last executing test programs:

1m0.580432626s ago: executing program 2 (id=88):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x70bd25, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040084}, 0x0)

1m0.43040913s ago: executing program 2 (id=91):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x24, 0x42, 0x107, 0xfffffffe, 0x0, {0x3, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

1m0.020963177s ago: executing program 2 (id=92):
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f0000000000000000140002"], 0x54}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c0001800600060065580000971b0280540211"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

59.901181694s ago: executing program 2 (id=94):
syz_mount_image$minix(&(0x7f0000000600), &(0x7f0000000100)='./file1\x00', 0x1804002, &(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB="28eab73baea79cebfbcb377495a5091fc0b79703c790e209a76c53adec0a444df808db4a70188c30fc5f9c81caa83f2882fced04170dc6602feb4f971fa7b7c3d8be7345ca210ed1a2e91f15f7cf9f851773d36f4149ae4855f777c47e1a9ffb174a9daee48821b82196b5336460ba85b4ca92c2fe9b7ae175cab7acdd2c107c335a67c1a38efd4a2a19b18fe8ca", @ANYRESOCT, @ANYRES32, @ANYRES16, @ANYRESDEC], 0x11, 0x1d6, &(0x7f0000000bc0)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x51)
syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

59.685239014s ago: executing program 2 (id=98):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000002c0))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000001c0)={r1})

58.479830512s ago: executing program 2 (id=103):
syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000002840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0xb2b, "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"}}}}}}, 0x0)

58.479696463s ago: executing program 32 (id=103):
syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000002840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0xb2b, "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"}}}}}}, 0x0)

3.270336996s ago: executing program 3 (id=666):
socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3.270036481s ago: executing program 3 (id=667):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000ec0)={0x2020}, 0x2020)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file1\x00', 0x2000045c, &(0x7f0000000500)=ANY=[], 0x1, 0x151b, &(0x7f0000002ac0)="$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")

2.848428753s ago: executing program 3 (id=674):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b"], 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000)

2.586551715s ago: executing program 3 (id=675):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)={{0x12, 0x1, 0x0, 0x41, 0x7, 0xf5, 0x40, 0xcf3, 0x9375, 0x1a9e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbe, 0xe4, 0xf9}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1.379871463s ago: executing program 0 (id=687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r3, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)

1.127988492s ago: executing program 3 (id=690):
socket$xdp(0x2c, 0x3, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)

639.071594ms ago: executing program 3 (id=691):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000580)={0x20, 0x9, 0x1, 'l'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x40, 0x1, 0x2, "69de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

420.921455ms ago: executing program 0 (id=693):
rt_sigaction(0x19, &(0x7f00000000c0)={0x0, 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000))

420.751038ms ago: executing program 0 (id=694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x88, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x5c, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "25b144331531f72c13152af0e06dd74d4c80bcaf6b361cdb6979f1990af5da26f49e454cd8f7a8989f9a5a654d0f51e8bf17b4a0695b172e275fc1e83f663917fd"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x124}}, 0x0)

356.348758ms ago: executing program 0 (id=695):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, 0x0)

269.54774ms ago: executing program 0 (id=698):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550d, 0x0)

269.085684ms ago: executing program 0 (id=700):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x20000000000081, 0x3, 0x1, 0x0, 0x80, 0x369, 0x6a72})
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x6, 0x400000000000005, 0xf, 0x0, 0x0, 0xaa1})

200.229968ms ago: executing program 1 (id=701):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0)

199.952001ms ago: executing program 1 (id=702):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2d, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)

120.68651ms ago: executing program 1 (id=703):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
dup3(r1, r0, 0x0)

60.568314ms ago: executing program 1 (id=704):
syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x8, 0xc9, 0x0, 0x8}}}, 0x9)

330.164µs ago: executing program 1 (id=705):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000100)={0x7, 0x75b2, 0x30, 0x84400})

0s ago: executing program 1 (id=706):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xff08, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:64585' (ED25519) to the list of known hosts.
syzkaller login: [   55.926143][ T5793] cgroup: Unknown subsys name 'net'
[   56.036212][ T5793] cgroup: Unknown subsys name 'cpuset'
[   56.039553][ T5793] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   57.329956][ T5793] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.613722][ T5891] chnl_net:caif_netlink_parms(): no params data found
[   65.695549][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.705140][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state
[   65.707361][ T5891] bridge_slave_0: entered allmulticast mode
[   65.709926][ T5891] bridge_slave_0: entered promiscuous mode
[   65.715427][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.717697][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.720026][ T5891] bridge_slave_1: entered allmulticast mode
[   65.722532][ T5891] bridge_slave_1: entered promiscuous mode
[   65.801893][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   65.808909][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   65.836767][ T5891] team0: Port device team_slave_0 added
[   65.843236][ T5891] team0: Port device team_slave_1 added
[   65.861940][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0
[   65.864304][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.872021][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   65.878940][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1
[   65.881057][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   65.888847][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   65.914259][ T5891] hsr_slave_0: entered promiscuous mode
[   65.916445][ T5891] hsr_slave_1: entered promiscuous mode
[   65.997706][ T5891] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   66.002584][ T5891] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   66.006666][ T5891] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   66.010577][ T5891] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   66.026274][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.028498][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.030954][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.033126][ T5891] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.059384][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0
[   66.068927][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.071935][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.079863][ T5891] 8021q: adding VLAN 0 to HW filter on device team0
[   66.087661][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.089882][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.095784][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.098159][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.179649][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.200733][ T5891] veth0_vlan: entered promiscuous mode
[   66.206905][ T5891] veth1_vlan: entered promiscuous mode
[   66.222626][ T5891] veth0_macvtap: entered promiscuous mode
[   66.227395][ T5891] veth1_macvtap: entered promiscuous mode
[   66.236888][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.243257][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.251278][ T5903] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.254885][ T5903] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.257790][ T5684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.260506][ T5684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.290175][ T5891] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   69.200534][ T5684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.259923][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.263186][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.267518][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.270347][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.273032][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.334618][ T5202] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.337840][ T5202] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.341152][ T5202] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.344489][ T5202] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.347340][ T5202] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.359429][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.365743][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.370662][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.375199][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.377899][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.491191][ T5919] chnl_net:caif_netlink_parms(): no params data found
[   69.598030][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.602576][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.605706][ T5919] bridge_slave_0: entered allmulticast mode
[   69.608508][ T5919] bridge_slave_0: entered promiscuous mode
[   69.614186][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.616336][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.618517][ T5919] bridge_slave_1: entered allmulticast mode
[   69.621141][ T5919] bridge_slave_1: entered promiscuous mode
[   69.652774][ T5924] chnl_net:caif_netlink_parms(): no params data found
[   69.677684][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.691071][ T5684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.698718][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   69.712676][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.755969][ T5919] team0: Port device team_slave_0 added
[   69.765156][ T5684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.785300][ T5919] team0: Port device team_slave_1 added
[   69.809363][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.811606][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.813924][ T5924] bridge_slave_0: entered allmulticast mode
[   69.816393][ T5924] bridge_slave_0: entered promiscuous mode
[   69.828929][ T5684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   69.867542][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.870229][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.872962][ T5924] bridge_slave_1: entered allmulticast mode
[   69.877027][ T5924] bridge_slave_1: entered promiscuous mode
[   69.880044][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.882360][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.890866][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.895687][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.898128][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.906958][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.910992][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.913802][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.916104][ T5926] bridge_slave_0: entered allmulticast mode
[   69.918669][ T5926] bridge_slave_0: entered promiscuous mode
[   69.942588][ T5924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.948955][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.951519][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.953987][ T5926] bridge_slave_1: entered allmulticast mode
[   69.956542][ T5926] bridge_slave_1: entered promiscuous mode
[   69.982315][ T5924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.011055][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.049619][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.055451][ T5919] hsr_slave_0: entered promiscuous mode
[   70.057761][ T5919] hsr_slave_1: entered promiscuous mode
[   70.059778][ T5919] debugfs: 'hsr0' already exists in 'hsr'
[   70.061655][ T5919] Cannot create hsr debugfs directory
[   70.078775][ T5924] team0: Port device team_slave_0 added
[   70.082355][ T5924] team0: Port device team_slave_1 added
[   70.143059][ T5926] team0: Port device team_slave_0 added
[   70.166644][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.168767][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.177777][ T5924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.182432][ T5926] team0: Port device team_slave_1 added
[   70.201028][ T5924] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.204195][ T5924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.214516][ T5924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.218978][ T5684] bridge_slave_1: left allmulticast mode
[   70.221228][ T5684] bridge_slave_1: left promiscuous mode
[   70.223829][ T5684] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.229425][ T5684] bridge_slave_0: left allmulticast mode
[   70.231371][ T5684] bridge_slave_0: left promiscuous mode
[   70.233409][ T5684] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.446659][ T5684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   70.450479][ T5684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   70.455049][ T5684] bond0 (unregistering): Released all slaves
[   70.468125][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.470133][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.477890][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.515697][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.518885][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.528691][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.591152][ T5684] hsr_slave_0: left promiscuous mode
[   70.594436][ T5684] hsr_slave_1: left promiscuous mode
[   70.597083][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   70.599930][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_0
[   70.603421][ T5684] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   70.606796][ T5684] batman_adv: batadv0: Removing interface: batadv_slave_1
[   70.618031][ T5684] veth1_macvtap: left promiscuous mode
[   70.620085][ T5684] veth0_macvtap: left promiscuous mode
[   70.621944][ T5684] veth1_vlan: left promiscuous mode
[   70.624425][ T5684] veth0_vlan: left promiscuous mode
[   70.870521][ T5684] team0 (unregistering): Port device team_slave_1 removed
[   70.887360][ T5684] team0 (unregistering): Port device team_slave_0 removed
[   71.079313][ T5924] hsr_slave_0: entered promiscuous mode
[   71.082271][ T5924] hsr_slave_1: entered promiscuous mode
[   71.114778][ T5926] hsr_slave_0: entered promiscuous mode
[   71.117976][ T5926] hsr_slave_1: entered promiscuous mode
[   71.120247][ T5926] debugfs: 'hsr0' already exists in 'hsr'
[   71.122009][ T5926] Cannot create hsr debugfs directory
[   71.344733][   T56] Bluetooth: hci0: command tx timeout
[   71.413834][ T5928] Bluetooth: hci2: command tx timeout
[   71.416258][   T56] Bluetooth: hci1: command tx timeout
[   71.498094][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.501909][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.599306][ T5919] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.614369][ T5919] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.629874][ T5919] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.640170][ T5919] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.735496][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.757466][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.777371][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.803667][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.878025][ T5924] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.889087][ T5924] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.900420][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.902760][ T5924] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.909125][ T5924] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.938322][ T5919] 8021q: adding VLAN 0 to HW filter on device team0
[   71.949141][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.951514][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.966258][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.968450][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.001300][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.029984][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   72.040060][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.042742][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.057223][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.059435][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.110721][ T5924] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.122034][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.129497][ T5924] 8021q: adding VLAN 0 to HW filter on device team0
[   72.157910][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.160409][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.166703][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.168963][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.202690][ T5919] veth0_vlan: entered promiscuous mode
[   72.219818][ T5924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.232089][ T5919] veth1_vlan: entered promiscuous mode
[   72.280449][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.298507][ T5924] 8021q: adding VLAN 0 to HW filter on device batadv0
[   72.303033][ T5919] veth0_macvtap: entered promiscuous mode
[   72.311677][ T5919] veth1_macvtap: entered promiscuous mode
[   72.330681][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.340361][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.356416][ T5684] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.359215][ T5684] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.362036][ T5684] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.379699][ T5684] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.396743][ T5926] veth0_vlan: entered promiscuous mode
[   72.400590][ T5924] veth0_vlan: entered promiscuous mode
[   72.427220][ T5924] veth1_vlan: entered promiscuous mode
[   72.432737][ T5926] veth1_vlan: entered promiscuous mode
[   72.469998][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.472411][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.477318][ T5926] veth0_macvtap: entered promiscuous mode
[   72.494683][ T5926] veth1_macvtap: entered promiscuous mode
[   72.507475][ T5924] veth0_macvtap: entered promiscuous mode
[   72.512238][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.515779][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.520151][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.526850][ T5924] veth1_macvtap: entered promiscuous mode
[   72.539356][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.557816][ T5684] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.568042][ T5684] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.574300][ T5684] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.577668][ T5684] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.585853][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.613094][ T5924] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.638713][ T6004] bond1: entered promiscuous mode
[   72.658243][ T5684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.661412][ T5684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.671824][ T5684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.706340][ T5684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.716545][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.719601][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.761901][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.766173][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.872970][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.881679][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.927489][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.930489][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.414127][   T56] Bluetooth: hci0: command tx timeout
[   73.506612][ T5928] Bluetooth: hci2: command tx timeout
[   73.509690][   T56] Bluetooth: hci1: command tx timeout
[   74.815160][ T6066] netlink: 'syz.2.91': attribute type 1 has an invalid length.
[   74.920768][ T6073] openvswitch: netlink: nsh attribute has 65288 unknown bytes.
[   74.920804][ T6073] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.969693][ T6075] loop2: detected capacity change from 0 to 64
[   74.978078][ T6075] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   75.052782][ T6075] overlayfs: upper fs needs to support d_type.
[   75.094067][ T6075] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   75.096785][ T6075] overlayfs: failed to set xattr on upper
[   75.098953][ T6075] overlayfs: ...falling back to redirect_dir=nofollow.
[   75.101615][ T6075] overlayfs: ...falling back to index=off.
[   75.131184][ T6075] overlayfs: ...falling back to uuid=null.
[   75.280577][ T5926] MINIX-fs: deleted inode referenced: 4
[   75.283535][ T5926] MINIX-fs: deleted inode referenced: 4
[   75.301004][ T5926] MINIX-fs: deleted inode referenced: 4
[   75.303508][ T5926] MINIX-fs: deleted inode referenced: 4
[   75.349598][ T6083] loop1: detected capacity change from 0 to 4096
[   75.358237][ T6083] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   75.362432][ T6083] ntfs3(loop1): ino=3, mi_enum_attr
[   75.376595][ T6083] ntfs3(loop1): MFT: r=4, expect seq=4 instead of 2!
[   75.379352][ T6083] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   75.382447][ T6083] ntfs3(loop1): Failed to load $AttrDef (-22)
[   75.440783][ T6085] capability: warning: `syz.0.100' uses deprecated v2 capabilities in a way that may be insecure
[   75.493794][   T56] Bluetooth: hci0: command tx timeout
[   75.573701][   T56] Bluetooth: hci1: command tx timeout
[   76.045001][ T5359] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.200254][ T5359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.204689][ T5359] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.208471][ T5359] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.216070][ T5359] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 4.00
[   76.219644][ T5359] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   76.222582][ T5359] usb 1-1: Manufacturer: syz
[   76.228514][ T5359] usb 1-1: config 0 descriptor??
[   76.279556][ T5948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.481535][ T5948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.520907][ T6095] loop1: detected capacity change from 0 to 4096
[   76.528608][ T5928] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.540662][ T5928] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.545106][ T5928] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.550014][ T5928] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.551408][ T5948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.565175][ T5928] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.581303][ T6095] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   76.602334][ T6095] ntfs3(loop1): Failed to load $Extend (-22).
[   76.610540][ T6095] ntfs3(loop1): Failed to initialize $Extend.
[   76.630163][ T5948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.645908][ T5359] hid-udraw 0003:20D6:CB17.0001: item fetching failed at offset 3/7
[   76.660502][ T5359] hid-udraw 0003:20D6:CB17.0001: parse failed
[   76.667273][ T5359] hid-udraw 0003:20D6:CB17.0001: probe with driver hid-udraw failed with error -22
[   76.819787][ T6105] loop1: detected capacity change from 0 to 512
[   76.872919][   T10] usb 1-1: USB disconnect, device number 2
[   76.899314][ T5948] bridge_slave_1: left allmulticast mode
[   76.901670][ T5948] bridge_slave_1: left promiscuous mode
[   76.910310][ T6105] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.914600][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.915096][ T6105] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.928150][ T5948] bridge_slave_0: left allmulticast mode
[   76.930428][ T5948] bridge_slave_0: left promiscuous mode
[   76.932619][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.956691][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.345418][ T5948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.350918][ T5948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.356035][ T5948] bond0 (unregistering): Released all slaves
[   77.392599][ T6096] chnl_net:caif_netlink_parms(): no params data found
[   77.577236][   T56] Bluetooth: hci0: command tx timeout
[   77.596921][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.599938][ T6096] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.602987][ T6096] bridge_slave_0: entered allmulticast mode
[   77.607513][ T6096] bridge_slave_0: entered promiscuous mode
[   77.651993][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.656498][   T56] Bluetooth: hci1: command tx timeout
[   77.662770][ T6096] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.666672][ T6096] bridge_slave_1: entered allmulticast mode
[   77.670922][ T6096] bridge_slave_1: entered promiscuous mode
[   77.688783][   T34] audit: type=1326 audit(1761920345.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.700865][   T34] audit: type=1326 audit(1761920345.482:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.711596][   T34] audit: type=1326 audit(1761920345.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.720066][   T34] audit: type=1326 audit(1761920345.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.728346][   T34] audit: type=1326 audit(1761920345.482:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.738171][   T34] audit: type=1326 audit(1761920345.482:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.754484][   T34] audit: type=1326 audit(1761920345.482:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6127 comm="syz.0.111" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42af18efc9 code=0x7ffc0000
[   77.756628][ T6130] loop0: detected capacity change from 0 to 2048
[   77.766177][ T6130] =======================================================
[   77.766177][ T6130] WARNING: The mand mount option has been deprecated and
[   77.766177][ T6130]          and is ignored by this kernel. Remove the mand
[   77.766177][ T6130]          option from the mount to silence this warning.
[   77.766177][ T6130] =======================================================
[   77.767962][ T6096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   77.792171][ T5948] hsr_slave_0: left promiscuous mode
[   77.801935][ T5948] hsr_slave_1: left promiscuous mode
[   77.805062][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.808029][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.816894][ T6130] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   77.825222][ T6130] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.851398][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.854973][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.916494][ T5948] veth1_macvtap: left promiscuous mode
[   77.918614][ T5948] veth0_macvtap: left promiscuous mode
[   77.920810][ T5948] veth1_vlan: left promiscuous mode
[   77.922952][ T5948] veth0_vlan: left promiscuous mode
[   77.992205][ T6136] loop1: detected capacity change from 0 to 1024
[   77.998781][ T6136] EXT4-fs: Ignoring removed orlov option
[   78.000991][ T6136] EXT4-fs: Ignoring removed nomblk_io_submit option
[   78.048558][ T6136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   78.542404][ T5948] team0 (unregistering): Port device team_slave_1 removed
[   78.576153][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.582591][ T5948] team0 (unregistering): Port device team_slave_0 removed
[   78.616531][   T56] Bluetooth: hci2: command tx timeout
[   78.880313][ T6096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.883832][   T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.922514][ T6096] team0: Port device team_slave_0 added
[   78.931557][ T6096] team0: Port device team_slave_1 added
[   78.982968][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.985878][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.997068][ T6096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.026745][ T6096] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.030001][ T6096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.042152][ T6096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.110782][   T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   79.113286][   T24] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   79.122707][   T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   79.132227][   T24] usb 2-1: config 220 has no interface number 2
[   79.139069][   T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   79.147749][   T24] usb 2-1: config 220 interface 0 has no altsetting 0
[   79.150516][   T24] usb 2-1: config 220 interface 76 has no altsetting 0
[   79.158860][   T24] usb 2-1: config 220 interface 1 has no altsetting 0
[   79.168568][ T6096] hsr_slave_0: entered promiscuous mode
[   79.171678][ T6096] hsr_slave_1: entered promiscuous mode
[   79.183860][   T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   79.187492][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.198833][   T24] usb 2-1: Product: syz
[   79.200668][   T24] usb 2-1: Manufacturer: syz
[   79.202543][   T24] usb 2-1: SerialNumber: syz
[   79.210241][ T6096] debugfs: 'hsr0' already exists in 'hsr'
[   79.212588][ T6096] Cannot create hsr debugfs directory
[   79.463183][   T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   79.476484][   T24] uvcvideo 2-1:220.0: No valid video chain found.
[   79.479661][   T24] usb 2-1: selecting invalid altsetting 0
[   79.490349][   T24] usb 2-1: selecting invalid altsetting 0
[   79.492743][   T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[   79.507290][   T24] usb 2-1: USB disconnect, device number 2
[   79.556148][ T6166] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   79.627961][ T6096] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.633181][ T6096] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.640324][ T6096] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.645427][ T6096] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.726998][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.773535][ T6096] 8021q: adding VLAN 0 to HW filter on device team0
[   79.788822][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.791788][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.816184][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.818547][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.288962][ T6096] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.342726][ T6096] veth0_vlan: entered promiscuous mode
[   80.384173][ T6096] veth1_vlan: entered promiscuous mode
[   80.485658][ T6096] veth0_macvtap: entered promiscuous mode
[   80.497338][ T6096] veth1_macvtap: entered promiscuous mode
[   80.524752][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.537387][ T6096] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.588514][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.591923][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.604843][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.610400][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.693937][   T56] Bluetooth: hci2: command tx timeout
[   80.779992][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.783059][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.837493][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.840997][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.912822][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[   80.920851][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'.
[   81.027345][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'.
[   81.271159][ T6221] loop0: detected capacity change from 0 to 1024
[   81.313980][   T37] hfsplus: b-tree write err: -5, ino 4
[   81.737290][  T793] cfg80211: failed to load regulatory.db
[   82.374730][ T5947] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   82.407622][ T6242] loop1: detected capacity change from 0 to 16
[   82.418620][ T6242] erofs (device loop1): mounted with root inode @ nid 36.
[   82.525552][ T5947] usb 4-1: Using ep0 maxpacket: 32
[   82.536665][ T5947] usb 4-1: config 0 has an invalid interface number: 54 but max is 0
[   82.539654][ T5947] usb 4-1: config 0 has no interface number 0
[   82.541972][ T5947] usb 4-1: config 0 interface 54 has no altsetting 0
[   82.555376][ T5947] usb 4-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42
[   82.560328][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.563447][ T5947] usb 4-1: Product: syz
[   82.565288][ T5947] usb 4-1: Manufacturer: syz
[   82.567188][ T5947] usb 4-1: SerialNumber: syz
[   82.572491][ T5947] usb 4-1: config 0 descriptor??
[   82.783762][   T56] Bluetooth: hci2: command tx timeout
[   83.164693][ T5947] ums_eneub6250 4-1:0.54: USB Mass Storage device detected
[   83.225153][ T5947] usb 4-1: USB disconnect, device number 2
[   83.601822][ T6261] loop1: detected capacity change from 0 to 512
[   83.625291][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.637321][ T6261] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.702982][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.789989][ T6271] loop1: detected capacity change from 0 to 1024
[   83.801143][ T6271] EXT4-fs (loop1): invalid inodes per group: 1048608
[   83.801143][ T6271] 
[   83.863697][ T6277] loop1: detected capacity change from 0 to 512
[   83.934018][ T6277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.946805][ T6277] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   83.963064][ T6277] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 3: comm syz.1.156: lblock 8 mapped to illegal pblock 3 (length 26)
[   83.992458][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.225596][   T34] audit: type=1326 audit(1761920352.022:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.245335][   T34] audit: type=1326 audit(1761920352.022:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.273976][   T34] audit: type=1326 audit(1761920352.022:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.303721][   T34] audit: type=1326 audit(1761920352.022:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.312034][   T34] audit: type=1326 audit(1761920352.042:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.329728][   T34] audit: type=1326 audit(1761920352.042:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.338349][   T34] audit: type=1326 audit(1761920352.042:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.347191][   T34] audit: type=1326 audit(1761920352.052:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.355028][   T34] audit: type=1326 audit(1761920352.052:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.363190][   T34] audit: type=1326 audit(1761920352.052:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6305 comm="syz.3.169" exe="/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[   84.399947][ T6312] loop0: detected capacity change from 0 to 2048
[   84.417871][ T6312] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   84.435044][ T6312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.508720][ T6314] loop3: detected capacity change from 0 to 1024
[   84.539884][ T6314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.592442][ T6302] loop1: detected capacity change from 0 to 32768
[   84.854904][   T56] Bluetooth: hci2: command tx timeout
[   85.160834][ T6336] loop1: detected capacity change from 0 to 4096
[   85.167052][ T6336] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   85.174351][ T6336] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   85.184021][ T6336] ntfs3(loop1): Failed to load $MFT (-2).
[   85.267141][ T6344] loop3: detected capacity change from 0 to 2048
[   85.270426][ T6344] udf: Bad value for 'rootdir'
[   85.528698][ T6358] netlink: 32 bytes leftover after parsing attributes in process `syz.1.192'.
[   85.685526][ T6360] loop1: detected capacity change from 0 to 4096
[   85.782409][ T6365] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.806046][ T6360] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[   85.814588][ T6360] Remounting filesystem read-only
[   85.815047][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'.
[   85.816199][ T6360] NILFS error (device loop1): nilfs_readdir: bad page in #2
[   85.829912][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'.
[   86.184183][ T6377] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[   86.575416][ T6386] loop3: detected capacity change from 0 to 2048
[   86.634431][ T6386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[   86.735094][ T6096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[   86.995071][ T6401] loop3: detected capacity change from 0 to 512
[   87.001872][ T6401] EXT4-fs: Ignoring removed oldalloc option
[   87.162984][ T6401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.167212][ T6401] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.207132][ T6096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.271650][ T6405] loop0: detected capacity change from 0 to 32768
[   87.309403][ T6405] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   87.326516][ T6405] XFS (loop0): Ending clean mount
[   87.331537][ T6405] XFS (loop0): Quotacheck needed: Please wait.
[   87.368015][ T6405] XFS (loop0): Quotacheck: Done.
[   87.457801][ T5919] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   87.565328][ T6426] loop3: detected capacity change from 0 to 128
[   87.756698][ T6431] loop0: detected capacity change from 0 to 128
[   88.051340][ T6436] loop1: detected capacity change from 0 to 64
[   88.127061][ T6431] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   88.135814][ T6431] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   88.177115][ T5919] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   88.239408][ T6443] loop1: detected capacity change from 0 to 512
[   88.244095][ T6443] EXT4-fs: Ignoring removed nobh option
[   88.249973][ T6443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.265812][ T6443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   88.287381][ T6443] EXT4-fs (loop1): 1 truncate cleaned up
[   88.289845][ T6443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   88.299433][ T6443] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.223: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   88.308593][ T6443] EXT4-fs error (device loop1) in ext4_delete_entry:2739: Corrupt filesystem
[   88.317494][ T6443] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.223: Deleting old file: nlink 4, error=-117
[   88.344580][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.349580][ T6446] netlink: 'syz.0.222': attribute type 11 has an invalid length.
[   88.362916][ T6446] netlink: 224 bytes leftover after parsing attributes in process `syz.0.222'.
[   88.514176][  T793] IPVS: starting estimator thread 0...
[   88.624844][ T6449] IPVS: using max 80 ests per chain, 192000 per kthread
[   88.807419][ T6463] netlink: 24 bytes leftover after parsing attributes in process `syz.1.230'.
[   88.813238][ T6465] loop3: detected capacity change from 0 to 16
[   88.821722][ T6465] erofs (device loop3): mounted with root inode @ nid 36.
[   88.850221][ T6465] erofs (device loop3): ztailpacking inline data across blocks @ nid 36
[   88.873400][ T6465] erofs (device loop3): ztailpacking inline data across blocks @ nid 36
[   88.879952][ T6465] erofs (device loop3): read error -117 @ 32811 of nid 36
[   89.285993][ T6487] loop3: detected capacity change from 0 to 128
[   89.288642][ T6489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.244'.
[   89.573690][   T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   89.735760][   T10] usb 2-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[   89.738966][   T10] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   89.742446][   T10] usb 2-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[   89.747933][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   89.750636][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.753046][   T10] usb 2-1: SerialNumber: syz
[   89.972234][   T10] usb 2-1: bad CDC descriptors
[   89.983072][   T10] usb 2-1: USB disconnect, device number 3
[   90.155721][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.155721][   T41] loop3: rw=1, sector=145, nr_sectors = 8 limit=128
[   90.164302][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.164302][   T41] loop3: rw=1, sector=161, nr_sectors = 8 limit=128
[   90.169544][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.169544][   T41] loop3: rw=1, sector=177, nr_sectors = 8 limit=128
[   90.175889][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.175889][   T41] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[   90.186822][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.186822][   T41] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[   90.192067][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.192067][   T41] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[   90.197412][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.197412][   T41] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[   90.202602][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.202602][   T41] loop3: rw=1, sector=257, nr_sectors = 8 limit=128
[   90.208912][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.208912][   T41] loop3: rw=1, sector=273, nr_sectors = 8 limit=128
[   90.214660][   T41] kworker/u10:2: attempt to access beyond end of device
[   90.214660][   T41] loop3: rw=1, sector=289, nr_sectors = 8 limit=128
[   90.423525][ T6507] loop3: detected capacity change from 0 to 32768
[   90.427882][ T6507] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.249 (6507)
[   90.450451][ T6507] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.463798][ T6507] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   90.491690][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.252'.
[   90.532935][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.0.252'.
[   90.546416][ T6518] Zero length message leads to an empty skb
[   90.583664][ T6507] BTRFS info (device loop3): enabling ssd optimizations
[   90.586418][ T6507] BTRFS info (device loop3): turning on async discard
[   90.588942][ T6507] BTRFS info (device loop3): enabling free space tree
[   90.711338][ T6096] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.915280][  T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   91.073937][  T794] usb 1-1: Using ep0 maxpacket: 16
[   91.077903][  T794] usb 1-1: config 0 interface 0 has no altsetting 0
[   91.080761][  T794] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   91.089987][  T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.100191][  T794] usb 1-1: config 0 descriptor??
[   91.316505][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   91.321672][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   91.532091][  T794] hid (null): unknown global tag 0xd
[   91.699264][ T6562] loop3: detected capacity change from 0 to 32768
[   91.747367][   T24] usb 1-1: USB disconnect, device number 3
[   91.762783][ T6562] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   92.112801][ T6562] overlayfs: upper fs does not support tmpfile.
[   92.117553][ T6562] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   92.125565][ T6562] overlayfs: upper fs missing required features.
[   92.179521][ T6096] ocfs2: Unmounting device (7,3) on (node local)
[   92.382974][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.271'.
[   92.391067][ T6596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'.
[   92.403049][ T6598] loop0: detected capacity change from 0 to 256
[   92.426501][ T6598] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[   92.474183][ T5947] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   92.486823][ T6602] loop0: detected capacity change from 0 to 256
[   92.492535][ T6602] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   92.573945][ T6608] overlayfs: failed to resolve './file1': -2
[   92.655156][ T5947] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[   92.658589][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.661462][ T5947] usb 2-1: Product: syz
[   92.663078][ T5947] usb 2-1: Manufacturer: syz
[   92.680346][ T5947] usb 2-1: SerialNumber: syz
[   92.688265][ T5947] usb 2-1: config 0 descriptor??
[   92.795234][   T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   92.967428][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   92.970646][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[   92.973913][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[   92.976954][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.986469][   T24] usb 1-1: config 0 descriptor??
[   93.173072][ T5947] airspy 2-1:0.0: Board ID: 00
[   93.175691][ T5947] airspy 2-1:0.0: Firmware version: 
[   93.208940][   T24] ath6kl: Failed to submit usb control message: -71
[   93.211037][   T24] ath6kl: unable to send the bmi data to the device: -71
[   93.213893][   T24] ath6kl: Unable to send get target info: -71
[   93.218802][   T24] ath6kl: Failed to init ath6kl core: -71
[   93.223692][   T24] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[   93.230858][   T24] usb 1-1: USB disconnect, device number 4
[   93.767915][ T6612] loop3: detected capacity change from 0 to 2048
[   93.820631][ T6612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.825776][ T6612] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   93.844705][   T34] kauditd_printk_skb: 4 callbacks suppressed
[   93.844768][   T34] audit: type=1800 audit(1761920361.642:23): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.277" name="file0" dev="loop3" ino=13 res=0 errno=0
[   93.860193][ T6612] fs-verity (loop3, inode 13): Error -22 reading file data
[   93.863124][ T6612] fs-verity (loop3, inode 13): Error -22 building Merkle tree
[   93.900976][ T6096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.934193][ T6619] netlink: 'syz.0.279': attribute type 6 has an invalid length.
[   93.937144][ T6619] netlink: 168 bytes leftover after parsing attributes in process `syz.0.279'.
[   93.994685][ T6623] loop0: detected capacity change from 0 to 8
[   94.016423][ T6623] SQUASHFS error: Unable to read directory block [629:0]
[   94.204923][ T5947] airspy 2-1:0.0: usb_control_msg() failed -71 request 10
[   94.207157][ T6636] loop0: detected capacity change from 0 to 4096
[   94.221202][ T5947] airspy 2-1:0.0: Registered as swradio24
[   94.226887][ T5947] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[   94.231127][ T6636] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   94.237521][ T5947] usb 2-1: USB disconnect, device number 4
[   94.244805][   T34] audit: type=1800 audit(1761920362.042:24): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.286" name="file1" dev="loop0" ino=30 res=0 errno=0
[   94.810705][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'.
[   94.814459][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'.
[   94.819715][ T6641] netlink: 'syz.1.287': attribute type 18 has an invalid length.
[   94.906742][ T6646] syz.1.290 uses obsolete (PF_INET,SOCK_PACKET)
[   94.910846][ T6646] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 68
[   95.302226][   T84] ntfs3(loop0): ino=9, ntfs3_write_inode failed, -22.
[   95.311598][ T5919] ntfs3(loop0): ino=9, ntfs_sync_fs failed, -22.
[   95.430011][ T6663] loop0: detected capacity change from 0 to 1024
[   95.512802][ T6667] loop0: detected capacity change from 0 to 512
[   95.555166][ T6667] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.563914][ T6667] ext4 filesystem being mounted at /64/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.586325][   T34] audit: type=1800 audit(1761920363.382:25): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.298" name="file1" dev="loop0" ino=15 res=0 errno=0
[   95.630726][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.853741][  T793] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   95.913699][ T5947] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   96.015619][  T793] usb 2-1: config index 0 descriptor too short (expected 2304, got 18)
[   96.018753][  T793] usb 2-1: config 142 has an invalid descriptor of length 107, skipping remainder of the config
[   96.024086][  T793] usb 2-1: config 142 has 0 interfaces, different from the descriptor's value: 4
[   96.027411][  T793] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=62.09
[   96.030855][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.053731][   T33] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.069578][ T5947] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   96.073051][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.076160][ T5947] usb 1-1: Product: syz
[   96.077802][ T5947] usb 1-1: Manufacturer: syz
[   96.079766][ T5947] usb 1-1: SerialNumber: syz
[   96.088320][ T5947] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   96.115172][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   96.203669][   T33] usb 4-1: Using ep0 maxpacket: 8
[   96.211818][   T33] usb 4-1: config 0 has an invalid interface number: 186 but max is 0
[   96.215777][   T33] usb 4-1: config 0 has no interface number 0
[   96.218155][   T33] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   96.222347][   T33] usb 4-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[   96.229530][   T33] usb 4-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[   96.233781][   T33] usb 4-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   96.431303][   T33] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[   96.442382][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.446190][   T33] usb 4-1: Product: syz
[   96.447948][   T33] usb 4-1: Manufacturer: syz
[   96.449809][   T33] usb 4-1: SerialNumber: syz
[   96.455575][   T33] usb 4-1: config 0 descriptor??
[   96.863296][   T24] usb 1-1: USB disconnect, device number 5
[   96.883459][   T33] iowarrior 4-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[   97.081763][ T5947] usb 4-1: USB disconnect, device number 3
[   97.084067][    C0] iowarrior 4-1:0.186: iowarrior_callback - usb_submit_urb failed with result -19
[   97.175740][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[   97.180924][   T10] ath9k_htc: Failed to initialize the device
[   97.186639][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[   97.477128][ T6682] loop0: detected capacity change from 0 to 2048
[   97.492096][ T6682] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.984333][ T6692] loop0: detected capacity change from 0 to 32768
[   97.994140][ T6692] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.008298][ T6692] XFS (loop0): Ending clean mount
[   98.012434][ T6692] XFS (loop0): Quotacheck needed: Please wait.
[   98.036983][ T6692] XFS (loop0): Quotacheck: Done.
[   98.062691][ T5919] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   98.628008][  T793] usb 2-1: string descriptor 0 read error: -71
[   98.642928][  T793] usb 2-1: USB disconnect, device number 5
[   98.782036][ T6723] loop1: detected capacity change from 0 to 8192
[   98.847762][   T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   99.014623][   T24] usb 1-1: Using ep0 maxpacket: 8
[   99.022489][   T24] usb 1-1: config 11 has an invalid interface number: 61 but max is 0
[   99.028000][   T24] usb 1-1: config 11 has no interface number 0
[   99.029944][   T24] usb 1-1: config 11 interface 61 has no altsetting 0
[   99.036661][   T24] usb 1-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[   99.039305][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.041635][   T24] usb 1-1: Product: syz
[   99.052260][   T24] usb 1-1: Manufacturer: syz
[   99.053856][   T24] usb 1-1: SerialNumber: syz
[   99.084587][ T6721] loop3: detected capacity change from 0 to 65536
[   99.131097][ T6721] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   99.164998][ T6721] XFS (loop3): Ending clean mount
[   99.167296][ T6735] loop1: detected capacity change from 0 to 2048
[   99.169531][ T6721] XFS (loop3): Quotacheck needed: Please wait.
[   99.171606][ T6735] EXT4-fs: Ignoring removed bh option
[   99.189785][ T6721] XFS (loop3): Quotacheck: Done.
[   99.207554][ T6735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.350352][   T24] usb 1-1: USB disconnect, device number 6
[   99.374925][ T6744] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   99.444969][ T6744] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 18 with error 28
[   99.452203][ T6744] EXT4-fs (loop1): This should not happen!! Data will be lost
[   99.452203][ T6744] 
[   99.459511][ T6744] EXT4-fs (loop1): Total free blocks count 0
[   99.462694][ T6744] EXT4-fs (loop1): Free/Dirty block details
[   99.467032][ T6744] EXT4-fs (loop1): free_blocks=2415919104
[   99.469995][ T6744] EXT4-fs (loop1): dirty_blocks=32
[   99.471974][ T6744] EXT4-fs (loop1): Block reservation details
[   99.475010][ T6744] EXT4-fs (loop1): i_reserved_data_blocks=2
[  100.791361][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.011097][ T6096] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  101.926565][ T6752] loop1: detected capacity change from 0 to 32768
[  101.940067][ T6752] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  101.965517][ T6752] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  102.014517][ T5924] ocfs2: Unmounting device (7,1) on (node local)
[  102.996431][ T6788] loop0: detected capacity change from 0 to 16
[  103.002332][ T6788] erofs (device loop0): mounted with root inode @ nid 36.
[  103.709309][ T6802] loop3: detected capacity change from 0 to 512
[  103.731445][ T6802] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  103.738332][ T6802] EXT4-fs (loop3): Test dummy encryption mode enabled
[  103.745319][ T6802] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.341: inode has both inline data and extents flags
[  103.751400][ T6802] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.341: couldn't read orphan inode 15 (err -117)
[  103.758108][ T6802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.793698][   T33] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  103.815006][ T6802] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  103.954603][ T6802] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  104.000741][   T33] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  104.004781][   T33] usb 2-1: config 1 has no interface number 0
[  104.012422][   T33] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32
[  104.029970][   T33] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x3, skipping
[  104.038719][   T33] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  104.042562][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.046647][   T33] usb 2-1: Product: syz
[  104.048421][   T33] usb 2-1: Manufacturer: syz
[  104.050303][   T33] usb 2-1: SerialNumber: syz
[  104.062098][ T6800] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.067797][   T33] usb 2-1: Expected 3 endpoints, found: 2
[  104.106819][ T6096] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.140810][ T6821] loop3: detected capacity change from 0 to 512
[  104.154032][ T6821] EXT4-fs: Ignoring removed oldalloc option
[  104.156846][ T6821] EXT4-fs: journaled quota format not specified
[  104.284105][   T10] usb 2-1: USB disconnect, device number 6
[  104.306858][ T6831] wireguard0: entered allmulticast mode
[  104.348077][ T6834] loop3: detected capacity change from 0 to 2048
[  104.369008][ T6837] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.589704][ T6842] netlink: 36 bytes leftover after parsing attributes in process `syz.3.350'.
[  105.340429][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.357'.
[  105.357927][ T6858] veth0: entered promiscuous mode
[  105.362349][ T6858] veth0: left promiscuous mode
[  105.410529][ T6837] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  105.416775][ T6837] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4)
[  105.425333][ T6837] Remounting filesystem read-only
[  105.430317][ T6096] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer
[  106.428557][ T6886] loop1: detected capacity change from 0 to 512
[  106.466761][ T6886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.478416][ T6886] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  106.577620][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.038407][ T6901] netlink: 72 bytes leftover after parsing attributes in process `syz.1.375'.
[  107.044700][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'.
[  107.913051][ T6911] loop1: detected capacity change from 0 to 32768
[  108.052542][ T6913] loop3: detected capacity change from 0 to 32768
[  108.073869][ T6913] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  108.080430][ T6922] loop1: detected capacity change from 0 to 256
[  108.089812][ T6913] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  108.125443][ T6922] FAT-fs (loop1): Directory bread(block 64) failed
[  108.127855][ T6922] FAT-fs (loop1): Directory bread(block 65) failed
[  108.130067][ T6922] FAT-fs (loop1): Directory bread(block 66) failed
[  108.132630][ T6922] FAT-fs (loop1): Directory bread(block 67) failed
[  108.136230][ T6922] FAT-fs (loop1): Directory bread(block 68) failed
[  108.138491][ T6922] FAT-fs (loop1): Directory bread(block 69) failed
[  108.140695][ T6922] FAT-fs (loop1): Directory bread(block 70) failed
[  108.142831][ T6922] FAT-fs (loop1): Directory bread(block 71) failed
[  108.145652][ T6922] FAT-fs (loop1): Directory bread(block 72) failed
[  108.147960][ T6922] FAT-fs (loop1): Directory bread(block 73) failed
[  108.403508][ T6933] loop1: detected capacity change from 0 to 512
[  108.412416][ T6933] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.387: bg 0: block 393: padding at end of block bitmap is not set
[  108.418949][ T6933] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  108.422539][ T6933] EXT4-fs (loop1): 2 truncates cleaned up
[  108.427878][ T6933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.462510][ T5924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.563779][   T33] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  108.856171][   T33] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  108.862321][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.870246][   T33] usb 4-1: config 0 descriptor??
[  109.531647][   T33] ryos 0003:1E7D:3138.0003: item fetching failed at offset 4/5
[  109.538678][   T33] ryos 0003:1E7D:3138.0003: parse failed
[  109.541184][   T33] ryos 0003:1E7D:3138.0003: probe with driver ryos failed with error -22
[  109.551584][   T33] usb 4-1: USB disconnect, device number 4
[  109.803815][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  109.917367][ T6955] netlink: 128 bytes leftover after parsing attributes in process `syz.0.395'.
[  109.954848][   T10] usb 2-1: Using ep0 maxpacket: 32
[  109.966428][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.972527][   T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  109.981275][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.986053][   T10] usb 2-1: Product: syz
[  109.987671][   T10] usb 2-1: Manufacturer: syz
[  109.989540][   T10] usb 2-1: SerialNumber: syz
[  109.996822][   T10] usb 2-1: config 0 descriptor??
[  110.003146][   T10] usb 2-1: bad CDC descriptors
[  110.005825][   T10] usb 2-1: unsupported MDLM descriptors
[  110.012452][ T6957] loop0: detected capacity change from 0 to 1024
[  110.041225][ T6957] hfsplus: xattr searching failed
[  110.050463][ T6957] process 'syz.0.396' launched './file0' with NULL argv: empty string added
[  110.056086][ T6957] hfsplus: xattr searching failed
[  110.058726][ T6957] hfsplus: xattr searching failed
[  110.214393][   T10] usb 2-1: USB disconnect, device number 7
[  110.479078][ T6982] loop3: detected capacity change from 0 to 512
[  110.493701][ T6982] EXT4-fs (loop3): Test dummy encryption mode enabled
[  110.509045][ T6982] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.546547][ T6096] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  110.613675][   T34] audit: type=1326 audit(1761920378.402:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  110.638346][   T34] audit: type=1326 audit(1761920378.402:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  110.646440][   T34] audit: type=1326 audit(1761920378.402:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.413" exe="/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  110.654602][   T34] audit: type=1326 audit(1761920378.402:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  110.662322][   T34] audit: type=1326 audit(1761920378.402:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6990 comm="syz.3.413" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  111.314432][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'.
[  111.705279][ T7017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  111.795278][ T7025] bond0: option packets_per_slave: invalid value (16779898)
[  111.797751][ T7025] bond0: option packets_per_slave: allowed values 0 - 65535
[  111.877497][ T7031] loop3: detected capacity change from 0 to 2048
[  111.885887][ T7031] udf: Bad value for 'anchor'
[  111.908227][ T7035] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.136739][ T7055] F2FS-fs: Conflicting test_dummy_encryption options
[  112.394270][ T7060] loop1: detected capacity change from 0 to 32768
[  112.444102][ T7060] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  112.460295][ T7060] XFS (loop1): Ending clean mount
[  112.488354][ T5924] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  112.643249][ T7065] loop3: detected capacity change from 0 to 32768
[  112.652368][ T7065] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.445 (7065)
[  112.681255][ T7065] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.682655][ T7092] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  112.691837][ T7065] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  112.739519][ T7065] BTRFS info (device loop3): enabling ssd optimizations
[  112.747675][ T7065] BTRFS info (device loop3): turning on async discard
[  112.751053][ T7065] BTRFS info (device loop3): enabling free space tree
[  112.789552][ T6096] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.993299][ T7128] loop1: detected capacity change from 0 to 1024
[  113.001819][ T7128] hfsplus: Unexpected value for 'decompose'
[  113.774725][ T7180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.457'.
[  113.920276][ T7182] loop0: detected capacity change from 0 to 1024
[  114.340853][ T7205] loop0: detected capacity change from 0 to 8
[  114.356200][ T7205] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  114.462309][ T7211] netlink: 'syz.3.470': attribute type 10 has an invalid length.
[  114.805895][ T7225] netlink: 'syz.3.472': attribute type 3 has an invalid length.
[  114.808437][ T7225] netlink: 'syz.3.472': attribute type 1 has an invalid length.
[  114.810871][ T7225] netlink: 216 bytes leftover after parsing attributes in process `syz.3.472'.
[  115.167378][ T7231] IPVS: Error connecting to the multicast addr
[  115.498512][ T7246] loop3: detected capacity change from 0 to 128
[  115.522006][ T7246] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  115.537011][ T7246] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  115.580196][ T6096] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  115.642806][ T7259] netdevsim netdevsim3 : renamed from netdevsim0 (while UP)
[  115.910839][ T7252] loop0: detected capacity change from 0 to 40427
[  116.776375][ T5928] Bluetooth: hci0: command 0x0406 tx timeout
[  116.986799][ T7301] loop1: detected capacity change from 0 to 8
[  117.017802][ T7303] warning: `syz.3.509' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  117.027572][ T7301] SQUASHFS error: Failed to read block 0x33c: -5
[  117.029855][ T7301] SQUASHFS error: Unable to read metadata cache entry [33a]
[  117.032423][ T7301] SQUASHFS error: Unable to read inode 0xa7
[  117.196738][ T7312] loop3: detected capacity change from 0 to 2048
[  117.209323][ T7312] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  117.220791][ T7312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.250762][ T7311] loop0: detected capacity change from 0 to 2048
[  117.261073][ T7311] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  117.286516][ T7311] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.706853][   T34] audit: type=1326 audit(1761920385.492:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.714745][   T34] audit: type=1326 audit(1761920385.492:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.721247][   T34] audit: type=1326 audit(1761920385.502:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.742326][   T34] audit: type=1326 audit(1761920385.502:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.774051][   T34] audit: type=1326 audit(1761920385.502:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.798193][   T34] audit: type=1326 audit(1761920385.502:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.808590][   T34] audit: type=1326 audit(1761920385.502:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.820299][   T34] audit: type=1326 audit(1761920385.502:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.831563][   T34] audit: type=1326 audit(1761920385.502:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  117.842392][ T7328] IPv6: addrconf: prefix option has invalid lifetime
[  117.845312][   T34] audit: type=1326 audit(1761920385.502:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7321 comm="syz.3.517" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f4efbb8efc9 code=0x7ffc0000
[  118.016924][ T7341] loop1: detected capacity change from 0 to 256
[  118.189941][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.530'.
[  118.195476][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  118.323736][   T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  118.345308][   T24] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  118.348663][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.353467][   T24] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  118.357338][   T24] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  118.360479][   T24] usb 4-1: Manufacturer: syz
[  118.364708][   T24] usb 4-1: config 0 descriptor??
[  118.403746][   T24] rc_core: IR keymap rc-hauppauge not found
[  118.406190][   T24] Registered IR keymap rc-empty
[  118.409888][   T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  118.415977][   T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input4
[  118.480731][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  118.489869][   T10] usb 1-1: not running at top speed; connect to a high speed hub
[  118.496213][   T10] usb 1-1: config 2 has an invalid interface number: 212 but max is 1
[  118.499330][   T10] usb 1-1: config 2 has an invalid interface number: 226 but max is 1
[  118.502418][   T10] usb 1-1: config 2 has no interface number 0
[  118.505324][   T10] usb 1-1: config 2 has no interface number 1
[  118.507727][   T10] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  118.511059][   T10] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  118.515488][   T10] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[  118.519706][   T10] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  118.523426][   T10] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  118.528512][   T10] usb 1-1: config 2 interface 212 has no altsetting 0
[  118.533224][   T10] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[  118.536842][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.539961][   T10] usb 1-1: Product: syz
[  118.541598][   T10] usb 1-1: Manufacturer: syz
[  118.543380][   T10] usb 1-1: SerialNumber: syz
[  118.578789][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  118.583901][  T794] usb 4-1: USB disconnect, device number 5
[  118.767407][   T10] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input5
[  118.778115][    C1] xpad 1-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1
[  118.784547][   T10] usb 1-1: USB disconnect, device number 7
[  119.125447][ T7362] loop3: detected capacity change from 0 to 8
[  119.132056][ T7362] SQUASHFS error: zlib decompression failed, data probably corrupt
[  119.138538][ T7362] SQUASHFS error: Failed to read block 0x9b: -5
[  119.141303][ T7362] SQUASHFS error: Unable to read metadata cache entry [99]
[  119.145536][ T7362] SQUASHFS error: Unable to read inode 0x127
[  119.185571][ T7366] loop3: detected capacity change from 0 to 8
[  119.188913][ T7366] SQUASHFS error: zlib decompression failed, data probably corrupt
[  119.192251][ T7366] SQUASHFS error: Failed to read block 0x9b: -5
[  119.194584][ T7366] SQUASHFS error: Unable to read metadata cache entry [99]
[  119.196903][ T7366] SQUASHFS error: Unable to read inode 0x127
[  119.692444][ T7377] loop0: detected capacity change from 0 to 1024
[  120.258074][ T7383] loop1: detected capacity change from 0 to 512
[  120.268502][ T7383] EXT4-fs (loop1): too many log groups per flexible block group
[  120.271122][ T7383] EXT4-fs (loop1): failed to initialize mballoc (-12)
[  120.273313][ T7383] EXT4-fs (loop1): mount failed
[  120.463780][ T7395] netlink: 'syz.1.547': attribute type 1 has an invalid length.
[  120.466558][ T7395] netlink: 224 bytes leftover after parsing attributes in process `syz.1.547'.
[  120.579687][ T1091] hfsplus: b-tree write err: -5, ino 4
[  120.744405][ T7403] Illegal XDP return value 4294967274 on prog  (id 54) dev N/A, expect packet loss!
[  120.845440][ T7405] loop0: detected capacity change from 0 to 512
[  120.848435][ T7405] EXT4-fs: Ignoring removed nomblk_io_submit option
[  120.860624][ T7405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  120.877581][ T7405] EXT4-fs (loop0): 1 truncate cleaned up
[  120.880031][ T7405] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.990639][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.793766][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  121.893856][   T56] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  121.953764][   T10] usb 2-1: Using ep0 maxpacket: 32
[  121.957591][   T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.961384][   T10] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 243, changing to 11
[  121.976351][   T10] usb 2-1: config 0 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  121.981417][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  121.991709][   T10] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00
[  121.995576][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.013388][   T10] usb 2-1: config 0 descriptor??
[  122.016355][ T7424] 9pnet_fd: Insufficient options for proto=fd
[  122.020020][ T7424] loop0: detected capacity change from 0 to 8
[  122.027385][ T7424] squashfs: Unknown parameter '.'
[  122.433782][   T33] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  122.440700][   T10] a4tech 0003:09DA:0006.0004: hidraw0: USB HID v0.07 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0
[  122.513707][  T793] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  122.583688][   T33] usb 1-1: Using ep0 maxpacket: 32
[  122.586908][   T33] usb 1-1: config 252 has an invalid interface number: 97 but max is 0
[  122.589850][   T33] usb 1-1: config 252 has no interface number 0
[  122.592210][   T33] usb 1-1: config 252 interface 97 has no altsetting 0
[  122.597335][   T33] usb 1-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=16.6d
[  122.600858][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.604107][   T33] usb 1-1: Product: syz
[  122.605856][   T33] usb 1-1: Manufacturer: syz
[  122.607276][   T33] usb 1-1: SerialNumber: syz
[  122.638383][ T5910] usb 2-1: USB disconnect, device number 8
[  122.667000][  T793] usb 4-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice=1f.44
[  122.670395][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.677050][  T793] usb 4-1: config 0 descriptor??
[  122.686063][  T793] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f
[  122.835632][   T33] usb 1-1: USB disconnect, device number 8
[  123.087392][  T793] gspca_sn9c20x: Write register 1001 failed -71
[  123.089366][  T793] gspca_sn9c20x: Device initialization failed
[  123.091216][  T793] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -71
[  123.096170][  T793] usb 4-1: USB disconnect, device number 6
[  123.979186][ T7450] netlink: 276 bytes leftover after parsing attributes in process `syz.3.570'.
[  124.090074][ T7450] netlink: 276 bytes leftover after parsing attributes in process `syz.3.570'.
[  124.292798][ T7454] netlink: 2 bytes leftover after parsing attributes in process `syz.3.572'.
[  124.323643][ T7454] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.798277][ T7467] loop1: detected capacity change from 0 to 256
[  125.462954][ T7475] loop1: detected capacity change from 0 to 32768
[  125.465679][ T7475] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.580 (7475)
[  125.474163][ T7475] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  125.477283][ T7475] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  125.503099][ T7475] BTRFS info (device loop1): enabling ssd optimizations
[  125.505374][ T7475] BTRFS info (device loop1): turning on async discard
[  125.507978][ T7475] BTRFS info (device loop1): enabling free space tree
[  125.530031][   T34] kauditd_printk_skb: 39 callbacks suppressed
[  125.530042][   T34] audit: type=1800 audit(1761920393.322:80): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.580" name="file1" dev="loop1" ino=260 res=0 errno=0
[  125.996518][ T7511] ./cgroup: Can't lookup blockdev
[  126.101845][ T7513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.590'.
[  126.199798][ T5924] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  126.367351][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'.
[  126.530333][ T7527] loop1: detected capacity change from 0 to 32768
[  126.537144][ T5910] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.552689][   T34] audit: type=1800 audit(1761920394.342:81): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="file1" dev="loop1" ino=4 res=0 errno=0
[  126.685843][ T7527] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  126.685843][ T7527] 
[  126.691114][ T7527] ERROR: (device loop1): remounting filesystem as read-only
[  126.695333][ T5910] usb 4-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da
[  126.698137][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.705747][ T5910] usb 4-1: config 0 descriptor??
[  126.712397][ T5910] pwc: Philips SPC 900NC USB webcam detected.
[  126.912758][ T5910] pwc: Failed to set LED on/off time (-71)
[  126.916354][ T5910] pwc: send_video_command error -71
[  126.918045][ T5910] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  126.920468][ T5910] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  126.924359][ T5910] usb 4-1: USB disconnect, device number 7
[  127.627578][ T7548] loop3: detected capacity change from 0 to 1024
[  127.652100][ T7548] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  127.758299][ T7556] loop1: detected capacity change from 0 to 4096
[  127.775597][ T7556] ntfs3(loop1): ino=a, mi_enum_attr
[  127.777264][ T7556] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  127.784479][ T7556] ntfs3(loop1): Failed to load $UpCase (-22).
[  127.839698][ T7562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.975361][ T7573] loop0: detected capacity change from 0 to 2048
[  128.001550][ T7573] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  128.004459][ T7573] UDF-fs: Scanning with blocksize 512 failed
[  128.022844][ T7573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  128.420764][ T7580] netlink: zone id is out of range
[  128.422446][ T7580] netlink: zone id is out of range
[  128.424363][ T7580] netlink: zone id is out of range
[  128.426022][ T7580] netlink: zone id is out of range
[  128.427705][ T7580] netlink: zone id is out of range
[  128.429584][ T7580] netlink: zone id is out of range
[  128.431284][ T7580] netlink: zone id is out of range
[  128.432849][ T7580] netlink: zone id is out of range
[  129.023186][ T7582] loop0: detected capacity change from 0 to 40427
[  129.047680][ T7594] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  129.054029][ T7582] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  129.057379][ T7582] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  129.065409][ T7582] F2FS-fs (loop0): invalid crc_offset: 33558524
[  129.125025][ T7582] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.135101][ T7582] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  129.137946][ T7582] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.540466][ T7623] loop0: detected capacity change from 0 to 1024
[  129.544580][ T7623] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  129.548603][ T7623] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (49802!=20869)
[  129.562964][ T7623] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  129.583409][ T7623] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.627: unexpected bad inode w/o EXT4_IGET_BAD
[  129.590681][ T7623] EXT4-fs (loop0): no journal found
[  129.593212][ T7623] EXT4-fs (loop0): can't get journal size
[  129.596283][ T7623] EXT4-fs (loop0): failed to initialize system zone (-117)
[  129.598591][ T7623] EXT4-fs (loop0): mount failed
[  129.652047][ T7631] futex_wake_op: syz.0.637 tries to shift op by 36; fix this program
[  129.760359][ T7637] vxcan3: entered allmulticast mode
[  130.211015][ T7649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'.
[  130.214011][ T7649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'.
[  130.216815][ T7649] netlink: 'syz.3.645': attribute type 14 has an invalid length.
[  130.793485][ T7658] loop1: detected capacity change from 0 to 128
[  130.801140][ T7658] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  130.875986][ T7662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.650'.
[  130.906172][ T7664] loop0: detected capacity change from 0 to 8
[  130.918526][ T7664] SQUASHFS error: Failed to read block 0x636: -5
[  130.921717][ T7664] SQUASHFS error: Unable to read metadata cache entry [634]
[  130.924771][ T7664] SQUASHFS error: Unable to read metadata cache entry [634]
[  130.927377][ T7664] SQUASHFS error: Unable to read directory block [634:0]
[  131.045954][ T7660] loop1: detected capacity change from 0 to 32768
[  131.052622][ T7660] add_index: next_index = 0.  Resetting!
[  131.055425][ T7660] non-latin1 character 0x3ff found in JFS file name
[  131.058620][ T7660] mount with iocharset=utf8 to access
[  131.095092][ T7671] loop1: detected capacity change from 0 to 128
[  131.105569][ T7671] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  131.112385][ T7671] ext4 filesystem being mounted at /210/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  131.129928][ T7668] loop0: detected capacity change from 0 to 8192
[  131.139402][ T5928] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11
[  131.156407][ T5924] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  131.328678][ T5928] Bluetooth: hci0: unexpected event for opcode 0x2016
[  131.626877][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  131.666945][ T7702] sp0: Synchronizing with TNC
[  131.772620][ T7700] loop3: detected capacity change from 0 to 32768
[  131.774334][   T10] usb 1-1: Using ep0 maxpacket: 32
[  131.775647][ T7700] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.667 (7700)
[  131.788462][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.791704][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.800751][   T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  131.804414][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.811131][   T10] usb 1-1: config 0 descriptor??
[  131.823499][ T7700] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.825323][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.829102][ T7700] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  131.835319][ T7706] net_ratelimit: 6 callbacks suppressed
[  131.835329][ T7706] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  131.914534][ T7700] BTRFS info (device loop3): allowing degraded mounts
[  131.920069][ T7700] BTRFS info (device loop3): turning off barriers
[  131.922221][ T7700] BTRFS info (device loop3): enabling free space tree
[  131.940774][ T7700] BTRFS info (device loop3): use zstd compression, level 3
[  132.001984][ T6096] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.203662][   T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  132.234734][   T10] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  132.365478][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.369666][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.374813][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  132.379647][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  132.383241][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.393967][   T24] usb 2-1: config 0 descriptor??
[  132.486035][   T10] usb 1-1: USB disconnect, device number 9
[  132.553695][  T794] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  132.705502][  T794] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  132.709079][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.714214][  T794] usb 4-1: config 0 descriptor??
[  132.807241][   T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  132.810079][   T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  132.812426][   T24] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  132.814955][   T24] plantronics 0003:047F:FFFF.0006: unbalanced collection at end of report description
[  132.818383][   T24] plantronics 0003:047F:FFFF.0006: parse failed
[  132.820522][   T24] plantronics 0003:047F:FFFF.0006: probe with driver plantronics failed with error -22
[  132.937107][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.939707][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  133.018629][   T10] usb 2-1: USB disconnect, device number 9
[  133.125343][   T24] IPVS: starting estimator thread 0...
[  133.127630][  T794] ath6kl: Failed to read usb control message: -71
[  133.133884][  T794] ath6kl: Unable to read the bmi data from the device: -71
[  133.136091][  T794] ath6kl: Unable to recv target info: -71
[  133.143860][  T794] ath6kl: Failed to init ath6kl core: -71
[  133.145890][  T794] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  133.164396][  T794] usb 4-1: USB disconnect, device number 8
[  133.195765][ T7749] loop0: detected capacity change from 0 to 136
[  133.211214][ T7749] rock: directory entry would overflow storage
[  133.214040][ T7743] IPVS: using max 80 ests per chain, 192000 per kthread
[  133.214058][ T7749] rock: sig=0x4f50, size=4, remaining=3
[  133.217906][ T7749] iso9660: Corrupted directory entry in block 2 of inode 1472
[  133.348914][ T7757] use of bytesused == 0 is deprecated and will be removed in the future,
[  133.352426][ T7757] use the actual size instead.
[  133.388194][ T7759] loop0: detected capacity change from 0 to 512
[  133.420700][ T7759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  133.426483][ T7759] ext4 filesystem being mounted at /204/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.438743][ T7759] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz.0.686: invalid size
[  133.461401][ T5919] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  133.623536][ T7765] loop1: detected capacity change from 0 to 4096
[  134.225615][ T7770] loop1: detected capacity change from 0 to 32768
[  134.241778][ T7770] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.270969][ T7770] XFS (loop1): Ending clean mount
[  134.277436][ T7770] XFS (loop1): Quotacheck needed: Please wait.
[  134.298012][ T7770] XFS (loop1): Quotacheck: Done.
[  134.304660][ T7770] capability: warning: `syz.1.689' uses 32-bit capabilities (legacy support in use)
[  134.327495][ T5924] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.543720][   T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  134.699250][   T10] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  134.702191][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.715721][   T10] usb 4-1: config 0 descriptor??
[  134.761422][ T7806] tipc: Failed to remove unknown binding: 66,1,1/0:2301659732/2301659734
[  134.767322][ T7806] tipc: Failed to remove unknown binding: 66,1,1/0:2301659732/2301659734
[  134.802815][ T7800] loop0: detected capacity change from 0 to 32768
[  134.820864][ T7800] (syz.0.700,7800,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  134.836095][ T7800] (syz.0.700,7800,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  134.850384][ T7800] JBD2: Ignoring recovery information on journal
[  134.879740][ T7800] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  134.912205][ T7800] 
[  134.913049][ T7800] ======================================================
[  134.915295][ T7800] WARNING: possible circular locking dependency detected
[  134.917493][ T7800] syzkaller #0 Not tainted
[  134.919147][ T7800] ------------------------------------------------------
[  134.921933][ T7800] syz.0.700/7800 is trying to acquire lock:
[  134.923751][ T7800] ffff8881b5066610 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[  134.926631][ T7800] 
[  134.926631][ T7800] but task is already holding lock:
[  134.928968][ T7800] ffff8881b2cb5d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  134.932425][ T7800] 
[  134.932425][ T7800] which lock already depends on the new lock.
[  134.932425][ T7800] 
[  134.936185][ T7800] 
[  134.936185][ T7800] the existing dependency chain (in reverse order) is:
[  134.939233][ T7800] 
[  134.939233][ T7800] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  134.942299][ T7800]        lock_acquire+0x120/0x360
[  134.943861][ T7800]        down_write+0x96/0x1f0
[  134.945381][ T7800]        ocfs2_lock_global_qf+0x1e8/0x270
[  134.947205][ T7800]        ocfs2_acquire_dquot+0x2b0/0xb30
[  134.948881][ T7800]        dqget+0x7b1/0xf10
[  134.950258][ T7800]        dquot_set_dqblk+0x2b/0xfa0
[  134.951813][ T7800]        quota_setquota+0x4b7/0x540
[  134.953379][ T7800]        __se_sys_quotactl+0x279/0x950
[  134.955070][ T7800]        do_syscall_64+0xfa/0xfa0
[  134.956682][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.958617][ T7800] 
[  134.958617][ T7800] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  134.961870][ T7800]        lock_acquire+0x120/0x360
[  134.963513][ T7800]        down_write+0x96/0x1f0
[  134.965166][ T7800]        ocfs2_lock_global_qf+0x1ca/0x270
[  134.966981][ T7800]        ocfs2_acquire_dquot+0x2b0/0xb30
[  134.969003][ T7800]        dqget+0x7b1/0xf10
[  134.970713][ T7800]        dquot_set_dqblk+0x2b/0xfa0
[  134.972701][ T7800]        quota_setquota+0x4b7/0x540
[  134.974688][ T7800]        __se_sys_quotactl+0x279/0x950
[  134.976780][ T7800]        do_syscall_64+0xfa/0xfa0
[  134.978612][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  134.980845][ T7800] 
[  134.980845][ T7800] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[  134.983511][ T7800]        lock_acquire+0x120/0x360
[  134.985022][ T7800]        __mutex_lock+0x187/0x1350
[  134.986523][ T7800]        dqget+0x72a/0xf10
[  134.987868][ T7800]        __dquot_initialize+0x3b3/0xcb0
[  134.989493][ T7800]        __ext4_new_inode+0x7dd/0x3cb0
[  134.991079][ T7800]        ext4_xattr_inode_lookup_create+0xa3f/0x1c20
[  134.993000][ T7800]        ext4_xattr_block_set+0x223/0x2ac0
[  134.994707][ T7800]        ext4_xattr_set_handle+0xdfb/0x1590
[  134.996431][ T7800]        ext4_xattr_set+0x230/0x320
[  134.997989][ T7800]        __vfs_setxattr+0x43c/0x480
[  134.999541][ T7800]        __vfs_setxattr_noperm+0x12d/0x660
[  135.001344][ T7800]        vfs_setxattr+0x16b/0x2f0
[  135.003210][ T7800]        filename_setxattr+0x274/0x600
[  135.005218][ T7800]        path_setxattrat+0x364/0x3a0
[  135.007175][ T7800]        __x64_sys_setxattr+0xbc/0xe0
[  135.009182][ T7800]        do_syscall_64+0xfa/0xfa0
[  135.011036][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.013381][ T7800] 
[  135.013381][ T7800] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[  135.016195][ T7800]        lock_acquire+0x120/0x360
[  135.018006][ T7800]        down_read+0x46/0x2e0
[  135.019611][ T7800]        ext4_setattr+0x855/0x1bc0
[  135.021401][ T7800]        notify_change+0xc1a/0xf40
[  135.023132][ T7800]        chown_common+0x40c/0x5c0
[  135.024715][ T7800]        do_fchownat+0x161/0x270
[  135.026242][ T7800]        __x64_sys_chown+0x82/0xa0
[  135.027846][ T7800]        do_syscall_64+0xfa/0xfa0
[  135.029533][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.031544][ T7800] 
[  135.031544][ T7800] -> #2 (jbd2_handle){++++}-{0:0}:
[  135.034124][ T7800]        lock_acquire+0x120/0x360
[  135.035761][ T7800]        start_this_handle+0x1fa7/0x21c0
[  135.037547][ T7800]        jbd2__journal_start+0x2c1/0x5b0
[  135.039503][ T7800]        jbd2_journal_start+0x2a/0x40
[  135.041497][ T7800]        ocfs2_start_trans+0x376/0x6d0
[  135.043472][ T7800]        ocfs2_mknod+0xe93/0x2050
[  135.045130][ T7800]        ocfs2_mkdir+0x191/0x440
[  135.046978][ T7800]        vfs_mkdir+0x306/0x510
[  135.048743][ T7800]        do_mkdirat+0x247/0x590
[  135.050480][ T7800]        __x64_sys_mkdir+0x6c/0x80
[  135.052247][ T7800]        do_syscall_64+0xfa/0xfa0
[  135.054020][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.055938][ T7800] 
[  135.055938][ T7800] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  135.058506][ T7800]        lock_acquire+0x120/0x360
[  135.060050][ T7800]        down_read+0x46/0x2e0
[  135.061489][ T7800]        ocfs2_start_trans+0x36a/0x6d0
[  135.063078][ T7800]        ocfs2_mknod+0xe93/0x2050
[  135.064671][ T7800]        ocfs2_mkdir+0x191/0x440
[  135.066246][ T7800]        vfs_mkdir+0x306/0x510
[  135.067687][ T7800]        do_mkdirat+0x247/0x590
[  135.069147][ T7800]        __x64_sys_mkdir+0x6c/0x80
[  135.070714][ T7800]        do_syscall_64+0xfa/0xfa0
[  135.072250][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.074170][ T7800] 
[  135.074170][ T7800] -> #0 (sb_internal#3){.+.+}-{0:0}:
[  135.076488][ T7800]        validate_chain+0xb9b/0x2140
[  135.078490][ T7800]        __lock_acquire+0xab9/0xd20
[  135.080450][ T7800]        lock_acquire+0x120/0x360
[  135.082249][ T7800]        ocfs2_start_trans+0x26b/0x6d0
[  135.084091][ T7800]        ocfs2_acquire_dquot+0x455/0xb30
[  135.085987][ T7800]        dqget+0x7b1/0xf10
[  135.087570][ T7800]        dquot_set_dqblk+0x2b/0xfa0
[  135.089347][ T7800]        quota_setquota+0x4b7/0x540
[  135.091190][ T7800]        __se_sys_quotactl+0x279/0x950
[  135.092863][ T7800]        do_syscall_64+0xfa/0xfa0
[  135.094489][ T7800]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.096442][ T7800] 
[  135.096442][ T7800] other info that might help us debug this:
[  135.096442][ T7800] 
[  135.099501][ T7800] Chain exists of:
[  135.099501][ T7800]   sb_internal#3 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  135.099501][ T7800] 
[  135.104580][ T7800]  Possible unsafe locking scenario:
[  135.104580][ T7800] 
[  135.107145][ T7800]        CPU0                    CPU1
[  135.108998][ T7800]        ----                    ----
[  135.110625][ T7800]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  135.112346][ T7800]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  135.115252][ T7800]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  135.117690][ T7800]   rlock(sb_internal#3);
[  135.119282][ T7800] 
[  135.119282][ T7800]  *** DEADLOCK ***
[  135.119282][ T7800] 
[  135.122358][ T7800] 4 locks held by syz.0.700/7800:
[  135.124305][ T7800]  #0: ffff8881b50660e0 (&type->s_umount_key#100){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  135.128051][ T7800]  #1: ffff8881b8f640a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[  135.131265][ T7800]  #2: ffff8881b2cb60c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[  135.135704][ T7800]  #3: ffff8881b2cb5d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  135.139513][ T7800] 
[  135.139513][ T7800] stack backtrace:
[  135.141622][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.0.700 Not tainted syzkaller #0 PREEMPT(full) 
[  135.141639][ T7800] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.141646][ T7800] Call Trace:
[  135.141653][ T7800]  <TASK>
[  135.141660][ T7800]  dump_stack_lvl+0x189/0x250
[  135.141679][ T7800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.141691][ T7800]  ? __pfx__printk+0x10/0x10
[  135.141701][ T7800]  ? print_lock_name+0xde/0x100
[  135.141713][ T7800]  print_circular_bug+0x2ee/0x310
[  135.141728][ T7800]  check_noncircular+0x134/0x160
[  135.141743][ T7800]  validate_chain+0xb9b/0x2140
[  135.141761][ T7800]  __lock_acquire+0xab9/0xd20
[  135.141773][ T7800]  ? ocfs2_acquire_dquot+0x455/0xb30
[  135.141783][ T7800]  lock_acquire+0x120/0x360
[  135.141790][ T7800]  ? ocfs2_acquire_dquot+0x455/0xb30
[  135.141799][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  135.141815][ T7800]  ocfs2_start_trans+0x26b/0x6d0
[  135.141847][ T7800]  ? ocfs2_acquire_dquot+0x455/0xb30
[  135.141860][ T7800]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  135.141870][ T7800]  ? do_raw_spin_unlock+0x4d/0x240
[  135.141887][ T7800]  ? _raw_spin_unlock+0x28/0x50
[  135.141905][ T7800]  ? ocfs2_qinfo_unlock+0x121/0x150
[  135.141922][ T7800]  ocfs2_acquire_dquot+0x455/0xb30
[  135.141933][ T7800]  ? from_kuid+0x1b0/0x640
[  135.141944][ T7800]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  135.141956][ T7800]  ? percpu_counter_add_batch+0xea/0x1e0
[  135.141972][ T7800]  dqget+0x7b1/0xf10
[  135.141990][ T7800]  dquot_set_dqblk+0x2b/0xfa0
[  135.141998][ T7800]  quota_setquota+0x4b7/0x540
[  135.142012][ T7800]  ? __pfx_quota_setquota+0x10/0x10
[  135.142033][ T7800]  ? do_quotactl+0x734/0x860
[  135.142047][ T7800]  __se_sys_quotactl+0x279/0x950
[  135.142061][ T7800]  ? __se_sys_futex+0x36f/0x400
[  135.142077][ T7800]  ? __pfx___se_sys_quotactl+0x10/0x10
[  135.142092][ T7800]  ? do_syscall_64+0xbe/0xfa0
[  135.142102][ T7800]  do_syscall_64+0xfa/0xfa0
[  135.142109][ T7800]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.142120][ T7800]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.142130][ T7800]  ? exc_page_fault+0xab/0x100
[  135.142142][ T7800]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.142153][ T7800] RIP: 0033:0x7f42af18efc9
[  135.142165][ T7800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.142174][ T7800] RSP: 002b:00007f42b001f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3
[  135.142186][ T7800] RAX: ffffffffffffffda RBX: 00007f42af3e5fa0 RCX: 00007f42af18efc9
[  135.142194][ T7800] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000800
[  135.142199][ T7800] RBP: 00007f42af211f91 R08: 0000000000000000 R09: 0000000000000000
[  135.142203][ T7800] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000
[  135.142210][ T7800] R13: 00007f42af3e6038 R14: 00007f42af3e5fa0 R15: 00007fff521c57f8
[  135.142222][ T7800]  </TASK>
[  135.274502][ T5919] ocfs2: Unmounting device (7,0) on (node local)
[  136.250698][   T10] pegasus 4-1:0.0: can't reset MAC
[  136.252793][   T10] pegasus 4-1:0.0: probe with driver pegasus failed with error -5
[  136.257156][   T10] usb 4-1: USB disconnect, device number 9

VM DIAGNOSIS:
14:20:02  Registers:
info registers vcpu 0

CPU#0
RAX=3fcebb885ba31300 RBX=ffffffff81967dd7 RCX=3fcebb885ba31300 RDX=0000000000000001
RSI=ffffffff8bbf0fc0 RDI=ffffffff81967dd7 RBP=ffffffff8dc07ea8 RSP=ffffffff8dc07d80
R8 =ffff888121232fdb R9 =1ffff110242465fb R10=dffffc0000000000 R11=ffffed10242465fc
R12=ffffffff8f7d0170 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1b92a40
RIP=ffffffff8b472dd3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88818eb35000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f97a51b12f8 CR3=000000010cfa6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f97a501315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000027cb RDI=00000000000027cc RBP=00000000000003f8 RSP=ffffc90008deef90
R8 =ffff88816a278237 R9 =1ffff1102d44f046 R10=dffffc0000000000 R11=ffffffff8515b630
R12=dffffc0000000000 R13=ffffffff997df901 R14=ffffffff99af2f20 R15=0000000000000000
RIP=ffffffff8515b6ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f42b001f6c0 ffffffff 00c00000
GS =0000 ffff8882a9f35000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c34f1a4 CR3=00000001b2200000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f42af3b7498 00007f42af3b7470 XMM03=00007f42af3b74a8 00007f42af3b74a0
XMM04=00007f42aff1d100 00007f42af3b7460 XMM05=00007f42af3b7478 00007f42af3b74c0
XMM06=00007f42af3b74b8 00007f42af3b74b0 XMM07=00007f42af3b74a8 00007f42af3b74a0
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f42af21315a
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
