xa8}, {0xeeee0000, 0x10000, 0x0, 0x4, 0x20, 0x8f, 0x0, 0x0, 0x0, 0xfc, 0x86, 0xfe}, {0x54000, 0x30000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x0, 0x4}, {0xd000, 0xeeee8000, 0xf, 0x82, 0x0, 0x63, 0x4, 0xe}, {0x6000}, {0xffffffff, 0xfffe}, 0x80000001, 0x0, 0x0, 0x10010, 0xffffffffffffffff, 0x4100, 0x900, [0x0, 0x0, 0x10000, 0xfffffffffffffff7]})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000a1e)
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000100))

4.74865946s ago: executing program 4 (id=1054):
setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000100)=0x7, 0x8, 0x1)
syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf4, &(0x7f0000000e00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

3.943418888s ago: executing program 0 (id=1055):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000})
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

3.721718561s ago: executing program 4 (id=1057):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)="3a74966c898cdc52852ffa9889efcf7a8e1444544a82e9673d69d231d0ed18285689cc9a1f37c73be7d6d58c6c80e343e1c3b394cf3338d92d82ba5889c8f3fa39c8aa924ff8fea9567f6519d3c9f0b2681a2f2c58cfb74a7d849c28d547d17ae901ba4d113aeb4f55c5e7cda943ba3ec84f52f399ffce18fa806da1f7f595da1c59290bf3f679a3ca884499104de4fa87666b94bcfbc7644467092214d49a739a031e783c9d44fc79ddfff1b9fefa09e5", 0xb1}], 0x1, 0x0, 0x0, 0x8004}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/82, 0xa0}, {&(0x7f0000000280)=""/96, 0x60}], 0x2}, 0x500)

3.070472629s ago: executing program 5 (id=1058):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}})

2.311843374s ago: executing program 5 (id=1060):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r1 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r2, &(0x7f0000000240), 0x0, 0x8004881, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0)
io_submit(0x0, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000017c00000400fc800c000180", @ANYRES32=0x0, @ANYBLOB="080002807235ab62080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.946197205s ago: executing program 5 (id=1061):
syz_mount_image$nilfs2(&(0x7f00000005c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f00000002c0)=ANY=[], 0x1, 0xad4, &(0x7f0000001540)="$eJzs3U2MW0cBAOCxd73JtilxSkKXNLQJhbb8dNPsLuEngqRKhETUVIhLpQgOUZqWiBAkigRUlUhy4karKkic+BGnXqqCkOgFRT1xqUQjVUg9FQ4ciIKIxAECidHuznjtid1n74+fvf4+aTx+b97zzDw/P7/fmQCMrerS68LCTCWEy2+8cuzvD/9tenHM4eYU9aXXyZahWgihEocns897b2I5vnXjxdOd4kqYW3pNw+Gp68157w4hXAh7w5VQD7svX335rbknT1w8fmnf268eurYxtQcAgPHy1SuHFnb95U/377j52gNHwpY0evHN0v55PY7YFvf7j8Qd/7T/Xw3tw5WW0Goqm24yhup0+3QTHaZrzaeWTTfZJf+pLP9al+m2hPfPf6JlXKd6wyhL63E9VKqzbcPV6uzs8jF5WDqun6rMnj977tnnSyoosO7+9WAIYW9LOHqpfXi14Rtxy7Een9UaDm/AZ64x1HqsZ2MIyjqS4cjg8rrZWFZ6nQcUGttL3gABRPn1wjtcyM8srE3z0yZ7y//6E9XO88M6GPT631f+UyXnH+T/64u2OKyfzbo2pXql39G2OJxfR8jvX+r++8uvdLSPza9H1HosZ7frCKNyfaFbOScGXI7V6lb+fL3YrL4Y47QcvpSlt/5+8u90VL5joLN/5+f/BUEY7hDahmtr+axGydsfYHjl98010vXRKL+vL0/fUpC+tSB9uiD9roL0uwvSYZz99ns/CS9VVo7z82P6fs+Hp/Ns98T4A32WJz8f2W/++X2//Vpr/vn9xDDMfn/q6TOfe+bk1eX7/yvN9f92XN/T4UY9/rauxAnS+cL8vHrz3v96ez7VLtPdm5Xnng7TL73f2T5dZefK54SW7cwd5Zhpn297t+n2tE9Xz6abjmFrVt58/+SubL60/5G2q2l5TWb1rWX1mMrKkbYrO2KclwNWI62P3e7/T+vnTKhVnj177szjcTitp3+cqG1ZHH9gwOUG1q7X539mQvvzP9ua42vV1u3C9pXxleXtwuvx89rHzzXzaR8/H4fT/9w3J6aXxs+e/s65Z9a/+jDWnv/hC986de7cme+W/mZ+OoQhKMYq3nx5OIrRz5t02DIs5Vn1m8WKDEExNuGbkjdMwIbb/6PlnYDHzn771HNnnjtzfv7gwfm5uYOfn1/Yv7Rfv791777VhRJKC6ynlT/9sksCAAAAAAAAAAAA9Or7x49dfefNz767/Pz/yvN/6fn/dOdvev7/x9nz//lz8uk5+PQc4I4O6UvTZA2sTmXT1WL4YFbenVk+u7L5PhTjZj9+8fn/lF3ermsqz33Z+FqXwaw5gTvaS5nK2iDJ+wv8aIwvxfhXAUpUme48OsZF7VundT21T9HSLkVD+8CjI31vaW1I7Zik5787tuvU8mXvGEAZWX+DeJyw7DoCnf1jrNr//udKxUsvi9A9TA42v5+N7zrR6LqX3msPNgDro+z+P9N5zxSf/8NXti6GNNn1J9q3l3n7pdCPP7/TPjzs/U9udP55v32Dzr/s+g+6/89m/3c9b/+yHvPqq8v3Pz+/9m5LtmF3r/nn9U/tQO/sL/+bMf9Um0dCb/k3fpnln18Q6tF/s/zv6jH/O+q/Z3X5/y/mnxbbow/1mn91+ZpZtb0c+XnjdP0vP2+c3Mrqn9r2fJ/8v/ZCp/qvsqPG2zF/GGej0s9sv7L9iOZO++r7/40urG//v83CZpu1/D6Mz8QxaUOc7nPI+zvpt/zp/or0P7Ar+/xKwf+b/n9H2xdiXPR7SP3/3r6xfDmvHv/y0/pZj8syDdc6LNvNuq2BUfXeWF3/W4dwcsPz2Fp6HYc+HBmCMjRDY2IV8zX7iSu5/I1GY2NPaBUoNXNKX/5lHyeUnX/Zy79I3v9vvg+f9/+bp+f9/+bpef+/efp0/Ia6pef9/+bLM+//N0+/L/vcvH/gmYL0Dxek7+6c3jxsv79g/j0F6R8pSN/XTD/cNkVKf6Bg/gcL0u9tT9+Spz9UMP/HCtI/XpD+cEH6oy3prX1Ap/RPFMy/2aXnUca1/jDO8ufz/P5hfKTrP91+/zsL0oHR9dPXDhw9+Zuv15ef/59qng9J1/GOxOFaPH76QRzOr3uHluHFtDfj8F+z9GE/3wHjJG8/I/9/f6QgHRhd6T4vv28YQ5WtnUfHuKjdqm77+YyWT8b4UzH+dIwfi/FsjPfH+ECM5wZUPjbG0dd/d+ilysrx/vYsvdf7yfPngdraiQohzPdYnvz8QL/3s+ft+PVrrfmv8nEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA0lSXXhcWZiohXH7jlWNPnzi7f3HM4eYU9aXXyZahWnO+EB6P8USMfxHf3Lrx4unW+HaMK2EuVEKlOT48db2Z090hhAthb7gS6mH35asvvzX35ImLxy/te/vVQ9c2bgkAAADA5vf/AAAA//9LWAnF")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000))
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x2)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000080)='./file2\x00', 0x1ffd)

1.914692167s ago: executing program 2 (id=1062):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c)
syz_emit_ethernet(0x101e, &(0x7f0000000440)=ANY=[], 0x0)

1.820694623s ago: executing program 0 (id=1063):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f00000001c0)="66b872008ee0c4e2e1ba7dc0673e0fc76a9766b8d2008ed066b815000f00d0c4c2350bd466ba4000ed0fc7b10040000066b850000f00d064643e6767660f61a40058", 0x42}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.780256825s ago: executing program 2 (id=1064):
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

1.623339824s ago: executing program 4 (id=1065):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x88406, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x4, 0x4, 0x4})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]})
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000280)={0xed80000000000000, 0x70000, 0x9, 0x0, 0x2})

1.504537491s ago: executing program 2 (id=1066):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000100))

1.327672241s ago: executing program 2 (id=1067):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(0x0, r0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f0000000280), 0x80)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000)
socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x800)

1.304398303s ago: executing program 0 (id=1068):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x3, 0x880}], 0x1, 0x80001)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x10008}], 0x2, 0x102, 0x0)

1.130574083s ago: executing program 4 (id=1069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000500)={@val={0xa, 0x88a8}, @void, @eth={@local, @random="bdbd16e8362b", @void, {@ipv6={0x86dd, @generic={0x7, 0x6, "38960c", 0x2, 0x3c, 0x0, @local, @mcast1, {[], '<h'}}}}}}, 0x3c)

631.049422ms ago: executing program 0 (id=1070):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000021000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="66bad00466b887008ee0ee460fae220f0d212e0f01c5676dd139440f30c74424002d000000c74424020f000000c74424060000000066ba2000b800000000ef0f01c4650f00d2", 0x46}], 0x1, 0xb9, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0xb000, 0xf000}, {'\x00', "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

545.912008ms ago: executing program 2 (id=1071):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r1, 0x114, 0x5, 0x0, &(0x7f00000000c0))

256.422014ms ago: executing program 2 (id=1072):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x86)
fchdir(r1)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)

251.170345ms ago: executing program 4 (id=1073):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x2}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4)
r1 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)

86.564405ms ago: executing program 4 (id=1074):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xc7, 0x0, 0x1})
ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f00000000c0))

0s ago: executing program 5 (id=1075):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, 0x0)

kernel console output (not intermixed with test programs):

 ep0 maxpacket: 32
[  430.067599][   T23] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  430.079638][   T23] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  430.142983][   T23] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  430.163544][   T23] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  430.184416][   T23] usb 4-1: Product: syz
[  430.189082][   T23] usb 4-1: Manufacturer: syz
[  430.245357][   T23] hub 4-1:4.0: USB hub found
[  430.396126][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  430.469932][   T23] hub 4-1:4.0: config failed, hub has too many ports! (err -19)
[  431.476403][   T23] usb 4-1: USB disconnect, device number 8
[  433.072192][  T787] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  433.263120][  T787] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  433.367303][  T787] usb 3-1: config 0 interface 0 has no altsetting 0
[  433.442036][  T787] usb 3-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.00
[  433.534421][  T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  433.613646][  T787] usb 3-1: config 0 descriptor??
[  434.090749][  T787] logitech 0003:046D:C283.0007: hidraw0: USB HID v0.00 Device [HID 046d:c283] on usb-dummy_hcd.2-1/input0
[  434.123330][  T787] logitech 0003:046D:C283.0007: no inputs found
[  434.205837][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  434.341763][   T23] usb 3-1: USB disconnect, device number 9
[  434.398272][    T8] usb 4-1: Using ep0 maxpacket: 8
[  434.501591][    T8] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  434.719255][    T8] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  434.791803][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.869892][    T8] usb 4-1: Product: syz
[  434.884287][    T8] usb 4-1: Manufacturer: syz
[  434.895872][    T8] usb 4-1: SerialNumber: syz
[  434.925316][    T8] usb 4-1: config 0 descriptor??
[  434.948077][    T8] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  434.966073][    T8] usb 4-1: setting power ON
[  434.974732][    T8] dvb-usb: bulk message failed: -22 (2/0)
[  434.995554][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  435.018214][    T8] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  435.029136][    T8] usb 4-1: media controller created
[  436.168680][ T8406] dvb-usb: bulk message failed: -22 (3/0)
[  436.175028][ T8406] dvb-usb: bulk message failed: -22 (4/0)
[  436.264246][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  436.269107][ T8406] cxusb: i2c read failed
[  436.329539][    T8] usb 4-1: selecting invalid altsetting 6
[  436.355328][    T8] usb 4-1: digital interface selection failed (-22)
[  436.385846][    T8] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  436.394373][ T8429] cxusb: i2c rd: len=81 is too big!
[  436.394373][ T8429] 
[  436.439934][    T8] usb 4-1: setting power OFF
[  436.445476][    T8] dvb-usb: bulk message failed: -22 (2/0)
[  436.474644][    T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  436.505869][    T8] (NULL device *): no alternate interface
[  436.587861][    T8] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  436.630271][    T8] usb 4-1: USB disconnect, device number 9
[  436.658053][ T8436] loop1: detected capacity change from 0 to 2048
[  436.712566][ T8438] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  437.811215][ T8438] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  437.917094][ T8438] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  438.125754][ T8438] Remounting filesystem read-only
[  438.216504][ T3528] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  438.335918][ T3528] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  438.344220][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.353830][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.366177][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.375534][ T3528] NILFS (loop1): discard dirty page: offset=0, ino=3
[  438.383317][ T3528] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  438.392871][ T3528] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  438.400308][ T3528] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  438.409560][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.418743][ T3528] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  438.426145][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.435166][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  438.446477][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.453889][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.494327][ T3528] NILFS (loop1): discard dirty page: offset=69632, ino=3
[  438.496108][    T8] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  438.508683][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.516226][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.523863][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.547791][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.558243][ T3528] NILFS (loop1): discard dirty page: offset=73728, ino=3
[  438.565413][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.572925][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.580804][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.751583][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.810245][    T8] usb 4-1: unable to get BOS descriptor or descriptor too short
[  438.832041][ T3528] NILFS (loop1): discard dirty page: offset=77824, ino=3
[  438.853027][ T8462] wireguard0: entered promiscuous mode
[  438.861172][    T8] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  438.873440][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.892399][ T8462] wireguard0: entered allmulticast mode
[  438.904792][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.914900][    T8] usb 4-1: unable to read config index 0 descriptor/start: -71
[  438.949439][    T8] usb 4-1: can't read configurations, error -71
[  438.956260][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  438.963590][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.011187][ T3528] NILFS (loop1): discard dirty page: offset=81920, ino=3
[  439.038990][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.062190][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.078734][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.099225][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.120981][ T3528] NILFS (loop1): discard dirty page: offset=86016, ino=3
[  439.178079][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.211046][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.250772][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.308102][ T3528] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  439.315649][ T3528] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  439.383594][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.445817][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.454748][ T3528] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  439.565949][ T3528] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.625804][ T5766] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  439.771739][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  439.838264][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  439.845614][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  439.906708][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  439.914057][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  439.927176][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=5
[  439.933931][ T5766] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  439.941356][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.954175][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.963163][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  439.977195][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=4
[  439.986724][ T5766] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  439.994077][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  440.006306][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  440.015515][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  440.585964][    T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  440.790107][    T8] usb 3-1: config index 0 descriptor too short (expected 27419, got 10)
[  440.813913][    T8] usb 3-1: config 0 has too many interfaces: 86, using maximum allowed: 32
[  440.843191][    T8] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  440.878982][    T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 86
[  440.918985][    T8] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7
[  440.941871][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  440.977827][    T8] usb 3-1: config 0 descriptor??
[  441.245233][    T8] usb 3-1: string descriptor 0 read error: -71
[  441.288464][    T8] usb 3-1: USB disconnect, device number 10
[  441.946516][ T8502] loop3: detected capacity change from 0 to 4096
[  441.989372][ T8502] ntfs: volume version 3.1.
[  442.271819][ T8511] loop2: detected capacity change from 0 to 2048
[  442.300814][ T8511] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  442.357182][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'.
[  442.370871][ T8509] loop1: detected capacity change from 0 to 2048
[  442.385658][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.736'.
[  442.471924][ T8516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  443.368184][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  443.376492][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  443.447143][ T8518] x_tables: unsorted entry at hook 2
[  443.734656][ T8516] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  443.761865][ T8516] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  443.775977][ T8516] Remounting filesystem read-only
[  443.781230][   T50] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  443.796849][   T50] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  443.811673][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  443.832759][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  443.842451][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  443.864254][   T50] NILFS (loop1): discard dirty page: offset=0, ino=3
[  443.879662][   T50] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  443.905774][   T50] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  443.918045][   T50] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  443.935618][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  443.951150][   T50] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  443.962135][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  444.083864][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  444.107673][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.129684][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.151346][   T50] NILFS (loop1): discard dirty page: offset=69632, ino=3
[  444.159151][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.166529][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.174485][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.181777][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.189060][   T50] NILFS (loop1): discard dirty page: offset=73728, ino=3
[  444.196161][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.203385][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.210658][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.426917][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.547458][   T50] NILFS (loop1): discard dirty page: offset=77824, ino=3
[  444.643074][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.748632][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.834033][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.875346][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.895884][   T50] NILFS (loop1): discard dirty page: offset=81920, ino=3
[  444.902977][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.927453][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.935158][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.943647][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.950967][   T50] NILFS (loop1): discard dirty page: offset=86016, ino=3
[  444.958409][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.965686][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.972983][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.985782][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  444.993043][   T50] NILFS (loop1): discard dirty page: offset=90112, ino=3
[  445.021235][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  445.030421][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  445.037688][   T50] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  445.056030][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.077312][   T50] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  445.084504][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.113713][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.125907][   T50] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  445.143508][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.174229][   T50] NILFS (loop1): discard dirty page: offset=0, ino=5
[  445.184269][   T50] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  445.203451][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.227376][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.246792][   T50] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.257517][ T8541] netlink: 'syz.2.748': attribute type 7 has an invalid length.
[  445.280051][ T5766] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  445.370138][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  445.408564][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  445.445870][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  445.453328][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  445.477929][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  445.604007][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=4
[  445.661240][ T5766] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  445.696084][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.750044][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  445.783036][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  446.695835][  T787] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  447.120154][  T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.250184][  T787] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  447.288994][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.332080][  T787] usb 4-1: config 0 descriptor??
[  447.576747][  T787] usbhid 4-1:0.0: can't add hid device: -71
[  447.587400][  T787] usbhid: probe of 4-1:0.0 failed with error -71
[  447.606940][  T787] usb 4-1: USB disconnect, device number 12
[  447.626222][  T967] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  447.826014][  T967] usb 3-1: Using ep0 maxpacket: 8
[  447.897032][  T967] usb 3-1: unable to get BOS descriptor or descriptor too short
[  448.008062][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  448.205258][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  448.255779][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[  448.299144][  T967] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[  448.350151][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  448.383101][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  448.416186][  T967] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  448.478044][  T967] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  448.504453][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.525094][  T967] usb 3-1: Product: syz
[  448.540594][  T967] usb 3-1: Manufacturer: syz
[  448.555638][  T967] usb 3-1: SerialNumber: syz
[  448.617242][  T967] usb 3-1: config 0 descriptor??
[  448.636549][ T8566] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  448.662634][  T967] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  448.750617][  T967] snd-usb-audio: probe of 3-1:0.0 failed with error -12
[  448.822959][ T7426] udevd[7426]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.984094][  T967] usb 3-1: USB disconnect, device number 11
[  450.326048][  T787] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  450.422736][ T8605] loop1: detected capacity change from 0 to 2048
[  450.437254][ T8605] EXT4-fs: Ignoring removed i_version option
[  450.475115][ T8605] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.501728][ T8605] EXT4-fs error (device loop1): ext4_find_extent:936: inode #2: comm syz.1.769: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  450.520910][  T787] usb 4-1: config index 0 descriptor too short (expected 27419, got 10)
[  450.524141][ T8605] EXT4-fs (loop1): Remounting filesystem read-only
[  450.529770][  T787] usb 4-1: config 0 has too many interfaces: 86, using maximum allowed: 32
[  450.544956][  T787] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  450.552700][  T787] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 86
[  450.562265][  T787] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= e.b7
[  450.571502][  T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  450.583296][  T787] usb 4-1: config 0 descriptor??
[  450.592298][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  450.745414][ T8614] loop1: detected capacity change from 0 to 512
[  450.767949][   T23] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  450.790517][ T8614] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  450.802345][ T8614] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  450.808917][  T787] usb 4-1: string descriptor 0 read error: -71
[  450.828618][ T8614] EXT4-fs (loop1): 1 truncate cleaned up
[  450.836322][  T787] usb 4-1: USB disconnect, device number 13
[  450.857444][ T8614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  450.964167][ T8614] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  450.981276][ T8614] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  450.995357][   T23] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  451.004321][   T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  451.021761][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  451.031204][   T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  451.042888][   T23] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  451.054135][   T23] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  451.068152][   T23] usb 1-1: config 0 interface 0 has no altsetting 0
[  451.077650][   T23] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  451.088284][   T23] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  451.106585][   T23] usb 1-1: Product: syz
[  451.111007][   T23] usb 1-1: Manufacturer: syz
[  451.115622][   T23] usb 1-1: SerialNumber: syz
[  451.142510][   T23] usb 1-1: config 0 descriptor??
[  451.148990][ T8610] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  451.159765][   T23] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  451.185283][   T23] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  451.245862][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  451.355881][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  451.378182][  T967] usb 1-1: USB disconnect, device number 7
[  451.392484][  T967] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  451.427759][    T8] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  451.447047][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.471429][    T8] usb 3-1: config 0 descriptor??
[  451.555941][   T23] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  451.694315][    T8] [drm] vendor descriptor length:6 data:06 5f 01 ff 00 00 00 00 00 00 00
[  451.703059][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  451.735925][   T23] usb 2-1: Using ep0 maxpacket: 8
[  451.746547][   T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  451.754877][   T23] usb 2-1: config 179 has no interface number 0
[  451.761343][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  451.772452][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  451.783859][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  451.795129][   T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  451.807558][   T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  451.821092][   T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  451.830184][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.845985][ T8625] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  451.899244][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  451.947788][    T8] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  451.973622][    T8] [drm] Initialized udl on minor 2
[  451.991237][    T8] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  452.029277][    T8] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  452.066162][    T8] usb 3-1: USB disconnect, device number 12
[  452.072470][  T787] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  452.107223][  T787] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  452.164446][   T23] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10
[  452.336513][   T23] usb 2-1: USB disconnect, device number 10
[  452.336588][    C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  452.336688][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  452.367006][   T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  452.699821][ T8636] loop2: detected capacity change from 0 to 512
[  452.712642][ T8636] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  452.727948][ T8636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0102]
[  452.736357][ T8636] System zones: 1-12
[  452.740644][ T8636] EXT4-fs (loop2): orphan cleanup on readonly fs
[  452.760254][ T8636] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.780: bg 0: block 361: padding at end of block bitmap is not set
[  452.776041][ T8636] EXT4-fs (loop2): Remounting filesystem read-only
[  452.783613][ T8636] EXT4-fs (loop2): 1 truncate cleaned up
[  452.791214][ T8636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  452.843048][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  453.044244][ T8643] loop1: detected capacity change from 0 to 4096
[  453.063571][ T8643] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  453.316340][  T967] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  453.507625][ T5086] Bluetooth: hci4: command 0x1003 tx timeout
[  453.518014][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  453.596329][  T967] usb 3-1: Using ep0 maxpacket: 32
[  453.756680][  T967] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  453.780354][  T967] usb 3-1: config 0 has no interface number 0
[  453.791382][  T967] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  453.911843][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.920423][  T967] usb 3-1: Product: syz
[  453.924632][  T967] usb 3-1: Manufacturer: syz
[  453.936084][  T967] usb 3-1: SerialNumber: syz
[  453.944180][  T967] usb 3-1: config 0 descriptor??
[  453.960400][ T8649] loop3: detected capacity change from 0 to 1024
[  453.968056][  T967] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  454.081606][ T8649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  454.154955][ T8649] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.3.784: bad entry in directory: rec_len is smaller than minimal - offset=16, inode=14, rec_len=8, size=56 fake=0
[  454.181263][ T8649] EXT4-fs error (device loop3) in ext4_delete_inline_entry:1794: Corrupt filesystem
[  454.271911][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.683984][ T8669] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  454.734413][ T8669] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  454.763064][ T8669] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  454.787438][ T8669] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  455.369113][  T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  455.381444][ T8669] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  455.388928][  T967] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  455.462621][ T8669] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  455.487936][ T8669] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  455.558488][ T8669] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  455.774332][ T8669] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  456.064881][ T8669] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  456.071598][ T8669] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  456.085826][ T8669] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  456.108606][ T8669] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  456.131940][ T8669] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  456.133273][    T8] usb 3-1: USB disconnect, device number 13
[  456.139879][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  456.176773][    T8] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  456.209586][    T8] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  456.247172][    T8] quatech2 3-1:0.51: device disconnected
[  456.265325][ T8678] loop3: detected capacity change from 0 to 1024
[  456.291060][ T8678] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  456.320285][ T8678] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  456.370751][ T8678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  456.461862][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.050001][ T8682] loop3: detected capacity change from 0 to 32768
[  457.089914][ T8682] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.794 (8682)
[  457.110953][ T8682] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  457.147464][ T8682] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  457.171824][ T8682] BTRFS info (device loop3): using free space tree
[  457.360672][ T8682] BTRFS info (device loop3): enabling ssd optimizations
[  457.378615][ T8709] input: syz1 as /devices/virtual/input/input11
[  457.643391][ T8682] BTRFS info (device loop3): auto enabling async discard
[  457.980529][ T5770] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  458.946321][ T8717] loop1: detected capacity change from 0 to 32768
[  459.034813][ T8717] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  459.084326][ T8732] loop3: detected capacity change from 0 to 1024
[  459.261332][ T8717] XFS (loop1): Ending clean mount
[  459.341644][ T8717] XFS (loop1): Quotacheck needed: Please wait.
[  459.398535][ T3528] hfsplus: b-tree write err: -5, ino 4
[  459.459326][ T8717] XFS (loop1): Quotacheck: Done.
[  459.719592][ T5766] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  460.367933][ T8737] loop2: detected capacity change from 0 to 32768
[  460.443971][ T8737] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  460.588924][ T8737] XFS (loop2): Ending clean mount
[  460.812911][ T8761] capability: warning: `syz.1.811' uses 32-bit capabilities (legacy support in use)
[  460.830836][ T5772] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  460.864541][ T8761] program syz.1.811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  460.965815][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  461.309945][ T5810] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  461.317723][    T8] usb 1-1: Using ep0 maxpacket: 16
[  461.325566][ T8771] loop1: detected capacity change from 0 to 256
[  461.326171][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  461.343619][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  461.354887][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  461.364658][    T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  461.375883][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  461.390346][    T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  461.401244][    T8] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  461.410522][ T8771] FAT-fs (loop1): Directory bread(block 64) failed
[  461.411573][    T8] usb 1-1: Manufacturer: syz
[  461.430035][ T8771] FAT-fs (loop1): Directory bread(block 65) failed
[  461.447687][    T8] usb 1-1: config 0 descriptor??
[  461.450428][ T8771] FAT-fs (loop1): Directory bread(block 66) failed
[  461.474090][ T8771] FAT-fs (loop1): Directory bread(block 67) failed
[  461.495030][ T8771] FAT-fs (loop1): Directory bread(block 68) failed
[  461.513206][ T8771] FAT-fs (loop1): Directory bread(block 69) failed
[  461.526224][ T8771] FAT-fs (loop1): Directory bread(block 70) failed
[  461.527494][ T5810] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  461.534897][ T8771] FAT-fs (loop1): Directory bread(block 71) failed
[  461.547125][ T5810] usb 4-1: config 0 has no interface number 0
[  461.552611][ T8771] FAT-fs (loop1): Directory bread(block 72) failed
[  461.561499][ T8771] FAT-fs (loop1): Directory bread(block 73) failed
[  461.575079][ T5810] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  461.604760][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.630837][ T5810] usb 4-1: Product: syz
[  461.635343][ T5810] usb 4-1: Manufacturer: syz
[  461.688800][ T5810] usb 4-1: SerialNumber: syz
[  461.697913][ T5810] usb 4-1: config 0 descriptor??
[  461.846052][    T8] rc_core: IR keymap rc-hauppauge not found
[  461.852082][    T8] Registered IR keymap rc-empty
[  461.863239][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  461.906085][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  461.958132][    T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  461.989102][    T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  462.030476][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.086065][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.135913][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.641004][ T5810] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  462.651396][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.658951][ T5810] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  462.669641][ T5810] asix: probe of 4-1:0.251 failed with error -71
[  462.685001][ T5810] usb 4-1: USB disconnect, device number 14
[  462.695876][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.742312][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.776009][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.806189][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.857073][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.893573][    T8] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  462.937772][    T8] mceusb 1-1:0.0: Registered  with mce emulator interface version 1
[  462.956634][    T8] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  463.067951][    T8] usb 1-1: USB disconnect, device number 8
[  463.567517][ T8796] loop1: detected capacity change from 0 to 2048
[  463.654397][ T8799] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  463.716880][ T8799] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  463.765824][ T8799] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  463.793127][ T8799] Remounting filesystem read-only
[  463.808847][ T3443] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  463.820669][ T3443] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  463.829925][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.849864][ T1076] Bluetooth: hci4: Frame reassembly failed (-90)
[  463.856650][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.865585][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.874867][  T967] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  463.885062][ T3443] NILFS (loop1): discard dirty page: offset=0, ino=2
[  463.892959][ T3443] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  463.900428][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.909483][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.918433][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.927661][ T3443] NILFS (loop1): discard dirty page: offset=0, ino=5
[  463.934367][ T3443] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  463.941736][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.951083][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.960015][ T3443] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  463.969585][ T8796] NILFS (loop1): mounting fs with errors
[  463.984023][ T8796] NILFS error (device loop1): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  463.999621][ T8796] Remounting filesystem read-only
[  464.004722][ T8796] NILFS (loop1): error -5 reading inode: ino=18
[  464.014030][ T8796] NILFS (loop1): cannot mark inode dirty (ino=18): error -5 loading inode block
[  464.050529][ T5766] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  464.059848][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  464.067246][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  464.075143][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  464.082756][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  464.094062][  T967] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  464.104119][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  464.115479][  T967] usb 4-1: config 0 interface 0 has no altsetting 0
[  464.123243][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=4
[  464.134028][ T5766] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  464.144629][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.154317][  T967] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  464.163483][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.173204][  T967] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  464.175928][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.181476][  T967] usb 4-1: Product: syz
[  464.195450][  T967] usb 4-1: Manufacturer: syz
[  464.206352][  T967] usb 4-1: SerialNumber: syz
[  464.214815][  T967] usb 4-1: config 0 descriptor??
[  464.231158][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=3
[  464.245287][  T967] usb 4-1: selecting invalid altsetting 0
[  464.253515][ T5766] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  464.272787][ T5766] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  464.299248][ T5766] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  464.319312][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.364597][ T5766] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  464.391025][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.406765][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.419059][ T5766] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  464.428098][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  464.545278][  T967] usb 4-1: USB disconnect, device number 15
[  465.514205][ T8817] loop3: detected capacity change from 0 to 1024
[  465.600211][ T8817] syz.3.832: attempt to access beyond end of device
[  465.600211][ T8817] loop3: rw=0, sector=393216, nr_sectors = 2 limit=1024
[  465.915369][ T5086] Bluetooth: hci4: command 0x1003 tx timeout
[  465.923977][ T5781] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  466.027076][ T8824] loop2: detected capacity change from 0 to 1024
[  466.346001][   T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  466.546088][   T23] usb 4-1: Using ep0 maxpacket: 16
[  466.564979][   T23] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  466.574721][   T23] usb 4-1: config 0 has no interface number 0
[  466.581769][   T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  466.593612][   T23] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  466.645107][   T23] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  466.658065][   T23] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  466.666513][   T23] usb 4-1: Product: syz
[  466.670809][   T23] usb 4-1: SerialNumber: syz
[  466.678145][   T23] usb 4-1: config 0 descriptor??
[  466.696944][   T23] cm109 4-1:0.8: invalid payload size 0, expected 4
[  466.706556][   T23] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input14
[  467.028136][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.038121][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.045318][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.052526][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.060438][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.070580][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.078777][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.086115][  T967] usb 4-1: USB disconnect, device number 16
[  467.092107][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[  467.092135][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  467.120463][  T967] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  467.265882][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  467.381277][ T8850] loop2: detected capacity change from 0 to 256
[  467.458132][    T8] usb 2-1: Using ep0 maxpacket: 16
[  467.473801][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  467.496044][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  467.510951][    T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  467.524247][    T8] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  467.533386][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.543217][    T8] usb 2-1: config 0 descriptor??
[  467.605921][   T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  467.662001][ T8854] loop3: detected capacity change from 0 to 512
[  467.682277][ T8854] EXT4-fs (loop3): 1 truncate cleaned up
[  467.693515][ T8854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  467.730309][ T8854] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.848: bg 0: block 465: padding at end of block bitmap is not set
[  467.811812][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.834781][   T23] usb 1-1: Using ep0 maxpacket: 32
[  467.862789][   T23] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  467.873763][   T23] usb 1-1: config 0 has no interface number 0
[  467.881682][   T23] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  467.892974][   T23] usb 1-1: config 0 interface 85 has no altsetting 0
[  467.908504][   T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  467.918191][   T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  467.926464][   T23] usb 1-1: Product: syz
[  467.930745][   T23] usb 1-1: Manufacturer: syz
[  467.935363][   T23] usb 1-1: SerialNumber: syz
[  467.951767][   T23] usb 1-1: config 0 descriptor??
[  467.966384][    T8] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  468.164230][    T8] microsoft 0003:045E:07DA.0008: No inputs registered, leaving
[  468.193590][    T8] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  468.217664][    T8] microsoft 0003:045E:07DA.0008: no inputs found
[  468.245660][    T8] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  468.289812][    T8] usb 2-1: USB disconnect, device number 11
[  468.317601][ T8858] loop3: detected capacity change from 0 to 32768
[  468.418473][ T8858] JBD2: Ignoring recovery information on journal
[  468.502618][ T8858] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  468.606839][   T23] appletouch 1-1:0.85: Geyser mode initialized.
[  468.637836][   T23] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input15
[  469.071725][    T8] usb 1-1: USB disconnect, device number 9
[  469.112919][    T8] appletouch 1-1:0.85: input: appletouch disconnected
[  469.163762][ T8858] (syz.3.849,8858,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[  469.174373][ T8858] (syz.3.849,8858,0):ocfs2_get_suballoc_slot_bit:2719 ERROR: read block 42949672960000000 failed -12
[  469.193289][ T8858] (syz.3.849,8858,0):ocfs2_get_suballoc_slot_bit:2751 ERROR: status = -12
[  469.201935][ T8858] (syz.3.849,8858,0):ocfs2_test_inode_bit:2833 ERROR: get alloc slot and bit failed -12
[  469.215215][ T8858] (syz.3.849,8858,0):ocfs2_test_inode_bit:2874 ERROR: status = -12
[  469.233519][ T8858] (syz.3.849,8858,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[  469.294381][ T8868] loop2: detected capacity change from 0 to 1024
[  469.342943][ T5770] ocfs2: Unmounting device (7,3) on (node local)
[  469.423455][ T8870] loop1: detected capacity change from 0 to 128
[  469.824881][ T8879] loop3: detected capacity change from 0 to 64
[  471.388507][ T8897] loop3: detected capacity change from 0 to 256
[  471.976790][   T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  472.170861][ T8905] program syz.1.865 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.296604][   T23] usb 3-1: Using ep0 maxpacket: 16
[  472.384502][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  472.490189][   T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  472.556080][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.623354][   T23] usb 3-1: config 0 descriptor??
[  473.643988][   T23] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  473.822833][   T23] usb 3-1: USB disconnect, device number 14
[  473.935854][  T967] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  474.170037][  T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.182162][  T967] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.204320][  T967] usb 2-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00
[  474.216506][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.282224][  T967] usb 2-1: config 0 descriptor??
[  474.632520][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  474.744381][  T967] ntrig 0003:1B96:0012.000A: unknown main item tag 0x4
[  474.760756][  T967] ntrig 0003:1B96:0012.000A: unknown main item tag 0x4
[  474.785557][  T967] ntrig 0003:1B96:0012.000A: hidraw0: USB HID v0.07 Device [HID 1b96:0012] on usb-dummy_hcd.1-1/input0
[  474.808747][ T8939] loop3: detected capacity change from 0 to 64
[  474.905123][ T8944] program syz.0.880 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  474.942647][  T967] ntrig 0003:1B96:0012.000A: Firmware version: 5.6.5.21.1 (18aa b9b2)
[  474.968394][ T8939] hfs: request for non-existent node 1280 in B*Tree
[  474.975477][ T8939] hfs: request for non-existent node 1280 in B*Tree
[  475.067580][   T42] hfs: request for non-existent node 1280 in B*Tree
[  475.095606][   T42] hfs: request for non-existent node 1280 in B*Tree
[  475.221382][  T967] usb 2-1: USB disconnect, device number 12
[  475.883702][ T8950] loop3: detected capacity change from 0 to 256
[  476.108834][ T8956] loop2: detected capacity change from 0 to 64
[  476.875974][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  478.423391][ T8972] loop3: detected capacity change from 0 to 8
[  478.504850][ T8957] loop1: detected capacity change from 0 to 32768
[  478.515617][ T8974] loop2: detected capacity change from 0 to 2048
[  478.517769][ T8972] SQUASHFS error: Unable to read directory block [1d0:22]
[  478.534841][ T8972] SQUASHFS error: Unable to read directory block [1d0:22]
[  478.551573][ T8957] JBD2: Ignoring recovery information on journal
[  478.593072][ T8976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  478.748015][ T5770] SQUASHFS error: Unable to read directory block [1d0:22]
[  478.784539][ T8957] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  478.896714][ T5770] SQUASHFS error: Unable to read directory block [1d0:22]
[  479.684969][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  479.946431][ T8976] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  479.969679][  T967] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  479.971795][ T8976] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  479.994576][ T8976] Remounting filesystem read-only
[  480.006589][ T3443] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  480.014798][  T967] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  480.048126][ T3443] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  480.055480][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.082068][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.105810][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.125145][ T3443] NILFS (loop2): discard dirty page: offset=0, ino=3
[  480.145370][ T3443] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  480.176282][ T3443] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  480.195983][ T5810] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  480.198700][ T3443] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  480.232589][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.263047][ T3443] NILFS (loop2): discard dirty page: offset=65536, ino=3
[  480.283331][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.294079][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.303160][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.311370][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.319833][ T3443] NILFS (loop2): discard dirty page: offset=69632, ino=3
[  480.327151][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.334563][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.342000][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.350288][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.358869][ T3443] NILFS (loop2): discard dirty page: offset=73728, ino=3
[  480.366254][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.375662][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.383098][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.389532][ T5810] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  480.397753][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.409293][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  480.410783][ T3443] NILFS (loop2): discard dirty page: offset=77824, ino=3
[  480.418970][ T5810] usb 4-1: Product: syz
[  480.424892][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.447444][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.455224][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.455841][ T5810] usb 4-1: Manufacturer: syz
[  480.462885][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.474851][ T5810] usb 4-1: SerialNumber: syz
[  480.496879][ T5810] usb 4-1: config 0 descriptor??
[  480.515542][ T3443] NILFS (loop2): discard dirty page: offset=81920, ino=3
[  480.534189][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.551058][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.568770][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.593428][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.611243][ T3443] NILFS (loop2): discard dirty page: offset=86016, ino=3
[  480.625825][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.643826][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.653949][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.666529][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.683974][ T3443] NILFS (loop2): discard dirty page: offset=90112, ino=3
[  480.701441][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.710842][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.720803][ T3443] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  480.731544][ T5810] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  480.740560][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.756284][ T3443] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  480.764902][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.776026][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  480.784895][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.794401][ T3443] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  480.802423][ T5810] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  480.812293][ T3443] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  480.821678][ T5810] usb 4-1: media controller created
[  480.827658][ T5772] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  480.845229][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  480.893589][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=6
[  480.917006][ T5772] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  480.924354][ T5772] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  480.948476][ T5772] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  480.955993][    T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  480.963904][ T5810] DVB: Unable to find symbol dib7000p_attach()
[  480.970955][ T5810] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  480.981080][ T5772] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  480.988965][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  480.998952][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=5
[  481.005670][ T5772] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  481.013498][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.023018][ T5810] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  481.032067][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.041937][ T5810] usb 4-1: media controller created
[  481.048198][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.050785][ T9001] loop1: detected capacity change from 0 to 40427
[  481.060011][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  481.072553][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=4
[  481.096619][ T5772] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  481.103957][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.114760][ T9001] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[  481.123440][ T9001] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  481.132389][ T5810] dib0700: the master dib7090 has to be initialized first
[  481.142676][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.150196][ T5810] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  481.155532][ T9001] F2FS-fs (loop1): Found nat_bits in checkpoint
[  481.176839][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  481.177149][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  481.205945][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  481.227692][    T8] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  481.246158][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.258120][    T8] usb 1-1: config 0 descriptor??
[  481.355833][ T9001] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  481.363117][ T9001] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  481.375821][ T5810] rc_core: IR keymap rc-dib0700-rc5 not found
[  481.382063][ T5810] Registered IR keymap rc-empty
[  481.401090][ T9009] loop2: detected capacity change from 0 to 2048
[  481.416412][ T5810] dvb-usb: could not initialize remote control.
[  481.422747][ T5810] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  481.472337][ T9010] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  481.508491][ T5810] usb 4-1: USB disconnect, device number 17
[  481.583900][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  481.583916][   T28] audit: type=1800 audit(2000000285.429:17): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.896" name="file1" dev="loop2" ino=15 res=0 errno=0
[  481.665829][ T5810] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  481.693182][ T9001] syz.1.901: attempt to access beyond end of device
[  481.693182][ T9001] loop1: rw=34817, sector=77824, nr_sectors = 16 limit=40427
[  481.702340][    T8] pyra 0003:1E7D:2CF6.000C: item fetching failed at offset 0/7
[  481.744489][   T28] audit: type=1800 audit(2000000285.479:18): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.901" name="file1" dev="loop1" ino=10 res=0 errno=0
[  481.774451][    T8] pyra 0003:1E7D:2CF6.000C: parse failed
[  481.797891][    T8] pyra: probe of 0003:1E7D:2CF6.000C failed with error -22
[  481.888299][ T5766] syz-executor: attempt to access beyond end of device
[  481.888299][ T5766] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  481.919994][ T5766] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  482.061134][   T23] usb 1-1: USB disconnect, device number 10
[  482.266069][  T967] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  483.249414][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  483.270794][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  483.292365][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  483.320687][  T967] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  483.371950][  T967] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  483.383049][  T967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.426961][  T967] usb 3-1: Product: syz
[  483.447236][  T967] usb 3-1: Manufacturer: syz
[  483.476019][  T967] usb 3-1: SerialNumber: syz
[  483.500391][  T967] usb 3-1: config 0 descriptor??
[  484.226338][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  484.426093][    T8] usb 1-1: Using ep0 maxpacket: 16
[  484.448984][    T8] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  484.491505][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.535823][    T8] usb 1-1: Product: syz
[  484.556094][    T8] usb 1-1: Manufacturer: syz
[  484.560777][    T8] usb 1-1: SerialNumber: syz
[  484.624567][ T9046] loop1: detected capacity change from 0 to 512
[  484.711513][    T8] usb 1-1: config 0 descriptor??
[  484.940202][  T967] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  485.095181][  T967] usb 3-1: USB disconnect, device number 15
[  485.181563][    T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  485.219037][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  485.251531][    T8] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  485.265132][    T8] usb 1-1: media controller created
[  485.300845][ T9052] loop1: detected capacity change from 0 to 2048
[  485.300978][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  485.373889][ T9053] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  485.907939][ T9040] dtv5100: wlen = 65, aborting.
[  486.005795][    T8] zl10353_read_register: readreg error (reg=127, ret==0)
[  486.013155][    T8] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  486.108852][    T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  486.173456][  T967] usb 1-1: USB disconnect, device number 11
[  486.245146][  T967] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  486.472807][ T9053] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  486.484391][ T9053] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  486.499864][ T9053] Remounting filesystem read-only
[  486.505180][ T3477] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  486.512066][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.921'.
[  486.512216][ T3477] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  486.532907][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.549322][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.558906][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.568839][ T3477] NILFS (loop1): discard dirty page: offset=0, ino=3
[  486.575552][ T3477] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  486.584679][ T3477] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  486.592779][ T3477] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  486.601110][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.626492][ T3477] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  486.639385][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.655359][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  486.674912][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.694981][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.715317][ T3477] NILFS (loop1): discard dirty page: offset=69632, ino=3
[  486.725945][ T5781] Bluetooth: min 33022 > max 0
[  486.743063][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.756070][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.763340][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.819803][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.839792][ T3477] NILFS (loop1): discard dirty page: offset=73728, ino=3
[  486.847098][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.854828][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.867961][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.881714][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.911481][ T3477] NILFS (loop1): discard dirty page: offset=77824, ino=3
[  486.929385][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.939978][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.955821][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.965202][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.972614][ T3477] NILFS (loop1): discard dirty page: offset=81920, ino=3
[  486.984801][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  486.992503][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.000207][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.012823][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.022810][ T3477] NILFS (loop1): discard dirty page: offset=86016, ino=3
[  487.038888][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.049472][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.057058][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.064288][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.072543][ T3477] NILFS (loop1): discard dirty page: offset=90112, ino=3
[  487.080433][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.088517][ T3477] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  487.095847][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.104956][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.113981][ T3477] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  487.122432][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.138909][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.161610][ T3477] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  487.170419][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.199221][ T3477] NILFS (loop1): discard dirty page: offset=0, ino=5
[  487.207218][ T3477] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  487.214544][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.223826][    T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  487.240061][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.251988][ T3477] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.302196][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  487.322318][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  487.333877][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  487.343332][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  487.353403][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  487.363285][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=4
[  487.370374][ T5766] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  487.378078][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.406578][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.415486][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  487.427103][    T8] usb 3-1: Using ep0 maxpacket: 32
[  487.449373][    T8] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  487.466869][    T8] usb 3-1: config 0 has no interface number 0
[  487.485831][    T8] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  487.509852][    T8] usb 3-1: config 0 interface 196 has no altsetting 0
[  487.534752][    T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  487.554919][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.575166][    T8] usb 3-1: Product: syz
[  487.585287][    T8] usb 3-1: Manufacturer: syz
[  487.597941][    T8] usb 3-1: SerialNumber: syz
[  487.616668][    T8] usb 3-1: config 0 descriptor??
[  487.624898][ T9070] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  488.085504][    T8] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  488.106042][    T8] ipheth: probe of 3-1:0.196 failed with error -22
[  488.336231][  T967] usb 3-1: USB disconnect, device number 16
[  488.621382][   T28] audit: type=1326 audit(2000000292.469:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1d559bf79 code=0x7fc00000
[  488.786002][ T5781] Bluetooth: hci3: command 0x0406 tx timeout
[  489.245458][   T28] audit: type=1326 audit(2000000293.089:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9086 comm="syz.0.931" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb1d553d399 code=0x7fc00000
[  489.467121][ T9102] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'.
[  489.473750][ T9101] syz.2.935 uses obsolete (PF_INET,SOCK_PACKET)
[  489.493876][ T9101] syzkaller1: entered promiscuous mode
[  489.502212][ T9101] syzkaller1: entered allmulticast mode
[  489.717939][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  490.017521][    T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  490.043419][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  490.049282][ T9112] loop1: detected capacity change from 0 to 2048
[  490.059444][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  490.075556][ T9114] loop2: detected capacity change from 0 to 1024
[  490.076325][    T8] usb 1-1: SerialNumber: syz
[  490.113832][ T9115] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  490.583941][ T9114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  491.145195][    T8] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  491.184954][ T9115] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  491.209353][ T9115] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[  491.237698][ T9115] Remounting filesystem read-only
[  491.250351][ T3550] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  491.273427][ T3550] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  491.292461][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.311891][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.351896][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.366372][ T3550] NILFS (loop1): discard dirty page: offset=0, ino=3
[  491.383357][ T3550] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  491.396005][ T3550] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  491.403352][ T3550] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  491.434155][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.453990][ T3550] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  491.464106][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.485823][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.485849][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485864][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485890][ T3550] NILFS (loop1): discard dirty page: offset=69632, ino=3
[  491.485905][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485920][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485934][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485948][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485967][ T3550] NILFS (loop1): discard dirty page: offset=73728, ino=3
[  491.485981][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.485995][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486008][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486022][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486042][ T3550] NILFS (loop1): discard dirty page: offset=77824, ino=3
[  491.486056][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486069][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486167][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486182][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486202][ T3550] NILFS (loop1): discard dirty page: offset=81920, ino=3
[  491.486216][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486230][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486243][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486257][ T3550] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  491.486276][ T3550] NILFS (loop1): discard dirty page: offset=196608, ino=3
[  491.486290][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.486304][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.486318][ T3550] NILFS (loop1): discard dirty block: blocknr=49, size=1024
[  491.486331][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.486397][ T3550] NILFS (loop1): discard dirty page: offset=0, ino=5
[  491.486411][ T3550] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  491.486426][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.486440][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.486454][ T3550] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.489151][ T5766] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  491.545228][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=6
[  491.545252][ T5766] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  491.545270][ T5766] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  491.545284][ T5766] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  491.545298][ T5766] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  491.548573][ T5766] NILFS (loop1): discard dirty page: offset=0, ino=4
[  491.548595][ T5766] NILFS (loop1): discard dirty block: blocknr=40, size=1024
[  491.548610][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.548625][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  491.548638][ T5766] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  492.255575][ T9127] loop1: detected capacity change from 0 to 32768
[  492.317959][ T9127] JBD2: Ignoring recovery information on journal
[  492.467934][ T9127] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  492.508249][    T8] usb 1-1: USB disconnect, device number 12
[  492.509567][    T8] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  492.963458][ T5766] ocfs2: Unmounting device (7,1) on (node local)
[  493.334071][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.554798][  T967] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  494.778502][  T967] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32
[  494.788994][  T967] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.861076][  T967] usb 2-1: config 0 descriptor??
[  494.904500][  T967] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  495.138991][  T967] gp8psk: usb in 128 operation failed.
[  495.179866][ T9162] loop2: detected capacity change from 0 to 32768
[  495.232564][ T9162] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  495.331198][ T9162] XFS (loop2): Ending clean mount
[  495.348695][  T967] gp8psk: usb in 146 operation failed.
[  495.362459][  T967] gp8psk: failed to get FW version
[  495.374224][  T967] gp8psk: FPGA Version = 169
[  495.423107][ T5772] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  495.575904][  T967] gp8psk: usb in 138 operation failed.
[  495.596266][  T967] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  495.620919][  T967] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver)
[  495.645593][  T967] usb 2-1: media controller created
[  495.721328][  T967] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  495.796437][  T967] gp8psk_fe: Frontend attached
[  495.817930][  T967] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  495.842325][  T967] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  495.895929][ T5810] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  495.962798][  T967] gp8psk: usb in 138 operation failed.
[  495.975551][  T967] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected.
[  495.985539][  T967] gp8psk: found Genpix USB device pID = 203 (hex)
[  495.998604][  T967] usb 2-1: USB disconnect, device number 13
[  496.090452][ T5810] usb 1-1: Using ep0 maxpacket: 16
[  496.133643][ T5810] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.164233][ T5810] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  496.184248][ T5810] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.190197][  T967] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected.
[  496.240619][ T5810] usb 1-1: config 0 descriptor??
[  496.713628][ T5810] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  496.774844][ T9194] loop2: detected capacity change from 0 to 32768
[  496.816396][ T9194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.954 (9194)
[  496.844399][ T9204] loop1: detected capacity change from 0 to 1024
[  496.909921][ T9194] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  496.971975][ T9194] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  497.004995][ T9194] BTRFS info (device loop2): allowing degraded mounts
[  497.030418][ T5766] hfsplus: bad catalog folder thread
[  497.036362][ T9194] BTRFS info (device loop2): enabling ssd optimizations
[  497.043436][ T9194] BTRFS info (device loop2): allowing degraded mounts
[  497.050484][ T5766] hfsplus: bad catalog folder thread
[  497.104272][ T9194] BTRFS info (device loop2): using free space tree
[  497.228183][  T967] usb 1-1: USB disconnect, device number 13
[  497.735394][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.901533][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  497.962980][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.160610][ T9224] netlink: 172 bytes leftover after parsing attributes in process `syz.0.963'.
[  498.199862][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.269793][ T9224] netlink: 172 bytes leftover after parsing attributes in process `syz.0.963'.
[  498.390415][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.905032][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  498.918871][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  498.927771][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  498.940634][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  498.949850][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  498.957335][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  499.519659][ T9237] veth0: Caught tx_queue_len zero misconfig
[  499.542684][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  499.556271][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  499.587031][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  499.613388][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  499.621379][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  499.629091][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  499.793264][ T9234] loop2: detected capacity change from 0 to 32768
[  499.852031][ T9234] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  499.895374][ T9234] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.067486][ T9234] XFS (loop2): Ending clean mount
[  500.122229][ T9234] XFS (loop2): Quotacheck needed: Please wait.
[  500.176230][  T967] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  500.264617][ T9234] XFS (loop2): Quotacheck: Done.
[  500.403539][  T967] usb 1-1: Using ep0 maxpacket: 8
[  500.414674][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.428768][  T967] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  500.442488][  T967] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  500.456953][  T967] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  500.466950][  T967] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  500.477233][  T967] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  500.501758][  T967] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  500.523896][  T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.785488][  T967] usb 1-1: GET_CAPABILITIES returned 0
[  500.803953][  T967] usbtmc 1-1:16.0: can't read capabilities
[  500.809744][ T9230] chnl_net:caif_netlink_parms(): no params data found
[  500.972512][   T49] bond0: (slave wlan1): Releasing backup interface
[  501.028057][ T5781] Bluetooth: hci0: command tx timeout
[  501.301814][    T8] usb 1-1: USB disconnect, device number 14
[  501.665942][ T5781] Bluetooth: hci1: command tx timeout
[  502.295668][ T9242] chnl_net:caif_netlink_parms(): no params data found
[  503.184520][ T5781] Bluetooth: hci0: command tx timeout
[  503.416025][ T9301] x_tables: unsorted entry at hook 2
[  503.751351][ T9304] loop2: detected capacity change from 0 to 128
[  503.915852][ T5781] Bluetooth: hci1: command tx timeout
[  503.921838][   T28] audit: type=1800 audit(2000000307.739:21): pid=9304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.975" name="file1" dev="loop2" ino=1048966 res=0 errno=0
[  503.989313][   T49] hsr_slave_0: left promiscuous mode
[  503.996486][   T49] hsr_slave_1: left promiscuous mode
[  504.006635][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  504.014254][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.025179][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  504.042233][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.065351][   T49] batman_adv: batadv0: Interface deactivated: vlan1
[  504.091655][   T49] batman_adv: batadv0: Removing interface: vlan1
[  504.105689][   T49] bridge_slave_1: left allmulticast mode
[  504.115810][   T49] bridge_slave_1: left promiscuous mode
[  504.137136][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.173570][   T49] bridge_slave_0: left allmulticast mode
[  504.179526][   T49] bridge_slave_0: left promiscuous mode
[  504.197329][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.254887][   T49] veth1_macvtap: left promiscuous mode
[  504.262833][   T49] veth0_macvtap: left promiscuous mode
[  504.268769][   T49] veth1_vlan: left promiscuous mode
[  504.280337][   T49] veth0_vlan: left promiscuous mode
[  504.463765][ T9309] loop2: detected capacity change from 0 to 32768
[  504.480657][ T9309] BTRFS: device fsid d4515e72-4b5f-44ec-805d-b3edf811e7f1 devid 1 transid 8 /dev/loop2 scanned by syz.2.977 (9309)
[  504.519293][ T9309] BTRFS info (device loop2): first mount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[  504.546722][ T9309] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  504.556735][ T9309] BTRFS info (device loop2): using free space tree
[  504.641404][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  504.649519][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  504.702519][ T9309] BTRFS info (device loop2): enabling ssd optimizations
[  504.709760][ T9309] BTRFS info (device loop2): auto enabling async discard
[  504.900008][   T28] audit: type=1804 audit(2000000308.749:22): pid=9331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.977" name="/newroot/232/file0/file2" dev="loop2" ino=261 res=1 errno=0
[  505.111340][ T5772] BTRFS info (device loop2): last unmount of filesystem d4515e72-4b5f-44ec-805d-b3edf811e7f1
[  505.267881][ T5781] Bluetooth: hci0: command tx timeout
[  505.902867][ T9336] loop2: detected capacity change from 0 to 32768
[  505.919063][ T9336] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.981 (9336)
[  505.964169][ T9336] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  505.981222][ T9336] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  505.991836][ T5781] Bluetooth: hci1: command tx timeout
[  505.997973][ T9336] BTRFS info (device loop2): setting nodatacow, compression disabled
[  506.006487][ T9336] BTRFS info (device loop2): force clearing of disk cache
[  506.013649][ T9336] BTRFS info (device loop2): enabling ssd optimizations
[  506.021170][ T9336] BTRFS info (device loop2): using spread ssd allocation scheme
[  506.029542][ T9336] BTRFS info (device loop2): turning off barriers
[  506.036558][ T9336] BTRFS info (device loop2): disabling free space tree
[  506.045063][ T9336] BTRFS info (device loop2): not using ssd optimizations
[  506.052787][ T9336] BTRFS info (device loop2): not using spread ssd allocation scheme
[  506.220471][   T49] team0 (unregistering): Port device team_slave_1 removed
[  506.297231][   T49] team0 (unregistering): Port device team_slave_0 removed
[  506.297962][ T9336] BTRFS info (device loop2): rebuilding free space tree
[  506.392581][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  506.404527][ T9336] BTRFS info (device loop2): disabling free space tree
[  506.412858][ T9336] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  506.437662][ T9336] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  506.507137][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  506.790934][ T5772] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  507.361491][ T5781] Bluetooth: hci0: command tx timeout
[  507.418335][   T49] bond0 (unregistering): Released all slaves
[  507.575990][ T9230] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.583230][ T9230] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.590674][ T9230] bridge_slave_0: entered allmulticast mode
[  507.601729][ T9230] bridge_slave_0: entered promiscuous mode
[  507.648011][ T9230] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.655302][ T9230] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.675118][ T9230] bridge_slave_1: entered allmulticast mode
[  507.682761][ T9230] bridge_slave_1: entered promiscuous mode
[  507.772804][ T9242] bridge0: port 1(bridge_slave_0) entered blocking state
[  507.793288][ T9242] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.813122][ T9242] bridge_slave_0: entered allmulticast mode
[  507.842108][ T9242] bridge_slave_0: entered promiscuous mode
[  507.868124][ T9230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  507.888398][ T9242] bridge0: port 2(bridge_slave_1) entered blocking state
[  507.906224][ T9242] bridge0: port 2(bridge_slave_1) entered disabled state
[  507.913487][ T9242] bridge_slave_1: entered allmulticast mode
[  507.934320][ T9242] bridge_slave_1: entered promiscuous mode
[  507.973066][ T9230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.065879][ T5781] Bluetooth: hci1: command tx timeout
[  508.153567][ T9230] team0: Port device team_slave_0 added
[  508.174178][ T9242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  508.209848][ T9230] team0: Port device team_slave_1 added
[  508.300524][ T9242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  508.378554][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  508.401154][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.444434][ T9230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  508.498023][ T9230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  508.525530][ T9230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  508.601067][ T9230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  508.681498][ T9242] team0: Port device team_slave_0 added
[  508.788468][ T9242] team0: Port device team_slave_1 added
[  508.866973][ T9230] hsr_slave_0: entered promiscuous mode
[  508.899701][ T9230] hsr_slave_1: entered promiscuous mode
[  508.913773][ T9393] loop2: detected capacity change from 0 to 2048
[  508.962492][ T9393] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  509.007876][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  509.026821][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.037995][ T9393] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  509.076907][ T9242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  509.206538][ T9242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  509.213742][ T9242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  509.240967][ T9242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  509.667189][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.079647][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.267052][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.313691][ T9242] hsr_slave_0: entered promiscuous mode
[  510.347363][ T9242] hsr_slave_1: entered promiscuous mode
[  510.376213][ T9242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  510.402606][ T9242] Cannot create hsr debugfs directory
[  510.416386][ T9419] loop2: detected capacity change from 0 to 256
[  510.562650][ T9419] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000003)
[  510.601749][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  510.612001][ T9419] FAT-fs (loop2): Filesystem has been set read-only
[  511.179036][ T9230] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  511.221772][ T9230] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  511.276734][ T9230] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  511.300318][   T49] tipc: Left network mode
[  511.313520][ T9230] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  511.414237][ T9436] loop2: detected capacity change from 0 to 2048
[  511.484383][ T9440] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  512.219802][ T9443] x_tables: unsorted entry at hook 2
[  512.598628][ T9242] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  512.685901][ T9242] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  512.781749][ T9440] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  512.806472][ T9242] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  512.813675][ T9440] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  512.827698][ T9242] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  512.838314][ T9440] Remounting filesystem read-only
[  512.843484][ T3477] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  512.855810][ T3477] NILFS (loop2): discard dirty block: blocknr=39, size=1024
[  512.863423][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  512.884229][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  512.906180][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  512.915265][ T3477] NILFS (loop2): discard dirty page: offset=0, ino=3
[  512.937038][ T3477] NILFS (loop2): discard dirty block: blocknr=42, size=1024
[  512.964817][ T3477] NILFS (loop2): discard dirty block: blocknr=43, size=1024
[  512.972870][ T3477] NILFS (loop2): discard dirty block: blocknr=44, size=1024
[  512.991750][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.016194][ T3477] NILFS (loop2): discard dirty page: offset=65536, ino=3
[  513.031679][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.045771][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.070375][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.088022][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.101085][ T3477] NILFS (loop2): discard dirty page: offset=69632, ino=3
[  513.110291][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.128878][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.145826][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.153096][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.176678][ T3477] NILFS (loop2): discard dirty page: offset=73728, ino=3
[  513.183766][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.193039][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.216519][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.223886][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.235597][ T3477] NILFS (loop2): discard dirty page: offset=77824, ino=3
[  513.248867][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.261639][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.288053][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.295376][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.305641][ T3477] NILFS (loop2): discard dirty page: offset=81920, ino=3
[  513.369042][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.386618][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.396080][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.427385][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.434663][ T3477] NILFS (loop2): discard dirty page: offset=86016, ino=3
[  513.458673][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.471681][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.479528][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.487639][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.495202][ T3477] NILFS (loop2): discard dirty page: offset=90112, ino=3
[  513.503306][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.523520][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.552564][ T3477] NILFS (loop2): discard dirty block: blocknr=0, size=1024
[  513.560413][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.570605][ T3477] NILFS (loop2): discard dirty page: offset=196608, ino=3
[  513.579241][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.588798][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.608594][ T3477] NILFS (loop2): discard dirty block: blocknr=49, size=1024
[  513.626425][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.645967][ T3477] NILFS (loop2): discard dirty page: offset=0, ino=5
[  513.675893][ T3477] NILFS (loop2): discard dirty block: blocknr=41, size=1024
[  513.691571][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.718644][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.729301][ T9230] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.736679][ T3477] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.755282][ T5772] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  513.850733][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=6
[  513.876915][ T5772] NILFS (loop2): discard dirty block: blocknr=35, size=1024
[  513.884276][ T5772] NILFS (loop2): discard dirty block: blocknr=36, size=1024
[  513.907072][ T5772] NILFS (loop2): discard dirty block: blocknr=37, size=1024
[  513.911487][ T9242] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.914395][ T5772] NILFS (loop2): discard dirty block: blocknr=38, size=1024
[  513.947829][ T5772] NILFS (loop2): discard dirty page: offset=0, ino=4
[  513.954568][ T5772] NILFS (loop2): discard dirty block: blocknr=40, size=1024
[  513.956653][ T9230] 8021q: adding VLAN 0 to HW filter on device team0
[  513.971154][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  513.983084][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  514.003410][ T5772] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024
[  514.037245][   T49] hsr_slave_0: left promiscuous mode
[  514.047516][   T49] hsr_slave_1: left promiscuous mode
[  514.064413][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  514.074340][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  514.092688][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  514.106091][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  514.134596][   T49] bridge_slave_1: left allmulticast mode
[  514.140462][   T49] bridge_slave_1: left promiscuous mode
[  514.156343][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.173643][   T49] bridge_slave_0: left allmulticast mode
[  514.186043][   T49] bridge_slave_0: left promiscuous mode
[  514.192533][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.275229][   T49] veth1_macvtap: left promiscuous mode
[  514.289230][   T49] veth0_macvtap: left promiscuous mode
[  514.295562][   T49] veth1_vlan: left promiscuous mode
[  514.323613][   T49] veth0_vlan: left promiscuous mode
[  514.457849][ T9479] loop2: detected capacity change from 0 to 1024
[  514.768832][ T9481] loop2: detected capacity change from 0 to 512
[  514.815652][ T9481] EXT4-fs error (device loop2): ext4_orphan_get:1398: inode #15: comm syz.2.1004: iget: bad i_size value: 38620345925642
[  514.836730][ T9481] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.1004: couldn't read orphan inode 15 (err -117)
[  514.896477][ T9481] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback.
[  515.002146][ T9481] EXT4-fs (loop2): shut down requested (0)
[  515.201505][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000.
[  515.327776][ T9488] loop2: detected capacity change from 0 to 128
[  515.350609][   T28] audit: type=1800 audit(2000000319.199:23): pid=9488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1006" name="file2" dev="loop2" ino=1048969 res=0 errno=0
[  515.400152][ T9488] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  515.416790][ T9488] FAT-fs (loop2): Filesystem has been set read-only
[  515.423450][ T9488] syz.2.1006: attempt to access beyond end of device
[  515.423450][ T9488] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  515.425858][ T5849] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  515.438786][ T9488] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  515.485186][ T9488] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  515.659759][ T5849] usb 1-1: Using ep0 maxpacket: 32
[  515.675452][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  515.697208][ T5849] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  515.707190][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  515.715389][ T5849] usb 1-1: Product: syz
[  515.720189][ T5849] usb 1-1: Manufacturer: syz
[  515.724835][ T5849] usb 1-1: SerialNumber: syz
[  515.732398][ T5849] usb 1-1: config 0 descriptor??
[  515.743881][ T9486] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  515.855758][   T49] team0 (unregistering): Port device team_slave_1 removed
[  515.906030][    T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  515.918035][   T49] team0 (unregistering): Port device team_slave_0 removed
[  515.978210][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  516.051925][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  516.121015][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  516.138089][    T8] usb 3-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00
[  516.147809][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.165684][    T8] usb 3-1: config 0 descriptor??
[  516.633174][    T8] wacom 0003:056A:0018.000E: unbalanced collection at end of report description
[  516.649756][    T8] wacom 0003:056A:0018.000E: parse failed
[  516.659770][    T8] wacom: probe of 0003:056A:0018.000E failed with error -22
[  516.753528][   T49] bond0 (unregistering): Released all slaves
[  516.842150][ T5849] usb 3-1: USB disconnect, device number 17
[  516.956842][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state
[  516.964133][ T3550] bridge0: port 1(bridge_slave_0) entered forwarding state
[  516.981972][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state
[  516.989148][ T3550] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.060354][ T9242] 8021q: adding VLAN 0 to HW filter on device team0
[  517.128302][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.135504][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state
[  517.223596][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.230955][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state
[  517.949412][ T9230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.033851][ T9242] 8021q: adding VLAN 0 to HW filter on device batadv0
[  518.187689][    T8] usb 1-1: USB disconnect, device number 15
[  518.358370][ T9525] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  518.521337][ T9502] loop2: detected capacity change from 0 to 40427
[  518.581135][ T9502] F2FS-fs (loop2): invalid crc value
[  518.594416][ T9502] F2FS-fs (loop2): Found nat_bits in checkpoint
[  518.796396][ T9230] veth0_vlan: entered promiscuous mode
[  518.815340][ T9502] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  518.867760][ T9230] veth1_vlan: entered promiscuous mode
[  518.961460][ T9242] veth0_vlan: entered promiscuous mode
[  518.988097][ T9502] syz.2.1008: attempt to access beyond end of device
[  518.988097][ T9502] loop2: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  519.038603][ T9242] veth1_vlan: entered promiscuous mode
[  519.065685][ T9230] veth0_macvtap: entered promiscuous mode
[  519.102378][ T9230] veth1_macvtap: entered promiscuous mode
[  519.215398][ T5772] syz-executor: attempt to access beyond end of device
[  519.215398][ T5772] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  519.233251][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.257667][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.266476][ T5772] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  519.330330][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.345045][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.380764][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.390909][ T9242] veth0_macvtap: entered promiscuous mode
[  519.412876][ T9242] veth1_macvtap: entered promiscuous mode
[  519.424248][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.436355][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.446570][ T9230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.457483][ T9230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.477528][ T9230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  519.489842][ T9230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  519.529798][ T9230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  519.554969][ T9230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  519.582499][ T9230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  519.631761][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.665830][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.690985][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.715813][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.731797][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  519.754786][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.768811][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_0
[  519.835332][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.876115][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.890882][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.904814][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.919971][ T9242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  519.930747][ T9242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  519.957606][ T9242] batman_adv: batadv0: Interface activated: batadv_slave_1
[  520.028621][ T9242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  520.056323][ T9242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  520.065075][ T9242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  520.180001][ T9242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  520.382247][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.435929][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.605805][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.608111][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.613650][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.685614][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  520.767731][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  520.798249][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  521.476969][ T9572] loop4: detected capacity change from 0 to 512
[  521.927240][ T9582] random: crng reseeded on system resumption
[  522.092248][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  522.173371][ T9589] loop4: detected capacity change from 0 to 512
[  522.196856][ T9589] EXT4-fs: Ignoring removed i_version option
[  522.202902][ T9589] EXT4-fs: Ignoring removed bh option
[  522.304703][ T9589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.358258][ T9589] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  522.391082][ T9570] loop2: detected capacity change from 0 to 32768
[  522.425973][ T9570] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1015 (9570)
[  522.468851][ T9570] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  522.483319][ T9570] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  522.506424][ T9570] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  522.535915][ T9570] BTRFS info (device loop2): force zstd compression, level 3
[  522.543382][ T9570] BTRFS info (device loop2): turning on sync discard
[  522.580022][ T9570] BTRFS info (device loop2): force clearing of disk cache
[  522.598187][ T9570] BTRFS info (device loop2): enabling disk space caching
[  522.605356][ T9570] BTRFS info (device loop2): turning off discard
[  522.632721][ T9570] BTRFS info (device loop2): disk space caching is enabled
[  522.758744][ T9230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.815919][ T9570] BTRFS info (device loop2): enabling ssd optimizations
[  522.826451][ T9570] BTRFS info (device loop2): rebuilding free space tree
[  522.877899][ T9570] BTRFS info (device loop2): disabling free space tree
[  522.901398][ T9570] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  522.947703][ T9570] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  523.420920][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  524.899449][ T9646] loop2: detected capacity change from 0 to 32768
[  524.924670][ T9646] 
[  524.924670][ T9646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  524.924670][ T9646] 
[  525.016666][ T9646] 
[  525.016666][ T9646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.016666][ T9646] 
[  525.054787][ T9646] 
[  525.054787][ T9646]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.054787][ T9646] 
[  525.097326][  T111] 
[  525.097326][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.097326][  T111] 
[  525.103141][   T28] audit: type=1800 audit(2000000328.939:24): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1025" name="file1" dev="loop2" ino=4 res=0 errno=0
[  525.168742][ T9668] syzkaller1: entered promiscuous mode
[  525.178126][ T9668] syzkaller1: entered allmulticast mode
[  525.350243][   T49] 
[  525.350243][   T49]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.350243][   T49] 
[  525.369414][ T9671] loop4: detected capacity change from 0 to 512
[  525.405908][   T49] 
[  525.405908][   T49]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.405908][   T49] 
[  525.431953][ T9671] EXT4-fs: Ignoring removed orlov option
[  525.453454][  T112] 
[  525.453454][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.453454][  T112] 
[  525.483797][ T9671] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  525.506692][ T5772] 
[  525.506692][ T5772]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.506692][ T5772] 
[  525.542878][ T5772] 
[  525.542878][ T5772]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  525.542878][ T5772] 
[  525.547696][ T9671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  525.573746][ T9671] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.1030: corrupted in-inode xattr: e_value size too large
[  525.689930][ T9651] loop5: detected capacity change from 0 to 32768
[  525.724160][ T9671] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1030: couldn't read orphan inode 15 (err -117)
[  525.779186][ T9671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  525.845080][ T9651] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  526.230423][ T9230] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.352981][ T9651] XFS (loop5): Ending clean mount
[  526.711208][ T9242] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  526.712556][ T9699] random: crng reseeded on system resumption
[  528.594368][ T9719] loop5: detected capacity change from 0 to 32768
[  528.679990][ T9719] JBD2: Ignoring recovery information on journal
[  528.793036][ T9719] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  529.922261][ T9242] ocfs2: Unmounting device (7,5) on (node local)
[  531.415491][ T9772] loop2: detected capacity change from 0 to 32768
[  531.494037][ T9772] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  531.611271][ T9772] XFS (loop2): Ending clean mount
[  531.629222][ T9772] XFS (loop2): Quotacheck needed: Please wait.
[  531.750644][ T9772] XFS (loop2): Quotacheck: Done.
[  531.790008][ T9808] loop4: detected capacity change from 0 to 2048
[  531.859210][ T9780] loop5: detected capacity change from 0 to 40427
[  531.884106][ T9780] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  531.915904][ T9780] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  531.924297][ T9812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  531.957821][   T28] audit: type=1804 audit(2000000335.799:25): pid=9772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1047" name="/newroot/258/file0/file1" dev="loop2" ino=4422 res=1 errno=0
[  531.984780][ T9780] F2FS-fs (loop5): invalid crc_offset: 33558524
[  532.143009][ T9780] F2FS-fs (loop5): Found nat_bits in checkpoint
[  532.720415][ T5772] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  532.732949][ T9812] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  532.752774][ T9812] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  532.773876][ T9780] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  532.788597][ T9812] Remounting filesystem read-only
[  532.793982][ T9780] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  532.795866][ T3550] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  532.821039][ T3550] NILFS (loop4): discard dirty block: blocknr=39, size=1024
[  532.853205][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.881216][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.920159][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  532.955936][ T3550] NILFS (loop4): discard dirty page: offset=0, ino=2
[  532.980575][ T5848] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  533.001679][ T3550] NILFS (loop4): discard dirty block: blocknr=18, size=1024
[  533.015989][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.045332][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.065845][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.090335][ T3550] NILFS (loop4): discard dirty page: offset=0, ino=5
[  533.110401][ T3550] NILFS (loop4): discard dirty block: blocknr=41, size=1024
[  533.119374][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.145479][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.170058][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.186330][ T5848] usb 1-1: Using ep0 maxpacket: 8
[  533.191575][ T3550] NILFS (loop4): discard dirty page: offset=0, ino=3
[  533.211979][ T5848] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  533.226593][ T3550] NILFS (loop4): discard dirty block: blocknr=42, size=1024
[  533.237908][ T9814] f2fs_ckpt-7:5: attempt to access beyond end of device
[  533.237908][ T9814] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  533.245873][ T3550] NILFS (loop4): discard dirty block: blocknr=43, size=1024
[  533.265641][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  533.293068][ T9814] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  533.296112][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  533.312445][ T3550] NILFS (loop4): discard dirty block: blocknr=44, size=1024
[  533.335984][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.345381][ T3550] NILFS (loop4): discard dirty page: offset=196608, ino=3
[  533.353682][ T5848] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  533.367422][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.376392][ T5848] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  533.385455][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.403797][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.422113][ T3550] NILFS (loop4): discard dirty block: blocknr=49, size=1024
[  533.484850][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.510006][ T3550] NILFS (loop4): discard dirty page: offset=0, ino=4
[  533.520097][ T3550] NILFS (loop4): discard dirty block: blocknr=40, size=1024
[  533.542184][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.574502][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.614346][ T3550] NILFS (loop4): discard dirty block: blocknr=18446744073709551615, size=1024
[  533.639259][ T5848] usb 1-1: GET_CAPABILITIES returned 0
[  533.644802][ T5848] usbtmc 1-1:16.0: can't read capabilities
[  533.666530][ T9230] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  533.706322][ T9230] NILFS (loop4): discard dirty page: offset=0, ino=6
[  533.726596][ T9230] NILFS (loop4): discard dirty block: blocknr=35, size=1024
[  533.738949][ T9230] NILFS (loop4): discard dirty block: blocknr=36, size=1024
[  533.746753][ T9230] NILFS (loop4): discard dirty block: blocknr=37, size=1024
[  533.755129][ T9230] NILFS (loop4): discard dirty block: blocknr=38, size=1024
[  533.870262][    C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  533.918554][   T23] usb 1-1: USB disconnect, device number 16
[  534.694348][ T9874] loop2: detected capacity change from 0 to 7
[  534.701828][ T9874] Dev loop2: unable to read RDB block 7
[  534.724925][ T9870] loop5: detected capacity change from 0 to 2048
[  534.741516][ T9874]  loop2: AHDI p1 p2 p3
[  534.746257][ T9874] loop2: partition table partially beyond EOD, truncated
[  534.778931][ T9874] loop2: p1 start 1601398130 is beyond EOD, truncated
[  534.787521][ T9874] loop2: p2 start 1702059890 is beyond EOD, truncated
[  534.892997][ T9878] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.162524][ T9878] NILFS (loop5): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  535.217647][ T9878] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=2)
[  535.251732][ T9878] Remounting filesystem read-only
[  535.272679][ T8866] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  535.425769][ T9887] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  535.481007][ T8866] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  535.725856][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.744715][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.760069][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.771088][ T8866] NILFS (loop5): discard dirty page: offset=0, ino=3
[  535.777990][ T8866] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  535.785568][ T8866] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  535.793500][ T8866] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  535.810548][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.845368][ T8866] NILFS (loop5): discard dirty page: offset=65536, ino=3
[  535.855476][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.881018][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.909961][ T8866] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  535.924039][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  535.945886][ T8866] NILFS (loop5): discard dirty page: offset=0, ino=18
[  535.955217][ T8866] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  535.989453][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.023649][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.045766][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.063294][ T8866] NILFS (loop5): discard dirty page: offset=0, ino=2
[  536.097779][ T8866] NILFS (loop5): discard dirty block: blocknr=18, size=1024
[  536.115398][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.144758][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.170305][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.218203][ T8866] NILFS (loop5): discard dirty page: offset=0, ino=5
[  536.224998][ T8866] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  536.243062][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.268821][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.286167][ T8866] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  536.306244][ T9870] NILFS (loop5): mounting fs with errors
[  536.408117][ T9878] ------------[ cut here ]------------
[  536.414396][ T9878] WARNING: CPU: 1 PID: 9878 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0
[  536.424445][ T9878] Modules linked in:
[  536.428578][ T9878] CPU: 1 PID: 9878 Comm: segctord Not tainted syzkaller #0
[  536.436389][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  536.446874][ T9878] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0
[  536.452659][ T9878] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 fa c4 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 e5 c4 88 ff <0f> 0b e9 84 fd ff ff e8 d9 c4 88 ff 0f 0b e9 b0 fd ff ff e8 cd c4
[  536.472409][ T9878] RSP: 0018:ffffc900034476f0 EFLAGS: 00010293
[  536.479685][ T9878] RAX: ffffffff81fe4ebb RBX: ffff88805cf7e740 RCX: ffff88802df93c00
[  536.488559][ T9878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  536.497254][ T9878] RBP: ffffc90003447b01 R08: ffff88805cf7e747 R09: 1ffff1100b9efce8
[  536.505295][ T9878] R10: dffffc0000000000 R11: ffffed100b9efce9 R12: 1ffff1100ebbccf7
[  536.513387][ T9878] R13: ffff888075de67c8 R14: ffff8880795d3328 R15: 1ffff1100ebbccf9
[  536.521768][ T9878] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  536.530850][ T9878] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  536.537521][ T9878] CR2: 00007f5abb5456b8 CR3: 000000000cf32000 CR4: 00000000003506e0
[  536.545535][ T9878] Call Trace:
[  536.549198][ T9878]  <TASK>
[  536.552175][ T9878]  nilfs_segctor_do_construct+0x307/0x68a0
[  536.558273][ T9878]  ? verify_lock_unused+0x140/0x140
[  536.563708][ T9878]  ? verify_lock_unused+0x140/0x140
[  536.569008][ T9878]  ? nilfs_transaction_unlock+0x220/0x220
[  536.574776][ T9878]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  536.581131][ T9878]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  536.586666][ T9878]  ? __lock_acquire+0x7d40/0x7d40
[  536.592245][ T9878]  ? __rwlock_init+0x150/0x150
[  536.597213][ T9878]  ? do_raw_spin_unlock+0x121/0x230
[  536.602467][ T9878]  ? _raw_spin_unlock+0x28/0x40
[  536.607478][ T9878]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  536.612970][ T9878]  nilfs_segctor_construct+0x17b/0x690
[  536.618537][ T9878]  nilfs_segctor_thread+0x536/0x10d0
[  536.624271][ T9878]  ? nilfs_iput_work_func+0x70/0x70
[  536.629842][ T9878]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  536.635941][ T9878]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  536.641876][ T9878]  ? wake_bit_function+0x200/0x200
[  536.647118][ T9878]  ? __kthread_parkme+0x7a/0x1c0
[  536.652086][ T9878]  kthread+0x2fa/0x390
[  536.656740][ T9878]  ? nilfs_iput_work_func+0x70/0x70
[  536.661969][ T9878]  ? kthread_blkcg+0xd0/0xd0
[  536.666634][ T9878]  ret_from_fork+0x48/0x80
[  536.671145][ T9878]  ? kthread_blkcg+0xd0/0xd0
[  536.675907][ T9878]  ret_from_fork_asm+0x11/0x20
[  536.680755][ T9878]  </TASK>
[  536.683800][ T9878] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  536.691094][ T9878] CPU: 1 PID: 9878 Comm: segctord Not tainted syzkaller #0
[  536.698311][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  536.708664][ T9878] Call Trace:
[  536.711961][ T9878]  <TASK>
[  536.714990][ T9878]  dump_stack_lvl+0x18c/0x250
[  536.719707][ T9878]  ? show_regs_print_info+0x20/0x20
[  536.724944][ T9878]  ? load_image+0x400/0x400
[  536.729498][ T9878]  panic+0x2dc/0x730
[  536.733426][ T9878]  ? bpf_jit_dump+0xd0/0xd0
[  536.737971][ T9878]  ? ret_from_fork_asm+0x11/0x20
[  536.742946][ T9878]  __warn+0x2e0/0x470
[  536.746960][ T9878]  ? mark_buffer_dirty+0x2bb/0x4c0
[  536.752108][ T9878]  ? mark_buffer_dirty+0x2bb/0x4c0
[  536.757258][ T9878]  report_bug+0x2be/0x4f0
[  536.761629][ T9878]  ? mark_buffer_dirty+0x2bb/0x4c0
[  536.766782][ T9878]  ? mark_buffer_dirty+0x2bb/0x4c0
[  536.771927][ T9878]  ? mark_buffer_dirty+0x2bd/0x4c0
[  536.777077][ T9878]  handle_bug+0xcf/0x120
[  536.781339][ T9878]  exc_invalid_op+0x1a/0x50
[  536.785854][ T9878]  asm_exc_invalid_op+0x1a/0x20
[  536.790711][ T9878] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0
[  536.796434][ T9878] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 fa c4 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 0a 09 e8 ff e8 e5 c4 88 ff <0f> 0b e9 84 fd ff ff e8 d9 c4 88 ff 0f 0b e9 b0 fd ff ff e8 cd c4
[  536.816035][ T9878] RSP: 0018:ffffc900034476f0 EFLAGS: 00010293
[  536.822099][ T9878] RAX: ffffffff81fe4ebb RBX: ffff88805cf7e740 RCX: ffff88802df93c00
[  536.830064][ T9878] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002
[  536.838027][ T9878] RBP: ffffc90003447b01 R08: ffff88805cf7e747 R09: 1ffff1100b9efce8
[  536.846162][ T9878] R10: dffffc0000000000 R11: ffffed100b9efce9 R12: 1ffff1100ebbccf7
[  536.854159][ T9878] R13: ffff888075de67c8 R14: ffff8880795d3328 R15: 1ffff1100ebbccf9
[  536.862224][ T9878]  ? mark_buffer_dirty+0x2bb/0x4c0
[  536.867430][ T9878]  nilfs_segctor_do_construct+0x307/0x68a0
[  536.873327][ T9878]  ? verify_lock_unused+0x140/0x140
[  536.878534][ T9878]  ? verify_lock_unused+0x140/0x140
[  536.883733][ T9878]  ? nilfs_transaction_unlock+0x220/0x220
[  536.889461][ T9878]  ? nilfs_bmap_test_and_clear_dirty+0x50/0x70
[  536.895627][ T9878]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  536.901086][ T9878]  ? __lock_acquire+0x7d40/0x7d40
[  536.906198][ T9878]  ? __rwlock_init+0x150/0x150
[  536.910964][ T9878]  ? do_raw_spin_unlock+0x121/0x230
[  536.916174][ T9878]  ? _raw_spin_unlock+0x28/0x40
[  536.921030][ T9878]  ? nilfs_segctor_confirm+0x24d/0x2d0
[  536.926509][ T9878]  nilfs_segctor_construct+0x17b/0x690
[  536.931998][ T9878]  nilfs_segctor_thread+0x536/0x10d0
[  536.937307][ T9878]  ? nilfs_iput_work_func+0x70/0x70
[  536.942498][ T9878]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  536.948394][ T9878]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  536.954287][ T9878]  ? wake_bit_function+0x200/0x200
[  536.959397][ T9878]  ? __kthread_parkme+0x7a/0x1c0
[  536.964336][ T9878]  kthread+0x2fa/0x390
[  536.968398][ T9878]  ? nilfs_iput_work_func+0x70/0x70
[  536.973589][ T9878]  ? kthread_blkcg+0xd0/0xd0
[  536.978170][ T9878]  ret_from_fork+0x48/0x80
[  536.982585][ T9878]  ? kthread_blkcg+0xd0/0xd0
[  536.987165][ T9878]  ret_from_fork_asm+0x11/0x20
[  536.992026][ T9878]  </TASK>
[  536.995635][ T9878] Kernel Offset: disabled
[  537.000095][ T9878] Rebooting in 86400 seconds..