last executing test programs:

4m7.946392582s ago: executing program 1 (id=1032):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, 0x0})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac)

4m6.660323277s ago: executing program 1 (id=1036):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

4m6.572140408s ago: executing program 1 (id=1039):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2402, 0x0)
pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000440)="fd2911e9", 0x4}], 0x1, 0x4, 0x9)

4m6.474811606s ago: executing program 1 (id=1041):
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000140), 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

4m6.355119136s ago: executing program 1 (id=1044):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r1=>0x0], 0x0, 0x0, 0x59, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r1, 0xff, 0x7, 0xd, 0x1ff})

4m5.854790604s ago: executing program 1 (id=1050):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x10}, 0x14)

4m5.854581987s ago: executing program 32 (id=1050):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x10}, 0x14)

2m45.654350954s ago: executing program 0 (id=1972):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000500)=0x7)

2m45.51160999s ago: executing program 0 (id=1974):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x80009e3a, 0x0, 0x80000, 0x1bd}, &(0x7f0000002000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1)
syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m45.242975693s ago: executing program 0 (id=1978):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x4b71, 0x0)

2m45.13443463s ago: executing program 0 (id=1980):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x22108c0, &(0x7f00000001c0)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@noquota}, {@noquota}, {@uid}, {@errors_remount}, {@errors_continue}, {@discard, 0x0}, {@errors_continue}, {@umask={'umask', 0x3d, 0xff}}, {@umask={'umask', 0x3d, 0x4}}, {@errors_continue}, {}, {@resize}, {@quota}]}, 0x1, 0x6172, &(0x7f0000006340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

2m43.800402524s ago: executing program 0 (id=1991):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
setpgid(r0, r0)
wait4(r0, 0x0, 0x2, 0x0)

2m43.345073612s ago: executing program 0 (id=1998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x2c, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="552004f1"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m43.043449536s ago: executing program 33 (id=1998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x2c, 0x107, 0x70bd2d, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="552004f1"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

2m27.32390558s ago: executing program 3 (id=2141):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb4}}, 0x0)

2m27.203803501s ago: executing program 3 (id=2142):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @empty}, 0x10)
shutdown(r0, 0x1)

2m26.292824807s ago: executing program 3 (id=2144):
munmap(&(0x7f0000000000/0x2000)=nil, 0x2000)
r0 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffff9, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x1, 0x32}, 0x2, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8)

2m26.178265368s ago: executing program 3 (id=2145):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x183)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000b40)='./file0/file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chmod(&(0x7f0000000280)='./file0/../file0/../file0/../file0\x00', 0x80)

2m26.040186957s ago: executing program 3 (id=2147):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000340000000800030070636900110002"], 0x30}}, 0x0)

2m25.451542899s ago: executing program 3 (id=2151):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x333})

2m24.978971703s ago: executing program 34 (id=2151):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000000)={0x333})

2m24.459556665s ago: executing program 2 (id=2156):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESHEX=0x0], 0x4, 0x1296, &(0x7f0000001b80)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
fstatfs(r0, &(0x7f00000009c0)=""/202)

2m24.003405065s ago: executing program 4 (id=2158):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd8b00fcdbdf250900020073797a3000000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0xe880)

2m23.896551959s ago: executing program 2 (id=2159):
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)

2m23.823226633s ago: executing program 4 (id=2160):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x4}, 0x2e)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0)

2m23.594921234s ago: executing program 2 (id=2161):
socket$unix(0x1, 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0)

2m23.426156s ago: executing program 4 (id=2162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf251b000000070021006262000008009a001c"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x8840)

2m22.447391551s ago: executing program 4 (id=2163):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000071104e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

2m22.446629044s ago: executing program 2 (id=2164):
migrate_pages(0x0, 0x7f, &(0x7f0000000000)=0x8000000000000001, &(0x7f0000000040)=0x3)

2m22.422203917s ago: executing program 4 (id=2165):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000002680)={@in6={{0xa, 0x4e23, 0x8, @local, 0x7}}, 0x0, 0x0, 0x3b, 0x0, "83af58bd298e5b2a92bac7011463af30f92cbfe7161b5c4d79287025f99818601d4bd479545c44707bfcf6afff0c0d3b2909f5a6bc0bf434c25e5af45bfd4aaa254ae264945c958fbaf72c50fedf2fe9"}, 0xd8)
semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x2000}, {0x3, 0x1, 0x1800}], 0x2)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
fcntl$setstatus(r4, 0x4, 0x42000)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
keyctl$describe(0x6, 0x0, &(0x7f0000000300)=""/86, 0x56)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r5, 0x2000009)
sendfile(r4, r5, 0x0, 0x7ffff004)

2m22.405129426s ago: executing program 2 (id=2166):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8804)

2m18.598459509s ago: executing program 2 (id=2167):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a7172bb88010203010902240001eec701000904020002ffffff0009050b0000000000000905b6"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x85}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b", 0x1a}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xfa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
sched_setscheduler(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)

1m52.59380695s ago: executing program 4 (id=2168):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="8cfb8bce6002746ae68e5d649d1536e95c052e93c4194b7a3c56bd2c280d3685cdc3f824719f02b03cd79b9877ca554d1089845d076a19197f81291bf3ce720a2af6539e92807b9ebb5dc636e56545d5f42bb10d2f7fe8514f606937313917924ab3d56797428efce9f8273bbcf6b37cf68c54c059036a24850cc312c453068415c11e9b81b6bf003a0659a2e34706870bb1a095f0fb36f8", @ANYRESDEC, @ANYRES32], 0x1, 0x210, &(0x7f0000000700)="$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")
truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m33.553357442s ago: executing program 35 (id=2167):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x4}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100153a42908f00a7172bb88010203010902240001eec701000904020002ffffff0009050b0000000000000905b6"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x6, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x85}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b", 0x1a}], 0x2}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000e40), &(0x7f0000000100)=@udp, 0x8}, 0x20)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0xfa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c)
sched_setscheduler(0x0, 0x3, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0)

0s ago: executing program 36 (id=2168):
syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="8cfb8bce6002746ae68e5d649d1536e95c052e93c4194b7a3c56bd2c280d3685cdc3f824719f02b03cd79b9877ca554d1089845d076a19197f81291bf3ce720a2af6539e92807b9ebb5dc636e56545d5f42bb10d2f7fe8514f606937313917924ab3d56797428efce9f8273bbcf6b37cf68c54c059036a24850cc312c453068415c11e9b81b6bf003a0659a2e34706870bb1a095f0fb36f8", @ANYRESDEC, @ANYRES32], 0x1, 0x210, &(0x7f0000000700)="$eJzs28tOE1Ecx/Hf9EZFI17iJa5MTIwbqQIJ6Up5ADcuTVyQWkjjoEbcQEiUl3Dv1pWPQKLv4QvAwp0rjjkzp2nHDp0LM0yg309C50/n/M6cAc6h04sAzKznwa0nT+2gMsZ8vi/p1QtJjYoHB6BUxm2PDYDZU8899V8P1xAA59LRWl1SWwee9PvPXu/QfbVTPn44WquFhScdjuUvpc3ve8H2XiOan5d0eaL15AWJ+RbmH2qYtyPf613JePx5RY+va2nz4fk/eqCmxvJXJS1IQTfXJd2QdFOas21vSapFjt9y343yd8M79lOeBgAAAAAAU9mrz8XT5hM7qEt6ErvHXgdvDPx+/N5kTZd/mjPfcvmlaY1Mcn55/M7aSa29UdkMN3Muv9h777/JMG6gCLVs83/iaUH7F32Q0MGJ08GtDNH530w/GveM4Mbga6YMgND2zu7bdd/vfyyyeDatjZS1Q7siFDzC+OK7LfQ3fGWk5GPlKeximzc+fEGm6IF9UXIbk6LNRSoaxf6cf8r7f542IpPoh/vdZuj5ZdyuliLzNKJ+xgsTgNJ1Pm196Gzv7D4ebK1v9jf771ZWu93VleWlbid4WG5vzULVowRQhtF//5idad/EAwAAAAAAAAAAAAAAKnVb0p2g+nWcIcY7AwAAAIBz6Cw+FFX1OQIAAAAAAAAAAAAAcNH9CwAA///UBDZV")
truncate(&(0x7f0000000080)='./file2\x00', 0x4fffc)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

kernel console output (not intermixed with test programs):

ailable UDC or it's busy
[  158.234541][ T8645] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.311543][ T7111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.319947][ T7111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.337431][ T7111] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  158.363564][ T7111] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  158.366409][ T7111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.383617][ T7111] usb 1-1: config 0 descriptor??
[  158.428930][ T5817] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.815532][ T7111] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  158.832680][ T7111] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  158.861636][ T8651] loop1: detected capacity change from 0 to 8192
[  158.867370][ T8651] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.957078][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  159.072838][ T8657] binder: 8656:8657 ioctl 4018620d 0 returned -22
[  159.122663][ T7111] usb 1-1: USB disconnect, device number 10
[  159.932453][   T33] audit: type=1326 audit(1774163027.521:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  159.961277][   T33] audit: type=1326 audit(1774163027.541:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  159.993384][   T33] audit: type=1326 audit(1774163027.551:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.036115][   T33] audit: type=1326 audit(1774163027.551:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.071162][   T33] audit: type=1326 audit(1774163027.551:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.092499][ T7111] usb 3-1: USB disconnect, device number 8
[  160.134763][   T33] audit: type=1326 audit(1774163027.561:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.187921][   T33] audit: type=1326 audit(1774163027.571:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.242352][   T33] audit: type=1326 audit(1774163027.571:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8662 comm="syz.0.1034" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  160.593884][ T8677] loop1: detected capacity change from 0 to 1024
[  160.602708][ T8677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.621273][ T8679] : renamed from lo
[  160.736312][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.745516][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.749998][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.753999][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.770020][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.773945][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.778198][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.782896][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.787535][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  160.799450][ T5817] EXT4-fs warning (device loop1): empty_inline_dir:1759: bad inline directory (dir #12) - no `..'
[  161.062743][ T5817] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.266550][ T5198] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.272605][ T5198] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.278063][ T5198] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.285153][ T5198] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.288577][ T5198] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.292636][ T8700] loop0: detected capacity change from 0 to 128
[  161.339013][ T5876] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  161.372550][ T8700] loop0: detected capacity change from 0 to 1024
[  161.386313][ T8700] hfsplus: Unknown parameter './file0'
[  161.460886][ T8702] netlink: 'syz.0.1051': attribute type 21 has an invalid length.
[  161.464017][ T8702] netlink: 'syz.0.1051': attribute type 6 has an invalid length.
[  161.466905][ T8702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1051'.
[  161.498997][ T5876] usb 3-1: Using ep0 maxpacket: 16
[  161.513110][ T5876] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.517293][ T5876] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.532470][ T5876] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.538647][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[  161.549076][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.570141][ T5876] usb 3-1: config 0 descriptor??
[  161.809621][ T5876] usb 3-1: USB disconnect, device number 9
[  161.924368][ T8697] chnl_net:caif_netlink_parms(): no params data found
[  162.076311][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.079422][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.082991][ T8697] bridge_slave_0: entered allmulticast mode
[  162.087124][ T8697] bridge_slave_0: entered promiscuous mode
[  162.101557][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.104266][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.107182][ T8697] bridge_slave_1: entered allmulticast mode
[  162.117066][ T8697] bridge_slave_1: entered promiscuous mode
[  162.161299][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.173675][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.216801][ T8697] team0: Port device team_slave_0 added
[  162.225480][ T8697] team0: Port device team_slave_1 added
[  162.289479][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.291916][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.301822][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  162.321131][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  162.324223][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  162.334482][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  162.494893][ T8697] hsr_slave_0: entered promiscuous mode
[  162.499431][ T8697] hsr_slave_1: entered promiscuous mode
[  162.502556][ T8697] debugfs: 'hsr0' already exists in 'hsr'
[  162.504767][ T8697] Cannot create hsr debugfs directory
[  162.564079][ T8710] loop2: detected capacity change from 0 to 4096
[  162.578200][ T8710] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  162.937434][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'.
[  162.943713][ T8697] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  162.953452][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1057'.
[  162.956767][ T8697] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  162.991340][ T8697] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  163.012903][ T8726] loop0: detected capacity change from 0 to 256
[  163.020821][ T8697] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  163.041080][ T8726] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395e47cf, utbl_chksum : 0xe619d30d)
[  163.153251][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.170882][ T8697] 8021q: adding VLAN 0 to HW filter on device team0
[  163.180476][   T31] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.183059][   T31] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.190166][ T8742] netlink: 'syz.2.1066': attribute type 7 has an invalid length.
[  163.207146][   T31] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.210063][   T31] bridge0: port 2(bridge_slave_1) entered forwarding state
[  163.266183][ T8697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  163.274860][ T8697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.369575][ T5198] Bluetooth: hci2: command tx timeout
[  163.383556][ T8752] bridge0: port 3(vlan2) entered blocking state
[  163.386251][ T8752] bridge0: port 3(vlan2) entered disabled state
[  163.391636][ T8752] vlan2: entered allmulticast mode
[  163.393282][ T8752] bond0: entered allmulticast mode
[  163.394978][ T8752] bond_slave_0: entered allmulticast mode
[  163.396831][ T8752] bond_slave_1: entered allmulticast mode
[  163.401626][ T8752] vlan2: entered promiscuous mode
[  163.403246][ T8752] bond0: entered promiscuous mode
[  163.404691][ T8752] bond_slave_0: entered promiscuous mode
[  163.406507][ T8752] bond_slave_1: entered promiscuous mode
[  163.512198][ T5198] Bluetooth: hci0: unexpected event for opcode 0x0c12
[  163.514516][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.554459][ T8697] veth0_vlan: entered promiscuous mode
[  163.570762][ T8697] veth1_vlan: entered promiscuous mode
[  163.605102][ T8697] veth0_macvtap: entered promiscuous mode
[  163.621564][ T8697] veth1_macvtap: entered promiscuous mode
[  163.643825][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.655300][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.679464][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.683004][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.695237][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.698526][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.740739][ T7120] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  163.813925][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.829102][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.867414][   T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.869788][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1079'.
[  163.870531][   T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.920494][ T7120] usb 3-1: config 0 descriptor has 1 excess byte, ignoring
[  163.923545][ T7120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  163.932568][ T7120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  163.948605][ T7120] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  163.955189][ T7120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.958227][ T7120] usb 3-1: Product: syz
[  163.962425][ T7120] usb 3-1: Manufacturer: syz
[  163.964444][ T7120] usb 3-1: SerialNumber: syz
[  163.995447][ T7120] usb 3-1: config 0 descriptor??
[  164.011884][ T7120] usb 3-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8
[  164.269947][ T8788] loop3: detected capacity change from 0 to 40427
[  164.272715][ T8788] F2FS-fs: heap/no_heap options were deprecated
[  164.311909][ T8788] F2FS-fs (loop3): build fault injection rate: 19
[  164.314611][ T8788] F2FS-fs (loop3): build fault injection type: 0x77e8c
[  164.318418][ T8788] F2FS-fs (loop3): invalid crc value
[  164.325035][ T8788] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60
[  164.336568][ T8788] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x17a/0x9b0
[  164.345452][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  164.497983][ T8793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'.
[  164.525797][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0
[  164.601448][ T7120] usb 3-1: USB disconnect, device number 10
[  164.643168][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.691402][ T8788] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.697382][ T8788] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.721640][ T8788] F2FS-fs (loop3): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0
[  164.755815][    C0] F2FS-fs (loop3): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  164.760244][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.760268][    C0] Tainted: [L]=SOFTLOCKUP
[  164.760273][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.760281][    C0] Call Trace:
[  164.760287][    C0]  <TASK>
[  164.760295][    C0]  dump_stack_lvl+0xe8/0x150
[  164.760320][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  164.760344][    C0]  f2fs_write_end_io+0x1273/0x1740
[  164.760372][    C0]  blk_update_request+0x57e/0xe60
[  164.760395][    C0]  blk_mq_end_request+0x3e/0x70
[  164.760409][    C0]  blk_flush_complete_seq+0x678/0xcc0
[  164.760431][    C0]  flush_end_io+0xbaa/0xe60
[  164.760454][    C0]  __blk_mq_end_request+0x4f8/0x630
[  164.760471][    C0]  blk_done_softirq+0x10a/0x160
[  164.760492][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  164.760512][    C0]  handle_softirqs+0x22a/0x870
[  164.760532][    C0]  ? schedule+0x90/0x360
[  164.760549][    C0]  ? run_ksoftirqd+0x36/0x60
[  164.760572][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  164.760618][    C0]  run_ksoftirqd+0x36/0x60
[  164.760645][    C0]  smpboot_thread_fn+0x541/0xa50
[  164.760664][    C0]  ? smpboot_thread_fn+0x4d/0xa50
[  164.760689][    C0]  kthread+0x388/0x470
[  164.760703][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  164.760721][    C0]  ? __pfx_kthread+0x10/0x10
[  164.760735][    C0]  ret_from_fork+0x51e/0xb90
[  164.760755][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  164.760771][    C0]  ? __switch_to+0xc7d/0x1450
[  164.760790][    C0]  ? __pfx_kthread+0x10/0x10
[  164.760804][    C0]  ret_from_fork_asm+0x1a/0x30
[  164.760835][    C0]  </TASK>
[  164.760840][    C0] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  164.837347][ T8697] F2FS-fs (loop3): do_checkpoint failed err:-5, stop checkpoint
[  164.924148][   T33] audit: type=1326 audit(1774163032.521:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.2.1087" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e07b9c799 code=0x0
[  165.080936][ T8800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  165.266994][ T8810] mmap: syz.3.1086 (8810) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  165.371843][ T7120] page_pool_release_retry() stalled pool shutdown: id 21, 1 inflight 60 sec
[  165.461616][ T5198] Bluetooth: hci2: command tx timeout
[  165.919941][ T7123] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  166.063240][ T7120] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  166.073351][ T7123] usb 1-1: too many configurations: 151, using maximum allowed: 8
[  166.088677][ T7123] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  166.093245][ T7123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  166.097402][ T7123] usb 1-1: Product: syz
[  166.099127][ T7123] usb 1-1: Manufacturer: syz
[  166.100975][ T7123] usb 1-1: SerialNumber: syz
[  166.105435][ T7123] usb 1-1: config 0 descriptor??
[  166.111533][ T7123] ims_pcu 1-1:0.0: Zero length descriptor
[  166.113932][ T7123] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22
[  166.219106][ T7120] usb 4-1: Using ep0 maxpacket: 32
[  166.307595][ T7120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  166.317007][ T7120] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  166.327786][ T7120] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  166.331933][  T976] usb 1-1: USB disconnect, device number 11
[  166.335718][ T7120] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.350719][ T7120] usb 4-1: config 0 descriptor??
[  166.357863][ T7120] hub 4-1:0.0: USB hub found
[  166.560222][ T7120] hub 4-1:0.0: 1 port detected
[  166.965269][ T8865] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1119'.
[  166.968722][ T8865] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1119'.
[  167.023076][ T8868] xt_TPROXY: Can be used only with -p tcp or -p udp
[  167.136143][ T8874] loop2: detected capacity change from 0 to 128
[  167.165277][ T7120] hub 4-1:0.0: activate --> -90
[  167.176550][ T8874] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  167.184156][ T8874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.401861][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1128'.
[  167.428336][ T8882] loop0: detected capacity change from 0 to 4096
[  167.473433][ T8882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.488011][ T8882] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  167.523321][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.530682][ T5198] Bluetooth: hci2: command tx timeout
[  167.533063][ T5198] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  167.537877][ T5198] Bluetooth: hci0: Injecting HCI hardware error event
[  167.543307][   T54] Bluetooth: hci0: hardware error 0x00
[  167.581430][  T976] usb 4-1: USB disconnect, device number 2
[  167.755198][ T8895] loop0: detected capacity change from 0 to 2048
[  167.831319][ T8895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.850475][ T8895] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.970184][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.022516][ T8899] loop0: detected capacity change from 0 to 2048
[  168.042524][ T8900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  168.349802][ T7123] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  168.499709][ T7123] usb 1-1: Using ep0 maxpacket: 32
[  168.504329][ T7123] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  168.507947][ T7123] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  168.512019][ T7123] usb 1-1: config 0 interface 0 has no altsetting 0
[  168.517104][ T7123] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  168.520809][ T7123] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.523688][ T7123] usb 1-1: Product: syz
[  168.525438][ T7123] usb 1-1: Manufacturer: syz
[  168.527269][ T7123] usb 1-1: SerialNumber: syz
[  168.535897][ T7123] usb 1-1: config 0 descriptor??
[  168.628949][ T7111] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  168.781280][ T7111] usb 3-1: unable to get BOS descriptor or descriptor too short
[  168.785102][ T7111] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  168.788472][ T7111] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7
[  168.794183][ T7111] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40
[  168.796864][ T7111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.799515][ T7111] usb 3-1: Product: syz
[  168.800855][ T7111] usb 3-1: Manufacturer: syz
[  168.802318][ T7111] usb 3-1: SerialNumber: syz
[  168.954383][ T7123] gs_usb 1-1:0.0: Configuring for 159 interfaces
[  169.043646][ T7111] usb 3-1: Can't get UAC3 power state for id 10
[  169.048766][ T7111] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[  169.058672][ T7111] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2)
[  169.107980][ T7111] usb 3-1: USB disconnect, device number 11
[  169.142615][ T7188] udevd[7188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.158302][ T7123] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  169.170856][ T7123] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22
[  169.360353][ T7111] usb 1-1: USB disconnect, device number 12
[  169.604777][ T8942] loop2: detected capacity change from 0 to 1024
[  169.608984][ T5198] Bluetooth: hci2: command tx timeout
[  169.671459][   T31] hfsplus: b-tree write err: -5, ino 25
[  169.673718][   T31] hfsplus: b-tree write err: -5, ino 4
[  169.675807][   T31] hfsplus: b-tree write err: -5, ino 2
[  169.689014][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  169.803189][ T8950] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1154'.
[  170.003057][ T8962] trusted_key: encrypted_key: master key parameter is missing
[  170.579423][ T7111] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  170.751357][ T7111] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  170.760640][ T7111] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  170.765350][ T7111] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  170.768684][ T7111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  170.773799][ T7111] usb 1-1: SerialNumber: syz
[  171.702560][ T9031] comedi comedi0: Minor 3 could not be opened
[  171.786348][ T9038] loop0: detected capacity change from 0 to 8
[  171.814253][ T9035] loop3: detected capacity change from 0 to 256
[  171.821848][ T9035] vfat: Deprecated parameter 'posix'
[  171.823746][ T9035] FAT-fs: "posix" option is obsolete, not supported now
[  171.885381][ T7111] usb 1-1: 0:2 : does not exist
[  172.014692][ T9047] loop3: detected capacity change from 0 to 128
[  172.049648][ T9047] vxfs: unable to read olt
[  172.108328][ T8998] loop2: detected capacity change from 0 to 262144
[  172.115280][ T8998] F2FS-fs (loop2): invalid crc value
[  172.119405][ T7111] usb 1-1: USB disconnect, device number 13
[  172.193347][ T8998] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  172.197944][ T8998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  172.343879][ T6990] udevd[6990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  172.527593][ T9065] loop3: detected capacity change from 0 to 16
[  172.540672][ T9065] erofs (device loop3): mounted with root inode @ nid 36.
[  172.553194][ T9065] erofs (device loop3): unsupported i_format 1796 of nid 86
[  173.063428][ T7111] IPVS: starting estimator thread 0...
[  173.128705][ T9089] loop3: detected capacity change from 0 to 2048
[  173.149129][ T9086] IPVS: using max 67 ests per chain, 160800 per kthread
[  173.166351][ T9089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  173.201766][ T8697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  173.349037][ T7112] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  173.510930][ T7112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  173.518927][ T7112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.522073][ T7112] usb 1-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  173.524940][ T7112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.550222][ T7112] usb 1-1: config 0 descriptor??
[  173.853832][ T9130] loop2: detected capacity change from 0 to 4096
[  173.879387][ T9130] Cannot load nls cp
[  173.995226][ T7112] sony 0003:12BA:0100.0006: hidraw0: USB HID v7f.fd Device [HID 12ba:0100] on usb-dummy_hcd.0-1/input0
[  174.004201][ T7112] sony 0003:12BA:0100.0006: failed to claim input
[  174.075739][ T9144] loop3: detected capacity change from 0 to 64
[  174.094088][ T9144] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop3
[  174.186996][ T7110] usb 1-1: USB disconnect, device number 14
[  174.779961][ T9168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1246'.
[  175.995728][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1261'.
[  176.147293][ T9205] overlay: ./file0 is not a directory
[  176.487572][ T9212] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  176.910123][ T9233] loop0: detected capacity change from 0 to 1024
[  176.938722][ T9233] hfsplus: b-tree write err: -5, ino 2
[  176.960078][   T27] hfsplus: b-tree write err: -5, ino 25
[  176.962893][   T27] hfsplus: b-tree write err: -5, ino 4
[  176.964568][   T27] hfsplus: b-tree write err: -5, ino 2
[  176.966597][   T27] hfsplus: b-tree write err: -5, ino 26
[  177.035802][ T9237] loop3: detected capacity change from 0 to 4096
[  177.056157][ T9237] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  177.074245][ T9237] ntfs3(loop3): ino=1a, mi_enum_attr
[  177.076258][ T9237] ntfs3(loop3): ino=1a, mi_enum_attr
[  177.078042][ T9237] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  177.105981][ T9237] ntfs3(loop3): ino=1a, mi_enum_attr
[  177.113013][ T9237] ntfs3(loop3): ino=1a, mi_enum_attr
[  178.192811][ T9263] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1288'.
[  178.893049][ T9278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'.
[  178.903536][ T9278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'.
[  179.395578][ T9289] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1299'.
[  179.430554][ T9289] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1299'.
[  179.508483][ T9294] loop0: detected capacity change from 0 to 1024
[  179.549320][ T7112] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  179.580208][ T7049] hfsplus: b-tree write err: -5, ino 25
[  179.582570][ T7049] hfsplus: b-tree write err: -5, ino 4
[  179.584747][ T7049] hfsplus: b-tree write err: -5, ino 2
[  179.721649][ T7112] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  179.724361][ T7112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.730143][ T7112] usb 4-1: config 0 descriptor??
[  179.736209][ T7112] cp210x 4-1:0.0: cp210x converter detected
[  179.909037][  T976] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  180.059051][  T976] usb 3-1: Using ep0 maxpacket: 16
[  180.063054][  T976] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.066524][  T976] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.078990][  T976] usb 3-1: config 0 interface 0 has no altsetting 0
[  180.081147][  T976] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  180.083636][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.088514][  T976] usb 3-1: config 0 descriptor??
[  180.092246][ T9319] loop0: detected capacity change from 0 to 32768
[  180.127274][ T9319] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  180.158606][ T7112] usb 4-1: cp210x converter now attached to ttyUSB0
[  180.259062][ T9319] syz.0.1312 (9319) used greatest stack depth: 19104 bytes left
[  180.290907][ T5809] ocfs2: Unmounting device (7,0) on (node local)
[  180.351952][ T7120] usb 4-1: USB disconnect, device number 3
[  180.358217][ T7120] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  180.366122][ T7120] cp210x 4-1:0.0: device disconnected
[  180.437281][ T9323] loop0: detected capacity change from 0 to 1024
[  180.480280][   T27] hfsplus: b-tree write err: -5, ino 25
[  180.485581][   T27] hfsplus: b-tree write err: -5, ino 4
[  180.488039][   T27] hfsplus: b-tree write err: -5, ino 2
[  180.528126][  T976] hid (null): report_id 3323596431 is invalid
[  180.536712][  T976] hid (null): unknown global tag 0xe
[  180.538635][  T976] hid (null): unknown global tag 0xe
[  180.541508][  T976] hid (null): unknown global tag 0xe
[  180.543143][  T976] hid (null): unknown global tag 0x63
[  180.544837][  T976] hid (null): unknown global tag 0xd
[  180.725431][ T7123] usb 3-1: USB disconnect, device number 12
[  180.983936][ T9333] loop3: detected capacity change from 0 to 4096
[  180.996212][ T9333] ntfs3(loop3): ino=0, mi_enum_attr
[  181.005644][ T9333] ntfs3(loop3): ino=0, mi_enum_attr
[  181.469614][ T9351] loop4: detected capacity change from 0 to 7
[  181.473308][ T9351] buffer_io_error: 9 callbacks suppressed
[  181.473327][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.485129][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.488193][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.491509][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.494543][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.497643][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.509135][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.515994][ T9351] ldm_validate_partition_table(): Disk read failed.
[  181.522573][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.525672][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.536037][ T9351] Buffer I/O error on dev loop4, logical block 0, async page read
[  181.569395][ T9353] Invalid logical block size (4)
[  181.573844][ T9351] Dev loop4: unable to read RDB block 0
[  181.576060][ T9351]  loop4: unable to read partition table
[  181.581901][ T9351] loop4: partition table beyond EOD, truncated
[  181.602932][ T9351] loop_reread_partitions: partition scan of loop4 (Sj	%`ր5) failed (rc=-5)
[  181.764293][ T9366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1334'.
[  181.863968][ T9372] loop3: detected capacity change from 0 to 512
[  181.873257][ T9372] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.902315][ T9372] EXT4-fs error (device loop3): ext4_iget_extra_inode:5025: inode #15: comm syz.3.1338: corrupted in-inode xattr: overlapping e_value 
[  181.907789][ T9372] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  181.908278][ T9372] EXT4-fs (loop3): get orphan inode failed
[  181.911914][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  181.911935][    C1] EXT4-fs (loop3): initial error at time 1774163049: ext4_iget_extra_inode:5025: inode 15
[  181.911963][    C1] EXT4-fs (loop3): last error at time 1774163049: ext4_iget_extra_inode:5025: inode 15
[  181.946550][ T9372] EXT4-fs (loop3): mount failed
[  182.030407][ T9383] Set syz1 is full, maxelem 1029 reached
[  183.118013][ T9401] macvlan1: entered allmulticast mode
[  183.166227][ T9401] veth1_vlan: entered allmulticast mode
[  183.168220][ T9401] macvlan1: entered promiscuous mode
[  183.229587][ T9406] loop2: detected capacity change from 0 to 4096
[  183.234032][ T9406] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  183.267370][ T9410] loop3: detected capacity change from 0 to 512
[  183.279936][ T9410] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  183.299837][ T9410] EXT4-fs (loop3): 1 truncate cleaned up
[  183.302754][ T9410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.334830][ T8697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.448172][ T9416] netlink: 'syz.2.1354': attribute type 4 has an invalid length.
[  183.492058][ T9414] loop3: detected capacity change from 0 to 8192
[  183.722411][ T9428] bridge_slave_0: left allmulticast mode
[  183.724534][ T9428] bridge_slave_0: left promiscuous mode
[  183.730235][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.737809][ T9428] bridge_slave_1: left allmulticast mode
[  183.742319][ T9428] bridge_slave_1: left promiscuous mode
[  183.745449][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.756678][ T9428] bond0: (slave bond_slave_0): Releasing backup interface
[  183.772290][ T9428] bond0: (slave bond_slave_1): Releasing backup interface
[  183.794338][ T9428] team0: Port device team_slave_0 removed
[  183.819799][ T9428] team0: Port device team_slave_1 removed
[  183.822938][ T9428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  183.825724][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_0
[  183.832047][ T9428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  183.834813][ T9428] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.840288][ T9428] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  183.922597][ T9430] loop3: detected capacity change from 0 to 32768
[  183.953786][ T9430] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.010955][ T9430] XFS (loop3): Ending clean mount
[  184.023582][ T9442] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  184.026616][ T9442] System zones: 0-2, 18-18, 34-35
[  184.046131][ T9430] XFS (loop3): Quotacheck needed: Please wait.
[  184.050059][ T9442] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.054109][ T9442] ext4 filesystem being mounted at /464/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.083485][ T9446] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.150565][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.225946][ T9430] XFS (loop3): Quotacheck: Done.
[  184.314019][ T8697] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.676999][ T9466] bridge_slave_0: left allmulticast mode
[  184.693810][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.700844][ T9470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1375'.
[  184.737289][ T9466] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  184.801767][ T9472] set_capacity_and_notify: 2 callbacks suppressed
[  184.801787][ T9472] loop0: detected capacity change from 0 to 1024
[  184.807658][ T9472] EXT4-fs: Ignoring removed orlov option
[  184.829039][ T9472] EXT4-fs (loop0): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  184.879800][ T9472] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.908539][ T9472] EXT4-fs (loop0): Online resizing not supported with bigalloc
[  184.979118][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.071203][ T9482] loop2: detected capacity change from 0 to 4096
[  185.106200][ T9491] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  185.568978][ T7120] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  185.668470][ T9506] loop3: detected capacity change from 0 to 4096
[  185.677406][ T9506] EXT4-fs: inline encryption not supported
[  185.692438][ T9506] EXT4-fs (loop3): Test dummy encryption mode enabled
[  185.708116][ T9506] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  185.712547][ T9506] System zones: 0-5
[  185.717664][ T9506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.727125][ T7120] usb 3-1: config 2 has an invalid interface number: 97 but max is 0
[  185.730934][ T7120] usb 3-1: config 2 has no interface number 0
[  185.733347][ T7120] usb 3-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  185.750315][ T7120] usb 3-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64
[  185.753994][ T7120] usb 3-1: config 2 interface 97 has no altsetting 0
[  185.780552][ T7120] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  185.785150][ T7120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.788089][ T7120] usb 3-1: Product: syz
[  185.809422][ T7120] usb 3-1: Manufacturer: syz
[  185.811261][ T7120] usb 3-1: SerialNumber: syz
[  185.831958][ T9502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  185.834748][ T9502] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  185.846498][ T8697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.170986][ T7123] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  186.220997][ T7120] usb-storage 3-1:2.97: USB Mass Storage device detected
[  186.237158][ T7120] usb-storage 3-1:2.97: Quirks match for vid 04e6 pid 000b: 4
[  186.240938][ T7120] scsi host6: usb-storage 3-1:2.97
[  186.248748][ T7120] usb 3-1: USB disconnect, device number 13
[  186.284335][ T9523] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.339947][ T7123] usb 1-1: Using ep0 maxpacket: 16
[  186.344932][ T7123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.349518][ T7123] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.352472][ T7123] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  186.397948][ T7123] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  186.413980][ T7123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.449939][ T7123] usb 1-1: config 0 descriptor??
[  186.490114][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[  186.905302][ T7123] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  186.917875][ T7123] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  187.127017][ T7123] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  187.142687][ T7123] microsoft 0003:045E:07DA.0008: no inputs found
[  187.146408][ T7123] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway
[  187.344652][ T7123] usb 1-1: USB disconnect, device number 15
[  187.772111][ T7123] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  188.039071][ T7123] usb 3-1: Using ep0 maxpacket: 8
[  188.061963][ T7123] usb 3-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=88.56
[  188.065643][ T7123] usb 3-1: New USB device strings: Mfr=102, Product=169, SerialNumber=3
[  188.068683][ T7123] usb 3-1: Product: syz
[  188.071027][ T7123] usb 3-1: Manufacturer: syz
[  188.072783][ T7123] usb 3-1: SerialNumber: syz
[  188.081383][ T7123] usb 3-1: config 0 descriptor??
[  188.094685][ T7123] pwc: Logitech ViewPort AV 100 webcam detected.
[  188.451829][ T7123] pwc: Failed to set LED on/off time (-71)
[  188.454444][ T7123] pwc: send_video_command error -71
[  188.457229][ T7123] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  188.461187][ T7123] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  188.467676][ T7123] usb 3-1: USB disconnect, device number 14
[  189.207953][ T9570] loop0: detected capacity change from 0 to 1024
[  189.222104][ T9570] EXT4-fs: inline encryption not supported
[  189.242308][ T9570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  189.255471][ T9570] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.301147][ T9570] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.1416: lblock 0 mapped to illegal pblock 0 (length 1)
[  189.310382][   T33] audit: type=1800 audit(1774163056.881:31): pid=9570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1416" name="file1" dev="loop0" ino=15 res=0 errno=0
[  189.327869][ T9570] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.1416: lblock 0 mapped to illegal pblock 0 (length 1)
[  189.344862][ T7120] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  189.353462][ T9570] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  189.357529][ T9570] EXT4-fs (loop0): This should not happen!! Data will be lost
[  189.357529][ T9570] 
[  189.392325][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  189.503170][ T7120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  189.506172][ T7120] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  189.508716][ T7120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.522378][ T7120] usb 3-1: config 0 descriptor??
[  189.535031][ T7120] pwc: Askey VC010 type 2 USB webcam detected.
[  189.939096][ T7123] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  189.947100][ T7120] pwc: recv_control_msg error -32 req 02 val 2b00
[  189.952218][ T7120] pwc: recv_control_msg error -32 req 02 val 2700
[  189.958110][ T7120] pwc: recv_control_msg error -32 req 02 val 2c00
[  190.111132][ T7123] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  190.114899][ T7123] usb 1-1: config 0 has no interface number 0
[  190.119175][ T7123] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.139384][ T7123] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.143047][ T7123] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  190.147480][ T7123] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.163715][ T7120] pwc: recv_control_msg error -71 req 04 val 1300
[  190.167671][ T7120] pwc: recv_control_msg error -71 req 04 val 1400
[  190.172899][ T7123] usb 1-1: config 0 descriptor??
[  190.174183][ T7120] pwc: recv_control_msg error -71 req 02 val 2000
[  190.178563][ T7120] pwc: recv_control_msg error -71 req 02 val 2100
[  190.182048][ T7120] pwc: recv_control_msg error -71 req 04 val 1500
[  190.186017][ T7120] pwc: recv_control_msg error -71 req 02 val 2500
[  190.190888][ T7120] pwc: recv_control_msg error -71 req 02 val 2400
[  190.196175][ T7120] pwc: recv_control_msg error -71 req 02 val 2600
[  190.199901][ T7120] pwc: recv_control_msg error -71 req 02 val 2900
[  190.202683][ T7120] pwc: recv_control_msg error -71 req 02 val 2800
[  190.205382][ T7120] pwc: recv_control_msg error -71 req 04 val 1100
[  190.208323][ T7120] pwc: recv_control_msg error -71 req 04 val 1200
[  190.220994][ T7120] pwc: Registered as video103.
[  190.229263][ T7120] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12
[  190.249482][ T7120] usb 3-1: USB disconnect, device number 15
[  190.604494][ T7123] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1
[  190.613506][ T7123] hid_prodikeys: hid-prodikeys: failed to find output report
[  190.613506][ T7123] 
[  190.801260][ T7111] usb 1-1: USB disconnect, device number 16
[  191.058727][ T9605] loop2: detected capacity change from 0 to 32768
[  191.068524][ T9605] OCFS2: ERROR (device loop2): int ocfs2_get_clusters_nocache(struct inode *, struct buffer_head *, u32, unsigned int *, struct ocfs2_extent_rec *, unsigned int *): Inode 75 has an invalid extent (next_free_rec 32, count 19)
[  191.076212][ T9605] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  191.079881][ T9605] OCFS2: File system is now read-only.
[  191.082809][ T9605] (syz.2.1430,9605,1):ocfs2_get_clusters:634 ERROR: status = -30
[  191.085154][ T9605] (syz.2.1430,9605,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[  191.088046][ T9605] (syz.2.1430,9605,1):ocfs2_bmap:469 ERROR: get_blocks() failed, block = 0
[  191.091307][ T9605] (syz.2.1430,9605,1):ocfs2_bmap:470 ERROR: status = -30
[  191.093897][ T9605] jbd2_journal_init_inode: Cannot locate journal superblock
[  191.096405][ T9605] (syz.2.1430,9605,1):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  191.100081][ T9605] (syz.2.1430,9605,1):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  191.103535][ T9605] (syz.2.1430,9605,1):ocfs2_check_volume:2432 ERROR: status = -22
[  191.106495][ T9605] (syz.2.1430,9605,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  191.112725][ T9605] (syz.2.1430,9605,1):ocfs2_fill_super:1177 ERROR: status = -22
[  191.370373][ T9621] loop0: detected capacity change from 0 to 164
[  191.378466][ T9621] rock: directory entry would overflow storage
[  191.381970][ T9621] rock: sig=0x66, size=4, remaining=3
[  191.386833][ T9621] rock: directory entry would overflow storage
[  191.395326][ T9621] rock: sig=0x66, size=4, remaining=3
[  191.451195][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'.
[  191.454670][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1439'.
[  191.551536][ T9629] loop0: detected capacity change from 0 to 2048
[  191.572926][ T9629] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  191.596520][ T9629] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.592240][  T976] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  192.726593][ T9659] loop3: detected capacity change from 0 to 40427
[  192.731135][ T9659] F2FS-fs: inline encryption not supported
[  192.735165][ T9659] F2FS-fs (loop3): build fault injection rate: 6
[  192.737974][ T9659] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  192.741272][ T9659] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of get_checkpoint_version+0x3e/0x400
[  192.744755][ T9659] F2FS-fs (loop3): invalid crc value
[  192.750481][ T9659] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of build_curseg+0x18ea/0x30c0
[  192.754784][ T9659] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  192.763655][ T9659] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  192.770803][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  192.781984][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  192.782824][  T976] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  192.803564][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  192.818975][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  192.822681][ T9659] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_iget+0x814/0x5dc0
[  192.827576][ T9659] F2FS-fs (loop3): Failed to read root inode
[  192.831918][  T976] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1
[  192.840769][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.843747][  T976] usb 3-1: Product: syz
[  192.845711][  T976] usb 3-1: Manufacturer: syz
[  192.859386][  T976] usb 3-1: SerialNumber: syz
[  192.868181][  T976] usb 3-1: config 0 descriptor??
[  193.099296][  T976] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[  193.102465][  T976] powermate 3-1:0.0: probe with driver powermate failed with error -5
[  193.114291][  T976] usb 3-1: USB disconnect, device number 16
[  193.154269][ T9667] loop0: detected capacity change from 0 to 32768
[  193.221254][ T9667] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.242920][ T9667] XFS (loop0): Ending clean mount
[  193.290426][ T5809] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.775466][ T9699] loop0: detected capacity change from 0 to 256
[  193.787050][ T9699] FAT-fs (loop0): Directory bread(block 1285) failed
[  193.791487][ T9699] FAT-fs (loop0): Directory bread(block 1286) failed
[  193.794069][ T9699] FAT-fs (loop0): Directory bread(block 1287) failed
[  193.796888][ T9699] FAT-fs (loop0): Directory bread(block 1288) failed
[  193.805137][ T9699] FAT-fs (loop0): Directory bread(block 1285) failed
[  193.808644][ T9699] FAT-fs (loop0): Directory bread(block 1286) failed
[  193.811039][ T9699] FAT-fs (loop0): Directory bread(block 1287) failed
[  193.813296][ T9699] FAT-fs (loop0): Directory bread(block 1288) failed
[  193.817200][ T9699] FAT-fs (loop0): Directory bread(block 1285) failed
[  193.821515][ T9699] FAT-fs (loop0): Directory bread(block 1286) failed
[  193.959055][  T976] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  194.137938][  T976] usb 3-1: config 219 has an invalid interface number: 151 but max is 0
[  194.146740][  T976] usb 3-1: config 219 has no interface number 0
[  194.154600][  T976] usb 3-1: config 219 interface 151 has no altsetting 0
[  194.155657][ T9718] overlayfs: conflicting options: nfs_export=on,index=off
[  194.161440][  T976] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2d.d8
[  194.164545][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.167887][  T976] usb 3-1: Product: syz
[  194.435475][  T976] usb 3-1: Manufacturer: syz
[  194.437218][  T976] usb 3-1: SerialNumber: syz
[  194.720263][  T976] usbsevseg 3-1:219.151: USB 7 Segment device now attached
[  194.726056][  T976] usb 3-1: USB disconnect, device number 17
[  194.732613][  T976] usbsevseg 3-1:219.151: USB 7 Segment now disconnected
[  195.491575][ T9735] loop0: detected capacity change from 0 to 32768
[  195.526558][ T9741] netlink: 'syz.3.1484': attribute type 3 has an invalid length.
[  195.532704][ T9735] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.576032][ T9735] XFS (loop0): Ending clean mount
[  195.593786][ T9747] ALSA: mixer_oss: invalid OSS volume ''
[  195.635586][ T5809] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.946907][ T9761] loop2: detected capacity change from 0 to 128
[  195.976722][ T9761] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  195.995891][ T9761] ext4 filesystem being mounted at /501/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  196.005276][ T9755] loop0: detected capacity change from 0 to 32768
[  196.017220][ T9755] JBD2: Ignoring recovery information on journal
[  196.072947][ T5814] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.101881][ T9755] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  196.135406][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1493'.
[  196.138051][ T9767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[  196.178432][   T33] audit: type=1804 audit(1774163063.771:32): pid=9755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1487" name="/newroot/461/file1/bus" dev="loop0" ino=17058 res=1 errno=0
[  196.240316][ T9751] loop3: detected capacity change from 0 to 40427
[  196.243640][ T5809] ocfs2: Unmounting device (7,0) on (node local)
[  196.246827][ T9751] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  196.252797][ T9751] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  196.256726][ T9751] F2FS-fs (loop3): invalid crc_offset: 33558524
[  196.384798][ T9751] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.398504][ T9751] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  196.405601][ T9751] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  197.006377][ T9802] loop3: detected capacity change from 0 to 256
[  197.013409][ T9802] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  197.029081][ T7123] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  197.069318][ T7120] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  197.182258][ T7123] usb 3-1: config index 0 descriptor too short (expected 235, got 227)
[  197.185457][ T7123] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  197.189430][ T7123] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  197.193377][ T7123] usb 3-1: config 220 has no interface number 2
[  197.195751][ T7123] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  197.200782][ T7123] usb 3-1: config 220 interface 0 has no altsetting 0
[  197.203607][ T7123] usb 3-1: config 220 interface 76 has no altsetting 0
[  197.206247][ T7123] usb 3-1: config 220 interface 1 has no altsetting 0
[  197.212443][ T7123] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  197.216045][ T7123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.219884][ T7120] usb 1-1: Using ep0 maxpacket: 8
[  197.220322][ T7123] usb 3-1: Product: syz
[  197.223147][ T7123] usb 3-1: Manufacturer: syz
[  197.223829][ T7120] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  197.226272][ T7123] usb 3-1: SerialNumber: syz
[  197.228131][ T7120] usb 1-1: config 0 has no interface number 0
[  197.232661][ T7120] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  197.237911][ T7120] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  197.245347][ T7120] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  197.249630][ T7120] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  197.254886][ T7120] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  197.258489][ T7120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.264463][ T7120] usb 1-1: config 0 descriptor??
[  197.275869][ T7120] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  197.453341][ T7123] usb 3-1: selecting invalid altsetting 0
[  197.456197][ T7123] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  197.459452][ T7123] uvcvideo 3-1:220.0: No valid video chain found.
[  197.467737][ T7123] usb 3-1: selecting invalid altsetting 0
[  197.470717][ T7123] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  197.480369][ T7123] usb 3-1: USB disconnect, device number 18
[  197.564986][ T7111] usb 1-1: USB disconnect, device number 17
[  197.568091][ T9794] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19
[  197.576141][ T7111] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  198.005543][ T9810] loop3: detected capacity change from 0 to 1024
[  198.008807][ T9810] hfsplus: creator requires a 4 character value
[  198.577935][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  198.581539][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'.
[  198.640354][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1527'.
[  198.643812][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'.
[  198.774831][ T7123] IPVS: starting estimator thread 0...
[  198.780500][ T9850] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  198.783622][    C1] IPVS: wlc: FWM 3 0x00000003 - no destination available
[  198.799030][ T7111] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  198.819120][ T7110] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  198.869251][ T9851] IPVS: using max 53 ests per chain, 127200 per kthread
[  198.969097][ T7111] usb 1-1: Using ep0 maxpacket: 8
[  198.972320][ T7110] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  198.976185][ T7110] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.981797][ T7111] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  198.984176][ T7110] usb 4-1: config 0 descriptor??
[  198.991680][ T7111] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  198.992270][ T7110] gspca_main: cpia1-2.14.0 probing 0813:0001
[  198.995183][ T7111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.008232][ T7111] usb 1-1: config 0 descriptor??
[  199.218522][ T7053] wlan1: Trigger new scan to find an IBSS to join
[  199.325161][ T7111] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  199.616180][ T7110] gspca_cpia1: usb_control_msg 03, error -71
[  199.621930][ T7110] gspca_cpia1: usb_control_msg 01, error -71
[  199.624935][ T7110] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  199.633331][ T7110] usb 4-1: USB disconnect, device number 4
[  199.746221][ T7120] usb 1-1: USB disconnect, device number 18
[  199.746252][    C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19
[  199.775062][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  199.778338][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  200.286059][ T9871] loop2: detected capacity change from 0 to 32768
[  200.319875][ T9871] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.344989][ T9871] XFS (loop2): Ending clean mount
[  200.355364][ T9871] XFS (loop2): Quotacheck needed: Please wait.
[  200.413159][ T9871] XFS (loop2): Quotacheck: Done.
[  200.426308][ T9888] erspan0: entered promiscuous mode
[  200.433624][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1542'.
[  200.534207][ T5814] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  200.913166][ T9904] loop3: detected capacity change from 0 to 128
[  200.931286][ T9904] ufs: You didn't specify the type of your ufs filesystem
[  200.931286][ T9904] 
[  200.931286][ T9904] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  200.931286][ T9904] 
[  200.931286][ T9904] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  200.955100][ T9904] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  201.026776][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'.
[  201.036821][ T9910] bridge1: entered promiscuous mode
[  201.123773][ T9914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1555'.
[  201.244560][ T9916] sp0: Synchronizing with TNC
[  201.316242][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1556'.
[  202.050847][ T9949] loop2: detected capacity change from 0 to 1024
[  202.081466][ T9949] hfsplus: b-tree write err: -5, ino 2
[  202.108056][ T1202] hfsplus: b-tree write err: -5, ino 25
[  202.111042][ T1202] hfsplus: b-tree write err: -5, ino 4
[  202.113338][ T1202] hfsplus: b-tree write err: -5, ino 2
[  202.115637][ T1202] hfsplus: b-tree write err: -5, ino 26
[  202.187112][ T9952] netlink: 'syz.0.1572': attribute type 9 has an invalid length.
[  202.251530][ T1202] wlan1: Trigger new scan to find an IBSS to join
[  202.315457][ T9961] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size
[  202.366438][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1577'.
[  203.532725][   T33] audit: type=1326 audit(1774163070.991:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.1581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  203.598343][   T33] audit: type=1326 audit(1774163070.991:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.1581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  203.633958][   T33] audit: type=1326 audit(1774163071.051:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.1581" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  203.643341][   T33] audit: type=1326 audit(1774163071.051:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.1581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  203.655700][   T33] audit: type=1326 audit(1774163071.051:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.0.1581" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f05d9c799 code=0x7ffc0000
[  203.807773][ T9992] loop2: detected capacity change from 0 to 4096
[  203.826664][ T9997] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  203.899535][ T7111] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  204.061716][ T7111] usb 1-1: Using ep0 maxpacket: 8
[  204.066645][ T7111] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  204.069770][ T7111] usb 1-1: config 0 has no interface number 0
[  204.076914][ T7111] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  204.080913][ T7111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.089291][ T7111] usb 1-1: Product: syz
[  204.091012][ T7111] usb 1-1: Manufacturer: syz
[  204.092911][ T7111] usb 1-1: SerialNumber: syz
[  204.110345][ T7111] usb 1-1: config 0 descriptor??
[  204.142228][ T6578] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00
[  204.315778][T10023] netlink: 'syz.3.1599': attribute type 2 has an invalid length.
[  204.328367][ T7111] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  204.354541][ T7111] usb 1-1: USB disconnect, device number 19
[  204.361470][T10025] ptrace attach of "/syz-executor exec"[5814] was attempted by "u+O'Ul$WBivQȰ&*\x07 -:Ma{MrϰZT!kW_~{&Tvf<{tV\x0d71%^~y\x5c>qX\x09aEx~$R~sۄ9!+làvs\x22~Uxa*fPyw.6iB֡O ^$ w*? ;-b?3ASѭKkr\x0aؙ:y>sy\x1bSD8\x1bu\x0a2.bfhݹ5cM+wk|(Hn'cCj<,ᨊr.u(lnvNFQ+&iЁk&ȍĤ>貥fbRs󷖾\x0c~1%^?\x1bY\x1bg-3˩VO|\x0a᳷[.'3DAzrcO ,;j!poUe{s%@OtnZbB&+4?pRN!YˑNjgiq[6hvN|ՠxiPo54(%* ħlLUD䧥7`z8h=-ei}\x5c\x09v:-ם\x099.VE&\x09   b&hΚA`R&֕AO ݛ/\x1bL\x07&DuoO^C'S1 @#^^V156r詴tU\x0c0鴲>ŪMVj\x07=}]MXUtY[%>p*js;x9K4m{yWp5p\x0cV\x0c\x0a(UηX8'C}ħJ=6Ww&u]8?+3q
[  204.823127][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1612'.
[  204.918640][ T2399] pvrusb2: request_firmware fatal error with code=-110
[  204.928432][ T2399] pvrusb2: Failure uploading firmware1
[  204.932515][ T2399] pvrusb2: Device initialization was not successful.
[  204.936211][ T2399] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  204.944496][T10048] netlink: 'syz.3.1612': attribute type 2 has an invalid length.
[  204.947422][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1612'.
[  204.959728][ T2399] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  204.967421][ T2399] pvrusb2: Failed to submit write-control URB status=-19
[  204.967785][ T5873] pvrusb2: Device being rendered inoperable
[  204.983438][ T2399] usb 2-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2
[  205.010130][ T2399] usb 2-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw
[  205.264793][ T7111] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  205.421395][ T7111] usb 1-1: unable to get BOS descriptor or descriptor too short
[  205.425517][ T7111] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  205.439517][ T7111] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  205.453510][ T7111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.455486][T10080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'.
[  205.457548][ T7111] usb 1-1: Product: syz
[  205.463906][ T7111] usb 1-1: Manufacturer: syz
[  205.466066][ T7111] usb 1-1: SerialNumber: syz
[  205.469832][ T7115] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  205.556603][T10084] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1629'.
[  205.626356][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  205.632825][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  205.640094][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.654599][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  205.661920][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  205.675662][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  205.679796][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  205.684560][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.690427][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  205.702050][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  205.711217][T10090] loop2: detected capacity change from 0 to 512
[  205.713107][ T7111] snd-ua101 1-1:1.1: invalid format type
[  205.718184][ T7115] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  205.723149][ T7111] snd-ua101 1-1:1.0: invalid num_altsetting
[  205.727583][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  205.736210][ T7115] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  205.741301][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  205.746026][ T7115] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  205.759901][ T7115] usb 4-1: string descriptor 0 read error: -22
[  205.762390][ T7115] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  205.765752][ T7115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.772244][ T7111] usb 1-1: USB disconnect, device number 20
[  205.790697][ T7115] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  206.610258][T10099] loop0: detected capacity change from 0 to 65536
[  206.629581][T10099] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  206.641846][T10099] XFS (loop0): Ending clean mount
[  206.701232][ T5809] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  207.205595][T10122] overlayfs: failed to clone lowerpath
[  207.239635][ T7119] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  207.398965][ T7119] usb 3-1: Using ep0 maxpacket: 16
[  207.408022][ T7119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.412502][ T7119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.417736][ T7119] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00
[  207.423149][ T7119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.439430][ T7119] usb 3-1: config 0 descriptor??
[  207.863155][ T7119] hid (null): bogus close delimiter
[  207.878548][ T7119] wacom 0003:056A:0084.000A: bogus close delimiter
[  207.881714][ T7119] wacom 0003:056A:0084.000A: item 0 4 2 10 parsing failed
[  207.885579][ T7119] wacom 0003:056A:0084.000A: parse failed
[  207.887933][ T7119] wacom 0003:056A:0084.000A: probe with driver wacom failed with error -22
[  208.013326][ T7119] usb 4-1: USB disconnect, device number 5
[  208.095632][ T7111] usb 3-1: USB disconnect, device number 19
[  208.501133][T10129] sp0: Synchronizing with TNC
[  208.516539][T10128] [U] 
[  208.839783][ T7111] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  209.002528][ T7111] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  209.006970][ T7111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.024067][ T7111] usb 4-1: config 0 descriptor??
[  209.102265][T10147] loop2: detected capacity change from 0 to 32768
[  209.117987][T10147] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.159979][T10147] XFS (loop2): Ending clean mount
[  209.181856][ T5814] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.453264][ T7111] usb 4-1: Cannot set MAC address
[  209.455421][ T7111] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  209.468380][ T7111] usb 4-1: USB disconnect, device number 6
[  210.014347][T10172] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1663'.
[  210.018161][T10172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1663'.
[  210.109318][ T7111] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  210.161346][T10179] loop3: detected capacity change from 0 to 16
[  210.193793][T10179] cramfs: Error -3 while decompressing!
[  210.197654][T10179] cramfs: ffffffff9a3a7d08(27)->ffff8881be745000(4096)
[  210.203615][T10179] cramfs: Error -3 while decompressing!
[  210.205658][T10179] cramfs: ffffffff9a3a7d23(16)->ffff8881abf38000(4096)
[  210.212160][T10179] cramfs: Error -3 while decompressing!
[  210.214320][T10179] cramfs: ffffffff9a3a7d08(27)->ffff8881be745000(4096)
[  210.216971][   T33] audit: type=1800 audit(1774163077.811:38): pid=10179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1666" name="file3" dev="loop3" ino=348 res=0 errno=0
[  210.273006][ T7111] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  210.293193][ T7111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.300442][ T7111] usb 3-1: Product: syz
[  210.305198][ T7111] usb 3-1: Manufacturer: syz
[  210.308341][ T7111] usb 3-1: SerialNumber: syz
[  210.322025][ T7111] usb 3-1: config 0 descriptor??
[  210.535083][ T7111] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[  210.562153][ T7111] peak_usb 3-1:0.0: unable to read PCAN-USB FD firmware info (err -32)
[  210.621190][ T7111] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -32
[  210.637036][ T7111] usb 3-1: USB disconnect, device number 20
[  210.837641][T10201] netlink: 'syz.3.1677': attribute type 21 has an invalid length.
[  211.753767][T10220] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1684'.
[  211.774709][T10220] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1684'.
[  212.104872][T10227] loop0: detected capacity change from 0 to 4096
[  212.109986][T10227] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  212.128271][T10227] ntfs3(loop0): ino=18, mi_enum_attr
[  212.130889][T10227] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  212.290471][T10238] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1691'.
[  212.387782][T10241] loop0: detected capacity change from 0 to 4096
[  212.399898][T10241] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  212.406529][T10245] loop2: detected capacity change from 0 to 512
[  212.409658][T10241] ntfs3(loop0): volume is dirty and "force" flag is not set!
[  212.439483][T10245] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  212.442264][T10245] EXT4-fs (loop2): orphan cleanup on readonly fs
[  212.444829][T10245] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  212.523029][T10245] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  212.530620][T10245] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #16: comm syz.2.1695: invalid fast symlink length 9000
[  212.549106][T10245] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  212.553431][T10245] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1695: couldn't read orphan inode 16 (err -117)
[  212.561130][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  212.561164][    C0] EXT4-fs (loop2): initial error at time 1774163080: ext4_orphan_get:1391: inode 16
[  212.561189][    C0] EXT4-fs (loop2): last error at time 1774163080: ext4_orphan_get:1391: inode 16
[  212.595385][T10245] loop2: lost filesystem error report for type 5 error -117
[  212.597130][T10245] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  212.648372][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.723503][T10262] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  212.949153][ T7111] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  213.101606][ T7111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.104952][ T7111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.108205][ T7111] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  213.111607][ T7111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.116291][ T7111] usb 3-1: config 0 descriptor??
[  213.158974][ T7123] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  213.308989][ T7123] usb 4-1: Using ep0 maxpacket: 16
[  213.314109][ T7123] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.318312][ T7123] usb 4-1: config 0 interface 0 has no altsetting 0
[  213.320983][ T7123] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  213.324617][ T7123] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.337292][ T7123] usb 4-1: config 0 descriptor??
[  213.726454][ T7111] hid-led 0003:27B8:01ED.000B: probe with driver hid-led failed with error -71
[  213.742335][ T7111] usb 3-1: USB disconnect, device number 21
[  213.794677][ T7123] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  214.630283][T10289] loop2: detected capacity change from 0 to 2048
[  214.656138][T10289] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  215.381977][T10299] loop3: detected capacity change from 0 to 32768
[  215.407370][T10299] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 4105: bits per cluster 2048
[  215.415621][T10299] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  215.419881][T10299] OCFS2: File system is now read-only.
[  215.422114][T10299] (syz.3.1718,10299,0):ocfs2_read_locked_inode:599 ERROR: status = -30
[  215.425531][T10299] (syz.3.1718,10299,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  215.430962][T10299] (syz.3.1718,10299,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=8, slot=0
[  215.434798][T10299] (syz.3.1718,10299,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  215.438207][T10299] (syz.3.1718,10299,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  215.444877][T10299] (syz.3.1718,10299,0):ocfs2_fill_super:1177 ERROR: status = -30
[  216.027212][T10312] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1723'.
[  216.761093][T10319] loop3: detected capacity change from 0 to 32768
[  216.784442][T10319] (syz.3.1726,10319,1):ocfs2_verify_heartbeat:839 ERROR: Heartbeat has to be started to mount a read-write clustered device.
[  216.812716][T10319] (syz.3.1726,10319,1):ocfs2_fill_super:1177 ERROR: status = -22
[  216.826057][T10325] loop2: detected capacity change from 0 to 32768
[  216.838051][T10325] XFS (loop2): Cannot mount filesystem with identical rtdev and ddev/logdev.
[  218.089829][   T54] Bluetooth: hci2: command tx timeout
[  218.307137][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.311387][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.538764][T10370] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.541545][T10370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  218.545372][T10370] IPv6: NLM_F_CREATE should be set when creating new route
[  218.550188][T10370] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  219.031282][T10372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'.
[  219.361562][T10382] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1754'.
[  219.418169][T10384] loop2: detected capacity change from 0 to 512
[  219.456376][T10384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  219.462675][T10384] ext4 filesystem being mounted at /601/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.514293][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  219.768935][T10393] netlink: 'syz.0.1758': attribute type 25 has an invalid length.
[  219.772697][T10393] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1758'.
[  220.617248][T10409] tmpfs: Bad value for 'mpol'
[  221.124061][T10422] loop0: detected capacity change from 0 to 32768
[  221.142236][T10422] JBD2: Ignoring recovery information on journal
[  221.154866][T10422] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  221.162609][T10422] JBD2: bad block at offset 32
[  221.171659][T10422] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  221.181832][T10422] OCFS2: ERROR (device loop0): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  221.195897][T10422] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  221.199932][T10422] OCFS2: File system is now read-only.
[  221.202601][T10422] (syz.0.1772,10422,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  221.206324][T10422] (syz.0.1772,10422,0):__ocfs2_claim_clusters:2532 ERROR: status = -30
[  221.213052][T10422] (syz.0.1772,10422,0):__ocfs2_claim_clusters:2540 ERROR: status = -30
[  221.216113][T10422] (syz.0.1772,10422,0):ocfs2_block_group_alloc_contig:506 ERROR: status = -30
[  221.221846][T10422] (syz.0.1772,10422,0):ocfs2_block_group_alloc:780 ERROR: status = -30
[  221.225576][T10422] (syz.0.1772,10422,0):ocfs2_block_group_alloc:833 ERROR: status = -30
[  221.232494][T10422] (syz.0.1772,10422,0):ocfs2_reserve_suballoc_bits:908 ERROR: status = -30
[  221.235868][T10422] (syz.0.1772,10422,0):ocfs2_reserve_suballoc_bits:925 ERROR: status = -30
[  221.239195][T10422] (syz.0.1772,10422,0):ocfs2_reserve_new_metadata_blocks:1065 ERROR: status = -30
[  221.243635][T10422] (syz.0.1772,10422,0):ocfs2_reserve_new_metadata_blocks:1088 ERROR: status = -30
[  221.251430][T10422] (syz.0.1772,10422,0):ocfs2_expand_inline_dir:2867 ERROR: status = -30
[  221.254849][T10422] (syz.0.1772,10422,0):ocfs2_extend_dir:3231 ERROR: status = -30
[  221.258627][T10422] (syz.0.1772,10422,0):ocfs2_prepare_dir_for_insert:4349 ERROR: status = -30
[  221.262158][T10422] (syz.0.1772,10422,0):ocfs2_mknod:302 ERROR: status = -30
[  221.265560][T10422] (syz.0.1772,10422,0):ocfs2_mknod:506 ERROR: status = -30
[  221.312998][ T5809] ocfs2: Unmounting device (7,0) on (node local)
[  221.633078][T10434] loop0: detected capacity change from 0 to 512
[  221.636689][T10434] EXT4-fs: Ignoring removed orlov option
[  221.649329][T10434] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  221.658281][T10434] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.1775: corrupted in-inode xattr: e_value size too large
[  221.669011][T10434] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  221.673131][T10434] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1775: couldn't read orphan inode 15 (err -117)
[  221.681451][    C0] EXT4-fs (loop0): error count since last fsck: 1
[  221.681471][    C0] EXT4-fs (loop0): initial error at time 1774163089: ext4_iget_extra_inode:5025: inode 15
[  221.681500][    C0] EXT4-fs (loop0): last error at time 1774163089: ext4_iget_extra_inode:5025: inode 15
[  221.694898][T10434] loop0: lost filesystem error report for type 5 error -117
[  221.697076][T10434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.857092][ T5809] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.115893][T10449] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  223.384820][   T54] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  223.388413][   T54] Bluetooth: hci2: Injecting HCI hardware error event
[  223.395520][ T5198] Bluetooth: hci2: hardware error 0x00
[  224.510758][T10511] loop2: detected capacity change from 0 to 4096
[  224.585157][T10511] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  224.588738][T10511] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  224.653459][T10513] loop2: detected capacity change from 0 to 8
[  224.673812][T10513] SQUASHFS error: Failed to read block 0x636: -5
[  224.676833][T10513] SQUASHFS error: Unable to read metadata cache entry [634]
[  224.680317][T10513] SQUASHFS error: Unable to read metadata cache entry [634]
[  224.683332][T10513] SQUASHFS error: Unable to read directory block [629:0]
[  224.783036][   T33] audit: type=1326 audit(1774163092.381:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10516 comm="syz.2.1815" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e07b9c799 code=0x0
[  224.965146][T10523] batman_adv: batadv0: Adding interface: ipvlan2
[  224.967541][T10523] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  224.984295][T10523] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  225.427316][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  225.442169][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  226.014009][ T5198] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  226.706215][T10550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'.
[  226.968068][T10556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1833'.
[  227.899301][T10559] loop0: detected capacity change from 0 to 32768
[  228.399222][   T33] audit: type=1326 audit(1774163095.991:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10578 comm="syz.3.1843" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1dad9c799 code=0x0
[  228.600013][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'.
[  228.622079][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1844'.
[  228.890714][T10581] loop0: detected capacity change from 0 to 32768
[  228.901275][ T7110] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  228.916995][T10581] JBD2: Ignoring recovery information on journal
[  229.004142][T10581] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  229.029764][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.033731][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.048203][T10581] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has bit count 2061 but max bitmap bits of 2048
[  229.049108][ T7110] usb 3-1: Using ep0 maxpacket: 16
[  229.060810][T10581] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  229.066798][ T7110] usb 3-1: unable to get BOS descriptor or descriptor too short
[  229.066865][T10581] OCFS2: File system is now read-only.
[  229.076361][T10581] (syz.0.1842,10581,1):ocfs2_search_chain:1888 ERROR: status = -30
[  229.087480][T10581] (syz.0.1842,10581,1):ocfs2_search_chain:2011 ERROR: status = -30
[  229.092025][ T7110] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40
[  229.094233][T10581] (syz.0.1842,10581,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30
[  229.095535][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.095559][ T7110] usb 3-1: Product: syz
[  229.095573][ T7110] usb 3-1: Manufacturer: syz
[  229.095586][ T7110] usb 3-1: SerialNumber: syz
[  229.097632][T10600] (syz.0.1842,10600,0):ocfs2_reconfigure:670 ERROR: Cannot remount RDWR filesystem due to previous errors.
[  229.102038][T10581] (syz.0.1842,10581,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30
[  229.137724][T10581] (syz.0.1842,10581,1):ocfs2_claim_new_inode:2392 ERROR: status = -30
[  229.144690][T10581] (syz.0.1842,10581,1):ocfs2_claim_new_inode:2407 ERROR: status = -30
[  229.149627][T10581] (syz.0.1842,10581,1):ocfs2_mknod_locked:642 ERROR: status = -30
[  229.153478][T10581] (syz.0.1842,10581,1):ocfs2_mknod:389 ERROR: status = -30
[  229.156930][T10581] (syz.0.1842,10581,1):ocfs2_mknod:506 ERROR: status = -30
[  229.163858][T10581] (syz.0.1842,10581,1):ocfs2_create:679 ERROR: status = -30
[  229.217997][ T5809] ocfs2: Unmounting device (7,0) on (node local)
[  229.342982][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1852'.
[  229.365997][ T7110] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  229.375141][ T7110] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  229.421635][ T7110] usb 3-1: USB disconnect, device number 22
[  229.481243][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.688712][T10610] loop0: detected capacity change from 0 to 4096
[  229.700289][T10610] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  229.756516][T10614] netlink: 'syz.3.1858': attribute type 1 has an invalid length.
[  229.782800][T10610] ntfs3(loop0): ino=b, mi_enum_attr
[  229.785587][T10610] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  229.799717][T10610] ntfs3(loop0): Failed to load $Extend (-22).
[  229.805261][T10610] ntfs3(loop0): Failed to initialize $Extend.
[  229.830677][T10614] 8021q: adding VLAN 0 to HW filter on device bond2
[  229.844695][T10614] bond1: (slave bond2): making interface the new active one
[  229.851928][T10614] bond1: (slave bond2): Enslaving as an active interface with an up link
[  229.857171][T10614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1858'.
[  229.862926][T10614] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.872187][T10610] ntfs3(loop0): ino=21, "freezer.parent_freezing" failed to extend initialized size to 208e24b.
[  230.218775][ T7110] libceph: connect (1)[c::]:6789 error -101
[  230.224655][ T7110] libceph: mon0 (1)[c::]:6789 connect error
[  230.231639][ T7110] libceph: connect (1)[c::]:6789 error -101
[  230.234773][ T7110] libceph: mon0 (1)[c::]:6789 connect error
[  230.251903][ T7112] libceph: connect (1)[c::]:6789 error -101
[  230.254105][ T7112] libceph: mon0 (1)[c::]:6789 connect error
[  230.298454][ T7112] libceph: connect (1)[c::]:6789 error -101
[  230.302195][ T7112] libceph: mon0 (1)[c::]:6789 connect error
[  230.389121][ T7123] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  230.494196][ T7110] libceph: connect (1)[c::]:6789 error -101
[  230.496692][ T7110] libceph: mon0 (1)[c::]:6789 connect error
[  230.521380][ T7112] libceph: connect (1)[c::]:6789 error -101
[  230.523818][ T7112] libceph: mon0 (1)[c::]:6789 connect error
[  230.538987][ T7123] usb 3-1: Using ep0 maxpacket: 8
[  230.542693][ T7123] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  230.546172][ T7123] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  230.549119][ T7123] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.557565][ T7123] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  230.561038][ T7123] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.563735][ T7123] usb 3-1: Product: syz
[  230.565080][ T7123] usb 3-1: Manufacturer: syz
[  230.566795][ T7123] usb 3-1: SerialNumber: syz
[  230.569881][ T7112] libceph: connect (1)[c::]:6789 error -101
[  230.582576][ T7112] libceph: mon0 (1)[c::]:6789 connect error
[  230.793112][ T7123] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  230.796827][ T7123] cdc_ncm 3-1:1.0: bind() failure
[  230.801669][ T7123] usbtest 3-1:1.0: Linux user mode ISO test driver
[  230.804006][ T7123] usbtest 3-1:1.0: high-speed {control iso-in} tests (+alt)
[  230.818090][ T7123] usb 3-1: USB disconnect, device number 23
[  231.009595][  T976] libceph: connect (1)[c::]:6789 error -101
[  231.013213][  T976] libceph: mon0 (1)[c::]:6789 connect error
[  231.020376][T10634] ceph: No mds server is up or the cluster is laggy
[  231.020508][T10631] ceph: No mds server is up or the cluster is laggy
[  231.030678][ T7123] libceph: connect (1)[c::]:6789 error -101
[  231.032841][ T7123] libceph: mon0 (1)[c::]:6789 connect error
[  231.034987][T10637] ceph: No mds server is up or the cluster is laggy
[  231.100584][ T7123] libceph: connect (1)[c::]:6789 error -101
[  231.103311][ T7123] libceph: mon0 (1)[c::]:6789 connect error
[  231.181866][T10644] loop0: detected capacity change from 0 to 256
[  231.190775][T10644] exfat: Deprecated parameter 'utf8'
[  231.193077][T10644] exfat: Deprecated parameter 'utf8'
[  231.229936][T10644] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  231.537615][T10655] netlink: 'syz.0.1872': attribute type 5 has an invalid length.
[  231.541654][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'.
[  231.722820][T10665] bond2: entered allmulticast mode
[  231.951787][T10674] team0: Port device veth0_to_bond added
[  232.023122][T10667] loop3: detected capacity change from 0 to 32768
[  232.058813][T10667] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.072451][T10682] netlink: 'syz.0.1879': attribute type 1 has an invalid length.
[  232.077075][T10667] XFS (loop3): Ending clean mount
[  232.095223][T10682] netlink: 'syz.0.1879': attribute type 1 has an invalid length.
[  232.412527][T10659] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  232.416445][T10659] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  232.474513][ T8697] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.588642][T10697] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1885'.
[  233.460816][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.471160][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.689997][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[  233.810268][T10737] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1901'.
[  234.191202][   T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  234.626954][T10739] loop2: detected capacity change from 0 to 32768
[  234.651658][T10739] JBD2: Ignoring recovery information on journal
[  234.701848][T10739] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  234.802325][ T5814] ocfs2: Unmounting device (7,2) on (node local)
[  235.062086][T10759] loop3: detected capacity change from 0 to 128
[  235.071246][T10759] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  235.090323][T10759] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  235.162812][ T1202] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  235.226127][T10761] loop2: detected capacity change from 0 to 4096
[  235.416296][T10761] ntfs3(loop2): ino=21, "file1" failed to extend initialized size to 8000c61.
[  235.774141][ T5198] Bluetooth: hci1: command 0x0406 tx timeout
[  236.233380][T10801] loop2: detected capacity change from 0 to 64
[  236.412802][T10806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1924'.
[  236.476294][T10806] 8021q: adding VLAN 0 to HW filter on device bond2
[  236.542181][T10806] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  236.548027][T10806] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  237.105262][T10814] loop0: detected capacity change from 0 to 2048
[  237.147235][T10814] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.602345][T10820] loop0: detected capacity change from 0 to 256
[  237.658480][T10820] FAT-fs (loop0): Directory bread(block 64) failed
[  237.660881][T10820] FAT-fs (loop0): Directory bread(block 65) failed
[  237.663091][T10820] FAT-fs (loop0): Directory bread(block 66) failed
[  237.665126][T10820] FAT-fs (loop0): Directory bread(block 67) failed
[  237.667497][T10820] FAT-fs (loop0): Directory bread(block 68) failed
[  237.673560][T10820] FAT-fs (loop0): Directory bread(block 69) failed
[  237.676228][T10820] FAT-fs (loop0): Directory bread(block 70) failed
[  237.687538][T10820] FAT-fs (loop0): Directory bread(block 71) failed
[  237.697453][T10820] FAT-fs (loop0): Directory bread(block 72) failed
[  237.709074][T10820] FAT-fs (loop0): Directory bread(block 73) failed
[  238.083400][T10835] netlink: 'syz.0.1936': attribute type 3 has an invalid length.
[  238.091037][T10836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1937'.
[  238.250218][T10849] overlayfs: failed to clone upperpath
[  238.256816][T10849] overlayfs: failed to clone upperpath
[  238.463413][T10862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  238.483993][T10866] netlink: 'syz.2.1952': attribute type 3 has an invalid length.
[  238.486915][T10866] netlink: 'syz.2.1952': attribute type 1 has an invalid length.
[  238.493077][T10866] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1952'.
[  238.810342][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.815023][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.019005][ T7123] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  239.191808][ T7123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  239.196076][ T7123] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  239.200149][ T7123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.207036][ T7123] usb 3-1: config 0 descriptor??
[  239.367411][T10882] syz_tun: entered allmulticast mode
[  239.377490][T10882] ubi31: attaching mtd0
[  239.391441][T10882] ubi31: scanning is finished
[  239.393308][T10882] ubi31: empty MTD device detected
[  239.417521][T10878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.421048][T10878] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.426651][ T7123] usbhid 3-1:0.0: can't add hid device: -71
[  239.428724][ T7123] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  239.434009][ T7123] usb 3-1: USB disconnect, device number 24
[  239.536371][T10882] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  239.539835][T10882] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  239.543056][T10882] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  239.545859][T10882] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  239.551232][T10882] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  239.554402][T10882] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  239.557730][T10882] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2706560898
[  239.562192][T10882] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  239.569258][T10883] ubi31: background thread "ubi_bgt31d" started, PID 10883
[  239.577150][T10881] syz_tun: left allmulticast mode
[  239.622518][T10885] netlink: 'syz.3.1961': attribute type 83 has an invalid length.
[  239.735752][T10891] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1964'.
[  239.869909][ T7123] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  239.905417][T10897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.909774][T10897] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.029127][ T7123] usb 3-1: Using ep0 maxpacket: 16
[  240.033052][ T7123] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.036350][ T7123] usb 3-1: config 0 interface 0 has no altsetting 0
[  240.038416][ T7123] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  240.041711][ T7123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.057664][ T7123] usb 3-1: config 0 descriptor??
[  240.472634][ T7123] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  240.593024][T10902] loop3: detected capacity change from 0 to 2048
[  240.614442][T10902] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.873898][ T7112] usb 3-1: USB disconnect, device number 25
[  241.417930][T10909] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  241.858054][T10919] loop3: detected capacity change from 0 to 32768
[  241.865004][T10919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1976 (10919)
[  241.884333][T10919] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  241.888218][T10919] BTRFS info (device loop3): using crc32c checksum algorithm
[  242.006474][T10936] loop2: detected capacity change from 0 to 256
[  242.016889][T10936] vfat: Unknown parameter '000000000000000000000x0000000000000000'
[  242.096152][T10919] BTRFS info (device loop3): enabling ssd optimizations
[  242.098683][T10919] BTRFS info (device loop3): turning on flush-on-commit
[  242.101466][T10919] BTRFS info (device loop3): enabling free space tree
[  242.103989][T10919] BTRFS info (device loop3): enabling auto defrag
[  242.106437][T10919] BTRFS info (device loop3): use lzo compression, level 1
[  242.109289][T10919] BTRFS info (device loop3): max_inline set to 4096
[  242.806433][ T8697] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  242.881061][T10957] F2FS-fs: Conflicting test_dummy_encryption options
[  242.962569][T10929] loop0: detected capacity change from 0 to 32768
[  243.060637][T10964] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.077529][T10929] overlayfs: upper fs needs to support d_type.
[  243.082279][T10929] overlayfs: upper fs does not support tmpfile.
[  243.111539][T10929] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  243.192675][T10964] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.195377][T10964] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.254203][T10964] team0: Port device bridge0 added
[  243.711122][T10983] loop3: detected capacity change from 0 to 1024
[  243.745213][T10983] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  243.749839][T10983] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  243.755118][T10983] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  243.765215][T10983] EXT4-fs error (device loop3): ext4_get_journal_inode:5863: inode #5: comm syz.3.1997: unexpected bad inode w/o EXT4_IGET_BAD
[  243.770251][T10983] loop3: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117
[  243.770641][T10983] EXT4-fs (loop3): no journal found
[  243.776367][T10983] EXT4-fs (loop3): can't get journal size
[  243.778952][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  243.781391][    C0] EXT4-fs (loop3): initial error at time 1774163111: ext4_get_journal_inode:5863: inode 5
[  243.785085][    C0] EXT4-fs (loop3): last error at time 1774163111: ext4_get_journal_inode:5863: inode 5
[  243.824105][T10983] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  243.960657][ T8697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.326582][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  244.337216][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  244.350132][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  244.354384][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  244.357913][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  244.374100][T10977] loop2: detected capacity change from 0 to 32768
[  244.416075][T10977] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  244.608209][T10997] loop3: detected capacity change from 0 to 4096
[  244.609548][ T5814] ocfs2: Unmounting device (7,2) on (node local)
[  244.888202][ T5839] vlan2: left allmulticast mode
[  244.908063][ T5839] bond0: left allmulticast mode
[  244.919757][ T5839] bond_slave_0: left allmulticast mode
[  244.921748][ T5839] bond_slave_1: left allmulticast mode
[  244.923737][ T5839] vlan2: left promiscuous mode
[  244.925582][ T5839] bond0: left promiscuous mode
[  244.927366][ T5839] bond_slave_0: left promiscuous mode
[  244.935257][T11007] loop3: detected capacity change from 0 to 512
[  244.961140][ T5839] bond_slave_1: left promiscuous mode
[  244.967696][ T5839] bridge0: port 3(vlan2) entered disabled state
[  244.984301][ T5839] bridge_slave_1: left allmulticast mode
[  244.992692][ T5839] bridge_slave_1: left promiscuous mode
[  244.998077][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.015859][T11007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  245.030976][T11007] ext4 filesystem being mounted at /366/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  245.053183][ T5839] bridge_slave_0: left allmulticast mode
[  245.055547][ T5839] bridge_slave_0: left promiscuous mode
[  245.058007][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.258321][ T8697] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  245.333171][ T5839] bond1 (unregistering): (slave geneve2): Releasing active interface
[  245.458584][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  245.476936][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.487003][ T5839] bond0 (unregistering): Released all slaves
[  245.519897][ T5839] bond1 (unregistering): Released all slaves
[  245.522963][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.533425][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.537614][ T5839] bond2 (unregistering): Released all slaves
[  245.565370][T11009] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2006'.
[  245.766422][T10992] chnl_net:caif_netlink_parms(): no params data found
[  246.017438][T10992] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.020127][T10992] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.022827][T10992] bridge_slave_0: entered allmulticast mode
[  246.026171][T10992] bridge_slave_0: entered promiscuous mode
[  246.035453][T10992] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.043121][T10992] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.046401][T10992] bridge_slave_1: entered allmulticast mode
[  246.053284][T10992] bridge_slave_1: entered promiscuous mode
[  246.133400][T10992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.185721][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.188547][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.219595][T10992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.283702][T10992] team0: Port device team_slave_0 added
[  246.290605][T10992] team0: Port device team_slave_1 added
[  246.324308][ T5839] hsr_slave_0: left promiscuous mode
[  246.326871][ T5839] hsr_slave_1: left promiscuous mode
[  246.330055][ T5839] batman_adv: batadv0: Removing interface: batadv_slave_1
[  246.489046][ T7110] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  246.496604][ T5198] Bluetooth: hci0: command tx timeout
[  246.596805][ T5839] team0 (unregistering): Port device team_slave_1 removed
[  246.611825][ T5839] team0 (unregistering): Port device team_slave_0 removed
[  246.643613][ T5839] team0 (unregistering): Port device veth0_to_bond removed
[  246.659035][ T7110] usb 3-1: Using ep0 maxpacket: 32
[  246.669807][ T7110] usb 3-1: config 4 has an invalid interface number: 228 but max is 0
[  246.673679][ T7110] usb 3-1: config 4 has no interface number 0
[  246.676913][ T7110] usb 3-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[  246.688987][ T7110] usb 3-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0
[  246.692127][ T7110] usb 3-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  246.696971][ T7110] usb 3-1: config 4 interface 228 has no altsetting 0
[  246.705378][ T7110] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[  246.713272][ T7110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.715834][ T7110] usb 3-1: Product: syz
[  246.717326][ T7110] usb 3-1: Manufacturer: syz
[  246.719528][ T7110] usb 3-1: SerialNumber: syz
[  246.911063][T10992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.913973][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.938524][T10992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.957937][T10992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.965203][T10992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  246.981893][T10992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.051528][ T7110] usb 3-1: USB disconnect, device number 26
[  247.100646][ T5813] udevd[5813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  247.137789][T10992] hsr_slave_0: entered promiscuous mode
[  247.156905][T10992] hsr_slave_1: entered promiscuous mode
[  247.358586][T11063] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2019'.
[  247.653273][T10992] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  247.657127][T11073] loop3: detected capacity change from 0 to 1024
[  247.669593][T11073] EXT4-fs: Invalid journal IO priority (must be 0-7)
[  247.674755][T10992] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  247.692988][T10992] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  247.699509][T10992] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  248.000019][T10992] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.025794][T10992] 8021q: adding VLAN 0 to HW filter on device team0
[  248.045319][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.048263][ T6581] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.075815][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.078694][ T6581] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.420363][T10992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.434792][T11110] loop3: detected capacity change from 0 to 2048
[  248.446932][T11110] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  248.480994][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2032'.
[  248.569373][ T5198] Bluetooth: hci0: command tx timeout
[  248.868763][T10992] veth0_vlan: entered promiscuous mode
[  248.883185][T10992] veth1_vlan: entered promiscuous mode
[  248.894031][T11106] loop2: detected capacity change from 0 to 32768
[  248.913682][T10992] veth0_macvtap: entered promiscuous mode
[  248.922939][T10992] veth1_macvtap: entered promiscuous mode
[  248.940754][T10992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.953413][T10992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  248.961608][T11106] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.964839][ T5678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  248.988021][ T5678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.017343][T11106] XFS (loop2): Ending clean mount
[  249.020486][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.023165][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.036994][T11106] XFS (loop2): Quotacheck needed: Please wait.
[  249.205767][T11136] ramfs: Bad value for 'mode'
[  249.272977][T11106] XFS (loop2): Quotacheck: Done.
[  249.288244][ T6581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.302909][ T6581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.391829][ T6581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.396273][ T6581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.409655][ T5814] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  249.414366][T11140] loop3: detected capacity change from 0 to 128
[  249.707016][T11145] netlink: 91 bytes leftover after parsing attributes in process `syz.3.2041'.
[  249.927858][T11156] loop3: detected capacity change from 0 to 128
[  249.964397][T11156] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  249.970588][T11156] hpfs: filesystem error: improperly stopped
[  249.972572][T11156] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  249.974877][T11156] hpfs: You really don't want any checks? You are crazy...
[  249.978706][T11156] hpfs: hpfs_map_sector(): read error
[  249.980918][T11156] hpfs: code page support is disabled
[  250.002168][T11156] hpfs: hpfs_map_4sectors(): unaligned read
[  250.004905][T11156] hpfs: hpfs_map_4sectors(): unaligned read
[  250.006687][T11156] hpfs: filesystem error: unable to find root dir
[  250.473630][T11180] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached
[  250.649457][ T5198] Bluetooth: hci0: command tx timeout
[  250.700830][T11189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2060'.
[  251.072043][T11203] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2066'.
[  251.909406][ T7119] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  252.064724][T11218] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2072'.
[  252.070567][ T7119] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  252.074712][ T7119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.088635][ T7119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.108992][ T7119] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  252.122382][ T7119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.160842][ T7119] usb 3-1: config 0 descriptor??
[  252.587234][ T7119] hid_parser_main: 109 callbacks suppressed
[  252.587251][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.598939][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.601924][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.604387][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.619342][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.629566][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.637958][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.644118][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.646589][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.663617][ T7119] sony 0003:054C:024B.000E: unknown main item tag 0x0
[  252.680411][ T7119] sony 0003:054C:024B.000E: unexpected long global item
[  252.683498][ T7119] sony 0003:054C:024B.000E: parse failed
[  252.685682][ T7119] sony 0003:054C:024B.000E: probe with driver sony failed with error -22
[  252.730863][ T5198] Bluetooth: hci0: command tx timeout
[  252.746293][T11233] loop3: detected capacity change from 0 to 256
[  252.760979][T11233] exfat: Deprecated parameter 'utf8'
[  252.763118][T11233] exfat: Deprecated parameter 'namecase'
[  252.788997][T11233] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  252.798272][ T7119] usb 3-1: USB disconnect, device number 27
[  252.956881][T11235] netlink: 'syz.4.2081': attribute type 1 has an invalid length.
[  253.169738][T11242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.172527][T11242] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.240713][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2086'.
[  253.247869][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2086'.
[  253.253988][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2086'.
[  253.751023][ T7119] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  253.909059][ T7119] usb 3-1: Using ep0 maxpacket: 16
[  253.915218][ T7119] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  253.926013][ T7119] usb 3-1: config 0 has no interface number 0
[  253.930722][ T7119] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.938408][ T7119] usb 3-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.946267][ T7119] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  253.955358][ T7119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.972782][ T7119] usb 3-1: config 0 descriptor??
[  254.058674][T11267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.067023][T11267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.404143][ T7119] hid (null): report_id 0 is invalid
[  254.406644][ T7119] hid (null): invalid report_count 1779749003
[  254.414268][ T7119] hid (null): unknown global tag 0xd
[  254.416366][ T7119] hid (null): global environment stack underflow
[  254.420898][ T7119] hid (null): unknown global tag 0xd
[  254.599404][ T7110] usb 3-1: USB disconnect, device number 28
[  254.620658][ T7119] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  254.799824][ T7119] usb 5-1: Using ep0 maxpacket: 8
[  254.804828][T11277] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  254.818456][ T7119] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.822788][ T7119] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  254.836985][ T7119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.844315][ T7119] usb 5-1: config 0 descriptor??
[  254.864865][ T7119] gspca_main: vc032x-2.14.0 probing 046d:0892
[  255.583965][T11285] IPv6: Can't replace route, no match found
[  256.241947][ T7119] gspca_vc032x: reg_w err -71
[  256.243808][ T7119] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  256.264110][ T7119] usb 5-1: USB disconnect, device number 2
[  256.628745][T11295] loop2: detected capacity change from 0 to 32768
[  256.647237][T11295] jfs_mount: Mount Failure: superblock is corrupt!
[  256.660183][T11295] Mount JFS Failure: -22
[  256.661678][T11295] jfs_mount failed w/return code = -22
[  257.177826][T11320] loop3: detected capacity change from 0 to 4096
[  257.352948][T11320] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  257.356748][T11320] ntfs3(loop3): Failed to load $Extend (-22).
[  257.359368][T11320] ntfs3(loop3): Failed to initialize $Extend.
[  257.372457][T11320] ntfs3(loop3): ino=21, The size of extended attributes must not exceed 64KiB
[  257.568960][ T7119] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  257.726429][ T7119] usb 5-1: Using ep0 maxpacket: 16
[  257.733844][ T7119] usb 5-1: config 0 has no interfaces?
[  257.739421][ T7119] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  257.749967][ T7119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.788100][ T7119] usb 5-1: config 0 descriptor??
[  257.869633][T11316] overlayfs: statfs failed on './file0'
[  258.020891][T11337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2129'.
[  258.030646][T11322] netlink: 'syz.4.2117': attribute type 11 has an invalid length.
[  258.045612][ T7119] usb 5-1: USB disconnect, device number 3
[  258.193862][T11342] loop2: detected capacity change from 0 to 512
[  258.327035][T11342] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #11: block 10: comm syz.2.2131: lblock 0 mapped to illegal pblock 10 (length 1)
[  258.369110][T11342] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  258.378921][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  258.385028][    C0] EXT4-fs (loop2): initial error at time 1774163125: ext4_map_blocks:776: inode 11: block 10
[  258.388912][    C0] EXT4-fs (loop2): last error at time 1774163125: ext4_map_blocks:776: inode 11: block 10
[  258.469649][T11342] EXT4-fs (loop2): Remounting filesystem read-only
[  258.472462][T11342] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -30)
[  258.486726][T11342] EXT4-fs (loop2): 1 orphan inode deleted
[  258.511692][T11342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  258.686846][ T5814] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.866872][ T7115] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  260.134735][T11376] loop4: detected capacity change from 0 to 32768
[  260.272845][T11376] JBD2: Ignoring recovery information on journal
[  260.301802][ T7115] usb 3-1: Using ep0 maxpacket: 16
[  260.324752][T11376] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  260.390930][   T33] audit: type=1800 audit(1774163127.971:41): pid=11376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2140" name="file2" dev="loop4" ino=17059 res=0 errno=0
[  260.395118][ T7115] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00
[  260.419280][ T7115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.512087][T10992] ocfs2: Unmounting device (7,4) on (node local)
[  260.566167][ T7115] usb 3-1: config 0 descriptor??
[  260.872857][ T7115] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  260.985283][ T7115] usb 3-1: Detected FT4232H
[  261.017477][ T7115] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  261.081147][ T7119] usb 4-1: USB disconnect, device number 7
[  261.132330][ T7115] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  261.157485][ T7115] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  261.260255][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  261.263026][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  261.381222][ T7115] usb 3-1: USB disconnect, device number 29
[  261.424682][ T7115] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  261.542478][ T7115] ftdi_sio 3-1:0.0: device disconnected
[  261.955835][ T5839] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.546567][ T5839] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.803179][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.811247][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.815046][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.819489][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.825302][ T5839] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.830708][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  262.938352][T11418] loop2: detected capacity change from 0 to 8192
[  263.193516][ T5839] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.586041][ T5839] bridge_slave_1: left allmulticast mode
[  263.588252][ T5839] bridge_slave_1: left promiscuous mode
[  263.607745][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.004290][ T5839] team0: Port device bridge0 removed
[  264.101557][ T5839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  264.112931][ T5839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  264.121285][ T5839] bond0 (unregistering): Released all slaves
[  264.139390][ T5839] bond1 (unregistering): (slave bond2): Releasing backup interface
[  264.146226][ T5839] bond1 (unregistering): Released all slaves
[  264.167233][ T5839] bond2 (unregistering): Released all slaves
[  264.705572][T11419] chnl_net:caif_netlink_parms(): no params data found
[  264.983328][   T54] Bluetooth: hci2: command tx timeout
[  266.375983][ T2399] pvrusb2: request_firmware fatal error with code=-110
[  266.378534][ T2399] pvrusb2: Failure uploading firmware1
[  266.393243][ T2399] pvrusb2: Device initialization was not successful.
[  266.395745][ T2399] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  267.743783][   T54] Bluetooth: hci2: command tx timeout
[  269.159806][    C0] sched: DL replenish lagged too much
[  269.348334][ T2399] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  269.525473][ T5257] udevd[5257]: worker [6002] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time
[  269.553076][ T5873] pvrusb2: Device being rendered inoperable
[  269.994275][   T54] Bluetooth: hci2: command tx timeout
[  272.552353][   T54] Bluetooth: hci2: command tx timeout
[  297.750021][ T1098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  327.025398][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  327.036975][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  346.831579][ T7053] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.076046][ T5198] Bluetooth: hci0: command 0x0406 tx timeout
[  385.523761][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  385.534058][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  388.029994][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  404.819948][ T1098] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  430.236521][   T34] INFO: task kworker/u9:11:6571 blocked for more than 147 seconds.
[  430.254873][   T34]       Tainted: G             L      syzkaller #0
[  430.257260][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  430.268963][   T34] task:kworker/u9:11   state:D stack:21960 pid:6571  tgid:6571  ppid:2      task_flags:0x4208060 flags:0x00080000
[  430.273344][   T34] Workqueue: events_unbound linkwatch_event
[  430.275543][   T34] Call Trace:
[  430.276743][   T34]  <TASK>
[  430.277867][   T34]  __schedule+0x15dd/0x52d0
[  432.965095][   T34]  ? __pfx___schedule+0x10/0x10
[  432.966542][   T34]  ? schedule+0x90/0x360
[  432.968074][   T34]  schedule+0x164/0x360
[  439.447445][   T34]  schedule_preempt_disabled+0x13/0x30
[  439.464480][   T34]  __mutex_lock+0x7fe/0x1300
[  439.466329][   T34]  ? __mutex_lock+0x5ac/0x1300
[  439.468129][   T34]  ? linkwatch_event+0xe/0x60
