last executing test programs:

3m15.81388134s ago: executing program 2 (id=616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

3m15.753332651s ago: executing program 2 (id=617):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20)

3m15.753159292s ago: executing program 2 (id=618):
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
readv(r0, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/10, 0xa}], 0x1)

3m15.630575522s ago: executing program 2 (id=619):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00')
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES8], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
ptrace(0x10, r1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r1)
ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0))
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000042000/0x2000)=nil, &(0x7f00001e3000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
umount2(&(0x7f0000000040)='./file0\x00', 0x2)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000200)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f00000003c0)=0x4000000000001000, 0x12)
utime(&(0x7f0000001100)='./file0/file0\x00', 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000001240)={'filter\x00', 0x7, 0x4, 0x3f8, 0x220, 0x220, 0x110, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast2, @empty, 0x1}}}, {{@arp={@remote, @broadcast, 0x0, 0xff, 0x3, 0x6, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x2, 0x6, 0x9, 0x8, 0x7ff, 'vlan0\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x20}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @empty, @loopback, @remote, 0x8, 0xffffffff}}}, {{@arp={@local, @private=0xa010101, 0xff000000, 0xff, 0xa, 0x6, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x152f, 0x3, 0x7, 0x8000, 0xfffd, 0x9, 'macvlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x108}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x6, 0xfffffff7, 0x401}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448)

3m13.998416783s ago: executing program 2 (id=631):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000040)='1\x00', 0x1)

3m13.333964367s ago: executing program 2 (id=634):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m13.152051125s ago: executing program 32 (id=634):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x25, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m25.233350907s ago: executing program 1 (id=1010):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
r0 = syz_io_uring_setup(0x34f8, &(0x7f0000000540)={0x0, 0x8dc9, 0x801, 0x1, 0x7f, 0x0, 0x0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4007, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0)

2m25.17076346s ago: executing program 1 (id=1011):
mkdir(&(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f00000003c0)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x80003, 0x0)

2m25.123450799s ago: executing program 1 (id=1012):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x1, r1, 0x0, 0x4000000, 0x7ae590b0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200})

2m25.073454367s ago: executing program 1 (id=1013):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)

2m25.027931561s ago: executing program 1 (id=1014):
syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f00000001c0)='./file0\x00', 0x21488b, &(0x7f0000000540)=ANY=[], 0x1, 0x65c, &(0x7f0000000cc0)="$eJzs3V1rG+n5x/HfyLKs+A/hT1uWEPJwJ+mCQ1NFkjcOIoV2OhrZs5U0YkZubSgs6cZeQuRsm6TQ+GTJSR9g+wb2bE+W0hdR6HHfRQ8LS3tW6MmUebJsS7LkRLF3t9+PiXVr5pq5r3tGmYuxpBkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABZTrNarVlqe93NLTOZ0wz8zgnz07Ut6nbauD2mqy+O9CtZ8T+Vy7qUTrr0neHsd+JfN3UlfXZF5fihrP3/e+f/H3y7WMiXPyGh16FImmGdpSxJY56/3H/ycDDYeTbnRL4CVJghaN3teqHvdex113ihbxpra9W7G63QtLySwu2w73aME7iFvh+YFee2qTUaq8atbPub3fWm3Xbzife/X69W18z7S9mWvft+JXQ2vHbb664nMfHsOOa++fTnaYhrd4zZfTzYWZ2WZBxUmyWoPi2oXq3Xa7V6vbZ2r3HvfrVaHJlQPUYjEXN/0eJrZn4Hb+ANFeL6/3dLaqusrja1JTP2x1FTgXx1JszP5PX/3bvuif0erv95lb80nH1ZSf2/lj67Nqn+T8jFyCQLjJtjTZj+ej/P9VL7eqKHGmigHT2bz3qvzy/Dt/uzLhUlT6F8eerI1rpcmWyKUUNrWlNVH2hDLYUyaslTW65CbStUX646yT4J5MpOWrEVOboto5oaamhVRq4q2pavTXW1rqZs/TuKol09Trb76gk5Kg+qzRJUPyFoUv3/xSdp1lPrvyXq/zdafvyaJQY4d1F2/n9K199ONgAAAAAA4G2wkr++W8l791clRWp5bbd63mkBAAAAAIA5St75vxI/LMatq7ImnP9HZ58bAAAAAACYDyv5jp0laTn5UL81/CbULB8CWDiDFAEAAAAAwBtK3v+/VpKi5Npr12Wd6vwfAAAAAAB8Dfz+0DX2i/k1dqP8bf2CpLC3ZP3ln0sKFq1Xva3vWnt2PMfey2JGPgHQb122LmYX6k0eSpKSZ457xbqaBmUXwbTSC/tKX+5Ou9a/FRxLoLSQ//liWgJrxeyZPtWNNOZG1u+j/YKSOWkvyy2v7VYcv/2gJtu+WOi7W/1fP338Gyk4GOfu48FO5cOPB4+SXF7Fk17txXl8ciSdwrRcXijbFlfHjviCWnmXf+h2lq2k32o+/gXZe4XDHc02/t/qZhpzczl9XN7P90Ay/nI8/lol2WXD0cej+uxPw9HXjo983I6YkEU5yeJWGnNr5Vb6kOeXZfG9BaleOb4PSvFLcLgt6oezmL4trH+NbIspWcTbYjXO4q/xioavhCNZrJ4ui5E9AgDnZXdYhZKLmI9eY/943X2do9z06v6jo728+CxKv3C4IBWz9yZO7KWs+Ii+kqxbJSUH1uLlg6Ps3o38iF7N6kpZE47o1TeobnFffx7eAylLe6Su/CeKoge1pN8/HvSbVtXP4wU+n9hv2K4vxCO8+2Lvl8kF8GMf7Xy087ReX12rvlet3qtrMRlG9kDtAQCMMf0eO1MjrPcOzqof/ePdtHWk4n3r4CMFFX2ojzXQI93JbyFwffxalw99DOHO6FlrHHtBOh5b052JZ3VJLU1jf7Zd+mEalPxeVL7I0Uo9XO/qW90HAACctZuNrDGhDs9S/+8k592SVi4fOu8+OGc/VsuP3yF4Us2tndk2AADgf40bfGkt939nBYHX+6DWaNTs/oZrAt/5iQm85rprvG7fDZwNu7vuml7g933Hb5teoCWv6YYm3Oz1/KBvWn5gen7obZmW13ZNduv30O3Y3b7nhL22a4eucfxu33b6pumFjult/rjthRtukCwc9lzHa3mO3ff8rgn9zcBxK8aErnso0Gu63b7X8uJm1/QCr2MH2+anfnuz45qmGzqB1+v76Qrzvrxuyw86yWorik59o0MAAL6Jnr/cf/JwMNh5NqmRnNFPiRk2SuNWmPfFO84AAHw1jFbpicpnkhAAAAAAAAAAAAAAAAAAAAAAABgx/St9p2wsjvuyoHQw5VcXZ1qPpXkndppG4fUX/9sJMRcOpuSb/3DMq3MYqdJGcf5rvnCar43OofGD3XSLToyJZ46dtXSwL4rz/+8QN55+MWFWFEXRyYsvHd2GpZMGeLRRlPSs9Aa74HyORwDOzn8DAAD//+I0QI0=")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0)

2m23.71342901s ago: executing program 1 (id=1020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000040)='securityfs\x00', 0x800000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e0", 0x1}], 0x1, 0x8, 0x5)

2m23.463139354s ago: executing program 33 (id=1020):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x20)
mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000040)='securityfs\x00', 0x800000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0)
pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e0", 0x1}], 0x1, 0x8, 0x5)

5.113556173s ago: executing program 3 (id=2040):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2.748836133s ago: executing program 4 (id=2057):
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
add_key$user(&(0x7f0000000040), 0x0, &(0x7f00000011c0), 0x0, 0xfffffffffffffffb)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000))
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6(0xa, 0x80003, 0x102)
setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000)=0xa4, 0x4)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000002140)=0x20)
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r5, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x1000)
openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0004000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000000000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405fe4f0e59a6c5870e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x40044)

1.312597849s ago: executing program 4 (id=2060):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208404, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe})
syslog(0x9, 0x0, 0x0)

991.216627ms ago: executing program 0 (id=2063):
r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f)
keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x5b)
keyctl$revoke(0x3, r0)

970.482895ms ago: executing program 3 (id=2064):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x5, 0x6], [0x9d8, 0x5, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc3c, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x4, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x0, 0x4, 0x5, 0x8, 0x8000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0x14, 0x5bc, 0x1, 0x7ffffffb, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xf, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x7, 0x0, 0x6, 0x6, 0xb, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x8, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x406, 0x3, 0x6, 0x2, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x3]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a})
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x2f)

831.108616ms ago: executing program 0 (id=2065):
r0 = timerfd_create(0x8, 0x800)
timerfd_settime(r0, 0x2, &(0x7f0000000000)={{}, {0x77359400}}, 0x0)
r1 = timerfd_create(0x8, 0x80800)
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
timerfd_settime(r1, 0x1, &(0x7f0000000680)={{}, {0x0, 0x3938700}}, 0x0)

830.98324ms ago: executing program 4 (id=2066):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x3a8, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x310, 0xffffffff, 0xffffffff, 0x310, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x258, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x800006, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x5, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x2, 0x5, 0x4023, 0x20}}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x1}, {0x4, 0x6, 0x2}, {0x2, 0x2, 0x3}, 0x1, 0x7f}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x3, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x408)

696.980935ms ago: executing program 0 (id=2067):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x58, 0xffffffffffffffff, {0x2}}, './file0\x00'})

695.755445ms ago: executing program 3 (id=2068):
r0 = socket(0x2b, 0x1, 0x1)
setsockopt$inet_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000140)=0xffffffbe, 0x4)

695.447991ms ago: executing program 4 (id=2069):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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")
lremovexattr(&(0x7f00000040c0)='./file0\x00', &(0x7f0000000600)=@known='system.posix_acl_access\x00')

571.253617ms ago: executing program 0 (id=2070):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

511.652633ms ago: executing program 3 (id=2071):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x40000, 0x1, 0x2, 0x158}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x12, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))

403.033407ms ago: executing program 0 (id=2072):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000006880)=@newtfilter={0x44, 0x2c, 0x601, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0xa}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}}, 0x0)

402.031391ms ago: executing program 4 (id=2073):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
sendto$llc(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f0000000040)={0x1a, 0x304}, 0x10)

401.885393ms ago: executing program 3 (id=2074):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000)

251.308518ms ago: executing program 0 (id=2075):
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$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")
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)
ftruncate(r0, 0x10d)

251.155144ms ago: executing program 3 (id=2076):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f0000000340)='nfs\x00', 0x0, &(0x7f0000000400)='addr=127.0.0.1,port=2049,proto=rdma,vers=3,mountport=2049,mountproto=rdma\x00')

0s ago: executing program 4 (id=2077):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x662, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
flistxattr(r3, 0x0, 0x100000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x7e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)

kernel console output (not intermixed with test programs):

d capacity change from 0 to 4096
[  135.306660][ T7464] usblp0: removed
[  135.327123][ T7522] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  135.406753][ T7522] ntfs3(loop3): Failed to load $Extend (-22).
[  135.410236][ T7532] loop0: detected capacity change from 0 to 128
[  135.416095][  T986] Process accounting resumed
[  135.419231][ T7522] ntfs3(loop3): Failed to initialize $Extend.
[  135.442085][ T7532] FAT-fs (loop0): Directory bread(block 1048) failed
[  135.467815][ T7532] FAT-fs (loop0): Directory bread(block 1049) failed
[  135.482735][ T7532] FAT-fs (loop0): Directory bread(block 1050) failed
[  135.494860][ T7532] FAT-fs (loop0): Directory bread(block 1051) failed
[  135.510288][ T7532] FAT-fs (loop0): Directory bread(block 1052) failed
[  135.531895][ T7532] FAT-fs (loop0): Directory bread(block 1053) failed
[  135.548882][ T7532] FAT-fs (loop0): Directory bread(block 1054) failed
[  135.558607][ T7532] FAT-fs (loop0): Directory bread(block 1055) failed
[  136.556263][ T7532] syz.0.779: attempt to access beyond end of device
[  136.556263][ T7532] loop0: rw=8390659, sector=1096, nr_sectors = 8 limit=128
[  136.810975][ T7549] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  137.067472][ T7561] loop3: detected capacity change from 0 to 512
[  137.088860][ T7561] EXT4-fs (loop3): orphan cleanup on readonly fs
[  137.104527][ T7561] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  137.118776][ T7561] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  137.134369][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  137.136476][    C0] EXT4-fs (loop3): initial error at time 1787628397: ext4_mb_generate_buddy:1317
[  137.139316][    C0] EXT4-fs (loop3): last error at time 1787628397: ext4_mb_generate_buddy:1317
[  137.169825][ T7561] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.789: attempt to clear invalid blocks 2 len 1
[  137.186217][ T7561] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  137.201985][ T7561] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.789: invalid indirect mapped block 1819239214 (level 0)
[  137.230008][ T7561] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  137.230347][ T7561] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.789: invalid indirect mapped block 1819239214 (level 1)
[  137.262659][ T7561] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  137.264024][ T7561] EXT4-fs (loop3): 1 truncate cleaned up
[  137.295853][ T7561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  137.352255][ T7126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.525096][ T7571] netlink: 'syz.1.782': attribute type 1 has an invalid length.
[  138.571673][ T7571] 8021q: adding VLAN 0 to HW filter on device bond1
[  138.618677][ T7571] bond1: (slave gretap1): making interface the new active one
[  138.625684][ T7571] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  138.754867][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  138.885472][ T7586] loop1: detected capacity change from 0 to 512
[  138.907519][ T7586] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.798: invalid block
[  138.916125][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.923638][ T7586] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  138.924038][ T7586] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.798: couldn't read orphan inode 11 (err -117)
[  138.926912][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  138.926921][    C0] EXT4-fs (loop1): initial error at time 1787628399: __ext4_iget:5533: inode 11: block 1
[  138.926936][    C0] EXT4-fs (loop1): last error at time 1787628399: __ext4_iget:5533: inode 11: block 1
[  138.947542][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.954004][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  138.971315][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  138.980616][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.989006][   T10] usb 1-1: config 0 descriptor??
[  138.993589][ T7586] loop1: lost filesystem error report for type 5 error -117
[  138.995578][ T7586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.083719][ T5728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.108888][ T7593] loop3: detected capacity change from 0 to 8
[  139.133306][ T7593] SQUASHFS error: lzo decompression failed, data probably corrupt
[  139.149384][ T7593] SQUASHFS error: Failed to read block 0x91: -5
[  139.157975][ T7593] SQUASHFS error: Unable to read metadata cache entry [8f]
[  139.171164][ T7593] SQUASHFS error: Unable to read inode 0x11f
[  139.506627][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  139.541024][ T7605] loop1: detected capacity change from 0 to 128
[  139.558920][ T7605] EXT4-fs (loop1): Test dummy encryption mode enabled
[  139.600076][ T7605] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.631644][ T7605] ext4 filesystem being mounted at /246/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  139.828282][   T10] usb 1-1: USB disconnect, device number 10
[  140.152516][ T7616] loop3: detected capacity change from 0 to 32768
[  140.211222][ T7616] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  140.214573][ T7616] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  140.275567][ T5728] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  140.282738][ T7616] XFS (loop3): Ending clean mount
[  140.290306][ T7616] XFS (loop3): Quotacheck needed: Please wait.
[  140.381432][ T7616] XFS (loop3): Quotacheck: Done.
[  141.101953][ T7126] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  141.117461][ T7639] loop1: detected capacity change from 0 to 512
[  141.175611][ T7639] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  141.197468][ T7639] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  141.252870][ T7639] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  141.271162][ T7639] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  141.285013][ T7637] dvmrp0: entered allmulticast mode
[  141.286983][ T7639] System zones: 0-2, 18-18, 34-35
[  141.315641][ T7639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.445586][ T5728] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.483921][ T7644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  141.701748][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.821'.
[  141.965404][ T7654] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check.
[  143.463801][ T7681] loop0: detected capacity change from 0 to 4096
[  143.486836][ T7681] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  144.382007][ T7683] loop1: detected capacity change from 0 to 4096
[  144.389022][ T7681] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  144.424965][ T7681] ntfs3(loop0): Failed to load $Extend (-22).
[  144.435023][ T7683] Quota error (device loop1): v2_read_file_info: Can't read info structure
[  144.455969][ T7681] ntfs3(loop0): Failed to initialize $Extend.
[  144.480197][ T7683] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix.
[  144.524165][ T7683] EXT4-fs (loop1): mount failed
[  144.779347][ T7690] tipc: Started in network mode
[  144.792145][ T7690] tipc: Node identity e0000002, cluster identity 4711
[  144.804014][ T7690] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  144.943751][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.840'.
[  145.074022][ T7700] loop0: detected capacity change from 0 to 128
[  145.105804][ T7700] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  145.140404][ T7700] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  145.211709][ T7700] EXT4-fs warning (device loop0): ext4_group_extend:1861: can't shrink FS - resize aborted
[  145.269505][ T5725] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.780443][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'.
[  146.274555][  T986] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  146.278616][ T7733] bond0: invalid ARP target specified
[  146.356243][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.856'.
[  146.433375][  T986] usb 1-1: unable to get BOS descriptor or descriptor too short
[  146.459249][  T986] usb 1-1: config 114 has an invalid interface number: 240 but max is 0
[  146.482136][  T986] usb 1-1: config 114 has no interface number 0
[  146.493865][  T986] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023
[  146.509890][  T986] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  146.522330][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.858'.
[  146.532081][  T986] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  146.546199][  T986] usb 1-1: config 114 interface 240 has no altsetting 0
[  146.562178][  T986] usb 1-1: string descriptor 0 read error: -22
[  146.564262][  T986] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38
[  146.580547][  T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.599062][ T7727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.603436][ T7727] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.626874][  T986] ir_usb 1-1:114.240: IR Dongle converter detected
[  146.704113][ T7741] loop1: detected capacity change from 0 to 8192
[  146.858839][  T986] usb 1-1: IR Dongle converter now attached to ttyUSB0
[  147.044422][  T986] usb 1-1: USB disconnect, device number 11
[  147.056108][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  147.061126][ T7749] loop1: detected capacity change from 0 to 4096
[  147.071258][ T7749] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  147.104000][  T986] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  147.113779][ T7749] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  147.119665][  T986] ir_usb 1-1:114.240: device disconnected
[  147.159912][   T34] audit: type=1800 audit(1787628407.774:12): pid=7749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.863" name="file2" dev="loop1" ino=31 res=0 errno=0
[  147.216861][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  147.226377][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.246599][   T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  147.263341][   T10] usb 4-1: New USB device found, idVendor=1235, idProduct=0401, bcdDevice= 0.40
[  147.270327][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.281103][   T10] usb 4-1: Product: syz
[  147.284557][   T10] usb 4-1: Manufacturer: syz
[  147.290884][   T10] usb 4-1: SerialNumber: syz
[  147.516726][   T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  147.529070][   T10] usb 4-1: MIDIStreaming interface descriptor not found
[  147.787053][   T10] usb 4-1: USB disconnect, device number 5
[  147.849157][ T5635] udevd[5635]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  148.083975][ T5779] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  148.344526][ T5779] usb 1-1: Using ep0 maxpacket: 16
[  148.351413][ T5779] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30
[  148.375367][ T5779] usb 1-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  148.396709][ T5779] usb 1-1: config 0 interface 0 has no altsetting 0
[  148.410153][ T5779] usb 1-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00
[  148.424431][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.438094][ T5779] usb 1-1: config 0 descriptor??
[  148.913290][ T5779] input: HID 6253:0100 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:6253:0100.0004/input/input6
[  149.113980][ T5779] twinhan 0003:6253:0100.0004: input,hidraw0: USB HID v0.02 Joystick [HID 6253:0100] on usb-dummy_hcd.0-1/input0
[  149.175011][ T5779] usb 1-1: USB disconnect, device number 12
[  150.701933][ T7816] loop0: detected capacity change from 0 to 128
[  150.712192][ T7816] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  150.745562][ T7816] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  150.811412][ T7816] FAT-fs (loop0): error, invalid access to FAT (entry 0x0f0003ff)
[  150.825053][ T7816] FAT-fs (loop0): Filesystem has been set read-only
[  150.872163][ T7816] FAT-fs (loop0): error, invalid access to FAT (entry 0x0f0003ff)
[  150.928462][ T5725] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  151.919546][ T7825] xt_CT: You must specify a L4 protocol and not use inversions on it
[  152.059530][ T7830] netlink: 'syz.1.896': attribute type 23 has an invalid length.
[  152.414991][ T7838] ip6tnl1: entered allmulticast mode
[  152.427632][ T5433] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.448906][ T5433] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.455050][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  152.514828][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  153.219370][ T7858] loop0: detected capacity change from 0 to 512
[  153.484566][   T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  155.482308][ T7881] overlayfs: failed to clone upperpath
[  156.605629][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  158.381413][ T7924] nvme nvme0: rdma_resolve_addr failed (-19).
[  158.557581][ T7937] loop3: detected capacity change from 0 to 2048
[  158.635026][ T7937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.591636][ T7950] loop3: detected capacity change from 0 to 32768
[  159.657772][ T7950] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  159.729980][ T7950] XFS (loop3): Ending clean mount
[  160.238542][ T7950] XFS (loop3): User initiated shutdown received.
[  160.255559][ T7950] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:458).  Shutting down filesystem.
[  160.282661][ T7950] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  160.351342][ T7126] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  160.597372][ T7989] tipc: Cannot configure node identity twice
[  161.326935][ T8002] loop3: detected capacity change from 0 to 32768
[  161.342249][ T8002] syz.3.969: attempt to access beyond end of device
[  161.342249][ T8002] loop3: rw=8388608, sector=17179869440, nr_sectors = 8 limit=32768
[  161.372544][ T8002] Read error 10 at 0x0
[  161.389121][ T8002] read_mapping_page failed!
[  161.398403][ T8002] jfs_mount: diMount failed w/rc = -5
[  161.406246][ T8002] Mount JFS Failure: -5
[  161.412699][ T8002] jfs_mount failed w/return code = -5
[  161.762543][   T53] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  161.767875][   T53] CPU: 0 UID: 0 PID: 53 Comm: kworker/u11:0 Not tainted syzkaller #0 PREEMPT(full) 
[  161.767888][   T53] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.767894][   T53] Workqueue: hci1 hci_rx_work
[  161.767959][   T53] Call Trace:
[  161.767964][   T53]  <TASK>
[  161.767968][   T53]  dump_stack_lvl+0xe8/0x150
[  161.767983][   T53]  sysfs_create_dir_ns+0x271/0x2a0
[  161.767994][   T53]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  161.768009][   T53]  ? do_raw_spin_unlock+0x4d/0x210
[  161.768019][   T53]  kobject_add_internal+0x622/0xcd0
[  161.768034][   T53]  kobject_add+0x163/0x240
[  161.768048][   T53]  ? __pfx_kobject_add+0x10/0x10
[  161.768060][   T53]  ? get_device_parent+0x366/0x3a0
[  161.768077][   T53]  device_add+0x3fa/0xb80
[  161.768116][   T53]  hci_conn_add_sysfs+0xd5/0x210
[  161.768134][   T53]  le_conn_complete_evt+0xfef/0x1580
[  161.768154][   T53]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  161.768165][   T53]  ? __mutex_unlock_slowpath+0x731/0x900
[  161.768176][   T53]  ? skb_pull_data+0xf0/0x200
[  161.768189][   T53]  hci_le_conn_complete_evt+0x187/0x470
[  161.768203][   T53]  hci_event_packet+0x67a/0xf10
[  161.768215][   T53]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  161.768226][   T53]  ? __pfx_hci_event_packet+0x10/0x10
[  161.768237][   T53]  ? audit_filter_rules+0x3660/0x5d10
[  161.768249][   T53]  ? hci_send_to_monitor+0xe2/0x590
[  161.768261][   T53]  hci_rx_work+0x3ee/0x1020
[  161.768273][   T53]  ? process_scheduled_works+0xa20/0x14e0
[  161.768281][   T53]  process_scheduled_works+0xa8e/0x14e0
[  161.768298][   T53]  ? __pfx_process_scheduled_works+0x10/0x10
[  161.768308][   T53]  ? assign_work+0x3cf/0x5d0
[  161.768317][   T53]  worker_thread+0xa47/0xfb0
[  161.768335][   T53]  kthread+0x388/0x470
[  161.768344][   T53]  ? __pfx_worker_thread+0x10/0x10
[  161.768351][   T53]  ? __pfx_kthread+0x10/0x10
[  161.768361][   T53]  ret_from_fork+0x514/0xb70
[  161.768374][   T53]  ? __pfx_ret_from_fork+0x10/0x10
[  161.768383][   T53]  ? __switch_to+0xc89/0x1420
[  161.768393][   T53]  ? __pfx_kthread+0x10/0x10
[  161.768403][   T53]  ret_from_fork_asm+0x1a/0x30
[  161.768419][   T53]  </TASK>
[  161.768434][   T53] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  161.844988][   T53] Bluetooth: hci1: failed to register connection device
[  161.993693][ T8026] jffs2: notice: (8026) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  163.774924][ T5800] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  163.925874][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.936290][ T5800] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  163.945645][ T5800] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  163.954991][ T5800] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.968834][ T5800] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  163.978542][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.621037][ T8072] xt_hashlimit: invalid rate
[  164.896802][ T8078] loop0: detected capacity change from 0 to 512
[  164.911844][ T8078] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  165.013654][ T5800] gud 4-1:1.0: USB-1: Failed to add properties (ret=-71)
[  165.026383][ T5800] gud 4-1:1.0: Failed to get connectors (error=-71)
[  165.042493][ T5800] gud 4-1:1.0: probe with driver gud failed with error -71
[  165.135375][ T5800] usb 4-1: USB disconnect, device number 6
[  165.564461][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  166.170603][ T8107] loop0: detected capacity change from 0 to 512
[  166.177874][ T8107] ext4: Bad value for 'data'
[  166.613558][ T8103] loop3: detected capacity change from 0 to 40427
[  166.726292][ T8103] F2FS-fs (loop3): invalid crc value
[  166.920185][ T8103] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  166.967557][ T8103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  167.159882][ T8116] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  167.172406][ T8116] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  167.211874][ T7126] syz-executor: attempt to access beyond end of device
[  167.211874][ T7126] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  167.267683][ T7126] CPU: 0 UID: 0 PID: 7126 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  167.267698][ T7126] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.267703][ T7126] Call Trace:
[  167.267707][ T7126]  <TASK>
[  167.267711][ T7126]  dump_stack_lvl+0xe8/0x150
[  167.267728][ T7126]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  167.267742][ T7126]  f2fs_write_end_io+0x124b/0x1710
[  167.267760][ T7126]  __submit_merged_bio+0x258/0x6a0
[  167.267770][ T7126]  ? rcu_is_watching+0x15/0xb0
[  167.267783][ T7126]  __submit_merged_write_cond+0x3c9/0x4e0
[  167.267795][ T7126]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  167.267812][ T7126]  f2fs_write_data_pages+0x2a27/0x36f0
[  167.267822][ T7126]  ? __lock_acquire+0x6df/0x2e50
[  167.267844][ T7126]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.267854][ T7126]  ? is_bpf_text_address+0x26/0x2b0
[  167.267868][ T7126]  ? arch_stack_walk+0xfb/0x150
[  167.267891][ T7126]  ? add_lock_to_list+0xc7/0x100
[  167.267901][ T7126]  ? lockdep_unlock+0x5d/0xd0
[  167.267909][ T7126]  ? __lock_acquire+0x14b9/0x2e50
[  167.267927][ T7126]  ? do_raw_spin_lock+0x12b/0x2f0
[  167.267938][ T7126]  ? do_raw_spin_unlock+0x4d/0x210
[  167.267946][ T7126]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  167.267956][ T7126]  do_writepages+0x338/0x560
[  167.267970][ T7126]  ? do_raw_spin_unlock+0x4d/0x210
[  167.267979][ T7126]  filemap_fdatawrite+0x1e9/0x2f0
[  167.267991][ T7126]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  167.268036][ T7126]  ? do_raw_spin_unlock+0x4d/0x210
[  167.268047][ T7126]  f2fs_sync_dirty_inodes+0x30e/0x830
[  167.268064][ T7126]  f2fs_write_checkpoint+0xa3d/0x2710
[  167.268074][ T7126]  ? __lock_acquire+0x6df/0x2e50
[  167.268093][ T7126]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  167.268122][ T7126]  kill_f2fs_super+0x2f6/0x700
[  167.268135][ T7126]  ? __pfx_kill_f2fs_super+0x10/0x10
[  167.268150][ T7126]  ? call_rcu+0x64b/0x8b0
[  167.268159][ T7126]  ? lockdep_hardirqs_on+0x7a/0x110
[  167.268173][ T7126]  deactivate_locked_super+0xbc/0x130
[  167.268182][ T7126]  cleanup_mnt+0x3d3/0x460
[  167.268193][ T7126]  task_work_run+0x1d9/0x270
[  167.268205][ T7126]  ? __pfx_task_work_run+0x10/0x10
[  167.268218][ T7126]  exit_to_user_mode_loop+0x1fa/0x730
[  167.268227][ T7126]  ? rcu_is_watching+0x15/0xb0
[  167.268238][ T7126]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.268246][ T7126]  do_syscall_64+0x353/0x580
[  167.268254][ T7126]  ? trace_irq_disable+0x3b/0x140
[  167.268265][ T7126]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.268272][ T7126] RIP: 0033:0x7f157139f317
[  167.268280][ T7126] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  167.268287][ T7126] RSP: 002b:00007fff4344a528 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  167.268296][ T7126] RAX: 0000000000000000 RBX: 00007f1571434474 RCX: 00007f157139f317
[  167.268301][ T7126] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff4344a5e0
[  167.268305][ T7126] RBP: 00007fff4344a5e0 R08: 00007fff4344b5e0 R09: 00000000ffffffff
[  167.268309][ T7126] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff4344b670
[  167.268314][ T7126] R13: 00007f1571434474 R14: 0000000000028c72 R15: 00007fff4344b6b0
[  167.268325][ T7126]  </TASK>
[  167.268328][ T7126] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  167.517646][ T5729] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  167.546663][ T5729] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  167.561876][ T5729] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  167.589220][ T5729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  167.603154][ T5729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  167.846544][ T8134] loop0: detected capacity change from 0 to 256
[  167.857281][ T8134] exfat: Deprecated parameter 'namecase'
[  167.872127][ T8134] exfat: Deprecated parameter 'namecase'
[  167.883623][ T8134] exfat: Deprecated parameter 'utf8'
[  167.898383][ T8134] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d)
[  168.507796][ T8150] loop0: detected capacity change from 0 to 4096
[  168.557917][ T8150] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.668460][ T5725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.878216][ T8165] loop0: detected capacity change from 0 to 256
[  168.898645][ T8165] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204323ec, utbl_chksum : 0xe619d30d)
[  169.065189][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.075068][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.083138][ T8119] bridge_slave_0: entered allmulticast mode
[  169.096033][ T8119] bridge_slave_0: entered promiscuous mode
[  169.112082][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.122197][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.130695][ T8119] bridge_slave_1: entered allmulticast mode
[  169.143693][ T8119] bridge_slave_1: entered promiscuous mode
[  169.201838][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1038'.
[  169.219622][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1038'.
[  169.230598][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  169.241054][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  169.310404][ T8119] team0: Port device team_slave_0 added
[  169.322078][ T8119] team0: Port device team_slave_1 added
[  169.360095][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.366286][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.384863][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.395383][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1
[  169.400513][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  169.416510][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  169.491353][ T8119] hsr_slave_0: entered promiscuous mode
[  169.496615][ T8119] hsr_slave_1: entered promiscuous mode
[  169.501681][ T8119] debugfs: 'hsr0' already exists in 'hsr'
[  169.505689][ T8119] Cannot create hsr debugfs directory
[  169.644757][   T53] Bluetooth: hci1: command tx timeout
[  169.698479][ T8174] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  170.094270][ T8119] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  170.104178][ T8184] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1044'.
[  170.127517][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  170.138014][ T8119] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  170.151828][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  170.163608][ T8119] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  170.201396][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  170.219009][ T8119] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  170.277724][ T8119] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  170.537610][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.598319][ T8119] 8021q: adding VLAN 0 to HW filter on device team0
[  170.617427][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.619722][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.666411][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.669191][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.213228][ T8208] loop0: detected capacity change from 0 to 32768
[  171.292024][ T8227] IPVS: ip_vs_edit_dest(): server weight less than zero
[  171.296474][ T5800] IPVS: starting estimator thread 0...
[  171.310929][ T8208] find_entry called with index >= next_index
[  171.321186][ T8208] find_entry called with index >= next_index
[  171.334120][ T8208] find_entry called with index >= next_index
[  171.348176][ T8208] find_entry called with index >= next_index
[  171.360006][ T8208] find_entry called with index >= next_index
[  171.370142][ T8208] add_index: next_index = 0.  Resetting!
[  171.381084][ T8208] find_entry called with index >= next_index
[  171.390913][ T8208] find_entry called with index >= next_index
[  171.395216][ T8228] IPVS: using max 84 ests per chain, 201600 per kthread
[  171.403918][ T8208] find_entry called with index >= next_index
[  171.506877][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.724558][   T53] Bluetooth: hci1: command tx timeout
[  171.866453][ T8119] veth0_vlan: entered promiscuous mode
[  171.887100][ T8119] veth1_vlan: entered promiscuous mode
[  171.947851][ T8119] veth0_macvtap: entered promiscuous mode
[  171.961232][ T8119] veth1_macvtap: entered promiscuous mode
[  172.000273][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.020337][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.036320][ T5433] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.041414][ T5433] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.072771][ T5433] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.370621][ T5433] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.541485][ T8242] usb usb7: check_ctrlrecip: process 8242 (syz.3.1062) requesting ep 01 but needs 81
[  172.562815][ T8242] usb usb7: usbfs: process 8242 (syz.3.1062) did not claim interface 0 before use
[  172.571859][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.590690][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.650589][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.662622][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.914822][ T8249] loop0: detected capacity change from 0 to 1024
[  172.973279][ T8249] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  173.011827][ T8249] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.031830][ T8255] (syz.4.1026,8255,0):ocfs2_get_sector:1713 ERROR: status = -5
[  173.052930][ T8255] (syz.4.1026,8255,0):ocfs2_sb_probe:753 ERROR: status = -5
[  173.072856][ T8255] (syz.4.1026,8255,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  173.092203][ T8255] (syz.4.1026,8255,0):ocfs2_fill_super:1177 ERROR: status = -5
[  173.113874][ T8249] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1064: bg 0: block 112: padding at end of block bitmap is not set
[  173.156921][ T8249] EXT4-fs (loop0): Remounting filesystem read-only
[  173.265855][ T5725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.401474][ T8265] loop3: detected capacity change from 0 to 1024
[  173.416691][ T8265] EXT4-fs: Ignoring removed nomblk_io_submit option
[  173.475269][ T8265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  173.522795][ T8265] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.573149][   T34] audit: type=1800 audit(1787628434.184:13): pid=8265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1070" name="file1" dev="loop3" ino=15 res=0 errno=0
[  173.657174][ T7126] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  173.805026][   T53] Bluetooth: hci1: command tx timeout
[  173.867018][ T8278] loop0: detected capacity change from 0 to 4096
[  173.988724][ T8278] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  174.148546][ T8286] loop4: detected capacity change from 0 to 32768
[  174.388147][ T8288] loop3: detected capacity change from 0 to 4096
[  174.408883][ T8290] IPv6: addrconf: prefix option has invalid lifetime
[  174.411637][ T8290] IPv6: addrconf: prefix option has invalid lifetime
[  174.426166][ T8288] NILFS (loop3): couldn't find nilfs on the device
[  174.457045][ T7764] udevd[7764]: incorrect nilfs2 checksum on /dev/loop3
[  174.994705][  T986] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  175.230013][  T986] usb 4-1: not running at top speed; connect to a high speed hub
[  175.241261][  T986] usb 4-1: config 1 interface 0 altsetting 35 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  175.382967][  T986] usb 4-1: config 1 interface 0 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  175.400095][  T986] usb 4-1: config 1 interface 0 has no altsetting 0
[  175.415307][  T986] usb 4-1: New USB device found, idVendor=04da, idProduct=104d, bcdDevice= 0.40
[  175.426121][  T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.438367][  T986] usb 4-1: Product: syz
[  175.441895][  T986] usb 4-1: Manufacturer: syz
[  175.447741][  T986] usb 4-1: SerialNumber: syz
[  175.463467][ T8298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  175.581423][ T8317] bridge0: port 3(vlan2) entered blocking state
[  175.588977][ T8317] bridge0: port 3(vlan2) entered disabled state
[  175.601277][ T8317] vlan2: entered allmulticast mode
[  175.607112][ T8317] dummy0: entered allmulticast mode
[  175.627065][ T8317] vlan2: entered promiscuous mode
[  175.632389][ T8317] dummy0: entered promiscuous mode
[  175.711037][  T986] usbhid 4-1:1.0: can't add hid device: -71
[  175.722547][  T986] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  175.750818][  T986] usb 4-1: USB disconnect, device number 7
[  176.006115][   T53] Bluetooth: hci1: command tx timeout
[  176.832037][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'.
[  176.843913][ T8325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1097'.
[  176.993408][   T34] audit: type=1400 audit(1787628437.604:14): apparmor="STATUS" info="failed to unpack profile capabilities" error=-71 profile="unconfined" name="p" pid=8326 comm="syz.4.1098" name="p" offset=64
[  177.318517][ T8336] loop3: detected capacity change from 0 to 32768
[  177.329651][ T8336] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1101 (8336)
[  177.335404][ T8336] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  177.338613][ T8336] BTRFS info (device loop3): using blake2b checksum algorithm
[  177.485164][ T8336] BTRFS info (device loop3): enabling ssd optimizations
[  177.487394][ T8336] BTRFS info (device loop3): turning on async discard
[  177.489347][ T8336] BTRFS info (device loop3): enabling free space tree
[  177.491358][ T8336] BTRFS info (device loop3): use zstd compression, level 3
[  177.532425][   T34] audit: type=1800 audit(1787628438.144:15): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1101" name="bus" dev="loop3" ino=263 res=0 errno=0
[  177.591069][   T34] audit: type=1800 audit(1787628438.144:16): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1101" name="bus" dev="loop3" ino=263 res=0 errno=0
[  177.863022][ T8363] loop0: detected capacity change from 0 to 1024
[  177.894575][ T8363] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  177.927949][ T8363] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  177.965447][ T8363] EXT4-fs (loop0): orphan cleanup on readonly fs
[  177.992723][ T8363] EXT4-fs error (device loop0): ext4_quota_enable:7232: comm syz.0.1106: inode #17152: comm syz.0.1106: iget: illegal inode #
[  178.028297][ T8363] loop0: lost filesystem error report for type 5 error -117
[  178.030015][ T8363] EXT4-fs (loop0): Remounting filesystem read-only
[  178.035376][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  178.035387][    C0] EXT4-fs (loop0): initial error at time 1787628438: ext4_quota_enable:7232
[  178.035397][    C0] EXT4-fs (loop0): last error at time 1787628438: ext4_quota_enable:7232
[  178.106200][ T8363] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=17152). Please run e2fsck to fix.
[  178.151697][ T8363] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  178.178905][ T8363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  178.217442][ T7126] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  178.242599][ T5725] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.269953][  T986] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  178.440132][  T986] usb 5-1: Using ep0 maxpacket: 16
[  178.476123][  T986] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 255, using maximum allowed: 30
[  178.488099][  T986] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  178.512643][  T986] usb 5-1: config 0 interface 0 has no altsetting 0
[  178.521175][ T8371] netlink: 'syz.0.1110': attribute type 12 has an invalid length.
[  178.526718][  T986] usb 5-1: New USB device found, idVendor=056a, idProduct=00d5, bcdDevice= 0.00
[  178.534230][ T8371] netlink: 'syz.0.1110': attribute type 29 has an invalid length.
[  178.548594][  T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.558088][ T8371] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1110'.
[  178.570178][  T986] usb 5-1: config 0 descriptor??
[  178.575498][ T8371] netlink: 51 bytes leftover after parsing attributes in process `syz.0.1110'.
[  179.000411][  T986] wacom 0003:056A:00D5.0005: Unknown device_type for 'HID 056a:00d5'. Assuming pen.
[  179.080303][  T986] wacom 0003:056A:00D5.0005: hidraw0: USB HID v0.02 Joystick [HID 056a:00d5] on usb-dummy_hcd.4-1/input0
[  179.107721][  T986] input: Wacom Bamboo Pen 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00D5.0005/input/input7
[  179.263426][  T986] usb 5-1: USB disconnect, device number 2
[  179.335607][    T9] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  179.501301][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  179.515157][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  179.541257][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  179.567481][    T9] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  179.579929][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.594131][    T9] usb 1-1: Product: syz
[  179.601358][    T9] usb 1-1: Manufacturer: syz
[  179.607933][    T9] usb 1-1: SerialNumber: syz
[  179.619769][    T9] usb 1-1: config 0 descriptor??
[  179.633144][ T8382] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  179.747214][    T9] rc_core: IR keymap rc-streamzap not found
[  179.760254][    T9] Registered IR keymap rc-empty
[  179.781079][    T9] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  179.815241][    T9] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10
[  180.814686][    T9] usb 1-1: USB disconnect, device number 13
[  181.093221][ T8404] loop4: detected capacity change from 0 to 736
[  181.154738][   T34] audit: type=1800 audit(1787628441.764:17): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1120" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0
[  182.204773][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  183.934795][   T34] audit: type=1326 audit(1787628444.554:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.4.1135" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x0
[  184.269788][ T8440] loop4: detected capacity change from 0 to 1024
[  184.290148][ T8440] EXT4-fs: Ignoring removed bh option
[  184.353751][ T8440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.385035][ T8440] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.427727][ T8440] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1137: lblock 0 mapped to illegal pblock 0 (length 1)
[  184.513932][ T8440] EXT4-fs (loop4): Remounting filesystem read-only
[  184.543491][ T5433] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.870497][ T5433] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.776307][ T8451] Cannot find del_set index 2 as target
[  185.918272][ T8451] loop0: detected capacity change from 0 to 1024
[  185.921201][ T8451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  185.923213][ T8451] EXT4-fs: Ignoring removed i_version option
[  185.925108][ T8451] EXT4-fs: Ignoring removed nomblk_io_submit option
[  186.209918][   T53] Bluetooth: hci0: command 0x0406 tx timeout
[  187.192756][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  187.208155][ T5433] bond0: (slave netdevsim1): Releasing backup interface
[  188.058985][ T8451] EXT4-fs: error -4 creating inode table initialization thread
[  188.062821][ T8451] EXT4-fs (loop0): mount failed
[  188.239927][ T5433] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.416216][ T8463] loop4: detected capacity change from 0 to 512
[  188.428495][ T5800] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  188.492280][ T5433] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.514925][ T5800] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  189.017897][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1150'.
[  189.209027][ T5433] bridge_slave_1: left allmulticast mode
[  189.220964][ T5433] bridge_slave_1: left promiscuous mode
[  189.235603][ T5433] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.349202][ T8482] loop3: detected capacity change from 0 to 32768
[  189.395583][ T5433] bridge_slave_0: left allmulticast mode
[  189.415834][ T8482] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  189.428482][ T5433] bridge_slave_0: left promiscuous mode
[  189.447290][ T5433] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.469636][ T8482] XFS (loop3): Ending clean mount
[  189.477593][ T8482] XFS (loop3): Quotacheck needed: Please wait.
[  189.671805][ T8482] XFS (loop3): Quotacheck: Done.
[  189.969626][   T34] audit: type=1800 audit(1787628450.574:19): pid=8495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1152" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  190.128137][ T7126] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.841593][ T5433] bond1 (unregistering): (slave gretap1): Releasing active interface
[  190.980515][ T5433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.984573][   T10] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  190.999993][ T5433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  191.012183][ T5433] bond0 (unregistering): Released all slaves
[  191.035552][ T5433] bond1 (unregistering): Released all slaves
[  191.100269][ T5343] 8021q: adding VLAN 0 to HW filter on device eth5
[  191.148442][ T5433] tipc: Left network mode
[  191.150887][   T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.171219][   T10] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  191.205181][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  191.221788][   T10] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00
[  191.247741][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.285087][   T10] usb 4-1: config 0 descriptor??
[  191.769950][   T10] input: HID 04b3:3103 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:04B3:3103.0007/input/input11
[  191.876194][   T10] lenovo 0003:04B3:3103.0007: input,hidraw0: USB HID v0.00 Joystick [HID 04b3:3103] on usb-dummy_hcd.3-1/input0
[  191.951380][   T10] usb 4-1: USB disconnect, device number 8
[  192.293366][ T5343] 8021q: adding VLAN 0 to HW filter on device eth6
[  192.489381][ T5433] hsr_slave_0: left promiscuous mode
[  192.520583][ T5433] hsr_slave_1: left promiscuous mode
[  192.537151][ T5433] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.556423][ T5433] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.592062][ T5433] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.621418][ T5433] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.711817][ T5433] veth1_vlan: left promiscuous mode
[  192.904466][ T5800] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  193.084015][ T8558] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1173'.
[  193.819975][ T5433] team0 (unregistering): Port device team_slave_1 removed
[  193.862842][ T5433] team0 (unregistering): Port device team_slave_0 removed
[  194.208576][ T5343] 8021q: adding VLAN 0 to HW filter on device eth7
[  194.373725][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  194.375886][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  195.884542][ T5800] usb 1-1: unable to get BOS descriptor or descriptor too short
[  195.889317][ T8241] IPVS: starting estimator thread 0...
[  195.908736][ T5800] usb 1-1: unable to read config index 0 descriptor/start: -71
[  195.941129][ T5800] usb 1-1: can't read configurations, error -71
[  195.995192][ T8568] IPVS: using max 84 ests per chain, 201600 per kthread
[  196.954054][ T5343] 8021q: adding VLAN 0 to HW filter on device eth8
[  197.009157][ T8582] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1182'.
[  197.251434][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  197.260144][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  197.267345][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  197.272067][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  197.278034][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  198.248904][ T8621] loop4: detected capacity change from 0 to 512
[  198.289882][ T8621] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  198.295899][ T8621] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.1193: corrupted inode contents
[  198.299459][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.299811][ T8621] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #11: comm syz.4.1193: mark_inode_dirty error
[  198.306022][    C0] EXT4-fs (loop4): error count since last fsck: 2
[  198.306031][    C0] EXT4-fs (loop4): initial error at time 1787628458: mb_free_blocks:2049: inode 11: block 64
[  198.306046][    C0] EXT4-fs (loop4): last error at time 1787628458: ext4_do_update_inode:5742: inode 11
[  198.313804][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.314030][ T8621] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1193: invalid indirect mapped block 1 (level 1)
[  198.320778][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.322071][ T8621] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.1193: corrupted inode contents
[  198.328361][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.328574][ T8621] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  198.333824][ T8621] loop4: lost filesystem error report for type 5 error -117
[  198.333978][ T8621] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #11: comm syz.4.1193: corrupted inode contents
[  198.339829][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.340017][ T8621] EXT4-fs error (device loop4): ext4_truncate:4691: inode #11: comm syz.4.1193: mark_inode_dirty error
[  198.346215][ T8621] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  198.346422][ T8621] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  198.352046][ T8621] loop4: lost filesystem error report for type 5 error -117
[  198.352306][ T8621] EXT4-fs (loop4): 1 truncate cleaned up
[  198.357135][ T8621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.683774][ T8621] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.1193: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  198.772964][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.202664][ T8648] netlink: 'syz.4.1201': attribute type 4 has an invalid length.
[  199.325211][   T53] Bluetooth: hci2: command tx timeout
[  199.357105][ T8587] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.376921][ T8587] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.387351][ T8587] bridge_slave_0: entered allmulticast mode
[  199.416526][ T8587] bridge_slave_0: entered promiscuous mode
[  199.432116][ T8587] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.452153][ T8587] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.461232][ T8587] bridge_slave_1: entered allmulticast mode
[  199.478867][ T8587] bridge_slave_1: entered promiscuous mode
[  199.553604][ T8587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  199.578041][ T8587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.679105][ T8587] team0: Port device team_slave_0 added
[  199.696544][ T8587] team0: Port device team_slave_1 added
[  199.799671][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.814470][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.832954][ T8663] loop0: detected capacity change from 0 to 1024
[  199.873720][ T8587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.911799][ T8587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.934931][ T8587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  199.992364][ T8587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.996797][ T8666] loop4: detected capacity change from 0 to 512
[  200.032327][ T8666] EXT4-fs (loop4): 1 truncate cleaned up
[  200.056853][ T8666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.170754][ T8587] hsr_slave_0: entered promiscuous mode
[  200.181775][ T8587] hsr_slave_1: entered promiscuous mode
[  200.191344][ T8587] debugfs: 'hsr0' already exists in 'hsr'
[  200.194995][ T8666] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 215 vs 220 free clusters
[  200.202852][ T8587] Cannot create hsr debugfs directory
[  200.245817][ T8666] EXT4-fs (loop4): Remounting filesystem read-only
[  200.326278][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.171858][ T8587] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.406436][ T5729] Bluetooth: hci2: command tx timeout
[  201.511144][ T8587] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.540940][ T8690] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1218'.
[  201.650868][ T8694] loop0: detected capacity change from 0 to 164
[  201.783539][ T8694] iso9660: Corrupted directory entry in block 2 of inode 1792
[  201.805352][ T8587] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.983178][ T8587] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.957617][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1229'.
[  203.423649][ T8714] l2tp_ppp: sess 2/0: no socket in recv
[  203.485182][ T5729] Bluetooth: hci2: command tx timeout
[  203.942239][ T8587] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  203.970691][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  204.001086][ T8587] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  204.017217][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  204.027537][ T8587] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  204.043263][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  204.070072][ T8587] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  204.086635][ T8587] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  204.411623][ T8587] 8021q: adding VLAN 0 to HW filter on device bond0
[  204.466488][ T8587] 8021q: adding VLAN 0 to HW filter on device team0
[  204.479192][ T8732] loop4: detected capacity change from 0 to 32768
[  204.488023][  T161] bridge0: port 1(bridge_slave_0) entered blocking state
[  204.490217][  T161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  204.526074][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  204.528347][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.534576][ T8732] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1235 (8732)
[  204.568937][ T8732] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  204.595523][ T8732] BTRFS info (device loop4): using sha256 checksum algorithm
[  204.771041][ T8732] BTRFS info (device loop4): enabling ssd optimizations
[  204.787501][ T8732] BTRFS info (device loop4): turning on async discard
[  204.803416][ T8732] BTRFS info (device loop4): enabling free space tree
[  205.565140][ T5729] Bluetooth: hci2: command tx timeout
[  205.609517][ T8119] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  205.826049][ T8587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.042319][ T8587] veth0_vlan: entered promiscuous mode
[  206.090293][ T8587] veth1_vlan: entered promiscuous mode
[  206.201311][ T8587] veth0_macvtap: entered promiscuous mode
[  206.238187][ T8587] veth1_macvtap: entered promiscuous mode
[  206.328654][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.362628][ T8587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.421751][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.440507][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.493887][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.515738][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  206.761487][ T8793] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  206.805062][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.822087][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  206.867362][ T8797] loop4: detected capacity change from 0 to 512
[  206.870627][ T8797] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  206.966873][   T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  206.982698][   T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.895006][ T5716] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  207.990999][ T8828] loop3: detected capacity change from 0 to 256
[  208.064759][ T5716] usb 5-1: Using ep0 maxpacket: 32
[  208.074217][ T5716] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.093807][ T5716] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  208.128123][ T5716] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  208.147024][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.162911][ T5716] usb 5-1: Product: syz
[  208.175562][ T5716] usb 5-1: Manufacturer: syz
[  208.187104][ T5716] usb 5-1: SerialNumber: syz
[  208.208309][ T5716] usb 5-1: config 0 descriptor??
[  208.376389][ T8832] loop3: detected capacity change from 0 to 8
[  208.467036][ T5716] usb 5-1: USB disconnect, device number 3
[  209.229548][ T8854] netlink: 'syz.4.1271': attribute type 16 has an invalid length.
[  209.414117][ T8865] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  210.601361][ T8899] loop3: detected capacity change from 0 to 4096
[  210.619044][ T8899] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  210.663676][ T8901] loop4: detected capacity change from 0 to 4096
[  210.676809][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1284'.
[  210.692509][ T8899] ntfs3(loop3): Failed to load $Extend (-22).
[  210.708770][ T8899] ntfs3(loop3): Failed to initialize $Extend.
[  210.727187][ T8901] ntfs3(loop4): Failed to load $Extend (-22).
[  210.740309][ T8901] ntfs3(loop4): Failed to initialize $Extend.
[  211.850211][   T34] audit: type=1800 audit(1787628472.464:20): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1283" name="file0" dev="loop4" ino=0 res=0 errno=0
[  214.113747][ T8931] ip6gretap0: entered promiscuous mode
[  214.589902][ T5729] Bluetooth: hci1: unknown advertising packet type: 0xe0
[  215.196627][ T8955] loop3: detected capacity change from 0 to 32768
[  215.547859][ T8962] loop3: detected capacity change from 0 to 128
[  215.797744][ T8970] netlink: 'syz.3.1312': attribute type 1 has an invalid length.
[  215.825888][ T8970] netlink: 'syz.3.1312': attribute type 4 has an invalid length.
[  215.848333][ T8970] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1312'.
[  215.872313][ T8970] netlink: 'syz.3.1312': attribute type 1 has an invalid length.
[  215.891173][ T8970] netlink: 'syz.3.1312': attribute type 4 has an invalid length.
[  215.904610][ T8970] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1312'.
[  216.508816][ T8988] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0
[  216.579496][ T8972] loop4: detected capacity change from 0 to 32768
[  216.665360][ T8972] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  216.774078][ T8972] XFS (loop4): Ending clean mount
[  217.404950][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  218.008854][ T8119] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  218.040154][ T9054] loop0: detected capacity change from 0 to 1764
[  219.099249][ T9083] netlink: 'syz.3.1337': attribute type 2 has an invalid length.
[  219.145882][ T5716] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  219.233510][   T34] audit: type=1326 audit(1787628479.844:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9085 comm="syz.3.1339" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c9df9e0d9 code=0x0
[  219.305094][ T5716] usb 1-1: Using ep0 maxpacket: 32
[  219.320916][ T5716] usb 1-1: unable to get BOS descriptor or descriptor too short
[  219.341891][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.365324][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  219.379415][ T5716] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40
[  219.394549][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.403580][ T5716] usb 1-1: Product: syz
[  219.413343][ T5716] usb 1-1: Manufacturer: syz
[  219.422514][ T5716] usb 1-1: SerialNumber: syz
[  219.492148][ T5716] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  219.830877][ T5716] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  219.862295][ T5716] usb 1-1: USB disconnect, device number 16
[  219.923237][ T7764] udevd[7764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.941900][ T9105] netlink: 'syz.4.1347': attribute type 1 has an invalid length.
[  220.066759][   T34] audit: type=1326 audit(1787628480.684:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.113947][   T34] audit: type=1326 audit(1787628480.694:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.158036][   T34] audit: type=1326 audit(1787628480.694:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.199502][   T34] audit: type=1326 audit(1787628480.704:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.240435][   T34] audit: type=1326 audit(1787628480.704:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.305720][   T34] audit: type=1326 audit(1787628480.704:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.348969][ T9113] loop4: detected capacity change from 0 to 2048
[  220.361534][ T9115] netlink: 'syz.0.1350': attribute type 6 has an invalid length.
[  220.366846][   T34] audit: type=1326 audit(1787628480.704:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.420704][   T34] audit: type=1326 audit(1787628480.704:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9106 comm="syz.4.1348" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f424959e0d9 code=0x7ffc0000
[  220.433065][ T9113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.490388][ T9113] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.998571][ T9135] loop0: detected capacity change from 0 to 1764
[  221.019203][ T9135] iso9660: Bad value for 'dmode'
[  221.083663][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.758836][ T5800] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  221.918408][ T9168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.933112][ T5800] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 57, changing to 9
[  221.949642][ T5800] usb 1-1: config 0 interface 0 has no altsetting 0
[  221.960737][ T5800] usb 1-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  221.976713][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.990502][ T5800] usb 1-1: config 0 descriptor??
[  222.068080][ T9168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  222.453181][ T5800] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x1
[  222.473108][ T5800] hid-rmi 0003:17EF:6085.0008: invalid report_count 24886
[  222.491666][ T5800] hid-rmi 0003:17EF:6085.0008: item 0 4 1 9 parsing failed
[  222.509306][ T5800] hid-rmi 0003:17EF:6085.0008: parse failed
[  222.527601][ T5800] hid-rmi 0003:17EF:6085.0008: probe with driver hid-rmi failed with error -22
[  222.635108][ T5800] usb 1-1: USB disconnect, device number 17
[  223.340556][ T9186] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1380'.
[  223.504102][ T9188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'.
[  223.508360][ T9182] loop3: detected capacity change from 0 to 32768
[  223.539169][ T9184] loop4: detected capacity change from 0 to 32768
[  223.552562][ T9182] JBD2: Ignoring recovery information on journal
[  223.567821][ T9184] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1379 (9184)
[  223.629442][ T9184] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  223.640524][ T9182] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  223.659145][ T9184] BTRFS info (device loop4): using blake2b checksum algorithm
[  223.708794][ T8484] (kworker/u8:4,8484,0):ocfs2_check_dir_entry:339 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=72, rec_len=1, name_len=1
[  223.839018][ T9184] BTRFS info (device loop4): enabling ssd optimizations
[  223.857066][ T9184] BTRFS info (device loop4): turning on async discard
[  223.966535][ T9184] BTRFS info (device loop4): enabling free space tree
[  224.844806][ T8587] ocfs2: Unmounting device (7,3) on (node local)
[  224.878945][ T8119] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  225.680348][ T9228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1391'.
[  225.934669][ T9234] netlink: 'syz.0.1394': attribute type 12 has an invalid length.
[  225.972951][ T9234] netlink: 'syz.0.1394': attribute type 4 has an invalid length.
[  227.225042][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1413'.
[  227.384947][ T9279] loop4: detected capacity change from 0 to 4096
[  227.434042][ T9279] ntfs3(loop4): ino=9, mi_enum_attr
[  227.452029][ T9279] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  227.481414][ T9279] ntfs3(loop4): ino=9, mi_enum_attr
[  227.507664][ T9279] ntfs3(loop4): ino=b, mi_enum_attr
[  227.522448][ T9279] ntfs3(loop4): Failed to load $Extend (-22).
[  227.542892][ T9279] ntfs3(loop4): Failed to initialize $Extend.
[  228.030822][ T9296] loop4: detected capacity change from 0 to 1024
[  228.058219][ T9296] EXT4-fs: Ignoring removed bh option
[  228.094097][ T9296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  228.143156][ T9296] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  228.252914][ T9296] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.281768][ T9296] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  228.290796][ T9305] sctp: [Deprecated]: syz.3.1423 (pid 9305) Use of int in maxseg socket option.
[  228.290796][ T9305] Use struct sctp_assoc_value instead
[  228.311601][ T9296] EXT4-fs (loop4): This should not happen!! Data will be lost
[  228.311601][ T9296] 
[  228.328279][ T9308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.344110][ T9307] loop0: detected capacity change from 0 to 2048
[  228.403699][ T9309] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.420487][ T9311] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  228.452870][ T9308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.479822][ T9309] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.520918][ T9307] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  228.563904][ T9308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.581369][ T9307] Remounting filesystem read-only
[  228.589817][ T9309] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.630414][ T9308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.662559][ T9309] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.692669][ T9308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.1419: lblock 0 mapped to illegal pblock 0 (length 1)
[  228.841240][ T9319] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  228.921047][ T8119] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  228.965198][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  229.257335][ T9329] loop3: detected capacity change from 0 to 512
[  229.548886][ T9344] x_tables: unsorted entry at hook 2
[  230.804080][ T9349] loop4: detected capacity change from 0 to 1024
[  231.096460][ T9358] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1445'.
[  232.144869][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'.
[  232.276843][ T5800] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  232.299297][ T9389] xt_hashlimit: size too large, truncated to 1048576
[  232.439154][ T5800] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  232.454480][ T5800] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  232.476162][ T5800] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  232.491224][ T5800] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  232.505173][ T5800] usb 4-1: SerialNumber: syz
[  232.583453][ T9385] loop0: detected capacity change from 0 to 32768
[  232.733705][ T5800] usb 4-1: 0:2 : does not exist
[  232.819339][ T5800] usb 4-1: USB disconnect, device number 9
[  232.929430][ T7764] udevd[7764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  234.082309][ T9413] loop4: detected capacity change from 0 to 32768
[  235.401037][ T9456] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  235.656045][ T9464] kAFS: bad VL server IP address
[  235.861923][ T9472] loop3: detected capacity change from 0 to 128
[  235.898840][ T9472] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  235.968349][ T9472] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  235.988368][ T9472] FAT-fs (loop3): Filesystem has been set read-only
[  236.570542][ T9482] loop0: detected capacity change from 0 to 131072
[  236.581132][ T9482] F2FS-fs (loop0): invalid crc value
[  236.615370][ T9482] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.625415][ T9482] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  236.714577][   T34] audit: type=1804 audit(1787628497.324:30): pid=9482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1500" name="/newroot/501/file1/file1" dev="loop0" ino=7 res=1 errno=0
[  237.163569][ T9495] loop3: detected capacity change from 0 to 512
[  237.190729][ T9495] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  237.205284][ T9495] UDF-fs: Scanning with blocksize 512 failed
[  237.227436][ T9495] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  237.247242][ T9495] UDF-fs: Scanning with blocksize 1024 failed
[  237.260202][ T9495] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  237.274098][ T9495] UDF-fs: Scanning with blocksize 2048 failed
[  237.288170][ T9495] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  237.310913][ T9495] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.508241][ T9499] netlink: 130 bytes leftover after parsing attributes in process `syz.3.1508'.
[  240.706395][ T9551] batadv0: entered promiscuous mode
[  240.723623][ T9548] batadv0: left promiscuous mode
[  243.214493][ T5779] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  243.374365][ T5779] usb 4-1: Using ep0 maxpacket: 8
[  243.391574][ T5779] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64
[  243.406394][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67
[  243.423400][ T5779] usb 4-1: Product: syz
[  243.436649][ T5779] usb 4-1: Manufacturer: syz
[  243.438062][ T5779] usb 4-1: SerialNumber: syz
[  243.458728][ T5779] usb 4-1: config 0 descriptor??
[  243.476722][ T5779] gspca_main: sn9c2028-2.14.0 probing 0c45:8003
[  243.728776][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  243.894602][    T9] usb 5-1: Using ep0 maxpacket: 32
[  243.897172][ T5779] gspca_sn9c2028: read1 error -71
[  243.905868][    T9] usb 5-1: config index 0 descriptor too short (expected 164, got 36)
[  243.911824][ T5779] gspca_sn9c2028: read1 error -71
[  243.918781][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.922156][ T5779] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71
[  243.942084][ T5779] usb 4-1: USB disconnect, device number 10
[  243.947527][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.968977][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  243.986606][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.006686][    T9] usb 5-1: config 0 descriptor??
[  244.237248][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'.
[  244.438378][    T9] logitech 0003:046D:C29C.0009: unknown main item tag 0x0
[  244.464618][    T9] logitech 0003:046D:C29C.0009: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  244.547617][ T9583] loop3: detected capacity change from 0 to 8
[  244.588473][ T9583] squashfs image failed sanity check
[  244.853164][    T9] logitech 0003:046D:C29C.0009: no inputs found
[  244.893032][    T9] usb 5-1: USB disconnect, device number 4
[  245.781825][ T9611] loop3: detected capacity change from 0 to 128
[  245.914650][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  246.074425][    T9] usb 5-1: Using ep0 maxpacket: 32
[  246.089021][    T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  246.106761][    T9] usb 5-1: config 0 has no interface number 0
[  246.122002][    T9] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  246.142918][    T9] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  246.165842][    T9] usb 5-1: config 0 interface 12 has no altsetting 0
[  246.179344][    T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  246.198185][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.214629][    T9] usb 5-1: Product: syz
[  246.225561][    T9] usb 5-1: Manufacturer: syz
[  246.237389][    T9] usb 5-1: SerialNumber: syz
[  246.248560][    T9] usb 5-1: config 0 descriptor??
[  246.265129][    T9] f81534 5-1:0.12: unsupported endpoint max packet size
[  246.276946][ T9623] loop3: detected capacity change from 0 to 512
[  246.332378][ T9623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.356167][ T9623] ext4 filesystem being mounted at /115/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.468303][   T34] audit: type=1800 audit(1787628507.084:31): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1562" name="file1" dev="loop3" ino=15 res=0 errno=0
[  246.505350][    T9] usb 5-1: USB disconnect, device number 5
[  246.591219][ T8587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.794238][ T9634] loop3: detected capacity change from 0 to 256
[  246.814194][ T9634] exfat: Deprecated parameter 'utf8'
[  246.836080][ T9634] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  246.867668][ T9634] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d)
[  247.129527][ T9638] loop3: detected capacity change from 0 to 2048
[  247.198086][ T9638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  247.238851][ T9636] EXT4-fs (loop3): shut down requested (2)
[  247.298314][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'.
[  247.313215][ T8587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  247.343538][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'.
[  247.426644][ T9648] netlink: 'syz.4.1570': attribute type 1 has an invalid length.
[  247.881504][ T9659] netlink: 'syz.4.1574': attribute type 10 has an invalid length.
[  247.921595][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.925828][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.996418][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1574'.
[  248.012640][ T9662] loop0: detected capacity change from 0 to 64
[  248.028039][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.030870][ T9659] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.036745][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.039562][ T9659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.158216][ T9659] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  248.175881][ T9663] vlan2: left allmulticast mode
[  248.185856][ T9663] dummy0: left allmulticast mode
[  248.202346][ T9663] vlan2: left promiscuous mode
[  248.214080][ T9663] dummy0: left promiscuous mode
[  248.220771][ T9663] bridge0: port 3(vlan2) entered disabled state
[  248.237808][ T9663] bridge_slave_1: left allmulticast mode
[  248.247861][ T9663] bridge_slave_1: left promiscuous mode
[  248.259753][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.273806][ T9663] bridge_slave_0: left allmulticast mode
[  248.281153][ T9663] bridge_slave_0: left promiscuous mode
[  248.291069][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.349769][ T9663] bond0: (slave bridge0): Releasing backup interface
[  249.342583][ T9687] lvs 8-0:1.0: Bind LVS driver with SS root Hub only
[  249.379536][ T9687] lvs 8-0:1.0: probe with driver lvs failed with error -22
[  249.412514][ T9690] lvs 8-0:1.0: Bind LVS driver with SS root Hub only
[  249.431434][ T9690] lvs 8-0:1.0: probe with driver lvs failed with error -22
[  249.874462][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  249.898630][ T9699] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  250.036685][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  250.051803][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  250.065980][    T9] usb 5-1: config index 0 descriptor too short (expected 21010, got 18)
[  250.078396][    T9] usb 5-1: config 1 has too many interfaces: 40, using maximum allowed: 32
[  250.104405][    T9] usb 5-1: config 1 has an invalid interface number: 116 but max is 39
[  250.125669][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 40
[  250.140791][    T9] usb 5-1: config 1 has no interface number 0
[  250.157471][    T9] usb 5-1: New USB device found, idVendor=0930, idProduct=0219, bcdDevice=8c.48
[  250.174601][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.189124][    T9] usb 5-1: Product: syz
[  250.190461][    T9] usb 5-1: Manufacturer: syz
[  250.202006][    T9] usb 5-1: SerialNumber: syz
[  250.445857][    T9] usb 5-1: USB disconnect, device number 6
[  250.447899][ T5779] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  250.639271][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.651481][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.663765][ T5779] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  250.675917][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.696861][ T5779] usb 4-1: config 0 descriptor??
[  250.714886][ T9697] loop0: detected capacity change from 0 to 32768
[  250.749342][ T9697] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1589 (9697)
[  250.866531][ T9697] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  250.895613][ T9697] BTRFS info (device loop0): using crc32c checksum algorithm
[  251.126708][ T5779] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[  251.207196][ T5779] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input13
[  251.290416][ T9697] BTRFS info (device loop0): enabling ssd optimizations
[  251.310924][ T9697] BTRFS info (device loop0): turning on flush-on-commit
[  251.346835][ T9697] BTRFS info (device loop0): enabling free space tree
[  251.388071][ T9697] BTRFS info (device loop0): enabling auto defrag
[  251.429092][ T9697] BTRFS info (device loop0): use lzo compression, level 1
[  251.461079][ T9697] BTRFS info (device loop0): max_inline set to 4096
[  251.594644][ T9697] BTRFS critical (device loop0 state E): emergency shutdown
[  251.678738][ T5779] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  251.735481][ T5779] usb 4-1: USB disconnect, device number 11
[  251.768648][ T5725] BTRFS info (device loop0 state E): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.269718][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1601'.
[  252.299831][ T9736] netlink: 'syz.4.1602': attribute type 1 has an invalid length.
[  252.462401][ T9738] bond1: (slave veth0_to_bond): making interface the new active one
[  252.498228][ T9738] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  252.789863][ T9745] loop3: detected capacity change from 0 to 16
[  252.858805][ T9745] erofs (device loop3): mounted with root inode @ nid 36.
[  252.888720][ T9747] unsupported nla_type 2061
[  253.247989][ T5729] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  253.251586][ T5729] Bluetooth: hci1: Injecting HCI hardware error event
[  253.259941][ T5729] Bluetooth: hci1: hardware error 0x00
[  253.566104][ T8791] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  254.207867][ T8791] usb 5-1: config 34 has an invalid interface number: 116 but max is 0
[  254.556126][ T8791] usb 5-1: config 34 has no interface number 0
[  254.571172][ T8791] usb 5-1: config 34 interface 116 has no altsetting 0
[  254.603785][ T8791] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c
[  254.612176][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.625611][ T8791] usb 5-1: Product: syz
[  254.626977][ T8791] usb 5-1: Manufacturer: syz
[  254.647837][ T8791] usb 5-1: SerialNumber: syz
[  254.958065][ T8791] comedi comedi5: could not set alternate setting 3 in high speed
[  254.990809][ T8791] usbdux 5-1:34.116: driver 'usbdux' failed to auto-configure device.
[  255.012221][ T8791] usbdux 5-1:34.116: probe with driver usbdux failed with error -71
[  255.037531][ T8791] usb 5-1: USB disconnect, device number 7
[  255.076562][ T9768] loop3: detected capacity change from 0 to 256
[  255.101746][ T9768] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  255.142680][ T9768] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779264)
[  255.164039][ T9768] FAT-fs (loop3): Filesystem has been set read-only
[  255.326784][ T5729] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  255.524557][ T9779] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  255.526684][ T9779] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  255.577612][ T9779] vhci_hcd vhci_hcd.0: Device attached
[  255.591793][ T5716] IPVS: starting estimator thread 0...
[  255.629180][ T9784] vhci_hcd vhci_hcd.0: port 0 already used
[  255.652208][ T9780] vhci_hcd: connection closed
[  255.666968][ T8484] vhci_hcd vhci_hcd.4: stop threads
[  255.690331][ T8484] vhci_hcd vhci_hcd.4: release socket
[  255.695986][ T9785] IPVS: using max 85 ests per chain, 204000 per kthread
[  255.721206][ T8484] vhci_hcd vhci_hcd.4: disconnect device
[  255.807706][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  255.809805][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
[  255.994475][ T5716] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  256.162352][ T5716] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.186235][ T5716] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.440150][ T5716] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.455599][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.472806][ T5716] usb 1-1: SerialNumber: syz
[  256.499660][ T9799] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1626'.
[  256.520883][ T9799] loop3: detected capacity change from 0 to 512
[  256.540135][ T9799] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1626: iget: bad i_size value: 38620345925642
[  256.543994][ T9799] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  256.544275][ T9799] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1626: couldn't read orphan inode 15 (err -117)
[  256.547031][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  256.547040][    C0] EXT4-fs (loop3): initial error at time 1787628517: ext4_orphan_get:1399: inode 15
[  256.547053][    C0] EXT4-fs (loop3): last error at time 1787628517: ext4_orphan_get:1399: inode 15
[  256.558734][ T9799] loop3: lost filesystem error report for type 5 error -117
[  256.562818][ T9799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.585422][ T9799] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 2147483647 > max in inode 18
[  256.590327][ T5729] Bluetooth: hci2: ACL packet for unknown connection handle 1737
[  256.744399][ T8587] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.793858][ T5716] usb 1-1: 0:2 : does not exist
[  256.927660][ T5716] usb 1-1: USB disconnect, device number 18
[  256.947822][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1630'.
[  256.979255][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1630'.
[  256.996281][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1630'.
[  257.019263][ T9809] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1630'.
[  257.067404][ T7764] udevd[7764]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.196981][ T9813] loop4: detected capacity change from 0 to 512
[  257.217368][ T9813] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  257.253618][ T9813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  257.279131][ T9813] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.329418][ T9813] EXT4-fs error (device loop4): ext4_group_add:1738: inode #7: comm syz.4.1632: iget: checksum invalid
[  257.368495][ T9813] EXT4-fs warning (device loop4): ext4_group_add:1740: Error opening resize inode
[  257.443434][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.884172][ T9811] loop3: detected capacity change from 0 to 40427
[  257.915990][ T9811] F2FS-fs: heap/no_heap options were deprecated
[  257.959979][ T9811] F2FS-fs (loop3): build fault injection rate: 19
[  257.976539][ T9811] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  258.010062][ T9811] F2FS-fs (loop3): invalid crc value
[  258.043312][ T9811] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  258.221358][ T9811] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  258.265045][ T9811] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.308270][ T9811] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  258.358646][ T9835] loop4: detected capacity change from 0 to 16
[  258.375638][ T9835] erofs (device loop4): DAX unsupported by block device. Turning off DAX.
[  258.415474][ T9835] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  258.438211][ T9835] erofs (device loop4): mounted with root inode @ nid 36.
[  258.450365][ T9836] overlayfs: failed to resolve './file0': -2
[  258.486741][ T9811] syz.3.1631: attempt to access beyond end of device
[  258.486741][ T9811] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  258.512441][ T9811] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0x188/0x630
[  259.651244][ T9860] loop4: detected capacity change from 0 to 32768
[  259.672663][ T9861] loop3: detected capacity change from 0 to 512
[  259.682172][ T9860] JBD2: Ignoring recovery information on journal
[  259.702638][ T9860] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  259.722057][ T9861] EXT4-fs: Ignoring removed bh option
[  259.762925][ T9861] EXT4-fs: test_dummy_encryption requires encrypt feature
[  259.957557][ T9867] loop3: detected capacity change from 0 to 256
[  260.304915][ T9868] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[  261.219071][ T9868] FAT-fs (loop3): Filesystem has been set read-only
[  261.323097][ T8119] ocfs2: Unmounting device (7,4) on (node local)
[  263.351684][ T9886] loop4: detected capacity change from 0 to 32768
[  264.886139][ T9916] loop3: detected capacity change from 0 to 128
[  264.958339][ T9916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  264.975387][ T9916] System zones: 1-3, 19-19, 35-36
[  264.986160][ T9916] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  265.012227][ T9916] ext4 filesystem being mounted at /154/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  265.267319][ T8587] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  265.453907][ T9926] loop4: detected capacity change from 0 to 1024
[  265.505253][ T9926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  265.538246][ T9926] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.611149][ T9926] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.1679: lblock 3 mapped to illegal pblock 3 (length 3)
[  265.659019][ T9926] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  265.697066][ T9926] EXT4-fs (loop4): This should not happen!! Data will be lost
[  265.697066][ T9926] 
[  265.794217][ T9044] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm kworker/u9:16: lblock 0 mapped to illegal pblock 0 (length 3)
[  265.844751][ T9044] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117
[  265.872631][ T9044] EXT4-fs (loop4): This should not happen!! Data will be lost
[  265.872631][ T9044] 
[  265.891981][ T9044] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u9:16: lblock 4 mapped to illegal pblock 4 (length 2)
[  265.915043][ T9044] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117
[  265.927653][ T9938] loop3: detected capacity change from 0 to 4096
[  265.935883][ T9044] EXT4-fs (loop4): This should not happen!! Data will be lost
[  265.935883][ T9044] 
[  265.961851][ T8119] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  266.005424][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  266.019379][ T9941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  266.076831][ T9938] CacheFiles: Failed to register: -95
[  266.342585][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'.
[  266.367455][ T9947] macvlan0: entered promiscuous mode
[  266.389246][ T9947] netlink: 'syz.4.1688': attribute type 1 has an invalid length.
[  266.410750][ T9947] netlink: 'syz.4.1688': attribute type 2 has an invalid length.
[  266.427535][ T9947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'.
[  266.649148][ T9953] loop0: detected capacity change from 0 to 32768
[  266.653106][ T9953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1690 (9953)
[  266.660024][ T9953] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.663178][ T9953] BTRFS info (device loop0): using crc32c checksum algorithm
[  266.698558][ T9956] kAFS: unable to lookup cell ''
[  266.830580][ T9953] BTRFS info (device loop0): enabling ssd optimizations
[  266.832806][ T9953] BTRFS info (device loop0): turning on flush-on-commit
[  266.834953][ T9953] BTRFS info (device loop0): enabling free space tree
[  266.836941][ T9953] BTRFS info (device loop0): enabling auto defrag
[  266.838861][ T9953] BTRFS info (device loop0): use lzo compression, level 1
[  266.853114][ T9953] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  267.432258][ T9984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'.
[  267.614671][ T9988] input: syz1 as /devices/virtual/input/input14
[  267.819229][ T9996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'.
[  267.999410][T10001] loop0: detected capacity change from 0 to 1024
[  268.327568][T10011] netlink: 'syz.0.1710': attribute type 11 has an invalid length.
[  268.345947][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'.
[  268.918868][   T34] audit: type=1326 audit(1787628529.534:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  268.965510][   T34] audit: type=1326 audit(1787628529.544:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.021295][   T34] audit: type=1326 audit(1787628529.544:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.078620][   T34] audit: type=1326 audit(1787628529.544:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.138447][   T34] audit: type=1326 audit(1787628529.544:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.176472][   T34] audit: type=1326 audit(1787628529.544:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.219228][   T34] audit: type=1326 audit(1787628529.544:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.269104][   T34] audit: type=1326 audit(1787628529.544:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.310198][   T34] audit: type=1326 audit(1787628529.544:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1720" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f562059e0d9 code=0x7ffc0000
[  269.402531][T10043] loop0: detected capacity change from 0 to 1024
[  269.896286][T10053] loop0: detected capacity change from 0 to 256
[  269.987985][T10053] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d)
[  270.031639][T10053] exFAT-fs (loop0): start_clu is invalid cluster(0x0)
[  270.282216][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  270.307389][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'.
[  270.317731][T10061] vlan2: entered promiscuous mode
[  270.342547][T10061] bond0: entered promiscuous mode
[  270.370958][T10061] bond_slave_0: entered promiscuous mode
[  270.394954][T10061] bond_slave_1: entered promiscuous mode
[  271.103492][T10079] netlink: 508 bytes leftover after parsing attributes in process `syz.3.1740'.
[  271.390008][T10083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1744'.
[  272.088982][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'.
[  272.447112][ T5779] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  272.502984][T10122] CIFS: Attempting to mount //::1/share
[  272.606070][ T5779] usb 4-1: Using ep0 maxpacket: 32
[  272.620294][ T5779] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  272.636961][ T5779] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.660452][ T5779] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  272.675380][ T5779] usb 4-1: config 0 has no interface number 1
[  272.689036][ T5779] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  272.738269][ T5779] usb 4-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27
[  272.751969][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.764490][ T5779] usb 4-1: Product: syz
[  272.771581][ T5779] usb 4-1: Manufacturer: syz
[  272.782560][ T5779] usb 4-1: SerialNumber: syz
[  272.797419][ T5779] usb 4-1: config 0 descriptor??
[  272.833795][ T5779] pwc: Logitech QuickCam Pro 3000 USB webcam detected.
[  273.054551][ T5779] pwc: Failed to set LED on/off time (-71)
[  273.070278][ T5779] pwc: send_video_command error -71
[  273.086343][ T5779] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  273.101468][ T5779] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  273.180134][ T5779] usb 4-1: USB disconnect, device number 12
[  273.269262][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1767'.
[  273.351176][T10122] CIFS: VFS: Error connecting to socket. Aborting operation.
[  273.373521][T10122] CIFS: VFS: cifs_mount failed w/return code = -4
[  273.639124][T10142] loop4: detected capacity change from 0 to 128
[  273.672455][T10142] FAT-fs (loop4): bogus number of reserved sectors
[  273.696525][T10142] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  273.717684][T10142] FAT-fs (loop4): Can't find a valid FAT filesystem
[  275.078285][T10168] loop0: detected capacity change from 0 to 256
[  275.116653][T10168] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  275.315192][   T34] audit: type=1800 audit(1787628535.924:41): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1784" name="file1" dev="tmpfs" ino=959 res=0 errno=0
[  275.477651][   T34] audit: type=1400 audit(1787628536.084:42): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="%#{//(@\)//&@}" pid=10177 comm="syz.0.1786"
[  275.960368][T10193] autofs: Unknown parameter 'no9 PG!8E	'
[  276.025748][T10197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1795'.
[  276.140006][T10201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1797'.
[  276.167977][T10201] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1797'.
[  276.289560][T10207] netlink: 'syz.3.1800': attribute type 21 has an invalid length.
[  276.300296][T10207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1800'.
[  276.455868][ T5779] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  276.464886][ T5716] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  276.615191][ T5716] usb 1-1: Using ep0 maxpacket: 8
[  276.624170][ T5779] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  276.628105][ T5716] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  276.637046][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.645710][ T5716] usb 1-1: config 179 has no interface number 0
[  276.653385][ T5779] usb 5-1: Product: syz
[  276.656434][ T5716] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  276.661513][ T5779] usb 5-1: Manufacturer: syz
[  276.668536][ T5779] usb 5-1: SerialNumber: syz
[  276.673306][ T5716] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  276.683712][ T5779] usb 5-1: config 0 descriptor??
[  276.701263][ T5716] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  276.717025][ T5716] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  276.740226][ T5716] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  276.768428][ T5716] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  276.786995][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.811201][T10205] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  277.120024][ T5779] usb 5-1: Firmware version (0.0) predates our first public release.
[  277.130170][ T5779] usb 5-1: Please update to version 0.2 or newer
[  277.307619][ T5716] usb 1-1: USB disconnect, device number 19
[  277.309546][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  277.309571][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  277.559786][ T5779] usb 5-1: USB disconnect, device number 8
[  277.593531][T10230] loop3: detected capacity change from 0 to 128
[  277.631610][T10230] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  277.661923][T10230] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  277.849739][ T8587] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  277.994291][T10236] netlink: 'syz.4.1812': attribute type 4 has an invalid length.
[  278.047514][T10240] netlink: 'syz.4.1812': attribute type 4 has an invalid length.
[  278.928092][T10249] loop0: detected capacity change from 0 to 32768
[  279.728842][T10283] vcan0: tx address claim with broadcast sa
[  279.944707][ T5779] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  280.104499][ T5779] usb 5-1: Using ep0 maxpacket: 8
[  280.131560][ T5779] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.155599][ T5779] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  280.194722][ T5779] usb 5-1: config 0 interface 0 has no altsetting 0
[  280.208925][ T5779] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00
[  280.230291][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.248139][ T5779] usb 5-1: config 0 descriptor??
[  280.325389][T10279] loop0: detected capacity change from 0 to 32768
[  280.369809][T10279] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  280.444206][T10279] XFS (loop0): Ending clean mount
[  280.484562][ T5716] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  280.520438][ T5725] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  280.664672][ T5716] usb 4-1: Using ep0 maxpacket: 8
[  280.672303][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short
[  280.684274][ T5716] usb 4-1: config 4 interface 0 has no altsetting 0
[  280.726875][ T5779] wacom 0003:056A:00E5.000B: hidraw0: USB HID v0.08 Joystick [HID 056a:00e5] on usb-dummy_hcd.4-1/input0
[  280.731008][ T5716] usb 4-1: string descriptor 0 read error: -22
[  280.741548][ T5716] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  280.761845][ T5716] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  280.809482][ T5716] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  280.860701][ T5716] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  280.890878][ T5716] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  280.929993][ T5716] usb 4-1: media controller created
[  280.985768][ T5779] usb 5-1: USB disconnect, device number 9
[  281.045291][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.200576][ T5716] zl10353_read_register: readreg error (reg=127, ret==0)
[  281.299778][ T5716] usb 4-1: USB disconnect, device number 13
[  281.464407][ T5779] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  281.618298][ T5779] usb 1-1: Using ep0 maxpacket: 8
[  281.633295][ T5779] usb 1-1: config index 0 descriptor too short (expected 2075, got 27)
[  281.653301][ T5779] usb 1-1: config 0 has an invalid interface number: 200 but max is 0
[  281.667582][ T5779] usb 1-1: config 0 has no interface number 0
[  281.677686][ T5779] usb 1-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[  281.702978][ T5779] usb 1-1: config 0 interface 200 has no altsetting 0
[  281.723786][ T5779] usb 1-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[  281.744711][ T5779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.764286][ T5779] usb 1-1: Product: syz
[  281.776431][ T5779] usb 1-1: Manufacturer: syz
[  281.782642][ T5779] usb 1-1: SerialNumber: syz
[  281.813189][ T5779] usb 1-1: config 0 descriptor??
[  282.060711][ T5779] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.200/input/input18
[  282.120862][T10316] loop3: detected capacity change from 0 to 1024
[  282.124838][ T5779] usb 1-1: USB disconnect, device number 20
[  282.139156][T10316] EXT4-fs: Ignoring removed bh option
[  282.177141][T10316] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (56563!=20869)
[  282.202255][T10316] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  282.388572][T10316] EXT4-fs (loop3): failed to open journal device unknown-block(0,5) -ENXIO
[  282.739628][ T5729] Bluetooth: hci2: connection err: -111
[  283.754445][ T8791] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  283.915966][ T8791] usb 1-1: Using ep0 maxpacket: 8
[  283.926701][ T8791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  283.947306][ T8791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.967052][ T8791] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.989603][ T8791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  284.013032][ T8791] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  284.029057][ T8791] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  284.056441][ T8791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.085754][T10345] loop4: detected capacity change from 0 to 128
[  284.088280][ T8791] usb 1-1: config 0 descriptor??
[  284.096283][T10331] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  284.561626][ T5729] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  284.571521][ T8791] usb 1-1: USB disconnect, device number 21
[  285.050708][ T5779] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  285.121230][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'.
[  285.149713][T10360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'.
[  285.179772][T10362] loop0: detected capacity change from 0 to 128
[  285.203404][T10362] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  285.210028][ T5779] usb 4-1: Using ep0 maxpacket: 32
[  285.238206][ T5779] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  285.262343][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.400836][ T5779] usb 4-1: Product: syz
[  285.409762][ T5779] usb 4-1: Manufacturer: syz
[  285.423216][ T5779] usb 4-1: SerialNumber: syz
[  286.255509][ T5779] usb 4-1: config 0 descriptor??
[  286.278081][ T5779] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  286.691451][ T5779] gspca_topro: reg_w err -71
[  286.716288][ T5779] gspca_topro: Sensor soi763a
[  286.873328][ T5779] usb 4-1: USB disconnect, device number 14
[  286.925810][T10372] IPv6: addrconf: prefix option has invalid lifetime
[  287.211435][T10374] loop4: detected capacity change from 0 to 4096
[  287.361343][T10374] ntfs3(loop4): ino=8, mi_enum_attr
[  287.393245][T10374] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  287.409390][T10374] ntfs3(loop4): Failed to load $BadClus (-22).
[  288.438832][ T5729] Bluetooth: hci0: unexpected event for opcode 0x040d
[  289.250441][T10414] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  290.782573][T10436] loop0: detected capacity change from 0 to 8192
[  290.832925][T10436] Dev loop0: unable to read partition block 1929379610
[  290.856192][T10436]  loop0: RDSK (-512) unable to read partition table
[  290.887610][T10436] loop0: partition table beyond EOD, truncated
[  290.959379][T10436] loop_reread_partitions: partition scan of loop0 () failed (rc=-5)
[  290.980129][ T5046] Dev loop0: unable to read partition block 1929379610
[  290.994220][ T5046]  loop0: RDSK (-512) unable to read partition table
[  291.009785][ T5046] loop0: partition table beyond EOD, truncated
[  291.199681][T10452] virtio-fs: tag </dev/md0> not found
[  291.647074][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  291.748784][T10450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  291.973980][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1912'.
[  292.187131][T10450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.409902][T10450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  292.413369][T10474] cgroup: name respecified
[  292.672655][T10450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.101949][ T8484] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.176884][T10493] loop4: detected capacity change from 0 to 8
[  293.207025][T10493] Filesystem uses "unknown" compression. This is not supported
[  293.227792][ T8484] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.238708][ T8484] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.354218][ T8484] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.258864][T10521] loop4: detected capacity change from 0 to 2048
[  294.307129][T10521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  294.379104][T10521] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #12: block 2: comm syz.4.1938: lblock 0 mapped to illegal pblock 2 (length 1)
[  294.441867][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.562592][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1941'.
[  294.788571][T10537] loop4: detected capacity change from 0 to 64
[  295.416809][T10556] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  295.536749][T10557] netlink: 'syz.4.1953': attribute type 2 has an invalid length.
[  295.554008][T10557] netlink: 'syz.4.1953': attribute type 2 has an invalid length.
[  295.854833][ T8791] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  296.035184][ T8791] usb 5-1: unable to get BOS descriptor or descriptor too short
[  296.051888][ T8791] usb 5-1: config 114 has an invalid interface number: 51 but max is 0
[  296.069746][ T8791] usb 5-1: config 114 has no interface number 0
[  296.083495][ T8791] usb 5-1: config 114 interface 51 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A
[  296.105855][ T8791] usb 5-1: config 114 interface 51 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16
[  296.121512][T10579] Cannot find set identified by id 0 to match
[  296.125970][ T8791] usb 5-1: config 114 interface 51 has no altsetting 0
[  296.145999][ T8791] usb 5-1: string descriptor 0 read error: -22
[  296.181124][ T8791] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=83.30
[  296.216079][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.241329][T10561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  296.524977][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  296.545729][ T5779] usb 5-1: USB disconnect, device number 10
[  297.204138][T10607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1976'.
[  297.236906][T10605] batman_adv: batadv0: Adding interface: gretap1
[  297.248632][T10605] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  297.308658][T10605] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[  297.634694][T10617] loop4: detected capacity change from 0 to 128
[  297.648995][T10617] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  297.670287][T10617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.698089][ T5779] bridge0: entered promiscuous mode
[  297.874677][T10620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'.
[  298.494478][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  298.647486][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  298.657382][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  298.686123][    T9] usb 5-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00
[  298.698738][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.720754][    T9] usb 5-1: Product: syz
[  298.722074][    T9] usb 5-1: Manufacturer: syz
[  298.741503][    T9] usb 5-1: SerialNumber: syz
[  298.770023][    T9] digi_acceleport 5-1:1.0: Digi 2 port USB adapter converter detected
[  298.783977][    T9] digi_acceleport 5-1:1.0: probe with driver digi_acceleport failed with error -22
[  298.997286][ T8791] usb 5-1: USB disconnect, device number 11
[  299.988458][T10659] loop0: detected capacity change from 0 to 32768
[  300.112986][T10659] ERROR: (device loop0): dbAlloc: unable to allocate blocks
[  300.112986][T10659] 
[  300.133137][T10659] ERROR: (device loop0): remounting filesystem as read-only
[  300.147519][T10659] ialloc: diAlloc returned -5!
[  300.195782][T10665] loop4: detected capacity change from 0 to 2048
[  300.260000][T10665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  301.131722][ T5729] Bluetooth: hci0: unexpected event for opcode 0x6b2f
[  301.688548][T10686] ip_tables: iptables: counters copy to user failed while replacing table
[  301.712450][T10686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  302.246829][ T8484] bridge_slave_1: left allmulticast mode
[  302.256474][ T8484] bridge_slave_1: left promiscuous mode
[  302.265141][ T8484] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.285888][ T8484] bridge_slave_0: left allmulticast mode
[  302.297106][ T8484] bridge_slave_0: left promiscuous mode
[  302.312049][ T8484] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.682495][T10704] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  302.715932][T10704] overlayfs: missing 'lowerdir'
[  303.317387][ T8484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.347261][ T8484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.369517][ T8484] bond0 (unregistering): Released all slaves
[  303.798298][T10732] loop0: detected capacity change from 0 to 2048
[  303.820033][ T7764] udevd[7764]: incorrect nilfs2 checksum on /dev/loop0
[  303.822438][T10732] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  303.856296][T10732] NILFS (loop0): mounting unchecked fs
[  303.861271][ T7764] udevd[7764]: incorrect nilfs2 checksum on /dev/loop0
[  303.896541][T10732] NILFS (loop0): recovery complete
[  303.919717][T10735] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  304.062527][ T8484] hsr_slave_0: left promiscuous mode
[  304.071189][ T8484] hsr_slave_1: left promiscuous mode
[  304.086689][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.110405][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.133694][ T8484] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.148478][ T8484] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.215393][ T8484] veth1_macvtap: left promiscuous mode
[  304.227949][ T8484] veth0_macvtap: left promiscuous mode
[  304.235744][ T8484] veth1_vlan: left promiscuous mode
[  304.246939][ T8484] veth0_vlan: left promiscuous mode
[  304.992451][ T8484] team0 (unregistering): Port device team_slave_1 removed
[  305.019724][ T8484] team0 (unregistering): Port device team_slave_0 removed
[  305.390431][T10750] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  305.435114][T10755] vlan0: entered promiscuous mode
[  305.475196][T10756] vlan0: left promiscuous mode
[  305.690922][ T8484] IPVS: stop unused estimator thread 0...
[  305.785477][ T8791] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  305.905772][ T5800] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  305.955626][ T8791] usb 4-1: Using ep0 maxpacket: 32
[  305.959105][ T8791] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  305.979158][ T8791] usb 4-1: config 0 has no interface number 0
[  305.986971][ T8791] usb 4-1: config 0 interface 12 has no altsetting 0
[  306.014235][ T8791] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  306.022363][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.044659][ T8791] usb 4-1: Product: syz
[  306.046046][ T8791] usb 4-1: Manufacturer: syz
[  306.054213][ T8791] usb 4-1: SerialNumber: syz
[  306.069030][ T8791] usb 4-1: config 0 descriptor??
[  306.074485][ T5800] usb 1-1: Using ep0 maxpacket: 16
[  306.081326][ T5800] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  306.099684][ T5800] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00
[  306.114151][ T5800] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.144963][ T5800] usb 1-1: config 0 descriptor??
[  306.383952][ T5800] usbhid 1-1:0.0: can't add hid device: -71
[  306.398699][ T5800] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  306.420645][ T5800] usb 1-1: USB disconnect, device number 22
[  306.716585][T10777] loop4: detected capacity change from 0 to 512
[  306.875634][T10777] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -ENXIO
[  306.952495][T10777] loop4: detected capacity change from 0 to 1764
[  307.037546][T10777] iso9660: Corrupted directory entry in block 0 of inode 1792
[  308.067789][T10797] loop4: detected capacity change from 0 to 32768
[  308.093030][T10797] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  308.298947][ T8791] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  308.320117][ T8791] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  309.047490][T10801] netlink: 'syz.4.2057': attribute type 4 has an invalid length.
[  309.050511][   T34] audit: type=1800 audit(1787628569.664:43): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2057" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  309.069179][ T8791] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  309.087365][ T8791] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  309.111757][ T8791] usb 4-1: USB disconnect, device number 15
[  309.342545][ T8119] ocfs2: Unmounting device (7,4) on (node local)
[  309.793402][T10819] --map-set only usable from mangle table
[  309.957108][T10824] loop4: detected capacity change from 0 to 512
[  309.979851][T10824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  310.051626][T10824] EXT4-fs (loop4): 1 truncate cleaned up
[  310.069810][T10824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  310.218017][ T8119] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.462735][T10841] loop0: detected capacity change from 0 to 32768
[  310.491267][T10841] JBD2: Ignoring recovery information on journal
[  310.510967][T10841] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  310.589192][T10841] 
[  310.590003][T10841] ======================================================
[  310.592147][T10841] WARNING: possible circular locking dependency detected
[  310.594330][T10841] syzkaller #0 Tainted: G             L     
[  310.596219][T10841] ------------------------------------------------------
[  310.598394][T10841] syz.0.2075/10841 is trying to acquire lock:
[  310.600261][T10841] ffff888039801458 (&oi->ip_alloc_sem){+.+.}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x360
[  310.603486][T10841] 
[  310.603486][T10841] but task is already holding lock:
[  310.605747][T10841] ffff8880398014e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  310.608960][T10841] 
[  310.608960][T10841] which lock already depends on the new lock.
[  310.608960][T10841] 
[  310.612132][T10841] 
[  310.612132][T10841] the existing dependency chain (in reverse order) is:
[  310.614871][T10841] 
[  310.614871][T10841] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  310.617310][T10841]        down_read+0x4a/0x330
[  310.618775][T10841]        ocfs2_init_acl+0x2fd/0x7e0
[  310.620397][T10841]        ocfs2_mknod+0x166a/0x2240
[  310.621964][T10841]        ocfs2_mkdir+0x181/0x460
[  310.623495][T10841]        vfs_mkdir+0x406/0x620
[  310.624940][T10841]        filename_mkdirat+0x285/0x510
[  310.626675][T10841]        __se_sys_mkdirat+0x35/0x150
[  310.628262][T10841]        do_syscall_64+0x174/0x580
[  310.629807][T10841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.631845][T10841] 
[  310.631845][T10841] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  310.634441][T10841]        down_read+0x4a/0x330
[  310.635892][T10841]        ocfs2_start_trans+0x3ab/0x700
[  310.637643][T10841]        ocfs2_reserve_suballoc_bits+0x7b7/0x4850
[  310.639588][T10841]        ocfs2_reserve_new_metadata_blocks+0x415/0x9a0
[  310.641847][T10841]        ocfs2_extend_dir+0xd35/0x4b60
[  310.643818][T10841]        ocfs2_prepare_dir_for_insert+0x339a/0x5190
[  310.646073][T10841]        ocfs2_mknod+0xa16/0x2240
[  310.647700][T10841]        ocfs2_mkdir+0x181/0x460
[  310.649261][T10841]        vfs_mkdir+0x406/0x620
[  310.650784][T10841]        filename_mkdirat+0x285/0x510
[  310.652438][T10841]        __se_sys_mkdirat+0x35/0x150
[  310.654002][T10841]        do_syscall_64+0x174/0x580
[  310.655594][T10841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.657589][T10841] 
[  310.657589][T10841] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  310.659870][T10841]        ocfs2_start_trans+0x2ac/0x700
[  310.661536][T10841]        ocfs2_setattr+0x9eb/0x1d10
[  310.663104][T10841]        notify_change+0xbba/0xea0
[  310.664677][T10841]        do_truncate+0x1c2/0x250
[  310.666196][T10841]        do_ftruncate+0x4d4/0x580
[  310.667779][T10841]        __x64_sys_ftruncate+0x8f/0xe0
[  310.669469][T10841]        do_syscall_64+0x174/0x580
[  310.671056][T10841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.672980][T10841] 
[  310.672980][T10841] -> #0 (&oi->ip_alloc_sem){+.+.}-{4:4}:
[  310.675400][T10841]        __lock_acquire+0x15ff/0x2e50
[  310.677061][T10841]        lock_acquire+0x115/0x350
[  310.678625][T10841]        down_write+0x96/0x200
[  310.680067][T10841]        ocfs2_try_remove_refcount_tree+0xb6/0x360
[  310.682038][T10841]        ocfs2_truncate_file+0xe90/0x14b0
[  310.683775][T10841]        ocfs2_setattr+0x1641/0x1d10
[  310.685428][T10841]        notify_change+0xbba/0xea0
[  310.686985][T10841]        do_truncate+0x1c2/0x250
[  310.688502][T10841]        do_ftruncate+0x4d4/0x580
[  310.690028][T10841]        __x64_sys_ftruncate+0x8f/0xe0
[  310.691671][T10841]        do_syscall_64+0x174/0x580
[  310.693178][T10841]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.695116][T10841] 
[  310.695116][T10841] other info that might help us debug this:
[  310.695116][T10841] 
[  310.698181][T10841] Chain exists of:
[  310.698181][T10841]   &oi->ip_alloc_sem --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  310.698181][T10841] 
[  310.702440][T10841]  Possible unsafe locking scenario:
[  310.702440][T10841] 
[  310.704680][T10841]        CPU0                    CPU1
[  310.706291][T10841]        ----                    ----
[  310.707901][T10841]   lock(&oi->ip_xattr_sem);
[  310.709328][T10841]                                lock(&journal->j_trans_barrier);
[  310.711643][T10841]                                lock(&oi->ip_xattr_sem);
[  310.713711][T10841]   lock(&oi->ip_alloc_sem);
[  310.715131][T10841] 
[  310.715131][T10841]  *** DEADLOCK ***
[  310.715131][T10841] 
[  310.717634][T10841] 3 locks held by syz.0.2075/10841:
[  310.719170][T10841]  #0: ffff888025c92450 (sb_writers#29){.+.+}-{0:0}, at: do_ftruncate+0x474/0x580
[  310.721934][T10841]  #1: ffff8880398017a0 (&sb->s_type->i_mutex_key#49){+.+.}-{4:4}, at: do_truncate+0x18f/0x250
[  310.725057][T10841]  #2: ffff8880398014e8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x360
[  310.728321][T10841] 
[  310.728321][T10841] stack backtrace:
[  310.730107][T10841] CPU: 0 UID: 0 PID: 10841 Comm: syz.0.2075 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  310.730118][T10841] Tainted: [L]=SOFTLOCKUP
[  310.730122][T10841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.730128][T10841] Call Trace:
[  310.730134][T10841]  <TASK>
[  310.730138][T10841]  dump_stack_lvl+0xe8/0x150
[  310.730151][T10841]  print_circular_bug+0x2e2/0x300
[  310.730163][T10841]  check_noncircular+0x12f/0x150
[  310.730175][T10841]  __lock_acquire+0x15ff/0x2e50
[  310.730189][T10841]  lock_acquire+0x115/0x350
[  310.730199][T10841]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  310.730212][T10841]  down_write+0x96/0x200
[  310.730221][T10841]  ? ocfs2_try_remove_refcount_tree+0xb6/0x360
[  310.730231][T10841]  ? __pfx_down_write+0x10/0x10
[  310.730260][T10841]  ocfs2_try_remove_refcount_tree+0xb6/0x360
[  310.730273][T10841]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  310.730284][T10841]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  310.730294][T10841]  ? ocfs2_inode_cache_get_super+0xd/0x40
[  310.730304][T10841]  ocfs2_truncate_file+0xe90/0x14b0
[  310.730313][T10841]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  310.730321][T10841]  ? _raw_spin_unlock+0x28/0x50
[  310.730327][T10841]  ? ocfs2_inode_lock_tracker+0x436/0x710
[  310.730338][T10841]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  310.730349][T10841]  ? ocfs2_rw_lock+0x13a/0x250
[  310.730358][T10841]  ? __pfx___dquot_initialize+0x10/0x10
[  310.730369][T10841]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[  310.730377][T10841]  ? do_raw_spin_unlock+0x4d/0x210
[  310.730384][T10841]  ? jbd2_journal_begin_ordered_truncate+0xbb/0x150
[  310.730396][T10841]  ocfs2_setattr+0x1641/0x1d10
[  310.730407][T10841]  ? __pfx_ocfs2_setattr+0x10/0x10
[  310.730414][T10841]  ? lock_acquire+0x115/0x350
[  310.730423][T10841]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  310.730432][T10841]  ? lockdep_hardirqs_on+0x7a/0x110
[  310.730439][T10841]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  310.730449][T10841]  ? seqcount_lockdep_reader_access+0xea/0x100
[  310.730457][T10841]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  310.730467][T10841]  ? current_time+0x22f/0x380
[  310.730474][T10841]  ? evm_inode_setattr+0x1ba/0x7c0
[  310.730484][T10841]  ? __pfx_current_time+0x10/0x10
[  310.730492][T10841]  ? try_break_deleg+0x5b/0x180
[  310.730500][T10841]  ? __pfx_ocfs2_setattr+0x10/0x10
[  310.730507][T10841]  notify_change+0xbba/0xea0
[  310.730518][T10841]  do_truncate+0x1c2/0x250
[  310.730526][T10841]  ? __pfx_do_truncate+0x10/0x10
[  310.730536][T10841]  do_ftruncate+0x4d4/0x580
[  310.730545][T10841]  ? __pfx_do_ftruncate+0x10/0x10
[  310.730553][T10841]  ? __fget_files+0x2a/0x420
[  310.730559][T10841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.730566][T10841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.730573][T10841]  __x64_sys_ftruncate+0x8f/0xe0
[  310.730581][T10841]  do_syscall_64+0x174/0x580
[  310.730589][T10841]  ? trace_irq_disable+0x3b/0x140
[  310.730599][T10841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.730606][T10841] RIP: 0033:0x7f562059e0d9
[  310.730616][T10841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  310.730628][T10841] RSP: 002b:00007f562140e028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d
[  310.730637][T10841] RAX: ffffffffffffffda RBX: 00007f5620825fa0 RCX: 00007f562059e0d9
[  310.730643][T10841] RDX: 0000000000000000 RSI: 000000000000010d RDI: 0000000000000004
[  310.730648][T10841] RBP: 00007f5620635024 R08: 0000000000000000 R09: 0000000000000000
[  310.730653][T10841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.730658][T10841] R13: 00007f5620826038 R14: 00007f5620825fa0 R15: 00007ffd3b1ed578
[  310.730666][T10841]  </TASK>
[  311.069907][ T5725] ocfs2: Unmounting device (7,0) on (node local)
[  317.247386][ T1373] ieee802154 phy0 wpan0: encryption failed: -22
[  317.249672][ T1373] ieee802154 phy1 wpan1: encryption failed: -22
