last executing test programs:

2m11.097561897s ago: executing program 0 (id=1):
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x1000)
ioctl$SIOCGETMIFCNT_IN6(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

2m10.706944991s ago: executing program 0 (id=4):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)

2m8.640620075s ago: executing program 0 (id=18):
syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[], 0x5, 0x1d3, &(0x7f0000000d80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4c)
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61)
mkdir(&(0x7f0000000080)='./bus\x00', 0x4)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')

2m8.615096544s ago: executing program 32 (id=18):
syz_mount_image$minix(&(0x7f0000000440), &(0x7f0000000280)='./control\x00', 0x4, &(0x7f00000004c0)=ANY=[], 0x5, 0x1d3, &(0x7f0000000d80)="$eJzs291u0mAcx/FfW2i3+f524pGJB3oiVUaiO3MX4A14tmx1WezUOE9GTJQT78PL8Mw78QYg0SuoaSmBAi2lDS2M7yfZ+vCkvz4PhH952oAAbK3b0X9DhppRKwiCb48kvX0jqZEZtSuZIICVCYxh0aex53fvZKcAbAbr7/x+J7XAf40aJmcBYJMNDq1oHfDbkP78+3rcj/+aOdcPg0NTsuIHE3lb2smV7xnR9mFD6k/kHSUPYHxPWb/8HOafKJnfzTv/ePy9qfzeomB4yRTqmdHm6eNk/pqk65JuSLop6VZ8rXVH0t05459Mjf8g5/yBMsJ3XyvRk6tsk/lWxg5Odj6snndnvvd8qVHHmnH+RcG8HefbJfP7BfNOnG8df/RPUvd6XfDoQDZzpv6Xs7D+U41vH87Wf/5bi42S9Q9ss4vL7vsj3/c+L98wC6VobEtjtJAMe8LT9OLUjyomZq3H67O7HtNIb9R8YgKwcu6X80/uxWX32dn50al36n1odw5edfbbnZcHbrQud8tcnQNYZ+MP/Xz7Z38lCAAAAAAAAAAAAAAA1OGepPt1TwIAAABAJar4OVHdzxEAAAAAAAAAAAAAAAAAAAC4Kv4HAAD///noO60=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x4c)
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8000c61)
mkdir(&(0x7f0000000080)='./bus\x00', 0x4)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')

1m51.258214235s ago: executing program 2 (id=218):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f0000000d40)="09000000e70014000000d97bfbf788a83baa88a8000080350000810000009900", 0x20, 0x200000c4, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0x81, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x14)

1m51.178336502s ago: executing program 2 (id=219):
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0)

1m51.178155556s ago: executing program 2 (id=220):
unshare(0x6020400)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000001c0)=r0)

1m51.088477815s ago: executing program 2 (id=221):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x1400c, &(0x7f0000000300)={[{@test_dummy_encryption}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x2}}]}, 0x3, 0x470, &(0x7f0000000880)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1)
fstatfs(r0, 0x0)

1m50.978929185s ago: executing program 2 (id=222):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffe, 0xc, 0x4}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0)

1m50.758707405s ago: executing program 2 (id=223):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1)

1m50.672529272s ago: executing program 33 (id=223):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x20000)
readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/1, 0x1}], 0x1)

1m28.212397592s ago: executing program 1 (id=442):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f00000001c0)=ANY=[], 0x0, 0x274, &(0x7f0000000600)="$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")

1m28.080686942s ago: executing program 1 (id=443):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0001600fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

1m28.080548568s ago: executing program 1 (id=444):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x20, 0x17, 0x6, "655a5aab8e00"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)

1m26.075966809s ago: executing program 1 (id=453):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x3, 0x19, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9]})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f0000000940)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0xe7b, 0x0, 0x0)

1m25.943773872s ago: executing program 1 (id=457):
r0 = socket(0x2b, 0x80801, 0x1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x260, 0x228, 0x25a, 0x260, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffffffff], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x154, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x9, 0x3, 0xa621, 'syz0\x00', 'syz1\x00', {0x100}}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {0xff}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x7}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x384)

1m25.695551358s ago: executing program 1 (id=463):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x2004c080, 0x0, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e64, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00')
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x6, 0xfffffffd)

1m25.568795081s ago: executing program 34 (id=463):
r0 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r0, 0x0, 0x0, 0x2004c080, 0x0, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e64, 0x81, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400005}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00')
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x6, 0xfffffffd)

651.792401ms ago: executing program 5 (id=1561):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @empty}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b)

651.708855ms ago: executing program 5 (id=1562):
syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="0401"], 0xa)

589.261745ms ago: executing program 5 (id=1564):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd2b, 0x25df9bfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0xc0)

589.052491ms ago: executing program 3 (id=1565):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000100)='./file0\x00', 0xa00c00, &(0x7f0000000840), 0xc, 0x968e, &(0x7f000001c300)="$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")
r0 = open(&(0x7f0000000480)='.\x00', 0x20000, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="000000004c9002000100000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000f5ffffffffffffff0000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000ffffffff08000000feffffffffffffff060000000000"])

588.902328ms ago: executing program 5 (id=1566):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f00000002c0)={[{}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x26, 0x771, &(0x7f00000014c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0xff80)

507.491304ms ago: executing program 5 (id=1568):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4605fc0040ff7f00000000000002003e00edfffbff94020000007e0000004000000000000000dd010000000000000f00000000003800010000000200cd0fdfaaf5cdbd6f000004000000000000000d1dc18aa439a843a223ed69f900000000000000000000e60000000000000004100000000000000100000000000000000000000080c50b1c05d8f6bb547943e921ffb151bd7d466a7816836eddaa7d4520a8174f89dc7a595555c072fbfb14c2f3983942e969540343c4edfd7101ecf55c809838c17f2d9cfe7732363c02bdd2220fd03a9b273aeca808a6e424ec083dd550cd853a966197946922a01a2fb5b1d1e89d6a7748d3fa2ea644cee4b45b7cb685511b0c7f9fc38fab3c37354ee22a023a9f0711f2b89bc345641e93b60ee2"], 0x78)
close(r1)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

458.359437ms ago: executing program 4 (id=1569):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf2517000000440006803c00"], 0x58}}, 0x4004)

458.245748ms ago: executing program 5 (id=1570):
r0 = semget$private(0x0, 0x6, 0x513)
semop(r0, &(0x7f0000000180)=[{0x3, 0xffff, 0x1000}, {0x4, 0x4, 0x800}], 0x2)
semctl$GETNCNT(r0, 0x3, 0xe, 0x0)

458.173361ms ago: executing program 4 (id=1571):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, &(0x7f00000000c0))

379.97198ms ago: executing program 4 (id=1572):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x80)

379.771147ms ago: executing program 4 (id=1573):
pipe(&(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x8001, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x41, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x0, 0x41}], 0x20000000000000dc, 0x0, 0x0, 0x0)

299.820389ms ago: executing program 4 (id=1574):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)

299.644362ms ago: executing program 3 (id=1575):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0)

178.211404ms ago: executing program 3 (id=1576):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)="3bae14041d90fe41e6207cf4ffa5480ace", 0x11}], 0x1}], 0x1, 0x2004001)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}])

109.808954ms ago: executing program 4 (id=1577):
r0 = syz_io_uring_setup(0x2152, &(0x7f00000019c0)={0x0, 0xcfca, 0x1040, 0xfffffffd, 0x8000153}, &(0x7f0000000100), &(0x7f0000000040), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0xf14, 0x1], 0x2)

49.876187ms ago: executing program 3 (id=1578):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6690000)

127.216µs ago: executing program 3 (id=1579):
r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0xffffffffffffffe6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000240)={0x5, 0x33565348, 0x1, @stepwise={0x1, 0x724, 0x2, 0x1, 0x7ff, 0x101}})

0s ago: executing program 3 (id=1580):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000300)={0x4, "650000006e0000000100"})

kernel console output (not intermixed with test programs):

][ T5820] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  111.258164][ T5820] Bluetooth: hci0: Injecting HCI hardware error event
[  111.265753][ T5816] Bluetooth: hci0: hardware error 0x00
[  111.285652][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.290064][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.308653][ T5876] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  111.313152][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.319411][ T5876] usb 4-1: config 0 descriptor??
[  111.342704][ T7313] chnl_net:caif_netlink_parms(): no params data found
[  111.378769][ T5863] hid_parser_main: 4176 callbacks suppressed
[  111.378781][ T5863] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  111.383692][ T5863] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  111.386228][ T5863] savu 0003:1E7D:2D5A.0007: unknown main item tag 0x0
[  111.388817][ T5863] savu 0003:1E7D:2D5A.0007: item fetching failed at offset 6/8
[  111.394004][ T5863] savu 0003:1E7D:2D5A.0007: parse failed
[  111.396382][ T5863] savu 0003:1E7D:2D5A.0007: probe with driver savu failed with error -22
[  111.490628][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.499852][ T7313] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.503056][ T7313] bridge_slave_0: entered allmulticast mode
[  111.507626][ T7313] bridge_slave_0: entered promiscuous mode
[  111.513006][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.516390][ T7313] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.519284][ T7313] bridge_slave_1: entered allmulticast mode
[  111.523441][ T7313] bridge_slave_1: entered promiscuous mode
[  111.547893][   T13] hsr_slave_0: left promiscuous mode
[  111.550638][   T13] hsr_slave_1: left promiscuous mode
[  111.555227][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.561937][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.568074][ T5862] usb 5-1: USB disconnect, device number 4
[  111.574003][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.585791][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.599241][   T13] veth1_macvtap: left promiscuous mode
[  111.601762][   T13] veth0_macvtap: left promiscuous mode
[  111.604572][   T13] veth1_vlan: left promiscuous mode
[  111.607390][   T13] veth0_vlan: left promiscuous mode
[  111.739951][ T5876] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x2
[  111.747786][ T5876] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0
[  111.798870][   T13] team0 (unregistering): Port device team_slave_1 removed
[  111.816187][   T13] team0 (unregistering): Port device team_slave_0 removed
[  111.899879][ T7313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.914484][ T7313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.931252][ T7313] team0: Port device team_slave_0 added
[  111.940456][ T7313] team0: Port device team_slave_1 added
[  111.967251][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.969645][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  111.986663][ T7313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  111.996426][ T7313] batman_adv: batadv0: Adding interface: batadv_slave_1
[  111.999056][ T7313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  112.009205][ T7313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.060694][ T7313] hsr_slave_0: entered promiscuous mode
[  112.063491][ T7313] hsr_slave_1: entered promiscuous mode
[  112.066154][ T7313] debugfs: 'hsr0' already exists in 'hsr'
[  112.067947][ T7313] Cannot create hsr debugfs directory
[  112.270210][ T7313] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  112.277031][ T7340] loop4: detected capacity change from 0 to 128
[  112.281740][ T7313] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  112.292503][ T7313] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  112.300220][ T7340] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  112.307694][ T7313] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  112.318745][ T7340] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.332914][ T7313] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.335681][ T7313] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.338593][ T7313] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.340856][ T7313] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.381877][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.386563][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.389348][ T7348] loop4: detected capacity change from 0 to 128
[  112.417234][ T7348] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  112.447588][ T7348] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  112.496585][ T6545] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.520179][ T7313] 8021q: adding VLAN 0 to HW filter on device bond0
[  112.555347][ T5876] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device
[  112.565043][ T5876] pyra 0003:1E7D:2CF6.0008: couldn't install mouse
[  112.567623][ T7313] 8021q: adding VLAN 0 to HW filter on device team0
[  112.587459][ T5876] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -71
[  112.588758][ T1283] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.593275][ T1283] bridge0: port 1(bridge_slave_0) entered forwarding state
[  112.607209][ T5876] usb 4-1: USB disconnect, device number 14
[  112.625616][ T1283] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.628590][ T1283] bridge0: port 2(bridge_slave_1) entered forwarding state
[  112.762599][ T5820] Bluetooth: hci1: command tx timeout
[  112.822946][ T7313] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.945530][ T7313] veth0_vlan: entered promiscuous mode
[  112.951232][ T7313] veth1_vlan: entered promiscuous mode
[  112.975917][ T7313] veth0_macvtap: entered promiscuous mode
[  112.985120][ T7313] veth1_macvtap: entered promiscuous mode
[  112.998763][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_0
[  113.015570][ T7313] batman_adv: batadv0: Interface activated: batadv_slave_1
[  113.023627][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  113.029895][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  113.041056][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  113.063065][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  113.156371][ T7382] loop3: detected capacity change from 0 to 512
[  113.161514][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.168225][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.191670][ T7382] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  113.204509][ T7382] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  113.212695][ T7382] EXT4-fs (loop3): 1 truncate cleaned up
[  113.216462][ T7382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.235165][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.238589][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.326755][ T5816] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  113.433939][ T7397] lo: entered allmulticast mode
[  113.436093][ T7396] lo: left allmulticast mode
[  113.487553][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.953800][ T7424] ALSA: mixer_oss: invalid OSS volume 'LIDE'
[  114.333146][  T782] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  114.491931][  T782] usb 5-1: Using ep0 maxpacket: 32
[  114.504900][  T782] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  114.518351][  T782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.570314][  T782] gspca_main: nw80x-2.14.0 probing 055f:d001
[  114.816616][ T7442] netlink: 'syz.3.494': attribute type 1 has an invalid length.
[  114.841965][ T5816] Bluetooth: hci1: command tx timeout
[  114.864169][ T7446] ieee802154 phy1 wpan1: encryption failed: -22
[  114.944574][ T7453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'.
[  115.036177][ T7448] loop5: detected capacity change from 0 to 32768
[  115.047568][ T7448] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.497 (7448)
[  115.076016][ T7448] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.079179][ T7448] BTRFS info (device loop5): using crc32c checksum algorithm
[  115.154221][  T782] gspca_nw80x: reg_w err -71
[  115.155824][ T7448] BTRFS info (device loop5): setting nodatasum
[  115.158108][ T7448] BTRFS info (device loop5): setting nodatacow
[  115.160205][ T7448] BTRFS info (device loop5): turning on async discard
[  115.161560][  T782] nw80x 5-1:3.0: probe with driver nw80x failed with error -71
[  115.181181][ T7448] BTRFS info (device loop5): enabling free space tree
[  115.181535][  T782] usb 5-1: USB disconnect, device number 5
[  115.191671][ T7448] BTRFS info (device loop5): enabling auto defrag
[  115.201873][ T7448] BTRFS info (device loop5): trying to use backup root at mount time
[  115.204619][ T7448] BTRFS info (device loop5): max_inline set to 0
[  115.267568][ T7480] netlink: 'syz.3.505': attribute type 9 has an invalid length.
[  115.325131][ T7313] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  115.348823][ T7485] syz.3.508 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  115.405573][ T7487] Illegal XDP return value 4294967274 on prog  (id 27) dev syz_tun, expect packet loss!
[  115.932804][ T5862] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  116.101917][ T5862] usb 6-1: Using ep0 maxpacket: 16
[  116.106114][ T5862] usb 6-1: config 0 has an invalid interface number: 105 but max is 0
[  116.110179][ T5862] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.117301][ T5862] usb 6-1: config 0 has no interface number 0
[  116.124985][ T5862] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  116.128619][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.132288][ T5862] usb 6-1: Product: syz
[  116.133939][ T5862] usb 6-1: Manufacturer: syz
[  116.135928][ T5862] usb 6-1: SerialNumber: syz
[  116.139843][ T5862] usb 6-1: config 0 descriptor??
[  116.232258][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  116.353215][ T5862] uvcvideo 6-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  116.355604][ T5862] uvcvideo 6-1:0.105: No valid video chain found.
[  116.393386][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.397161][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.440524][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[  116.444599][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.453374][    T9] usb 5-1: config 0 descriptor??
[  116.496184][   T33] audit: type=1326 audit(1774968788.753:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  116.504605][   T33] audit: type=1326 audit(1774968788.753:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  116.512295][   T33] audit: type=1326 audit(1774968788.763:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.519" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  116.519606][   T33] audit: type=1326 audit(1774968788.763:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  116.528580][   T33] audit: type=1326 audit(1774968788.763:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7518 comm="syz.3.519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  116.554702][  T782] usb 6-1: USB disconnect, device number 2
[  116.683207][ T7527] loop3: detected capacity change from 0 to 256
[  116.707678][ T7527] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 198)
[  116.861919][    T9] arvo 0003:1E7D:30D4.0009: item fetching failed at offset 5/7
[  116.864625][    T9] arvo 0003:1E7D:30D4.0009: parse failed
[  116.866456][    T9] arvo 0003:1E7D:30D4.0009: probe with driver arvo failed with error -22
[  116.923583][ T5816] Bluetooth: hci1: command tx timeout
[  116.981914][  T782] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  117.065006][    T9] usb 5-1: USB disconnect, device number 6
[  117.136994][  T782] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.142640][  T782] usb 4-1: not running at top speed; connect to a high speed hub
[  117.152701][  T782] usb 4-1: config 6 has an invalid interface number: 40 but max is 0
[  117.155891][  T782] usb 4-1: config 6 has no interface number 0
[  117.158344][  T782] usb 4-1: config 6 interface 40 has no altsetting 0
[  117.175439][  T782] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=42.cf
[  117.179110][  T782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.182253][   T10] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  117.189852][  T782] usb 4-1: Product: syz
[  117.191629][  T782] usb 4-1: Manufacturer: syz
[  117.193387][   T10] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  117.198032][  T782] usb 4-1: SerialNumber: syz
[  117.413365][  T782] smsc95xx 4-1:6.40 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  117.415295][ T7538] loop5: detected capacity change from 0 to 1024
[  117.425373][ T7538] hfsplus: failed to load root directory
[  117.429504][  T782] smsc95xx 4-1:6.40: probe with driver smsc95xx failed with error -22
[  117.453468][  T782] usb 4-1: USB disconnect, device number 15
[  117.695590][ T7542] loop5: detected capacity change from 0 to 32768
[  117.708368][ T7542] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  117.713171][ T7542] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.730166][ T7542] XFS (loop5): Ending clean mount
[  117.738643][ T7542] XFS (loop5): Quotacheck needed: Please wait.
[  117.745615][ T1112] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 
[  117.750189][ T1112] XFS (loop5): Unmount and run xfs_repair
[  117.754339][ T1112] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  117.757345][ T1112] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  117.760869][ T1112] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  117.765852][ T1112] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  117.768903][ T1112] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  117.772954][ T1112] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  117.776418][ T1112] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  117.779697][ T1112] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.783241][ T1112] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.786943][ T1112] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x10 len 8 error 74
[  117.790968][ T1112] loop5: lost filesystem error report for type 5 error -117
[  117.795163][ T7542] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  117.801680][ T7542] loop5: lost filesystem error report for type 5 error -117
[  117.822623][ T7313] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.830742][ T7313] XFS (loop5): Uncorrected metadata errors detected; please run xfs_repair.
[  117.951986][  T782] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  117.971959][ T5863] kernel write not supported for file /dsp1 (pid: 5863 comm: kworker/1:3)
[  117.984258][ T7558] loop3: detected capacity change from 0 to 256
[  117.999727][ T7558] FAT-fs (loop3): Directory bread(block 64) failed
[  118.002464][ T7558] FAT-fs (loop3): Directory bread(block 65) failed
[  118.005121][ T7558] FAT-fs (loop3): Directory bread(block 66) failed
[  118.007921][ T7558] FAT-fs (loop3): Directory bread(block 67) failed
[  118.010643][ T7558] FAT-fs (loop3): Directory bread(block 68) failed
[  118.014899][ T7558] FAT-fs (loop3): Directory bread(block 69) failed
[  118.017633][ T7558] FAT-fs (loop3): Directory bread(block 70) failed
[  118.020465][ T7558] FAT-fs (loop3): Directory bread(block 71) failed
[  118.023517][ T7558] FAT-fs (loop3): Directory bread(block 72) failed
[  118.026173][ T7558] FAT-fs (loop3): Directory bread(block 73) failed
[  118.122828][  T782] usb 5-1: Using ep0 maxpacket: 16
[  118.128563][  T782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.134562][  T782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.144717][  T782] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.154881][  T782] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.160930][  T782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.171001][  T782] usb 5-1: config 0 descriptor??
[  118.502094][ T5876] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  118.592858][  T782] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  118.597439][  T782] microsoft 0003:045E:07DA.000B: no inputs found
[  118.600065][  T782] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway
[  118.651989][ T5876] usb 4-1: Using ep0 maxpacket: 8
[  118.656707][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  118.660914][ T5876] usb 4-1: config 4 interface 0 has no altsetting 0
[  118.667196][ T5876] usb 4-1: string descriptor 0 read error: -22
[  118.669736][ T5876] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  118.674297][ T5876] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  118.682896][ T5876] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  118.690383][ T5876] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  118.695218][ T5876] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  118.698125][ T5876] usb 4-1: media controller created
[  118.707933][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  118.732484][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  118.786075][ T5878] usb 5-1: USB disconnect, device number 7
[  118.882008][    T9] usb 6-1: Using ep0 maxpacket: 32
[  118.887293][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.887767][ T5876] zl10353_read_register: readreg error (reg=127, ret==0)
[  118.896633][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  118.900869][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  118.905501][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.915896][    T9] usb 6-1: config 0 descriptor??
[  118.924495][ T5876] usb 4-1: USB disconnect, device number 16
[  119.002021][ T5816] Bluetooth: hci1: command tx timeout
[  119.342094][    T9] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  119.345415][    T9] ft260 0003:0403:6030.000C: unknown main item tag 0x0
[  119.495326][ T7582] loop3: detected capacity change from 0 to 2048
[  119.522433][ T7582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.533275][ T7582] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  119.543288][    T9] ft260 0003:0403:6030.000C: chip code: 0000 0000
[  119.566947][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.744147][    T9] ft260 0003:0403:6030.000C: failed to retrieve system status
[  119.746594][    T9] ft260 0003:0403:6030.000C: probe with driver ft260 failed with error -71
[  119.750729][    T9] usb 6-1: USB disconnect, device number 3
[  119.891962][ T5878] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  120.044116][ T5878] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  120.047431][ T5878] usb 4-1: config 0 has no interface number 0
[  120.052762][ T5878] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  120.056557][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.059716][ T5878] usb 4-1: Product: syz
[  120.061483][ T5878] usb 4-1: Manufacturer: syz
[  120.063882][ T5878] usb 4-1: SerialNumber: syz
[  120.072159][ T5878] usb 4-1: config 0 descriptor??
[  120.285792][ T5878] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  120.299722][ T5878] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  120.312576][ T5878] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  120.315869][ T5878] usb 4-1: media controller created
[  120.328447][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  120.373177][ T7595] sctp: [Deprecated]: syz.5.548 (pid 7595) Use of struct sctp_assoc_value in delayed_ack socket option.
[  120.373177][ T7595] Use struct sctp_sack_info instead
[  120.428229][ T7597] loop5: detected capacity change from 0 to 1024
[  120.487906][ T5878] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  120.537102][ T5878] usb 4-1: USB disconnect, device number 17
[  121.342187][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  121.512409][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.515624][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  121.537584][    T9] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40
[  121.541947][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.544559][    T9] usb 5-1: Product: syz
[  121.545933][    T9] usb 5-1: Manufacturer: syz
[  121.547797][    T9] usb 5-1: SerialNumber: syz
[  121.630338][ T7610] loop3: detected capacity change from 0 to 32768
[  121.658982][ T7610] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.686015][ T7610] XFS (loop3): Ending clean mount
[  121.693410][ T7610] XFS (loop3): Quotacheck needed: Please wait.
[  121.719363][ T7610] XFS (loop3): Quotacheck: Done.
[  121.743287][ T5922] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.799834][    T9] usb 5-1: unit 3 not found!
[  121.801449][    T9] usb 5-1: unit 7 not found!
[  121.804683][    T9] usb 5-1: unit 5 not found!
[  121.806089][    T9] usb 5-1: unit 59 not found!
[  121.829479][    T9] usb 5-1: USB disconnect, device number 8
[  121.854678][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  121.886048][ T5863] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  121.988671][   T33] audit: type=1800 audit(1774968794.243:37): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.558" name="#862" dev="overlay" ino=862 res=0 errno=0
[  122.033521][ T5863] usb 6-1: Using ep0 maxpacket: 8
[  122.036752][ T5863] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  122.040538][ T5863] usb 6-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  122.048728][ T5863] usb 6-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  122.059098][ T5863] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.523440][ T5863] usb 6-1: string descriptor 0 read error: -71
[  122.554803][ T5863] usb 6-1: USB disconnect, device number 4
[  122.606266][ T7640] loop3: detected capacity change from 0 to 32768
[  122.609244][ T7640] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.563 (7640)
[  122.614977][ T7640] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.618492][ T7640] BTRFS info (device loop3 state S): using crc32c checksum algorithm
[  122.642702][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  122.651206][ T1283] BTRFS warning (device loop3 state ES): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  122.685692][ T3623] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x13388982 level 0, ignored
[  122.694190][   T32] BTRFS warning (device loop3 state ES): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  122.700407][ T7640] BTRFS error (device loop3 state ES): failed to load root free space
[  122.729190][ T7640] BTRFS error (device loop3 state ES): open_ctree failed: -2
[  123.431882][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  123.603610][    T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  123.606404][    T9] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  123.609673][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  123.612672][    T9] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  123.616591][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  123.620310][    T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  123.625955][    T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  123.628834][    T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  123.631550][    T9] usb 4-1: Product: syz
[  123.633300][    T9] usb 4-1: Manufacturer: syz
[  123.637121][ T7679] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.645084][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  123.647173][    T9] cdc_wdm 4-1:1.0: skipping garbage
[  123.666744][    T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  123.669002][    T9] cdc_wdm 4-1:1.0: Unknown control protocol
[  123.861617][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  123.863793][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  123.866575][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  123.868811][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  123.870983][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  123.873048][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  123.875339][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  123.877573][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  123.879724][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  123.881904][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  123.885250][ T5876] usb 4-1: USB disconnect, device number 18
[  123.926135][ T7708] macvlan2: entered promiscuous mode
[  124.241884][ T5863] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  124.416235][ T5863] usb 6-1: unable to get BOS descriptor or descriptor too short
[  124.419213][ T5863] usb 6-1: not running at top speed; connect to a high speed hub
[  124.420072][   T33] audit: type=1400 audit(1774968796.673:38): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="::lb0" pid=7719 comm="syz.3.593"
[  124.422766][ T5863] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.431163][ T5863] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  124.441379][ T5863] usb 6-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40
[  124.449897][ T5863] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.452748][ T5863] usb 6-1: Product: syz
[  124.454205][ T5863] usb 6-1: Manufacturer: syz
[  124.455741][ T5863] usb 6-1: SerialNumber: syz
[  124.481082][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'.
[  124.488800][ T7722] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.533635][ T7725] loop3: detected capacity change from 0 to 512
[  124.546765][ T7725] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.577760][ T7725] EXT4-fs (loop3): 1 truncate cleaned up
[  124.584639][ T7725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.661629][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.683046][ T5863] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  124.689671][ T5863] usb 6-1: 0:2 : does not exist
[  124.728450][ T5863] usb 6-1: USB disconnect, device number 5
[  124.753738][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  124.851966][ T5862] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  124.867110][ T7734] loop3: detected capacity change from 0 to 32768
[  124.882646][ T7734] JBD2: Invalid start block of journal: 67108866
[  124.893764][ T7734] (syz.3.597,7734,0):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  124.897524][ T7734] (syz.3.597,7734,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  124.900751][ T7734] (syz.3.597,7734,0):ocfs2_check_volume:2432 ERROR: status = -22
[  124.904133][ T7734] (syz.3.597,7734,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  124.923141][ T7734] (syz.3.597,7734,0):ocfs2_fill_super:1177 ERROR: status = -22
[  125.013192][ T5862] usb 5-1: Using ep0 maxpacket: 32
[  125.022170][ T5862] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  125.024562][ T5862] usb 5-1: config 0 has no interface number 0
[  125.026428][ T5862] usb 5-1: config 0 interface 184 has no altsetting 0
[  125.034120][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  125.036781][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.039324][ T5862] usb 5-1: Product: syz
[  125.040575][ T5862] usb 5-1: Manufacturer: syz
[  125.051121][ T5862] usb 5-1: SerialNumber: syz
[  125.057302][ T5862] usb 5-1: config 0 descriptor??
[  125.461935][ T5842] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  125.621895][ T5842] usb 4-1: Using ep0 maxpacket: 32
[  125.627368][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short
[  125.634178][ T5842] usb 4-1: config 1 interface 0 has no altsetting 0
[  125.642288][ T5842] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.40
[  125.646220][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.649635][ T5842] usb 4-1: Product: syz
[  125.652079][ T5842] usb 4-1: Manufacturer: syz
[  125.654195][ T5842] usb 4-1: SerialNumber: syz
[  125.681117][ T5862] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  125.685108][ T5862] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  125.688410][ T5862] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  125.692469][ T5862] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  125.706380][ T5862] usb 5-1: USB disconnect, device number 9
[  125.890876][ T5842] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input8
[  125.906713][ T5242] bcm5974 4-1:1.0: could not read from device
[  125.913482][ T5242] bcm5974 4-1:1.0: could not read from device
[  125.916793][ T5842] usb 4-1: USB disconnect, device number 19
[  125.929071][ T5242] bcm5974 4-1:1.0: could not read from device
[  126.368290][ T7769] loop4: detected capacity change from 0 to 128
[  126.376949][ T7769] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  126.386925][ T7769] hpfs: filesystem error: improperly stopped
[  126.389370][ T7769] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  126.402602][ T7769] hpfs: You really don't want any checks? You are crazy...
[  126.406168][ T7769] hpfs: hpfs_map_sector(): read error
[  126.408262][ T7769] hpfs: code page support is disabled
[  126.410629][ T7769] hpfs: hpfs_map_4sectors(): unaligned read
[  126.414125][ T7769] hpfs: hpfs_map_4sectors(): unaligned read
[  126.418301][ T7769] hpfs: filesystem error: unable to find root dir
[  126.465136][ T7776] loop4: detected capacity change from 0 to 512
[  126.477868][ T7776] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.608: inode has both inline data and extents flags
[  126.482309][ T7776] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  126.482492][ T7776] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.608: couldn't read orphan inode 15 (err -117)
[  126.489356][ T7776] loop4: lost filesystem error report for type 5 error -117
[  126.490258][ T7776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  126.556751][ T6545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.693447][ T7782] loop5: detected capacity change from 0 to 32768
[  126.700891][ T7782] BTRFS warning: excessive commit interval 2147483645, use with care
[  126.703929][ T7782] btrfs: Deprecated parameter 'usebackuproot'
[  126.706071][ T7782] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  126.709273][ T7782] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.611 (7782)
[  126.716705][ T7782] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  126.720277][ T7782] BTRFS info (device loop5): using crc32c checksum algorithm
[  126.726396][ T7782] BTRFS error (device loop5): ignoredatacsums must be used with ro mount option
[  126.729294][ T7782] BTRFS error (device loop5): open_ctree failed: -22
[  126.752093][ T5863] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  126.914314][ T5863] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  126.917126][ T5863] usb 4-1: config 0 has no interface number 0
[  126.922424][ T5863] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  126.931077][ T5863] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  126.936840][ T5863] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  126.939366][ T5863] usb 4-1: Manufacturer: syz
[  126.947690][ T5863] usb 4-1: SerialNumber: syz
[  126.949302][ T7802] loop5: detected capacity change from 0 to 4096
[  126.954727][ T7802] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  126.957912][ T5863] usb 4-1: config 0 descriptor??
[  126.968970][ T7802] ntfs3(loop5): volume is dirty and "force" flag is not set!
[  127.041965][ T5842] usb 5-1: new low-speed USB device number 10 using dummy_hcd
[  127.048625][ T7806] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  127.157159][ T7812] loop5: detected capacity change from 0 to 128
[  127.195415][ T5842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  127.198313][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  127.215333][ T5842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  127.230805][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  127.241393][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  127.263549][ T5842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  127.266526][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  127.283419][ T5842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  127.289656][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  127.296511][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  127.316669][ T5842] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  127.319709][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  127.324805][ T5842] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  127.329483][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  127.334328][ T5842] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  127.345297][ T7819] loop5: detected capacity change from 0 to 1024
[  127.348844][ T5842] usb 5-1: string descriptor 0 read error: -22
[  127.354557][ T5842] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  127.358053][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.379701][ T5863] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  127.393136][ T5863] usb 4-1: USB disconnect, device number 20
[  127.396013][ T5842] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  127.414069][ T7819] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  127.421330][   T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.430745][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.442587][   T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.446033][   T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.095587][ T7831] loop3: detected capacity change from 0 to 256
[  128.304314][ T7837] xt_hashlimit: size too large, truncated to 1048576
[  128.944850][ T7846] loop3: detected capacity change from 0 to 1024
[  128.987856][ T7846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  128.993715][ T7846] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.141523][   T40] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm kworker/u10:2: lblock 0 mapped to illegal pblock 0 (length 1)
[  129.158117][   T40] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  129.163668][   T40] EXT4-fs (loop3): This should not happen!! Data will be lost
[  129.163668][   T40] 
[  129.175329][ T5922] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  129.189188][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  129.855279][ T5842] usb 5-1: USB disconnect, device number 10
[  130.034138][ T7863] loop4: detected capacity change from 0 to 128
[  130.068523][ T7863] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  130.074605][ T7865] loop3: detected capacity change from 0 to 4096
[  130.107464][ T7863] ext4 filesystem being mounted at /135/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  130.164421][ T6545] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  130.238639][   T32] ntfs3(loop3): ino=5, mi_enum_attr
[  130.610271][ T7901] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  130.849854][ T7926] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  130.873906][ T5922] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  130.877161][ T5922] FAT-fs (loop3): Filesystem has been set read-only
[  130.940677][ T7930] hfsplus: b-tree write err: -5, ino 2
[  130.968146][ T3623] hfsplus: b-tree write err: -5, ino 25
[  130.970829][ T3623] hfsplus: b-tree write err: -5, ino 4
[  130.975693][ T3623] hfsplus: b-tree write err: -5, ino 2
[  130.979346][ T3623] hfsplus: b-tree write err: -5, ino 20
[  131.490445][ T7953] set_capacity_and_notify: 5 callbacks suppressed
[  131.490459][ T7953] loop4: detected capacity change from 0 to 512
[  131.499340][ T7953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  131.517415][ T7953] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.523883][ T7953] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.537887][ T7953] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  131.542038][ T7953] EXT4-fs (loop4): changing journal_checksum during remount not supported; ignoring
[  131.546445][ T7953] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  131.567378][ T6545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.061985][   T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  132.215217][   T31] usb 6-1: Using ep0 maxpacket: 8
[  132.224237][   T31] usb 6-1: config 0 has an invalid interface number: 122 but max is 0
[  132.227385][   T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.231184][   T31] usb 6-1: config 0 has no interface number 0
[  132.247784][   T31] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  132.263711][   T31] usb 6-1: config 0 interface 122 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  132.325585][ T7982] loop4: detected capacity change from 0 to 128
[  132.329909][ T7982] EXT4-fs (loop4): Test dummy encryption mode enabled
[  132.384262][ T7982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  132.389111][ T7982] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.399239][   T31] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7
[  132.403298][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.405728][   T31] usb 6-1: Product: syz
[  132.407011][   T31] usb 6-1: Manufacturer: syz
[  132.408435][   T31] usb 6-1: SerialNumber: syz
[  132.411473][   T31] usb 6-1: config 0 descriptor??
[  132.425390][ T6545] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.747566][   T31] usb 6-1: NFC: intf ffff8881b0d9b000 id ffffffff8f1d2920
[  132.769857][   T31] usb 6-1: USB disconnect, device number 6
[  132.847063][ T7991] loop4: detected capacity change from 0 to 1024
[  133.030282][ T7997] loop4: detected capacity change from 0 to 256
[  133.034670][ T7997] exfat: Deprecated parameter 'namecase'
[  133.037105][ T7997] exfat: Bad value for 'namecase'
[  133.191099][ T8003] loop3: detected capacity change from 0 to 2048
[  133.276179][ T5818]  loop3: p2 p3 p7
[  133.298062][ T8009] loop5: detected capacity change from 0 to 128
[  133.312156][ T8009] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  133.319106][ T8009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.327382][ T8003]  loop3: p2 p3 p7
[  133.339902][ T3623] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.352549][ T8009] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  133.409676][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  133.415450][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  133.421583][ T6755] udevd[6755]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  133.437054][ T5903] udevd[5903]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  133.444742][ T5818] udevd[5818]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  133.452618][ T6755] udevd[6755]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[  133.575812][ T8029] loop3: detected capacity change from 0 to 128
[  133.590802][ T8029] FAT-fs (loop3): bogus sectors per cluster 0
[  133.593352][ T8029] FAT-fs (loop3): Can't find a valid FAT filesystem
[  133.671869][ T8025] loop4: detected capacity change from 0 to 65536
[  133.714892][ T8025] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  133.739522][ T8025] XFS (loop4): Ending clean mount
[  133.744700][ T8025] XFS (loop4): Quotacheck needed: Please wait.
[  133.780758][ T8025] XFS (loop4): Quotacheck: Done.
[  133.810344][ T6545] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  133.869077][ T8049] loop3: detected capacity change from 0 to 512
[  133.877019][ T8049] EXT4-fs: inline encryption not supported
[  133.895174][ T8049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  133.898748][ T8049] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  133.937224][ T8049] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 1
[  133.943245][ T8049] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota
[  133.946651][ T8049] EXT4-fs error (device loop3): ext4_acquire_dquot:7026: comm syz.3.728: Failed to acquire dquot type 1
[  133.951202][ T8049] loop3: lost filesystem error report for type 5 error -5
[  133.951538][ T8049] EXT4-fs (loop3): Remounting filesystem read-only
[  133.954415][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  133.954431][    C0] EXT4-fs (loop3): initial error at time 1774968806: ext4_acquire_dquot:7026
[  133.954448][    C0] EXT4-fs (loop3): last error at time 1774968806: ext4_acquire_dquot:7026
[  133.969220][ T8049] EXT4-fs (loop3): 1 truncate cleaned up
[  133.974183][ T8049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.008463][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.170106][ T8055] loop4: detected capacity change from 0 to 32768
[  134.690674][ T8086] netlink: 44 bytes leftover after parsing attributes in process `syz.5.743'.
[  134.696817][ T8086] netlink: 12 bytes leftover after parsing attributes in process `syz.5.743'.
[  134.700101][ T8086] netlink: 16 bytes leftover after parsing attributes in process `syz.5.743'.
[  135.567410][   T31] libceph: connect (1)[c::]:6789 error -101
[  135.579953][   T31] libceph: mon0 (1)[c::]:6789 connect error
[  135.846394][ T5876] libceph: connect (1)[c::]:6789 error -101
[  135.853500][   T33] audit: type=1326 audit(1774968808.113:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.854438][ T5876] libceph: mon0 (1)[c::]:6789 connect error
[  135.879643][   T33] audit: type=1326 audit(1774968808.113:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.909376][   T33] audit: type=1326 audit(1774968808.123:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.920827][   T33] audit: type=1326 audit(1774968808.123:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.930808][   T33] audit: type=1326 audit(1774968808.123:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.941064][   T33] audit: type=1326 audit(1774968808.123:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.949145][   T33] audit: type=1326 audit(1774968808.123:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  135.960704][   T33] audit: type=1326 audit(1774968808.123:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8119 comm="syz.4.756" exe="/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  136.002705][ T8126] netlink: 16 bytes leftover after parsing attributes in process `syz.4.759'.
[  136.005481][ T8126] netlink: 40 bytes leftover after parsing attributes in process `syz.4.759'.
[  136.134957][ T8109] ceph: No mds server is up or the cluster is laggy
[  136.280457][ T8137] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  136.299378][ T8137] exFAT-fs (loop4): error, data size is invalid(150994954)
[  136.313322][ T8137] exFAT-fs (loop4): Filesystem has been set read-only
[  136.607482][ T8146] set_capacity_and_notify: 3 callbacks suppressed
[  136.607492][ T8146] loop3: detected capacity change from 0 to 32768
[  136.628851][ T8146] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.768 (8146)
[  136.639979][ T8146] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.651934][ T8146] BTRFS info (device loop3): using crc32c checksum algorithm
[  136.726230][ T8146] BTRFS info (device loop3): enabling ssd optimizations
[  136.730790][ T8146] BTRFS info (device loop3): turning on flush-on-commit
[  136.739831][ T8146] BTRFS info (device loop3): enabling free space tree
[  136.745443][ T8146] BTRFS info (device loop3): enabling auto defrag
[  136.756428][ T8146] BTRFS info (device loop3): use lzo compression, level 1
[  136.767112][ T8146] BTRFS info (device loop3): max_inline set to 4096
[  136.868236][ T8178] Bluetooth: MGMT ver 1.23
[  136.879990][ T5922] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.722328][ T8197] fuse: Bad value for 'fd'
[  137.786773][ T8199] capability: warning: `syz.5.785' uses 32-bit capabilities (legacy support in use)
[  137.926938][ T8203] 9p: Bad value for 'rfdno'
[  138.017837][ T8206] ieee802154 phy1 wpan1: encryption failed: -22
[  138.020158][ T8208] capability: warning: `syz.5.789' uses deprecated v2 capabilities in a way that may be insecure
[  138.064544][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  138.299446][ T8215] netlink: 132 bytes leftover after parsing attributes in process `syz.4.793'.
[  138.718852][ T8233] loop4: detected capacity change from 0 to 128
[  138.730537][ T8233] EXT4-fs (loop4): Test dummy encryption mode enabled
[  138.741211][ T8233] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  138.748820][ T8233] System zones: 1-3, 19-19, 35-36
[  138.780022][ T8233] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  138.805525][ T8233] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.861659][ T6545] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  138.922359][ T5816] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  138.922672][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  139.242406][ T8249] input: syz0 as /devices/virtual/input/input10
[  139.251632][ T8240] mmap: syz.5.804 (8240) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  139.389137][ T8254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'.
[  140.021057][ T8269] loop4: detected capacity change from 0 to 16
[  140.239498][ T8278] netlink: 88 bytes leftover after parsing attributes in process `syz.4.820'.
[  141.012882][ T8299] overlayfs: failed to clone upperpath
[  141.542072][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  141.696028][ T5876] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  141.703749][ T5876] usb 5-1: config 0 has no interface number 0
[  141.710944][ T5876] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  141.718339][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.727242][ T5876] usb 5-1: Product: syz
[  141.731296][ T5876] usb 5-1: Manufacturer: syz
[  141.737398][ T5876] usb 5-1: SerialNumber: syz
[  141.742674][ T5876] usb 5-1: config 0 descriptor??
[  141.951035][ T5876] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  141.955568][ T5876] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  141.959643][ T5876] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  141.962914][ T5876] usb 5-1: media controller created
[  141.970565][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  142.161299][ T5876] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  142.327650][ T5876] usb 5-1: USB disconnect, device number 11
[  142.804055][ T8322] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  142.810110][   T33] kauditd_printk_skb: 2 callbacks suppressed
[  142.810119][   T33] audit: type=1326 audit(1774968815.063:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.826611][   T33] audit: type=1326 audit(1774968815.063:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.840921][   T33] audit: type=1326 audit(1774968815.083:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.848482][   T33] audit: type=1326 audit(1774968815.083:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.857916][   T33] audit: type=1326 audit(1774968815.083:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.866946][   T33] audit: type=1326 audit(1774968815.083:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.892026][   T33] audit: type=1326 audit(1774968815.083:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.930422][   T33] audit: type=1326 audit(1774968815.093:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.951621][   T33] audit: type=1326 audit(1774968815.093:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  142.968263][   T33] audit: type=1326 audit(1774968815.093:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8323 comm="syz.5.840" exe="/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  143.870917][ T8345] loop3: detected capacity change from 0 to 2048
[  143.883071][ T8345] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  143.884735][ T5818] udevd[5818]: incorrect nilfs2 checksum on /dev/loop3
[  143.904029][ T8348] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.336529][ T8358] loop4: detected capacity change from 0 to 2048
[  144.352343][ T8358] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.711272][ T8408] loop3: detected capacity change from 0 to 40427
[  145.716485][ T8408] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  145.719579][ T8408] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  145.724695][ T8408] F2FS-fs (loop3): invalid crc value
[  145.753956][ T8408] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  145.762292][ T8408] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  145.764462][ T8408] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.871977][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  146.691912][    T9] usb 5-1: Using ep0 maxpacket: 16
[  146.696526][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.699964][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.706637][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.709449][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.711959][    T9] usb 5-1: Product: syz
[  146.713264][    T9] usb 5-1: Manufacturer: syz
[  146.714701][    T9] usb 5-1: SerialNumber: syz
[  146.931445][    T9] usb 5-1: 0:2 : does not exist
[  146.981018][    T9] usb 5-1: USB disconnect, device number 12
[  147.075456][ T8430] loop3: detected capacity change from 0 to 128
[  147.176624][ T8430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  147.181255][ T8430] block device autoloading is deprecated and will be removed.
[  148.359676][ T8469] loop3: detected capacity change from 0 to 4096
[  148.365474][ T8469] nilfs2: Unexpected value for 'barrier'
[  148.437257][   T33] kauditd_printk_skb: 7 callbacks suppressed
[  148.437267][   T33] audit: type=1326 audit(1774968820.693:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.904" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  148.461936][   T33] audit: type=1326 audit(1774968820.693:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.904" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  148.468691][   T33] audit: type=1326 audit(1774968820.693:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8474 comm="syz.3.904" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  148.592776][ T8486] loop3: detected capacity change from 0 to 256
[  148.861741][ T8506] loop3: detected capacity change from 0 to 4096
[  148.877087][ T8506] ntfs3(loop3): ino=3, Correct links count -> 2.
[  148.900415][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.922'.
[  148.955858][ T8506] ntfs3(loop3): ino=5, "/" ntfs_readdir
[  149.353119][ T8532] hub 9-0:1.0: USB hub found
[  149.356139][ T8532] hub 9-0:1.0: 1 port detected
[  149.507979][ T5862] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  149.553120][   T33] audit: type=1326 audit(1774968821.813:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.5.931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  149.559892][   T33] audit: type=1326 audit(1774968821.813:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.5.931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  149.575690][   T33] audit: type=1326 audit(1774968821.833:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.5.931" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  149.585758][   T33] audit: type=1326 audit(1774968821.833:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.5.931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  149.592794][   T33] audit: type=1326 audit(1774968821.833:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8535 comm="syz.5.931" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  149.682054][ T5862] usb 5-1: Using ep0 maxpacket: 16
[  149.685936][ T5862] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.689735][ T5862] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.699019][ T5862] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.703784][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.707085][ T5862] usb 5-1: Product: syz
[  149.708772][ T5862] usb 5-1: Manufacturer: syz
[  149.710609][ T5862] usb 5-1: SerialNumber: syz
[  149.921087][ T5862] usb 5-1: 0:2 : does not exist
[  150.041384][ T5862] usb 5-1: USB disconnect, device number 13
[  150.056365][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.395116][ T8567] loop3: detected capacity change from 0 to 256
[  150.633398][ T8570] loop3: detected capacity change from 0 to 32768
[  150.654259][ T8570] ERROR: (device loop3): dbAllocAG: unable to allocate blocks
[  150.654259][ T8570] 
[  150.658357][ T8570] jfs_create: dtInsert returned -EIO
[  150.660237][ T8570] ERROR: (device loop3): jfs_create: 
[  150.660237][ T8570] 
[  151.266979][ T8573] loop4: detected capacity change from 0 to 262144
[  151.334315][ T8573] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.949 (8573)
[  151.457861][ T8573] BTRFS info (device loop4): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  151.462116][ T8573] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  151.667733][ T8573] BTRFS info (device loop4): deleted orphan free space tree entries
[  151.671030][ T8573] BTRFS info (device loop4): checking UUID tree
[  151.673864][ T8573] BTRFS info (device loop4): enabling ssd optimizations
[  151.676017][ T8573] BTRFS info (device loop4): turning on async discard
[  151.678046][ T8573] BTRFS info (device loop4): enabling free space tree
[  151.721453][ T6545] BTRFS info (device loop4): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  151.926242][ T5820] Bluetooth: hci2: unexpected event for opcode 0x0c14
[  152.148346][ T8627] loop4: detected capacity change from 0 to 2048
[  152.186217][ T8628] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.247534][ T8619] loop3: detected capacity change from 0 to 32768
[  152.260642][ T8619] OCFS2: ERROR (device loop3): int ocfs2_validate_slot_map_block(struct super_block *, struct buffer_head *): Invalid Slot Map Buffer Head Block Number : 0, Should be >= 2
[  152.260712][ T8619] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  152.291947][ T8619] OCFS2: File system is now read-only.
[  152.294240][ T8619] (syz.3.962,8619,0):ocfs2_map_slot_buffers:410 ERROR: status = -30
[  152.302633][ T8619] (syz.3.962,8619,0):ocfs2_init_slot_info:448 ERROR: status = -30
[  152.308231][ T8619] (syz.3.962,8619,0):ocfs2_initialize_super:2222 ERROR: status = -30
[  152.313359][ T8619] (syz.3.962,8619,0):ocfs2_fill_super:1177 ERROR: status = -30
[  152.581710][ T8647] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.975' sets config #2
[  152.936359][ T8672] loop3: detected capacity change from 0 to 1024
[  153.009170][   T33] audit: type=1326 audit(1774968825.263:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.4.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  153.026524][   T33] audit: type=1326 audit(1774968825.263:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8675 comm="syz.4.988" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  153.038009][ T8678] loop3: detected capacity change from 0 to 64
[  153.163369][ T8683] Device name cannot be null; rc = [-22]
[  153.443175][   T33] kauditd_printk_skb: 110 callbacks suppressed
[  153.443285][   T33] audit: type=1326 audit(1774968825.693:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.488030][   T33] audit: type=1326 audit(1774968825.703:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.516675][   T33] audit: type=1326 audit(1774968825.723:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.558222][   T33] audit: type=1326 audit(1774968825.723:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.582285][   T33] audit: type=1326 audit(1774968825.723:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.603250][   T33] audit: type=1326 audit(1774968825.723:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.612531][   T33] audit: type=1326 audit(1774968825.723:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.621276][   T33] audit: type=1326 audit(1774968825.723:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.630083][   T33] audit: type=1326 audit(1774968825.723:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.638937][   T33] audit: type=1326 audit(1774968825.723:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8681 comm="syz.3.990" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb18f55d04e code=0x7ffc0000
[  153.758862][ T8691] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc.
[  155.157997][ T8746] loop4: detected capacity change from 0 to 128
[  155.177964][ T8746] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  155.231162][ T8749] loop3: detected capacity change from 0 to 512
[  155.263733][ T8753] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.268139][ T8753] netlink: 'syz.4.1023': attribute type 12 has an invalid length.
[  155.270920][ T8753] netlink: 'syz.4.1023': attribute type 3 has an invalid length.
[  155.275379][ T8753] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1023'.
[  155.316752][ T8755] tmpfs: Bad value for 'mpol'
[  155.406914][ T8765] input: syz0 as /devices/virtual/input/input12
[  155.473558][ T8769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1032'.
[  155.626498][ T8783] loop3: detected capacity change from 0 to 1024
[  155.877004][ T8789] loop3: detected capacity change from 0 to 32768
[  156.166210][ T8785] loop4: detected capacity change from 0 to 131072
[  156.169539][ T8785] F2FS-fs (loop4): invalid crc value
[  156.201915][ T8785] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  156.205832][ T8785] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  156.398323][ T8797] bond1: Unable to set up delay as MII monitoring is disabled
[  156.401538][ T8797] bond1 (unregistering): Released all slaves
[  156.658303][ T8808] loop4: detected capacity change from 0 to 8
[  156.671186][ T8808] SQUASHFS error: lzo decompression failed, data probably corrupt
[  156.680856][ T8808] SQUASHFS error: Failed to read block 0x144: -5
[  156.687876][ T8808] SQUASHFS error: Unable to read metadata cache entry [142]
[  156.691974][ T8808] SQUASHFS error: Unable to read inode 0x11f
[  157.986258][ T8838] loop4: detected capacity change from 0 to 32768
[  157.998587][ T8838] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1058 (8838)
[  158.040358][ T8838] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  158.075336][ T8838] BTRFS info (device loop4): using sha256 checksum algorithm
[  158.238898][ T8838] BTRFS info (device loop4): enabling ssd optimizations
[  158.241319][ T8838] BTRFS info (device loop4): turning on async discard
[  158.257842][ T8838] BTRFS info (device loop4): enabling free space tree
[  158.314909][ T8914] loop3: detected capacity change from 0 to 1024
[  158.337196][ T8914] EXT4-fs: Ignoring removed bh option
[  158.342837][ T6545] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  158.367401][ T8914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.405852][ T8914] EXT4-fs error (device loop3): ext4_get_first_dir_block:3538: inode #11: comm syz.3.1064: directory missing '.'
[  158.442284][ T8914] EXT4-fs (loop3): Remounting filesystem read-only
[  158.480245][ T8922] binder: Bad value for 'stats'
[  158.503811][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.863273][ T8934] loop4: detected capacity change from 0 to 40427
[  158.873721][ T8934] F2FS-fs (loop4): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  158.876509][ T8934] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  158.878981][ T8934] F2FS-fs (loop4): Image doesn't support compression
[  158.895723][ T8934] F2FS-fs (loop4): build fault injection rate: 690
[  158.897751][ T8934] F2FS-fs (loop4): build fault injection type: 0x35f7
[  158.900662][ T8934] F2FS-fs (loop4): invalid crc value
[  158.928406][ T8934] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.931626][ T8934] F2FS-fs (loop4): Start checkpoint disabled!
[  158.935051][ T8934] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0
[  158.937710][ T8934] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  158.940017][ T8934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  158.958387][ T8934] syz.4.1070: attempt to access beyond end of device
[  158.958387][ T8934] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  158.965434][ T8934] syz.4.1070: attempt to access beyond end of device
[  158.965434][ T8934] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  158.994555][ T8944] loop3: detected capacity change from 0 to 256
[  159.012508][   T26] kworker/u9:0: attempt to access beyond end of device
[  159.012508][   T26] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  159.018696][ T8944] exfat: Deprecated parameter 'namecase'
[  159.020552][ T8944] exfat: Deprecated parameter 'utf8'
[  159.025240][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  159.025253][   T26] Tainted: [L]=SOFTLOCKUP
[  159.025256][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  159.025261][   T26] Workqueue: writeback wb_workfn (flush-7:4)
[  159.025276][   T26] Call Trace:
[  159.025279][   T26]  <TASK>
[  159.025282][   T26]  dump_stack_lvl+0xe8/0x150
[  159.025295][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  159.025308][   T26]  f2fs_write_end_io+0xcdb/0xff0
[  159.025322][   T26]  __submit_merged_bio+0x256/0x700
[  159.025334][   T26]  __submit_merged_write_cond+0x3c9/0x4e0
[  159.025347][   T26]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  159.025364][   T26]  f2fs_write_data_pages+0x2975/0x35e0
[  159.025387][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.025402][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  159.025421][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  159.025439][   T26]  ? __lock_acquire+0x6b5/0x2cf0
[  159.025453][   T26]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  159.025462][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  159.025474][   T26]  do_writepages+0x32e/0x550
[  159.025487][   T26]  ? reacquire_held_locks+0x104/0x190
[  159.025497][   T26]  ? writeback_sb_inodes+0x477/0x1a20
[  159.025509][   T26]  __writeback_single_inode+0x133/0x11a0
[  159.025519][   T26]  ? do_raw_spin_unlock+0x4d/0x210
[  159.025528][   T26]  writeback_sb_inodes+0x992/0x1a20
[  159.025544][   T26]  ? __lock_acquire+0x6b5/0x2cf0
[  159.025555][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  159.025564][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  159.025585][   T26]  ? rcu_is_watching+0x15/0xb0
[  159.025598][   T26]  wb_writeback+0x456/0xb70
[  159.025609][   T26]  ? queue_io+0x1e1/0x4a0
[  159.025622][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  159.025630][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  159.025644][   T26]  wb_workfn+0x414/0xf50
[  159.025652][   T26]  ? look_up_lock_class+0x57/0x110
[  159.025667][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  159.025676][   T26]  ? do_raw_spin_lock+0x12b/0x2f0
[  159.025684][   T26]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  159.025697][   T26]  ? process_scheduled_works+0xa8d/0x18c0
[  159.025707][   T26]  ? process_scheduled_works+0xa8d/0x18c0
[  159.025717][   T26]  process_scheduled_works+0xb6e/0x18c0
[  159.025737][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  159.025748][   T26]  ? assign_work+0x3d5/0x5e0
[  159.025759][   T26]  worker_thread+0xa53/0xfc0
[  159.025810][   T26]  kthread+0x388/0x470
[  159.025818][   T26]  ? __pfx_worker_thread+0x10/0x10
[  159.025826][   T26]  ? __pfx_kthread+0x10/0x10
[  159.025833][   T26]  ret_from_fork+0x51e/0xb90
[  159.025844][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  159.025853][   T26]  ? __switch_to+0xc7d/0x1450
[  159.025863][   T26]  ? __pfx_kthread+0x10/0x10
[  159.025871][   T26]  ret_from_fork_asm+0x1a/0x30
[  159.025887][   T26]  </TASK>
[  159.025890][   T26] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  159.064901][ T8944] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  159.458152][ T8972] loop3: detected capacity change from 0 to 128
[  159.904093][ T9010] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  159.981914][ T6638] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  160.131969][ T6638] usb 4-1: Using ep0 maxpacket: 16
[  160.135373][ T6638] usb 4-1: unable to get BOS descriptor or descriptor too short
[  160.139200][ T6638] usb 4-1: config 9 has an invalid interface number: 7 but max is 0
[  160.142395][ T6638] usb 4-1: config 9 has no interface number 0
[  160.145351][ T6638] usb 4-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0
[  160.148791][ T6638] usb 4-1: config 9 interface 7 has no altsetting 0
[  160.153223][ T6638] usb 4-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de
[  160.156880][ T6638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.159955][ T6638] usb 4-1: Product: syz
[  160.161682][ T6638] usb 4-1: Manufacturer: syz
[  160.165067][ T6638] usb 4-1: SerialNumber: syz
[  160.172090][ T5842] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  160.325323][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64
[  160.330056][ T5842] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  160.341960][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.349796][ T5842] usb 5-1: config 0 descriptor??
[  160.352315][ T9012] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  160.407716][ T6638] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2
[  160.421477][ T6638] usb 4-1: USB disconnect, device number 21
[  160.562005][ T5842] ath6kl: Failed to submit usb control message: -71
[  160.564335][ T5842] ath6kl: unable to send the bmi data to the device: -71
[  160.566688][ T5842] ath6kl: Unable to send get target info: -71
[  160.581965][ T5842] ath6kl: Failed to init ath6kl core: -71
[  160.602135][ T5842] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  160.609266][ T5842] usb 5-1: USB disconnect, device number 14
[  161.166736][ T9041] loop4: detected capacity change from 0 to 1024
[  161.180164][ T9041] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  161.183482][ T9041] syz.4.1117: attempt to access beyond end of device
[  161.183482][ T9041] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[  161.189317][ T9041] Buffer I/O error on dev loop4, logical block 458752, async page read
[  161.193033][ T9041] syz.4.1117: attempt to access beyond end of device
[  161.193033][ T9041] loop4: rw=8388608, sector=917504, nr_sectors = 2 limit=1024
[  161.198149][ T9041] Buffer I/O error on dev loop4, logical block 458752, async page read
[  161.784690][ T9079] loop3: detected capacity change from 0 to 512
[  161.812042][ T9079] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  162.017237][ T9089] ./file0: Can't open blockdev
[  162.175502][   T31] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  162.345553][   T31] usb 5-1: Using ep0 maxpacket: 8
[  162.350858][   T31] usb 5-1: unable to get BOS descriptor or descriptor too short
[  162.356620][   T31] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  162.367904][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.371691][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.386038][   T31] usb 5-1: Product: syz
[  162.392254][   T31] usb 5-1: Manufacturer: ุ祻メ輭쮉䔢좖㘘쵕בּ쵶浱㏙䭗Ꜧ庵헭方둢り윮魁骵𭉪
[  162.402121][   T31] usb 5-1: SerialNumber: syz
[  163.305774][   T31] cdc_ncm 5-1:1.0: bind() failure
[  163.309836][   T31] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  163.313045][   T31] cdc_ncm 5-1:1.1: bind() failure
[  163.335771][   T31] usb 5-1: USB disconnect, device number 15
[  163.516503][ T9119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1152'.
[  163.532757][   T33] kauditd_printk_skb: 237 callbacks suppressed
[  163.532773][   T33] audit: type=1326 audit(1774968835.783:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.1145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  163.544623][   T33] audit: type=1326 audit(1774968835.803:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.1145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  163.554184][ T9123] Zero length message leads to an empty skb
[  163.588818][   T33] audit: type=1326 audit(1774968835.813:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.1145" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  163.611463][   T33] audit: type=1326 audit(1774968835.813:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.1145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  163.617955][ T9129] loop3: detected capacity change from 0 to 512
[  163.624439][   T33] audit: type=1326 audit(1774968835.813:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9120 comm="syz.3.1145" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18f59c819 code=0x7ffc0000
[  163.627176][ T9129] EXT4-fs: Ignoring removed nomblk_io_submit option
[  163.642388][ T9129] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  163.644886][ T9129] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  163.647893][ T9129] EXT4-fs (loop3): orphan cleanup on readonly fs
[  163.682138][ T9129] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  163.686473][ T9129] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  163.692458][ T9129] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  163.696475][ T9129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1155: bg 0: block 40: padding at end of block bitmap is not set
[  163.704442][ T9129] loop3: lost filesystem error report for type 5 error -117
[  163.708337][ T9129] EXT4-fs (loop3): Remounting filesystem read-only
[  163.713945][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  163.713961][    C0] EXT4-fs (loop3): initial error at time 1774968835: ext4_validate_block_bitmap:441
[  163.713983][    C0] EXT4-fs (loop3): last error at time 1774968835: ext4_validate_block_bitmap:441
[  163.735426][ T9129] EXT4-fs (loop3): 1 truncate cleaned up
[  163.739036][ T9129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  163.756157][ T9129] EXT4-fs (loop3): shut down requested (2)
[  163.776843][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.174415][ T9147] loop3: detected capacity change from 0 to 2048
[  164.188491][ T9147] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  164.269199][ T9152] loop3: detected capacity change from 0 to 4096
[  164.288304][ T9152] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  164.291251][ T9152] EXT4-fs (loop3): Test dummy encryption mode enabled
[  164.324533][ T9152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.346792][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.517433][ T9172] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1174'.
[  164.732684][ T9166] loop3: detected capacity change from 0 to 40427
[  164.740717][ T9166] F2FS-fs (loop3): invalid crc value
[  164.846174][ T9166] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  164.862073][ T9166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.880760][ T9192] loop4: detected capacity change from 0 to 4096
[  164.911144][ T9166] syz.3.1171: attempt to access beyond end of device
[  164.911144][ T9166] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  164.924878][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.924895][ T9166] Tainted: [L]=SOFTLOCKUP
[  164.924898][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.924904][ T9166] Call Trace:
[  164.924908][ T9166]  <TASK>
[  164.924912][ T9166]  dump_stack_lvl+0xe8/0x150
[  164.924928][ T9166]  f2fs_handle_critical_error+0x37c/0x540
[  164.924944][ T9166]  f2fs_write_end_io+0xcdb/0xff0
[  164.924962][ T9166]  __submit_merged_bio+0x256/0x700
[  164.924976][ T9166]  f2fs_submit_merged_write+0x284/0x390
[  164.924990][ T9166]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  164.925009][ T9166]  f2fs_sync_node_pages+0x14bf/0x1680
[  164.925028][ T9166]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  164.925058][ T9166]  f2fs_write_checkpoint+0xeb8/0x26a0
[  164.925089][ T9166]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  164.925096][ T9166]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  164.925123][ T9166]  ? down_write+0x16d/0x200
[  164.925134][ T9166]  ? __pfx_down_write+0x10/0x10
[  164.925144][ T9166]  ? uplift_priority+0xdb/0x730
[  164.925154][ T9166]  ? __pfx_folio_mark_accessed+0x10/0x10
[  164.925169][ T9166]  f2fs_issue_checkpoint+0x456/0x790
[  164.925183][ T9166]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  164.925191][ T9166]  ? from_kgid+0x1ca/0x660
[  164.925220][ T9166]  ? f2fs_sync_fs+0x1f0/0x400
[  164.925232][ T9166]  f2fs_unlink+0x653/0xb30
[  164.925245][ T9166]  ? __pfx_f2fs_unlink+0x10/0x10
[  164.925256][ T9166]  ? __pfx_f2fs_empty_dir+0x10/0x10
[  164.925265][ T9166]  ? down_write+0x16d/0x200
[  164.925281][ T9166]  vfs_rmdir+0x3fd/0x6e0
[  164.925294][ T9166]  filename_rmdir+0x292/0x520
[  164.925306][ T9166]  ? __pfx_filename_rmdir+0x10/0x10
[  164.925318][ T9166]  ? do_getname+0x151/0x250
[  164.925330][ T9166]  __se_sys_rmdir+0x2e/0x140
[  164.925341][ T9166]  do_syscall_64+0x14d/0xf80
[  164.925350][ T9166]  ? trace_irq_disable+0x3b/0x150
[  164.925357][ T9166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.925367][ T9166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.925375][ T9166] RIP: 0033:0x7fb18f59c819
[  164.925383][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  164.925390][ T9166] RSP: 002b:00007fb1904a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  164.925399][ T9166] RAX: ffffffffffffffda RBX: 00007fb18f815fa0 RCX: 00007fb18f59c819
[  164.925404][ T9166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  164.925409][ T9166] RBP: 00007fb18f632c91 R08: 0000000000000000 R09: 0000000000000000
[  164.925413][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  164.925418][ T9166] R13: 00007fb18f816038 R14: 00007fb18f815fa0 R15: 00007ffec10b3358
[  164.925431][ T9166]  </TASK>
[  164.925434][ T9166] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  165.024976][ T9166] CPU: 1 UID: 0 PID: 9166 Comm: syz.3.1171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  165.024993][ T9166] Tainted: [L]=SOFTLOCKUP
[  165.024995][ T9166] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.025000][ T9166] Call Trace:
[  165.025005][ T9166]  <TASK>
[  165.025009][ T9166]  dump_stack_lvl+0xe8/0x150
[  165.025025][ T9166]  f2fs_handle_critical_error+0x37c/0x540
[  165.025040][ T9166]  f2fs_write_end_io+0xcdb/0xff0
[  165.025066][ T9166]  __submit_merged_bio+0x256/0x700
[  165.025099][ T9166]  f2fs_submit_merged_write+0x284/0x390
[  165.025120][ T9166]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  165.025151][ T9166]  f2fs_sync_node_pages+0x14bf/0x1680
[  165.025184][ T9166]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  165.025235][ T9166]  f2fs_write_checkpoint+0xeb8/0x26a0
[  165.025275][ T9166]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  165.025285][ T9166]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  165.025311][ T9166]  ? down_write+0x16d/0x200
[  165.025321][ T9166]  ? __pfx_down_write+0x10/0x10
[  165.025331][ T9166]  ? uplift_priority+0xdb/0x730
[  165.025341][ T9166]  ? __pfx_folio_mark_accessed+0x10/0x10
[  165.025354][ T9166]  f2fs_issue_checkpoint+0x456/0x790
[  165.025366][ T9166]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  165.025373][ T9166]  ? from_kgid+0x1ca/0x660
[  165.025402][ T9166]  ? f2fs_sync_fs+0x1f0/0x400
[  165.025413][ T9166]  f2fs_unlink+0x653/0xb30
[  165.025426][ T9166]  ? __pfx_f2fs_unlink+0x10/0x10
[  165.025437][ T9166]  ? __pfx_f2fs_empty_dir+0x10/0x10
[  165.025446][ T9166]  ? down_write+0x16d/0x200
[  165.025462][ T9166]  vfs_rmdir+0x3fd/0x6e0
[  165.025476][ T9166]  filename_rmdir+0x292/0x520
[  165.025488][ T9166]  ? __pfx_filename_rmdir+0x10/0x10
[  165.025500][ T9166]  ? do_getname+0x151/0x250
[  165.025512][ T9166]  __se_sys_rmdir+0x2e/0x140
[  165.025523][ T9166]  do_syscall_64+0x14d/0xf80
[  165.025532][ T9166]  ? trace_irq_disable+0x3b/0x150
[  165.025539][ T9166]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.025549][ T9166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.025558][ T9166] RIP: 0033:0x7fb18f59c819
[  165.025567][ T9166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.025573][ T9166] RSP: 002b:00007fb1904a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054
[  165.025582][ T9166] RAX: ffffffffffffffda RBX: 00007fb18f815fa0 RCX: 00007fb18f59c819
[  165.025587][ T9166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400
[  165.025592][ T9166] RBP: 00007fb18f632c91 R08: 0000000000000000 R09: 0000000000000000
[  165.025597][ T9166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  165.025601][ T9166] R13: 00007fb18f816038 R14: 00007fb18f815fa0 R15: 00007ffec10b3358
[  165.025615][ T9166]  </TASK>
[  165.025620][ T9166] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  165.299421][ T9207] tipc: Started in network mode
[  165.301558][ T9207] tipc: Node identity 67f, cluster identity 4711
[  165.303816][ T9207] tipc: Node number set to 1663
[  165.305957][ T9207] tipc: Cannot configure node identity twice
[  165.471985][ T5862] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  165.476527][ T9209] loop3: detected capacity change from 0 to 32768
[  165.486751][ T9209] JBD2: Ignoring recovery information on journal
[  165.509885][ T9209] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  165.534850][ T9209] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1792 has bad signature 
[  165.540469][ T9209] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  165.551937][ T9209] OCFS2: Returning error to the calling process.
[  165.554194][ T9209] (syz.3.1188,9209,1):ocfs2_search_chain:1923 ERROR: status = -5
[  165.557342][ T9209] (syz.3.1188,9209,1):ocfs2_search_chain:2011 ERROR: status = -5
[  165.559939][ T9209] (syz.3.1188,9209,1):ocfs2_claim_suballoc_bits:2098 ERROR: status = -5
[  165.563271][ T9209] (syz.3.1188,9209,1):ocfs2_claim_suballoc_bits:2151 ERROR: status = -5
[  165.566484][ T9209] (syz.3.1188,9209,1):ocfs2_claim_new_inode:2392 ERROR: status = -5
[  165.569488][ T9209] (syz.3.1188,9209,1):ocfs2_claim_new_inode:2407 ERROR: status = -5
[  165.575771][ T9209] (syz.3.1188,9209,1):ocfs2_mknod_locked:642 ERROR: status = -5
[  165.578680][ T9209] (syz.3.1188,9209,1):ocfs2_mknod:389 ERROR: status = -5
[  165.581669][ T9209] (syz.3.1188,9209,1):ocfs2_mknod:506 ERROR: status = -5
[  165.585054][ T9209] (syz.3.1188,9209,1):ocfs2_create:679 ERROR: status = -5
[  165.622519][ T5922] ocfs2: Unmounting device (7,3) on (node local)
[  165.660094][ T5862] usb 5-1: Using ep0 maxpacket: 16
[  165.682889][ T5862] usb 5-1: unable to get BOS descriptor or descriptor too short
[  165.691628][ T5862] usb 5-1: unable to read config index 0 descriptor/start: -71
[  165.709649][ T5862] usb 5-1: can't read configurations, error -71
[  165.769238][ T9218] loop3: detected capacity change from 0 to 512
[  165.804430][ T9218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.817291][ T9218] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  165.876835][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.854871][ T9250] loop4: detected capacity change from 0 to 2048
[  166.865873][ T9250] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  166.874796][ T5818] udevd[5818]: incorrect nilfs2 checksum on /dev/loop4
[  166.880040][ T9250] NILFS (loop4): too large checkpoint size: 1741 bytes
[  166.883198][ T9250] NILFS (loop4): error -22 while loading super root
[  167.083603][ T9224] loop3: detected capacity change from 0 to 262144
[  167.122850][ T9224] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1193 (9224)
[  167.140095][ T9224] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  167.144154][ T9224] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  167.272896][ T9224] BTRFS info (device loop3): deleted orphan free space tree entries
[  167.276057][ T9224] BTRFS info (device loop3): checking UUID tree
[  167.279116][ T9224] BTRFS info (device loop3): enabling ssd optimizations
[  167.281991][ T9224] BTRFS info (device loop3): turning on async discard
[  167.284600][ T9224] BTRFS info (device loop3): enabling free space tree
[  167.290173][ T9288] kAFS: unable to lookup cell '(,c'
[  167.367344][ T5922] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  167.501905][ T6638] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  167.532218][ T9296] netlink: 'syz.3.1220': attribute type 3 has an invalid length.
[  167.673064][ T6638] usb 5-1: Using ep0 maxpacket: 32
[  167.678553][ T6638] usb 5-1: config 7 has an invalid interface number: 58 but max is 0
[  167.681723][ T6638] usb 5-1: config 7 has no interface number 0
[  167.691748][ T6638] usb 5-1: config 7 interface 58 has no altsetting 0
[  167.709490][ T6638] usb 5-1: New USB device found, idVendor=0419, idProduct=aaf5, bcdDevice= 1.00
[  167.712544][ T6638] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.715209][ T6638] usb 5-1: Product: syz
[  167.716835][ T6638] usb 5-1: Manufacturer: syz
[  167.718496][ T6638] usb 5-1: SerialNumber: syz
[  167.945634][ T6638] usb-storage 5-1:7.58: USB Mass Storage device detected
[  167.954351][ T6638] usb-storage 5-1:7.58: Quirks match for vid 0419 pid aaf5: a0
[  167.985292][ T9328] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  168.026539][ T6638] usb 5-1: USB disconnect, device number 18
[  168.181942][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  168.341988][    T9] usb 4-1: Using ep0 maxpacket: 8
[  168.349051][    T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  168.352786][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[  168.356293][    T9] usb 4-1: Product: syz
[  168.358030][    T9] usb 4-1: Manufacturer: syz
[  168.359932][    T9] usb 4-1: SerialNumber: syz
[  168.370805][    T9] usb 4-1: config 0 descriptor??
[  168.375260][    T9] usbtest 4-1:0.0: FX2 device
[  168.377201][    T9] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  168.585333][    T9] usb 4-1: USB disconnect, device number 22
[  169.521060][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1245'.
[  169.664562][ T9363] loop3: detected capacity change from 0 to 22
[  169.667085][ T9363] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  169.678089][ T9363] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  171.734061][ T9396] loop3: detected capacity change from 0 to 32768
[  171.737795][ T9396] BTRFS error: failed to parse compression option 'zlib:nobarrier'
[  171.995982][ T9418] loop3: detected capacity change from 0 to 8
[  172.108324][ T9423] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  172.111511][ T9423] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  172.884620][ T9422] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  172.887693][ T9422] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  172.896706][ T9422] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  172.900746][ T9422] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  172.903476][ T9422] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  172.907056][ T9422] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  173.163451][   T31] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  173.284727][ T9448] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  173.289597][ T9448] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  173.294242][ T9448] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  173.316086][   T31] usb 5-1: Using ep0 maxpacket: 8
[  173.322571][   T31] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  173.327109][   T31] usb 5-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  173.334846][   T31] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[  173.339035][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.342859][   T31] usb 5-1: Product: syz
[  173.344735][   T31] usb 5-1: Manufacturer: syz
[  173.347528][   T31] usb 5-1: SerialNumber: syz
[  173.356558][   T31] r8152-cfgselector 5-1: Unknown version 0x0000
[  173.587475][   T31] r8152-cfgselector 5-1: USB disconnect, device number 19
[  173.945137][ T9478] loop3: detected capacity change from 0 to 1024
[  173.962772][ T9478] EXT4-fs: Ignoring removed bh option
[  173.966850][ T9478] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  173.988941][ T9478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.001711][   T33] audit: type=1800 audit(1774968846.253:438): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1301" name="file1" dev="loop3" ino=15 res=0 errno=0
[  174.020435][ T5922] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.121943][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  174.194766][ T9487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'.
[  174.269351][ T9493] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received
[  174.366346][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1310'.
[  174.370156][ T9501] block nbd0: Unsupported socket: should be TCP or UNIX.
[  174.802223][    T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  174.922235][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout
[  174.962315][    T9] usb 5-1: Using ep0 maxpacket: 8
[  174.969021][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  174.974000][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  174.987634][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  174.999892][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  175.011529][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  175.017844][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  175.022811][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.043178][    T9] usb 5-1: config 0 descriptor??
[  175.060023][    T9] hub 5-1:0.0: bad descriptor, ignoring hub
[  175.068175][    T9] hub 5-1:0.0: probe with driver hub failed with error -5
[  175.090602][ T5820] Bluetooth: hci3: urb ffff888166388f00 submission failed (90)
[  175.273832][ T5876] usb 5-1: USB disconnect, device number 20
[  175.694641][ T9532] loop3: detected capacity change from 0 to 40427
[  175.704084][ T9532] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  175.706689][ T9532] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  175.715231][ T9532] F2FS-fs (loop3): invalid crc_offset: 33558524
[  175.751489][ T9532] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.758348][ T9532] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  175.760831][ T9532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  175.806426][ T9532] F2FS-fs (loop3): Encrypt feature is off
[  176.058637][ T9554] loop3: detected capacity change from 0 to 2048
[  176.069201][ T9554] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  176.073338][ T9554] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  176.077265][ T9554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.202002][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  176.498266][ T9553] loop4: detected capacity change from 0 to 32768
[  176.513320][ T9553] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1333 (9553)
[  176.535618][ T9553] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  176.542676][ T9553] BTRFS info (device loop4): using xxhash64 checksum algorithm
[  176.649206][ T9553] BTRFS info (device loop4): enabling ssd optimizations
[  176.656885][ T9553] BTRFS info (device loop4): turning on async discard
[  176.666771][ T9553] BTRFS info (device loop4): enabling free space tree
[  176.833150][ T6545] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  177.002273][ T5820] Bluetooth: hci1: command 0x0c1a tx timeout
[  177.684402][ T9597] loop4: detected capacity change from 0 to 32768
[  177.692553][ T9597] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1348 (9597)
[  177.709206][ T9597] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.716048][ T9597] BTRFS info (device loop4): using sha256 checksum algorithm
[  177.773387][ T9597] BTRFS info (device loop4): rebuilding free space tree
[  177.801603][ T9597] BTRFS info (device loop4): enabling ssd optimizations
[  177.805114][ T9597] BTRFS info (device loop4): using spread ssd allocation scheme
[  177.808118][ T9597] BTRFS info (device loop4): enabling free space tree
[  177.810952][ T9597] BTRFS info (device loop4): force clearing of disk cache
[  177.814266][ T9597] BTRFS info (device loop4): enabling auto defrag
[  177.816970][ T9597] BTRFS info (device loop4): max_inline set to 0
[  177.922536][   T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  178.007326][ T6545] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.081943][ T9624] loop3: detected capacity change from 0 to 1024
[  178.372154][ T5820] Bluetooth: hci2: command 0x0401 tx timeout
[  178.543342][ T9630] loop4: detected capacity change from 0 to 32768
[  178.554343][ T9630] 
[  178.554343][ T9630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.554343][ T9630] 
[  178.578805][   T32] ERROR: (device loop4): diWrite: ixpxd invalid
[  178.578805][   T32] 
[  178.595427][   T32] ERROR: (device loop4): txCommit: 
[  178.595427][   T32] 
[  178.598078][   T32] jfs_write_inode: jfs_commit_inode failed!
[  178.601254][ T6545] 
[  178.601254][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.601254][ T6545] 
[  178.617827][ T6545] 
[  178.617827][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  178.617827][ T6545] 
[  179.201204][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout
[  179.437040][ T9655] loop3: detected capacity change from 0 to 4096
[  179.540025][ T9657] loop3: detected capacity change from 0 to 128
[  179.916798][ T9665] loop4: detected capacity change from 0 to 32768
[  179.921788][ T9665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1370 (9665)
[  179.934182][ T9665] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.938709][ T9665] BTRFS info (device loop4): using crc32c checksum algorithm
[  180.003201][ T8882] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0
[  180.032282][ T9665] BTRFS warning (device loop4): couldn't read tree root
[  180.042056][ T9665] BTRFS warning (device loop4): try to load backup roots slot 1
[  180.052588][ T8882] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0
[  180.068352][ T9665] BTRFS warning (device loop4): couldn't read tree root
[  180.071175][ T9665] BTRFS warning (device loop4): try to load backup roots slot 2
[  180.088878][ T8882] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  180.105268][ T9665] BTRFS warning (device loop4): couldn't read tree root
[  180.108117][ T9665] BTRFS warning (device loop4): try to load backup roots slot 3
[  180.167855][ T9665] BTRFS info (device loop4): checking UUID tree
[  180.193848][ T9665] BTRFS info (device loop4): setting nodatasum
[  180.196313][ T9665] BTRFS info (device loop4): enabling ssd optimizations
[  180.198789][ T9665] BTRFS info (device loop4): turning on flush-on-commit
[  180.201494][ T9665] BTRFS info (device loop4): turning on async discard
[  180.231886][ T9665] BTRFS info (device loop4): enabling free space tree
[  180.234020][ T9665] BTRFS info (device loop4): trying to use backup root at mount time
[  180.236948][ T9665] BTRFS info (device loop4): max_inline set to 0
[  180.298727][ T6545] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.702523][ T9661] comedi comedi2: reset error (fatal)
[  180.868528][ T9699] loop4: detected capacity change from 0 to 32768
[  180.889735][ T9699] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.982860][ T9699] XFS (loop4): Ending clean mount
[  181.058102][ T6545] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  181.298954][ T9719] syz_tun: entered promiscuous mode
[  181.301223][ T9719] macvtap1: entered promiscuous mode
[  181.316396][ T9719] syz_tun: left promiscuous mode
[  182.528526][ T9735] loop3: detected capacity change from 0 to 40427
[  182.537399][ T9735] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  182.540586][ T9735] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  182.545011][ T9735] F2FS-fs (loop3): invalid crc value
[  182.656136][ T9735] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  182.666537][ T9735] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  182.669806][ T9735] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  182.695984][ T9735] syz.3.1391: attempt to access beyond end of device
[  182.695984][ T9735] loop3: rw=8390659, sector=36912, nr_sectors = 8152 limit=40427
[  182.702734][ T9735] syz.3.1391: attempt to access beyond end of device
[  182.702734][ T9735] loop3: rw=8390659, sector=45096, nr_sectors = 85976 limit=40427
[  182.737249][ T9735] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5
[  182.740646][ T9735] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5
[  183.364387][ T9755] loop4: detected capacity change from 0 to 4096
[  183.371164][ T9755] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  183.399352][ T9755] ntfs3(loop4): ino=19, mi_enum_attr
[  183.401049][ T9755] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  183.572131][   T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  183.680659][ T9773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1406'.
[  183.825034][   T10] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  183.828480][   T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  183.832867][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  183.836402][   T10] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  183.840812][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  183.853347][   T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  183.866323][   T10] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  183.869920][   T10] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  183.873580][   T10] usb 4-1: Product: syz
[  183.875219][   T10] usb 4-1: Manufacturer: syz
[  183.896114][ T9757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  183.901501][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  183.904191][   T10] cdc_wdm 4-1:1.0: skipping garbage
[  183.907705][   T10] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  183.910009][   T10] cdc_wdm 4-1:1.0: Unknown control protocol
[  184.303671][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.305803][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.308003][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.310285][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.312485][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.314504][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.316619][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.318579][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.320667][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.322652][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.324720][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.326768][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.328754][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.330794][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.332854][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.333801][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.338334][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.338395][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.341433][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.345976][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.348461][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71
[  184.350501][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes
[  184.521340][ T5876] usb 4-1: USB disconnect, device number 23
[  184.521492][    C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  184.523986][ T9757] cdc_wdm 4-1:1.0: Tx URB error: -19
[  184.535767][ T9791] cdc_wdm 4-1:1.0: Tx URB error: -19
[  184.806906][ T9800] dummy0: entered promiscuous mode
[  184.809580][ T9799] dummy0: left promiscuous mode
[  184.818095][ T9802] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  184.820608][ T9802] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  184.923032][ T9812] loop4: detected capacity change from 0 to 512
[  184.926507][ T9812] EXT4-fs: Ignoring removed mblk_io_submit option
[  184.960112][ T9812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.964494][ T9812] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.994190][ T6545] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.080463][ T9819] netlink: 'syz.4.1423': attribute type 1 has an invalid length.
[  185.083759][ T9819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1423'.
[  185.141752][ T9823] netlink: 'syz.4.1424': attribute type 20 has an invalid length.
[  185.251303][ T9829] loop4: detected capacity change from 0 to 128
[  185.259260][ T9829] zonefs: Bad value for 'errors'
[  185.304211][ T9832] loop3: detected capacity change from 0 to 64
[  185.315850][ T9832] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  185.328245][ T9832] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop3
[  185.572138][ T9851] loop4: detected capacity change from 0 to 256
[  185.605148][ T9851] FAT-fs (loop4): Directory bread(block 64) failed
[  185.610059][ T9851] FAT-fs (loop4): Directory bread(block 65) failed
[  185.614184][ T9851] FAT-fs (loop4): Directory bread(block 66) failed
[  185.617001][ T9851] FAT-fs (loop4): Directory bread(block 67) failed
[  185.619911][ T9851] FAT-fs (loop4): Directory bread(block 68) failed
[  185.625882][ T9851] FAT-fs (loop4): Directory bread(block 69) failed
[  185.628630][ T9851] FAT-fs (loop4): Directory bread(block 70) failed
[  185.631386][ T9851] FAT-fs (loop4): Directory bread(block 71) failed
[  185.637425][ T9851] FAT-fs (loop4): Directory bread(block 72) failed
[  185.640266][ T9851] FAT-fs (loop4): Directory bread(block 73) failed
[  185.705395][ T9855] syz_tun: entered allmulticast mode
[  185.776483][ T9859] netlink: 'syz.4.1441': attribute type 10 has an invalid length.
[  185.802844][ T9859] team0: Port device dummy0 added
[  186.194836][ T5820] Bluetooth: hci1: Malformed Event: 0x02
[  186.511976][ T5842] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  186.664833][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short
[  186.668401][ T5842] usb 4-1: not running at top speed; connect to a high speed hub
[  186.672288][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.676148][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  186.681713][ T5842] usb 4-1: string descriptor 0 read error: -22
[  186.683896][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  186.686805][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.696739][ T5842] usb 4-1: 0:2 : does not exist
[  187.512424][ T5842] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  187.517920][ T5842] usb 4-1: 5:0: failed to get current value for ch 1 (-22)
[  187.537469][ T5842] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5)
[  187.553290][ T5842] usb 4-1: USB disconnect, device number 24
[  187.693411][ T9907] overlayfs: failed to clone upperpath
[  188.053951][   T33] audit: type=1326 audit(1774968860.313:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.073957][   T33] audit: type=1326 audit(1774968860.313:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.103010][   T33] audit: type=1326 audit(1774968860.323:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.110167][   T33] audit: type=1326 audit(1774968860.323:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.130424][   T33] audit: type=1326 audit(1774968860.323:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.149036][   T33] audit: type=1326 audit(1774968860.343:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.156129][   T33] audit: type=1326 audit(1774968860.343:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5300d5d04e code=0x7ffc0000
[  188.166934][   T33] audit: type=1326 audit(1774968860.343:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.176667][   T33] audit: type=1326 audit(1774968860.343:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9933 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.236441][   T33] audit: type=1326 audit(1774968860.493:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9936 comm="syz.5.1477" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5300d9c819 code=0x7ffc0000
[  188.361949][ T5876] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  188.513954][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  188.518673][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.523112][ T5876] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  188.530882][ T5876] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40
[  188.534243][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.536971][ T5876] usb 4-1: Product: syz
[  188.538430][ T5876] usb 4-1: Manufacturer: syz
[  188.539985][ T5876] usb 4-1: SerialNumber: syz
[  188.760987][ T5876] snd-ua101 4-1:1.1: sample format descriptor not found
[  188.771087][ T5876] snd-ua101 4-1:1.0: invalid num_altsetting
[  188.787688][ T5876] usb 4-1: USB disconnect, device number 25
[  188.806533][ T9959] loop4: detected capacity change from 0 to 8192
[  188.869718][ T9959] FAT-fs (loop4): error, clusters badly computed (2 != 1)
[  188.874931][ T9959] FAT-fs (loop4): Filesystem has been set read-only
[  189.362336][ T5862] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  189.515402][ T5862] usb 5-1: config 0 has an invalid interface number: 84 but max is 0
[  189.518883][ T5862] usb 5-1: config 0 has no interface number 0
[  189.521389][ T5862] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64
[  189.527743][ T5862] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  189.535228][ T5862] usb 5-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0
[  189.539254][ T5862] usb 5-1: config 0 interface 84 has no altsetting 0
[  189.542333][ T5862] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05
[  189.546108][ T5862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.551260][ T5862] usb 5-1: config 0 descriptor??
[  189.554417][ T9969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  189.559241][ T5862] option 5-1:0.84: GSM modem (1-port) converter detected
[  189.572622][ T5842] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  189.770675][ T5876] usb 5-1: USB disconnect, device number 21
[  189.776182][ T5876] option 5-1:0.84: device disconnected
[  190.262281][ T5842] usb 4-1: Using ep0 maxpacket: 32
[  190.267967][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short
[  190.272280][ T5842] usb 4-1: config 39 has an invalid interface number: 39 but max is 0
[  190.275612][ T5842] usb 4-1: config 39 has no interface number 0
[  190.278172][ T5842] usb 4-1: config 39 interface 39 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 8
[  190.282450][ T5842] usb 4-1: config 39 interface 39 has no altsetting 0
[  190.287991][ T5842] usb 4-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=2f.47
[  190.291637][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.295039][ T5842] usb 4-1: Product: syz
[  190.296788][ T5842] usb 4-1: Manufacturer: syz
[  190.298700][ T5842] usb 4-1: SerialNumber: syz
[  190.303677][ T9973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  190.434774][ T9981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'.
[  190.529590][ T5842] usb 4-1: BOGUS urb xfer, pipe 1 != type 3
[  190.533497][ T5842]  (null): radio-mr800 - initialization failed
[  190.536100][ T5842] radio-mr800 4-1:39.39: probe with driver radio-mr800 failed with error -71
[  190.539910][ T5842] usbhid 4-1:39.39: couldn't find an input interrupt endpoint
[  190.545664][ T5842] usb 4-1: USB disconnect, device number 26
[  190.844456][ T5842] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  190.991882][ T5842] usb 5-1: Using ep0 maxpacket: 32
[  190.995436][ T5842] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.999035][ T5842] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.004276][ T5842] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  191.007580][ T5842] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  191.010425][ T5842] usb 5-1: Product: syz
[  191.011759][ T5842] usb 5-1: Manufacturer: syz
[  191.017161][ T5842] hub 5-1:4.0: USB hub found
[  191.218704][ T5842] hub 5-1:4.0: 3 ports detected
[  191.301955][ T5876] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  191.451917][ T5876] usb 4-1: Using ep0 maxpacket: 16
[  191.463171][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short
[  191.467219][ T5876] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 107, changing to 7
[  191.472590][ T5876] usb 4-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40
[  191.476085][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.485205][ T5876] usb 4-1: Product: syz
[  191.486563][ T5876] usb 4-1: Manufacturer: syz
[  191.488016][ T5876] usb 4-1: SerialNumber: syz
[  191.623398][ T5842] hub 5-1:4.0: set hub depth failed
[  191.631915][ T5842] usb 5-1: USB disconnect, device number 22
[  191.724800][ T5876] usb 4-1: USB disconnect, device number 27
[  192.821903][ T5876] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  192.980349][ T5876] usb 5-1: config 9 has an invalid interface number: 239 but max is 0
[  192.985181][ T5876] usb 5-1: config 9 has no interface number 0
[  192.988134][ T5876] usb 5-1: config 9 interface 239 altsetting 7 bulk endpoint 0xE has invalid maxpacket 16
[  192.993332][ T5876] usb 5-1: config 9 interface 239 has no altsetting 0
[  193.004067][ T5876] usb 5-1: New USB device found, idVendor=0bfd, idProduct=011a, bcdDevice=e9.99
[  193.007951][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.011393][ T5876] usb 5-1: Product: syz
[  193.016317][ T5876] usb 5-1: Manufacturer: syz
[  193.018261][ T5876] usb 5-1: SerialNumber: syz
[  193.067712][T10059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  193.308470][ T5876] kvaser_usb 5-1:9.239: error -ENODEV: Cannot get usb endpoint(s)
[  193.348603][ T5876] usb 5-1: USB disconnect, device number 23
[  193.958830][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  193.958995][   T33] audit: type=1326 audit(2000000002.260:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.4.1543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  194.001983][   T33] audit: type=1326 audit(2000000002.260:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.4.1543" exe="/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  194.009077][   T33] audit: type=1326 audit(2000000002.260:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.4.1543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  194.026239][   T33] audit: type=1326 audit(2000000002.260:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.4.1543" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94939c819 code=0x7ffc0000
[  194.418828][ T5876] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  194.593696][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.597728][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  194.603936][ T5876] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  194.607498][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.626817][ T5876] usb 5-1: config 0 descriptor??
[  195.078981][ T5876] Bluetooth: Can't get version to change to load ram patch err
[  195.081894][ T5876] Bluetooth: Loading patch file failed
[  195.084176][ T5876] ath3k 5-1:0.0: probe with driver ath3k failed with error -71
[  195.090302][ T5876] usb 5-1: USB disconnect, device number 24
[  195.578197][ T5820] Bluetooth: hci1: unexpected event 0x01 length: 7 > 1
[  195.794573][T10131] loop3: detected capacity change from 0 to 32768
[  195.816210][T10147] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  195.816210][T10147] The task syz.5.1570 (10147) triggered the difference, watch for misbehavior.
[  195.844442][T10131] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.861301][T10131] XFS (loop3): Ending clean mount
[  195.876421][ T5922] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.036900][T10158] loop4: detected capacity change from 0 to 32768
[  196.163402][ T6545] syz_tun (unregistering): left allmulticast mode
[  196.257916][  T115] ------------[ cut here ]------------
[  196.260001][  T115] lp >= size || lp < 0
[  196.260009][  T115] WARNING: fs/jfs/jfs_dmap.c:2875 at dbAdjTree+0x454/0x4e0, CPU#1: jfsCommit/115
[  196.264389][  T115] Modules linked in:
[  196.265865][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.269365][  T115] Tainted: [L]=SOFTLOCKUP
[  196.270895][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.274287][  T115] RIP: 0010:dbAdjTree+0x454/0x4e0
[  196.275979][  T115] Code: 5a ff ff ff e8 bd 3a 6a fe eb 05 e8 b6 3a 6a fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 53 94 56 08 cc e8 9d 3a 6a fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  196.282392][  T115] RSP: 0018:ffffc900030d7588 EFLAGS: 00010293
[  196.284452][  T115] RAX: ffffffff835b7453 RBX: ffff8881bb122010 RCX: ffff888169e2d7c0
[  196.287224][  T115] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  196.289862][  T115] RBP: 0000000000020056 R08: ffffea0006ec4887 R09: 1ffffd4000dd8910
[  196.293059][  T115] R10: dffffc0000000000 R11: fffff94000dd8911 R12: ffff8881bb122018
[  196.295750][  T115] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  196.298231][  T115] FS:  0000000000000000(0000) GS:ffff8882a9457000(0000) knlGS:0000000000000000
[  196.301439][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  196.304051][  T115] CR2: 000000110c300a7e CR3: 0000000104386000 CR4: 00000000000006f0
[  196.306581][  T115] Call Trace:
[  196.307693][  T115]  <TASK>
[  196.308689][  T115]  ? __pfx_lock_metapage+0x10/0x10
[  196.310388][  T115]  dbJoin+0x238/0x300
[  196.312089][  T115]  dbFreeBits+0x4e1/0xdb0
[  196.313876][  T115]  dbFree+0x336/0x650
[  196.315199][  T115]  txFreeMap+0x9e6/0xde0
[  196.316649][  T115]  ? do_raw_spin_unlock+0x4d/0x210
[  196.318293][  T115]  xtTruncate+0xd38/0x2f20
[  196.319838][  T115]  ? __pfx_xtTruncate+0x10/0x10
[  196.321544][  T115]  ? __lock_acquire+0x6b5/0x2cf0
[  196.323259][  T115]  ? __asan_memset+0x22/0x50
[  196.324877][  T115]  ? __dquot_initialize+0x21b/0xd30
[  196.326610][  T115]  jfs_free_zero_link+0x35b/0x4c0
[  196.328256][  T115]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  196.330205][  T115]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  196.332619][  T115]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.334337][  T115]  jfs_evict_inode+0x363/0x440
[  196.335940][  T115]  ? evict+0x612/0xb10
[  196.337282][  T115]  ? __pfx_jfs_evict_inode+0x10/0x10
[  196.339003][  T115]  evict+0x61e/0xb10
[  196.340327][  T115]  ? __pfx_evict+0x10/0x10
[  196.341971][  T115]  ? _raw_spin_unlock+0x28/0x50
[  196.343765][  T115]  ? iput+0xb25/0xe80
[  196.345133][  T115]  jfs_lazycommit+0x43d/0xaa0
[  196.346825][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  196.348534][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  196.350558][  T115]  ? __kthread_parkme+0x7a/0x1f0
[  196.352310][  T115]  kthread+0x388/0x470
[  196.353731][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  196.355502][  T115]  ? __pfx_kthread+0x10/0x10
[  196.357070][  T115]  ret_from_fork+0x51e/0xb90
[  196.358557][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  196.360184][  T115]  ? __switch_to+0xc7d/0x1450
[  196.361880][  T115]  ? __pfx_kthread+0x10/0x10
[  196.363403][  T115]  ret_from_fork_asm+0x1a/0x30
[  196.365022][  T115]  </TASK>
[  196.366086][  T115] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  196.368543][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.372064][  T115] Tainted: [L]=SOFTLOCKUP
[  196.373533][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  196.376888][  T115] Call Trace:
[  196.377965][  T115]  <TASK>
[  196.378984][  T115]  vpanic+0x56c/0xa60
[  196.380288][  T115]  ? __pfx__printk+0x10/0x10
[  196.381830][  T115]  ? __pfx_vpanic+0x10/0x10
[  196.383328][  T115]  ? is_bpf_text_address+0x292/0x2b0
[  196.385320][  T115]  ? is_bpf_text_address+0x26/0x2b0
[  196.387487][  T115]  panic+0xc5/0xd0
[  196.389007][  T115]  ? __pfx_panic+0x10/0x10
[  196.390591][  T115]  ? ret_from_fork_asm+0x1a/0x30
[  196.392177][  T115]  __warn+0x315/0x4f0
[  196.393452][  T115]  ? dbAdjTree+0x454/0x4e0
[  196.394887][  T115]  ? dbAdjTree+0x454/0x4e0
[  196.396303][  T115]  __report_bug+0x29a/0x540
[  196.397783][  T115]  ? dbAdjTree+0x454/0x4e0
[  196.399251][  T115]  ? __pfx___report_bug+0x10/0x10
[  196.400883][  T115]  ? folio_try_get+0x1c/0x340
[  196.402417][  T115]  ? filemap_get_entry+0xca/0x320
[  196.404107][  T115]  ? dbAdjTree+0x454/0x4e0
[  196.405571][  T115]  report_bug+0x16a/0x220
[  196.407009][  T115]  ? dbAdjTree+0x454/0x4e0
[  196.408453][  T115]  ? dbAdjTree+0x456/0x4e0
[  196.409916][  T115]  handle_bug+0x9c/0x200
[  196.411317][  T115]  exc_invalid_op+0x1a/0x50
[  196.412914][  T115]  asm_exc_invalid_op+0x1a/0x20
[  196.414476][  T115] RIP: 0010:dbAdjTree+0x454/0x4e0
[  196.416110][  T115] Code: 5a ff ff ff e8 bd 3a 6a fe eb 05 e8 b6 3a 6a fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d e9 53 94 56 08 cc e8 9d 3a 6a fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  196.422359][  T115] RSP: 0018:ffffc900030d7588 EFLAGS: 00010293
[  196.424343][  T115] RAX: ffffffff835b7453 RBX: ffff8881bb122010 RCX: ffff888169e2d7c0
[  196.426921][  T115] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  196.429564][  T115] RBP: 0000000000020056 R08: ffffea0006ec4887 R09: 1ffffd4000dd8910
[  196.432397][  T115] R10: dffffc0000000000 R11: fffff94000dd8911 R12: ffff8881bb122018
[  196.435690][  T115] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  196.438959][  T115]  ? dbAdjTree+0x453/0x4e0
[  196.440846][  T115]  ? dbAdjTree+0x453/0x4e0
[  196.442705][  T115]  ? __pfx_lock_metapage+0x10/0x10
[  196.444794][  T115]  dbJoin+0x238/0x300
[  196.446403][  T115]  dbFreeBits+0x4e1/0xdb0
[  196.448223][  T115]  dbFree+0x336/0x650
[  196.449701][  T115]  txFreeMap+0x9e6/0xde0
[  196.451248][  T115]  ? do_raw_spin_unlock+0x4d/0x210
[  196.453236][  T115]  xtTruncate+0xd38/0x2f20
[  196.454751][  T115]  ? __pfx_xtTruncate+0x10/0x10
[  196.456374][  T115]  ? __lock_acquire+0x6b5/0x2cf0
[  196.457978][  T115]  ? __asan_memset+0x22/0x50
[  196.459540][  T115]  ? __dquot_initialize+0x21b/0xd30
[  196.461501][  T115]  jfs_free_zero_link+0x35b/0x4c0
[  196.463182][  T115]  ? __pfx_jfs_free_zero_link+0x10/0x10
[  196.465112][  T115]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  196.467292][  T115]  ? do_raw_spin_lock+0x12b/0x2f0
[  196.469342][  T115]  jfs_evict_inode+0x363/0x440
[  196.471226][  T115]  ? evict+0x612/0xb10
[  196.472619][  T115]  ? __pfx_jfs_evict_inode+0x10/0x10
[  196.474386][  T115]  evict+0x61e/0xb10
[  196.475754][  T115]  ? __pfx_evict+0x10/0x10
[  196.477227][  T115]  ? _raw_spin_unlock+0x28/0x50
[  196.478889][  T115]  ? iput+0xb25/0xe80
[  196.480243][  T115]  jfs_lazycommit+0x43d/0xaa0
[  196.481974][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  196.483926][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  196.486242][  T115]  ? __kthread_parkme+0x7a/0x1f0
[  196.488285][  T115]  kthread+0x388/0x470
[  196.489999][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  196.492107][  T115]  ? __pfx_kthread+0x10/0x10
[  196.493877][  T115]  ret_from_fork+0x51e/0xb90
[  196.495645][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  196.497776][  T115]  ? __switch_to+0xc7d/0x1450
[  196.499744][  T115]  ? __pfx_kthread+0x10/0x10
[  196.501675][  T115]  ret_from_fork_asm+0x1a/0x30
[  196.503694][  T115]  </TASK>
[  196.505699][  T115] Kernel Offset: disabled
[  196.507498][  T115] Rebooting in 86400 seconds..
