last executing test programs:

3m5.859561339s ago: executing program 1 (id=98):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

3m5.779491604s ago: executing program 1 (id=99):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0x11, 0x6ed, &(0x7f00000003c0)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

3m5.679958595s ago: executing program 1 (id=100):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @loopback, 0xffdfffff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x0, 0x1001a, 0xfffffffd, 0x2151a564, 0x80000000, 0x80000000, 0xd3}, &(0x7f00000001c0)=0x20)

3m5.609023681s ago: executing program 1 (id=102):
syz_mount_image$hfsplus(&(0x7f0000000240), &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000500)=ANY=[], 0x5, 0x6b5, &(0x7f0000001540)="$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")
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000002380)={[{@sysvgroups}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@usrjquota}, {@data_journal}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x313}}, {@block_validity}]}, 0x0, 0x5fd, &(0x7f00000004c0)="$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")
ptrace$getregset(0x4205, r1, 0x2, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40804)
link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

3m5.39771396s ago: executing program 1 (id=106):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x2, 0x0, 0x2, 0xdbd})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x1b0, 0xfffffffffffffffd})
fcntl$lock(r1, 0x7, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x2000200000dbd})

3m5.098631832s ago: executing program 1 (id=112):
r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0)

3m4.961243833s ago: executing program 32 (id=112):
r0 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r0)

2m57.637101438s ago: executing program 0 (id=173):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000a40)=""/39, 0x27)
getdents64(r3, 0xfffffffffffffffe, 0x29)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3ca42300", @ANYRES16=0x0, @ANYBLOB="ed092abd7000ffdbdf250d0000000a0009006854f4ba087b000005003000010000000a000900000000000000000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4005009}, 0x20004800)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8})
prlimit64(r2, 0x7, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
creat(0x0, 0x0)
mount(&(0x7f0000000080)=@nullb, 0x0, &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f)
setns(r1, 0x24020000)
syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0)

2m56.70554677s ago: executing program 0 (id=182):
memfd_create(0x0, 0x20)

2m56.64944177s ago: executing program 0 (id=183):
unshare(0x24020400)
r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='pagemap\x00')
lseek(r0, 0xfffffffffffffffe, 0x0)
sendfile(r0, r0, &(0x7f0000000540), 0x0)

2m56.649046118s ago: executing program 0 (id=184):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

2m56.527227728s ago: executing program 0 (id=185):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x5, 0xc8b, 0x0, {0x0, 0x2710}, {r1, r2/1000+10000}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x3, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4)

2m56.259115083s ago: executing program 0 (id=186):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003080000180100002020702500000000002020207b1af8ff000000009fa100000000000007010000f8ffffffb702000008000000b703000006000000850000003300000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x26}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23)

2m56.113183092s ago: executing program 33 (id=186):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000040000000000000003080000180100002020702500000000002020207b1af8ff000000009fa100000000000007010000f8ffffffb702000008000000b703000006000000850000003300000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x26}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0xc, 0xe4, &(0x7f00000000c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x23)

2m44.613145656s ago: executing program 4 (id=300):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x301)

2m44.386720161s ago: executing program 4 (id=305):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c030000160001002bbd7000fedbdf250a0101faffffff000000000000000000fe8800060000000000000000000001014e2300004e2400000a0080201d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x30c}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)

2m44.315590167s ago: executing program 4 (id=309):
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000001"], 0x1c, 0x0)

2m44.20536851s ago: executing program 4 (id=311):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x221)

2m44.125841879s ago: executing program 4 (id=313):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045519, &(0x7f0000000480)=0x1)

2m43.845594966s ago: executing program 4 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0)

2m43.672703437s ago: executing program 34 (id=317):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0)

6.745782242s ago: executing program 2 (id=2087):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x7f)

6.53216275s ago: executing program 2 (id=2091):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a300000000009000b0073797a3000000000140004800800024000000000080001"], 0xe0}}, 0x0)

6.531940319s ago: executing program 2 (id=2092):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000906010200120000000c000000000000090002007379ed3100000000050001"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050)

6.467796933s ago: executing program 2 (id=2093):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

6.467518426s ago: executing program 2 (id=2094):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
inotify_init()

6.371543443s ago: executing program 2 (id=2095):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})

6.188094316s ago: executing program 35 (id=2095):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"})

3.630273492s ago: executing program 5 (id=2114):
r0 = fanotify_init(0x8, 0x400)
write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40)

3.186578207s ago: executing program 5 (id=2115):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
splice(r0, 0x0, r0, 0x0, 0xa, 0x9)

3.131478209s ago: executing program 5 (id=2116):
r0 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r2 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @remote}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0xfffd, 0x0, 0x57}}}}}}, 0x0)

3.024125172s ago: executing program 5 (id=2117):
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48)

2.758431995s ago: executing program 5 (id=2118):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x60, 0xef, 0x22, 0x3f, 0xcf, 0x45e, 0x4e1, 0xa86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xfe, 0xf0, 0x5, [{{0x9, 0x4, 0x40, 0x16, 0x0, 0x8d, 0xcc, 0x37, 0xa}}]}}]}}, 0x0)

530.97154ms ago: executing program 6 (id=2134):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000), 0x10)
setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4)

530.806118ms ago: executing program 6 (id=2135):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x4f28, 0x100005, 0x10002, 0x180000, 0x3, 0xcc2, 0xc, 0x200, 0xa, 0x102, 0x2, 0xa, 0x1, 0x1, 0x6, 0x80, 0x3, 0x1a449, 0xff, 0x40000003, 0x7fff, 0xcaa7, 0x0, 0x20001e58, 0xa, 0xe69, 0x3a, 0x101, 0x6, 0x7, 0xfffffff8]})

458.576343ms ago: executing program 6 (id=2137):
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2c})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89a, 0xc000, 0x3, 0x1b7})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

458.215706ms ago: executing program 6 (id=2139):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0)
write$char_usb(r0, &(0x7f00000008c0)='-0', 0x2)

363.120847ms ago: executing program 6 (id=2141):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}, @exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)

362.86128ms ago: executing program 6 (id=2142):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000280)={0x1, 0x6, 0x9c, &(0x7f0000000440)=""/156})
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50)
r1 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, &(0x7f00000000c0), &(0x7f0000000380))
io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, 0x0, 0x1)
syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c240639ce221e85d8f32e17ec4ef16101f64a0d723cee0ae0755bbdd7993b98872e9f867fe646cbf39c694b883f970dbfc5fd4e462b6b3c8beb4529dff38344b2a72932e324811ad8657ec9e13b7d45861c50e819347c7dd178022a82dfcd9805bd24b2c06debc4f46a1ebb14651a9ca6585ba23aeb0d81f49b5e9276a3b8d3f0a24dbe38abdfb9bfe05671aec3"], 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x0, 0x52424752, 0x2, @stepwise={0x8, 0x4, 0x3, 0x5, 0x800, 0xff}})
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@grpquota}, {@lazytime}, {@stripe={'stripe', 0x3d, 0x1200}}, {@inode_readahead_blks}], [{@appraise}, {@dont_appraise}, {@subj_type={'subj_type', 0x3d, '#/'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@flag='async'}]}, 0x1, 0x7b5, &(0x7f00000017c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000002c0)=0x1, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r4, &(0x7f0000000180)=[{&(0x7f0000000980)}], 0x1, 0x5412, 0x2, 0x4)

299.500512ms ago: executing program 5 (id=2143):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00598f2f223a0a12f76404ad3bd59a04fbd75d1008c039c51a2a013e63af1c9ed7416faa1e2ea98d0f1c7337a5c81920988a4299a77054cdb12285fd7a0e5b43382d962372b73042593a5bd6b7db4a1b3721c62f11018727c29f3a1bd1e554474ea0d1da2a20b205df342a04a34b65e16a23e8e7811a984963073ebcbead85f9e4332bdef4c1ce54a1c6f7a47b75aa95b9e8cb616be40a0000b1309ee426d1803ef09abb9509846c34b9ac0bf109cedbd12c850effda9ae677566159f9c83da7ff6e247e3ac43c0a663c8c83650692e474bac2c047b238601bd5187d6bed82fe2034512ef11b74a98252198c4402bcf3165561157678e9d50831c27d1094a04d8c7607d7164033cda7a81704824d3107f232de8c31f57de3f78727828e8206403db4", @ANYRES32], 0x0, 0x446b, &(0x7f0000004480)="$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")
lsetxattr(&(0x7f0000000080)='./file1\x00', &(0x7f0000002980)=ANY=[@ANYBLOB='security.b'], 0x0, 0x0, 0x1)

180.622653ms ago: executing program 3 (id=2145):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0, 0x36}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

116.726513ms ago: executing program 3 (id=2146):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000000020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000020000000180000000000000100000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)

116.332087ms ago: executing program 3 (id=2147):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x5, 0xfffffffd, 0x4, 0x4}})
ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x4aaf)

52.569752ms ago: executing program 3 (id=2148):
r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x1, 0xffffff01, 0x34325258, 0x4, 0x823c2acb262e9051, [{0xc8, 0x9}, {0x400, 0x4}, {0x9db3, 0x400}, {0xa41, 0x8001}, {0x0, 0xb}, {0x67, 0xac17}, {0x9, 0x5}, {0x3, 0x9}], 0x9, 0x7, 0x8, 0x2, 0x2}})

52.353812ms ago: executing program 3 (id=2149):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}}, 0x0)

0s ago: executing program 3 (id=2150):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f0000000440), 0x1, 0x55ae, &(0x7f0000005600)="$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")
ioprio_set$pid(0x1, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)

kernel console output (not intermixed with test programs):

 replicas_v0: invalid device 1 in entry journal: 1/3 [0 1 4]
[  133.650943][ T7759] replicas_v0 (size 24):
[  133.650943][ T7759] btree: 1 [0] journal: 3 [0 4 1]
[  133.650943][ T7759] 
[  133.670874][ T7759] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  133.759150][ T7774] warning: `syz.3.606' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  134.119400][ T7803] netlink: 'syz.3.619': attribute type 1 has an invalid length.
[  134.153841][ T6843] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  134.655381][ T6843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.658765][ T6843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.664499][ T6843] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  134.667505][ T6843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.670194][ T6843] usb 3-1: Product: syz
[  134.671561][ T6843] usb 3-1: Manufacturer: syz
[  134.673107][ T6843] usb 3-1: SerialNumber: syz
[  134.886591][ T6843] usb 3-1: 0:2 : does not exist
[  134.892222][ T6843] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  134.908283][ T6843] usb 3-1: USB disconnect, device number 7
[  134.928601][ T6440] udevd[6440]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.978008][ T7812] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  135.960019][ T7838] loop5: detected capacity change from 0 to 512
[  135.965336][ T7838] EXT4-fs (loop5): Invalid log block size: 7
[  135.990235][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  136.157441][    T9] usb 3-1: Using ep0 maxpacket: 8
[  136.163153][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.177770][    T9] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  136.181383][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.189419][    T9] usb 3-1: Product: syz
[  136.191143][    T9] usb 3-1: Manufacturer: syz
[  136.193005][    T9] usb 3-1: SerialNumber: syz
[  136.203855][    T9] usb 3-1: config 0 descriptor??
[  136.210370][    T9] gspca_main: stk014-2.14.0 probing 05e1:0893
[  136.212960][    T9] usb 3-1: selecting invalid altsetting 1
[  136.371998][ T7850] loop5: detected capacity change from 0 to 32768
[  136.414421][    T9] gspca_stk014: init reg: 0x00
[  136.415659][ T7850] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.416523][    T9] stk014 3-1:0.0: probe with driver stk014 failed with error -5
[  136.465236][ T7850] XFS (loop5): Ending clean mount
[  136.468978][ T7850] XFS (loop5): Quotacheck needed: Please wait.
[  136.500426][ T7850] XFS (loop5): Quotacheck: Done.
[  136.537161][ T6839] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.642212][    T9] usb 3-1: USB disconnect, device number 8
[  136.771709][ T7866] loop5: detected capacity change from 0 to 1024
[  136.777142][ T7866] EXT4-fs: Ignoring removed bh option
[  136.792842][ T7866] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.851634][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.273578][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  137.453636][    T9] usb 6-1: Using ep0 maxpacket: 8
[  137.459102][    T9] usb 6-1: config 0 has an invalid interface number: 24 but max is 0
[  137.462907][    T9] usb 6-1: config 0 has no interface number 0
[  137.475780][    T9] usb 6-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  137.479649][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.482328][    T9] usb 6-1: Product: syz
[  137.484157][    T9] usb 6-1: Manufacturer: syz
[  137.487691][    T9] usb 6-1: SerialNumber: syz
[  137.491840][    T9] usb 6-1: config 0 descriptor??
[  137.663149][ T7911] netlink: 'syz.2.663': attribute type 8 has an invalid length.
[  137.666555][ T7911] netem: change failed
[  137.705219][    T9] pegasus 6-1:0.24: probe with driver pegasus failed with error -71
[  137.715621][    T9] usb 6-1: USB disconnect, device number 5
[  137.791836][ T7917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  138.510474][ T7947] loop2: detected capacity change from 0 to 512
[  138.525088][ T7947] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  138.535915][ T7947] EXT4-fs error (device loop2): ext4_init_orphan_info:611: comm syz.2.679: orphan file block 0: bad magic
[  138.546950][ T7947] EXT4-fs (loop2): mount failed
[  138.981657][ T7959] netlink: 'syz.2.684': attribute type 3 has an invalid length.
[  138.984924][ T7959] netlink: 'syz.2.684': attribute type 1 has an invalid length.
[  138.988034][ T7959] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.684'.
[  139.784879][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  140.396353][ T7979] netlink: 495 bytes leftover after parsing attributes in process `syz.3.694'.
[  140.403381][    T9] usb 6-1: Using ep0 maxpacket: 8
[  140.411194][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  140.416042][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  140.419076][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  140.428242][    T9] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  140.431145][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.436713][    T9] usb 6-1: Product: syz
[  140.438162][    T9] usb 6-1: Manufacturer: syz
[  140.438821][ T7980] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  140.439703][    T9] usb 6-1: SerialNumber: syz
[  140.452176][    T9] usb 6-1: config 0 descriptor??
[  140.462720][ T7980] File: /dev/nullb0 PID: 7980 Comm: syz.2.693
[  140.465633][    T9] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8
[  140.700106][    T9] usb 6-1: USB disconnect, device number 6
[  141.732523][ T8001] 9pnet_fd: Insufficient options for proto=fd
[  142.028547][ T8015] loop5: detected capacity change from 0 to 128
[  142.031996][ T8015] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  142.047078][ T8015] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  142.240167][ T8017] loop2: detected capacity change from 0 to 8192
[  142.585448][ T5924] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  142.753354][ T5924] usb 6-1: Using ep0 maxpacket: 32
[  142.783365][ T5924] usb 6-1: unable to get BOS descriptor or descriptor too short
[  142.794166][ T5924] usb 6-1: config 6 has an invalid interface number: 254 but max is 0
[  142.797428][ T5924] usb 6-1: config 6 has no interface number 0
[  142.799779][ T5924] usb 6-1: config 6 interface 254 has no altsetting 0
[  142.812014][ T8044] loop2: detected capacity change from 0 to 16
[  142.819428][ T5924] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0104, bcdDevice=30.00
[  142.822963][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.829164][ T8044] erofs (device loop2): mounted with root inode @ nid 36.
[  142.843653][ T5924] usb 6-1: Product: syz
[  142.845321][ T5924] usb 6-1: Manufacturer: syz
[  142.863956][ T5924] usb 6-1: SerialNumber: syz
[  143.092474][ T5924] ftdi_sio 6-1:6.254: FTDI USB Serial Device converter detected
[  143.099065][ T5924] usb 6-1: Detected FT2232HP
[  143.103162][ T5924] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  143.120677][ T5924] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  143.132765][ T5924] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  143.150554][ T5924] usb 6-1: USB disconnect, device number 7
[  143.182484][ T5924] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  143.189683][ T5924] ftdi_sio 6-1:6.254: device disconnected
[  144.143462][ T8084] loop5: detected capacity change from 0 to 40427
[  144.162362][ T8084] F2FS-fs (loop5): invalid crc value
[  144.254521][ T8084] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  144.259694][ T8084] F2FS-fs (loop5): Start checkpoint disabled!
[  144.269162][ T8084] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  144.289032][ T8084] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=0, run fsck to fix.
[  144.719876][ T8092] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  144.812962][ T8096] loop6: detected capacity change from 0 to 63
[  144.823030][ T6440] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.834652][ T6440] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.843800][ T6440] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.847261][ T6440] Buffer I/O error on dev loop6, logical block 0, async page read
[  144.853928][ T6440] Buffer I/O error on dev loop6, logical block 0, async page read
[  145.002030][ T8103] loop2: detected capacity change from 0 to 256
[  145.013436][ T8103] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  145.017957][ T8103] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  145.041109][ T8103] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  145.540955][ T8123] loop2: detected capacity change from 0 to 32768
[  145.626479][ T8123] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  145.626495][ T8123]   allowing incompatible features above 0.0: (unknown version)
[  145.626500][ T8123]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  145.641557][ T8123] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  145.645670][ T8123] bcachefs (loop2): initializing new filesystem
[  145.659814][ T8123] bcachefs (loop2): going read-write
[  145.669828][ T8123] bcachefs (loop2): marking superblocks
[  145.695788][ T8123] bcachefs (loop2): initializing freespace
[  145.707663][ T8123] bcachefs (loop2): done initializing freespace
[  145.714425][ T8123] bcachefs (loop2): reading snapshots table
[  145.716951][ T8123] bcachefs (loop2): reading snapshots done
[  145.744669][ T8123] bcachefs (loop2): done starting filesystem
[  145.801508][ T8123] syz.2.761 (8123) used greatest stack depth: 17272 bytes left
[  145.840576][ T5855] bcachefs (loop2): shutting down
[  145.842344][ T5855] bcachefs (loop2): going read-only
[  145.844858][ T5855] bcachefs (loop2): finished waiting for writes to stop
[  145.849244][ T5855] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  145.895789][ T5855] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  145.900530][ T5855] bcachefs (loop2): clean shutdown complete, journal seq 5
[  145.904541][ T5855] bcachefs (loop2): marking filesystem clean
[  145.935925][ T5855] bcachefs (loop2): shutdown complete
[  146.161744][ T8148] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  146.175624][ T8148] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  146.266400][ T8152] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[  146.316464][ T8156] loop5: detected capacity change from 0 to 256
[  146.326102][ T8156] exfat: Deprecated parameter 'namecase'
[  146.328328][ T8156] exfat: Deprecated parameter 'utf8'
[  146.352076][ T8156] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  146.389269][   T33] audit: type=1800 audit(1757316954.146:4): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.771" name="file0" dev="loop5" ino=1048625 res=0 errno=0
[  146.507201][ T8162] loop5: detected capacity change from 0 to 128
[  146.548688][ T8162] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.564167][ T8162] ext4 filesystem being mounted at /135/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.659126][ T6839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.935124][ T8177] netlink: 'syz.3.780': attribute type 1 has an invalid length.
[  146.938607][ T8177] netlink: 'syz.3.780': attribute type 4 has an invalid length.
[  146.941000][ T8177] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.780'.
[  146.966256][ T8177] netlink: 'syz.3.780': attribute type 1 has an invalid length.
[  146.969278][ T8177] netlink: 'syz.3.780': attribute type 4 has an invalid length.
[  146.972294][ T8177] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.780'.
[  146.996862][ T8181] loop5: detected capacity change from 0 to 128
[  148.542968][ T8205] syz.2.791 (8205): /proc/8204/oom_adj is deprecated, please use /proc/8204/oom_score_adj instead.
[  148.675497][ T8209] Driver unsupported XDP return value 0 on prog  (id 70) dev N/A, expect packet loss!
[  148.801940][ T8211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'.
[  149.463986][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'.
[  149.597207][ T8216] loop2: detected capacity change from 0 to 32768
[  149.611516][ T8216] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  149.621893][ T8216] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  149.669744][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  150.301936][ T8247] netlink: 182 bytes leftover after parsing attributes in process `syz.5.809'.
[  150.680709][ T8264] syz.3.818 uses obsolete (PF_INET,SOCK_PACKET)
[  150.734526][ T6843] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  150.780784][ T8268] tc_dump_action: action bad kind
[  150.873383][ T5924] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  150.909459][ T6843] usb 6-1: New USB device found, idVendor=0856, idProduct=ac33, bcdDevice= 0.f8
[  150.915129][ T6843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.918497][ T6843] usb 6-1: Product: syz
[  150.920278][ T6843] usb 6-1: Manufacturer: syz
[  150.922076][ T6843] usb 6-1: SerialNumber: syz
[  150.930677][ T6843] usb 6-1: config 0 descriptor??
[  150.938047][ T6843] hub 6-1:0.0: bad descriptor, ignoring hub
[  150.940182][ T6843] hub 6-1:0.0: probe with driver hub failed with error -5
[  150.942863][ T6843] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  150.951185][ T6843] usb 6-1: Detected SIO
[  150.956857][ T6843] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  151.039873][ T5924] usb 3-1: Using ep0 maxpacket: 32
[  151.046248][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short
[  151.050149][ T5924] usb 3-1: config 244 has an invalid interface number: 68 but max is 0
[  151.053637][ T5924] usb 3-1: config 244 has no interface number 0
[  151.056323][ T5924] usb 3-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  151.066032][ T5924] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  151.070320][ T5924] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  151.074774][ T5924] usb 3-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  151.078632][ T5924] usb 3-1: config 244 interface 68 has no altsetting 0
[  151.087274][ T5924] usb 3-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  151.091458][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.094412][ T5924] usb 3-1: Product: syz
[  151.095820][ T5924] usb 3-1: Manufacturer: syz
[  151.097561][ T5924] usb 3-1: SerialNumber: syz
[  151.201235][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'.
[  151.253770][   T10] usb 6-1: USB disconnect, device number 8
[  151.264212][   T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  151.269304][   T10] ftdi_sio 6-1:0.0: device disconnected
[  151.317582][ T5924] comedi comedi5: Endpoint has wrong direction
[  151.319779][ T5924] dt9812 3-1:244.68: driver 'dt9812' failed to auto-configure device.
[  151.326653][ T5924] usb 3-1: USB disconnect, device number 9
[  151.902300][ T8294] vlan0: entered allmulticast mode
[  151.905558][ T8294] erspan0: entered allmulticast mode
[  151.968091][ T8292] loop5: detected capacity change from 0 to 32768
[  151.976855][ T8292] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.831 (8292)
[  152.026195][ T8292] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.030476][ T8292] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  152.125351][ T8292] BTRFS info (device loop5): enabling ssd optimizations
[  152.128110][ T8292] BTRFS info (device loop5): enabling free space tree
[  152.300322][ T6839] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.780417][ T8333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.842'.
[  152.815367][ T8335] netlink: 108 bytes leftover after parsing attributes in process `syz.3.843'.
[  152.891899][ T8341] netlink: 16 bytes leftover after parsing attributes in process `syz.5.847'.
[  152.998150][ T8352] netlink: 'syz.3.850': attribute type 2 has an invalid length.
[  153.088127][ T8360] netlink: 'syz.2.854': attribute type 13 has an invalid length.
[  153.090873][ T8360] netlink: 'syz.2.854': attribute type 17 has an invalid length.
[  153.161660][ T8360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  153.330388][ T8377] netlink: 'syz.5.862': attribute type 1 has an invalid length.
[  153.333033][ T8377] netlink: 'syz.5.862': attribute type 1 has an invalid length.
[  153.333797][ T8375] overlayfs: failed to resolve './file0': -2
[  153.374906][ T8380] netlink: 44 bytes leftover after parsing attributes in process `syz.5.864'.
[  153.402755][ T8381] loop2: detected capacity change from 0 to 64
[  153.415899][ T8381] minix: Unknown parameter './file1'
[  153.696497][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  153.885814][   T10] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  153.898398][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.971992][   T10] usb 6-1: config 0 descriptor??
[  153.987376][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  154.388920][   T10] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  154.543764][ T6843] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  154.694104][ T6843] usb 3-1: Using ep0 maxpacket: 32
[  154.698816][ T6843] usb 3-1: unable to get BOS descriptor or descriptor too short
[  154.707120][ T6843] usb 3-1: config 12 has an invalid interface number: 184 but max is 0
[  154.710640][ T6843] usb 3-1: config 12 has no interface number 0
[  154.714407][ T6843] usb 3-1: config 12 interface 184 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  154.733073][ T6843] usb 3-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2
[  154.744966][ T6843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.748406][ T6843] usb 3-1: Product: syz
[  154.750358][ T6843] usb 3-1: Manufacturer: syz
[  154.756640][ T6843] usb 3-1: SerialNumber: syz
[  154.794378][ T8416] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  155.003060][   T10] gspca_cpia1: usb_control_msg 05, error -71
[  155.005575][   T10] cpia1 6-1:0.0: unexpected systemstate: 00
[  155.011407][   T10] usb 6-1: USB disconnect, device number 9
[  155.037359][ T6843] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  155.072907][ T6843] usb 3-1: USB disconnect, device number 10
[  155.108963][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  156.449399][ T8467] netlink: 52 bytes leftover after parsing attributes in process `syz.3.902'.
[  156.464903][ T8469] Invalid ELF header magic: != ELF
[  156.480061][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'.
[  156.589214][ T8475] futex_wake_op: syz.5.906 tries to shift op by 32; fix this program
[  157.747863][ T8515] loop2: detected capacity change from 0 to 1024
[  157.786454][ T8515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.791915][ T8515] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.829235][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.018194][ T8526] tmpfs: Bad value for 'mpol'
[  158.054304][ T8529] loop2: detected capacity change from 0 to 256
[  158.060168][ T8529] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.069095][ T8529] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  158.078564][ T8529] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  158.375889][ T8551] netlink: 'syz.3.937': attribute type 21 has an invalid length.
[  158.379314][ T8551] netlink: 156 bytes leftover after parsing attributes in process `syz.3.937'.
[  158.598958][ T8564] loop5: detected capacity change from 0 to 16
[  158.609036][ T8564] erofs (device loop5): mounted with root inode @ nid 36.
[  158.710466][ T8566] loop5: detected capacity change from 0 to 512
[  158.720096][ T8566] EXT4-fs: Ignoring removed nobh option
[  158.748938][ T8566] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  158.782711][ T8566] EXT4-fs (loop5): orphan cleanup on readonly fs
[  158.791440][ T8566] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.942: bad orphan inode 15
[  158.802578][ T8566] ext4_test_bit(bit=14, block=18) = 1
[  158.806972][ T8566] is_bad_inode(inode)=0
[  158.808689][ T8566] NEXT_ORPHAN(inode)=1023
[  158.810407][ T8566] max_ino=32
[  158.811714][ T8566] i_nlink=0
[  158.820685][ T8566] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.942: bg 0: block 161: padding at end of block bitmap is not set
[  158.829260][ T8566] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  158.837202][ T8566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  158.870126][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.117413][ T8572] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  159.122070][ T8571] IPVS: stopping backup sync thread 8572 ...
[  159.286030][ T8580] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.948'.
[  159.590357][ T8590] loop5: detected capacity change from 0 to 32768
[  159.598383][ T8590] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.951 (8590)
[  159.610365][ T8590] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.614791][ T8590] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  159.634516][ T4211] BTRFS warning (device loop5): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x09baaddde01c70d9f564d40d40bbd1072cb01ca9c506f6ee2b940aea4af18207 level 0
[  159.647249][ T8590] BTRFS warning (device loop5): failed to read root (objectid=4): -5
[  159.650662][ T8590] BTRFS warning (device loop5): try to load backup roots slot 1
[  159.656331][ T8590] BTRFS warning (device loop5): global root 2 0 already exists
[  159.659375][ T8590] BTRFS error (device loop5): failed to load root extent
[  159.662068][ T8590] BTRFS warning (device loop5): try to load backup roots slot 2
[  159.666038][ T4211] BTRFS error (device loop5): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  159.669870][ T8590] BTRFS warning (device loop5): couldn't read tree root
[  159.672436][ T8590] BTRFS warning (device loop5): try to load backup roots slot 3
[  159.676096][ T4211] BTRFS warning (device loop5): checksum verify failed on logical 5251072 mirror 1 wanted 0x3733e4df68c3b780deac4f047b3ac85a180e047a8c6c5314b53c1b8a9369ce12 found 0x14b35fdb1819392a43b7915d2192f571ea07cbff49835ef44835d3e0976a7a91 level 0
[  159.684337][ T8590] BTRFS error (device loop5): failed to load root extent
[  159.705650][ T8590] BTRFS error (device loop5): open_ctree failed: -5
[  159.976334][ T5909] IPVS: starting estimator thread 0...
[  160.065076][ T8613] IPVS: using max 64 ests per chain, 153600 per kthread
[  160.692880][ T8636] loop2: detected capacity change from 0 to 128
[  160.705499][ T8636] vfat: Unexpected value for 'dos1xfloppy'
[  161.253472][ T5910] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  161.336026][ T8662] loop2: detected capacity change from 0 to 2048
[  161.359450][ T8663] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.387889][ T8662] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  161.397783][ T8662] Remounting filesystem read-only
[  161.431730][ T5855] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  161.431935][ T5910] usb 6-1: config 0 has an invalid interface number: 197 but max is 0
[  161.441615][ T5910] usb 6-1: config 0 has no interface number 0
[  161.461626][ T5910] usb 6-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  161.466085][ T5910] usb 6-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  161.478919][ T5910] usb 6-1: config 0 interface 197 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  161.490691][ T5910] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  161.502857][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.506235][ T5910] usb 6-1: Product: syz
[  161.507867][ T5910] usb 6-1: Manufacturer: syz
[  161.509609][ T5910] usb 6-1: SerialNumber: syz
[  161.517672][ T5910] usb 6-1: config 0 descriptor??
[  161.519865][ T8644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  161.522403][ T8644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  161.569618][ T8669] loop2: detected capacity change from 0 to 1024
[  161.574516][ T8669] EXT4-fs: Ignoring removed nobh option
[  161.576858][ T8669] EXT4-fs: Ignoring removed bh option
[  161.605889][ T8669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.668715][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.738930][ T8644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  161.742168][ T8644] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  161.756701][ T5910] qmi_wwan 6-1:0.197: probe with driver qmi_wwan failed with error -22
[  161.954121][ T5910] usb 6-1: USB disconnect, device number 10
[  162.627683][ T8689] loop2: detected capacity change from 0 to 128
[  162.743335][ T5909] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  162.893296][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  162.899776][ T5909] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[  162.903121][ T5909] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.919500][ T5909] usb 6-1: config 1 has no interface number 0
[  162.931628][ T5909] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  162.936286][ T5909] usb 6-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.941342][ T5909] usb 6-1: config 1 interface 105 has no altsetting 0
[  162.959718][ T5909] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.08
[  162.964990][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.973989][ T5909] usb 6-1: Product: syz
[  162.975739][ T5909] usb 6-1: Manufacturer: syz
[  162.977611][ T5909] usb 6-1: SerialNumber: syz
[  163.010197][ T8685] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  163.063133][ T8695] loop2: detected capacity change from 0 to 40427
[  163.071274][ T8695] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  163.074372][ T8695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  163.079249][ T8695] F2FS-fs (loop2): invalid crc value
[  163.140199][ T8695] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.145321][ T8695] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  163.148045][ T8695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  163.256721][ T5909] aqc111 6-1:1.105: probe with driver aqc111 failed with error -22
[  163.461742][ T5909] usb 6-1: USB disconnect, device number 11
[  163.522835][   T33] audit: type=1326 audit(1757316971.276:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8714 comm="syz.2.996" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22e3d8ebe9 code=0x0
[  164.286834][ T8732] loop5: detected capacity change from 0 to 1764
[  164.319957][ T8732] iso9660: Corrupted directory entry in block 2 of inode 1920
[  164.580528][ T8736] loop5: detected capacity change from 0 to 2048
[  164.605314][ T8736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.641236][ T8744] veth0_to_team: entered promiscuous mode
[  164.653996][ T8744] veth0_to_team: entered allmulticast mode
[  164.668808][ T8736] [syz.5.1006/8736] FS: loop5 File: /file1 would truncate fibmap result
[  165.323298][ T5910] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  165.503485][ T5910] usb 3-1: Using ep0 maxpacket: 16
[  165.516014][ T5910] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  165.636290][ T5910] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  165.639904][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.643055][ T5910] usb 3-1: Product: syz
[  165.646090][ T5910] usb 3-1: Manufacturer: syz
[  165.648890][ T5910] usb 3-1: SerialNumber: syz
[  165.670020][ T5910] r8152-cfgselector 3-1: Unknown version 0x0000
[  165.675184][ T5910] r8152-cfgselector 3-1: config 0 descriptor??
[  167.612701][ T8786] loop5: detected capacity change from 0 to 32768
[  167.817062][ T5924] r8152-cfgselector 3-1: USB disconnect, device number 11
[  167.902845][ T8786] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  167.902866][ T8786]   allowing incompatible features above 0.0: (unknown version)
[  167.902876][ T8786]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  167.941559][ T8786] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  167.975065][ T8786] bcachefs (loop5): initializing new filesystem
[  168.004491][ T8786] bcachefs (loop5): going read-write
[  168.055673][ T8786] bcachefs (loop5): marking superblocks
[  168.076955][ T8786] bcachefs (loop5): initializing freespace
[  168.082281][ T8786] bcachefs (loop5): done initializing freespace
[  168.089931][ T8786] bcachefs (loop5): reading snapshots table
[  168.092375][ T8786] bcachefs (loop5): reading snapshots done
[  168.159344][ T8786] bcachefs (loop5): done starting filesystem
[  168.335518][ T8798] loop2: detected capacity change from 0 to 32768
[  168.352487][ T8798] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v1: device 0: too many buckets (got 16981954538416098692, max 2147483583)
[  168.352487][ T8798] members_v1 (size 152):
[  168.352487][ T8798] Device:                        0
[  168.352487][ T8798]   Label:                       invalid label 98
[  168.352487][ T8798]   UUID:                        88000000-0000-0000-7af6-772b00de4159
[  168.352487][ T8798]   Size:                        0
[  168.352487][ T8798]   read errors:                 0
[  168.352487][ T8798]   write errors:                0
[  168.352487][ T8798]   checksum errors:             0
[  168.352487][ T8798]   seqread iops:                1611530240
[  168.352487][ T8798]   seqwrite iops:               0
[  168.352487][ T8798]   randread iops:               0
[  168.352487][ T8798]   randwrite iops:              0
[  168.352487][ T8798]   Bucket size:                 0
[  168.352487][ T8798]   First bucket:                128
[  168.352487][ T8798]   Buckets:                     16981954538416098692
[  168.352487][ T8798]   Last mount:                  34376515584
[  168.352487][ T8798]   Last superblock write:       0
[  168.352487][ T8798]   State:                       spare
[  168.352487][ T8798]   Data allowed:                free,sb,journal
[  168.352487][ T8798]   Has data:                    journal,btree,user
[  168.352487][ T8798]   Btree allocated bitmap blocksize:1
[  168.352487][ T8798]   Btree allocated bitmap:      00000000000000000
[  168.352583][ T8798] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  168.434960][ T6839] bcachefs (loop5): shutting down
[  168.437011][ T6839] bcachefs (loop5): going read-only
[  168.450209][ T6839] bcachefs (loop5): finished waiting for writes to stop
[  168.495546][ T6839] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  168.522254][ T8806] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  168.525644][ T5910] IPVS: starting estimator thread 0...
[  168.565859][ T6839] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  168.578433][ T6839] bcachefs (loop5): clean shutdown complete, journal seq 4
[  168.581817][ T6839] bcachefs (loop5): marking filesystem clean
[  168.613483][ T6839] bcachefs (loop5): shutdown complete
[  168.629260][ T8807] IPVS: using max 64 ests per chain, 153600 per kthread
[  168.669562][ T8811] loop2: detected capacity change from 0 to 64
[  168.853924][ T8816] 9pnet_fd: Insufficient options for proto=fd
[  168.936919][ T8817] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  168.939851][ T8817] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  169.078246][ T8818] minix: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  169.084425][ T8818] minix: Unknown parameter '0000000000000000000601777777777777777777777	Z* m.Dc8'@C9G9?9S{1Jլ5æԌqqY糔'
[  169.107686][   T33] audit: type=1800 audit(1757316976.786:6): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1032" name="file1" dev="loop2" ino=5 res=0 errno=0
[  169.141890][   T33] audit: type=1800 audit(1757316976.796:7): pid=8818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1032" name="file2" dev="loop2" ino=6 res=0 errno=0
[  169.916722][ T8838] loop2: detected capacity change from 0 to 32768
[  169.927834][ T8838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1044 (8838)
[  169.945226][ T8838] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.962711][ T8838] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  170.120641][ T8838] BTRFS info (device loop2): enabling ssd optimizations
[  170.133717][ T8838] BTRFS info (device loop2): enabling free space tree
[  170.136626][ T8838] BTRFS info (device loop2): force zlib compression, level 3
[  170.221315][ T5855] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.625084][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1050'.
[  170.679785][ T8875] loop2: detected capacity change from 0 to 512
[  170.724655][ T8875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.729808][ T8875] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.755682][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.808782][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1053'.
[  170.812707][ T8881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.844726][ T8881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.996570][ T8883] loop2: detected capacity change from 0 to 2048
[  171.039199][ T8883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.064617][ T8883] EXT4-fs (loop2): shut down requested (2)
[  171.091087][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.303076][ T8898] netlink: 'syz.3.1060': attribute type 1 has an invalid length.
[  172.122541][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'.
[  172.126433][ T8915] IPVS: Unknown mcast interface: ipvlan1
[  172.143628][ T5909] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  172.188086][   T33] audit: type=1800 audit(1757316979.946:8): pid=8917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1068" name="bus" dev="tmpfs" ino=1890 res=0 errno=0
[  172.304063][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  172.311385][ T5909] usb 6-1: config 255 has an invalid interface number: 10 but max is 0
[  172.315935][ T5909] usb 6-1: config 255 has no interface number 0
[  172.323334][ T5909] usb 6-1: config 255 interface 10 has no altsetting 0
[  172.329098][ T5909] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=17.ad
[  172.340136][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.345792][ T5909] usb 6-1: Product: syz
[  172.347876][ T5909] usb 6-1: Manufacturer: syz
[  172.349786][ T5909] usb 6-1: SerialNumber: syz
[  172.829098][ T5909] usb 6-1: USB disconnect, device number 12
[  173.214144][   T33] audit: type=1800 audit(1757316980.956:9): pid=8931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1074" name="file2" dev="tmpfs" ino=1751 res=0 errno=0
[  173.433152][ T8943] Unsupported ieee802154 address type: 0
[  174.396455][ T8973] loop5: detected capacity change from 0 to 2048
[  174.400456][ T8973] EXT4-fs: Ignoring removed i_version option
[  174.448434][ T8973] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.453108][ T8973] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.558666][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.133673][ T9011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1109'.
[  175.142427][ T9011] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  175.146133][ T9011] macvlan0: entered allmulticast mode
[  175.148518][ T9011] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  175.719378][   T33] audit: type=1326 audit(1757316983.416:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.749798][   T33] audit: type=1326 audit(1757316983.416:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.777986][   T33] audit: type=1326 audit(1757316983.416:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.815634][   T33] audit: type=1326 audit(1757316983.416:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.844869][   T33] audit: type=1326 audit(1757316983.416:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.876231][   T33] audit: type=1326 audit(1757316983.416:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.905568][   T33] audit: type=1326 audit(1757316983.416:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.923371][   T33] audit: type=1326 audit(1757316983.416:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.930387][   T33] audit: type=1326 audit(1757316983.416:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  175.973326][   T33] audit: type=1326 audit(1757316983.416:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8993 comm="syz.5.1101" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7a518ebe9 code=0x7fc00000
[  176.030832][ T9025] loop2: detected capacity change from 0 to 131072
[  176.084756][ T9025] XFS (loop2): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  176.120717][ T9025] XFS (loop2): Starting recovery (logdev: internal)
[  176.141572][ T9025] XFS (loop2): Ending recovery (logdev: internal)
[  176.158884][ T9027] loop5: detected capacity change from 0 to 32768
[  176.211150][ T9027] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.247647][ T9027] XFS (loop5): Ending clean mount
[  176.250809][ T9027] XFS (loop5): Quotacheck needed: Please wait.
[  176.277671][ T9027] XFS (loop5): Quotacheck: Done.
[  176.369018][ T6839] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.918280][ T5855] XFS (loop2): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  176.941930][ T9056] TCP: TCP_TX_DELAY enabled
[  177.618618][ T9072] loop5: detected capacity change from 0 to 32768
[  177.783354][ T5909] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  177.939804][ T5909] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  177.943291][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.961598][ T5909] usb 3-1: config 0 descriptor??
[  177.968614][ T5909] cp210x 3-1:0.0: cp210x converter detected
[  178.060202][ T9083] netlink: 'syz.5.1133': attribute type 6 has an invalid length.
[  178.071049][ T9083] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1133'.
[  178.174026][ T5909] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  178.194772][ T5909] cp210x 3-1:0.0: querying part number failed
[  178.216854][ T5909] usb 3-1: cp210x converter now attached to ttyUSB0
[  178.253585][ T9087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1135'.
[  178.378717][ T5909] usb 3-1: USB disconnect, device number 12
[  178.387890][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  178.402798][ T5909] cp210x 3-1:0.0: device disconnected
[  179.011893][ T9111] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  179.733367][ T5924] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  179.885196][ T5924] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  179.888691][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.894564][ T5924] usb 6-1: config 0 descriptor??
[  179.903517][ T5923] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  180.063326][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  180.068732][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  180.073487][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  180.077803][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  180.081650][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  180.100531][ T5923] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  180.104097][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.106875][ T5923] usb 3-1: Product: syz
[  180.108350][ T5923] usb 3-1: Manufacturer: syz
[  180.110214][ T5923] usb 3-1: SerialNumber: syz
[  180.123836][ T5923] usb 3-1: config 0 descriptor??
[  180.300818][ T9144] geneve2: entered promiscuous mode
[  180.302958][ T9144] geneve2: entered allmulticast mode
[  180.328630][ T5924] hackrf 6-1:0.0: Board ID: 00
[  180.332820][ T5924] hackrf 6-1:0.0: Firmware version: 
[  180.338658][ T5923] usb 3-1: USB disconnect, device number 13
[  180.351600][ T5924] hackrf 6-1:0.0: Registered as swradio24
[  180.355854][ T5924] videodev: could not get a free minor
[  180.358160][ T5924] hackrf 6-1:0.0: Failed to register as video device (-23)
[  180.381524][ T5924] hackrf 6-1:0.0: probe with driver hackrf failed with error -23
[  180.537960][ T5923] usb 6-1: USB disconnect, device number 13
[  180.691871][ T9149] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1161'.
[  180.980598][ T9151] loop2: detected capacity change from 0 to 512
[  181.001844][ T9151] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  181.005575][ T9151] System zones: 0-2, 18-18, 34-35
[  181.012151][ T9151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.018031][ T9151] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  181.056742][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.234334][ T9162] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  181.349218][ T9166] loop5: detected capacity change from 0 to 4096
[  181.367211][ T9167] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.455380][ T5923] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  181.613201][ T5923] usb 3-1: Using ep0 maxpacket: 32
[  181.619690][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.624480][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.628136][ T5923] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  181.631495][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.640276][ T5923] usb 3-1: config 0 descriptor??
[  181.724193][ T9173] loop5: detected capacity change from 0 to 32768
[  181.728091][ T9173] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1171 (9173)
[  181.743828][ T9173] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  181.747877][ T9173] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  181.772619][ T9173] BTRFS info (device loop5): enabling ssd optimizations
[  181.777489][ T9173] BTRFS info (device loop5): enabling free space tree
[  181.779574][ T9173] BTRFS info (device loop5): use zstd compression, level 3
[  181.928030][ T6839] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  182.086960][ T9193] input: syz0 as /devices/virtual/input/input8
[  182.130839][ T5923] saitek 0003:06A3:0621.0006: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.2-1/input0
[  182.303340][ T5923] usb 3-1: USB disconnect, device number 14
[  182.478447][ T9208] loop5: detected capacity change from 0 to 8
[  182.496136][ T9208] SQUASHFS error: xz decompression failed, data probably corrupt
[  182.500074][ T9208] SQUASHFS error: Failed to read block 0x108: -5
[  182.504913][ T9208] SQUASHFS error: Unable to read metadata cache entry [106]
[  182.508004][ T9208] SQUASHFS error: Unable to read inode 0x11f
[  182.580334][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.583585][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.587457][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.590731][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.593379][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.596161][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.599706][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1182'.
[  182.702508][ T9222] loop5: detected capacity change from 0 to 256
[  182.709085][ T9222] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  183.122937][ T9237] loop2: detected capacity change from 0 to 4096
[  183.130316][ T9237] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  183.174085][ T9237] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  183.189296][ T9237] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  183.296932][ T9245] ntfs3(loop2): ino=1e, mi_enum_attr
[  183.320173][ T9226] loop5: detected capacity change from 0 to 32768
[  183.352748][ T9226] XFS: noikeep mount option is deprecated.
[  183.454888][ T9226] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  183.661391][ T9226] XFS (loop5): Ending clean mount
[  183.674062][ T9226] XFS (loop5): Quotacheck needed: Please wait.
[  183.747577][ T9226] XFS (loop5): Quotacheck: Done.
[  183.863860][ T6839] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.255334][ T9257] loop5: detected capacity change from 0 to 128
[  184.260637][ T9257] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.272867][ T9257] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.432387][ T4211] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  185.298347][ T9277] loop5: detected capacity change from 0 to 32768
[  185.315750][ T9277] (syz.5.1208,9277,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry too close to end - offset=220, inode=74, rec_len=284, name_len=16
[  185.323155][ T9277] (syz.5.1208,9277,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=9, slot=0
[  185.327286][ T9277] (syz.5.1208,9277,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  185.331175][ T9277] (syz.5.1208,9277,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  185.337872][ T9277] (syz.5.1208,9277,1):ocfs2_fill_super:1177 ERROR: status = -22
[  185.665680][ T9289] __nla_validate_parse: 42 callbacks suppressed
[  185.665697][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1213'.
[  185.679157][ T9289] chnl_net:caif_netlink_parms(): no params data found
[  186.001394][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.060582][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1243'.
[  187.310013][ T9368] loop5: detected capacity change from 0 to 736
[  187.394070][ T9371] loop5: detected capacity change from 0 to 2048
[  187.403269][ T9371] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  187.411571][ T9371] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.036599][ T9377] netlink: 'syz.2.1253': attribute type 2 has an invalid length.
[  188.039592][ T9377] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1253'.
[  188.291647][ T9379] loop2: detected capacity change from 0 to 32768
[  188.347727][ T9379] JBD2: Ignoring recovery information on journal
[  188.406723][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'.
[  188.419516][ T9379] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  188.463688][ T9390] loop5: detected capacity change from 0 to 512
[  188.482251][ T9379] ocfs2: Unmounting device (7,2) on (node local)
[  188.494971][ T9390] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  188.515393][ T9390] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  188.524791][ T9390] EXT4-fs (loop5): 1 truncate cleaned up
[  188.531088][ T9390] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.539047][ T9390] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.822598][ T9404] loop2: detected capacity change from 0 to 4096
[  188.843426][ T9404] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  189.056751][ T9407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1264'.
[  189.366717][   T10] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  189.377737][ T9409] loop2: detected capacity change from 0 to 16
[  189.380301][ T9409] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  189.536336][   T10] usb 6-1: Using ep0 maxpacket: 8
[  189.549232][   T10] usb 6-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config
[  189.553397][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  189.567834][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  189.571388][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.580078][   T10] usbtmc 6-1:16.0: bulk endpoints not found
[  189.741191][ T9421] loop2: detected capacity change from 0 to 1024
[  189.751047][ T9421] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  189.764528][ T9421] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  189.774343][ T9421] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  189.777074][ T9421] EXT4-fs (loop2): orphan cleanup on readonly fs
[  189.779573][ T9421] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1272: Inode bitmap for bg 0 marked uninitialized
[  189.787423][ T9421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  189.809302][ T9421] EXT4-fs (loop2): ext4_remount: Checksum for group 0 failed (32298!=35945)
[  189.830909][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.864283][ T9460] loop2: detected capacity change from 0 to 32768
[  190.871660][ T9460] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1281 (9460)
[  190.889224][ T9460] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  190.899700][ T9460] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  191.000786][ T9460] BTRFS info (device loop2): setting nodatasum
[  191.003493][ T9460] BTRFS info (device loop2): setting nodatacow
[  191.006197][ T9460] BTRFS info (device loop2): enabling free space tree
[  191.009008][ T9460] BTRFS info (device loop2): max_inline set to 0
[  191.105478][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.647813][ T9500] loop2: detected capacity change from 0 to 32768
[  191.658140][ T9500] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1290 (9500)
[  191.685710][ T9500] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  191.690358][ T9500] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  191.766508][ T9500] BTRFS info (device loop2): rebuilding free space tree
[  191.793566][ T9500] BTRFS info (device loop2): disabling free space tree
[  191.797490][ T9500] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  191.803936][ T9500] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  191.817748][ T9500] BTRFS info (device loop2): enabling ssd optimizations
[  191.820494][ T9500] BTRFS info (device loop2): force clearing of disk cache
[  191.825487][ T9500] BTRFS info (device loop2): enabling auto defrag
[  191.829350][ T9500] BTRFS info (device loop2): doing ref verification
[  191.832810][ T9500] BTRFS info (device loop2): max_inline set to 4096
[  192.053016][ T6383] BTRFS error (device loop2): attempting to add another ref for an existing ref on a tree block
[  192.057389][ T6383] BTRFS error (device loop2): dumping block entry [6881280 4096], num_refs 1, metadata 1, from disk 0
[  192.062414][ T6383] BTRFS error (device loop2):   ref root 5, parent 0, owner 263, offset 0, num_refs 1
[  192.066217][ T6383] BTRFS error (device loop2):   root entry 5, num_refs 0
[  192.069171][ T6383] BTRFS error (device loop2):   root entry 10, num_refs 18446744073709551615
[  192.072525][ T5910] usb 6-1: USB disconnect, device number 14
[  192.072641][ T6383] BTRFS error (device loop2):   Ref action 3, root 5, ref_root 5, parent 0, owner 263, offset 0, num_refs 1
[  192.080338][ T6383]    insert_reserved_file_extent+0x73f/0x970
[  192.083156][ T6383]    btrfs_finish_one_ordered+0xb71/0x1fd0
[  192.085427][ T6383]    btrfs_work_helper+0x39c/0xc20
[  192.087423][ T6383]    process_scheduled_works+0xae1/0x17b0
[  192.089731][ T6383]    worker_thread+0x8a0/0xda0
[  192.091793][ T6383]    kthread+0x711/0x8a0
[  192.094093][ T6383]    ret_from_fork+0x3fc/0x770
[  192.096076][ T6383]    ret_from_fork_asm+0x1a/0x30
[  192.097949][ T6383] BTRFS error (device loop2):   Ref action 1, root 5, ref_root 5, parent 0, owner 263, offset 0, num_refs 1
[  192.102424][ T6383]    btrfs_drop_extents+0x1037/0x2da0
[  192.104440][ T6383]    insert_reserved_file_extent+0x2dc/0x970
[  192.106809][ T6383]    btrfs_finish_one_ordered+0xb71/0x1fd0
[  192.109435][ T6383]    btrfs_work_helper+0x39c/0xc20
[  192.111397][ T6383]    process_scheduled_works+0xae1/0x17b0
[  192.113234][ T6383]    worker_thread+0x8a0/0xda0
[  192.114884][ T6383]    kthread+0x711/0x8a0
[  192.116318][ T6383]    ret_from_fork+0x3fc/0x770
[  192.118068][ T6383]    ret_from_fork_asm+0x1a/0x30
[  192.143371][ T9500] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  192.317379][ T5855] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  193.062995][ T5910] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  193.223334][ T5910] usb 6-1: Using ep0 maxpacket: 32
[  193.227364][ T5910] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  193.241604][ T5910] usb 6-1: config 0 has no interface number 0
[  193.249392][ T5910] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.39
[  193.252978][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.265823][ T5910] usb 6-1: Product: syz
[  193.267672][ T5910] usb 6-1: Manufacturer: syz
[  193.269696][ T5910] usb 6-1: SerialNumber: syz
[  193.277595][ T5910] usb 6-1: config 0 descriptor??
[  193.284562][ T5910] smsc95xx v2.0.0
[  193.481781][ T9574] loop2: detected capacity change from 0 to 40427
[  193.501242][ T9574] F2FS-fs (loop2): invalid crc value
[  193.664190][ T9574] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.676344][ T9574] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.813034][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.813034][ T9574] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.836980][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.836980][ T9574] loop2: rw=524288, sector=45096, nr_sectors = 8 limit=40427
[  193.862001][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.862001][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.877283][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.877283][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.882096][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.882096][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.891401][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.891401][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.898401][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.898401][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.903247][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.903247][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.916222][ T9600] syz.2.1319: attempt to access beyond end of device
[  193.916222][ T9600] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  193.928298][ T9574] syz.2.1319: attempt to access beyond end of device
[  193.928298][ T9574] loop2: rw=0, sector=45096, nr_sectors = 8 limit=40427
[  194.123564][ T9604] netlink: 'syz.3.1329': attribute type 5 has an invalid length.
[  194.200770][ T5855] CPU: 0 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  194.200792][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  194.200801][ T5855] Call Trace:
[  194.200808][ T5855]  <TASK>
[  194.200815][ T5855]  dump_stack_lvl+0x189/0x250
[  194.200839][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  194.200856][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[  194.200899][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  194.200919][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  194.200945][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[  194.200971][ T5855]  f2fs_write_end_io+0x886/0xb60
[  194.200999][ T5855]  __submit_merged_bio+0x27a/0x6a0
[  194.201025][ T5855]  __submit_merged_write_cond+0x255/0x530
[  194.201049][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[  194.201067][ T5855]  ? __lock_acquire+0xab9/0xd20
[  194.201109][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.201172][ T5855]  ? __mod_zone_page_state+0xd7/0x140
[  194.201200][ T5855]  ? folios_put_refs+0x560/0x640
[  194.201224][ T5855]  ? __pfx_folios_put_refs+0x10/0x10
[  194.201236][ T5855]  ? rcu_is_watching+0x15/0xb0
[  194.201258][ T5855]  ? __lock_acquire+0xab9/0xd20
[  194.201292][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  194.201311][ T5855]  do_writepages+0x32e/0x550
[  194.201334][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  194.201352][ T5855]  filemap_fdatawrite+0x199/0x240
[  194.201369][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  194.201427][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  194.201449][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[  194.201477][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[  194.201515][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  194.201576][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[  194.201594][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[  194.201612][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[  194.201623][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[  194.201648][ T5855]  ? shrinker_free+0x2ce/0x3e0
[  194.201665][ T5855]  deactivate_locked_super+0xbc/0x130
[  194.201684][ T5855]  cleanup_mnt+0x425/0x4c0
[  194.201699][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.201720][ T5855]  task_work_run+0x1d4/0x260
[  194.201740][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  194.201755][ T5855]  ? __x64_sys_umount+0x122/0x160
[  194.201777][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  194.201821][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  194.201840][ T5855]  do_syscall_64+0x2bd/0x3b0
[  194.201852][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  194.201899][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.201912][ T5855]  ? exc_page_fault+0x9f/0xf0
[  194.201932][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  194.201945][ T5855] RIP: 0033:0x7f22e3d8ff17
[  194.201957][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  194.201967][ T5855] RSP: 002b:00007ffde879b6b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  194.201978][ T5855] RAX: 0000000000000000 RBX: 00007f22e3e11c05 RCX: 00007f22e3d8ff17
[  194.201986][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde879b770
[  194.201993][ T5855] RBP: 00007ffde879b770 R08: 0000000000000000 R09: 0000000000000000
[  194.202002][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde879c800
[  194.202009][ T5855] R13: 00007f22e3e11c05 R14: 000000000002f28c R15: 00007ffde879c840
[  194.202034][ T5855]  </TASK>
[  194.273191][ T5855] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  194.274290][    C0] hpet_rtc_timer_reinit: 17 callbacks suppressed
[  194.274303][    C0] hpet: Lost 3 RTC interrupts
[  194.290746][ T5910] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  194.693581][ T5910] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  194.914680][ T9625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'.
[  194.927186][ T9627] overlayfs: workdir and upperdir must be separate subtrees
[  194.936216][ T5910] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  194.959951][ T5910] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[  194.981451][ T5910] usb 6-1: USB disconnect, device number 15
[  195.029590][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  195.084147][ T9633] veth0: entered promiscuous mode
[  195.088131][ T9632] veth0: left promiscuous mode
[  195.831590][ T5923] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  195.991919][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  195.995403][ T5923] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[  196.003991][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.007227][ T5923] usb 3-1: config 0 has no interface number 0
[  196.009664][ T5923] usb 3-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  196.012605][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.027139][ T5923] usb 3-1: config 0 descriptor??
[  196.032916][ T5923] usb 3-1: Found UVC 0.00 device <unnamed> (0bd3:05f4)
[  196.035655][ T5923] usb 3-1: No valid video chain found.
[  196.097182][ T9658] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  196.119380][ T9658] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1352'.
[  196.145077][ T9658] netlink: 'syz.5.1352': attribute type 1 has an invalid length.
[  196.148200][ T9658] netlink: 'syz.5.1352': attribute type 2 has an invalid length.
[  196.247557][ T6843] usb 3-1: USB disconnect, device number 15
[  196.348116][ T9677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1360'.
[  196.476427][ T9683] loop5: detected capacity change from 0 to 8
[  196.529163][ T9685] loop5: detected capacity change from 0 to 256
[  197.279019][ T9705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'.
[  197.331151][ T9699] loop2: detected capacity change from 0 to 32768
[  197.481920][ T9699] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  197.481935][ T9699]   allowing incompatible features above 0.0: (unknown version)
[  197.481941][ T9699]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  197.496835][ T9699] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  197.500100][ T9699] bcachefs (loop2): initializing new filesystem
[  197.513413][ T9699] bcachefs (loop2): going read-write
[  197.526721][ T9699] bcachefs (loop2): marking superblocks
[  197.539626][ T9699] bcachefs (loop2): initializing freespace
[  197.544598][ T9699] bcachefs (loop2): done initializing freespace
[  197.550087][ T9699] bcachefs (loop2): reading snapshots table
[  197.552198][ T9699] bcachefs (loop2): reading snapshots done
[  197.596484][ T9699] bcachefs (loop2): done starting filesystem
[  198.204077][ T5855] bcachefs (loop2): shutting down
[  198.207486][ T5855] bcachefs (loop2): going read-only
[  198.209645][ T5855] bcachefs (loop2): finished waiting for writes to stop
[  198.219544][ T5855] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  198.307547][ T5855] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  198.315576][ T5855] bcachefs (loop2): clean shutdown complete, journal seq 4
[  198.320239][ T5855] bcachefs (loop2): marking filesystem clean
[  198.373317][ T5855] bcachefs (loop2): shutdown complete
[  200.261761][ T9761] loop5: detected capacity change from 0 to 40427
[  200.379022][ T9761] F2FS-fs (loop5): invalid crc value
[  200.506570][ T9761] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  200.516628][ T9761] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  200.532897][   T33] audit: type=1800 audit(1757317008.012:37): pid=9761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1395" name="bus" dev="loop5" ino=10 res=0 errno=0
[  200.584804][ T6839] bio_check_eod: 998 callbacks suppressed
[  200.584827][ T6839] syz-executor: attempt to access beyond end of device
[  200.584827][ T6839] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.596890][ T6839] CPU: 0 UID: 0 PID: 6839 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  200.596909][ T6839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  200.596918][ T6839] Call Trace:
[  200.596924][ T6839]  <TASK>
[  200.596930][ T6839]  dump_stack_lvl+0x189/0x250
[  200.596956][ T6839]  ? __pfx_dump_stack_lvl+0x10/0x10
[  200.596972][ T6839]  ? __pfx_queue_work_on+0x10/0x10
[  200.596986][ T6839]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  200.597004][ T6839]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  200.597033][ T6839]  f2fs_handle_critical_error+0x37c/0x540
[  200.597060][ T6839]  f2fs_write_end_io+0x886/0xb60
[  200.597091][ T6839]  __submit_merged_bio+0x27a/0x6a0
[  200.597116][ T6839]  __submit_merged_write_cond+0x255/0x530
[  200.597142][ T6839]  f2fs_write_data_pages+0x261d/0x3000
[  200.597195][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.597256][ T6839]  ? __mod_zone_page_state+0xd7/0x140
[  200.597284][ T6839]  ? folios_put_refs+0x560/0x640
[  200.597311][ T6839]  ? __lock_acquire+0xab9/0xd20
[  200.597369][ T6839]  ? do_raw_spin_lock+0x121/0x290
[  200.597394][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  200.597410][ T6839]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  200.597431][ T6839]  do_writepages+0x32e/0x550
[  200.597460][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  200.597481][ T6839]  filemap_fdatawrite+0x199/0x240
[  200.597499][ T6839]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  200.597560][ T6839]  ? do_raw_spin_unlock+0x4d/0x240
[  200.597582][ T6839]  f2fs_sync_dirty_inodes+0x31f/0x830
[  200.597612][ T6839]  f2fs_write_checkpoint+0x95a/0x1df0
[  200.597649][ T6839]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  200.597709][ T6839]  ? kill_f2fs_super+0x298/0x6c0
[  200.597729][ T6839]  kill_f2fs_super+0x2c3/0x6c0
[  200.597749][ T6839]  ? __pfx_kill_f2fs_super+0x10/0x10
[  200.597761][ T6839]  ? radix_tree_delete_item+0x2b6/0x400
[  200.597787][ T6839]  ? shrinker_free+0x2ce/0x3e0
[  200.597804][ T6839]  deactivate_locked_super+0xbc/0x130
[  200.597829][ T6839]  cleanup_mnt+0x425/0x4c0
[  200.597845][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.597868][ T6839]  task_work_run+0x1d4/0x260
[  200.597889][ T6839]  ? __pfx_task_work_run+0x10/0x10
[  200.597905][ T6839]  ? __x64_sys_umount+0x122/0x160
[  200.597927][ T6839]  ? exit_to_user_mode_loop+0x40/0x110
[  200.597950][ T6839]  exit_to_user_mode_loop+0xec/0x110
[  200.597970][ T6839]  do_syscall_64+0x2bd/0x3b0
[  200.597981][ T6839]  ? lockdep_hardirqs_on+0x9c/0x150
[  200.598000][ T6839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.598014][ T6839]  ? exc_page_fault+0x9f/0xf0
[  200.598034][ T6839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  200.598047][ T6839] RIP: 0033:0x7fc7a518ff17
[  200.598060][ T6839] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  200.598072][ T6839] RSP: 002b:00007fff74417cd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  200.598086][ T6839] RAX: 0000000000000000 RBX: 00007fc7a5211c05 RCX: 00007fc7a518ff17
[  200.598096][ T6839] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff74417d90
[  200.598104][ T6839] RBP: 00007fff74417d90 R08: 0000000000000000 R09: 0000000000000000
[  200.598112][ T6839] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff74418e20
[  200.598121][ T6839] R13: 00007fc7a5211c05 R14: 00000000000309e7 R15: 00007fff74418e60
[  200.598147][ T6839]  </TASK>
[  200.598152][ T6839] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  200.749823][ T5863] Bluetooth: hci2: command tx timeout
[  200.986241][ T9794] loop2: detected capacity change from 0 to 4096
[  201.000547][ T9794] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  201.003578][ T9794] UDF-fs: Scanning with blocksize 512 failed
[  201.028984][ T9794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.062033][ T9798] loop5: detected capacity change from 0 to 2048
[  201.079087][ T9798] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  201.080885][ T9794] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[  201.082513][ T9798] UDF-fs: Scanning with blocksize 512 failed
[  201.097394][ T9798] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.802003][ T9832] veth0_to_bond: entered allmulticast mode
[  201.854998][ T9836] loop5: detected capacity change from 0 to 164
[  201.871612][ T9836] Unable to read rock-ridge attributes
[  201.897518][ T9836] Unable to read rock-ridge attributes
[  201.915465][ T9836] iso9660: Corrupted directory entry in block 4 of inode 1792
[  202.679275][ T9862] loop5: detected capacity change from 0 to 32768
[  202.733784][ T9862] JBD2: Ignoring recovery information on journal
[  202.791219][ T6843] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  202.792501][ T9862] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  202.873025][ T6839] ocfs2: Unmounting device (7,5) on (node local)
[  202.964091][ T6843] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.972875][ T6843] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  202.980162][ T6843] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  202.989164][ T6843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  203.026759][ T6843] usb 3-1: SerialNumber: syz
[  203.403697][ T6843] usb 3-1: 0:2 : does not exist
[  203.435407][ T6843] usb 3-1: USB disconnect, device number 16
[  203.477572][ T6440] udevd[6440]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  203.865854][ T9899] netlink: 'syz.5.1455': attribute type 16 has an invalid length.
[  203.868888][ T9899] netlink: 'syz.5.1455': attribute type 17 has an invalid length.
[  204.011554][ T9909] loop2: detected capacity change from 0 to 256
[  205.356989][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  205.447131][ T9948] input: syz0 as /devices/virtual/input/input9
[  205.493138][ T9950] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1479'.
[  205.517324][   T10] usb 6-1: Using ep0 maxpacket: 32
[  205.520772][   T10] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  205.523727][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.533068][   T10] usb 6-1: config 0 descriptor??
[  205.541927][   T10] as10x_usb: device has been detected
[  205.545252][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  205.564682][   T10] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  205.584588][   T10] as10x_usb: error during firmware upload part1
[  205.587738][   T10] Registered device nBox DVB-T Dongle
[  205.906265][ T9958] loop2: detected capacity change from 0 to 2048
[  206.046509][ T9958] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  206.052832][ T9958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.056093][   T10] usb 6-1: USB disconnect, device number 16
[  206.132832][   T10] Unregistered device nBox DVB-T Dongle
[  206.135142][   T10] as10x_usb: device has been disconnected
[  206.162134][ T9960] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  206.813605][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1500'.
[  206.817076][T10003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1500'.
[  206.842470][T10005] loop2: detected capacity change from 0 to 16
[  206.862692][T10005] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  206.875561][T10005] erofs (device loop2): mounted with root inode @ nid 36.
[  207.004626][T10005] syz.2.1502: attempt to access beyond end of device
[  207.004626][T10005] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16
[  207.027463][T10005] syz.2.1502: attempt to access beyond end of device
[  207.027463][T10005] loop2: rw=0, sector=46, nr_sectors = 1 limit=16
[  207.035989][T10005] erofs (device loop2): read error -5 @ 0 of nid 36
[  207.566303][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1506'.
[  207.841319][T10027] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1510'.
[  208.230612][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  208.763669][T10038] loop2: detected capacity change from 0 to 32768
[  208.794103][T10038] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  209.041622][T10049] Bluetooth: MGMT ver 1.23
[  209.230698][T10053] netlink: 'syz.3.1521': attribute type 13 has an invalid length.
[  209.671500][T10063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1526'.
[  210.129753][ T5855] ocfs2: Unmounting device (7,2) on (node local)
[  210.212631][T10079] loop5: detected capacity change from 0 to 128
[  210.246406][T10079] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  210.251856][T10079] ext4 filesystem being mounted at /371/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  210.287824][T10085] loop2: detected capacity change from 0 to 8
[  210.303779][ T6839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  210.318579][T10085] SQUASHFS error: Unable to read directory block [629:46]
[  210.429827][ T6440] udevd[6440]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory
[  210.440286][T10089] loop5: detected capacity change from 0 to 1024
[  210.469219][T10089] EXT4-fs (loop5): Can't support bigalloc feature without extents feature
[  210.469219][T10089] 
[  210.473104][T10089] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities
[  210.653440][T10100] netlink: 'syz.2.1543': attribute type 1 has an invalid length.
[  210.657682][T10100] netlink: 'syz.2.1543': attribute type 2 has an invalid length.
[  210.662647][T10100] netlink: 'syz.2.1543': attribute type 1 has an invalid length.
[  210.665768][T10100] netlink: 'syz.2.1543': attribute type 2 has an invalid length.
[  210.679576][T10102] : renamed from bridge_slave_0 (while UP)
[  210.852030][   T10] usb 6-1: new full-speed USB device number 17 using dummy_hcd
[  211.015567][   T10] usb 6-1: config 2 has an invalid interface number: 183 but max is 0
[  211.019070][   T10] usb 6-1: config 2 has no interface number 0
[  211.021674][   T10] usb 6-1: config 2 interface 183 has no altsetting 0
[  211.029571][   T10] usb 6-1: New USB device found, idVendor=0d49, idProduct=7310, bcdDevice=58.ae
[  211.033184][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.037658][   T10] usb 6-1: Product: syz
[  211.039367][   T10] usb 6-1: Manufacturer: syz
[  211.041372][   T10] usb 6-1: SerialNumber: syz
[  211.286472][   T10] usb-storage 6-1:2.183: USB Mass Storage device detected
[  211.346760][   T10] usb-storage 6-1:2.183: Quirks match for vid 0d49 pid 7310: 8000
[  211.428818][   T10] usb 6-1: USB disconnect, device number 17
[  211.566208][T10128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1553'.
[  212.354703][T10139] loop5: detected capacity change from 0 to 32768
[  212.394273][T10139] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  212.398699][T10139] lbmIODone: I/O error in JFS log
[  212.401427][T10139] *** Log Format Error ! ***
[  212.407675][T10139] lmLogInit: exit(-22)
[  212.409701][T10139] lmLogOpen: exit(-22)
[  212.418102][T10139] non-latin1 character 0xffff found in JFS file name
[  212.421501][T10139] mount with iocharset=utf8 to access
[  212.426479][T10139] jfs_dirty_inode called on read-only volume
[  212.431236][T10139] Is remount racy?
[  213.003378][T10169] loop5: detected capacity change from 0 to 64
[  213.263782][T10176] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1576'.
[  213.269840][T10176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1576'.
[  213.988824][T10210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1589'.
[  213.992355][T10210] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1589'.
[  214.046030][T10213] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  214.349506][T10226] overlayfs: failed to resolve './file0': -2
[  214.589675][T10236] vlan2: entered promiscuous mode
[  214.592420][T10236] syz_tun: entered promiscuous mode
[  214.732904][   T33] audit: type=1326 audit(1757317021.285:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10243 comm="syz.3.1605" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff773f8ebe9 code=0x0
[  215.138234][T10268] loop5: detected capacity change from 0 to 1024
[  215.168280][T10268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.189177][T10268] EXT4-fs warning (device loop5): ext4_rmdir:3187: inode #11: comm syz.5.1617: empty directory 'file1' has too many links (111)
[  215.226395][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.313568][T10277] loop5: detected capacity change from 0 to 4096
[  215.319638][T10277] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  215.339385][T10277] ntfs3(loop5): ino=19, mi_enum_attr
[  215.357570][T10277] ntfs3(loop5): failed to convert "c46c" to cp1250
[  215.480403][T10277] ntfs3(loop5): ino=20, mi_enum_attr
[  215.656737][T10287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.182387][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1628'.
[  216.463538][T10303] loop5: detected capacity change from 0 to 1024
[  216.496043][T10303] overlay: filesystem on ./file0 not supported
[  216.530441][   T36] hfsplus: b-tree write err: -5, ino 4
[  216.637877][T10308] loop5: detected capacity change from 0 to 512
[  216.659473][T10308] FAT-fs (loop5): bogus number of FAT sectors
[  216.661912][T10308] FAT-fs (loop5): Can't find a valid FAT filesystem
[  217.421068][T10316] loop5: detected capacity change from 0 to 32768
[  217.430147][T10316] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section disk_groups: label 3 empty
[  217.430147][T10316] disk_groups (size 2912):
[  217.430147][T10316] [deleted] [deleted] [parent 1028 name ] [parent 1028 name ] [parent 0 name ] [parent 32 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [deleted] [parent 146317 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 175370 name ] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [deleted] [parent 95120 name ] [deleted] [deleted] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 name ] [parent 0 
[  217.430297][T10316] bcachefs: bch2_fs_get_tree() error: invalid_sb_disk_groups
[  217.466616][    C1] vkms_vblank_simulate: vblank timer overrun
[  218.072782][T10341] loop5: detected capacity change from 0 to 32768
[  218.082782][T10341] XFS: ikeep mount option is deprecated.
[  218.136392][T10341] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  218.145795][T10341] XFS (loop5): Mounting V5 filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb in no-recovery mode. Filesystem will be inconsistent.
[  218.172623][T10341] XFS (loop5): please mount without quota.
[  218.929695][T10407] loop5: detected capacity change from 0 to 512
[  218.944323][T10407] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  218.961534][T10407] EXT4-fs (loop5): Remounting filesystem read-only
[  218.965237][T10407] EXT4-fs (loop5): 1 truncate cleaned up
[  218.971772][T10407] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  219.233401][ T5910] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  219.399869][ T5910] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  219.406449][ T5910] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.410298][ T5910] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  219.413768][ T5910] usb 6-1: config 1 has no interface number 1
[  219.426518][ T5910] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  219.438893][ T5910] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.442403][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.445780][ T5910] usb 6-1: Product: syz
[  219.447617][ T5910] usb 6-1: Manufacturer: syz
[  219.449456][ T5910] usb 6-1: SerialNumber: syz
[  219.686722][ T5910] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  219.689738][ T5910] usb 6-1: MIDIStreaming interface descriptor not found
[  219.721623][ T5910] usb 6-1: USB disconnect, device number 18
[  219.785398][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.296830][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.638652][T10465] loop5: detected capacity change from 0 to 512
[  220.654791][T10465] EXT4-fs (loop5): Invalid log block size: 15
[  221.030802][T10471] 9pnet_fd: Insufficient options for proto=fd
[  221.575212][    T9] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  221.615568][T10481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1704'.
[  221.754355][T10485] loop5: detected capacity change from 0 to 2048
[  221.769165][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  221.774288][    T9] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  221.777352][    T9] usb 3-1: config 0 has no interface number 0
[  221.786920][    T9] usb 3-1: config 0 interface 105 altsetting 10 endpoint 0xE is Bulk; changing to Interrupt
[  221.793005][    T9] usb 3-1: config 0 interface 105 has no altsetting 0
[  221.817791][    T9] usb 3-1: string descriptor 0 read error: -22
[  221.820930][    T9] usb 3-1: New USB device found, idVendor=1943, idProduct=2250, bcdDevice= 0.01
[  221.825110][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.841015][    T9] usb 3-1: config 0 descriptor??
[  221.851705][T10473] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  221.885624][    T9] usb 3-1: Found UVC 0.00 device <unnamed> (1943:2250)
[  221.891325][    T9] usb 3-1: No valid video chain found.
[  221.893552][    T9] go7007 3-1:0.105: Sensoray 2250 found
[  221.899922][    T9] go7007 3-1:0.105: probe with driver go7007 failed with error -12
[  221.947533][T10481] team0 (unregistering): Port device team_slave_0 removed
[  221.957983][T10481] team0 (unregistering): Port device team_slave_1 removed
[  222.081679][    T9] usb 3-1: USB disconnect, device number 17
[  222.162710][ T5910] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  222.327611][ T5910] usb 6-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  222.331186][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.335012][ T5910] usb 6-1: Product: syz
[  222.336726][ T5910] usb 6-1: Manufacturer: syz
[  222.338575][ T5910] usb 6-1: SerialNumber: syz
[  222.347075][ T5910] usb 6-1: config 0 descriptor??
[  222.353520][ T5910] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22
[  222.571604][ T6843] usb 6-1: USB disconnect, device number 19
[  222.664114][T10493] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  222.723050][T10496] netlink: 'syz.3.1712': attribute type 10 has an invalid length.
[  222.727393][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.732691][T10496] bridge0: port 1() entered disabled state
[  222.750195][T10496] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.753306][T10496] bridge0: port 2(bridge_slave_1) entered forwarding state
[  222.756647][T10496] bridge0: port 1() entered blocking state
[  222.759111][T10496] bridge0: port 1() entered forwarding state
[  222.766688][T10496] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  222.778326][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'.
[  222.781687][T10496] bridge_slave_1: left allmulticast mode
[  222.781716][T10499] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  222.784338][T10496] bridge_slave_1: left promiscuous mode
[  222.790987][T10499] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  222.791771][T10496] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.796527][T10499] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  222.799701][T10499] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  222.802473][T10499] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  222.803335][T10496] : left allmulticast mode
[  222.810045][T10496] : left promiscuous mode
[  222.812177][T10496] bridge0: port 1() entered disabled state
[  222.842918][T10496] bond0: (slave bridge0): Releasing backup interface
[  223.616673][ T6843] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  223.776864][ T6843] usb 6-1: Using ep0 maxpacket: 32
[  223.781785][ T6843] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  223.784871][ T6843] usb 6-1: config 0 has no interface number 0
[  223.789926][ T6843] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  223.793524][ T6843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.796476][ T6843] usb 6-1: Product: syz
[  223.798120][ T6843] usb 6-1: Manufacturer: syz
[  223.810976][ T6843] usb 6-1: SerialNumber: syz
[  223.815919][ T6843] usb 6-1: config 0 descriptor??
[  223.822234][ T6843] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  224.033046][T10562] trusted_key: syz.2.1743 sent an empty control message without MSG_MORE.
[  224.043140][ T6843] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  224.059084][ T6843] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  224.257226][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 110
[  224.473261][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  224.477148][    T9] usb 6-1: USB disconnect, device number 20
[  224.489115][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  224.502249][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  224.508550][    T9] quatech2 6-1:0.51: device disconnected
[  224.974213][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  225.136461][    T9] usb 3-1: Using ep0 maxpacket: 32
[  225.145023][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  225.151749][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.158469][    T9] usb 3-1: config 0 descriptor??
[  225.166086][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[  225.248012][T10595] loop5: detected capacity change from 0 to 4096
[  225.311201][T10595] ntfs3(loop5): ino=19, mi_enum_attr
[  225.313244][T10595] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  225.557372][T10603] PKCS8: Unsupported PKCS#8 version
[  225.615049][    T9] gspca_sq930x: ucbus_write failed -71
[  225.621007][    T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  225.631525][T10601] loop5: detected capacity change from 0 to 32768
[  225.663233][    T9] usb 3-1: USB disconnect, device number 18
[  226.812283][T10614] read_mapping_page failed!
[  226.814803][T10614] jfs_create: dtInsert returned -EIO
[  226.816766][T10614] ERROR: (device loop5): jfs_create: 
[  226.816766][T10614] 
[  227.188439][T10614] ERROR: (device loop5): remounting filesystem as read-only
[  227.659583][T10626] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1770'.
[  227.765785][T10630] loop5: detected capacity change from 0 to 128
[  227.798088][T10630] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  227.818370][T10630] ext4 filesystem being mounted at /439/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  227.927761][ T6839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  228.284451][T10638] loop5: detected capacity change from 0 to 32768
[  228.310614][T10638] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  228.333161][T10638] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  228.339315][T10638] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  228.344994][T10638] OCFS2: File system is now read-only.
[  228.347799][T10638] (syz.5.1774,10638,1):ocfs2_search_chain:1852 ERROR: status = -30
[  228.351436][T10638] (syz.5.1774,10638,1):ocfs2_search_chain:1940 ERROR: status = -30
[  228.354716][T10638] (syz.5.1774,10638,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  228.359316][T10638] (syz.5.1774,10638,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  228.362755][T10638] (syz.5.1774,10638,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  228.366045][T10638] (syz.5.1774,10638,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  228.369034][T10638] (syz.5.1774,10638,1):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  228.372587][T10638] (syz.5.1774,10638,1):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  228.376121][T10638] (syz.5.1774,10638,1):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  228.379874][T10638] (syz.5.1774,10638,1):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  228.383648][T10638] (syz.5.1774,10638,1):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  228.387304][T10638] (syz.5.1774,10638,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  228.391658][T10638] (syz.5.1774,10638,1):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  228.395901][T10638] (syz.5.1774,10638,1):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  228.399866][T10638] (syz.5.1774,10638,1):ocfs2_lock_allocators:2775 ERROR: status = -30
[  228.403546][T10638] (syz.5.1774,10638,1):ocfs2_write_begin_nolock:1723 ERROR: status = -30
[  228.407335][T10638] (syz.5.1774,10638,1):ocfs2_write_begin:1887 ERROR: status = -30
[  228.439793][ T6839] (syz-executor,6839,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  228.451928][ T6839] ocfs2: Unmounting device (7,5) on (node local)
[  228.882129][T10644] loop5: detected capacity change from 0 to 32768
[  228.897726][T10644] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1777 (10644)
[  228.951189][T10644] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.954971][T10644] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  228.969361][T10644] BTRFS error (device loop5): ignoresuperflags must be used with ro mount option
[  228.973301][T10644] BTRFS error (device loop5): cannot disable free-space-tree
[  228.976185][T10644] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  228.999193][T10644] BTRFS error (device loop5): open_ctree failed: -22
[  229.274770][T10655] trusted_key: encrypted_key: insufficient parameters specified
[  229.941876][T10676] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  230.095172][ T5909] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  230.280237][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.283391][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  230.286483][ T5909] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  230.289717][ T5909] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.295060][ T5909] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  230.297962][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.302966][ T5909] usb 6-1: config 0 descriptor??
[  230.312562][ T5909] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[  230.315088][ T5909] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[  230.526633][ T5924] usb 6-1: USB disconnect, device number 21
[  230.530725][T10698] hsr0: entered promiscuous mode
[  230.536869][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1801'.
[  230.540214][T10698] hsr_slave_0: left promiscuous mode
[  230.543252][T10698] hsr_slave_1: left promiscuous mode
[  230.560417][T10698] hsr0 (unregistering): left promiscuous mode
[  230.723614][T10702] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  230.747213][ T5909] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  230.815669][T10708] netlink: 'syz.3.1805': attribute type 4 has an invalid length.
[  230.833730][T10708] netlink: 'syz.3.1805': attribute type 4 has an invalid length.
[  230.941641][ T5909] usb 3-1: Using ep0 maxpacket: 8
[  230.947512][ T5909] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.952644][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  230.956111][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.963673][ T5909] usb 3-1: config 0 descriptor??
[  230.974114][ T5909] gspca_main: vc032x-2.14.0 probing 046d:0892
[  231.385255][T10722] loop5: detected capacity change from 0 to 32768
[  231.403937][T10722] (syz.5.1811,10722,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.413901][ T5909] gspca_vc032x: reg_r err -71
[  231.415581][ T5909] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  231.432041][T10722] (syz.5.1811,10722,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  231.468635][T10722] JBD2: Ignoring recovery information on journal
[  231.505468][T10722] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  231.553753][ T5909] usb 3-1: USB disconnect, device number 19
[  231.973114][ T6839] ocfs2: Unmounting device (7,5) on (node local)
[  233.467953][T10749] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1819'.
[  234.583837][T10764] Bluetooth: hci0: invalid len left 7, exp >= 258
[  234.777622][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'.
[  235.513087][T10791] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1836'.
[  235.524967][T10791] 0: renamed from hsr_slave_1 (while UP)
[  235.548601][T10791] 0: entered allmulticast mode
[  235.556843][T10791] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  236.708636][T10833] bridge: RTM_NEWNEIGH with invalid ether address
[  236.899416][ T5923] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  237.078811][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short
[  237.082998][ T5923] usb 3-1: config 250 has an invalid interface number: 222 but max is 1
[  237.086230][ T5923] usb 3-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  237.091373][ T5923] usb 3-1: config 250 has no interface number 1
[  237.094076][ T5923] usb 3-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  237.098850][ T5923] usb 3-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  237.103192][ T5923] usb 3-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  237.109286][ T5923] usb 3-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  237.113665][ T5923] usb 3-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  237.117930][ T5923] usb 3-1: config 250 interface 222 has no altsetting 0
[  237.125024][ T5923] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  237.128623][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.140348][ T5923] usb 3-1: Product: syz
[  237.142076][ T5923] usb 3-1: Manufacturer: syz
[  237.143887][ T5923] usb 3-1: SerialNumber: syz
[  237.149376][T10829] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  237.237717][ T5924] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  237.396720][ T5924] usb 6-1: Using ep0 maxpacket: 16
[  237.399445][ T5923] usb 3-1: USB disconnect, device number 20
[  237.406423][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  237.415162][ T5924] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  237.419270][ T5924] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.428826][ T5924] usb 6-1: Product: syz
[  237.430715][ T5924] usb 6-1: Manufacturer: syz
[  237.432585][ T5924] usb 6-1: SerialNumber: syz
[  237.440412][ T5924] usb 6-1: config 0 descriptor??
[  237.444396][ T5924] hub 6-1:0.0: bad descriptor, ignoring hub
[  237.450140][ T5924] hub 6-1:0.0: probe with driver hub failed with error -5
[  237.460060][ T5924] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input11
[  237.679758][T10847] pim6reg: entered allmulticast mode
[  237.889043][ T5909] usb 6-1: USB disconnect, device number 22
[  238.786898][ T5909] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  238.898463][T10896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1885'.
[  238.949717][ T5909] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  238.953296][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.960865][ T5909] usb 6-1: config 0 descriptor??
[  238.966466][ T5909] gspca_main: cpia1-2.14.0 probing 0813:0001
[  239.410603][ T5909] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  239.657869][   T33] audit: type=1326 audit(1757317044.605:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10906 comm="syz.3.1890" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff773f8ebe9 code=0x0
[  239.849900][ T5909] gspca_cpia1: usb_control_msg 02, error -32
[  239.852818][ T5909] gspca_cpia1: usb_control_msg 02, error -71
[  239.858110][ T5909] gspca_cpia1: usb_control_msg 05, error -71
[  239.860733][ T5909] cpia1 6-1:0.0: unexpected systemstate: 00
[  239.864891][ T5909] usb 6-1: USB disconnect, device number 23
[  240.680480][  T791] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  240.856016][  T791] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  240.859143][  T791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  240.865348][  T791] usb 6-1: config 0 has no interface number 0
[  240.872030][  T791] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  240.875924][  T791] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.893075][T10923] bond1: entered promiscuous mode
[  240.897727][  T791] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  240.901212][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.904495][  T791] usb 6-1: Product: syz
[  240.906296][  T791] usb 6-1: Manufacturer: syz
[  240.908125][  T791] usb 6-1: SerialNumber: syz
[  240.912504][  T791] usb 6-1: config 0 descriptor??
[  241.168954][  T791] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71
[  241.249071][  T791] usb 6-1: USB disconnect, device number 24
[  242.117858][T10934] loop5: detected capacity change from 0 to 32768
[  242.130375][T10934] XFS: noikeep mount option is deprecated.
[  242.159522][T10934] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.187942][T10934] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  242.200821][T10934] XFS (loop5): Starting recovery (logdev: internal)
[  242.221002][T10934] XFS (loop5): Ending recovery (logdev: internal)
[  242.256579][ T6839] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  242.653502][T10955] loop7: detected capacity change from 0 to 524255232
[  243.553045][T10967] loop5: detected capacity change from 0 to 4096
[  243.672577][T10973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  243.721961][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'.
[  243.889285][T10988] loop5: detected capacity change from 0 to 2048
[  243.896357][T10988] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=2362, location=2362
[  243.907477][T10988] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  243.912420][T10988] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  243.927849][T10988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.280704][T11004] loop5: detected capacity change from 0 to 1024
[  244.997921][  T791] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  245.200898][  T791] usb 6-1: Using ep0 maxpacket: 32
[  245.213660][  T791] usb 6-1: config 5 has an invalid interface number: 190 but max is 2
[  245.225683][  T791] usb 6-1: config 5 has an invalid interface number: 49 but max is 2
[  245.235691][  T791] usb 6-1: config 5 has no interface number 0
[  245.244193][  T791] usb 6-1: config 5 has no interface number 2
[  245.250221][  T791] usb 6-1: config 5 interface 190 has no altsetting 0
[  245.253439][  T791] usb 6-1: config 5 interface 1 has no altsetting 0
[  245.258223][  T791] usb 6-1: config 5 interface 49 has no altsetting 0
[  245.270691][  T791] usb 6-1: New USB device found, idVendor=1410, idProduct=a001, bcdDevice=f2.82
[  245.275114][  T791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.280376][  T791] usb 6-1: Product: syz
[  245.282365][  T791] usb 6-1: Manufacturer: syz
[  245.284746][  T791] usb 6-1: SerialNumber: syz
[  245.338890][T11021] netlink: 'syz.3.1938': attribute type 2 has an invalid length.
[  245.464720][T11023] ptrace attach of "/syz-executor exec"[6217] was attempted by ""[11023]
[  245.621463][  T791] usb 6-1: USB disconnect, device number 25
[  246.231677][T11029] loop5: detected capacity change from 0 to 256
[  247.064961][T11049] loop5: detected capacity change from 0 to 32768
[  247.070127][T11049] bcachefs (/dev/loop5): error reading default superblock: Bad minimum version 0.24: unwritten_extents, greater than version field 0.11: inode_btree_change
[  247.092195][T11049] bcachefs (/dev/loop5): error validating superblock: Bad sb offset (got 288230376151715840, read from 4096)
[  247.101971][T11049] bcachefs: bch2_fs_get_tree() error: invalid_sb_offset
[  247.963664][T11059] loop5: detected capacity change from 0 to 32768
[  248.003565][T11059] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  248.033061][T11059] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad chain 1280
[  248.045124][T11059] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  248.051568][T11059] OCFS2: File system is now read-only.
[  248.059558][T11059] (syz.5.1956,11059,1):ocfs2_search_chain:1817 ERROR: status = -30
[  248.064879][T11059] (syz.5.1956,11059,1):ocfs2_search_chain:1940 ERROR: status = -30
[  248.070858][T11059] (syz.5.1956,11059,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  248.074441][T11059] (syz.5.1956,11059,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  248.082393][T11059] (syz.5.1956,11059,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  248.085816][T11059] (syz.5.1956,11059,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  248.093057][T11059] (syz.5.1956,11059,1):ocfs2_mknod_locked:641 ERROR: status = -30
[  248.098612][T11059] (syz.5.1956,11059,1):ocfs2_symlink:1956 ERROR: status = -30
[  248.104739][T11059] (syz.5.1956,11059,1):ocfs2_symlink:2080 ERROR: status = -30
[  248.146823][ T6839] ocfs2: Unmounting device (7,5) on (node local)
[  248.688665][T11081] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1963'.
[  248.963939][T11094] futex_wake_op: syz.2.1970 tries to shift op by 144; fix this program
[  249.714264][T11111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'.
[  249.718480][T11102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.740547][T11102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.888839][ T5869] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.892541][ T5869] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.893760][T11118] binder: 11117:11118 ioctl c0306201 200000000680 returned -14
[  249.898386][ T5869] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  249.904157][ T5869] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.224278][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  250.308252][T11137] netlink: 'syz.3.1986': attribute type 10 has an invalid length.
[  250.401542][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  250.405349][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.414685][    T9] usb 3-1: config 0 descriptor??
[  250.651533][    T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  250.663797][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  250.715727][T11159] loop5: detected capacity change from 0 to 1024
[  250.721482][    T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  250.724006][    T9] [drm] Initialized udl on minor 3
[  250.747648][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  250.786273][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  250.796017][ T5923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  250.799555][ T5923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  250.824416][    T9] usb 3-1: USB disconnect, device number 21
[  251.081171][T11168] loop5: detected capacity change from 0 to 32768
[  251.084193][T11168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2001 (11168)
[  251.091358][T11168] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  251.095364][T11168] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  251.196871][T11168] BTRFS info (device loop5): enabling ssd optimizations
[  251.202572][T11168] BTRFS info (device loop5): enabling free space tree
[  251.297768][T11192] cgroup: Need name or subsystem set
[  251.725662][T11204] binfmt_misc: register: failed to install interpreter file ./file2
[  251.931034][ T6839] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  252.211521][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'.
[  252.224626][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2017'.
[  252.228901][T11222] netlink: 'syz.5.2017': attribute type 14 has an invalid length.
[  252.232027][T11222] netlink: 'syz.5.2017': attribute type 11 has an invalid length.
[  252.317202][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2021'.
[  252.320614][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2021'.
[  252.651585][T11256] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2034'.
[  252.657712][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  252.842407][T11246] loop5: detected capacity change from 0 to 32768
[  252.854239][T11246] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2028 (11246)
[  252.903542][T11246] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  252.907630][T11246] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  253.482150][T11246] BTRFS info (device loop5): rebuilding free space tree
[  253.493891][T11246] BTRFS info (device loop5): allowing degraded mounts
[  253.496602][T11246] BTRFS info (device loop5): enabling ssd optimizations
[  253.501575][T11246] BTRFS info (device loop5): enabling free space tree
[  253.504739][T11246] BTRFS info (device loop5): force clearing of disk cache
[  253.510280][T11246] BTRFS info (device loop5): use zstd compression, level 3
[  253.513115][T11246] BTRFS info (device loop5): max_inline set to 0
[  253.537639][   T33] audit: type=1800 audit(1757317057.588:40): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2028" name="bus" dev="loop5" ino=263 res=0 errno=0
[  253.704328][ T6839] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  254.691080][T11313] lo speed is unknown, defaulting to 1000
[  254.694534][T11313] lo speed is unknown, defaulting to 1000
[  255.094069][T11313] lo speed is unknown, defaulting to 1000
[  255.125378][T11313] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  255.158475][T11313] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  255.276807][T11313] lo speed is unknown, defaulting to 1000
[  255.281528][T11313] lo speed is unknown, defaulting to 1000
[  255.285683][T11313] lo speed is unknown, defaulting to 1000
[  255.577323][T11320] loop5: detected capacity change from 0 to 164
[  255.606335][T11320] rock: directory entry would overflow storage
[  255.616990][T11320] rock: sig=0x66, size=4, remaining=3
[  256.974884][T11367] loop5: detected capacity change from 0 to 128
[  256.984252][T11367] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  256.988392][T11367] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.464398][ T6839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  258.245325][T11410] netlink: 'syz.2.2091': attribute type 11 has an invalid length.
[  258.277284][T11412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2092'.
[  258.370807][ T5855] syz-executor (5855) used greatest stack depth: 16888 bytes left
[  258.411222][T11408] loop5: detected capacity change from 0 to 32768
[  258.440479][T11408] (syz.5.2090,11408,0):ocfs2_load_local_alloc:320 ERROR: Local alloc size is invalid (la_size = 33328)
[  258.444946][T11408] (syz.5.2090,11408,0):ocfs2_load_local_alloc:356 ERROR: status = -22
[  258.449372][T11408] (syz.5.2090,11408,0):ocfs2_check_volume:2404 ERROR: status = -22
[  258.452597][T11408] (syz.5.2090,11408,0):ocfs2_check_volume:2432 ERROR: status = -22
[  258.455920][T11408] (syz.5.2090,11408,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  258.466432][T11408] (syz.5.2090,11408,0):ocfs2_fill_super:1177 ERROR: status = -22
[  258.857041][T11431] loop5: detected capacity change from 0 to 1024
[  258.907838][T11431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.912655][T11431] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  258.953480][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2103'.
[  258.996202][ T6839] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.036831][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  259.041663][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  259.047460][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  259.048560][T11439] loop5: detected capacity change from 0 to 128
[  259.054615][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  259.059575][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  259.081530][T11439] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  259.090853][T11439] ext4 filesystem being mounted at /525/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  259.102189][T11436] lo speed is unknown, defaulting to 1000
[  259.149129][T11439] EXT4-fs warning (device loop5): ext4_dirblock_csum_verify:375: inode #2: comm syz.5.2104: No space for directory leaf checksum. Please run e2fsck -D.
[  259.166617][T11439] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.2104: checksumming directory block 0
[  259.231825][ T6839] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.311399][T11436] chnl_net:caif_netlink_parms(): no params data found
[  259.344764][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2105'.
[  259.352121][T11445] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2105'.
[  259.449832][T11436] bridge0: port 1(bridge_slave_0) entered blocking state
[  259.462317][T11436] bridge0: port 1(bridge_slave_0) entered disabled state
[  259.466761][T11436] bridge_slave_0: entered allmulticast mode
[  259.470843][T11436] bridge_slave_0: entered promiscuous mode
[  259.496246][T11436] bridge0: port 2(bridge_slave_1) entered blocking state
[  259.504188][T11436] bridge0: port 2(bridge_slave_1) entered disabled state
[  259.507766][T11436] bridge_slave_1: entered allmulticast mode
[  259.511694][T11436] bridge_slave_1: entered promiscuous mode
[  259.553493][T11454] netlink: 'syz.3.2108': attribute type 9 has an invalid length.
[  259.564948][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  259.577959][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  259.634264][T11436] team0: Port device team_slave_0 added
[  259.638949][T11436] team0: Port device team_slave_1 added
[  259.694529][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.697957][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.725151][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.731224][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.733990][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.748812][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.815189][T11436] hsr_slave_0: entered promiscuous mode
[  259.818402][T11436] hsr_slave_1: entered promiscuous mode
[  259.821191][T11436] debugfs: 'hsr0' already exists in 'hsr'
[  259.823588][T11436] Cannot create hsr debugfs directory
[  260.928579][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  261.255102][T11436] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  261.271191][T11436] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  261.278832][T11436] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  261.297290][T11436] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  261.301398][   T55] Bluetooth: hci0: command tx timeout
[  261.381834][T11436] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.399765][T11436] 8021q: adding VLAN 0 to HW filter on device team0
[  261.406289][ T1202] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.408830][ T1202] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.423050][ T1202] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.425358][ T1202] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.608917][T11436] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.036335][T11436] veth0_vlan: entered promiscuous mode
[  262.043918][T11436] veth1_vlan: entered promiscuous mode
[  262.128684][T11436] veth0_macvtap: entered promiscuous mode
[  262.132914][T11436] veth1_macvtap: entered promiscuous mode
[  262.144509][T11436] batman_adv: batadv0: Interface activated: batadv_slave_0
[  262.146914][T11499] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2119'.
[  262.160643][T11436] batman_adv: batadv0: Interface activated: batadv_slave_1
[  262.172726][ T5869] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.183365][ T5869] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.205109][ T5869] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.245137][ T5869] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.275320][   T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  262.334773][ T1202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.350808][ T1202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.381485][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.384945][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.459967][   T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  262.463478][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.471503][   T10] usb 6-1: Product: syz
[  262.472916][   T10] usb 6-1: Manufacturer: syz
[  262.474385][   T10] usb 6-1: SerialNumber: syz
[  262.491296][   T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  262.617647][ T5909] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  263.535341][   T55] Bluetooth: hci0: command tx timeout
[  263.786336][ T5909] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  263.810302][ T5909] ath9k_htc: Failed to initialize the device
[  263.910793][ T5909] usb 6-1: ath9k_htc: USB layer deinitialized
[  263.947979][   T24] usb 6-1: USB disconnect, device number 26
[  264.754389][  T791] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  264.812031][T11554] loop5: detected capacity change from 0 to 32768
[  264.845008][T11554] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  264.862524][ T5869] (kworker/u8:2,5869,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  264.905449][T11554] 
[  264.906380][T11554] ======================================================
[  264.909057][T11554] WARNING: possible circular locking dependency detected
[  264.911771][T11554] syzkaller #0 Not tainted
[  264.913682][T11554] ------------------------------------------------------
[  264.917350][T11554] syz.5.2143/11554 is trying to acquire lock:
[  264.919691][T11554] ffff888127db26c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  264.924738][T11554] 
[  264.924738][T11554] but task is already holding lock:
[  264.927605][T11554] ffff888127db6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  264.931206][T11554] 
[  264.931206][T11554] which lock already depends on the new lock.
[  264.931206][T11554] 
[  264.935184][T11554] 
[  264.935184][T11554] the existing dependency chain (in reverse order) is:
[  264.938587][T11554] 
[  264.938587][T11554] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  264.941567][T11554]        lock_acquire+0x120/0x360
[  264.943551][T11554]        down_read+0x46/0x2e0
[  264.945365][T11554]        ocfs2_init_acl+0x2f9/0x720
[  264.947387][T11554]        ocfs2_mknod+0x1321/0x2050
[  264.949423][T11554]        ocfs2_create+0x1a5/0x440
[  264.951369][T11554]        path_openat+0x14f4/0x3830
[  264.953385][T11554]        do_filp_open+0x1fa/0x410
[  264.955281][T11554]        do_sys_openat2+0x121/0x1c0
[  264.957302][T11554]        __x64_sys_openat+0x138/0x170
[  264.959363][T11554]        do_syscall_64+0xfa/0x3b0
[  264.961355][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.963854][T11554] 
[  264.963854][T11554] -> #4 (jbd2_handle){++++}-{0:0}:
[  264.966690][T11554]        lock_acquire+0x120/0x360
[  264.968707][T11554]        start_this_handle+0x1fa7/0x21c0
[  264.970932][T11554]        jbd2__journal_start+0x2c1/0x5b0
[  264.973140][T11554]        jbd2_journal_start+0x2a/0x40
[  264.975280][T11554]        ocfs2_start_trans+0x376/0x6d0
[  264.977411][T11554]        ocfs2_mknod+0xe93/0x2050
[  264.979401][T11554]        ocfs2_create+0x1a5/0x440
[  264.981424][T11554]        path_openat+0x14f4/0x3830
[  264.983428][T11554]        do_filp_open+0x1fa/0x410
[  264.985392][T11554]        do_sys_openat2+0x121/0x1c0
[  264.987411][T11554]        __x64_sys_openat+0x138/0x170
[  264.989498][T11554]        do_syscall_64+0xfa/0x3b0
[  264.991454][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  264.994015][T11554] 
[  264.994015][T11554] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  264.997290][T11554]        lock_acquire+0x120/0x360
[  264.999287][T11554]        down_read+0x46/0x2e0
[  265.001216][T11554]        ocfs2_start_trans+0x36a/0x6d0
[  265.003389][T11554]        ocfs2_mknod+0xe93/0x2050
[  265.005502][T11554]        ocfs2_create+0x1a5/0x440
[  265.007502][T11554]        path_openat+0x14f4/0x3830
[  265.009508][T11554]        do_filp_open+0x1fa/0x410
[  265.011444][T11554]        do_sys_openat2+0x121/0x1c0
[  265.013502][T11554]        __x64_sys_openat+0x138/0x170
[  265.015555][T11554]        do_syscall_64+0xfa/0x3b0
[  265.017492][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.019893][T11554] 
[  265.019893][T11554] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  265.022684][T11554]        lock_acquire+0x120/0x360
[  265.024573][T11554]        ocfs2_start_trans+0x26b/0x6d0
[  265.026703][T11554]        ocfs2_mknod+0xe93/0x2050
[  265.028636][T11554]        ocfs2_create+0x1a5/0x440
[  265.030521][T11554]        path_openat+0x14f4/0x3830
[  265.032513][T11554]        do_filp_open+0x1fa/0x410
[  265.034416][T11554]        do_sys_openat2+0x121/0x1c0
[  265.036443][T11554]        __x64_sys_openat+0x138/0x170
[  265.038477][T11554]        do_syscall_64+0xfa/0x3b0
[  265.040444][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.042989][T11554] 
[  265.042989][T11554] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  265.047049][T11554]        lock_acquire+0x120/0x360
[  265.048998][T11554]        down_write+0x96/0x1f0
[  265.050851][T11554]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  265.053387][T11554]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  265.056038][T11554]        ocfs2_mknod+0xe32/0x2050
[  265.057972][T11554]        ocfs2_create+0x1a5/0x440
[  265.059888][T11554]        path_openat+0x14f4/0x3830
[  265.061913][T11554]        do_filp_open+0x1fa/0x410
[  265.063854][T11554]        do_sys_openat2+0x121/0x1c0
[  265.065911][T11554]        __x64_sys_openat+0x138/0x170
[  265.068001][T11554]        do_syscall_64+0xfa/0x3b0
[  265.069910][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.072390][T11554] 
[  265.072390][T11554] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  265.076462][T11554]        validate_chain+0xb9b/0x2140
[  265.078507][T11554]        __lock_acquire+0xab9/0xd20
[  265.080537][T11554]        lock_acquire+0x120/0x360
[  265.082522][T11554]        down_write+0x96/0x1f0
[  265.084416][T11554]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  265.086887][T11554]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  265.089507][T11554]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  265.092020][T11554]        ocfs2_xattr_set+0xb70/0x11f0
[  265.094146][T11554]        __vfs_setxattr+0x43c/0x480
[  265.096178][T11554]        __vfs_setxattr_noperm+0x12d/0x660
[  265.098410][T11554]        vfs_setxattr+0x16b/0x2f0
[  265.100347][T11554]        filename_setxattr+0x274/0x600
[  265.102496][T11554]        path_setxattrat+0x364/0x3a0
[  265.104532][T11554]        __x64_sys_lsetxattr+0xbf/0xe0
[  265.106630][T11554]        do_syscall_64+0xfa/0x3b0
[  265.108628][T11554]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.111242][T11554] 
[  265.111242][T11554] other info that might help us debug this:
[  265.111242][T11554] 
[  265.115156][T11554] Chain exists of:
[  265.115156][T11554]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  265.115156][T11554] 
[  265.121226][T11554]  Possible unsafe locking scenario:
[  265.121226][T11554] 
[  265.124016][T11554]        CPU0                    CPU1
[  265.126053][T11554]        ----                    ----
[  265.128086][T11554]   lock(&oi->ip_xattr_sem);
[  265.129911][T11554]                                lock(jbd2_handle);
[  265.132398][T11554]                                lock(&oi->ip_xattr_sem);
[  265.135054][T11554]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  265.137834][T11554] 
[  265.137834][T11554]  *** DEADLOCK ***
[  265.137834][T11554] 
[  265.140864][T11554] 3 locks held by syz.5.2143/11554:
[  265.142915][T11554]  #0: ffff88802ca82428 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  265.146452][T11554]  #1: ffff888127db6f40 (&type->i_mutex_dir_key#13){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  265.150407][T11554]  #2: ffff888127db6c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  265.154196][T11554] 
[  265.154196][T11554] stack backtrace:
[  265.156473][T11554] CPU: 0 UID: 0 PID: 11554 Comm: syz.5.2143 Not tainted syzkaller #0 PREEMPT(full) 
[  265.156492][T11554] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.156502][T11554] Call Trace:
[  265.156511][T11554]  <TASK>
[  265.156519][T11554]  dump_stack_lvl+0x189/0x250
[  265.156540][T11554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.156557][T11554]  ? __pfx__printk+0x10/0x10
[  265.156578][T11554]  ? print_lock_name+0xde/0x100
[  265.156597][T11554]  print_circular_bug+0x2ee/0x310
[  265.156614][T11554]  check_noncircular+0x134/0x160
[  265.156630][T11554]  validate_chain+0xb9b/0x2140
[  265.156645][T11554]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  265.156668][T11554]  ? look_up_lock_class+0x74/0x170
[  265.156688][T11554]  ? register_lock_class+0x51/0x320
[  265.156709][T11554]  __lock_acquire+0xab9/0xd20
[  265.156730][T11554]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  265.156746][T11554]  lock_acquire+0x120/0x360
[  265.156764][T11554]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  265.156785][T11554]  down_write+0x96/0x1f0
[  265.156798][T11554]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  265.156840][T11554]  ? __pfx_down_write+0x10/0x10
[  265.156857][T11554]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  265.156880][T11554]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  265.156898][T11554]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.156918][T11554]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.156935][T11554]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.156955][T11554]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  265.156971][T11554]  ? stack_depot_save_flags+0x41b/0x860
[  265.156991][T11554]  ? kasan_save_track+0x4f/0x80
[  265.157007][T11554]  ? kasan_save_track+0x3e/0x80
[  265.157021][T11554]  ? __kasan_kmalloc+0x93/0xb0
[  265.157038][T11554]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  265.157055][T11554]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  265.157070][T11554]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  265.157088][T11554]  ? ocfs2_xattr_set+0xb70/0x11f0
[  265.157104][T11554]  ? __vfs_setxattr+0x43c/0x480
[  265.157120][T11554]  ? __vfs_setxattr_noperm+0x12d/0x660
[  265.157139][T11554]  ? vfs_setxattr+0x16b/0x2f0
[  265.157157][T11554]  ? filename_setxattr+0x274/0x600
[  265.157176][T11554]  ? path_setxattrat+0x364/0x3a0
[  265.157190][T11554]  ? __x64_sys_lsetxattr+0xbf/0xe0
[  265.157200][T11554]  ? do_syscall_64+0xfa/0x3b0
[  265.157212][T11554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.157240][T11554]  ? __kasan_kmalloc+0x93/0xb0
[  265.157257][T11554]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  265.157274][T11554]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  265.157293][T11554]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  265.157309][T11554]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  265.157330][T11554]  ? __lock_acquire+0xab9/0xd20
[  265.157353][T11554]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  265.157379][T11554]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  265.157399][T11554]  ? ocfs2_xattr_set+0xb36/0x11f0
[  265.157418][T11554]  ? up_write+0x1c4/0x420
[  265.157431][T11554]  ? ocfs2_xattr_set+0x334/0x11f0
[  265.157448][T11554]  ocfs2_xattr_set+0xb70/0x11f0
[  265.157472][T11554]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  265.157498][T11554]  ? look_up_lock_class+0x74/0x170
[  265.157517][T11554]  ? register_lock_class+0x51/0x320
[  265.157538][T11554]  ? posix_xattr_acl+0x93/0xc0
[  265.157554][T11554]  ? evm_protect_xattr+0x4d4/0xa90
[  265.157570][T11554]  ? apparmor_capable+0x137/0x1b0
[  265.157587][T11554]  ? __pfx_evm_protect_xattr+0x10/0x10
[  265.157603][T11554]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  265.157621][T11554]  __vfs_setxattr+0x43c/0x480
[  265.157642][T11554]  __vfs_setxattr_noperm+0x12d/0x660
[  265.157659][T11554]  vfs_setxattr+0x16b/0x2f0
[  265.157678][T11554]  ? __pfx_vfs_setxattr+0x10/0x10
[  265.157693][T11554]  ? mnt_get_write_access+0x223/0x2a0
[  265.157707][T11554]  filename_setxattr+0x274/0x600
[  265.157727][T11554]  ? __pfx_filename_setxattr+0x10/0x10
[  265.157749][T11554]  ? getname_flags+0x1e5/0x540
[  265.157763][T11554]  path_setxattrat+0x364/0x3a0
[  265.157781][T11554]  ? __pfx_path_setxattrat+0x10/0x10
[  265.157795][T11554]  ? do_futex+0x395/0x420
[  265.157854][T11554]  ? rcu_is_watching+0x15/0xb0
[  265.157871][T11554]  __x64_sys_lsetxattr+0xbf/0xe0
[  265.157885][T11554]  do_syscall_64+0xfa/0x3b0
[  265.157898][T11554]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.157917][T11554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.157930][T11554]  ? exc_page_fault+0x9f/0xf0
[  265.157948][T11554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.157962][T11554] RIP: 0033:0x7fc7a518ebe9
[  265.157975][T11554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.157989][T11554] RSP: 002b:00007fc7a607d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[  265.158003][T11554] RAX: ffffffffffffffda RBX: 00007fc7a53c5fa0 RCX: 00007fc7a518ebe9
[  265.158014][T11554] RDX: 0000000000000000 RSI: 0000200000002980 RDI: 0000200000000080
[  265.158024][T11554] RBP: 00007fc7a5211e19 R08: 0000000000000001 R09: 0000000000000000
[  265.158033][T11554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  265.158041][T11554] R13: 00007fc7a53c6038 R14: 00007fc7a53c5fa0 R15: 00007fff74418a48
[  265.158058][T11554]  </TASK>
[  265.267250][  T791] usb 7-1: Using ep0 maxpacket: 16
[  265.269394][    C0] hpet: Lost 22 RTC interrupts
[  265.272115][  T791] usb 7-1: config 0 has an invalid interface number: 64 but max is 0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  265.534498][  T791] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  265.538499][  T791] usb 7-1: config 0 has no interface number 0
[  265.540950][  T791] usb 7-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b
[  265.544477][  T791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.578517][  T791] usb 7-1: config 0 descriptor??
[  265.920296][T11553] (syz.5.2143,11553,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70
[  265.924504][T11553] (syz.5.2143,11553,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  265.931100][T11553] ocfs2: Unmounting device (7,5) on (node local)
[  266.552337][  T791] usb 7-1: can't set config #0, error -71
[  266.571350][  T791] usb 7-1: USB disconnect, device number 2
[  266.585635][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.590293][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.594553][   T13] bond0 (unregistering): Released all slaves
[  266.600438][   T13] bond1 (unregistering): Released all slaves
[  266.857864][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  266.861412][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.782906][   T13] IPVS: stop unused estimator thread 0...
[  267.856894][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.902681][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.986883][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.052241][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.139348][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.176098][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.231354][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.279264][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.352501][   T13] bridge_slave_1: left allmulticast mode
[  268.354687][   T13] bridge_slave_1: left promiscuous mode
[  268.357324][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.361292][   T13] bridge_slave_0: left allmulticast mode
[  268.363323][   T13] bridge_slave_0: left promiscuous mode
[  268.365111][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.370909][   T13] bridge_slave_1: left allmulticast mode
[  268.373123][   T13] bridge_slave_1: left promiscuous mode
[  268.375373][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.382122][   T13] bridge_slave_0: left allmulticast mode
[  268.384557][   T13] bridge_slave_0: left promiscuous mode
[  268.386917][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.528204][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.533221][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.538212][   T13] bond0 (unregistering): Released all slaves
[  268.661414][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  268.666471][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  268.671841][   T13] bond0 (unregistering): Released all slaves
[  269.098539][   T13] hsr_slave_0: left promiscuous mode
[  269.101127][   T13] hsr_slave_1: left promiscuous mode
[  269.103511][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.106596][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.109302][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.111679][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.125125][   T13] hsr_slave_0: left promiscuous mode
[  269.128307][   T13] 0: left promiscuous mode
[  269.131122][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.134868][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  269.139506][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  269.141741][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  269.147217][   T13] veth1_macvtap: left promiscuous mode
[  269.151445][   T13] veth0_macvtap: left promiscuous mode
[  269.153201][   T13] veth1_vlan: left promiscuous mode
[  269.155041][   T13] veth0_vlan: left promiscuous mode
[  269.157632][   T13] veth1_macvtap: left promiscuous mode
[  269.160797][   T13] veth0_macvtap: left promiscuous mode
[  269.162778][   T13] veth1_vlan: left promiscuous mode
[  269.164749][   T13] veth0_vlan: left promiscuous mode
[  269.348654][   T13] team0 (unregistering): Port device team_slave_1 removed
[  269.370287][   T13] team0 (unregistering): Port device team_slave_0 removed
[  269.472177][   T13] pim6reg (unregistering): left allmulticast mode
[  269.564548][   T13] team0 (unregistering): Port device team_slave_1 removed
[  269.587966][   T13] team0 (unregistering): Port device team_slave_0 removed
[  270.151908][   T13] IPVS: stop unused estimator thread 0...

VM DIAGNOSIS:
07:37:52  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013ae RDI=00000000000013af RBP=00000000000003f8 RSP=ffffc900040fe4b0
R8 =ffff8880205d0237 R9 =1ffff110040ba046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8ea R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc7a607d6c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002980 CR3=0000000120e18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff774012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff822e3893 RBX=0000000000012a48 RCX=ffff88802ecc0000 RDX=ffffc900036a1000
RSI=000000000007ffff RDI=0000000000080000 RBP=0000000000000000 RSP=ffffc900061973f0
R8 =0000000000000000 R9 =0000000000000000 R10=dffffc0000000000 R11=ffffed10245aef62
R12=0000000000012a48 R13=0000000000012a48 R14=0000000000000000 R15=ffffea00004a9218
RIP=ffffffff81bfae5a RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff7721f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff76abff000 CR3=000000003a910000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007ff7721f55a0 00007ff7721f5580
XMM02=00007ff7721f56e0 00007ff7721f5560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007ff7721f55a0 XMM05=0000000000000000 00007ff7721f56e0
XMM06=00007ff7721f56e0 00007ff7721f5560 XMM07=00007ff7721f55a0 00007ff7721f5580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007ff774012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
