last executing test programs:

1m1.140531326s ago: executing program 0 (id=140):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000010000005566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x58}}, 0x0)

1m1.038161456s ago: executing program 0 (id=141):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0x0, '\x00', @p_u32=0x0}})

1m0.970431936s ago: executing program 0 (id=142):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x6b, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)

1m0.669598613s ago: executing program 0 (id=143):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000001c0)={0xb, @win={{0x38305343, 0x9cf, 0x6, 0x5}, 0x5, 0xa, 0x0, 0x516db994, 0x0}})

1m0.390314497s ago: executing program 0 (id=144):
r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
syz_io_uring_complete(0x0, r0)
close_range(r1, 0xffffffffffffffff, 0x200000000000000)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7)
mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000001600)='proc\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x1000000, 0x33d, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6c, 0x6449, 0x0, 0xfffffffd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0)

1m0.317146108s ago: executing program 0 (id=145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000900)=ANY=[], 0x68)

44.706652757s ago: executing program 32 (id=145):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000900)=ANY=[], 0x68)

1.298052004s ago: executing program 3 (id=704):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.250088874s ago: executing program 3 (id=705):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb3", 0x58}], 0x1}, 0xfffc)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_adjtime(0x17, &(0x7f0000000040)={0xd51, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x3f420f00, 0x0, 0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x100, 0x3, 0x0, 0xe438, 0x0, 0x0, 0xe0})

1.249924418s ago: executing program 3 (id=706):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)

1.17959427s ago: executing program 3 (id=707):
r0 = io_uring_setup(0x744e, &(0x7f0000000000)={0x0, 0xc2be, 0x400, 0x3, 0x1e4})
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x1a3040, 0x102)
close(r0)

520.832603ms ago: executing program 1 (id=719):
r0 = socket(0x10, 0x3, 0x0)
connect$tipc(r0, &(0x7f00000002c0)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x1}}, 0x10)

520.57416ms ago: executing program 1 (id=721):
keyctl$dh_compute(0x15, &(0x7f0000000200), 0x0, 0x0, 0x0)

469.66073ms ago: executing program 1 (id=723):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendto(r2, &(0x7f00000001c0)="1a04452f1524a4dd8f680a71dfb1930e4c9fad1e3cf76c27bc1e9316b87e79595519d8fdff3a930d829cb9a69235ab723e5d63d71bd57f44", 0x38, 0x30000090, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/56, 0x38}], 0x1}}], 0x1, 0x102, 0x0)

408.90042ms ago: executing program 1 (id=725):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff)

309.164593ms ago: executing program 3 (id=727):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="540100001800010027bd7000fddbdf251d0106001e01060003060302ff71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c50285600000000fe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505dc69ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df49260ccf8b5901b39bafdd39874e9808b118301f0176054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec4d42c3ef0619022c035c8d03000000000000014d7a8ce5412814edb2ea0000080005000506b90515000300030000200503000054831bdbae1d76fc6e"], 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x4004000)

308.950252ms ago: executing program 2 (id=728):
r0 = syz_io_uring_setup(0xaad, &(0x7f0000000300)={0x0, 0x4, 0x40, 0x22, 0x1b}, &(0x7f0000000100), &(0x7f0000000400), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x1f, 0x2}]}, 0x1}, 0x1)

259.941017ms ago: executing program 3 (id=729):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0xfd, 0x61be, &(0x7f0000006980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0)
truncate(&(0x7f0000000940)='./file1\x00', 0x8da6)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

210.046042ms ago: executing program 2 (id=730):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x104, 0x0, &(0x7f0000000480)="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", 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100005}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x642)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

147.899037ms ago: executing program 2 (id=731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a", @ANYRES32=0x0, @ANYRES8], 0x38}}, 0x6004000)

146.568842ms ago: executing program 1 (id=732):
r0 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r0, 0x0, 0x0)

77.844792ms ago: executing program 2 (id=733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

77.564395ms ago: executing program 2 (id=734):
socket(0xa, 0x3, 0x2)
r0 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0xfac7})
syz_io_uring_setup(0x48ce, &(0x7f0000000400)={0x0, 0xd353, 0x3221, 0x0, 0x19a, 0x0, r0}, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='mountstats\x00')
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00')
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

206.905µs ago: executing program 1 (id=735):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xba4e7a40265e5c6b, 0x2c, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8000, 0x9, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xfc, 0x8}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

0s ago: executing program 2 (id=736):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x1, 0x6, 0x0, 0x1, 0xf4bbc11f9c135238, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:29793' (ED25519) to the list of known hosts.
syzkaller login: [   49.375744][ T5595] cgroup: Unknown subsys name 'net'
[   49.478561][ T5595] cgroup: Unknown subsys name 'cpuset'
[   49.482463][ T5595] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.766523][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.888670][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.892922][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.896924][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.900789][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.906698][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.918402][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.922851][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.927495][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.931551][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.936857][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.021357][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.025562][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.028843][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.033326][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.036899][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.610003][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.613245][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.616295][ T5606] bridge_slave_0: entered allmulticast mode
[   55.619103][ T5606] bridge_slave_0: entered promiscuous mode
[   55.645652][ T5606] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.648243][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.650726][ T5606] bridge_slave_1: entered allmulticast mode
[   55.653525][ T5606] bridge_slave_1: entered promiscuous mode
[   55.677767][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.680706][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.683176][ T5603] bridge_slave_0: entered allmulticast mode
[   55.685847][ T5603] bridge_slave_0: entered promiscuous mode
[   55.699227][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.702595][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.704985][ T5618] bridge_slave_0: entered allmulticast mode
[   55.708814][ T5618] bridge_slave_0: entered promiscuous mode
[   55.712760][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.715125][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.717678][ T5603] bridge_slave_1: entered allmulticast mode
[   55.720548][ T5603] bridge_slave_1: entered promiscuous mode
[   55.725117][ T5606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.730054][ T5606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.733298][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.736489][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.738842][ T5618] bridge_slave_1: entered allmulticast mode
[   55.741536][ T5618] bridge_slave_1: entered promiscuous mode
[   55.788423][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.794150][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.799645][ T5606] team0: Port device team_slave_0 added
[   55.821542][ T5606] team0: Port device team_slave_1 added
[   55.833979][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.850326][ T5603] team0: Port device team_slave_0 added
[   55.854114][ T5603] team0: Port device team_slave_1 added
[   55.858639][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.901508][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.904002][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.912106][ T5606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.917434][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.919865][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.928150][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.932728][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.935003][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.943356][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.955989][ T5606] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.958753][ T5606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   55.966896][ T5606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.979872][ T5618] team0: Port device team_slave_0 added
[   55.990054][ T5618] team0: Port device team_slave_1 added
[   56.022294][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.024584][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.032738][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.038662][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.041434][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.051370][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.084779][ T5603] hsr_slave_0: entered promiscuous mode
[   56.088209][ T5603] hsr_slave_1: entered promiscuous mode
[   56.094709][ T5606] hsr_slave_0: entered promiscuous mode
[   56.100623][ T5606] hsr_slave_1: entered promiscuous mode
[   56.103815][ T5606] debugfs: 'hsr0' already exists in 'hsr'
[   56.106352][ T5606] Cannot create hsr debugfs directory
[   56.144646][ T5618] hsr_slave_0: entered promiscuous mode
[   56.147919][ T5618] hsr_slave_1: entered promiscuous mode
[   56.150616][ T5618] debugfs: 'hsr0' already exists in 'hsr'
[   56.152827][ T5618] Cannot create hsr debugfs directory
[   56.451148][ T5618] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.461850][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.466928][ T5618] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.472353][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.475663][ T5618] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.482442][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.495096][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.500232][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.538097][ T5606] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.542821][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.545721][ T5606] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.553357][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.559079][ T5606] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.564205][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.583745][ T5606] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.588677][ T5606] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.657763][ T5603] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.667363][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   56.671655][ T5603] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.677783][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   56.684079][ T5603] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.689198][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   56.696197][ T5603] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.700424][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   56.764738][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.789833][ T5618] 8021q: adding VLAN 0 to HW filter on device team0
[   56.803120][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.805628][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.825626][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.829567][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.831854][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.835798][ T5606] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.869338][ T5606] 8021q: adding VLAN 0 to HW filter on device team0
[   56.872892][ T5603] 8021q: adding VLAN 0 to HW filter on device team0
[   56.885586][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.887913][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.893655][   T91] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.895950][   T91] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.909637][   T91] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.912448][   T91] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.921778][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.924202][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.966714][ T4987] Bluetooth: hci1: command tx timeout
[   56.967124][   T54] Bluetooth: hci0: command tx timeout
[   57.138936][   T54] Bluetooth: hci2: command tx timeout
[   57.263065][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.297728][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.333363][ T5618] veth0_vlan: entered promiscuous mode
[   57.354171][ T5606] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.372138][ T5618] veth1_vlan: entered promiscuous mode
[   57.404469][ T5603] veth0_vlan: entered promiscuous mode
[   57.435313][ T5603] veth1_vlan: entered promiscuous mode
[   57.463396][ T5606] veth0_vlan: entered promiscuous mode
[   57.472479][ T5618] veth0_macvtap: entered promiscuous mode
[   57.487618][ T5606] veth1_vlan: entered promiscuous mode
[   57.491921][ T5618] veth1_macvtap: entered promiscuous mode
[   57.512037][ T5603] veth0_macvtap: entered promiscuous mode
[   57.522098][ T5603] veth1_macvtap: entered promiscuous mode
[   57.545914][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.552342][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.572528][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.579891][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.592166][ T5606] veth0_macvtap: entered promiscuous mode
[   57.602720][ T5606] veth1_macvtap: entered promiscuous mode
[   57.664472][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.673212][ T5606] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.747377][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.752932][ T5417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.758389][ T5417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.784475][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.789951][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.792792][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.816190][ T5417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.819914][ T5417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.827576][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.854904][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.857953][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.864574][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.865778][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.892082][ T5618] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.902901][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.909134][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.919113][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.929882][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.986628][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.996476][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.030258][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.035702][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.036437][ T5712] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.042182][ T5712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.087148][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.857711][ T5733] syzkaller0: entered promiscuous mode
[   58.864045][ T5733] syzkaller0: entered allmulticast mode
[   59.046384][   T54] Bluetooth: hci1: command tx timeout
[   59.056982][   T54] Bluetooth: hci0: command tx timeout
[   59.206324][   T54] Bluetooth: hci2: command tx timeout
[   59.488743][ T5737] netlink: 'syz.0.9': attribute type 3 has an invalid length.
[   59.491900][ T5737] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9'.
[   59.956408][ T5724] syz.2.3 (5724) used greatest stack depth: 20480 bytes left
[   60.211013][ T5753] loop0: detected capacity change from 0 to 1024
[   61.050301][ T5778] syz.0.27 (5778): attempted to duplicate a private mapping with mremap.  This is not supported.
[   61.126436][   T54] Bluetooth: hci0: command tx timeout
[   61.126458][ T4987] Bluetooth: hci1: command tx timeout
[   61.290801][ T4987] Bluetooth: hci2: command tx timeout
[   61.963945][ T5794] loop2: detected capacity change from 0 to 32768
[   62.177238][ T5807] gadgetfs: bound to dummy_udc driver
[   62.243137][ T5809] ALSA: mixer_oss: invalid OSS volume ''
[   62.894321][ T5818] loop2: detected capacity change from 0 to 32768
[   62.931266][ T5818] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[   62.945528][ T5818] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   63.017085][ T5818] XFS (loop2): Ending clean mount
[   63.044689][ T5818] XFS (loop2): Quotacheck needed: Please wait.
[   63.076861][ T5813] loop1: detected capacity change from 0 to 131072
[   63.087472][ T5813] F2FS-fs (loop1): invalid crc value
[   63.137273][ T5813] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   63.143463][ T5813] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   63.154534][ T5818] XFS (loop2): Quotacheck: Done.
[   63.187910][ T5835] loop0: detected capacity change from 0 to 8
[   63.197179][ T5835] SQUASHFS error: zlib decompression failed, data probably corrupt
[   63.200478][ T5835] SQUASHFS error: Failed to read block 0x9b: -5
[   63.202907][ T5835] SQUASHFS error: Unable to read metadata cache entry [99]
[   63.205731][ T5835] SQUASHFS error: Unable to read inode 0x127
[   63.209058][ T4987] Bluetooth: hci1: command tx timeout
[   63.216277][ T4987] Bluetooth: hci0: command tx timeout
[   63.232387][   T34] audit: type=1800 audit(1787041513.700:2): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.47" name="file1" dev="loop2" ino=9286 res=0 errno=0
[   63.366569][ T4987] Bluetooth: hci2: command tx timeout
[   63.864093][ T5848] evm: overlay not supported
[   64.412217][ T5857] loop0: detected capacity change from 0 to 4096
[   64.415389][ T5859] loop1: detected capacity change from 0 to 2048
[   64.434785][ T5859] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   64.439777][ T5857] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   64.537472][ T5857] ntfs3(loop0): ino=19, mi_enum_attr
[   64.538047][ T5860] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   64.539959][ T5857] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   64.550294][ T5857] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   64.564425][ T5857] ntfs3(loop0): failed to convert "076c" to cp949
[   64.569959][ T5857] ntfs3(loop0): ino=20, mi_enum_attr
[   64.845702][ T5866] vlan2: entered promiscuous mode
[   64.848877][ T5866] batadv0: entered promiscuous mode
[   65.107466][ T5414] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   65.519430][ T5414] usb 2-1: unable to get BOS descriptor or descriptor too short
[   65.522392][ T5414] usb 2-1: New USB device found, idVendor=0b95, idProduct=178a, bcdDevice=ab.a5
[   65.528640][ T5414] usb 2-1: config 9 has an invalid interface number: 39 but max is 0
[   65.531202][ T5414] usb 2-1: config 9 has no interface number 0
[   65.535207][ T5414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.537731][ T5414] usb 2-1: Product: syz
[   65.539078][ T5414] usb 2-1: Manufacturer: syz
[   65.540943][ T5414] usb 2-1: SerialNumber: syz
[   65.640262][ T5606] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   65.773011][ T5414] ax88179_178a 2-1:9.39: probe with driver ax88179_178a failed with error -22
[   65.781935][ T5414] usb 2-1: USB disconnect, device number 2
[   65.786831][ T5876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.66'.
[   66.029210][ T5884] loop0: detected capacity change from 0 to 8192
[   66.032012][ T5884] =======================================================
[   66.032012][ T5884] WARNING: The mand mount option has been deprecated and
[   66.032012][ T5884]          and is ignored by this kernel. Remove the mand
[   66.032012][ T5884]          option from the mount to silence this warning.
[   66.032012][ T5884] =======================================================
[   66.164595][ T5886] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver
[   66.335974][ T5892] loop1: detected capacity change from 0 to 256
[   66.349928][ T5893] loop0: detected capacity change from 0 to 8
[   66.363500][ T5892] FAT-fs (loop1): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   66.369891][ T5892] FAT-fs (loop1): Filesystem has been set read-only
[   66.647124][ T5911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[   66.649833][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   66.656794][ T5911] vhci_hcd vhci_hcd.0: Device attached
[   66.697749][ T5918] loop0: detected capacity change from 0 to 128
[   66.717005][ T5918] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.724020][ T5918] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   66.771108][ T5618] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.896244][   T31] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[   66.916242][ T5735] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[   67.077040][ T5735] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   67.083989][ T5735] usb 3-1: config 0 has no interfaces?
[   67.087849][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.097012][ T5735] usb 3-1: config 0 descriptor??
[   67.306824][ T5735] usb 3-1: USB disconnect, device number 2
[   67.312157][ T5912] vhci_hcd: connection closed
[   67.319186][   T13] vhci_hcd vhci_hcd.2: stop threads
[   67.324366][   T13] vhci_hcd vhci_hcd.2: release socket
[   67.333660][   T13] vhci_hcd vhci_hcd.2: disconnect device
[   67.376674][   T31] vhci_hcd vhci_hcd.2: vhci_device speed not set
[   67.498082][ T5927] loop1: detected capacity change from 0 to 2048
[   67.533583][ T5927] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   67.613677][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'.
[   68.250821][ T5954] netlink: 'syz.2.98': attribute type 46 has an invalid length.
[   68.266555][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'.
[   68.462967][ T5960] mmap: syz.2.101 (5960): VmData 175874048 exceed data ulimit 129. Update limits or use boot option ignore_rlimit_data.
[   68.740772][ T5966] loop2: detected capacity change from 0 to 512
[   68.747361][ T5966] EXT4-fs: Ignoring removed oldalloc option
[   68.781777][ T5966] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #15: comm syz.2.104: corrupted inode contents
[   68.788107][ T5966] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   68.790194][ T5966] EXT4-fs (loop2): Remounting filesystem read-only
[   68.795949][ T5966] EXT4-fs (loop2): 1 orphan inode deleted
[   68.797993][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   68.798020][    C1] EXT4-fs (loop2): initial error at time 1787041519: ext4_do_update_inode:5742: inode 15
[   68.798033][    C1] EXT4-fs (loop2): last error at time 1787041519: ext4_do_update_inode:5742: inode 15
[   68.818823][ T5966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.869771][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.923253][   T10] cfg80211: failed to load regulatory.db
[   69.039938][ T5981] syzkaller0: tun_chr_ioctl cmd 1074025676
[   69.043932][ T5981] syzkaller0: owner set to 0
[   69.439508][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   69.446894][ T5996] netlink: 'syz.1.118': attribute type 30 has an invalid length.
[   69.492326][ T5996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'.
[   69.496156][ T5996] netlink: 'syz.1.118': attribute type 30 has an invalid length.
[   69.496997][   T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   69.505331][   T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   69.566019][ T5996] Zero length message leads to an empty skb
[   69.577990][   T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   69.585395][   T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   69.651989][   T34] audit: type=1326 audit(1787041520.120:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c9b9e0d9 code=0x7ffc0000
[   69.666169][   T34] audit: type=1326 audit(1787041520.120:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c9b9e0d9 code=0x7ffc0000
[   69.674139][   T34] audit: type=1326 audit(1787041520.120:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fb9c9b9e0d9 code=0x7ffc0000
[   69.690943][   T34] audit: type=1326 audit(1787041520.120:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c9b9e0d9 code=0x7ffc0000
[   69.708086][   T34] audit: type=1326 audit(1787041520.120:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.1.121" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9c9b9e0d9 code=0x7ffc0000
[   69.737785][ T6004] Bluetooth: ISO socket layer initialized
[   69.740568][ T6006] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'.
[   69.866810][ T6008] loop1: detected capacity change from 0 to 4096
[   69.876394][ T6008] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[   69.900958][ T6008] ntfs3(loop1): Failed to load $Bitmap (-22).
[   70.226298][   T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   70.401835][   T31] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[   70.414261][   T31] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   70.420937][   T31] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.425358][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[   70.429603][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.437170][   T31] usb 3-1: config 0 descriptor??
[   70.893968][   T31] hid-multitouch 0003:0EEF:72C4.0001: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.2-1/input0
[   71.036243][ T5735] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   71.054044][ T6044] loop0: detected capacity change from 0 to 32768
[   71.067125][ T6044] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.142 (6044)
[   71.083680][   T10] usb 3-1: USB disconnect, device number 3
[   71.128565][ T6044] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.138899][ T6044] BTRFS info (device loop0): using crc32c checksum algorithm
[   71.185549][ T6044] BTRFS info (device loop0): enabling ssd optimizations
[   71.188616][ T6044] BTRFS info (device loop0): turning on flush-on-commit
[   71.191098][ T6044] BTRFS info (device loop0): enabling free space tree
[   71.193407][ T6044] BTRFS info (device loop0): enabling auto defrag
[   71.195559][ T6044] BTRFS info (device loop0): use lzo compression, level 1
[   71.198402][ T6044] BTRFS info (device loop0): max_inline set to 0
[   71.216971][ T5735] usb 2-1: Using ep0 maxpacket: 16
[   71.219932][ T5735] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[   71.224989][ T5735] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   71.227767][ T5735] usb 2-1: config 0 has no interface number 0
[   71.230008][ T5735] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[   71.233385][ T5735] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[   71.236700][ T5735] usb 2-1: config 0 interface 41 has no altsetting 0
[   71.238607][ T5618] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   71.241066][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.245880][ T5735] usb 2-1: Product: syz
[   71.249897][ T5735] usb 2-1: Manufacturer: syz
[   71.251768][ T5735] usb 2-1: SerialNumber: syz
[   71.260126][ T5735] usb 2-1: config 0 descriptor??
[   71.262982][ T6038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   71.266052][ T6038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   71.451296][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[   71.454183][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[   71.473701][ T6038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   71.477352][ T6038] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   71.686385][ T5735] sr9700 2-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address
[   71.713412][ T5735] usb 2-1: USB disconnect, device number 3
[   71.837656][ T6069] tmpfs: Bad value for 'size'
[   71.902637][ T6073] gtp0: entered promiscuous mode
[   71.904385][ T6073] gtp0: entered allmulticast mode
[   72.176252][ T5414] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   72.267529][ T6077] loop1: detected capacity change from 0 to 512
[   72.281306][ T6077] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   72.294515][ T6077] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   72.314434][ T6077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082]
[   72.318968][ T6077] System zones: 1-12
[   72.327712][ T6077] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.335339][ T5414] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24
[   72.340364][ T5414] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   72.345546][ T5414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[   72.352590][ T6077] EXT4-fs (loop1): 1 truncate cleaned up
[   72.355212][ T5414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   72.361935][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.369387][ T5414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.372980][ T5414] usb 3-1: Product: syz
[   72.375393][ T5414] usb 3-1: Manufacturer: syz
[   72.378047][ T5414] usb 3-1: SerialNumber: syz
[   72.392372][ T5414] usb 3-1: config 0 descriptor??
[   72.507964][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.601383][ T5414] powermate: unknown product id 0240
[   72.607998][ T5414] powermate: Expected payload of 3--6 bytes, found 0 bytes!
[   72.613964][ T5414] powermate 3-1:0.0: probe with driver powermate failed with error -5
[   72.631512][ T5414] usb 3-1: USB disconnect, device number 4
[   73.790399][ T6102] loop1: detected capacity change from 0 to 512
[   73.822503][ T6102] syz.1.160: attempt to access beyond end of device
[   73.822503][ T6102] loop1: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512
[   73.828200][ T6102] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   73.833217][ T6102] FAT-fs (loop1): Filesystem has been set read-only
[   73.836033][ T6102] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fffff00)
[   73.888781][ T6104] loop1: detected capacity change from 0 to 512
[   73.948938][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.989412][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.153777][ T6108] loop1: detected capacity change from 0 to 32768
[   74.213129][ T6108] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[   74.224957][ T6108] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   74.252781][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.163'.
[   74.268961][ T6108] XFS (loop1): Ending clean mount
[   74.284383][ T6108] XFS (loop1): Quotacheck needed: Please wait.
[   74.345325][ T6108] XFS (loop1): Quotacheck: Done.
[   74.468059][ T5603] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[   74.789563][ T6128] loop1: detected capacity change from 0 to 164
[   74.848235][ T6130] bond1: down delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[   74.851218][ T6130] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[   74.860078][ T6130] bond1: entered allmulticast mode
[   74.862463][ T6130] 8021q: adding VLAN 0 to HW filter on device bond1
[   75.083652][ T6141] loop1: detected capacity change from 0 to 8
[   75.435409][ T6150] netlink: 'syz.2.177': attribute type 61 has an invalid length.
[   75.726482][   T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   75.886682][   T31] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60
[   75.891302][   T31] usb 3-1: config 0 has an invalid interface number: 107 but max is 0
[   75.894383][   T31] usb 3-1: config 0 has no interface number 0
[   75.897217][   T31] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64
[   75.903289][   T31] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[   75.906453][   T31] usb 3-1: Product: syz
[   75.907951][   T31] usb 3-1: Manufacturer: syz
[   75.909625][   T31] usb 3-1: SerialNumber: syz
[   75.916978][   T31] usb 3-1: config 0 descriptor??
[   75.925238][   T31] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected
[   75.930633][   T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81
[   75.940097][   T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1
[   75.947588][   T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[   75.955475][   T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2
[   75.963261][   T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[   75.971003][   T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4
[   75.977703][   T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[   75.985347][   T31] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6
[   75.995383][   T31] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[   76.225803][ T6152] netlink: 56 bytes leftover after parsing attributes in process `syz.2.178'.
[   76.231673][   T24] usb 3-1: USB disconnect, device number 5
[   76.239182][ T6154] netlink: Conntrack attr has 4 unknown bytes
[   76.244399][   T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[   76.246777][ T6154] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   76.255436][   T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[   76.263981][   T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[   76.275357][   T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[   76.281775][   T24] keyspan 3-1:0.107: device disconnected
[   76.354530][ T6156] ip6tnl1: entered allmulticast mode
[   76.818879][ T6166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.185'.
[   77.652632][ T6178] usb usb5: usbfs: process 6178 (syz.2.191) did not claim interface 0 before use
[   77.781405][ T6187] loop1: detected capacity change from 0 to 64
[   78.264199][ T6198] binder: 6196:6198 ioctl c018620c 200000000240 returned -22
[   79.614733][ T6208] loop2: detected capacity change from 0 to 32768
[   79.619585][ T6208] xfs: Deprecated parameter 'noikeep'
[   79.626153][ T6208] XFS: noikeep mount option is deprecated.
[   79.658573][ T6208] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.717208][ T6208] XFS (loop2): Ending clean mount
[   79.741580][ T6208] XFS (loop2): Quotacheck needed: Please wait.
[   79.832246][ T6208] XFS (loop2): Quotacheck: Done.
[   79.888310][ T5606] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   79.907071][ T6224] loop1: detected capacity change from 0 to 2048
[   79.911449][ T6224] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[   79.923015][ T6224] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.218655][ T6230] loop2: detected capacity change from 0 to 32768
[   80.236475][ T6230] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.252714][ T6230] XFS (loop2): Ending clean mount
[   80.257597][ T6230] XFS (loop2): Quotacheck needed: Please wait.
[   80.274970][ T6230] XFS (loop2): Quotacheck: Done.
[   80.286848][ T5710] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   80.300439][ T5606] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   80.454328][ T5710] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[   80.467667][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.479806][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.495510][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.551816][ T5710] usb 2-1: config 0 descriptor??
[   80.572564][ T6245] loop2: detected capacity change from 0 to 40427
[   80.576233][ T6245] F2FS-fs (loop2): invalid crc value
[   80.618769][ T6245] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.625786][ T6245] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   80.990252][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   80.998165][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.001594][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.003972][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.006752][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.008990][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.011235][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.015116][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.017932][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.020238][ T5710] corsair 0003:1B1C:1B02.0002: unknown main item tag 0x0
[   81.022504][ T5710] corsair 0003:1B1C:1B02.0002: unbalanced collection at end of report description
[   81.025819][ T5710] corsair 0003:1B1C:1B02.0002: parse failed
[   81.028365][ T5710] corsair 0003:1B1C:1B02.0002: probe with driver corsair failed with error -22
[   81.201045][ T5710] usb 2-1: USB disconnect, device number 4
[   81.559973][ T5606] syz-executor: attempt to access beyond end of device
[   81.559973][ T5606] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   81.571625][ T5606] CPU: 1 UID: 0 PID: 5606 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[   81.571639][ T5606] Tainted: [L]=SOFTLOCKUP
[   81.571642][ T5606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.571646][ T5606] Call Trace:
[   81.571650][ T5606]  <TASK>
[   81.571654][ T5606]  dump_stack_lvl+0xe8/0x150
[   81.571668][ T5606]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   81.571680][ T5606]  f2fs_write_end_io+0x124b/0x1710
[   81.571697][ T5606]  __submit_merged_bio+0x258/0x6a0
[   81.571705][ T5606]  ? rcu_is_watching+0x15/0xb0
[   81.571749][ T5606]  __submit_merged_write_cond+0x3c9/0x4e0
[   81.571767][ T5606]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   81.571789][ T5606]  f2fs_write_data_pages+0x2a27/0x36f0
[   81.571798][ T5606]  ? is_bpf_text_address+0x26/0x2b0
[   81.571820][ T5606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.571828][ T5606]  ? is_bpf_text_address+0x26/0x2b0
[   81.571841][ T5606]  ? arch_stack_walk+0xfb/0x150
[   81.571858][ T5606]  ? add_lock_to_list+0xc7/0x100
[   81.571870][ T5606]  ? lockdep_unlock+0x5d/0xd0
[   81.571877][ T5606]  ? __lock_acquire+0x13e8/0x2cf0
[   81.571896][ T5606]  ? do_raw_spin_lock+0x12b/0x2f0
[   81.571907][ T5606]  ? do_raw_spin_unlock+0x4d/0x210
[   81.571917][ T5606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.571927][ T5606]  do_writepages+0x338/0x560
[   81.571940][ T5606]  ? do_raw_spin_unlock+0x4d/0x210
[   81.571949][ T5606]  filemap_fdatawrite+0x1e9/0x2f0
[   81.571961][ T5606]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   81.571986][ T5606]  ? do_raw_spin_unlock+0x4d/0x210
[   81.571995][ T5606]  f2fs_sync_dirty_inodes+0x30e/0x830
[   81.572010][ T5606]  f2fs_write_checkpoint+0xa3d/0x2710
[   81.572019][ T5606]  ? __lock_acquire+0x683/0x2cf0
[   81.572039][ T5606]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   81.572067][ T5606]  kill_f2fs_super+0x2f6/0x700
[   81.572079][ T5606]  ? __pfx_kill_f2fs_super+0x10/0x10
[   81.572092][ T5606]  ? call_rcu+0x64b/0x8b0
[   81.572120][ T5606]  ? lockdep_hardirqs_on+0x7a/0x110
[   81.572137][ T5606]  deactivate_locked_super+0xbc/0x130
[   81.572148][ T5606]  cleanup_mnt+0x3d3/0x460
[   81.572160][ T5606]  task_work_run+0x1d9/0x270
[   81.572172][ T5606]  ? __pfx_task_work_run+0x10/0x10
[   81.572186][ T5606]  exit_to_user_mode_loop+0x1fa/0x750
[   81.572195][ T5606]  ? rcu_is_watching+0x15/0xb0
[   81.572205][ T5606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.572213][ T5606]  do_syscall_64+0x353/0x580
[   81.572222][ T5606]  ? trace_irq_disable+0x3b/0x140
[   81.572233][ T5606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   81.572241][ T5606] RIP: 0033:0x7f8c5139f317
[   81.572249][ T5606] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[   81.572255][ T5606] RSP: 002b:00007fffd3635108 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   81.572264][ T5606] RAX: 0000000000000000 RBX: 00007f8c51434474 RCX: 00007f8c5139f317
[   81.572269][ T5606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd36351c0
[   81.572273][ T5606] RBP: 00007fffd36351c0 R08: 00007fffd36361c0 R09: 00000000ffffffff
[   81.572277][ T5606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffd3636250
[   81.572282][ T5606] R13: 00007f8c51434474 R14: 0000000000013c1a R15: 00007fffd3636290
[   81.572293][ T5606]  </TASK>
[   81.573341][ T5606] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   82.026278][ T5710] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   82.176205][ T5710] usb 2-1: Using ep0 maxpacket: 8
[   82.181368][ T5710] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[   82.200907][ T5710] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[   82.204275][ T5710] usb 2-1: config 2 has no interface number 0
[   82.207794][ T5710] usb 2-1: config 2 interface 31 has no altsetting 0
[   82.216393][   T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   82.222032][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.225796][ T5710] usb 2-1: Product: syz
[   82.228481][ T5710] usb 2-1: Manufacturer: syz
[   82.230506][ T5710] usb 2-1: SerialNumber: syz
[   82.367189][   T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[   82.371629][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[   82.375270][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[   82.380978][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[   82.388897][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.392403][   T10] usb 3-1: Product: syz
[   82.394190][   T10] usb 3-1: Manufacturer: syz
[   82.396193][   T10] usb 3-1: SerialNumber: syz
[   82.402821][   T10] usb 3-1: config 0 descriptor??
[   82.406742][ T6255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   82.409964][ T6255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[   82.415558][   T10] usb 3-1: ucan: probing device on interface #0
[   82.665828][ T5710] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[   82.679694][ T5710] usb 2-1: USB disconnect, device number 5
[   83.038739][   T10] ucan 3-1:0.0 can0: registered device
[   83.223621][   T10] ucan 3-1:0.0 can0: firmware string: unknown
[   83.251874][   T10] usb 3-1: USB disconnect, device number 6
[   83.421279][ T6261] syz.1.218 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   83.795550][ T6263] loop2: detected capacity change from 0 to 512
[   83.808594][ T6263] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   83.822886][ T6263] EXT4-fs (loop2): orphan cleanup on readonly fs
[   83.828243][ T6263] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.219: Block bitmap for bg 0 marked uninitialized
[   83.837453][ T6263] loop2: lost filesystem error report for type 5 error -117
[   83.839857][ T6263] EXT4-fs (loop2): Remounting filesystem read-only
[   83.845841][ T6263] EXT4-fs (loop2): 1 orphan inode deleted
[   83.848433][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   83.848451][    C0] EXT4-fs (loop2): initial error at time 1787041534: ext4_read_block_bitmap_nowait:517
[   83.848467][    C0] EXT4-fs (loop2): last error at time 1787041534: ext4_read_block_bitmap_nowait:517
[   83.862024][ T6263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   83.882202][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.079738][ T6275] loop2: detected capacity change from 0 to 4096
[   84.110578][ T6275] NILFS (loop2): invalid segment: Checksum error in segment payload
[   84.114328][ T6275] NILFS (loop2): trying rollback from an earlier position
[   84.130589][ T6275] NILFS (loop2): recovery complete
[   84.134457][ T6277] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.670781][ T6286] jffs2: notice: (6286) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   84.840803][ T6293] loop1: detected capacity change from 0 to 4096
[   84.851607][ T6293] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   84.856749][ T6293] UDF-fs: Scanning with blocksize 512 failed
[   84.865402][ T6293] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.964733][ T6297] netlink: 'syz.1.233': attribute type 6 has an invalid length.
[   84.976441][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   85.140499][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[   85.145535][   T24] usb 3-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=f3.b9
[   85.158392][   T24] usb 3-1: unable to read config index 0 descriptor/start: -71
[   85.160909][   T24] usb 3-1: can't read configurations, error -71
[   85.256540][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881134fd000: rx timeout, send abort
[   85.757647][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881134fdc00: rx timeout, send abort
[   85.762088][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881134fd000: abort rx timeout. Force session deactivation
[   86.144517][ T6319] Line length is too long: Should be less than 4094
[   86.260452][    C0] vcan0: j1939_tp_rxtimer: 0xffff8881134fdc00: abort rx timeout. Force session deactivation
[   86.856247][   T34] audit: type=1800 audit(1787041537.200:8): pid=6305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="bmaControls" dev="configfs" ino=8903 res=0 errno=0
[   86.865632][   T34] audit: type=1326 audit(1787041537.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6304 comm="syz.2.237" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c5139e0d9 code=0x7fc00000
[   87.376016][ T6336] loop1: detected capacity change from 0 to 512
[   87.379827][   T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.384578][   T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.390203][   T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.394524][   T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.397411][   T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.402713][ T6336] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   87.424103][ T6336] EXT4-fs (loop1): 1 truncate cleaned up
[   87.464279][ T6336] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.496670][ T6336] EXT4-fs error (device loop1): __ext4_expand_extra_isize:6455: inode #12: comm syz.1.250: bad extra_isize 62 (inode size 256)
[   87.511440][ T6344] loop2: detected capacity change from 0 to 256
[   87.530544][ T6336] EXT4-fs (loop1): Remounting filesystem read-only
[   87.595455][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.662199][ T6349] loop2: detected capacity change from 0 to 1024
[   87.792429][ T5712] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.913687][ T5712] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.957018][   T31] kernel write not supported for file /amidi2 (pid: 31 comm: kworker/1:1)
[   88.060830][ T5712] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.152240][ T6374] bridge1: entered promiscuous mode
[   88.154669][ T6374] bridge1: entered allmulticast mode
[   88.290193][ T5712] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.742033][ T6334] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.750241][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.753406][ T6334] bridge_slave_0: entered allmulticast mode
[   88.759465][ T6334] bridge_slave_0: entered promiscuous mode
[   88.775370][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.783465][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.793310][ T6334] bridge_slave_1: entered allmulticast mode
[   88.799794][ T6334] bridge_slave_1: entered promiscuous mode
[   88.942518][ T6334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.949454][ T6334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.001322][ T6334] team0: Port device team_slave_0 added
[   89.014525][ T6334] team0: Port device team_slave_1 added
[   89.077387][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.081985][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.095136][ T6334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.107396][ T6334] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.110221][ T6334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.122445][ T6334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.256583][ T6334] hsr_slave_0: entered promiscuous mode
[   89.265308][ T6334] hsr_slave_1: entered promiscuous mode
[   89.275851][ T6334] debugfs: 'hsr0' already exists in 'hsr'
[   89.291358][ T6334] Cannot create hsr debugfs directory
[   89.391750][ T5712] bridge_slave_1: left allmulticast mode
[   89.397787][ T5712] bridge_slave_1: left promiscuous mode
[   89.401359][ T5712] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.417013][ T5712] bridge_slave_0: left allmulticast mode
[   89.419460][ T5712] bridge_slave_0: left promiscuous mode
[   89.431167][ T5712] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.448583][   T54] Bluetooth: hci3: command tx timeout
[   89.683804][ T5712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.698726][ T5712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.737655][ T5712] bond0 (unregistering): Released all slaves
[   89.754608][ T5343] 8021q: adding VLAN 0 to HW filter on device eth1
[   89.827519][ T5735] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   89.988070][ T5735] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[   90.012078][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.031551][ T5735] usb 2-1: Product: syz
[   90.032988][ T5735] usb 2-1: Manufacturer: syz
[   90.046441][ T5735] usb 2-1: SerialNumber: syz
[   90.061661][ T5735] usb 2-1: config 0 descriptor??
[   90.308197][ T5712] hsr_slave_0: left promiscuous mode
[   90.312589][ T5712] hsr_slave_1: left promiscuous mode
[   90.318712][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.325668][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_0
[   90.345566][ T5712] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   90.352467][ T5712] batman_adv: batadv0: Removing interface: batadv_slave_1
[   90.405350][ T5712] veth1_macvtap: left promiscuous mode
[   90.414345][ T5712] veth0_macvtap: left promiscuous mode
[   90.417318][ T5712] veth1_vlan: left promiscuous mode
[   90.419516][ T5712] veth0_vlan: left promiscuous mode
[   90.490035][ T5735] usb 2-1: Firmware: major: 229, minor: 0, hardware type: ATUSB (0)
[   90.696656][ T5735] usb 2-1: no permanent extended address found, random address set
[   90.779548][ T6437] loop2: detected capacity change from 0 to 16
[   90.800695][ T6437] erofs (device loop2): mounted with root inode @ nid 36.
[   90.834946][ T5712] team0 (unregistering): Port device team_slave_1 removed
[   90.866854][ T5712] team0 (unregistering): Port device team_slave_0 removed
[   91.044631][ T5343] 8021q: adding VLAN 0 to HW filter on device eth2
[   91.097254][ T5735] usb 2-1: USB disconnect, device number 6
[   91.125021][ T6334] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.166683][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   91.170508][ T6334] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.178686][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   91.194809][ T6334] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.203475][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   91.207666][ T6334] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.213794][ T6334] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   91.382874][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.414134][ T6334] 8021q: adding VLAN 0 to HW filter on device team0
[   91.424718][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.427808][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.441837][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.444961][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.540111][   T54] Bluetooth: hci3: command tx timeout
[   91.570423][ T6459] netlink: 'syz.1.282': attribute type 1 has an invalid length.
[   91.581268][ T5343] 8021q: adding VLAN 0 to HW filter on device eth3
[   91.581286][ T6459] netlink: 224 bytes leftover after parsing attributes in process `syz.1.282'.
[   91.695646][ T6466] loop1: detected capacity change from 0 to 2048
[   91.744291][ T6466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.790143][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.822100][ T5343] 8021q: adding VLAN 0 to HW filter on device eth4
[   91.943132][ T6334] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.021836][ T6334] veth0_vlan: entered promiscuous mode
[   92.038825][ T6334] veth1_vlan: entered promiscuous mode
[   92.091130][ T6334] veth0_macvtap: entered promiscuous mode
[   92.102738][ T6334] veth1_macvtap: entered promiscuous mode
[   92.120266][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.139504][ T6334] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.167476][ T5712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.186458][ T5712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.211580][ T5712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.266031][ T5824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.266453][ T5712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.274329][ T5824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.286525][ T5414] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   92.303275][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.307369][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.477360][   T32] Bluetooth: hci2: Frame reassembly failed (-84)
[   92.753203][ T6508] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[   93.310872][ T6524] loop3: detected capacity change from 0 to 512
[   93.346665][ T6524] EXT4-fs (loop3): 1 orphan inode deleted
[   93.353603][ T6524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.363820][   T88] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   93.371479][ T6524] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.377804][   T88] EXT4-fs error (device loop3): ext4_release_dquot:7077: comm kworker/u9:4: Failed to release dquot type 1
[   93.689484][ T4987] Bluetooth: hci3: command tx timeout
[   93.830226][ T5671] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   93.987951][ T5671] usb 3-1: Using ep0 maxpacket: 32
[   93.993421][ T5671] usb 3-1: unable to get BOS descriptor or descriptor too short
[   93.997564][ T5671] usb 3-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40
[   94.004199][ T5671] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.008645][ T5671] usb 3-1: Product: syz
[   94.010081][ T5671] usb 3-1: Manufacturer: syz
[   94.011668][ T5671] usb 3-1: SerialNumber: syz
[   94.030401][ T5671] usb 3-1: 1:1 : incorrect wMaxPacketSize for BADD profile
[   94.185751][ T6334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.240079][ T5671] usb 3-1: incorrect wMaxPacketSize 0x40 for BADD profile
[   94.345505][ T5671] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   94.363334][ T5671] usb 3-1: USB disconnect, device number 9
[   94.398887][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.486413][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout
[   94.488924][   T54] Bluetooth: hci2: Opcode 0x1003 failed: -110
[   94.488935][ T4987] Bluetooth: hci2: command 0x1003 tx timeout
[   94.493004][ T6494] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   94.502949][ T5414] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.506847][ T5414] usb 2-1: New USB device found, idVendor=07ab, idProduct=1801, bcdDevice= d.58
[   94.511076][ T5414] usb 2-1: unable to read config index 0 descriptor/start: -71
[   94.513741][ T5414] usb 2-1: can't read configurations, error -71
[   94.833584][ T6543] x_tables: duplicate underflow at hook 3
[   94.926481][ T6547] loop2: detected capacity change from 0 to 128
[   95.332985][ T6555] loop3: detected capacity change from 0 to 32768
[   95.483491][ T6573] netlink: 60 bytes leftover after parsing attributes in process `syz.2.317'.
[   95.503084][ T6565] loop1: detected capacity change from 0 to 32768
[   95.538141][ T6565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.312 (6565)
[   95.572319][ T6580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'.
[   95.577494][ T6580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.319'.
[   95.579359][ T6565] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.588524][ T6565] BTRFS info (device loop1): using crc32c checksum algorithm
[   95.598998][ T6565] BTRFS error (device loop1): nologreplay must be used with ro mount option
[   95.607903][ T6565] BTRFS error (device loop1): cannot disable free-space-tree
[   95.614797][ T6565] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   95.629256][ T6565] BTRFS error (device loop1): open_ctree failed: -22
[   95.775282][ T6592] sg_write: data in/out 200/14 bytes for SCSI command 0x0-- guessing data in;
[   95.775282][ T6592]    program syz.3.325 not setting count and/or reply_len properly
[   95.781024][ T4987] Bluetooth: hci3: command tx timeout
[   95.786880][   T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   95.894846][ T6600] syz.1.329 uses obsolete (PF_INET,SOCK_PACKET)
[   95.937669][   T31] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54
[   95.949060][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.952790][   T31] usb 3-1: Product: syz
[   95.954363][   T31] usb 3-1: Manufacturer: syz
[   95.956219][   T31] usb 3-1: SerialNumber: syz
[   95.980975][   T31] usb 3-1: config 0 descriptor??
[   96.031653][ T6602] loop1: detected capacity change from 0 to 1024
[   96.040829][ T6602] EXT4-fs: Ignoring removed orlov option
[   96.067367][ T6602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.105833][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.193169][ T2343] usb 3-1: USB disconnect, device number 10
[   96.416162][   T31] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   96.569213][   T31] usb 2-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00
[   96.581044][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.585351][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   96.593413][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.597079][   T31] usb 2-1: Product: syz
[   96.598907][   T31] usb 2-1: Manufacturer: syz
[   96.601177][   T31] usb 2-1: SerialNumber: syz
[   96.780036][ T6611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.332'.
[   96.783865][ T6611] netlink: 'syz.2.332': attribute type 1 has an invalid length.
[   96.811652][   T31] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report
[   96.818838][   T31] ttusb-dec 2-1:1.0: probe with driver ttusb-dec failed with error -2
[   96.857834][ T6615] loop2: detected capacity change from 0 to 4096
[   96.893258][ T6615] ntfs3(loop2): failed to convert "0000" to iso8859-9
[   96.903996][ T6615] ntfs3(loop2): failed to convert name for inode 1e.
[   96.907746][ T6615] ntfs3(loop2): ino=1f, mi_enum_attr
[   97.011725][   T31] usb 2-1: USB disconnect, device number 9
[   97.117806][ T6617] loop2: detected capacity change from 0 to 32768
[   97.164524][ T6617] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.198833][ T6617] XFS (loop2): Ending clean mount
[   97.217450][ T6617] XFS (loop2): Quotacheck needed: Please wait.
[   97.259881][ T6617] XFS (loop2): Quotacheck: Done.
[   97.304900][ T5606] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   97.533780][ T6634] loop2: detected capacity change from 0 to 8
[   97.543949][ T6634] SQUASHFS error: zlib decompression failed, data probably corrupt
[   97.551218][ T6634] SQUASHFS error: Failed to read block 0x9b: -5
[   97.554756][ T6634] SQUASHFS error: Unable to read metadata cache entry [99]
[   97.558241][ T6634] SQUASHFS error: Unable to read inode 0x127
[   97.948330][   T34] audit: type=1326 audit(1787041548.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6662 comm="syz.2.351" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c5139e0d9 code=0x0
[   98.007501][ T6666] pim6reg: entered allmulticast mode
[   98.017397][ T6666] pim6reg: left allmulticast mode
[   98.196892][ T5735] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.358738][ T5735] usb 4-1: Using ep0 maxpacket: 8
[   98.362892][ T5735] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   98.367384][ T5735] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[   98.372162][ T5735] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   98.374767][ T5735] usb 4-1: Product: syz
[   98.376578][ T5735] usb 4-1: Manufacturer: syz
[   98.378205][ T5735] usb 4-1: SerialNumber: syz
[   98.436491][ T2343] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   98.594386][ T5735] usb 4-1: Invalid connection information received from device
[   98.602876][ T2343] usb 3-1: unable to get BOS descriptor or descriptor too short
[   98.610507][ T2343] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   98.619168][ T2343] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.624598][ T2343] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.633269][ T2343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.636371][ T2343] usb 3-1: Product: syz
[   98.637783][ T2343] usb 3-1: Manufacturer: syz
[   98.639464][ T2343] usb 3-1: SerialNumber: syz
[   98.664369][ T2343] usb 3-1: selecting invalid altsetting 1
[   98.672124][ T2343] usb 3-1: unit 6 not found!
[   98.800778][   T31] usb 4-1: USB disconnect, device number 2
[   99.264854][ T2343] usb 3-1: 2:0: failed to get current value for ch 0 (-32)
[   99.346192][   T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   99.392074][ T6680] kAFS: bad VL server IP address
[   99.435799][ T6683] jffs2: notice: (6683) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   99.496833][   T31] usb 2-1: Using ep0 maxpacket: 32
[   99.499932][   T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   99.509307][   T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   99.523437][   T31] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   99.532075][   T31] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   99.540811][   T31] usb 2-1: Product: syz
[   99.545225][   T31] usb 2-1: Manufacturer: syz
[   99.593903][   T31] hub 2-1:4.0: USB hub found
[   99.624393][ T2343] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   99.647683][ T2343] usb 3-1: USB disconnect, device number 11
[   99.727650][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.799876][   T31] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19)
[  100.108850][ T5414] usb 2-1: USB disconnect, device number 10
[  100.581633][ T6702] loop2: detected capacity change from 0 to 2048
[  100.667433][ T6702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.680454][ T6705] loop1: detected capacity change from 0 to 256
[  100.709605][   T34] audit: type=1800 audit(1787041551.180:11): pid=6702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.364" name="file1" dev="loop2" ino=15 res=0 errno=0
[  100.732304][ T6701] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  100.758166][ T6701] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  100.763317][ T6701] EXT4-fs (loop2): This should not happen!! Data will be lost
[  100.763317][ T6701] 
[  100.768453][ T6701] EXT4-fs (loop2): Total free blocks count 0
[  100.772897][ T6701] EXT4-fs (loop2): Free/Dirty block details
[  100.796943][ T6701] EXT4-fs (loop2): free_blocks=2415919504
[  100.799510][ T6701] EXT4-fs (loop2): dirty_blocks=16
[  100.801527][ T6701] EXT4-fs (loop2): Block reservation details
[  100.803954][ T6701] EXT4-fs (loop2): i_reserved_data_blocks=1
[  100.873255][ T6702] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28
[  100.947676][ T5606] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  101.340201][ T6716] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  101.390734][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[  101.395708][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[  101.406749][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.369'.
[  101.409724][ T6718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.369'.
[  101.417989][ T5712] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  101.424707][ T5712] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  101.429418][ T5712] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  101.434760][ T5712] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  101.560236][ T6728] loop3: detected capacity change from 0 to 128
[  101.604078][ T6728] loop3: detected capacity change from 0 to 2048
[  101.663847][ T6728] Alternate GPT is invalid, using primary GPT.
[  101.667600][ T6728]  loop3: p2 p3 p7
[  101.726579][   T31] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  101.755802][ T5616] udevd[5616]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  101.760734][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  101.771172][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  101.896791][   T31] usb 3-1: Using ep0 maxpacket: 16
[  101.900954][   T31] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  101.908923][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.913531][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.918947][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  101.924180][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.932315][   T31] usb 3-1: config 0 descriptor??
[  101.956245][ T2343] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  102.216228][ T2343] usb 4-1: Using ep0 maxpacket: 32
[  102.222237][ T2343] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  102.229782][ T2343] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  102.240517][ T2343] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  102.252220][ T2343] usb 4-1: Product: syz
[  102.260823][ T2343] usb 4-1: Manufacturer: syz
[  102.338033][ T2343] hub 4-1:4.0: bad descriptor, ignoring hub
[  102.342460][ T2343] hub 4-1:4.0: probe with driver hub failed with error -5
[  102.615921][   T31] input: HID 17ef:60fe as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:60FE.0003/input/input7
[  102.977529][   T31] lenovo 0003:17EF:60FE.0003: input,hidraw0: USB HID v0.00 Joystick [HID 17ef:60fe] on usb-dummy_hcd.2-1/input0
[  103.008904][   T31] usb 3-1: USB disconnect, device number 12
[  103.267580][ T2343] usb 4-1: reset high-speed USB device number 3 using dummy_hcd
[  103.787906][   T31] usb 4-1: USB disconnect, device number 3
[  104.499516][ T6781] ip_tables: iptables: counters copy to user failed while replacing table
[  104.915763][ T6802] loop2: detected capacity change from 0 to 512
[  104.935566][ T6802] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.393: casefold flag without casefold feature
[  104.940153][ T6802] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  104.943986][ T6802] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.393: couldn't read orphan inode 15 (err -117)
[  104.947418][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  104.947431][    C0] EXT4-fs (loop2): initial error at time 1787041555: ext4_orphan_get:1399: inode 15
[  104.947466][    C0] EXT4-fs (loop2): last error at time 1787041555: ext4_orphan_get:1399: inode 15
[  104.961848][ T6802] loop2: lost filesystem error report for type 5 error -117
[  104.963880][ T6802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  104.972316][ T6802] ext4 filesystem being mounted at /128/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  105.011629][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  105.199043][ T6816] loop1: detected capacity change from 0 to 256
[  105.203180][ T6816] exfat: Deprecated parameter 'utf8'
[  105.207789][   T34] audit: type=1326 audit(1787041555.680:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6814 comm="syz.2.398" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8c5139e0d9 code=0x0
[  105.225282][ T6816] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72bddf51, utbl_chksum : 0xe619d30d)
[  105.283467][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'.
[  105.369510][ T6823] loop1: detected capacity change from 0 to 64
[  105.390619][ T6823] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  105.560528][ T6833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.407'.
	   o   [  107.148783][ T6857] loop2: detected capacity change from 0 to 4096
[  107.188725][ T6857] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  107.194975][ T6857] EXT4-fs (loop2): Test dummy encryption mode enabled
[  107.211211][ T6857] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=680ec1a8, mo2=0003]
[  107.214796][ T6857] System zones: 0-5
[  107.227558][ T6857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  107.321101][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.482017][ T6861] futex_wake_op: syz.2.417 tries to shift op by 32; fix this program
[  107.591700][ T6863] loop2: detected capacity change from 0 to 16
[  107.600651][ T6863] erofs (device loop2): mounted with root inode @ nid 36.
[  107.621252][   T34] audit: type=1800 audit(1787041558.080:13): pid=6863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.418" name="file2" dev="loop2" ino=89 res=0 errno=0
[  107.994361][ T6886] loop3: detected capacity change from 0 to 1024
[  108.014396][ T6886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.068128][ T6334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.114938][ T6891] loop2: detected capacity change from 0 to 64
[  108.501460][ T6910] loop2: detected capacity change from 0 to 1024
[  108.542856][   T31] hid_parser_main: 4 callbacks suppressed
[  108.542877][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.548699][ T6910] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[  108.551702][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.551921][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.552015][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.565208][ T6910] hfsplus: failed to load root directory
[  108.583902][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.591846][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.599205][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.605524][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.612509][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.622709][   T31] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0
[  108.640522][   T31] hid-generic 0005:0010:10000.0004: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0
[  108.766364][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  108.938754][   T10] usb 2-1: Using ep0 maxpacket: 16
[  108.941887][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  108.948182][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  108.955792][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.960312][   T10] usb 2-1: Product: syz
[  108.961652][   T10] usb 2-1: Manufacturer: syz
[  108.967061][   T10] usb 2-1: SerialNumber: syz
[  108.982815][   T10] usb 2-1: config 0 descriptor??
[  109.112899][ T6932] loop3: detected capacity change from 0 to 32768
[  109.142721][ T6932] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.447 (6932)
[  109.165953][ T6932] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.169515][ T6932] BTRFS info (device loop3): using crc32c checksum algorithm
[  109.213535][   T10] usb 2-1: USB disconnect, device number 11
[  109.235053][ T6932] BTRFS info (device loop3): enabling ssd optimizations
[  109.237785][ T6932] BTRFS info (device loop3): turning on async discard
[  109.240017][ T6932] BTRFS info (device loop3): enabling free space tree
[  109.283040][ T6334] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.345803][ T6957] IPv6: addrconf: prefix option has invalid lifetime
[  109.661978][   T34] audit: type=1326 audit(1787041560.130:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6972 comm="syz.3.459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08ccb9e0d9 code=0x0
[  109.811079][ T6975] loop3: detected capacity change from 0 to 512
[  109.821606][ T6975] EXT4-fs (loop3): Test dummy encryption mode enabled
[  109.843580][ T6975] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  109.854804][ T6975] EXT4-fs (loop3): Errors on filesystem, clearing orphan list.
[  109.865246][ T6975] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  109.942469][ T6334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.123742][ T6987] loop3: detected capacity change from 0 to 2048
[  110.150163][ T6987] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  110.170546][ T6987] binder: 6986:6987 ioctl c0306201 200000000440 returned -14
[  110.434324][ T7002] loop2: detected capacity change from 0 to 32768
[  110.442556][ T7002] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  110.450940][ T7002] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  110.482823][ T7002] XFS (loop2): Ending clean mount
[  110.492985][ T7002] XFS (loop2): Quotacheck needed: Please wait.
[  110.519073][ T7002] XFS (loop2): Quotacheck: Done.
[  110.528534][   T34] audit: type=1800 audit(1787041561.000:15): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.472" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  111.167657][ T5606] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.204766][ T7015] usb usb1: usbfs: process 7015 (syz.1.475) did not claim interface 2 before use
[  111.482288][ T7034] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  111.827294][ T5475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.970568][ T5475] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.012388][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  112.024229][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  112.031923][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  112.035991][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  112.043773][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  112.048676][ T7051] loop1: detected capacity change from 0 to 1024
[  112.066010][ T7051] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c119, mo2=0002]
[  112.077842][ T7051] System zones: 0-1, 3-12
[  112.092299][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.144337][ T5475] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.173789][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  112.252581][ T5475] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.403960][ T5475] bridge_slave_1: left allmulticast mode
[  112.407164][ T5475] bridge_slave_1: left promiscuous mode
[  112.409808][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.415231][ T5475] bridge_slave_0: left allmulticast mode
[  112.418516][ T5475] bridge_slave_0: left promiscuous mode
[  112.425222][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.517546][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  112.608637][ T5475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.612923][ T5475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.618084][ T5475] bond0 (unregistering): Released all slaves
[  112.631384][ T5343] 8021q: adding VLAN 0 to HW filter on device eth5
[  112.666479][   T10] usb 2-1: Using ep0 maxpacket: 32
[  112.668865][   T10] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  112.672842][   T10] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.678057][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  112.680440][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.693465][   T10] usb 2-1: config 0 descriptor??
[  112.757161][ T5710] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  112.889995][ T5343] 8021q: adding VLAN 0 to HW filter on device eth6
[  112.946332][ T5710] usb 3-1: Using ep0 maxpacket: 32
[  112.949010][ T5710] usb 3-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  112.960426][ T5710] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  112.967328][ T5475] hsr_slave_0: left promiscuous mode
[  112.967840][ T5710] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.975008][ T5475] hsr_slave_1: left promiscuous mode
[  112.975003][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0
[  112.979055][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.981608][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.983811][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.991416][ T5475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.994047][ T5475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.995447][ T5710] usb 3-1: config 0 descriptor??
[  113.015089][ T5475] veth1_macvtap: left promiscuous mode
[  113.017252][ T5475] veth0_macvtap: left promiscuous mode
[  113.019175][ T5475] veth1_vlan: left promiscuous mode
[  113.020878][ T5475] veth0_vlan: left promiscuous mode
[  113.121615][   T10] dragonrise 0003:0079:0011.0005: item fetching failed at offset 39/40
[  113.129166][   T10] dragonrise 0003:0079:0011.0005: parse failed
[  113.132044][   T10] dragonrise 0003:0079:0011.0005: probe with driver dragonrise failed with error -22
[  113.190227][ T5475] team0 (unregistering): Port device team_slave_1 removed
[  113.210503][ T5475] team0 (unregistering): Port device team_slave_0 removed
[  113.288363][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.290775][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.293151][ T7048] bridge_slave_0: entered allmulticast mode
[  113.295849][ T7048] bridge_slave_0: entered promiscuous mode
[  113.299427][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.301794][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.304384][ T7048] bridge_slave_1: entered allmulticast mode
[  113.307437][ T7048] bridge_slave_1: entered promiscuous mode
[  113.322388][   T10] usb 2-1: USB disconnect, device number 12
[  113.361893][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  113.375032][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  113.418125][ T7048] team0: Port device team_slave_0 added
[  113.422085][ T7048] team0: Port device team_slave_1 added
[  113.452027][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0
[  113.454781][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.465625][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  113.489656][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1
[  113.492987][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  113.503163][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.549774][ T7048] hsr_slave_0: entered promiscuous mode
[  113.552144][ T7048] hsr_slave_1: entered promiscuous mode
[  113.554374][ T7048] debugfs: 'hsr0' already exists in 'hsr'
[  113.556730][ T7048] Cannot create hsr debugfs directory
[  113.587968][ T5343] 8021q: adding VLAN 0 to HW filter on device eth7
[  113.919727][ T7099] loop1: detected capacity change from 0 to 1024
[  114.013077][ T5710] hid-alps 0003:044E:120B.0006: failed to read command (-71)
[  114.024582][ T5710] hid-alps 0003:044E:120B.0006: failed to change TP mode (-71)
[  114.039079][ T5710] hid-alps 0003:044E:120B.0006: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.2-1/input0
[  114.059267][ T5710] usb 3-1: USB disconnect, device number 13
[  114.098492][ T4987] Bluetooth: hci2: command tx timeout
[  114.202001][ T7106] loop1: detected capacity change from 0 to 2048
[  114.240116][ T7106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.285601][ T7048] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  114.295473][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  114.301945][ T7048] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  114.308053][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  114.311017][ T7048] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  114.315185][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  114.318354][ T7048] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  114.322154][ T7048] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  114.400157][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.417910][ T7048] 8021q: adding VLAN 0 to HW filter on device team0
[  114.425502][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.428245][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.442245][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.445173][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.484645][ T7048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.668364][ T7143] loop1: detected capacity change from 0 to 512
[  114.754430][ T7143] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  114.768178][ T7143] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  114.817540][ T7143] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  114.820722][ T7143] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  114.823294][ T7143] System zones: 0-2, 18-18, 34-35
[  114.830698][ T7143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.886860][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0
[  114.925478][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.974210][ T7162] loop2: detected capacity change from 0 to 1024
[  114.993894][ T7162] EXT4-fs: Ignoring removed mblk_io_submit option
[  115.003689][ T7048] veth0_vlan: entered promiscuous mode
[  115.009757][ T7162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.033284][ T7162] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  115.045713][ T7048] veth1_vlan: entered promiscuous mode
[  115.048447][ T7162] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #11: comm syz.2.497: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  115.056375][ T7162] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  115.056639][ T7162] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.497: couldn't read orphan inode 11 (err -117)
[  115.065044][ T7162] loop2: lost filesystem error report for type 5 error -117
[  115.065956][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.106913][ T7162] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.497: Invalid block bitmap block 0 in block_group 0
[  115.112823][ T7048] veth0_macvtap: entered promiscuous mode
[  115.115807][ T7162] Quota error (device loop2): write_blk: dquota write failed
[  115.120555][ T7162] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  115.123827][ T7048] veth1_macvtap: entered promiscuous mode
[  115.128380][ T7162] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.497: Failed to acquire dquot type 0
[  115.142534][ T7162] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.497: Invalid inode bitmap blk 137438953472 in block_group 0
[  115.210386][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.222859][ T1103] EXT4-fs error (device loop2): __ext4_get_inode_loc:4886: comm kworker/u9:6: Invalid inode table block 8589934593 in block_group 0
[  115.238689][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.239816][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.336289][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  115.340288][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.343183][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.346010][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.429912][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.437891][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.487190][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  115.490473][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  115.553786][ T7178] No source specified
[  116.114202][ T7192] loop3: detected capacity change from 0 to 32768
[  116.131619][ T7192] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  116.166404][ T4987] Bluetooth: hci2: command tx timeout
[  116.314455][ T7192] XFS (loop3): Ending clean mount
[  116.361357][ T7048] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  116.775517][ T7184] Process accounting resumed
[  116.873336][ T7215] loop1: detected capacity change from 0 to 164
[  117.263154][ T7223] Bluetooth: MGMT ver 1.23
[  117.672072][ T7247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'.
[  117.852353][ T7252] loop1: detected capacity change from 0 to 128
[  117.884904][ T7252] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006)
[  118.231139][ T7259] loop2: detected capacity change from 0 to 4096
[  118.239135][ T7259] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  118.256224][ T4987] Bluetooth: hci2: command tx timeout
[  118.308797][ T7259] ntfs3(loop2): ino=19, mi_enum_attr
[  118.313601][ T7259] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  118.332908][ T7259] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  118.515373][ T7273] loop1: detected capacity change from 0 to 4096
[  118.557852][ T7273] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  118.571938][ T7271] ntfs3(loop1): ino=1e, "file1" attr_set_size_ex
[  118.650922][ T7277] unsupported nla_type 2061
[  119.055596][ T7297] loop1: detected capacity change from 0 to 32768
[  119.075708][ T7302] loop2: detected capacity change from 0 to 256
[  119.087756][ T7302] exfat: Deprecated parameter 'utf8'
[  119.099868][ T7297] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  119.107484][ T7302] exfat: Deprecated parameter 'utf8'
[  119.115030][ T7302] exfat: Deprecated parameter 'utf8'
[  119.120452][ T7302] exfat: Deprecated parameter 'namecase'
[  119.135671][ T7302] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  119.149460][ T7297] syz.1.550 (7297) used greatest stack depth: 19688 bytes left
[  119.249768][ T7310] Bluetooth: MGMT ver 1.23
[  119.267378][ T5603] ocfs2: Unmounting device (7,1) on (node local)
[  119.395375][ T7317] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  119.542126][ T7328] loop3: detected capacity change from 0 to 512
[  119.563239][ T7328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.568662][ T7328] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  119.619542][ T7048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.325294][ T7347] loop2: detected capacity change from 0 to 32768
[  120.336250][ T4987] Bluetooth: hci2: command tx timeout
[  120.359514][ T7347] ERROR: (device loop2): diAllocAG: nfreeinos = 0, but iag on freelist
[  120.359514][ T7347] 
[  120.383663][ T7347] ERROR: (device loop2): remounting filesystem as read-only
[  120.387822][ T7347] ialloc: diAlloc returned -5!
[  120.652517][ T7359] loop1: detected capacity change from 0 to 256
[  120.663692][ T7358] loop2: detected capacity change from 0 to 64
[  120.668059][ T7359] exfat: Deprecated parameter 'utf8'
[  120.677619][ T7359] exfat: Deprecated parameter 'namecase'
[  120.682595][ T7358] minix-fs error: zone size must equal block size. s_log_zone_size > 0 is not supported.
[  120.693135][ T7359] exfat: Deprecated parameter 'namecase'
[  120.700518][ T7358] MINIX-fs: bad superblock
[  120.705055][ T7359] exfat: Deprecated parameter 'utf8'
[  120.735981][ T7359] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  120.769413][ T7359] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  120.921178][ T7359] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[  121.292430][ T7369] loop3: detected capacity change from 0 to 2048
[  121.365086][ T7370] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  121.400023][ T7369] syz.3.580: attempt to access beyond end of device
[  121.400023][ T7369] loop3: rw=8388608, sector=18441677524128759844, nr_sectors = 2 limit=2048
[  121.591000][ T7374] loop3: detected capacity change from 0 to 512
[  121.620714][ T7374] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.624881][ T7380] loop2: detected capacity change from 0 to 512
[  121.625597][ T7374] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.632313][ T7380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  121.635719][ T7380] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  121.675678][ T7380] Quota error (device loop2): do_insert_tree: Free block already used in tree: block 1
[  121.693200][ T7380] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota
[  121.703910][ T7380] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.584: Failed to acquire dquot type 1
[  121.715547][ T7380] loop2: lost filesystem error report for type 5 error -5
[  121.715932][ T7380] EXT4-fs (loop2): Remounting filesystem read-only
[  121.718979][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  121.718995][    C1] EXT4-fs (loop2): initial error at time 1787041572: ext4_acquire_dquot:7041
[  121.719012][    C1] EXT4-fs (loop2): last error at time 1787041572: ext4_acquire_dquot:7041
[  121.732892][ T7380] EXT4-fs (loop2): 1 truncate cleaned up
[  121.738399][ T7380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.751727][ T7048] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.769073][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.020114][ T7401] loop3: detected capacity change from 0 to 2048
[  122.036639][ T7401] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.106205][   T34] audit: type=1326 audit(1787041572.570:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.3.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde39e0d9 code=0x7ffc0000
[  122.122353][   T34] audit: type=1326 audit(1787041572.570:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.3.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde39e0d9 code=0x7ffc0000
[  122.142603][   T34] audit: type=1326 audit(1787041572.570:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.3.595" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7f2dde39e0d9 code=0x7ffc0000
[  122.159989][   T34] audit: type=1326 audit(1787041572.580:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.3.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde39e0d9 code=0x7ffc0000
[  122.172776][   T34] audit: type=1326 audit(1787041572.580:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7404 comm="syz.3.595" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dde39e0d9 code=0x7ffc0000
[  122.183282][ T7407] mmap: syz.3.596 (7407) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  122.756390][ T7426] btrfs: Deprecated parameter 'usebackuproot'
[  122.758580][ T7426] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  122.763611][ T7426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.606 (7426)
[  122.774908][ T7426] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.778368][ T7426] BTRFS info (device loop1): using crc32c checksum algorithm
[  122.871546][ T6848] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  122.887878][ T7426] BTRFS error (device loop1): failed to load root extent
[  122.890334][ T7426] BTRFS warning (device loop1): try to load backup roots slot 1
[  122.893581][ T6530] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x6ba50376 level 0
[  122.898408][ T7426] BTRFS warning (device loop1): couldn't read tree root
[  122.901181][ T7426] BTRFS warning (device loop1): try to load backup roots slot 2
[  122.904481][ T6848] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  122.908853][ T7426] BTRFS warning (device loop1): couldn't read tree root
[  122.911678][ T7426] BTRFS warning (device loop1): try to load backup roots slot 3
[  122.921790][ T7426] BTRFS info (device loop1): rebuilding free space tree
[  122.945654][ T7426] BTRFS info (device loop1): disabling free space tree
[  122.946803][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.597'.
[  122.948144][ T7426] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  122.955573][ T7426] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  122.967376][ T7426] BTRFS info (device loop1): checking UUID tree
[  122.970766][ T7426] BTRFS info (device loop1): enabling ssd optimizations
[  122.973563][ T7426] BTRFS info (device loop1): turning on async discard
[  122.976631][ T7426] BTRFS info (device loop1): force clearing of disk cache
[  122.979457][ T7426] BTRFS info (device loop1): enabling auto defrag
[  122.982000][ T7426] BTRFS info (device loop1): trying to use backup root at mount time
[  122.985294][ T7426] BTRFS info (device loop1): use lzo compression, level 1
[  122.987271][  T803] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  123.130728][ T5603] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.162001][  T803] usb 4-1: unable to get BOS descriptor or descriptor too short
[  123.165768][  T803] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  123.184328][  T803] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  123.190804][  T803] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  123.211076][  T803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.229253][  T803] usb 4-1: Product: syz
[  123.233829][  T803] usb 4-1: Manufacturer: syz
[  123.240513][  T803] usb 4-1: SerialNumber: syz
[  123.293357][  T803] usb 4-1: selecting invalid altsetting 1
[  123.306014][  T803] usb 4-1: unit 6 not found!
[  123.419916][ T5660] IPVS: starting estimator thread 0...
[  123.517481][ T7460] IPVS: using max 82 ests per chain, 196800 per kthread
[  123.700550][  T803] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[  123.947689][  T803] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  123.955076][  T803] usb 4-1: USB disconnect, device number 4
[  123.981576][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.301474][ T7492] netlink: 220 bytes leftover after parsing attributes in process `syz.3.623'.
[  124.518307][ T7496] set_capacity_and_notify: 2 callbacks suppressed
[  124.518319][ T7496] loop1: detected capacity change from 0 to 512
[  124.523977][ T7496] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  124.528585][ T7496] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002]
[  124.531386][ T7496] EXT4-fs (loop1): orphan cleanup on readonly fs
[  124.539430][ T7496] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.625: Allocating blocks 41-42 which overlap fs metadata
[  124.545537][ T7496] loop1: lost filesystem error report for type 5 error -117
[  124.546370][    C1] EXT4-fs (loop1): initial error at time 1787041575: ext4_mb_mark_diskspace_used:4222
[  124.553143][    C1] EXT4-fs (loop1): last error at time 1787041575: ext4_mb_mark_diskspace_used:4222
[  124.565831][ T7496] EXT4-fs (loop1): Remounting filesystem read-only
[  124.569402][ T7496] Quota error (device loop1): write_blk: dquota write failed
[  124.573917][ T7496] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  124.577605][ T7496] EXT4-fs (loop1): 1 truncate cleaned up
[  124.582179][ T7496] EXT4-fs (loop1): pa ffff888167b430e8: logic 1, phys. 41, len 23
[  124.586421][ T7496] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.604911][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.648848][ T5660] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  124.704759][ T7501] netlink: 104 bytes leftover after parsing attributes in process `syz.1.627'.
[  124.816945][ T5660] usb 4-1: Using ep0 maxpacket: 16
[  124.831848][ T5660] usb 4-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=4b.f8
[  124.847125][ T5660] usb 4-1: config 4 has an invalid interface number: 104 but max is 0
[  124.850739][ T5660] usb 4-1: config 4 has no interface number 0
[  124.853585][ T5660] usb 4-1: config 4 interface 104 altsetting 0 endpoint 0x1 has an invalid bInterval 190, changing to 11
[  124.861365][ T5660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.866165][ T5660] usb 4-1: Product: syz
[  124.868087][ T5660] usb 4-1: Manufacturer: syz
[  124.870165][ T5660] usb 4-1: SerialNumber: syz
[  125.009497][ T7511] netlink: 1 bytes leftover after parsing attributes in process `syz.1.631'.
[  125.114138][ T7513] netlink: 60 bytes leftover after parsing attributes in process `syz.2.630'.
[  125.340444][ T5660] rtsx_usb 4-1:4.104: probe with driver rtsx_usb failed with error -71
[  125.357985][ T5660] usb 4-1: USB disconnect, device number 5
[  125.377877][ T7517] usb usb8: usbfs: process 7517 (syz.1.633) did not claim interface 0 before use
[  126.361559][ T7529] loop1: detected capacity change from 0 to 512
[  126.365138][ T7529] EXT4-fs: Ignoring removed bh option
[  126.387514][ T7529] EXT4-fs: Ignoring removed mblk_io_submit option
[  126.391622][ T7529] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  126.401239][ T7529] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  126.404564][ T7529] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.638: inode #0: comm syz.1.638: iget: illegal inode #
[  126.410875][ T7529] loop1: lost filesystem error report for type 5 error -117
[  126.411306][ T7529] EXT4-fs (loop1): Remounting filesystem read-only
[  126.417096][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  126.417119][    C0] EXT4-fs (loop1): last error at time 1787041576: ext4_init_orphan_info:583
[  126.425281][ T7529] EXT4-fs (loop1): get orphan inode failed
[  126.429146][ T7529] EXT4-fs (loop1): mount failed
[  126.564784][ T7534] warning: `syz.1.640' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  126.626027][ T7536] loop1: detected capacity change from 0 to 2048
[  126.639730][ T7536] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  126.655140][ T7536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  126.669712][   T34] audit: type=1800 audit(1787041577.140:21): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.641" name="file1" dev="loop1" ino=1367 res=0 errno=0
[  127.025591][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.651'.
[  127.080617][ T7560] netlink: 'syz.1.653': attribute type 31 has an invalid length.
[  127.173458][ T7567] program syz.1.656 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  127.227453][ T7572] loop1: detected capacity change from 0 to 1024
[  127.565912][ T7571] loop3: detected capacity change from 0 to 32768
[  127.728191][ T5735] IPVS: starting estimator thread 0...
[  127.816753][ T7578] IPVS: using max 54 ests per chain, 129600 per kthread
[  128.120596][ T7587] input: syz1 as /devices/virtual/input/input12
[  128.267989][ T7593] Process accounting resumed
[  128.847446][ T7620] loop2: detected capacity change from 0 to 4096
[  128.852869][ T7620] EXT4-fs (loop2): Test dummy encryption mode enabled
[  128.863621][ T7620] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003]
[  128.866905][ T7620] System zones: 0-5
[  128.871327][ T7620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.880406][ T7620] EXT4-fs (loop2): shut down requested (0)
[  128.924827][ T5606] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.076456][ T5660] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  129.153317][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'.
[  129.227433][ T5660] usb 2-1: Using ep0 maxpacket: 32
[  129.232230][ T5660] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  129.239641][ T5660] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  129.254459][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.262548][ T5660] usb 2-1: Product: syz
[  129.267691][ T5660] usb 2-1: Manufacturer: syz
[  129.273022][ T5660] usb 2-1: SerialNumber: syz
[  129.356778][ T7648] loop2: detected capacity change from 0 to 2048
[  129.365170][ T7648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.060036][  T803] kernel read not supported for file /video7 (pid: 803 comm: kworker/0:2)
[  130.108262][ T5660] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  130.141915][ T5660] usb 2-1: USB disconnect, device number 13
[  130.922442][ T7687] loop1: detected capacity change from 0 to 4096
[  130.929945][ T7687] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  130.957512][ T7687] ntfs3(loop1): $Secure::$SII is corrupted.
[  130.960249][ T7687] ntfs3(loop1): Failed to initialize $Secure (-22).
[  131.097199][ T7689] Bluetooth: hci0: unsupported parameter 39401
[  131.099351][ T7689] Bluetooth: hci0: unsupported parameter 512
[  131.101565][ T7689] Bluetooth: hci0: unsupported parameter 39401
[  131.104060][ T7689] Bluetooth: hci0: unsupported parameter 512
[  131.164768][ T7695] loop1: detected capacity change from 0 to 512
[  131.171912][ T7695] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  131.185219][ T7695] EXT4-fs (loop1): 1 truncate cleaned up
[  131.189383][ T7695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.243738][ T5603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.352662][ T7708] loop2: detected capacity change from 0 to 256
[  131.555010][ T7724] loop2: detected capacity change from 0 to 1024
[  131.567562][ T7724] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  131.677801][ T7722] loop1: detected capacity change from 0 to 32768
[  131.712058][ T7722] read_mapping_page failed!
[  131.714584][ T7732] program syz.2.730 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.723974][ T7722] ialloc: diAlloc returned -5!
[  131.881998][ T7730] loop3: detected capacity change from 0 to 32768
[  131.930742][ T7730] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  131.930742][ T7730] 
[  131.940081][ T7730] ERROR: (device loop3): remounting filesystem as read-only
[  131.942799][ T7730] syz.3.729: attempt to access beyond end of device
[  131.942799][ T7730] loop3: rw=2049, sector=4680032, nr_sectors = 8 limit=32768
[  131.977043][ T7048] ------------[ cut here ]------------
[  131.981258][ T7048] kernel BUG at fs/jfs/inode.c:175!
[  131.985436][ T7048] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  131.988512][ T7048] CPU: 1 UID: 0 PID: 7048 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  131.992921][ T7048] Tainted: [L]=SOFTLOCKUP
[  131.994432][ T7048] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  131.997666][ T7048] RIP: 0010:jfs_evict_inode+0x42b/0x430
[  131.999447][ T7048] Code: fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f0 4e d2 fe e9 16 fe ff ff e8 56 a5 64 fe 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
[  132.005387][ T7048] RSP: 0018:ffffc90003bdfaa8 EFLAGS: 00010293
[  132.007421][ T7048] RAX: ffffffff83625c5a RBX: ffff88811e428418 RCX: ffff88810c121dc0
[  132.010227][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811e428418
[  132.012724][ T7048] RBP: 0000000000000008 R08: ffffffff90574c37 R09: 1ffffffff20ae986
[  132.015224][ T7048] R10: dffffc0000000000 R11: ffffffff836238c0 R12: ffff88811e428418
[  132.017676][ T7048] R13: dffffc0000000000 R14: ffff88811e4280b8 R15: 0000000000000001
[  132.020481][ T7048] FS:  0000555585795500(0000) GS:ffff8882a8f52000(0000) knlGS:0000000000000000
[  132.023640][ T7048] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.025846][ T7048] CR2: 0000001b33223ffc CR3: 0000000023af4000 CR4: 00000000000006f0
[  132.028332][ T7048] Call Trace:
[  132.029411][ T7048]  <TASK>
[  132.030447][ T7048]  ? __pfx_jfs_evict_inode+0x10/0x10
[  132.032065][ T7048]  evict+0x624/0xb50
[  132.033305][ T7048]  ? __pfx_evict+0x10/0x10
[  132.034683][ T7048]  evict_inodes+0x7e3/0x870
[  132.036095][ T7048]  ? __pfx_cgroup_writeback_umount+0x10/0x10
[  132.037913][ T7048]  ? __pfx_evict_inodes+0x10/0x10
[  132.039479][ T7048]  ? sync_filesystem+0x10b/0x230
[  132.041018][ T7048]  generic_shutdown_super+0xaa/0x2d0
[  132.042696][ T7048]  kill_block_super+0x44/0x90
[  132.044173][ T7048]  deactivate_locked_super+0xbc/0x130
[  132.045820][ T7048]  cleanup_mnt+0x3d3/0x460
[  132.047176][ T7048]  task_work_run+0x1d9/0x270
[  132.048625][ T7048]  ? __pfx_task_work_run+0x10/0x10
[  132.050197][ T7048]  exit_to_user_mode_loop+0x1fa/0x750
[  132.051845][ T7048]  ? rcu_is_watching+0x15/0xb0
[  132.053384][ T7048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.055288][ T7048]  do_syscall_64+0x353/0x580
[  132.056733][ T7048]  ? trace_irq_disable+0x3b/0x140
[  132.058311][ T7048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.060176][ T7048] RIP: 0033:0x7f2dde39f317
[  132.061570][ T7048] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  132.067406][ T7048] RSP: 002b:00007fffce4ec568 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.069910][ T7048] RAX: 0000000000000000 RBX: 00007f2dde434474 RCX: 00007f2dde39f317
[  132.072301][ T7048] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffce4ec620
[  132.074734][ T7048] RBP: 00007fffce4ec620 R08: 00007fffce4ed620 R09: 00000000ffffffff
[  132.077087][ T7048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffce4ed6b0
[  132.079473][ T7048] R13: 00007f2dde434474 R14: 0000000000020305 R15: 00007fffce4ed6f0
[  132.081945][ T7048]  </TASK>
[  132.082939][ T7048] Modules linked in:
[  132.084569][ T7048] ---[ end trace 0000000000000000 ]---
[  132.094836][ T7048] RIP: 0010:jfs_evict_inode+0x42b/0x430
[  132.097367][ T7048] Code: fe e9 e8 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 f0 4e d2 fe e9 16 fe ff ff e8 56 a5 64 fe 90 <0f> 0b 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3
[  132.103369][ T7048] RSP: 0018:ffffc90003bdfaa8 EFLAGS: 00010293
[  132.105344][ T7048] RAX: ffffffff83625c5a RBX: ffff88811e428418 RCX: ffff88810c121dc0
[  132.108321][ T7048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88811e428418
[  132.111024][ T7048] RBP: 0000000000000008 R08: ffffffff90574c37 R09: 1ffffffff20ae986
[  132.113613][ T7048] R10: dffffc0000000000 R11: ffffffff836238c0 R12: ffff88811e428418
[  132.116310][ T7048] R13: dffffc0000000000 R14: ffff88811e4280b8 R15: 0000000000000001
[  132.118992][ T7048] FS:  0000555585795500(0000) GS:ffff8882a8f52000(0000) knlGS:0000000000000000
[  132.121823][ T7048] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.123943][ T7048] CR2: 00007f8c515ed158 CR3: 0000000023af4000 CR4: 00000000000006f0
[  132.127203][ T7048] Kernel panic - not syncing: Fatal exception
[  132.129832][ T7048] Kernel Offset: disabled
[  132.131237][ T7048] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:26:22  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000003818 RBX=0000000000000024 RCX=ffff88810be15940 RDX=ffff88810bddeb18
RSI=0000000000000000 RDI=0000000000000000 RBP=00000000000000fc RSP=ffffc9000482ec18
R8 =ffffffff90574c37 R9 =1ffffffff20ae986 R10=dffffc0000000000 R11=fffffbfff20ae987
R12=dffffc0000000000 R13=00000000ffffffff R14=ffffc90007a00000 R15=ffff88810bddeb2a
RIP=ffffffff86c6ad34 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fdfda2c8800 ffffffff 00c00000
GS =0000 ffff88818d952000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005636f5d81000 CR3=00000001babaa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000005b RBX=000000000000005b RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003bdf350
R8 =ffff888169320237 R9 =1ffff1102d264046 R10=dffffc0000000000 R11=ffffffff856673b0
R12=dffffc0000000000 R13=ffffffff9aad9460 R14=ffffffff9aad94a0 R15=0000000000000000
RIP=ffffffff8566742c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555585795500 ffffffff 00c00000
GS =0000 ffff8882a8f52000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b33223ffc CR3=0000000023af4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
