last executing test programs:

5.811850898s ago: executing program 1 (id=735):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f57584"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000300), &(0x7f0000000400)={0x20, 0x3, 0x1, 0xf5}})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, 0x0)

2.732279246s ago: executing program 1 (id=757):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(r0, 0x3, &(0x7f0000002580)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
clock_gettime(0x9, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00')
preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000020c0)=""/84, 0x54}], 0x1, 0x8f, 0x3b16)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000002140)='./file0\x00', 0x1000, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r4, 0x4, 0x42000)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x21)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x80)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f0000002180), 0x8, 0x0)

2.187470578s ago: executing program 2 (id=763):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xf7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x48084)

2.071676194s ago: executing program 2 (id=764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r3, &(0x7f0000000540)}, 0x20)

1.570746077s ago: executing program 1 (id=765):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404})
sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4031}, 0x1)
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x4})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0)

983.446634ms ago: executing program 2 (id=767):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r2, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x2f}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x800)

810.530111ms ago: executing program 2 (id=768):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000600)="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", 0x162}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x4044800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

658.177853ms ago: executing program 2 (id=769):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
write(r1, &(0x7f00000000c0)="c2", 0x1)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f00)="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", 0x3a8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="0efe", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000005c0)="cc", 0x1}], 0x1}}], 0x3, 0x2090)

657.941621ms ago: executing program 1 (id=770):
mkdir(&(0x7f0000000280)='./file0\x00', 0x324)
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000040), 0x3d, 0x0)

550.190643ms ago: executing program 2 (id=771):
syz_usb_connect(0x2, 0x365, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0)

330.136285ms ago: executing program 1 (id=772):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x22140, 0x0)
r1 = epoll_create(0x50000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x80000000})
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000200)=0x1b)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000100)={0x9, 0x3, 0xf, 0x100, 0x4, "9ddf98dfc825bdcfcb7a23ea9dc08085b793e1"})

251.74602ms ago: executing program 0 (id=774):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80141, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x5ed)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x40)

251.460722ms ago: executing program 1 (id=775):
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0xf7f, 0x0, 0x4}, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)

192.145837ms ago: executing program 0 (id=776):
mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000000)={0xb001, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xc000, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2)

191.863219ms ago: executing program 0 (id=777):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

125.599824ms ago: executing program 0 (id=778):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2108, r0}, 0x0)

52.474328ms ago: executing program 0 (id=779):
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000500)={0x7, 0x0, 0xfffffffffffffffb, 0xfffffffffffffff9, 0x8, 0x8, 0x7, 0x4a1}, 0x0, &(0x7f0000000580)={0x8, 0x401, 0x40, 0x4, 0x4, 0x7, 0x0, 0x1000}, &(0x7f00000005c0), 0x0)

0s ago: executing program 0 (id=780):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, 0x0)
readv(r0, &(0x7f0000000040), 0x2000000000000213)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
r1 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x101001, 0x0)
write$proc_mixer(r1, 0x0, 0x33)
close(r1)
r2 = socket(0x2b, 0x1, 0x1)
listen(r2, 0x0)
listen(r2, 0x6)
socket$phonet(0x23, 0x2, 0x1)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0)
ftruncate(r3, 0x8800000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0)
sendfile(r4, r3, 0x0, 0x578410eb)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:50327' (ED25519) to the list of known hosts.
syzkaller login: [   58.039437][ T5808] cgroup: Unknown subsys name 'net'
[   58.231947][ T5808] cgroup: Unknown subsys name 'cpuset'
[   58.238343][ T5808] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   59.939817][ T5808] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.441096][ T5221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.446091][ T5221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.451467][ T5221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.455549][ T5221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.460878][ T5221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.488948][ T5221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.493255][ T5221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.497935][ T5221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.503819][ T5221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.508000][ T5221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.543230][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.552015][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.556182][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.569310][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.573638][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.809415][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   65.854943][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   65.998291][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.001544][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.004419][ T5841] bridge_slave_0: entered allmulticast mode
[   66.011506][ T5841] bridge_slave_0: entered promiscuous mode
[   66.027940][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.030340][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.032857][ T5837] bridge_slave_0: entered allmulticast mode
[   66.035574][ T5837] bridge_slave_0: entered promiscuous mode
[   66.041362][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.043951][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.048011][ T5841] bridge_slave_1: entered allmulticast mode
[   66.051571][ T5841] bridge_slave_1: entered promiscuous mode
[   66.055856][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.059546][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.062582][ T5837] bridge_slave_1: entered allmulticast mode
[   66.066463][ T5837] bridge_slave_1: entered promiscuous mode
[   66.097384][ T5844] chnl_net:caif_netlink_parms(): no params data found
[   66.115762][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.123062][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.135097][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.141585][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.205341][ T5837] team0: Port device team_slave_0 added
[   66.209133][ T5841] team0: Port device team_slave_0 added
[   66.219176][ T5837] team0: Port device team_slave_1 added
[   66.223321][ T5841] team0: Port device team_slave_1 added
[   66.305969][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.309385][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.320539][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.326615][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.330062][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.341215][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.345102][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.349128][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.352171][ T5844] bridge_slave_0: entered allmulticast mode
[   66.356043][ T5844] bridge_slave_0: entered promiscuous mode
[   66.361131][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.363638][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.373250][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.377780][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.380091][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.390759][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.395758][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.399114][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.402277][ T5844] bridge_slave_1: entered allmulticast mode
[   66.406322][ T5844] bridge_slave_1: entered promiscuous mode
[   66.447129][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.461566][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.489022][ T5841] hsr_slave_0: entered promiscuous mode
[   66.492764][ T5841] hsr_slave_1: entered promiscuous mode
[   66.513276][ T5837] hsr_slave_0: entered promiscuous mode
[   66.518157][ T5837] hsr_slave_1: entered promiscuous mode
[   66.521228][ T5837] debugfs: 'hsr0' already exists in 'hsr'
[   66.523745][ T5837] Cannot create hsr debugfs directory
[   66.550236][ T5844] team0: Port device team_slave_0 added
[   66.572788][ T5844] team0: Port device team_slave_1 added
[   66.635950][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.639305][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.650453][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.669359][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.672305][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.683889][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.811355][ T5844] hsr_slave_0: entered promiscuous mode
[   66.814842][ T5844] hsr_slave_1: entered promiscuous mode
[   66.818405][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   66.820719][ T5844] Cannot create hsr debugfs directory
[   67.001790][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.024861][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.048346][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.058061][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.094535][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.104867][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.115549][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.123310][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.195757][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.203563][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.220739][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.230053][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.331027][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.351066][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.359913][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.379161][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   67.384616][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   67.403113][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.406388][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.412366][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.415289][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.426231][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   67.431089][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.433473][ T4800] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.440570][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.443132][ T4800] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.461775][ T4800] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.464071][ T4800] bridge0: port 1(bridge_slave_0) entered forwarding state
[   67.469558][ T4800] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.472405][ T4800] bridge0: port 2(bridge_slave_1) entered forwarding state
[   67.478024][ T5221] Bluetooth: hci0: command tx timeout
[   67.567438][ T5221] Bluetooth: hci1: command tx timeout
[   67.639692][ T5221] Bluetooth: hci2: command tx timeout
[   67.684945][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.750319][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.754314][ T5837] veth0_vlan: entered promiscuous mode
[   67.763159][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.771050][ T5837] veth1_vlan: entered promiscuous mode
[   67.810892][ T5844] veth0_vlan: entered promiscuous mode
[   67.823840][ T5837] veth0_macvtap: entered promiscuous mode
[   67.835017][ T5844] veth1_vlan: entered promiscuous mode
[   67.849083][ T5837] veth1_macvtap: entered promiscuous mode
[   67.856113][ T5841] veth0_vlan: entered promiscuous mode
[   67.883025][ T5841] veth1_vlan: entered promiscuous mode
[   67.898931][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.906623][ T5844] veth0_macvtap: entered promiscuous mode
[   67.914291][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.917777][ T5844] veth1_macvtap: entered promiscuous mode
[   67.932640][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.940121][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.948294][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.953543][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.970670][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.978968][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.998592][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.003357][ T5841] veth0_macvtap: entered promiscuous mode
[   68.006442][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.012402][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.027229][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.039088][ T5841] veth1_macvtap: entered promiscuous mode
[   68.088343][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.108855][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.133808][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.153361][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.170894][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.178169][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.181475][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.185607][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.218955][ T3975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.222793][ T3975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.257579][  T796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.263175][  T796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.300981][ T3755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.307361][ T3755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.336308][  T796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.347346][  T796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.349767][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.380163][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.382818][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.707442][ T5885] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   68.867883][ T5885] usb 1-1: Using ep0 maxpacket: 8
[   68.880507][ T5885] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   68.884626][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.904859][ T5917] loop2: detected capacity change from 0 to 32768
[   68.916334][ T5917] (syz.2.3,5917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.923039][ T5917] (syz.2.3,5917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.935474][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400
[   68.951550][ T5885] pvrusb2: **********
[   68.956987][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   68.958600][ T5917] JBD2: Ignoring recovery information on journal
[   68.963270][ T5885] pvrusb2: Important functionality might not be entirely working.
[   68.967291][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   68.972235][ T5885] pvrusb2: **********
[   68.984595][ T5917] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   69.179189][ T2401] pvrusb2: Invalid write control endpoint
[   69.297940][ T2401] pvrusb2: Invalid write control endpoint
[   69.305468][ T2401] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   69.325423][ T2401] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   69.336076][ T2401] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   69.359144][ T2401] pvrusb2: Device being rendered inoperable
[   69.368294][ T2401] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[   69.456452][ T2401] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   69.483021][ T5885] usb 1-1: USB disconnect, device number 2
[   69.490054][ T2401] pvrusb2: Attached sub-driver cx25840
[   69.492282][ T2401] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   69.515890][ T2401] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   69.549433][ T5841] ocfs2: Unmounting device (7,2) on (node local)
[   69.560234][ T5221] Bluetooth: hci0: command tx timeout
[   69.646125][ T5221] Bluetooth: hci1: command tx timeout
[   69.727214][ T5221] Bluetooth: hci2: command tx timeout
[   70.055713][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'.
[   70.090572][ T5927] syz.1.9 (5927): drop_caches: 2
[   70.170515][ T5941] loop1: detected capacity change from 0 to 1024
[   70.176190][ T5941] EXT4-fs: Ignoring removed orlov option
[   70.240201][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   70.286492][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.306323][ T5939] loop0: detected capacity change from 0 to 32768
[   70.380767][ T5947] find_entry called with index = 0
[   70.382527][ T5947] find_entry called with index = 0
[   71.057094][ T5884] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.218691][ T5884] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[   71.225216][ T5884] usb 1-1: config 1 has no interface number 0
[   71.227437][ T5884] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[   71.231024][ T5884] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   71.234031][ T5884] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.258159][ T5884] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[   71.268728][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.271365][ T5884] usb 1-1: Product: syz
[   71.272759][ T5884] usb 1-1: Manufacturer: syz
[   71.274403][ T5884] usb 1-1: SerialNumber: syz
[   71.300405][ T5962] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   71.489517][ T5977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.492723][ T5977] netlink: 3 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.507022][ T5884] usb 1-1: Error in usbnet_get_endpoints (-71)
[   71.521704][ T5884] usb 1-1: USB disconnect, device number 3
[   71.607264][   T33] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   71.617695][ T5982] netlink: 'syz.2.32': attribute type 8 has an invalid length.
[   71.637196][ T5221] Bluetooth: hci0: command tx timeout
[   71.728509][ T5221] Bluetooth: hci1: command tx timeout
[   71.767865][   T33] usb 2-1: Using ep0 maxpacket: 16
[   71.771357][   T33] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.777454][   T33] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[   71.784547][   T33] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.789128][   T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   71.792861][   T33] usb 2-1: SerialNumber: syz
[   71.797506][ T5221] Bluetooth: hci2: command tx timeout
[   71.798582][ T5990] loop2: detected capacity change from 0 to 4096
[   71.810870][   T33] cdc_acm 2-1:1.0: skipping garbage
[   71.936140][ T5994] netlink: 88 bytes leftover after parsing attributes in process `syz.2.38'.
[   71.940384][ T5994] netlink: 48 bytes leftover after parsing attributes in process `syz.2.38'.
[   72.012715][   T33] usb 2-1: USB disconnect, device number 2
[   72.115319][ T6001] vlan0: entered promiscuous mode
[   73.718734][ T5221] Bluetooth: hci0: command tx timeout
[   73.801889][ T5221] Bluetooth: hci1: command tx timeout
[   73.881556][ T5221] Bluetooth: hci2: command tx timeout
[   73.945618][ T6041] loop0: detected capacity change from 0 to 512
[   73.955858][ T6041] =======================================================
[   73.955858][ T6041] WARNING: The mand mount option has been deprecated and
[   73.955858][ T6041]          and is ignored by this kernel. Remove the mand
[   73.955858][ T6041]          option from the mount to silence this warning.
[   73.955858][ T6041] =======================================================
[   73.997343][ T6041] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   74.065767][ T6045] loop0: detected capacity change from 0 to 256
[   74.085907][ T6045] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x6fedf10d, utbl_chksum : 0xe619d30d)
[   74.133305][ T6047] loop2: detected capacity change from 0 to 22
[   74.135989][ T6047] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   74.168581][ T6047] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   74.172013][ T6036] loop1: detected capacity change from 0 to 32768
[   74.183355][ T6036] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.57 (6036)
[   74.251938][ T6036] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.255653][ T6036] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   74.395719][ T6051] loop0: detected capacity change from 0 to 32768
[   74.458480][ T6036] BTRFS info (device loop1): rebuilding free space tree
[   74.522936][ T6036] BTRFS info (device loop1): checking UUID tree
[   74.531572][ T6036] BTRFS info (device loop1): allowing degraded mounts
[   74.536254][ T6036] BTRFS info (device loop1): enabling ssd optimizations
[   74.543612][ T6036] BTRFS info (device loop1): enabling free space tree
[   74.548380][ T6036] BTRFS info (device loop1): force clearing of disk cache
[   74.553950][ T6036] BTRFS info (device loop1): force zlib compression, level 3
[   74.604149][ T5844] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   74.632839][ T6076] loop0: detected capacity change from 0 to 32768
[   74.640684][ T6076] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.68 (6076)
[   74.649858][ T6076] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[   74.654156][ T6076] BTRFS info (device loop0): using blake2b (blake2b-256-lib) checksum algorithm
[   74.796371][ T6076] BTRFS info (device loop0): enabling ssd optimizations
[   74.803596][ T6076] BTRFS info (device loop0): turning on async discard
[   74.808490][ T6076] BTRFS info (device loop0): enabling free space tree
[   74.921779][ T5837] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[   75.208696][   T34] audit: type=1326 audit(1769822501.728:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.223009][   T34] audit: type=1326 audit(1769822501.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.232045][   T34] audit: type=1326 audit(1769822501.738:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.241921][   T34] audit: type=1326 audit(1769822501.738:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.249846][ T6115] loop0: detected capacity change from 0 to 1024
[   75.250237][   T34] audit: type=1326 audit(1769822501.748:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.266926][   T34] audit: type=1326 audit(1769822501.748:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.273987][   T34] audit: type=1326 audit(1769822501.748:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.304383][   T34] audit: type=1326 audit(1769822501.748:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.330119][   T34] audit: type=1326 audit(1769822501.748:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6110 comm="syz.1.77" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[   75.384969][ T4800] hfsplus: b-tree write err: -5, ino 4
[   75.610254][ T6144] loop1: detected capacity change from 0 to 128
[   75.621479][ T6144] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   75.639007][ T6144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.841092][ T6159] netlink: 'syz.1.100': attribute type 28 has an invalid length.
[   75.874517][ T6151] loop2: detected capacity change from 0 to 32768
[   76.054511][ T6169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'.
[   76.091760][ T6171] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[   76.116045][ T6173] loop1: detected capacity change from 0 to 128
[   76.151448][   T34] audit: type=1800 audit(1769822502.668:11): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.107" name="file2" dev="loop1" ino=1048595 res=0 errno=0
[   76.260847][ T6187] binder: 6186:6187 ioctl c0306201 2000000001c0 returned -14
[   76.377547][ T6193] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   76.492304][ T6201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   76.500255][ T6201] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   76.516029][ T6207] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
[   76.616847][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.124'.
[   76.617130][ T6212] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.121: iget: bad i_size value: 2533274857506816
[   76.620344][ T6211] netlink: 12 bytes leftover after parsing attributes in process `syz.1.124'.
[   76.663552][ T6212] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.121: iget: bad i_size value: 2533274857506816
[   76.696508][ T6212] EXT4-fs error (device loop0): ext4_lookup:1785: inode #12: comm syz.0.121: iget: bad i_size value: 2533274857506816
[   76.820274][ T6214] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[   76.822631][ T6214] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   76.828793][ T6214] vhci_hcd vhci_hcd.0: Device attached
[   76.844205][ T6215] vhci_hcd: connection closed
[   76.846579][ T5848] vhci_hcd vhci_hcd.1: stop threads
[   76.853511][ T5848] vhci_hcd vhci_hcd.1: release socket
[   76.855586][ T5848] vhci_hcd vhci_hcd.1: disconnect device
[   76.921918][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[   76.924437][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[   77.699247][ T6226] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   77.732440][ T6226] exFAT-fs (loop2): start_clu is invalid cluster(0xffffffff)
[   77.734349][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.902697][ T6235] netlink: 'syz.0.134': attribute type 5 has an invalid length.
[   78.649656][ T6259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.474404][ T6297] netlink: 'syz.1.160': attribute type 9 has an invalid length.
[   79.484164][ T6297] netlink: 'syz.1.160': attribute type 11 has an invalid length.
[   79.498049][ T6297] netlink: 'syz.1.160': attribute type 12 has an invalid length.
[   79.500690][ T6297] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.160'.
[   79.507183][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'.
[   79.645032][ T6310] set_capacity_and_notify: 3 callbacks suppressed
[   79.645045][ T6310] loop1: detected capacity change from 0 to 8
[   79.679810][ T6310] SQUASHFS error: xz decompression failed, data probably corrupt
[   79.685086][ T6310] SQUASHFS error: Failed to read block 0x108: -5
[   79.687670][ T6310] SQUASHFS error: Unable to read metadata cache entry [106]
[   79.690215][ T6310] SQUASHFS error: Unable to read inode 0x11f
[   79.820415][ T6314] netlink: 420 bytes leftover after parsing attributes in process `syz.2.165'.
[   79.873595][ T6317] bridge1: entered promiscuous mode
[   79.875730][ T6317] bridge1: entered allmulticast mode
[   79.977461][ T6319] netlink: 96 bytes leftover after parsing attributes in process `syz.1.164'.
[   80.173017][ T6324] loop2: detected capacity change from 0 to 1024
[   80.175961][ T6324] EXT4-fs: Ignoring removed nobh option
[   80.215914][ T6324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   80.257155][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.358845][ T6337] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   81.677181][ T5899] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   81.855576][ T5899] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   81.858814][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.871312][ T5899] usb 2-1: config 0 descriptor??
[   81.888477][ T5899] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   81.953764][ T6396] loop0: detected capacity change from 0 to 512
[   81.970399][ T6396] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[   81.975323][ T6396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002]
[   81.981065][ T6396] System zones: 1-12
[   81.982580][ T6396] EXT4-fs (loop0): orphan cleanup on readonly fs
[   81.984736][ T6396] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.198: Inode bitmap for bg 0 marked uninitialized
[   82.001388][ T6396] EXT4-fs (loop0): Remounting filesystem read-only
[   82.006081][ T6396] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   82.090940][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.109213][ T5899] usb 2-1: USB disconnect, device number 3
[   82.156116][ T6401] capability: warning: `syz.2.201' uses 32-bit capabilities (legacy support in use)
[   82.217799][   T34] audit: type=1326 audit(1769822508.738:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.223695][ T6407] 9pnet_fd: p9_fd_create_unix (6407): problem connecting socket: qY3aK: -111
[   82.244660][   T34] audit: type=1326 audit(1769822508.738:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.274971][   T34] audit: type=1326 audit(1769822508.738:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.289014][   T34] audit: type=1326 audit(1769822508.738:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.296828][   T34] audit: type=1326 audit(1769822508.738:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.303777][   T34] audit: type=1326 audit(1769822508.748:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.318639][   T34] audit: type=1326 audit(1769822508.748:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.333817][   T34] audit: type=1326 audit(1769822508.748:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.202" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a22f9acb9 code=0x7ffc0000
[   82.454861][   T33] IPVS: starting estimator thread 0...
[   82.491647][ T6422] vlan2: entered promiscuous mode
[   82.493411][ T6422] team0: entered promiscuous mode
[   82.495015][ T6422] team_slave_0: entered promiscuous mode
[   82.501121][ T6422] team_slave_1: entered promiscuous mode
[   82.503147][ T6422] vlan2: entered allmulticast mode
[   82.505109][ T6422] team0: entered allmulticast mode
[   82.506872][ T6422] team_slave_0: entered allmulticast mode
[   82.508690][ T6422] team_slave_1: entered allmulticast mode
[   82.576916][ T6420] IPVS: using max 84 ests per chain, 201600 per kthread
[   82.801424][ T6428] loop1: detected capacity change from 0 to 32768
[   82.807234][ T6428] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.213 (6428)
[   82.822130][ T6428] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   82.825404][ T6428] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   82.857756][   T33] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.865093][ T6428] BTRFS info (device loop1): enabling ssd optimizations
[   82.869213][ T6428] BTRFS info (device loop1): turning on async discard
[   82.871644][ T6428] BTRFS info (device loop1): enabling free space tree
[   83.006800][   T33] usb 1-1: Using ep0 maxpacket: 32
[   83.013347][   T33] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   83.021808][   T33] usb 1-1: config 0 has no interface number 0
[   83.031748][   T33] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   83.035489][   T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.046058][   T33] usb 1-1: Product: syz
[   83.051450][   T33] usb 1-1: Manufacturer: syz
[   83.056235][   T33] usb 1-1: SerialNumber: syz
[   83.072852][   T33] usb 1-1: config 0 descriptor??
[   83.094062][   T33] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   83.333639][   T33] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   83.361177][   T33] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   83.743511][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[   83.748959][   T33] usb 1-1: USB disconnect, device number 4
[   83.808832][   T33] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   83.867036][   T33] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   83.883801][   T33] quatech2 1-1:0.51: device disconnected
[   84.056478][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'.
[   84.065642][ T6457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'.
[   84.406434][ T5844] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.348818][ T6521] loop0: detected capacity change from 0 to 4096
[   86.360513][ T6521] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   86.378670][ T6521] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   86.384765][ T6521] ntfs3(loop0): ino=19, mi_enum_attr
[   86.393869][ T6521] ntfs3(loop0): failed to convert "c46c" to cp737
[   86.398689][ T6521] ntfs3(loop0): ino=20, mi_enum_attr
[   86.451218][ T6523] process 'syz.0.247' launched './file0' with NULL argv: empty string added
[   86.577556][ T6529] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   86.579950][ T6529] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   86.603014][ T6531] capability: warning: `syz.0.251' uses deprecated v2 capabilities in a way that may be insecure
[   86.675344][ T6534] loop0: detected capacity change from 0 to 256
[   86.678984][ T6534] exfat: Deprecated parameter 'utf8'
[   86.712897][ T6534] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6efbb19, utbl_chksum : 0xe619d30d)
[   87.841390][ T5900] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   88.089498][ T5900] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   88.100747][ T5900] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   88.104119][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[   88.107121][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   88.110811][ T5900] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   88.117242][ T5900] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   88.120312][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   88.123071][ T5900] usb 2-1: Product: syz
[   88.124542][ T5900] usb 2-1: Manufacturer: syz
[   88.139087][ T5900] cdc_wdm 2-1:1.0: skipping garbage
[   88.142222][ T5900] cdc_wdm 2-1:1.0: skipping garbage
[   88.153007][ T5900] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[   88.156113][ T5900] cdc_wdm 2-1:1.0: Unknown control protocol
[   88.196518][ T6570] xt_hashlimit: max too large, truncated to 1048576
[   88.211204][ T6570] xt_CT: You must specify a L4 protocol and not use inversions on it
[   88.252292][ T6572] Driver unsupported XDP return value 0 on prog  (id 15) dev N/A, expect packet loss!
[   88.543540][    C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[   88.551201][ T5963] usb 2-1: USB disconnect, device number 4
[   89.038736][ T6590] loop2: detected capacity change from 0 to 1024
[   89.068036][ T6590] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   89.133436][ T6590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.150922][ T6590] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.276: missing EA_INODE flag
[   89.162415][ T6590] EXT4-fs (loop2): Remounting filesystem read-only
[   89.172267][ T6590] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   89.220995][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.823684][ T6630] loop1: detected capacity change from 0 to 512
[   89.978205][ T6643] ./cgroup: Can't lookup blockdev
[   90.270219][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[   91.028244][ T6698] loop2: detected capacity change from 0 to 1024
[   91.052415][ T6698] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[   91.159979][ T6701] netlink: 232 bytes leftover after parsing attributes in process `syz.2.323'.
[   91.180276][ T6701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.323'.
[   91.188444][ T6703] syz.1.324 uses obsolete (PF_INET,SOCK_PACKET)
[   91.424838][ T6720] loop1: detected capacity change from 0 to 16
[   91.434182][ T6720] erofs: Unknown parameter '/dev/vbi#'
[   91.572908][ T6725] ipip0: entered promiscuous mode
[   91.574711][ T6725] ipip0: entered allmulticast mode
[   91.982633][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[   92.274876][ T6724] loop2: detected capacity change from 0 to 32768
[   92.280244][   T10] cfg80211: failed to load regulatory.db
[   92.404930][ T6724] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.458522][ T6747] loop0: detected capacity change from 0 to 16
[   92.472927][ T6724] XFS (loop2): Ending clean mount
[   92.481391][ T6747] erofs (device loop0): mounted with root inode @ nid 36.
[   92.502217][ T6724] XFS (loop2): Quotacheck needed: Please wait.
[   92.555026][ T6724] XFS (loop2): Quotacheck: Done.
[   92.602708][ T5841] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.805676][ T6757] loop0: detected capacity change from 0 to 1024
[   92.809150][ T6757] EXT4-fs: Ignoring removed nobh option
[   92.811298][ T6757] EXT4-fs: Ignoring removed bh option
[   92.911666][ T6757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.930800][ T6759] loop2: detected capacity change from 0 to 4096
[   92.940621][ T6759] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   92.957184][ T6757] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.343: iget: bogus i_mode (7755)
[   92.972479][ T6759] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   93.010162][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.528895][ T6796] netlink: 'syz.2.354': attribute type 2 has an invalid length.
[   96.056330][ T6804] loop2: detected capacity change from 0 to 8192
[   96.765378][ T6820] loop2: detected capacity change from 0 to 128
[   96.974792][ T6825] netlink: 188 bytes leftover after parsing attributes in process `syz.1.367'.
[   97.271694][ T6833] loop1: detected capacity change from 0 to 65536
[   97.305576][ T6833] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   97.334111][ T6833] XFS (loop1): Ending clean mount
[   97.337867][ T6833] XFS (loop1): Quotacheck needed: Please wait.
[   97.382395][ T6833] XFS (loop1): Quotacheck: Done.
[   97.415585][ T6852] loop2: detected capacity change from 0 to 256
[   97.424947][ T5844] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   97.451748][ T6852] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   97.455739][ T6852] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[   97.909726][ T6874] loop2: detected capacity change from 0 to 4096
[   97.924471][ T6874] kAFS: unable to lookup cell 'O鏣mxpS/N?K{)ve J=S%B.[] Ƥ# }INR'}SJ'8J~;N!u	VO~~'&
[   97.924471][ T6874] ^aR~C	!H+?,0yt9r]Oʐd>I~緕v|aqr;[TϟƼ3ZA]g|0-WTjܟJôMIR#vCo^u7dl!y!!~."H';5{'
[   98.040150][ T6876] loop0: detected capacity change from 0 to 32768
[   98.046932][ T6876] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.386 (6876)
[   98.059112][ T6876] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.062530][ T6876] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   98.110045][ T6876] BTRFS info (device loop0): rebuilding free space tree
[   98.127192][ T6876] BTRFS info (device loop0): turning off barriers
[   98.137535][ T6876] BTRFS info (device loop0): turning on async discard
[   98.140115][ T6876] BTRFS info (device loop0): enabling free space tree
[   98.142303][ T6876] BTRFS info (device loop0): force clearing of disk cache
[   98.144587][ T6876] BTRFS info (device loop0): max_inline set to 17
[   98.177649][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.438168][ T6902] mmap: syz.0.389 (6902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  100.261805][ T6920] loop0: detected capacity change from 0 to 4096
[  100.273531][ T6920] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  100.292794][ T6920] ntfs3(loop0): ino=3, mi_enum_attr
[  100.865491][ T6930] loop0: detected capacity change from 0 to 256
[  100.868968][ T6930] exfat: Bad value for 'gid'
[  100.897200][ T6930] exfat: Bad value for 'gid'
[  100.936032][ T6930] overlayfs: missing 'lowerdir'
[  101.651932][ T6935] loop2: detected capacity change from 0 to 40427
[  101.684341][ T6935] F2FS-fs (loop2): invalid crc value
[  101.761480][ T6935] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  101.771913][ T6935] F2FS-fs (loop2): Start checkpoint disabled!
[  101.797971][ T6935] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  101.802292][ T6935] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  101.841807][  T796] kworker/u9:2: attempt to access beyond end of device
[  101.841807][  T796] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  101.860451][  T796] CPU: 0 UID: 0 PID: 796 Comm: kworker/u9:2 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  101.860470][  T796] Tainted: [L]=SOFTLOCKUP
[  101.860474][  T796] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.860481][  T796] Workqueue: writeback wb_workfn (flush-7:2)
[  101.860499][  T796] Call Trace:
[  101.860504][  T796]  <TASK>
[  101.860515][  T796]  dump_stack_lvl+0xe8/0x150
[  101.860559][  T796]  f2fs_handle_critical_error+0x37c/0x540
[  101.860577][  T796]  f2fs_write_end_io+0x886/0xb60
[  101.860596][  T796]  __submit_merged_bio+0x256/0x650
[  101.860608][  T796]  __submit_merged_write_cond+0x269/0x530
[  101.860620][  T796]  f2fs_write_data_pages+0x2806/0x3360
[  101.860642][  T796]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.860657][  T796]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  101.860676][  T796]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  101.860686][  T796]  ? __lock_acquire+0x6b5/0x2cf0
[  101.860700][  T796]  ? __lock_acquire+0x6b5/0x2cf0
[  101.860715][  T796]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  101.860729][  T796]  do_writepages+0x32e/0x550
[  101.860748][  T796]  ? reacquire_held_locks+0x104/0x190
[  101.860760][  T796]  ? writeback_sb_inodes+0x41f/0x1820
[  101.860778][  T796]  __writeback_single_inode+0x133/0x1230
[  101.860790][  T796]  ? do_raw_spin_unlock+0x4d/0x210
[  101.860802][  T796]  writeback_sb_inodes+0x92c/0x1820
[  101.860820][  T796]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  101.860828][  T796]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.860853][  T796]  ? rcu_is_watching+0x15/0xb0
[  101.860867][  T796]  wb_writeback+0x445/0xad0
[  101.860877][  T796]  ? queue_io+0x221/0x450
[  101.860889][  T796]  ? __pfx_wb_writeback+0x10/0x10
[  101.860896][  T796]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.860912][  T796]  wb_workfn+0x3f8/0xef0
[  101.860918][  T796]  ? __lock_acquire+0x6b5/0x2cf0
[  101.860925][  T796]  ? look_up_lock_class+0x57/0x110
[  101.860944][  T796]  ? __pfx_wb_workfn+0x10/0x10
[  101.860951][  T796]  ? finish_task_switch+0x161/0x920
[  101.860963][  T796]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.860972][  T796]  ? lock_acquire+0x106/0x330
[  101.860980][  T796]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  101.860991][  T796]  ? process_scheduled_works+0xa0f/0x17a0
[  101.861000][  T796]  ? process_scheduled_works+0xa0f/0x17a0
[  101.861011][  T796]  ? process_scheduled_works+0xa0f/0x17a0
[  101.861018][  T796]  ? process_scheduled_works+0xa0f/0x17a0
[  101.861026][  T796]  process_scheduled_works+0xaec/0x17a0
[  101.861043][  T796]  ? __pfx_process_scheduled_works+0x10/0x10
[  101.861050][  T796]  ? do_raw_spin_lock+0x12b/0x2f0
[  101.861062][  T796]  ? assign_work+0x3d3/0x440
[  101.861071][  T796]  worker_thread+0x89f/0xd90
[  101.861089][  T796]  kthread+0x726/0x8b0
[  101.861100][  T796]  ? __pfx_worker_thread+0x10/0x10
[  101.861108][  T796]  ? __pfx_kthread+0x10/0x10
[  101.861118][  T796]  ? _raw_spin_unlock_irq+0x23/0x50
[  101.861128][  T796]  ? __pfx_kthread+0x10/0x10
[  101.861138][  T796]  ret_from_fork+0x51b/0xa40
[  101.861147][  T796]  ? __pfx_ret_from_fork+0x10/0x10
[  101.861154][  T796]  ? __switch_to+0xc82/0x1410
[  101.861166][  T796]  ? __pfx_kthread+0x10/0x10
[  101.861176][  T796]  ret_from_fork_asm+0x1a/0x30
[  101.861192][  T796]  </TASK>
[  101.861196][  T796] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  102.103493][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.418'.
[  102.237296][ T6971] loop2: detected capacity change from 0 to 1024
[  102.286249][  T796] hfsplus: b-tree write err: -5, ino 4
[  102.357783][ T6973] binder: 6966:6973 ioctl c0306201 0 returned -14
[  102.789963][ T5926] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  102.949609][ T5926] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.955425][ T5926] usb 2-1: config 1 has no interface number 1
[  102.963783][ T5926] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  102.976254][ T5926] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.022945][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.025572][ T5926] usb 2-1: Product: syz
[  103.027211][ T5926] usb 2-1: Manufacturer: syz
[  103.028816][ T5926] usb 2-1: SerialNumber: syz
[  103.222474][ T7006] loop2: detected capacity change from 0 to 64
[  103.236079][ T5926] usb 2-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  103.246854][ T5926] usb 2-1: 2:1 : sample bitwidth 138 in over sample bytes 1
[  103.249229][ T5926] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  103.280017][ T7008] loop0: detected capacity change from 0 to 256
[  103.299593][ T5926] usb 2-1: USB disconnect, device number 5
[  103.301911][ T7008] FAT-fs (loop0): Directory bread(block 64) failed
[  103.304170][ T7008] FAT-fs (loop0): Directory bread(block 65) failed
[  103.305690][ T7006] Trying to free block not in datazone
[  103.306240][ T7008] FAT-fs (loop0): Directory bread(block 66) failed
[  103.315745][ T7006] Trying to free block not in datazone
[  103.321725][ T7008] FAT-fs (loop0): Directory bread(block 67) failed
[  103.323837][ T7008] FAT-fs (loop0): Directory bread(block 68) failed
[  103.325903][ T7008] FAT-fs (loop0): Directory bread(block 69) failed
[  103.326343][ T7006] Trying to free block not in datazone
[  103.338890][ T7008] FAT-fs (loop0): Directory bread(block 70) failed
[  103.340981][ T7008] FAT-fs (loop0): Directory bread(block 71) failed
[  103.343150][ T7008] FAT-fs (loop0): Directory bread(block 72) failed
[  103.345220][ T7008] FAT-fs (loop0): Directory bread(block 73) failed
[  103.348757][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.454914][ T7013] loop0: detected capacity change from 0 to 1024
[  103.459065][ T7013] EXT4-fs: Ignoring removed i_version option
[  103.461749][ T7013] EXT4-fs: inline encryption not supported
[  103.466116][ T7013] EXT4-fs (loop0): Test dummy encryption mode enabled
[  103.469757][ T7013] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (16), stripe is disabled
[  103.477785][ T7013] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #4: comm syz.0.439: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  103.484083][ T7013] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.439: Bad quota inode: 4, type: 1
[  103.488327][ T7013] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  103.493464][ T7013] EXT4-fs (loop0): mount failed
[  103.898027][ T7032] loop0: detected capacity change from 0 to 512
[  103.908656][ T7032] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  103.920721][ T7032] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.445: Allocating blocks 41-42 which overlap fs metadata
[  103.929371][ T7032] Quota error (device loop0): write_blk: dquota write failed
[  103.932373][ T7032] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5
[  103.935989][ T7032] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.445: Allocating blocks 41-42 which overlap fs metadata
[  103.941708][ T7032] Quota error (device loop0): write_blk: dquota write failed
[  103.944870][ T7032] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  103.950298][ T7032] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.445: Failed to acquire dquot type 1
[  103.957434][ T7032] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  103.968079][ T7032] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #12: comm syz.0.445: corrupted inode contents
[  103.975328][ T7032] EXT4-fs error (device loop0): ext4_dirty_inode:6501: inode #12: comm syz.0.445: mark_inode_dirty error
[  103.987483][ T7032] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #12: comm syz.0.445: corrupted inode contents
[  103.991586][ T7032] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.445: mark_inode_dirty error
[  103.995727][ T7032] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #12: comm syz.0.445: corrupted inode contents
[  104.002328][ T7032] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  104.007325][ T7032] EXT4-fs error (device loop0): ext4_do_update_inode:5616: inode #12: comm syz.0.445: corrupted inode contents
[  104.016414][ T7032] EXT4-fs error (device loop0): ext4_truncate:4634: inode #12: comm syz.0.445: mark_inode_dirty error
[  104.027393][ T7032] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  104.037698][ T7032] EXT4-fs (loop0): 1 truncate cleaned up
[  104.040366][ T7032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.057807][ T7032] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.445: Allocating blocks 41-42 which overlap fs metadata
[  104.065687][ T7032] Quota error (device loop0): write_blk: dquota write failed
[  104.069784][ T7032] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  104.073105][ T7032] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.445: Failed to acquire dquot type 1
[  104.100550][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.547496][ T7051] netlink: 'syz.2.453': attribute type 1 has an invalid length.
[  104.864595][ T7069] binder: 7064:7069 ioctl c0306201 200000000640 returned -14
[  104.903055][ T7072] netlink: 24 bytes leftover after parsing attributes in process `syz.1.461'.
[  104.942692][ T7074] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  105.406779][ T5963] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  105.558505][ T5963] usb 2-1: Using ep0 maxpacket: 16
[  105.571115][ T5963] usb 2-1: unable to get BOS descriptor or descriptor too short
[  105.574756][ T5963] usb 2-1: config 8 has an invalid interface number: 252 but max is 0
[  105.581555][ T5963] usb 2-1: config 8 has an invalid interface number: 4 but max is 0
[  105.584180][ T5963] usb 2-1: config 8 has 2 interfaces, different from the descriptor's value: 1
[  105.594099][ T5963] usb 2-1: config 8 has no interface number 0
[  105.596157][ T5963] usb 2-1: config 8 has no interface number 1
[  105.599088][ T5963] usb 2-1: config 8 interface 252 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  105.603917][ T5963] usb 2-1: config 8 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  105.611299][ T5963] usb 2-1: config 8 interface 252 has no altsetting 0
[  105.614270][ T5963] usb 2-1: config 8 interface 4 has no altsetting 0
[  105.621314][ T5963] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=4a.45
[  105.631672][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.634989][ T5963] usb 2-1: Product: syz
[  105.651976][ T5963] usb 2-1: Manufacturer: syz
[  105.653995][ T5963] usb 2-1: SerialNumber: syz
[  105.825785][ T5523] kernel write not supported for file /uinput (pid: 5523 comm: kworker/0:3)
[  105.885640][ T5963] sierra 2-1:8.252: Sierra USB modem converter detected
[  105.892063][ T5963] usb 2-1: Sierra USB modem converter now attached to ttyUSB0
[  105.898784][ T5963] sierra 2-1:8.4: Sierra USB modem converter detected
[  105.906243][ T5963] usb 2-1: Sierra USB modem converter now attached to ttyUSB1
[  105.912217][ T5963] usb 2-1: USB disconnect, device number 6
[  105.918751][ T5963] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  105.921779][ T5963] sierra 2-1:8.252: device disconnected
[  105.931174][ T5963] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  105.938255][ T5963] sierra 2-1:8.4: device disconnected
[  106.068152][ T7094] loop2: detected capacity change from 0 to 32768
[  106.087972][ T7094] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.470 (7094)
[  106.100660][ T7094] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  106.104022][ T7094] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  106.173512][ T7103] loop0: detected capacity change from 0 to 32768
[  106.223545][ T7103] JBD2: Ignoring recovery information on journal
[  106.252306][ T7103] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  106.291975][ T5837] ocfs2: Unmounting device (7,0) on (node local)
[  106.334688][ T7094] BTRFS info (device loop2): enabling ssd optimizations
[  106.350741][ T7094] BTRFS info (device loop2): turning on async discard
[  106.352856][ T7094] BTRFS info (device loop2): enabling free space tree
[  106.398268][ T5841] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  106.400892][ T7123] loop0: detected capacity change from 0 to 4096
[  106.405634][ T7123] EXT4-fs (loop0): Test dummy encryption mode enabled
[  106.473242][ T7123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  106.513645][ T7123] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  106.561569][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.843076][ T7139] loop1: detected capacity change from 0 to 4096
[  106.996294][ T7139] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  107.066370][ T7139] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  107.153588][ T7144] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.172557][ T7139] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  107.180151][ T7139] Remounting filesystem read-only
[  107.341482][ T7150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  107.736986][ T5926] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  107.907310][ T5926] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  107.918779][ T5926] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  107.956830][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0
[  107.962051][ T5926] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  107.965837][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  107.980322][ T5926] usb 3-1: Product: syz
[  107.982110][ T5926] usb 3-1: Manufacturer: syz
[  107.983771][ T5926] usb 3-1: SerialNumber: syz
[  107.990192][ T5926] usb 3-1: config 0 descriptor??
[  107.996927][ T5926] hub 3-1:0.0: bad descriptor, ignoring hub
[  107.998808][ T5926] hub 3-1:0.0: probe with driver hub failed with error -5
[  108.009401][ T5926] usb 3-1: selecting invalid altsetting 0
[  108.191605][ T7180] loop0: detected capacity change from 0 to 512
[  108.205355][ T7182] loop1: detected capacity change from 0 to 256
[  108.235043][ T7182] FAT-fs (loop1): Directory bread(block 64) failed
[  108.237910][ T7180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.238405][ T7182] FAT-fs (loop1): Directory bread(block 65) failed
[  108.242397][ T7180] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.244358][ T7182] FAT-fs (loop1): Directory bread(block 66) failed
[  108.254144][ T7182] FAT-fs (loop1): Directory bread(block 67) failed
[  108.257043][ T7182] FAT-fs (loop1): Directory bread(block 68) failed
[  108.259378][ T7182] FAT-fs (loop1): Directory bread(block 69) failed
[  108.262261][ T7182] FAT-fs (loop1): Directory bread(block 70) failed
[  108.265055][ T7182] FAT-fs (loop1): Directory bread(block 71) failed
[  108.265674][ T5963] kernel read not supported for file / (pid: 5963 comm: kworker/1:6)
[  108.268608][ T7182] FAT-fs (loop1): Directory bread(block 72) failed
[  108.272994][ T7182] FAT-fs (loop1): Directory bread(block 73) failed
[  108.294279][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.309093][   T10] usb 3-1: USB disconnect, device number 2
[  108.460250][ T7188] syz.1.500 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  109.408734][ T7197] loop2: detected capacity change from 0 to 32768
[  109.419961][ T7197] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.504 (7197)
[  109.482882][ T7197] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.496574][ T7197] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  109.669541][ T7197] BTRFS info (device loop2): enabling ssd optimizations
[  109.672376][ T7197] BTRFS info (device loop2): turning on async discard
[  109.675039][ T7197] BTRFS info (device loop2): enabling free space tree
[  109.756332][ T7233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.509'.
[  109.794284][ T5841] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.935888][ T7243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'.
[  110.048719][ T7252] netlink: 'syz.0.517': attribute type 4 has an invalid length.
[  110.069743][ T7252] netlink: 'syz.0.517': attribute type 8 has an invalid length.
[  110.075155][ T7252] netlink: 212 bytes leftover after parsing attributes in process `syz.0.517'.
[  110.102272][ T7254] loop2: detected capacity change from 0 to 256
[  110.105257][ T7254] exfat: Deprecated parameter 'namecase'
[  110.127797][ T7254] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  110.207917][ T7260] loop1: detected capacity change from 0 to 256
[  110.231912][ T7260] FAT-fs (loop1): Directory bread(block 64) failed
[  110.236732][ T7260] FAT-fs (loop1): Directory bread(block 65) failed
[  110.238959][ T7260] FAT-fs (loop1): Directory bread(block 66) failed
[  110.277842][ T7260] FAT-fs (loop1): Directory bread(block 67) failed
[  110.287072][ T7260] FAT-fs (loop1): Directory bread(block 68) failed
[  110.289729][ T7260] FAT-fs (loop1): Directory bread(block 69) failed
[  110.296867][ T7260] FAT-fs (loop1): Directory bread(block 70) failed
[  110.308148][ T7260] FAT-fs (loop1): Directory bread(block 71) failed
[  110.310813][ T7260] FAT-fs (loop1): Directory bread(block 72) failed
[  110.313441][ T7260] FAT-fs (loop1): Directory bread(block 73) failed
[  110.811179][ T7272] loop2: detected capacity change from 0 to 32768
[  110.822065][ T7272] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.526 (7272)
[  110.833037][ T7272] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  110.838258][ T7272] BTRFS info (device loop2): using blake2b (blake2b-256-lib) checksum algorithm
[  110.931645][ T7272] BTRFS info (device loop2): enabling ssd optimizations
[  110.933920][ T7272] BTRFS info (device loop2): turning on async discard
[  110.936032][ T7272] BTRFS info (device loop2): enabling free space tree
[  110.955523][ T7272] BTRFS info (device loop2): use zstd compression, level 3
[  111.010140][ T5841] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  111.023309][ T7304] loop1: detected capacity change from 0 to 256
[  111.028734][ T7304] exfat: Deprecated parameter 'utf8'
[  111.054164][ T7304] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc5eeb3cb, utbl_chksum : 0xe619d30d)
[  111.426034][ T7323] loop2: detected capacity change from 0 to 4096
[  111.440272][ T7323] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  111.449168][ T7328] netlink: 'syz.1.544': attribute type 7 has an invalid length.
[  111.457977][ T7323] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  111.479791][ T7323] ntfs3(loop2): volume is dirty and "force" flag is not set!
[  111.807126][ T5884] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  111.979141][ T5884] usb 2-1: unable to get BOS descriptor or descriptor too short
[  111.985021][ T5884] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 49919, setting to 1024
[  111.993769][ T5884] usb 2-1: config 1 interface 1 has no altsetting 0
[  112.006126][ T5884] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  112.011573][ T5884] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.014237][ T5884] usb 2-1: Product: syz
[  112.015680][ T5884] usb 2-1: Manufacturer: syz
[  112.017837][ T5884] usb 2-1: SerialNumber: syz
[  112.232010][ T5884] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  112.234918][ T5884] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  112.239814][ T5884] usb 2-1: 2:1: All rates were zero
[  112.254487][ T5884] usb 2-1: USB disconnect, device number 7
[  112.290288][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  112.339627][ T7370] netlink: 'syz.0.561': attribute type 4 has an invalid length.
[  112.394882][ T7372] loop0: detected capacity change from 0 to 1024
[  112.460141][   T66] hfsplus: b-tree write err: -5, ino 8
[  112.498518][ T7378] xt_hashlimit: size too large, truncated to 1048576
[  112.579361][ T7383] loop0: detected capacity change from 0 to 4096
[  112.768989][ T7391] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  113.012919][ T1094] hfsplus: b-tree write err: -5, ino 8
[  113.146782][ T7423] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  113.148879][ T7423] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  113.151922][ T7423] vhci_hcd vhci_hcd.0: Device attached
[  113.185753][ T7424] vhci_hcd: connection closed
[  113.187906][   T13] vhci_hcd vhci_hcd.1: stop threads
[  113.196780][   T13] vhci_hcd vhci_hcd.1: release socket
[  113.198579][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  113.644333][ T7439] overlayfs: unescaped trailing colons in lowerdir mount option.
[  113.761220][   T34] audit: type=1326 audit(1769822540.278:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.779140][ T7443] set_capacity_and_notify: 2 callbacks suppressed
[  113.779151][ T7443] loop0: detected capacity change from 0 to 4096
[  113.783263][   T34] audit: type=1326 audit(1769822540.288:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.795938][   T34] audit: type=1326 audit(1769822540.288:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.822674][ T7443] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  113.830450][   T34] audit: type=1326 audit(1769822540.288:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.851921][   T34] audit: type=1326 audit(1769822540.288:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.871549][   T34] audit: type=1326 audit(1769822540.288:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.897010][   T34] audit: type=1326 audit(1769822540.288:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.903678][   T34] audit: type=1326 audit(1769822540.288:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f855139c547 code=0x7ffc0000
[  113.948955][   T34] audit: type=1326 audit(1769822540.288:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  113.961713][   T34] audit: type=1326 audit(1769822540.288:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7444 comm="syz.1.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f855139acb9 code=0x7ffc0000
[  114.033605][ T7456] netlink: 'syz.0.599': attribute type 30 has an invalid length.
[  114.170938][ T7465] netlink: 248 bytes leftover after parsing attributes in process `syz.0.604'.
[  114.174055][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.0.604'.
[  114.218929][ T7468] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.605' sets config #0
[  114.572893][ T7472] loop0: detected capacity change from 0 to 32768
[  115.348034][ T7510] loop2: detected capacity change from 0 to 64
[  115.367673][ T7510] BFS-fs: bfs_fill_super(): Impossible last inode number 35651743 > 513 on loop2
[  115.459335][ T7513] loop2: detected capacity change from 0 to 512
[  115.477051][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  115.497223][ T7513] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  115.524144][ T7513] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  115.535443][ T7513] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.623: bg 0: block 248: padding at end of block bitmap is not set
[  115.541763][ T7513] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.623: Failed to acquire dquot type 1
[  115.552840][ T7513] EXT4-fs (loop2): 1 truncate cleaned up
[  115.555383][ T7513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  115.588665][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  115.666902][   T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  115.671078][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.674392][   T24] usb 2-1: Product: syz
[  115.676116][   T24] usb 2-1: Manufacturer: syz
[  115.694907][   T24] usb 2-1: SerialNumber: syz
[  115.700450][   T24] usb 2-1: config 0 descriptor??
[  115.721515][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  116.363637][ T7542] syz_tun: entered allmulticast mode
[  116.823698][   T24] usb 2-1: USB disconnect, device number 8
[  117.643187][ T7558] netlink: 'syz.0.642': attribute type 2 has an invalid length.
[  117.754372][ T7564] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.072411][ T7572] loop0: detected capacity change from 0 to 4096
[  118.082955][ T7572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  118.120050][ T7572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.647: bg 0: block 363: padding at end of block bitmap is not set
[  118.139277][ T7572] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -117
[  118.144646][ T7572] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -28
[  118.161723][ T7572] syz.0.647 (7572) used greatest stack depth: 19800 bytes left
[  118.170776][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.714964][ T7582] loop2: detected capacity change from 0 to 512
[  118.723858][ T7582] EXT4-fs (loop2): Test dummy encryption mode enabled
[  118.729302][ T7582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  118.733534][ T7582] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  118.751335][ T7582] EXT4-fs (loop2): 1 truncate cleaned up
[  118.754052][ T7582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  118.817172][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x61
[  118.817198][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x30
[  118.819594][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x75
[  118.821864][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x30
[  118.825430][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x74
[  118.827944][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x30
[  118.830685][ T5221] Bluetooth: hci1: unknown advertising packet type: 0x2c
[  118.873600][ T7592] Zero length message leads to an empty skb
[  118.881917][ T7582] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  118.925367][ T5841] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.958148][ T7594] loop1: detected capacity change from 0 to 512
[  118.978588][ T7594] EXT4-fs (loop1): 1 truncate cleaned up
[  118.991696][ T7594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.054017][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.245869][ T7605] netlink: 16 bytes leftover after parsing attributes in process `syz.0.656'.
[  119.676174][ T7615] macvlan0: entered allmulticast mode
[  119.678142][ T7615] veth1_vlan: entered allmulticast mode
[  119.681913][ T7615] veth1_vlan: left allmulticast mode
[  119.706329][ T7615] macvlan0 (unregistering): left allmulticast mode
[  119.940090][ T7624] loop0: detected capacity change from 0 to 4096
[  119.944243][ T7624] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  119.949603][ T7624] ntfs3(loop0): ino=3, mi_enum_attr
[  120.180722][ T7633] loop1: detected capacity change from 0 to 1024
[  120.208701][ T7633] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.008553][ T7643] Bluetooth: MGMT ver 1.23
[  121.073862][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.107570][ T7645] warning: `syz.2.671' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  121.475590][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.686'.
[  121.698920][ T7694] netlink: 240 bytes leftover after parsing attributes in process `syz.1.690'.
[  121.811597][ T7698] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'.
[  121.825744][ T7698] netlink: 32 bytes leftover after parsing attributes in process `syz.0.693'.
[  121.930953][ T7704] loop0: detected capacity change from 0 to 1024
[  121.949412][ T7704] EXT4-fs: Ignoring removed orlov option
[  122.001256][ T7708] x_tables: ip_tables: osf match: only valid for protocol 6
[  122.017301][ T7704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c118, mo2=0002]
[  122.023455][ T7704] System zones: 0-1, 3-12
[  122.034983][ T7704] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  122.066795][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  122.091690][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  122.226241][   T10] usb 2-1: config 0 has an invalid interface number: 48 but max is 0
[  122.232904][   T10] usb 2-1: config 0 has no interface number 0
[  122.234894][   T10] usb 2-1: config 0 interface 48 has no altsetting 0
[  122.253437][   T10] usb 2-1: New USB device found, idVendor=12d1, idProduct=a177, bcdDevice=3c.86
[  122.256335][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.293268][   T10] usb 2-1: config 0 descriptor??
[  122.475643][ T7719] netlink: 'syz.2.702': attribute type 1 has an invalid length.
[  122.505685][   T10] usb 2-1: string descriptor 0 read error: -71
[  122.519074][   T10] qmi_wwan 2-1:0.48: More than one union descriptor, skipping ...
[  122.528540][   T10] qmi_wwan 2-1:0.48: probe with driver qmi_wwan failed with error -22
[  122.542962][   T10] usb 2-1: USB disconnect, device number 9
[  123.380731][ T7737] Bluetooth: hci0: invalid len left 7, exp >= 117
[  123.462144][ T7746] loop1: detected capacity change from 0 to 128
[  123.465566][ T7746] befs: (loop1): No write support. Marking filesystem read-only
[  123.492191][ T7746] befs: (loop1): invalid magic header
[  123.545264][ T7750] loop1: detected capacity change from 0 to 512
[  123.572865][ T7750] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.717: casefold flag without casefold feature
[  123.579780][ T7750] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.717: couldn't read orphan inode 15 (err -117)
[  123.586553][ T7750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.635756][ T5844] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.660322][ T7758] nbd: must specify at least one socket
[  123.766243][ T7769] loop2: detected capacity change from 0 to 1764
[  124.200064][ T7800] loop0: detected capacity change from 0 to 256
[  124.449668][ T5963] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  124.633265][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.637166][ T5963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.642247][ T5963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  124.661965][ T5963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  124.668152][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.713203][ T5900] libceph: connect (1)[c::]:6789 error -101
[  124.716005][ T5900] libceph: mon0 (1)[c::]:6789 connect error
[  124.719417][ T5963] usb 2-1: config 0 descriptor??
[  125.075185][ T5900] libceph: connect (1)[c::]:6789 error -101
[  125.078432][ T5900] libceph: mon0 (1)[c::]:6789 connect error
[  125.139901][ T5963] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  125.143005][ T5963] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  125.157130][ T5963] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  125.271350][ T7815] loop2: detected capacity change from 0 to 1024
[  125.297334][ T7806] ceph: No mds server is up or the cluster is laggy
[  125.341521][   T66] hfsplus: b-tree write err: -5, ino 4
[  125.458955][ T7822] loop0: detected capacity change from 0 to 128
[  126.418823][ T5963] usb 2-1: USB disconnect, device number 10
[  126.446328][ T7836] loop2: detected capacity change from 0 to 256
[  126.456337][ T7836] FAT-fs (loop2): Directory bread(block 64) failed
[  126.459399][ T7836] FAT-fs (loop2): Directory bread(block 65) failed
[  126.461590][ T7836] FAT-fs (loop2): Directory bread(block 66) failed
[  126.463727][ T7836] FAT-fs (loop2): Directory bread(block 67) failed
[  126.465880][ T7836] FAT-fs (loop2): Directory bread(block 68) failed
[  126.475203][ T7836] FAT-fs (loop2): Directory bread(block 69) failed
[  126.478652][ T7836] FAT-fs (loop2): Directory bread(block 70) failed
[  126.480789][ T7836] FAT-fs (loop2): Directory bread(block 71) failed
[  126.482924][ T7836] FAT-fs (loop2): Directory bread(block 72) failed
[  126.495615][ T7836] FAT-fs (loop2): Directory bread(block 73) failed
[  127.131510][ T7854] loop2: detected capacity change from 0 to 256
[  127.144378][ T7854] exfat: Deprecated parameter 'utf8'
[  127.146394][ T7854] exfat: Deprecated parameter 'namecase'
[  127.158100][ T7854] exfat: Deprecated parameter 'utf8'
[  127.188116][ T7854] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  127.194735][ T7854] exFAT-fs (loop2): start_clu is invalid cluster(0x0)
[  127.198092][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  127.198105][   T34] audit: type=1800 audit(1769822553.718:30): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.758" name="file1" dev="loop2" ino=1048632 res=0 errno=0
[  128.387326][ T7872] loop1: detected capacity change from 0 to 40427
[  128.392987][ T7872] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  128.395852][ T7872] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  128.400167][ T7872] F2FS-fs (loop1): invalid crc value
[  128.426713][ T7872] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.438312][ T7872] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  128.441039][ T7872] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  129.506840][ T5884] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  129.634822][   T34] audit: type=1326 audit(1769822556.148:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.644813][   T34] audit: type=1326 audit(1769822556.148:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.653937][   T34] audit: type=1326 audit(1769822556.158:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.658835][ T5884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.661850][   T34] audit: type=1326 audit(1769822556.158:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.674694][   T34] audit: type=1326 audit(1769822556.158:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.676817][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  129.682848][   T34] audit: type=1326 audit(1769822556.158:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.690811][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  129.699880][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  129.702153][   T34] audit: type=1326 audit(1769822556.158:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.706039][ T5884] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 9
[  129.711857][   T34] audit: type=1326 audit(1769822556.158:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.718486][ T5884] usb 3-1: New USB device found, idVendor=1784, idProduct=0001, bcdDevice=8c.04
[  129.724549][   T34] audit: type=1326 audit(1769822556.158:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7911 comm="syz.0.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff24039acb9 code=0x7ffc0000
[  129.729229][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.742864][ T5884] usb 3-1: config 0 descriptor??
[  266.788048][    C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [kworker/u9:14:4989]
[  266.788064][    C0] Modules linked in:
[  266.788070][    C0] irq event stamp: 9294244
[  266.788073][    C0] hardirqs last  enabled at (9294243): [<ffffffff8b790bbc>] irqentry_exit+0x59c/0x620
[  266.788089][    C0] hardirqs last disabled at (9294244): [<ffffffff8b78f5ce>] sysvec_apic_timer_interrupt+0xe/0xc0
[  266.788101][    C0] softirqs last  enabled at (9294242): [<ffffffff8186299f>] __irq_exit_rcu+0x5f/0x150
[  266.788111][    C0] softirqs last disabled at (9294233): [<ffffffff8186299f>] __irq_exit_rcu+0x5f/0x150
[  266.788125][    C0] CPU: 0 UID: 0 PID: 4989 Comm: kworker/u9:14 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.788135][    C0] Tainted: [L]=SOFTLOCKUP
[  266.788137][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.788142][    C0] Workqueue: events_unbound toggle_allocation_gate
[  266.788153][    C0] RIP: 0010:smp_call_function_many_cond+0xce5/0x1270
[  266.788164][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 64 b5 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0f b1 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 f3 b0
[  266.788170][    C0] RSP: 0018:ffffc90020dd76a0 EFLAGS: 00000293
[  266.788176][    C0] RAX: ffffffff81b6e8fd RBX: 1ffff110478c8129 RCX: ffff88811327ba80
[  266.788181][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  266.788185][    C0] RBP: ffffc90020dd77e0 R08: ffffffff8fcef877 R09: 1ffffffff1f9df0e
[  266.788189][    C0] R10: dffffc0000000000 R11: fffffbfff1f9df0f R12: ffff88823c640948
[  266.788194][    C0] R13: dffffc0000000000 R14: ffff88812103bb00 R15: 0000000000000001
[  266.788199][    C0] FS:  0000000000000000(0000) GS:ffff88818e324000(0000) knlGS:0000000000000000
[  266.788204][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  266.788209][    C0] CR2: 00007ff24127cd58 CR3: 000000000e146000 CR4: 00000000000006f0
[  266.788240][    C0] Call Trace:
[  266.788246][    C0]  <TASK>
[  266.788252][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  266.788267][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  266.788278][    C0]  ? kmem_cache_alloc_bulk_noprof+0xa9/0x710
[  266.788287][    C0]  ? __pfx___text_poke+0x10/0x10
[  266.788296][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  266.788305][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  266.788315][    C0]  smp_text_poke_batch_finish+0x5f5/0x1160
[  266.788327][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  266.788334][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  266.788344][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[  266.788358][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  266.788368][    C0]  static_key_enable_cpuslocked+0x128/0x240
[  266.788378][    C0]  static_key_enable+0x1a/0x20
[  266.788386][    C0]  toggle_allocation_gate+0xab/0x290
[  266.788395][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  266.788403][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[  266.788413][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[  266.788420][    C0]  ? process_scheduled_works+0xa0f/0x17a0
[  266.788427][    C0]  process_scheduled_works+0xaec/0x17a0
[  266.788442][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  266.788448][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  266.788459][    C0]  ? assign_work+0x3d3/0x440
[  266.788468][    C0]  worker_thread+0x89f/0xd90
[  266.788478][    C0]  ? __kthread_parkme+0x7a/0x1f0
[  266.788489][    C0]  kthread+0x726/0x8b0
[  266.788500][    C0]  ? __pfx_worker_thread+0x10/0x10
[  266.788506][    C0]  ? __pfx_kthread+0x10/0x10
[  266.788516][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  266.788525][    C0]  ? __pfx_kthread+0x10/0x10
[  266.788534][    C0]  ret_from_fork+0x51b/0xa40
[  266.788542][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  266.788548][    C0]  ? __switch_to+0xc82/0x1410
[  266.788560][    C0]  ? __pfx_kthread+0x10/0x10
[  266.788569][    C0]  ret_from_fork_asm+0x1a/0x30
[  266.788584][    C0]  </TASK>
[  266.788587][    C0] Sending NMI from CPU 0 to CPUs 1:
[  266.921347][    C1] NMI backtrace for cpu 1
[  266.921367][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  266.921383][    C1] Tainted: [L]=SOFTLOCKUP
[  266.921387][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  266.921394][    C1] RIP: 0010:mm_get_cid+0xab/0x130
[  266.921415][    C1] Code: 41 5c 41 5d 41 5e 41 5f 5d e9 81 69 e8 09 cc 49 c7 c5 c8 f4 d7 8d 49 c1 ed 03 bd 00 00 00 80 eb 07 44 89 f0 f7 d8 71 d4 f3 90 <43> 0f b6 44 25 00 84 c0 75 41 44 8b 3d 3c 7d 44 0c 48 89 df 4c 89
[  266.921424][    C1] RSP: 0018:ffffc90000197be8 EFLAGS: 00000887
[  266.921437][    C1] RAX: 0000000080000000 RBX: ffff888177a517d0 RCX: dffffc0000000000
[  266.921445][    C1] RDX: 0000000000000002 RSI: 0000000000000002 RDI: ffff888177a517d0
[  266.921452][    C1] RBP: 0000000080000000 R08: ffff888177a51653 R09: 1ffff1102ef4a2ca
[  266.921460][    C1] R10: dffffc0000000000 R11: ffffed102ef4a2cb R12: dffffc0000000000
[  266.921468][    C1] R13: 1ffffffff1bafe99 R14: 0000000080000000 R15: 0000000000000002
[  266.921476][    C1] FS:  0000000000000000(0000) GS:ffff8882a9924000(0000) knlGS:0000000000000000
[  266.921484][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  266.921492][    C1] CR2: 0000000000000000 CR3: 000000016e822000 CR4: 00000000000006f0
[  266.921529][    C1] Call Trace:
[  266.921538][    C1]  <TASK>
[  266.921546][    C1]  __schedule+0x21b0/0x4fb0
[  266.921567][    C1]  ? tick_nohz_next_event+0x47/0x3e0
[  266.921587][    C1]  ? ct_kernel_exit_state+0x2b/0x80
[  266.921599][    C1]  ? trace_irq_disable+0x37/0x100
[  266.921615][    C1]  ? __pfx___schedule+0x10/0x10
[  266.921628][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  266.921646][    C1]  ? tick_nohz_idle_exit+0x2e1/0x3a0
[  266.921658][    C1]  schedule_idle+0x51/0x90
[  266.921673][    C1]  do_idle+0x499/0x500
[  266.921686][    C1]  ? lockdep_hardirqs_on+0x7a/0x110
[  266.921702][    C1]  ? __pfx_do_idle+0x10/0x10
[  266.921717][    C1]  cpu_startup_entry+0x43/0x60
[  266.921729][    C1]  start_secondary+0x101/0x110
[  266.921741][    C1]  common_startup_64+0x13e/0x147
[  266.921761][    C1]  </TASK>
