last executing test programs:

1m18.434899031s ago: executing program 0 (id=551):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x2c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1m18.258516445s ago: executing program 0 (id=552):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x1, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioprio_set$pid(0x3, 0x0, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0)
copy_file_range(r2, &(0x7f0000000000)=0x8, r2, 0x0, 0x4, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1m17.229553429s ago: executing program 0 (id=560):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$inet6(r0, &(0x7f0000002d40)={0x27, 0x4e23, 0x1, @private0, 0x6}, 0x1c)

1m17.228780114s ago: executing program 0 (id=561):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$eJzs3V9oZFcdB/DfnSRNdnfaZMUHK5aKFleQTjIT6dQ/YIr2wUprsQqCld2wO5mEncmEzCxuQqHpmw8+uA+rgihbCqIIkgef7MMGBUFooSyKqBCh+KDFRdGCPjlyZybZ0E6a0Gxzl97PB27u+TN3vufMZO6ZeToB5NYH0z+FiHvTchIxOWhPImKsVxqNmOs/7srs5mJ6JNHtPvWPpPeYZ2Y3F2PPNalTEbERERMR8cvxJE6Ovzm3vbZ+cb7RqK0O6tOd5sp0e239waXmfL1Wry1XqtXZcqVafqh62+Z698LzP3/1hUefffEX116/7wu/+lkSc1Ec9O2dx+3Uf03G4sk9baNJxBffibAMjPT/Q3rnHclohgPi0D537sRWISLeExEf6p0nYyT6b96F5af/NRn/e2K/ax/+wA//dpxjBQBun+5nIroAQK5k/f0DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADuRN1uYv9/AMiZrL9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAneyZ2c3FneO4Mu/7WsTNRyJiop9/ZXD0e0djrneeiLGIOPnvJEb3XJtExMwR8xduRGw8FxHvGzb/pJc/lQ5uSP5IRJw7Yv6L14+Wv3LE/K9+54hPcESnf5pt/rU/ZZt/7iPZ5v/l1WzzH7g/2/yrrYit9P4zN+zzV9i9/8SQz99E/7IjeeTrt+5/V950/7uVP7LP/W/jkDkv3fjz5LD2wpcibj4X8f7RYfnJbn6yT/63D5n/5Ud/9Klh7c++FtF9PuJMDM/fmzXdaa5Mt9fWH1xqztdr9dpypVqdLVeq5Yeq0wtLjdpM/+/Q/HsaTzw2rP3l7f78T+6TvzGY/36v/7VDzv8rv746tTmk/Te/7ed/9MNv/f4Pe/3TNXHrkPnXt7/19LD23326n39hn/kf9P6/csj8V6Y+//Fh7TczXn8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4O0qREQxkkJpt1wolEoRpyLivXGy0Gi1Ox9baF1avpD2RUzFWGFnp6XJfj1J6+Ve+Va98ob6bEScjohvjp/o1UvnW40LWU8eAHKmGLH9x5nPHnYLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyJVTb9j//6/j/f3/AYB3n2LE9taNF36Sll8fz3o0AMBxSNf/s5d/cDWs/wCQG9Z/AMgf6z8A5I/1HwDyx/oPAPlj/QeA/Nm7/gMAAAAAAAAAAAAAAAAAAADZevLxx9Oje2V2czGtL7fqSxcXVz5RmSk1L50vnW+trpTqrVa9USudbzUPfr5Gq7VSrsSly9OdWrsz3V5bP9tsXVrunF1qztdrZ2tjxzAn4GCVx/7z+6zHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHeS0/dv/SGJiI1PnugdqbsGffbqh3e3QtYDADIzkvUAgMyMZj0AIDN+4wPJAf0T+/b4BgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6cudf+/5BX9v+H/LL/P+SX3Xshv/zGB+z/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByv2jqRQGuwFXoxCoVSKuDsipmIsWVhq1GYi4p6IeGl8bDytl7MeNADwthQjtrfnlh/OehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAnaq+tX5xvNGqrCgoKCruFrO9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcPxubfqd9UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIEuF15KISI8zkw8Ur//9xy/v7b0r+e947xwR3/j+U9+9PN/prJbT9n/utne+N2ivZDUHAOCt7KzTO+s4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzTXlu/ON9o1FbfwULWcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALgd/h8AAP//WEsF2g==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0)
read(r0, &(0x7f0000001400)=""/4096, 0x1000)

1m16.323745834s ago: executing program 0 (id=564):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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")
chdir(&(0x7f0000000380)='./file0\x00')
symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m15.910905744s ago: executing program 0 (id=569):
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x4000000000000003, 0x1)
syz_emit_ethernet(0xfc0, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0)

1m15.888105226s ago: executing program 32 (id=569):
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
splice(r1, 0x0, r0, 0x0, 0x4000000000000003, 0x1)
syz_emit_ethernet(0xfc0, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xf9e, 0x0, @opaque="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"}}}}}, 0x0)

2.072890374s ago: executing program 1 (id=1400):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000000)={[{@inode32}, {@nr_inodes={'nr_inodes', 0x3d, [0x33]}}]})

1.974268559s ago: executing program 1 (id=1402):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000400)=ANY=[@ANYBLOB="6769643d69676e6f72652c696f636861727365743d69736f383835392d332c757466382c646d6f6465ca058618dc7d359a18f5f1573d30303030303030303030303030303030303030303031372c6c6f6e6761642c696f636861727365743d63703835322c73686f727461642c7569643d69676e6f7265efcfcf9f2c6e6f7365742c756e64656c6574652c0369643d666f7267657400"/175], 0x1, 0xc84, &(0x7f0000004880)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r2, &(0x7f000004b680)=""/102400, 0x19000)
mq_open(0x0, 0x40, 0xb, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket(0x28, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
poll(0x0, 0x0, 0x9)
setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0)
getdents64(r1, &(0x7f0000000140)=""/46, 0x2e)

1.973774365s ago: executing program 3 (id=1403):
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
setresuid(0x0, 0xee00, 0x0)
bind$qrtr(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
r4 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080))
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)

1.735040438s ago: executing program 1 (id=1404):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000a500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000b500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
cachestat(r1, &(0x7f0000000140)={0xfffffffffffffffe, 0x7}, 0xfffffffffffffffd, 0x0)

1.541817073s ago: executing program 1 (id=1405):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x2878a81d0e412069, 0x1, 0x5, 0xc}, {0x9, 0x5, 0x4, 0x2, 0x8, 0x3, 0x9, 0x62}, {0x9, 0x5, 0xd, 0x3, 0x400, 0x0, 0x1, 0x7f}}}}}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000002800)=0x400000)

906.698208ms ago: executing program 3 (id=1407):
syz_emit_ethernet(0x76, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000300", 0x40, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa198", 0x0, 0x3c, 0x0, @ipv4, @ipv4={'\x00', '\xff\xff', @local}, [@srh={0x2f, 0x0, 0x4, 0x0, 0x4}, @fragment={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}]}}}}}}}, 0x0)

863.077711ms ago: executing program 3 (id=1408):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000ffffffff000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200ff85000000bda7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4)
r1 = dup2(r0, r0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
r2 = syz_usb_connect(0x2, 0x3f, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
memfd_create(0x0, 0x6)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0)

704.85274ms ago: executing program 2 (id=1411):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

612.185057ms ago: executing program 2 (id=1412):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)

611.949976ms ago: executing program 2 (id=1413):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="05a42f284a5bf1fa61960ae8f0f9", 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

544.829011ms ago: executing program 2 (id=1414):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x45, &(0x7f0000000200)={0x0, 0x0}, 0x10)

544.688217ms ago: executing program 2 (id=1415):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000540), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x48}, 0x2}, 0x0)

495.103526ms ago: executing program 1 (id=1416):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delrule={0x50, 0x21, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x14, 0x10, 0x5, 0x3, 0x0, 0x0, 0x1, 0x10006}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0xffffffffffffffff, 0xffffffffffffffff}}]}, 0x50}, 0x1, 0x0, 0x0, 0x480d0}, 0x0)

494.825943ms ago: executing program 2 (id=1417):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, 0x0)

434.629126ms ago: executing program 1 (id=1418):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x4000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000040))

174.284156ms ago: executing program 3 (id=1419):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000100)=ANY=[], 0x8, 0x1537, &(0x7f0000001ec0)="$eJzs3AuYjtXaOPD7Xms9Y0h6m+QwrLXuhzcNlkmSHBJyTJIkW3JKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyZbkiQhIcn6X9ra6r/3t3f72+181577d13rsm7Pe9/vWs/9XvO+zzPXO191H1G7WZ0aTYgI/i34l3+SASAWAIYAwDUAEABA+bjycReP55aY/O89Cft9PZB2pVfAriTuf87G/c/ZuP85G/c/Z+P+52zc/5yN+5+zcf8Zy8m2zip8LY+cO/j+f07G7///RQ6VmfjZ+jLX9/gXUrj/ORv3P2fj/uds3P+cjfufs3H///tV/wfHuP85G/efsZzsr/eCz3vv/w/cj+bxx44r/fpjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMZYznPWXKQD4eX6l18UYY4wxxhhjjLHfj891pVfAGGOMMcYYY4yx/zwEARIUBBADuSAWckMeuArywtWQD66BCFwLcXAd5IfroQAUhEJQGOKhCBQFDQYsEIRQDIpDFG6AEnAjJEBJKAWlwUEZSISboCzcDOXgFigPt0IFuA0qQiWoDFXgdqgKd0A1qA414E6oCbWgNtSBulAP7oL6cDc0gHugIdwLjeA+aAz3QxN4AJrCn6AZPAjN4SFoAS2hFbSGNr/On/zb8p+D3vA89IG+kAz9oD+8AANgIAyCwTAEXoSh8BIMg5chBYbDCHgFRsKrMApeg9EwBsbC6zAOxsMEmAiTYDKkwhswBd6EqfAWTIPpMANmQhrMgtnwNsyBuTAP3oH58C4sgIWwCBZDOrwHGbAEMuF9WAofQBYsg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK3wI22A77ICdsAt2wx74CPbCx7APPoFs+PRfzD/z/+X3QEBAgQIVKozBGIzFWMyDeTAv5sV8mA8jGME4jMP8mB8LYAEshIUwHuOxKBZFgwYJCYthMYxiFEtgCUzAhJifX1iJmIhl8WYsh+WwPJbHClgBK2IlrIRVsApWxapYDathDayBNbEm1sbaWBfr4l1YH+tjA2yADbEhNsJG2BgbYxNsgk2xKTbDZtgcm2MLbIGtsBW2wTbYFttiO2yHHbADdsSO2Ak7YRImYWfsjF2wC3bFrtgNu2F37I49sCf2xOfwOXwen8e+WFP0w/7YHwfgAByEg3EwvohD8SV8CV/GFByOI/AVfAVfxVF4GkfjGByLY7GqGI8TcCKSmIypmIpTcApOxak4DafjdJyJaTgLZ+NsnINzcS6+g/PxXXwXF+JCXIzpmI4ZuAQzMROX4hnMwmW4HFfgSlyFK3ENrsU1uB434HrchJtwC27BD/FD3I7bcSfuxN24Gz/Cj/Bj/BhTMBuzcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOJ7Ak3gCT+EpPI1n8CyexXN4Ds/jM/FfNN1dcl0KiIuUUCJGxIhYESvyiDwir8gr8ol8IiIiIk7EifwivyggCohCopCIF/GiqCgqjDCCRCiKiWIiKqKihCghEkSCKCVKCSecSBSJoqwoK8qJcqK8uFVUELeJiqKSaO+qiCqiqujgqonqooaoIWqKWqK2qCPqiHqinqgv6osGooFoKBqKRuI+0Vj0w0H4gLjYmWZiODYXI7CFaClaidbiVXxYtBWjsJ1oLzqIR8UYHI2dRFuXJJ4QncUE7CKeEhPxadFNTMbu4lnRQ/QUvcRzordo5/qIvmIa9hP9xUwcIAaKQWKwmIO1xMWO1RYvixQxXIwQr4jF+KoYJV4To8UYMVa8LsaJ8WKCmCgmickiVbwhpog3xVTxlpgmposZYqZIE7PEbPG2mCPminniHTFfvCsWiIVikVgs0sV7IkMsEZnifbFUfCCyxDKxXKwQK8UqsVqsEWvFOrFebBAbxSaxWWwRW8WHYpvYLnaInWKX2C32iI/EXvGx2Cc+EdniU7Ff/FkcEJ+Jg+JzcUh8IQ6LL8UR8ZU4Kr4Wx8Q34rg4IU6Kb8Up8Z04Lc6Is+J7cU78IM6LH8UF4QVIlEJKqWQgY2QuGStzyzzyKplXXi3zyWtkRF4r4+R1Mr+8XhaQBWUhWVjGyyKyqNTSSCtJhrKYLC6j8gZZQt4oE2RJWUqWlk6WkYnyJllW3izLyVtkeXmrrCBvkxVlJVlZVpG3y6ryDllNVpc15J2ypqwla8s6sq6sJ++S9eXdsoG8RzaU98pG8j7ZWN4vm8gHZFNEAPmgbC4fki1kS9mqLsg28mHZVj4i28n2soN8VHaUj8lO8nGZJJ+QneWTsot8SnaVT8tu8hnZXT4re8iespf8UV6QXvaRfWWy7Cf7yxfkADlQDpKD5RD5ohwqX5LD5MsyRQ6XI+QrcqR8VY6Sr8nRcowcK1+X4+R4OUFOlJPkZJkq35BT5JtyqnxLTpPT5Qw5U6bJWXLQpUrzfkP+m38nf9hPz75FbpUfym1yu9whd8pdcrfcI/fIvXKv3Cf3yWyZLffL/fKAPCAPyoPykDwkD8vD8og8Io/Ko/KYPCaPyxPye/mtPCW/k6flGXlGfi/PyXPy/KVzAAqVUFIpFagYlUvFqtwqj7pK5VVXq3zqGhVR16o4dZ3Kr65XBVRBVUgVVvGqiCqqtDLKKlKhKqaKq6i6QZVQN6oEVVKVUqWVU2VUorrp387/Z+tro9qotqqtaqfaqQ6qg+qoOqpOqpNKUkmqs+qsuqguqqvqqrqpbqq76q56qB6ql+qleqveqo/qo5JVsuqvXlAD1EA1SA1WQ9SLaqgaqoapYSpFpagRaoQaqUaqUWqUGq1Gq7FqrBqnxqkJaoKapCapVJWqpqgpaqqaqqapaWqGmqHSVJqarWarOWqOmqfmqflqvlqgFqhFapFKV+kqQ2WoTJWplqqlKkstU8vUCrVCrVKr1Bq1Rq1T69QGtUFtUptUltqqtqptapvaoXaoXWqX2qP2qL1qr9qn9qlsla32q/3qgDqgDqqD6pA6pA6rw+qIOqKOqqPqmDqmjqvj6qQ6qU6pU+q0Oq3OqrPqnDqnzqvz6oK6cPFjXyACEahABTFBTBAbxAZ5gjxB3iBvkC/IF0SCSBAXxAX5g+uDAkHBoFBQOIgPigRFAx2YwAYUhEGxoHgQDW4ISgQ3BglByaBUUDpwQZkgMbgpKBvcHJQLbgnKB7cGFYLbgopBpaByUCW4Paga3BFUC6oHNYI7g5pBraB2UCeoG9QL7grqB3cHDYJ7gobBvUGj4L6gcXB/0CR4IGga/CloFjwYNA8eCloELYNWQeugze9a3/vTBR9xfXRfnaz76f76BT1AD9SD9GA9RL+oh+qX9DD9sk7Rw/UI/YoeqV/Vo/RrerQeo8fq1/U4PV5P0BP1JD1Zp+o39BT9pp6q39LT9HQ9Q8/UaXqWnq3f1nP0XD1Pv6Pn63f1Ar1QL9KLdbp+T2foJTpTv6+X6g90ll6ml+sVeqVepVfrNXqtXqfX6w16o96kN+steqv+MGab3q536J16l96t9+iP9F79sd6nP9HZ+lO9X/9ZH9Cf6YP6c31If6EP6y/1Ef2VPqq/1sf0N/q4PqFP6m/1Kf2dPq3P6LP6e31O/6DP6x/1Be0vfri/+PZulFEmxsSYWBNr8pg8Jq/Ja/KZfCZiIibOxJn8Jr8pYAqYQqaQiTfxpqgpai4iQ6aYKWaiJmpKmBImwSSYUqaUccaZRJNoypqyppwpZ8qb8qaCqWAqmoqmsqlsbje3mzvMHaa6qW7uNHeaWqaWqWPqmHqmnqlv6psGpoFpaBqaRqaRaWwamyamiWlqmppmpplpbpqbFqaFaWVamTamjWlr2pp2pp3pYDqYjqaj6WQ6mSSTZDqbzqaL6WK6mq6mm+lmupvupofpYXqZXqa36W36mD4m2SSb/qa/GWAGmEFmkBlihpihZqgZZoaZFJNiRpgRZqQZaUaZUWa0GWPGmtfNODPeTDATzSQz2aSaVDPFTDFTzVQzzUwzM8wMk2bSzGwz28wxc8w8M8/MN/PNArPALDKLTLpJNxkmw2SaTFBmqckyWWa5WW5WmpVmtVlt1pq1Zr1ZbzaajWaz2Wy2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0m22Sb/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOWd+MOfNj+aC8SbWCshjr7J57dU2n73Gxtrc9pdxIVvYxtsitqjVtoAt+KvYWGsTbElbypZWzpaxifamn2P7c1zRVrKVbRV7u61q77DV/iauZ++y9e3dtoG9x9axdX8VN7T32kb2QdvYPmSb2Ja2qW1tm9kHbXP7kG1hW9pWtrXtaB+znezjNsk+YTvbJ/8mzrBL7Fq7zq63G+xe+7E9a7+3R+xX9pz9wfaxfe0Q+6Idal+yw+zLNsUO/5t4rH3djrPj7QQ70U6yk/8mnmFn2jQ7y862CHPs3F/Eb9uLcbp9z863gAvsQrvILv4pvrimTPu+XWo/sFl2mV1uV9iVdpVdbdf8da0r7Ca72W6xe+xHdpvdbnfYnXaX3f1TfHEf++wnNtt+ag/bL+0B+5k9aI/aQ/aLn+KL+ztqv7bH7Df2uD1hT9pv7Sn7nT1tz/y0/4t7/9b+aC9Yb4GQBElSFFAM5aJYyk156CrKS1dTPrqGInQtxdF1lJ+upwJUkApRYYqnIlSUNBmyRBRSMSpOUbqBStCNlEAlqRSVJkdlKJFuorJ0M5WjW6g83UoV6DaqSJWoMlWh26kq3UHVqDrVoDupJtWi2lSH6lI9uovq093UgO6hhnQvNaL7qDHdT03oAWpKf6Jm9CA1p4eoBbWkVtSa2tDD1JYeoXbUnjrQo9SRHqNO9Dgl0RPUmZ6kLvQUdaWnqRs9Q93pWepBPakXPUe96XnqQ30pmfpRf3qBBtBAGkSDaQi9SEPpJRpGL1MKDacR9AqNpFdpFL1Go2kMjaXXaRyNpwk0kSbRZEqlN2gKvUlT6S2aRtNpBs2kNJpFs+ltmkNzaR69Q/PpXVpAC2kRLaZ0eo8yaAll0vu0lD6gLFpGy2kFraRVtJrW0FpaR+tpA22kTbSZttBW+pC20XbaQTtpF+2mPfQR7aWPaR99Qtn0Ke2nP9MB+owO0ud0iL6gw/QlHaGv6Ch9TcfoGzpOJ+Sl63Q6TWfoLH1P5+gHOk8/0gXyBCGGIpShCoMwJswVxoa5wzzhVWHe8OowX3hNGAmvDePC68L84fVhgbBgWCgsHMaHRcKioQ5NaEMKw7BYWDyMhjeEJcIbw4SwZFgqLB26sEyYGN4Ulg1vDsuFt4Tlw1vDCuFtYcWwUvjgPVXC28Oq4R1htbB6WCO8M6wZ1gprh3XCumG98K6wfnh32CC8JywX3hs2Cu8LG4f3h03CB8Km4Z/CZuGDYfPwobBF2DJsFbYO24QPh23DR8J2YfuwQ/ho2DF8LOwUPh4mhR4BnvwHx58IO4dPhslhv7B/+EL4Quj93XJRdHE0PfpeNCO6JJoZfT+6NPpBNCu6LLo8uiK6Mroqujq6Jro2ui43RDdEN0Y3RTdHt0S9r5MLHDrhpFMucDEul4t1uV0ed5XL6652+dw1LuKudXHuOpffXe8KuIKukCvs4l0RV9RpZ5x15EJXzBV3UXeDK+FudAmupCvlSjvnyrhE19q1cW1cW/eIa+fauw7uUfeoe8w95h53j7snXGf3pOvinnJd3dOum3vGPeOedT1cT9fLPed6u+ddH9fXJbtk19/1dwPcADfIDXJD3BA31A11w9wwl+JS3Ag3wo10I90oN8qNdqPdWDfWjXPj3AQ3wU1yk1yqS3VT3BQ31U1109w0N8PNcGkuzc12s90cN8fNc/Pc/IT5boFb4Ba5RS7dpbsMl+EyXaZb6pa6LJfllrvlbqVb6Va71W6tW+vWu/Vuo9voNrvNbqvb6ra5bW6H2+F2uV1uj9vj9rq9bp/b57Jdttvv9rsD7oA76D53h9wX7rD70h1xX7mj7mt3zH3jjrsT7qT71p1y37nT7ow7675359wP7rz70V1w3qVG3ohMibwZmRp5KzItMj0yIzIzkhaZFZkdeTsyJzI3Mi/yTmR+5N3IgsjCyKLI4kh65L1IRmRJJDPyfmRp5INIVmRZZHlkRWRlZFXE+yLbQl/MF/dRf4Mv4W/0Cb6kL+VLe+fL+ER/ky/rb/bl/C2+vL/VV/C3+Yq+kq/sH/ItfEvfyrf2bfzDvq1/xLfz7X0H/6jv6B/znfzjPsk/4Tv7J30X/5Tv6p/23fwzvrt/1vfwPX0v/5zv7Z/3fXxfn+z7+f7+BT/AD/SD/GA/xL/oh/qX/DD/sk/xw/0I/4of6V/1o/xrfrQf48f61/04P95P8BP9JD/Zp/o3/BT/pp/q3/LT/HQ/w8/0aX6Wn+3f9nP8XD/Pv+Pn+3f9Ar/QL/KLfbp/z2f4JT7Tv++X+g98ll/ml/sVfqVf5Vf7NX6tX+fX+w1+o9/kNwcA4D/02/x2v8Pv9Lv8br/Hf+T3+o/9Pv+Jz/af+v3+z/6A/8wf9J/7Q/4Lf9h/6Y/4r/xR/7U/5r/xx/0Jf9J/60/57/xpf8af9d/7c/4Hf97/6C/wd9YYY4wxxn6Tf/Zd/35/5//EpXFRfwC4envhp395XAHAxgJ/mQ8U8R0jAPBE3+4P/Dxq1kxOTr702CwJQfGFABC5nP/TL5AvxcugAzwGSdAeyv7d9Q0UPc/RX+v/fEl7uT4e9z56K0CeX+TEwuX4cv2b/4f6Dz86NqNCeDbu1+s/f+m8XVx/dCFAQvHLObnhcny5frn/oX7BtvSPz0/uz1IB2v0iJy9cji/XT4RH4ElI+tUjGWOMMcYYY4yxvxgoKnet/Buuz+PV5ZxccDn+Z9fnjDHGGGOMMcYYu/Ke7tnr8YeTktp3/d9Pcl8q9e/W+Y2Tn29E/J6VY/6oxf/hk12XztYf9KTi/8CWefK7TK7QDyTGGGOMMcbYf8zlD/3/QlIv/A+uiDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYy3n+iD8ndqX3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjF1p/y8AAP//okkuCw==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
ftruncate(r0, 0x7f)

84.923861ms ago: executing program 3 (id=1420):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)

0s ago: executing program 3 (id=1421):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x8)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x40)
lseek(r1, 0x4, 0x4)
r2 = getpid()
r3 = dup(0xffffffffffffffff)
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x27, 0x1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYRES64=r3], 0x3261e)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33)
pwritev2(r7, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4)

kernel console output (not intermixed with test programs):

1][ T5277] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   93.568343][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.571981][ T5277] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[   93.574884][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.580166][ T5277] usb 3-1: config 0 descriptor??
[   93.605080][   T32] usb 2-1-port1: cannot disable (err = -71)
[   93.613944][   T27] usb 2-1: Failed to suspend device, error -71
[   93.618964][  T838] usb 2-1: USB disconnect, device number 3
[   93.992375][ T5277] lua 0003:1E7D:2C2E.0001: item fetching failed at offset 0/5
[   93.997131][ T5277] lua 0003:1E7D:2C2E.0001: parse failed
[   93.998943][ T5277] lua 0003:1E7D:2C2E.0001: probe with driver lua failed with error -22
[   94.250807][   T32] usb 3-1: USB disconnect, device number 2
[   95.416822][  T838] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.596953][  T838] usb 3-1: Using ep0 maxpacket: 8
[   95.603318][  T838] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[   95.607220][  T838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.610174][  T838] usb 3-1: Product: syz
[   95.611967][  T838] usb 3-1: Manufacturer: syz
[   95.613813][  T838] usb 3-1: SerialNumber: syz
[   95.682929][ T6436] loop1: detected capacity change from 0 to 256
[   95.868313][  T838] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   95.871468][  T838] usb 3-1: MIDIStreaming interface descriptor not found
[   95.926334][  T838] usb 3-1: USB disconnect, device number 3
[   95.997309][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   96.215920][ T6442] loop1: detected capacity change from 0 to 32768
[   96.246438][ T6442] UFO tlock:0xffffc90002bfa120
[   96.251088][ T6442] ERROR: (device loop1): dtSearch: stack overrun!
[   96.251088][ T6442] 
[   96.256234][ T6442] ERROR: (device loop1): remounting filesystem as read-only
[   96.258930][ T6442] btstack dump:
[   96.260045][ T6442] bn = 0, index = 0
[   96.261161][ T6442] bn = 72c, index = 0
[   96.262621][ T6442] bn = 0, index = 0
[   96.263842][ T6442] bn = 72c, index = 0
[   96.265114][ T6442] bn = 0, index = 0
[   96.266268][ T6442] bn = 72c, index = 0
[   96.269121][ T6442] bn = 0, index = 0
[   96.270609][ T6442] bn = 0, index = 0
[   96.272340][ T6442] jfs_lookup: dtSearch returned -5
[   96.517100][ T6449] loop2: detected capacity change from 0 to 128
[   96.723979][ T6463] loop0: detected capacity change from 0 to 64
[   96.901310][ T6478] loop0: detected capacity change from 0 to 8192
[   96.930530][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'.
[   97.653674][ T6498] netlink: 9 bytes leftover after parsing attributes in process `syz.0.293'.
[   97.658832][ T6498] gretap0: entered promiscuous mode
[   97.716850][  T838] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   98.092939][  T838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[   98.097257][  T838] usb 3-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00
[   98.100240][  T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.110854][  T838] usb 3-1: config 0 descriptor??
[   98.115468][ T6492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   98.593800][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.596426][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.612116][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.633653][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.636465][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.649823][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.657381][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.660047][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.668918][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.675837][  T838] wacom 0003:056A:5000.0002: unknown main item tag 0x0
[   98.773728][  T838] usb 3-1: USB disconnect, device number 4
[   98.813297][ T6514] loop1: detected capacity change from 0 to 512
[   98.833118][ T6514] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[   98.861399][ T6514] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.300: Invalid inode bitmap blk 4 in block_group 0
[   98.866599][ T6514] loop1: lost filesystem error report for type 5 error -117
[   98.884690][ T6514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.974081][ T5906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.581666][ T6550] loop2: detected capacity change from 0 to 1024
[   99.585107][ T6550] EXT4-fs: Ignoring removed bh option
[   99.614310][ T6550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.628861][ T6550] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   99.671289][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.786814][  T838] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   99.812880][ T6560] pimreg: entered allmulticast mode
[   99.821396][ T6560] pimreg: left allmulticast mode
[   99.956846][  T838] usb 1-1: Using ep0 maxpacket: 32
[   99.960571][  T838] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   99.964112][  T838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.970530][  T838] usb 1-1: config 0 descriptor??
[  100.146902][  T782] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  100.185366][  T838] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  100.207534][  T838] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  100.217563][  T838] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  100.220330][  T838] usb 1-1: media controller created
[  100.229908][  T838] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  100.389439][  T782] usb 3-1: Using ep0 maxpacket: 8
[  100.398373][  T782] usb 3-1: unable to get BOS descriptor or descriptor too short
[  100.403991][  T838] az6027: usb out operation failed. (-71)
[  100.404443][  T782] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  100.407288][  T838] az6027: usb out operation failed. (-71)
[  100.417714][  T838] stb0899_attach: Driver disabled by Kconfig
[  100.419318][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  100.422245][  T838] az6027: no front-end attached
[  100.422245][  T838] 
[  100.425043][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  100.436905][  T838] az6027: usb out operation failed. (-71)
[  100.438553][  T838] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  100.443986][  T782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  100.446154][  T838] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4
[  100.453051][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  100.466653][  T838] dvb-usb: schedule remote query interval to 400 msecs.
[  100.467194][  T782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166
[  100.473865][  T838] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  100.485096][ T6574] loop1: detected capacity change from 0 to 2048
[  100.486148][  T782] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  100.492243][  T838] usb 1-1: USB disconnect, device number 3
[  100.496847][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.499479][ T6574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.499829][  T782] usb 3-1: Product: syz
[  100.531722][  T782] usb 3-1: Manufacturer: syz
[  100.533326][  T782] usb 3-1: SerialNumber: syz
[  100.549016][  T782] usb 3-1: config 0 descriptor??
[  100.553378][ T6562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  100.556391][ T6562] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  100.579656][  T782] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  100.624588][  T838] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  100.787674][  T782] usb 3-1: USB disconnect, device number 5
[  101.092033][ T6582] orangefs: client-core tried to read wrong size
[  101.194270][ T6590] afs: Bad value for 'source'
[  101.336504][ T6598] loop0: detected capacity change from 0 to 4096
[  101.347964][ T6598] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  101.668203][ T6615] orangefs_devreq_write_iter: total:0: must be at least:8240:
[  102.086869][   T32] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  102.236850][   T32] usb 1-1: Using ep0 maxpacket: 32
[  102.240630][   T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.247562][   T32] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[  102.251066][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.254133][   T32] usb 1-1: Product: syz
[  102.255813][   T32] usb 1-1: Manufacturer: syz
[  102.257834][   T32] usb 1-1: SerialNumber: syz
[  102.262098][   T32] usb 1-1: config 0 descriptor??
[  102.475702][   T32] usb 1-1: USB disconnect, device number 4
[  103.074828][ T6641] batadv_slave_1: entered promiscuous mode
[  103.088686][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[  103.092141][ T6641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.105901][ T6641] batadv_slave_1 (unregistering): left promiscuous mode
[  103.109299][ T6641] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.233838][ T6643] loop0: detected capacity change from 0 to 1024
[  103.262191][ T6643] EXT4-fs (loop0): failed to initialize system zone (-117)
[  103.265108][ T6643] EXT4-fs (loop0): mount failed
[  104.026843][  T782] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  104.187247][  T782] usb 3-1: Using ep0 maxpacket: 8
[  104.212865][  T782] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  104.219673][  T782] usb 3-1: config 179 has no interface number 0
[  104.242873][  T782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  104.248137][  T782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  104.252116][  T782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  104.259754][  T782] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  104.268117][  T782] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  104.280691][  T782] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  104.284176][  T782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.299240][ T6637] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  104.469539][ T6655] loop0: detected capacity change from 0 to 32768
[  104.473033][ T6655] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.363 (6655)
[  104.482781][ T6655] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.485753][ T6655] BTRFS info (device loop0): using sha256 checksum algorithm
[  104.526131][ T6655] BTRFS info (device loop0): rebuilding free space tree
[  104.534643][ T6655] BTRFS info (device loop0): disabling free space tree
[  104.537398][ T6655] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.541025][ T6655] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.548908][ T6655] BTRFS info (device loop0): checking UUID tree
[  104.553431][ T6655] BTRFS info (device loop0): setting nodatasum
[  104.555928][ T6655] BTRFS info (device loop0): setting nodatacow
[  104.558669][ T6655] BTRFS info (device loop0): turning off barriers
[  104.561183][ T6655] BTRFS info (device loop0): force clearing of disk cache
[  104.600015][  T782] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input5
[  104.722333][ T5901] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.805311][  T838] usb 3-1: USB disconnect, device number 6
[  104.805320][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  104.805345][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  106.402760][ T6681] syzkaller0: entered promiscuous mode
[  106.404939][ T6681] syzkaller0: entered allmulticast mode
[  108.325380][ T6729] loop2: detected capacity change from 0 to 2048
[  108.425894][ T6729] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.458901][ T6729] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.139186][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.214999][ T6736] netlink: 156 bytes leftover after parsing attributes in process `syz.2.385'.
[  109.218776][ T6736] netlink: 156 bytes leftover after parsing attributes in process `syz.2.385'.
[  109.237323][ T6698] syz_tun: entered allmulticast mode
[  109.320604][ T6740] loop2: detected capacity change from 0 to 128
[  109.344679][ T6740] EXT4-fs (loop2): Test dummy encryption mode enabled
[  109.387764][ T6740] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  109.392357][ T6740] System zones: 1-3, 19-19, 35-36
[  109.395864][ T6740] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  109.439796][ T6740] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  109.459052][ T6743] loop1: detected capacity change from 0 to 512
[  109.483427][ T6743] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[  109.696457][ T6740] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  109.821455][   T33] audit: type=1326 audit(1775717332.729:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6764 comm="syz.0.394" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb6a2d9c819 code=0x0
[  109.828922][ T5900] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.237590][ T6786] loop1: detected capacity change from 0 to 128
[  110.243320][ T6786] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  110.294410][ T6786] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  110.302100][ T6786] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (30846!=65535)
[  110.324643][ T5906] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.498316][ T6790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'.
[  110.523708][ T6790] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  110.528843][ T6790] bond1 (unregistering): Released all slaves
[  111.961736][ T6812] loop2: detected capacity change from 0 to 32768
[  112.036371][ T6812] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.073614][ T6812] XFS (loop2): Ending clean mount
[  112.174143][ T6840] loop1: detected capacity change from 0 to 128
[  112.180071][ T6840] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  112.199624][ T6840] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  112.367819][ T5900] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.837243][  T838] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  112.898996][ T6852] netlink: 48 bytes leftover after parsing attributes in process `syz.2.425'.
[  112.996211][  T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.999863][  T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.002605][  T838] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  113.006508][  T838] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  113.010393][  T838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.018164][  T838] usb 2-1: config 0 descriptor??
[  113.447538][  T838] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[  113.473346][ T6857] loop2: detected capacity change from 0 to 8192
[  113.478060][  T838] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  113.481658][ T6857] FAT-fs (loop2): bogus logical sector size 516
[  113.483433][ T6857] FAT-fs (loop2): Can't find a valid FAT filesystem
[  113.663893][ T6871] loop0: detected capacity change from 0 to 512
[  113.670501][ T6871] EXT4-fs: Ignoring removed bh option
[  113.677738][ T6871] EXT4-fs (loop0): Test dummy encryption mode enabled
[  113.693088][ T6871] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.434: inode has both inline data and extents flags
[  113.697911][ T6871] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  113.699325][ T6871] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.434: couldn't read orphan inode 15 (err -117)
[  113.706877][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  113.706898][    C1] EXT4-fs (loop0): initial error at time 1775717336: ext4_orphan_get:1397: inode 15
[  113.706921][    C1] EXT4-fs (loop0): last error at time 1775717336: ext4_orphan_get:1397: inode 15
[  113.720425][ T6871] loop0: lost filesystem error report for type 5 error -117
[  113.720615][  T838] usb 2-1: USB disconnect, device number 4
[  113.728968][ T6871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.776498][ T6866] loop2: detected capacity change from 0 to 40427
[  113.780637][ T6866] F2FS-fs: Quota file already specified
[  113.814267][ T6871] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  113.864652][ T5901] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.013689][ T6883] loop0: detected capacity change from 0 to 2048
[  114.042268][ T6883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.089028][ T5901] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.164624][ T6891] loop0: detected capacity change from 0 to 8
[  114.174896][ T6891] squashfs image failed sanity check
[  114.281641][ T6893] pimreg9: entered allmulticast mode
[  114.293459][ T6892] pimreg9: left allmulticast mode
[  114.347743][ T6897] loop2: detected capacity change from 0 to 128
[  114.357957][ T6897] FAT-fs (loop2): bogus number of reserved sectors
[  114.360394][ T6897] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  114.363825][ T6897] FAT-fs (loop2): Can't find a valid FAT filesystem
[  114.931708][ T6899] loop1: detected capacity change from 0 to 32768
[  115.006253][ T6899] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[  115.006253][ T6899] 
[  115.009399][ T6899] ERROR: (device loop1): remounting filesystem as read-only
[  115.011824][ T6899] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[  115.011824][ T6899] 
[  115.014870][ T6899] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[  115.014870][ T6899] 
[  115.018561][ T6899] ERROR: (device loop1): dbAllocBits: leaf page corrupt
[  115.018561][ T6899] 
[  115.037151][ T6899] blkno = b00, nblocks = 400
[  115.038878][ T6899] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  115.038878][ T6899] 
[  115.043043][ T6899] blkno = b00, nblocks = 400
[  115.044938][ T6899] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  115.044938][ T6899] 
[  115.049775][ T6899] blkno = b00, nblocks = 400
[  115.051669][ T6899] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  115.051669][ T6899] 
[  115.441041][   T32] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  115.452429][ T6923] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0)
[  115.599127][   T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  115.602884][   T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  115.607683][   T32] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  115.614159][   T32] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  115.618365][   T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.621558][   T32] usb 2-1: Product: syz
[  115.623266][   T32] usb 2-1: Manufacturer: syz
[  115.625105][   T32] usb 2-1: SerialNumber: syz
[  115.632633][   T32] usb 2-1: config 0 descriptor??
[  115.635474][ T6919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.638837][ T6919] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.643149][   T32] usb 2-1: ucan: probing device on interface #0
[  115.660497][ T6927] loop2: detected capacity change from 0 to 32768
[  115.702834][ T6443]  loop2: p1 p3 < >
[  115.727552][ T6927]  loop2: p1 p3 < >
[  115.866880][   T32] usb 2-1: ucan: device protocol version 0 is not supported
[  115.869592][   T32] usb 2-1: ucan: probe failed; try to update the device firmware
[  116.014403][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  116.019264][ T6443] udevd[6443]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  116.054949][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  116.059619][ T6443] udevd[6443]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  116.070703][ T5803] usb 2-1: USB disconnect, device number 5
[  116.281418][ T6942] loop2: detected capacity change from 0 to 32768
[  116.291803][ T6942] (syz.2.462,6942,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.302910][ T6942] (syz.2.462,6942,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  116.325091][ T6942] JBD2: Ignoring recovery information on journal
[  116.346850][   T32] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  116.381486][ T6942] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  116.499278][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.502865][   T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.505830][   T32] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.519165][   T32] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.520684][ T5900] ocfs2: Unmounting device (7,2) on (node local)
[  116.522450][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.528049][   T32] usb 1-1: config 0 descriptor??
[  116.813825][ T6956] loop2: detected capacity change from 0 to 512
[  116.816211][ T6956] EXT4-fs: Ignoring removed bh option
[  116.850692][ T6956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.868681][ T6956] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.884452][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'.
[  116.897813][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.952829][   T33] audit: type=1326 audit(1775717339.879:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6962 comm="syz.2.470" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8a279c819 code=0x0
[  116.978305][   T32] hid_parser_main: 459 callbacks suppressed
[  116.978325][   T32] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x4
[  117.008825][   T32] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  117.105875][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  117.109578][ T6965] UDF-fs: Scanning with blocksize 512 failed
[  117.114954][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  117.118648][ T6965] UDF-fs: Scanning with blocksize 1024 failed
[  117.126192][ T6965] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found
[  117.129489][ T6965] UDF-fs: Scanning with blocksize 2048 failed
[  117.138059][ T6965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.153541][   T32] usb 1-1: USB disconnect, device number 5
[  117.564127][ T6972] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  117.579744][ T6972] XFS (loop1): Ending clean mount
[  117.621114][ T5906] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  118.616896][  T838] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  118.883010][  T838] usb 2-1: unable to get BOS descriptor or descriptor too short
[  118.888537][  T838] usb 2-1: config 3 has an invalid interface number: 4 but max is 0
[  118.895570][  T838] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  118.900068][  T838] usb 2-1: config 3 has no interface number 0
[  118.902373][  T838] usb 2-1: config 3 interface 4 altsetting 184 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  118.906376][  T838] usb 2-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.910291][  T838] usb 2-1: config 3 interface 4 altsetting 184 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  118.914902][  T838] usb 2-1: config 3 interface 4 has no altsetting 0
[  118.922479][  T838] usb 2-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f
[  118.925993][  T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.929688][  T838] usb 2-1: Product: syz
[  118.931331][  T838] usb 2-1: Manufacturer: syz
[  118.933084][  T838] usb 2-1: SerialNumber: syz
[  119.124786][ T7013] set_capacity_and_notify: 2 callbacks suppressed
[  119.124803][ T7013] loop2: detected capacity change from 0 to 1024
[  119.132105][  T782] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  119.155178][  T838] radio-si470x 2-1:3.4: could not find interrupt in endpoint
[  119.158677][  T838] radio-si470x 2-1:3.4: probe with driver radio-si470x failed with error -5
[  119.162163][  T838] usbhid 2-1:3.4: couldn't find an input interrupt endpoint
[  119.167463][  T838] usb 2-1: USB disconnect, device number 6
[  119.228619][   T26] hfsplus: b-tree write err: -5, ino 25
[  119.230894][   T26] hfsplus: b-tree write err: -5, ino 4
[  119.233135][   T26] hfsplus: b-tree write err: -5, ino 2
[  119.235369][   T26] hfsplus: b-tree write err: -5, ino 22
[  119.303026][  T782] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.307054][  T782] usb 1-1: config 0 has no interfaces?
[  119.317495][  T782] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  119.320920][  T782] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  119.334865][  T782] usb 1-1: Product: syz
[  119.339337][  T782] usb 1-1: Manufacturer: syz
[  119.342454][  T782] usb 1-1: SerialNumber: syz
[  119.355928][  T782] usb 1-1: config 0 descriptor??
[  119.525420][ T7020] loop2: detected capacity change from 0 to 512
[  119.529379][ T7020] EXT4-fs: Ignoring removed nobh option
[  119.539697][ T7020] fscrypt (loop2, inode 2): Error -61 getting encryption context
[  119.544715][ T7020] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61
[  119.550366][ T7020] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #13: comm syz.2.491: inode has both inline data and extents flags
[  119.555011][ T7020] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  119.555384][ T7020] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.491: couldn't read orphan inode 13 (err -117)
[  119.559114][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  119.559127][    C0] EXT4-fs (loop2): initial error at time 1775717342: ext4_orphan_get:1397: inode 13
[  119.559142][    C0] EXT4-fs (loop2): last error at time 1775717342: ext4_orphan_get:1397: inode 13
[  119.565337][ T7009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  119.568214][ T7020] loop2: lost filesystem error report for type 5 error -117
[  119.574605][ T7009] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  119.576561][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.582735][  T782] usb 1-1: USB disconnect, device number 6
[  119.610378][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.138785][ T7045] ALSA: mixer_oss: invalid OSS volume 'u'
[  120.213404][ T7052] macsec1: entered promiscuous mode
[  120.215607][ T7052] macsec1: entered allmulticast mode
[  120.257872][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'.
[  120.261514][ T7056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'.
[  120.265076][ T7056] netlink: 'syz.2.506': attribute type 14 has an invalid length.
[  120.268165][ T7056] netlink: 'syz.2.506': attribute type 13 has an invalid length.
[  120.806922][   T32] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  120.956811][   T32] usb 1-1: Using ep0 maxpacket: 16
[  120.962881][   T32] usb 1-1: too many endpoints for config 0 interface 0 altsetting 253: 255, using maximum allowed: 30
[  120.962916][   T32] usb 1-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  120.962936][   T32] usb 1-1: config 0 interface 0 has no altsetting 0
[  120.962963][   T32] usb 1-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[  120.962980][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.966474][   T32] usb 1-1: config 0 descriptor??
[  121.029840][ T7089] loop1: detected capacity change from 0 to 512
[  121.032917][ T7089] EXT4-fs (loop1): Test dummy encryption mode enabled
[  121.044093][ T7089] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.047113][ T7089] EXT4-fs error (device loop1): ext4_add_entry:2415: inode #2: comm syz.1.522: Directory hole found for htree leaf block 0
[  121.058852][ T7089] EXT4-fs (loop1): Remounting filesystem read-only
[  121.124259][ T5906] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  121.222517][ T7095] loop1: detected capacity change from 0 to 4096
[  121.226278][ T7095] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  121.382572][   T32] input: HID 28bd:0934 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0934.0005/input/input7
[  121.406874][  T782] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  121.416521][ T7099] loop1: detected capacity change from 0 to 4096
[  121.419475][ T7099] ntfs3(loop1): Primary boot: invalid bytes per MFT record 0 (0).
[  121.421960][ T7099] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  121.463721][   T32] uclogic 0003:28BD:0934.0005: input,hidraw0: USB HID v0.0a Mouse [HID 28bd:0934] on usb-dummy_hcd.0-1/input0
[  121.562496][  T782] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  121.570297][  T782] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[  121.574628][  T782] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  121.584793][  T782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.592518][  T838] usb 1-1: USB disconnect, device number 7
[  121.610247][  T782] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  121.828820][ T5953] usb 3-1: USB disconnect, device number 7
[  122.486851][  T838] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  122.648497][  T838] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[  122.651559][  T838] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  122.655187][  T838] usb 1-1: config 8 has no interface number 0
[  122.661709][  T838] usb 1-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  122.669062][  T838] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  122.673467][  T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.678450][  T838] usb 1-1: Product: syz
[  122.680055][  T838] usb 1-1: Manufacturer: syz
[  122.682466][  T838] usb 1-1: SerialNumber: syz
[  122.757861][  T782] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  122.910884][  T838] usb 1-1: USB disconnect, device number 8
[  122.917220][  T782] usb 3-1: Using ep0 maxpacket: 8
[  122.923152][  T782] usb 3-1: unable to get BOS descriptor or descriptor too short
[  122.935156][  T782] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd
[  122.939397][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.942409][  T782] usb 3-1: Product: syz
[  122.944368][  T782] usb 3-1: Manufacturer: syz
[  122.946149][  T782] usb 3-1: SerialNumber: syz
[  122.959351][ T7135] loop1: detected capacity change from 0 to 4096
[  122.986123][ T7135] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  122.994942][ T7135] ntfs3(loop1): Failed to load $MFT (-22).
[  123.042630][ T7137] xt_l2tp: invalid flags combination: 8
[  123.159774][  T782] kalmia 3-1:1.0: probe with driver kalmia failed with error -22
[  123.165629][  T782] usb 3-1: USB disconnect, device number 8
[  123.736547][ T7148] loop5: detected capacity change from 0 to 7
[  123.746194][ T7148] Dev loop5: unable to read RDB block 7
[  123.751299][ T7148]  loop5: AHDI p1 p2 p3
[  123.752856][ T7148] loop5: partition table partially beyond EOD, truncated
[  123.755727][ T7148] loop5: p1 start 1818582900 is beyond EOD, truncated
[  123.759771][ T7148] loop5: p3 start 335544320 is beyond EOD, truncated
[  124.306484][ T7154] loop2: detected capacity change from 0 to 32768
[  124.320349][ T7154] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.340617][ T7154] XFS (loop2): Ending clean mount
[  124.376150][ T5900] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  124.532012][ T7159] loop1: detected capacity change from 0 to 32768
[  124.537509][ T7159] (syz.1.553,7159,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.542079][ T7159] (syz.1.553,7159,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.551861][ T7159] JBD2: Ignoring recovery information on journal
[  124.586129][ T7159] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  124.721829][ T5906] ocfs2: Unmounting device (7,1) on (node local)
[  125.021918][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'.
[  125.094362][ T7192] loop0: detected capacity change from 0 to 2048
[  125.150917][ T7192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.160164][ T7192] ext4 filesystem being mounted at /147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.215869][   T33] audit: type=1800 audit(1775717348.109:4): pid=7192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.561" name="file1" dev="loop0" ino=15 res=0 errno=0
[  125.823549][ T7200] xt_hashlimit: size too large, truncated to 1048576
[  125.842433][ T7192] loop0: detected capacity change from 2048 to 64
[  125.952170][   T26] kworker/u9:0: attempt to access beyond end of device
[  125.952170][   T26] loop0: rw=1, sector=640, nr_sectors = 4 limit=64
[  125.956576][   T26] EXT4-fs warning (device loop0): ext4_end_bio:373: I/O error 10 writing to inode 15 starting block 160)
[  125.969140][   T26] Buffer I/O error on device loop0, logical block 160
[  125.976374][ T5901] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.996484][ T7194] kmmpd-loop0: attempt to access beyond end of device
[  125.996484][ T7194] loop0: rw=8402945, sector=320, nr_sectors = 4 limit=64
[  126.004530][ T7194] Buffer I/O error on dev loop0, logical block 80, lost sync page write
[  126.166908][   T32] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  126.280762][ T5917] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.355527][ T5917] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.358445][   T32] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  126.362618][   T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.372673][   T32] usb 2-1: config 0 descriptor??
[  126.390200][   T32] gspca_main: cpia1-2.14.0 probing 0813:0001
[  126.418772][ T5803] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  126.423842][ T5917] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.485062][ T5917] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  126.511741][ T5200] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.517423][ T5200] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.521762][ T5200] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.526021][ T5200] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.532782][ T5200] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.572974][ T5803] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  126.576024][ T5803] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.595048][ T5803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  126.609233][ T5803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.618164][ T5803] usb 3-1: Product: syz
[  126.636064][ T5803] usb 3-1: Manufacturer: syz
[  126.638359][ T5803] usb 3-1: SerialNumber: syz
[  126.648965][ T5917] bridge_slave_1: left allmulticast mode
[  126.654107][ T5917] bridge_slave_1: left promiscuous mode
[  126.658648][ T5917] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.665952][ T5803] cdc_mbim 3-1:1.0: skipping garbage
[  126.671720][ T5803] usb 3-1: selecting invalid altsetting 1
[  126.680337][ T5917] bridge_slave_0: left allmulticast mode
[  126.682603][ T5917] bridge_slave_0: left promiscuous mode
[  126.685051][ T5917] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.796918][   T32] cpia1 2-1:0.0: unexpected state after lo power cmd: 00
[  126.943132][ T5917] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  126.950763][ T5917] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  126.956176][ T5917] bond0 (unregistering): Released all slaves
[  126.986553][ T7214] wg0 speed is unknown, defaulting to 1000
[  127.085603][ T7212] random: crng reseeded on system resumption
[  127.158390][ T5803] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS
[  127.160794][ T5803] cdc_mbim 3-1:1.0: bind() failure
[  127.196276][   T32] gspca_cpia1: usb_control_msg 02, error -32
[  127.204721][   T32] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0)
[  127.239224][   T32] usb 3-1: USB disconnect, device number 9
[  127.360124][ T7214] chnl_net:caif_netlink_parms(): no params data found
[  127.378158][ T5917] hsr_slave_0: left promiscuous mode
[  127.380765][ T5917] hsr_slave_1: left promiscuous mode
[  127.383419][ T5917] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  127.386167][ T5917] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.397357][ T5917] veth1_macvtap: left promiscuous mode
[  127.399560][ T5917] veth0_macvtap: left promiscuous mode
[  127.401544][ T5917] veth1_vlan: left promiscuous mode
[  127.403449][ T5917] veth0_vlan: left promiscuous mode
[  127.412004][ T5952] usb 2-1: USB disconnect, device number 7
[  127.660674][ T5917] team0 (unregistering): Port device team_slave_1 removed
[  127.675844][ T5917] team0 (unregistering): Port device team_slave_0 removed
[  128.079510][ T7214] bridge0: port 1(bridge_slave_0) entered blocking state
[  128.082234][ T7214] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.084982][ T7214] bridge_slave_0: entered allmulticast mode
[  128.100538][ T7214] bridge_slave_0: entered promiscuous mode
[  128.113805][ T7214] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.118378][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.121029][ T7214] bridge_slave_1: entered allmulticast mode
[  128.131441][ T7214] bridge_slave_1: entered promiscuous mode
[  128.153471][ T7248] loop1: detected capacity change from 0 to 1024
[  128.179154][ T7214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.194885][ T7214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.275154][ T7214] team0: Port device team_slave_0 added
[  128.290029][ T7214] team0: Port device team_slave_1 added
[  128.297512][   T26] hfsplus: b-tree write err: -5, ino 25
[  128.299813][   T26] hfsplus: b-tree write err: -5, ino 4
[  128.301872][   T26] hfsplus: b-tree write err: -5, ino 2
[  128.329665][   T26] hfsplus: b-tree write err: -5, ino 22
[  128.356981][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.359124][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.366623][ T7214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.379970][ T7214] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.382117][ T7214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  128.392806][ T7214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.458605][ T7214] hsr_slave_0: entered promiscuous mode
[  128.461983][ T7214] hsr_slave_1: entered promiscuous mode
[  128.464856][ T7214] debugfs: 'hsr0' already exists in 'hsr'
[  128.467435][ T7214] Cannot create hsr debugfs directory
[  128.472857][ T7257] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0101 with DS=0x91
[  128.535484][ T7259] loop1: detected capacity change from 0 to 24
[  128.552268][ T7259] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  128.574448][ T7259] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  128.627011][ T5200] Bluetooth: hci0: command tx timeout
[  128.644947][ T7214] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.649694][ T7214] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  128.654021][ T7214] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  128.680591][ T7214] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.261553][ T7214] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.355767][ T7214] 8021q: adding VLAN 0 to HW filter on device team0
[  129.423854][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.426662][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.471557][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.474324][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.890206][ T7214] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.016680][ T7214] veth0_vlan: entered promiscuous mode
[  130.043235][ T7214] veth1_vlan: entered promiscuous mode
[  130.063137][ T7301] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  130.108736][ T7214] veth0_macvtap: entered promiscuous mode
[  130.134568][ T7214] veth1_macvtap: entered promiscuous mode
[  130.173438][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.192402][ T7214] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.210535][ T5899] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.217331][ T5899] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.237627][ T5899] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.240894][ T5899] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.365273][   T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.368104][   T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.389334][   T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.395547][   T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.565913][ T7326] loop3: detected capacity change from 0 to 128
[  130.705333][ T7328] loop2: detected capacity change from 0 to 4096
[  130.717078][ T5200] Bluetooth: hci0: command tx timeout
[  130.830944][ T7328] ntfs3(loop2): ino=9, attr_set_size_ex
[  131.011367][ T7333] loop3: detected capacity change from 0 to 32768
[  131.020419][ T7333] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.604 (7333)
[  131.057709][ T7333] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.061808][ T7333] BTRFS info (device loop3): using sha256 checksum algorithm
[  131.180406][ T7333] BTRFS info (device loop3): enabling ssd optimizations
[  131.184055][ T7333] BTRFS info (device loop3): turning on async discard
[  131.186658][ T7333] BTRFS info (device loop3): enabling free space tree
[  131.244571][ T7363] program syz.2.611 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  131.315801][ T7366] loop2: detected capacity change from 0 to 256
[  131.323017][ T7214] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.394773][ T7367] loop1: detected capacity change from 0 to 4096
[  131.419409][ T7367] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  131.514287][ T7367] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  131.522742][ T7367] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  131.548925][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.614'.
[  131.549252][ T7367] ntfs3(loop1): ino=3, ntfs_set_label failed, -22.
[  131.658621][   T91] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  131.668838][ T5906] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  131.678806][ T5906] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  131.696852][ T5906] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  131.707581][   T27] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  132.207650][ T7408] loop1: detected capacity change from 0 to 128
[  132.299131][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.299131][   T26] loop1: rw=1, sector=133, nr_sectors = 8 limit=128
[  132.303392][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.303392][   T26] loop1: rw=1, sector=149, nr_sectors = 8 limit=128
[  132.309984][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.309984][   T26] loop1: rw=8388609, sector=144, nr_sectors = 1 limit=128
[  132.313986][   T26] Buffer I/O error on dev loop1, logical block 144, lost async page write
[  132.317620][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.317620][   T26] loop1: rw=8388609, sector=145, nr_sectors = 1 limit=128
[  132.330879][   T26] Buffer I/O error on dev loop1, logical block 145, lost async page write
[  132.334102][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.334102][   T26] loop1: rw=8388609, sector=146, nr_sectors = 1 limit=128
[  132.340485][   T26] Buffer I/O error on dev loop1, logical block 146, lost async page write
[  132.343768][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.343768][   T26] loop1: rw=8388609, sector=147, nr_sectors = 1 limit=128
[  132.350338][   T26] Buffer I/O error on dev loop1, logical block 147, lost async page write
[  132.353483][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.353483][   T26] loop1: rw=8388609, sector=148, nr_sectors = 1 limit=128
[  132.358692][   T26] Buffer I/O error on dev loop1, logical block 148, lost async page write
[  132.361963][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.361963][   T26] loop1: rw=8388609, sector=157, nr_sectors = 1 limit=128
[  132.365971][   T26] Buffer I/O error on dev loop1, logical block 157, lost async page write
[  132.369107][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.369107][   T26] loop1: rw=8388609, sector=158, nr_sectors = 1 limit=128
[  132.373165][   T26] Buffer I/O error on dev loop1, logical block 158, lost async page write
[  132.375621][   T26] kworker/u9:0: attempt to access beyond end of device
[  132.375621][   T26] loop1: rw=8388609, sector=159, nr_sectors = 1 limit=128
[  132.380396][   T26] Buffer I/O error on dev loop1, logical block 159, lost async page write
[  132.383725][   T26] Buffer I/O error on dev loop1, logical block 128, lost async page write
[  132.387690][   T26] Buffer I/O error on dev loop1, logical block 129, lost async page write
[  132.515258][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.636'.
[  132.629097][ T7420] loop3: detected capacity change from 0 to 16
[  132.635307][ T7420] erofs (device loop3): mounted with root inode @ nid 36.
[  132.788296][ T5200] Bluetooth: hci0: command tx timeout
[  132.962756][ T7422] netlink: 44 bytes leftover after parsing attributes in process `syz.3.637'.
[  132.972981][ T7422] netlink: 51 bytes leftover after parsing attributes in process `syz.3.637'.
[  132.977316][ T7422] netlink: 'syz.3.637': attribute type 6 has an invalid length.
[  132.983122][ T7422] netlink: 51 bytes leftover after parsing attributes in process `syz.3.637'.
[  134.118005][ T7426] loop1: detected capacity change from 0 to 32768
[  134.121302][ T7426] btrfs: Deprecated parameter 'usebackuproot'
[  134.127827][ T7426] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  134.136991][ T7426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.639 (7426)
[  134.152416][ T7426] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.160649][ T7426] BTRFS info (device loop1): using crc32c checksum algorithm
[  134.288121][ T1104] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  134.292895][ T7426] BTRFS error (device loop1): failed to load root extent
[  134.295090][ T7426] BTRFS warning (device loop1): try to load backup roots slot 1
[  134.298563][ T1104] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  134.302833][ T7426] BTRFS warning (device loop1): couldn't read tree root
[  134.304810][ T7426] BTRFS warning (device loop1): try to load backup roots slot 2
[  134.308464][ T1104] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  134.312556][ T7426] BTRFS warning (device loop1): couldn't read tree root
[  134.315280][ T7426] BTRFS warning (device loop1): try to load backup roots slot 3
[  134.323938][ T7426] BTRFS info (device loop1): rebuilding free space tree
[  134.333426][ T7426] BTRFS info (device loop1): checking UUID tree
[  134.336343][ T7426] BTRFS info (device loop1): enabling ssd optimizations
[  134.339813][ T7426] BTRFS info (device loop1): turning on async discard
[  134.341791][ T7426] BTRFS info (device loop1): enabling free space tree
[  134.344352][ T7426] BTRFS info (device loop1): force clearing of disk cache
[  134.346660][ T7426] BTRFS info (device loop1): enabling auto defrag
[  134.348940][ T7426] BTRFS info (device loop1): trying to use backup root at mount time
[  134.351491][ T7426] BTRFS info (device loop1): use zstd compression, level 3
[  134.456628][ T5906] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  134.477632][ T7469] netlink: 'syz.3.652': attribute type 1 has an invalid length.
[  134.867047][ T5200] Bluetooth: hci0: command tx timeout
[  135.116152][ T7484] loop1: detected capacity change from 0 to 16
[  135.130588][ T7484] erofs (device loop1): mounted with root inode @ nid 36.
[  135.336433][ T7486] loop2: detected capacity change from 0 to 2048
[  135.390084][ T5914]  loop2: p2 < > p3 < p5 > p4
[  135.392022][ T5914] loop2: partition table partially beyond EOD, truncated
[  135.394845][ T5914] loop2: p2 start 4278190080 is beyond EOD, truncated
[  135.399444][ T5914] loop2: p4 size 8192 extends beyond EOD, truncated
[  135.403416][ T5914] loop2: p5 size 8192 extends beyond EOD, truncated
[  135.415532][ T7486]  loop2: p2 < > p3 < p5 > p4
[  135.417598][ T7486] loop2: partition table partially beyond EOD, truncated
[  135.420830][ T7486] loop2: p2 start 4278190080 is beyond EOD, truncated
[  135.425038][ T7486] loop2: p4 size 8192 extends beyond EOD, truncated
[  135.429615][ T7486] loop2: p5 size 8192 extends beyond EOD, truncated
[  135.588575][ T5200] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  135.591974][ T5200] Bluetooth: hci1: Injecting HCI hardware error event
[  135.596466][ T5200] Bluetooth: hci1: hardware error 0x00
[  135.608911][ T5902] udevd[5902]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  135.616344][ T5914] udevd[5914]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  135.649065][ T6443] udevd[6443]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  136.319843][ T7488] loop2: detected capacity change from 0 to 32768
[  136.333858][ T7488] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.660 (7488)
[  136.391170][ T7488] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.401991][ T7488] BTRFS info (device loop2): using blake2b checksum algorithm
[  136.503480][ T7488] BTRFS info (device loop2): enabling ssd optimizations
[  136.506180][ T7488] BTRFS info (device loop2): turning on async discard
[  136.510811][ T7488] BTRFS info (device loop2): enabling free space tree
[  136.724328][ T7497] loop1: detected capacity change from 0 to 32768
[  136.864808][ T7497] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.901094][ T7497] XFS (loop1): Ending clean mount
[  136.921423][   T33] audit: type=1804 audit(1775717359.849:5): pid=7497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.663" name="/newroot/189/file1/file1" dev="loop1" ino=6150 res=1 errno=0
[  137.000624][ T5906] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.076172][ T5900] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  137.245335][ T7527] Bluetooth: MGMT ver 1.23
[  137.383587][ T7533] loop1: detected capacity change from 0 to 256
[  137.428562][ T7533] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  137.685047][ T7542] loop2: detected capacity change from 0 to 32768
[  137.690052][ T7542] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.672 (7542)
[  137.697902][ T7542] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.701609][ T7542] BTRFS info (device loop2): using sha256 checksum algorithm
[  137.749262][ T5200] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  137.858832][ T7542] BTRFS info (device loop2): rebuilding free space tree
[  137.872878][ T7542] BTRFS info (device loop2): enabling ssd optimizations
[  137.875622][ T7542] BTRFS info (device loop2): using spread ssd allocation scheme
[  137.878861][ T7542] BTRFS info (device loop2): enabling free space tree
[  137.881578][ T7542] BTRFS info (device loop2): force clearing of disk cache
[  137.884218][ T7542] BTRFS info (device loop2): enabling auto defrag
[  137.886848][ T7542] BTRFS info (device loop2): max_inline set to 0
[  138.090751][ T7546] loop1: detected capacity change from 0 to 32768
[  138.145633][ T7546] read_mapping_page failed!
[  138.150868][ T7546] ERROR: (device loop1): txCommit: 
[  138.150868][ T7546] 
[  138.372102][   T13] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  138.390444][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  138.392729][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  138.464046][ T5900] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.695515][ T7580] netlink: 5 bytes leftover after parsing attributes in process `syz.2.679'.
[  139.166664][ T7598] loop1: detected capacity change from 0 to 8192
[  139.471092][ T7609] loop2: detected capacity change from 0 to 256
[  139.503809][ T7609] FAT-fs (loop2): Directory bread(block 64) failed
[  139.506339][ T7609] FAT-fs (loop2): Directory bread(block 65) failed
[  139.512048][ T7609] FAT-fs (loop2): Directory bread(block 66) failed
[  139.514259][ T7609] FAT-fs (loop2): Directory bread(block 67) failed
[  139.519168][ T7609] FAT-fs (loop2): Directory bread(block 68) failed
[  139.521432][ T7609] FAT-fs (loop2): Directory bread(block 69) failed
[  139.524460][ T7609] FAT-fs (loop2): Directory bread(block 70) failed
[  139.528589][ T7609] FAT-fs (loop2): Directory bread(block 71) failed
[  139.531423][ T7609] FAT-fs (loop2): Directory bread(block 72) failed
[  139.533739][ T7609] FAT-fs (loop2): Directory bread(block 73) failed
[  139.621195][ T7610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'.
[  139.625020][ T7610] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.692221][ T7610] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.845574][   T33] audit: type=1800 audit(1775717362.769:6): pid=7609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.696" name="file2" dev="loop2" ino=1048622 res=0 errno=0
[  139.953210][ T7614] netlink: 292 bytes leftover after parsing attributes in process `syz.2.698'.
[  140.268355][ T7618] loop2: detected capacity change from 0 to 40427
[  140.271078][ T7618] F2FS-fs: heap/no_heap options were deprecated
[  140.279283][ T7618] F2FS-fs (loop2): build fault injection rate: 16
[  140.281850][ T7618] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  140.286961][ T7618] F2FS-fs (loop2): invalid crc value
[  140.298905][ T7618] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of build_sit_entries+0x26c/0x1f10
[  140.312477][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  140.363117][ T7618] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.373671][ T7618] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  140.391738][    C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  140.429545][ T7629] cgroup: No subsys list or none specified
[  141.127731][   T33] audit: type=1326 audit(1775717364.049:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a279c819 code=0x7ffc0000
[  141.157779][   T33] audit: type=1326 audit(1775717364.049:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.711" exe="/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fd8a279c819 code=0x7ffc0000
[  141.170659][   T33] audit: type=1326 audit(1775717364.049:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a279c819 code=0x7ffc0000
[  141.182317][   T33] audit: type=1326 audit(1775717364.049:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7648 comm="syz.2.711" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8a279c819 code=0x7ffc0000
[  141.293906][ T7657] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  141.580088][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.583814][ T7673] bridge0: entered allmulticast mode
[  141.874953][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'.
[  141.920725][ T7690] loop2: detected capacity change from 0 to 4096
[  142.000487][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.724'.
[  142.162678][ T7707] loop2: detected capacity change from 0 to 512
[  142.171003][ T7707] EXT4-fs: Ignoring removed bh option
[  142.175622][ T7707] EXT4-fs: inline encryption not supported
[  142.187318][ T7707] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  142.214690][ T7707] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  142.231456][ T7707] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.727: bg 0: block 248: padding at end of block bitmap is not set
[  142.236850][ T7707] loop2: lost filesystem error report for type 5 error -117
[  142.238883][ T7707] Quota error (device loop2): write_blk: dquota write failed
[  142.246606][ T7707] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  142.250396][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  142.250418][    C0] EXT4-fs (loop2): last error at time 1775717365: ext4_validate_block_bitmap:441
[  142.257012][ T7707] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.727: Failed to acquire dquot type 1
[  142.261237][ T7707] loop2: lost filesystem error report for type 5 error -28
[  142.268941][ T7707] EXT4-fs (loop2): 1 truncate cleaned up
[  142.275215][ T7707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  142.867909][ T7721] netlink: 'syz.1.731': attribute type 11 has an invalid length.
[  143.129622][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  143.464196][ T7752] loop2: detected capacity change from 0 to 1024
[  143.492641][ T7752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.497738][ T7752] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.506445][   T33] audit: type=1800 audit(1775717366.429:11): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="file1" dev="loop2" ino=15 res=0 errno=0
[  143.532199][ T7752] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.746: lblock 0 mapped to illegal pblock 0 (length 1)
[  143.541909][ T7752] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  143.548146][ T7752] EXT4-fs (loop2): This should not happen!! Data will be lost
[  143.548146][ T7752] 
[  143.554304][ T7752] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm syz.2.746: lblock 0 mapped to illegal pblock 0 (length 1)
[  143.562164][ T7752] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  143.566685][ T7752] EXT4-fs (loop2): This should not happen!! Data will be lost
[  143.566685][ T7752] 
[  143.601230][ T5900] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  143.606886][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  143.647065][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  143.798031][   T24] usb 4-1: Using ep0 maxpacket: 16
[  143.806058][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.812564][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  143.818575][   T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  143.826869][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.832658][   T24] usb 4-1: config 0 descriptor??
[  143.877050][  T782] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  144.026848][  T782] usb 3-1: Using ep0 maxpacket: 16
[  144.032076][  T782] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  144.037507][  T782] usb 3-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  144.045676][  T782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.053481][  T782] usb 3-1: config 0 descriptor??
[  144.205489][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  144.209798][ T7762] netlink: 'syz.1.750': attribute type 1 has an invalid length.
[  144.213091][ T7762] netlink: 'syz.1.750': attribute type 2 has an invalid length.
[  144.255934][   T24] uclogic 0003:28BD:0042.0006: interface is invalid, ignoring
[  144.463525][   T24] usb 4-1: USB disconnect, device number 2
[  144.477866][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.480220][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.482466][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.484856][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.487649][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.489823][  T782] zeroplus 0003:0C12:0030.0007: unknown main item tag 0x0
[  144.491944][  T782] zeroplus 0003:0C12:0030.0007: bogus close delimiter
[  144.494119][  T782] zeroplus 0003:0C12:0030.0007: item 0 0 2 10 parsing failed
[  144.497925][  T782] zeroplus 0003:0C12:0030.0007: parse failed
[  144.499833][  T782] zeroplus 0003:0C12:0030.0007: probe with driver zeroplus failed with error -22
[  144.682276][   T24] usb 3-1: USB disconnect, device number 10
[  146.013491][ T7814] loop3: detected capacity change from 0 to 4096
[  146.020051][ T7814] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  146.033784][ T7814] ntfs3(loop3): volume is dirty and "force" flag is not set!
[  146.371799][ T7836] ip6gretap0: entered promiscuous mode
[  146.373629][ T7836] macsec1: entered promiscuous mode
[  146.375258][ T7836] macsec1: entered allmulticast mode
[  146.377613][ T7836] ip6gretap0: entered allmulticast mode
[  146.382384][ T7836] ip6gretap0: left allmulticast mode
[  146.384024][ T7836] ip6gretap0: left promiscuous mode
[  146.560572][ T7832] loop3: detected capacity change from 0 to 32768
[  146.589379][ T7832] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.626076][ T7832] XFS (loop3): Ending clean mount
[  146.638905][ T7832] XFS (loop3): Quotacheck needed: Please wait.
[  146.646114][ T7838] loop2: detected capacity change from 0 to 32768
[  146.685084][ T7838] read_mapping_page failed!
[  146.691943][ T7838] ERROR: (device loop2): txCommit: 
[  146.691943][ T7838] 
[  146.718702][ T1104] read_mapping_page failed!
[  146.720524][ T1104] ERROR: (device loop2): txCommit: 
[  146.720524][ T1104] 
[  146.727129][ T1104] jfs_write_inode: jfs_commit_inode failed!
[  146.727532][ T7832] XFS (loop3): Quotacheck: Done.
[  146.843958][ T7214] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.879965][ T7854] loop2: detected capacity change from 0 to 4096
[  146.883769][ T7854] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  146.908024][ T7854] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  146.933412][ T7854] ntfs3(loop2): ino=19, mi_enum_attr
[  146.967526][ T7858] tmpfs: Bad value for 'nr_blocks'
[  147.101868][ T7868] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.796'.
[  147.249352][ T7878] netlink: 84 bytes leftover after parsing attributes in process `syz.3.802'.
[  148.131568][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'.
[  148.134499][ T7900] openvswitch: netlink: Invalid VLAN frame
[  148.405855][ T7904] netlink: 'syz.2.811': attribute type 3 has an invalid length.
[  149.417760][   T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  149.426262][   T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.435371][ T7930] overlayfs: failed to get inode (-116)
[  149.449138][   T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.455485][ T7930] overlayfs: failed to get inode (-116)
[  149.457526][   T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  150.175964][ T7945] loop3: detected capacity change from 0 to 2048
[  150.195467][ T7945] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  150.200830][ T5902] udevd[5902]: incorrect nilfs2 checksum on /dev/loop3
[  150.208482][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop3
[  150.231195][ T7948] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.235377][ T7945] NILFS (loop3): corrupt root inode
[  150.416889][  T782] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  150.569090][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.573300][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.577086][  T782] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  150.580791][  T782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.586429][  T782] usb 3-1: config 0 descriptor??
[  150.724620][ T7965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.840'.
[  150.782045][ T7968] loop3: detected capacity change from 0 to 512
[  150.795751][ T7968] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.858554][ T7214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.917351][ T7974] vlan2: entered promiscuous mode
[  150.921784][ T7974] dummy0: entered promiscuous mode
[  150.925483][ T7974] vlan2: entered allmulticast mode
[  150.929338][ T7974] dummy0: entered allmulticast mode
[  151.034834][  T782] hid-led 0003:1D34:000A.0008: collection stack underflow
[  151.038729][  T782] hid-led 0003:1D34:000A.0008: item 0 1 0 12 parsing failed
[  151.041840][  T782] hid-led 0003:1D34:000A.0008: probe with driver hid-led failed with error -22
[  151.236462][ T5803] usb 3-1: USB disconnect, device number 11
[  151.840455][ T7992] netlink: 156 bytes leftover after parsing attributes in process `syz.2.851'.
[  152.116006][ T5277] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  152.132652][ T5277] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  152.486584][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.862'.
[  153.017701][ T5803] kernel read not supported for file /147/attr/keycreate (pid: 5803 comm: kworker/0:4)
[  153.407723][ T5952] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  153.557408][ T5952] usb 4-1: Using ep0 maxpacket: 16
[  153.560699][ T5952] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  153.563576][ T5952] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  153.566807][ T5952] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0
[  153.569883][ T5952] usb 4-1: config 0 interface 0 has no altsetting 0
[  153.574779][ T5952] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  153.579002][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.581547][ T5952] usb 4-1: Product: syz
[  153.582964][ T5952] usb 4-1: Manufacturer: syz
[  153.584550][ T5952] usb 4-1: SerialNumber: syz
[  153.588804][ T5952] usb 4-1: config 0 descriptor??
[  153.748532][ T8054] loop2: detected capacity change from 0 to 128
[  153.764050][ T8054] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  153.769066][ T8054] hpfs: filesystem error: improperly stopped
[  153.772405][ T8054] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  153.775284][ T8054] hpfs: You really don't want any checks? You are crazy...
[  153.791958][ T8054] hpfs: hpfs_map_sector(): read error
[  153.794143][ T8054] hpfs: code page support is disabled
[  153.801021][ T5952] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9
[  153.804609][ T8054] hpfs: hpfs_map_4sectors(): unaligned read
[  153.807270][ T8054] hpfs: hpfs_map_4sectors(): unaligned read
[  153.809379][ T8054] hpfs: filesystem error: unable to find root dir
[  153.814007][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.825459][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.838574][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.848209][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.889513][ T6443] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.918469][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.925799][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.987221][ T5244] synaptics_usb 4-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  153.995101][ T8066] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  154.006990][ T8066] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  154.010623][ T5803] usb 4-1: USB disconnect, device number 3
[  154.027807][ T8066] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3)
[  154.103993][ T8072] loop2: detected capacity change from 0 to 512
[  154.126077][ T8072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.139455][ T8072] ext4 filesystem being mounted at /314/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  154.181063][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.605059][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.898'.
[  154.617490][ T8095] netlink: 76 bytes leftover after parsing attributes in process `syz.2.898'.
[  154.677246][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'.
[  154.679857][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[  154.684976][ T8099] netlink: 'syz.2.900': attribute type 11 has an invalid length.
[  154.988417][ T8105] loop2: detected capacity change from 0 to 40427
[  154.991188][ T8105] F2FS-fs: heap/no_heap options were deprecated
[  154.993562][ T8105] F2FS-fs: heap/no_heap options were deprecated
[  154.997882][ T8105] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  155.000920][ T8105] F2FS-fs (loop2): FLUSH_MERGE not compatible with readonly mode
[  155.063435][ T8112] netlink: 48 bytes leftover after parsing attributes in process `syz.2.905'.
[  155.078285][ T8112] netlink: 48 bytes leftover after parsing attributes in process `syz.2.905'.
[  155.258488][ T8128] loop3: detected capacity change from 0 to 2048
[  155.269088][ T8128] udf: Unexpected value for 'shortad'
[  155.482486][ T8148] tipc: Started in network mode
[  155.484355][ T8148] tipc: Node identity ac14140f, cluster identity 4711
[  155.487528][ T8147] netlink: 'syz.2.922': attribute type 4 has an invalid length.
[  155.489105][ T8148] tipc: New replicast peer: 255.255.255.255
[  155.493778][ T8148] tipc: Enabled bearer <udp:syz2>, priority 10
[  155.538173][ T8147] netlink: 'syz.2.922': attribute type 4 has an invalid length.
[  155.580697][ T8147] syz.2.922 (8147) used greatest stack depth: 19296 bytes left
[  155.759465][ T8165] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  155.868536][ T5277] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  156.032240][ T5277] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  156.035604][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  156.039230][ T5277] usb 4-1: Product: syz
[  156.040986][ T5277] usb 4-1: SerialNumber: syz
[  156.044724][ T5277] usb 4-1: config 0 descriptor??
[  156.107408][  T782] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  156.253899][ T5277] hso 4-1:0.0: Failed to find BULK IN ep
[  156.256911][  T782] usb 3-1: Using ep0 maxpacket: 32
[  156.265313][  T782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.269467][  T782] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  156.274134][  T782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  156.278401][  T782] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  156.285808][  T782] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  156.290109][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.293147][  T782] usb 3-1: Product: syz
[  156.294886][  T782] usb 3-1: Manufacturer: syz
[  156.296869][  T782] usb 3-1: SerialNumber: syz
[  156.301307][  T782] usb 3-1: config 0 descriptor??
[  156.307468][  T782] usb 3-1: no audio or video endpoints found
[  156.457409][ T5277] usb 4-1: USB disconnect, device number 4
[  156.620211][  T782] tipc: Node number set to 2886997007
[  156.654073][ T5953] usb 3-1: USB disconnect, device number 12
[  157.588002][  T782] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  157.777600][  T782] usb 3-1: Using ep0 maxpacket: 32
[  157.815231][  T782] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  157.825765][  T782] usb 3-1: config 0 has no interface number 0
[  157.871182][  T782] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  157.874683][  T782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.878205][  T782] usb 3-1: Product: syz
[  157.881223][  T782] usb 3-1: Manufacturer: syz
[  157.883136][  T782] usb 3-1: SerialNumber: syz
[  157.890691][  T782] usb 3-1: config 0 descriptor??
[  158.525556][  T782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  158.534759][  T782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  158.539880][  T782] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  158.544066][  T782] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  158.555859][  T782] usb 3-1: USB disconnect, device number 13
[  158.608190][ T8221] netlink: 'syz.1.953': attribute type 21 has an invalid length.
[  158.610432][ T8221] netlink: 128 bytes leftover after parsing attributes in process `syz.1.953'.
[  158.613027][ T8221] netlink: 'syz.1.953': attribute type 4 has an invalid length.
[  158.615242][ T8221] netlink: 'syz.1.953': attribute type 5 has an invalid length.
[  158.618772][ T8221] netlink: 3 bytes leftover after parsing attributes in process `syz.1.953'.
[  158.729626][ T8227] 8021q: adding VLAN 0 to HW filter on device batadv1
[  158.734375][ T8227] team0: Port device batadv1 added
[  159.144719][ T8256] x_tables: unsorted underflow at hook 4
[  159.447720][  T782] usb 3-1: new full-speed USB device number 14 using dummy_hcd
[  159.639115][  T782] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  159.642169][  T782] usb 3-1: config 0 has no interface number 0
[  159.644691][  T782] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[  159.652730][  T782] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  159.657652][  T782] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  159.663011][  T782] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  159.665731][  T782] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  159.669366][  T782] usb 3-1: Product: syz
[  159.671006][  T782] usb 3-1: SerialNumber: syz
[  159.677013][  T782] usb 3-1: config 0 descriptor??
[  159.688627][  T782] cm109 3-1:0.8: invalid payload size 0, expected 4
[  159.693616][  T782] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10
[  159.865141][ T8271] xt_CONNSECMARK: invalid mode: 0
[  159.928834][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  160.165928][ T8282] cgroup: name respecified
[  160.248764][ T8283] netlink: 216 bytes leftover after parsing attributes in process `syz.3.979'.
[  160.492057][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  160.494886][  T782] usb 3-1: USB disconnect, device number 14
[  160.496153][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  160.499513][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  160.510180][  T782] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  161.035915][ T8291] loop3: detected capacity change from 0 to 128
[  161.040349][ T8290] netlink: 36 bytes leftover after parsing attributes in process `syz.1.985'.
[  161.059928][ T8291] FAT-fs (loop3): error, corrupted directory (invalid entries)
[  161.064295][ T8291] FAT-fs (loop3): Filesystem has been set read-only
[  161.274156][ T8303] bond1: entered promiscuous mode
[  161.282096][ T8303] 8021q: adding VLAN 0 to HW filter on device bond1
[  161.287098][ T8303] bridge0: port 3(bond1) entered blocking state
[  161.290472][ T8303] bridge0: port 3(bond1) entered disabled state
[  161.294646][ T8303] bond1: entered allmulticast mode
[  161.304089][ T8303] bridge0: port 3(bond1) entered blocking state
[  161.307012][ T8303] bridge0: port 3(bond1) entered forwarding state
[  161.330239][ T1094] bridge0: port 3(bond1) entered disabled state
[  161.372567][ T8308] loop3: detected capacity change from 0 to 4096
[  161.404540][ T8311] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.644482][ T8316] loop3: detected capacity change from 0 to 4096
[  161.851135][ T8318] loop3: detected capacity change from 0 to 32768
[  161.862603][ T8318] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  161.862603][ T8318] 
[  161.886609][   T40] read_mapping_page failed!
[  161.888411][   T40] ERROR: (device loop3): txCommit: 
[  161.888411][   T40] 
[  161.891016][   T40] jfs_write_inode: jfs_commit_inode failed!
[  161.961243][ T8322] netlink: 9 bytes leftover after parsing attributes in process `syz.1.999'.
[  161.966977][ T8322] ..0: renamed from hsr0 (while UP)
[  161.990216][ T8322] ..0: entered allmulticast mode
[  161.992224][ T8322] hsr_slave_0: entered allmulticast mode
[  161.994447][ T8322] hsr_slave_1: entered allmulticast mode
[  162.008069][ T8322] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[  162.299039][ T8338] loop3: detected capacity change from 0 to 128
[  162.348315][ T8338] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.353278][ T8338] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.360313][ T8338] EXT4-fs warning (device loop3): ext4_group_extend:1861: can't shrink FS - resize aborted
[  162.381577][ T7214] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.607063][ T5277] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  162.914899][   T33] audit: type=1326 audit(1775718409.811:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.3.1010" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d5f79c819 code=0x0
[  163.008579][ T5277] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  163.011202][ T5277] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  163.013886][ T5277] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  163.038435][ T5277] usb 3-1: config 220 has no interface number 2
[  163.040848][ T5277] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  163.045628][ T5277] usb 3-1: config 220 interface 0 has no altsetting 0
[  163.048285][ T5277] usb 3-1: config 220 interface 76 has no altsetting 0
[  163.050887][ T5277] usb 3-1: config 220 interface 1 has no altsetting 0
[  163.055636][ T5277] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  163.059313][ T5277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.062256][ T5277] usb 3-1: Product: syz
[  163.063802][ T5277] usb 3-1: Manufacturer: syz
[  163.065451][ T5277] usb 3-1: SerialNumber: syz
[  163.284239][ T5277] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  163.292820][ T5277] uvcvideo 3-1:220.0: No valid video chain found.
[  163.297173][ T5277] usb 3-1: selecting invalid altsetting 0
[  163.318098][ T5277] usb 3-1: selecting invalid altsetting 0
[  163.320060][ T5277] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  163.324462][ T5277] usb 3-1: USB disconnect, device number 15
[  163.894808][ T8389] loop2: detected capacity change from 0 to 1024
[  163.956496][ T8389] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.039388][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.102191][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1032'.
[  164.771718][ T8418] loop2: detected capacity change from 0 to 32768
[  164.801463][ T8418] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  164.863010][ T8418] syz.2.1038 (8418) used greatest stack depth: 19104 bytes left
[  164.900859][ T5900] ocfs2: Unmounting device (7,2) on (node local)
[  165.421310][ T8454] loop3: detected capacity change from 0 to 256
[  165.500041][ T8454] FAT-fs (loop3): Directory bread(block 64) failed
[  165.502971][ T8454] FAT-fs (loop3): Directory bread(block 65) failed
[  165.505928][ T8454] FAT-fs (loop3): Directory bread(block 66) failed
[  165.511591][ T8454] FAT-fs (loop3): Directory bread(block 67) failed
[  165.514675][ T8454] FAT-fs (loop3): Directory bread(block 68) failed
[  165.518588][ T8454] FAT-fs (loop3): Directory bread(block 69) failed
[  165.524952][ T8454] FAT-fs (loop3): Directory bread(block 70) failed
[  165.529761][ T8454] FAT-fs (loop3): Directory bread(block 71) failed
[  165.532920][ T8454] FAT-fs (loop3): Directory bread(block 72) failed
[  165.535860][ T8454] FAT-fs (loop3): Directory bread(block 73) failed
[  165.764548][ T8456] tipc: Enabled bearer <eth:netdevsim0>, priority 10
[  165.943715][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1057'.
[  166.527722][ T8464] loop3: detected capacity change from 0 to 32768
[  166.542251][   T33] audit: type=1800 audit(1775718413.461:13): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1059" name="file0" dev="loop3" ino=33 res=0 errno=0
[  167.264471][ T8478] loop2: detected capacity change from 0 to 1024
[  167.356844][ T8478] hfsplus: bad catalog entry type
[  167.387158][ T1104] hfsplus: b-tree write err: -5, ino 25
[  167.389485][ T1104] hfsplus: b-tree write err: -5, ino 4
[  167.391789][ T1104] hfsplus: b-tree write err: -5, ino 2
[  167.635227][ T8497] kernel profiling enabled (shift: 63)
[  167.639269][ T8497] profiling shift: 63 too large
[  168.385432][ T8513] loop3: detected capacity change from 0 to 512
[  168.394736][ T8513] FAT-fs (loop3): bogus number of FAT sectors
[  168.397648][ T8513] FAT-fs (loop3): Can't find a valid FAT filesystem
[  168.413592][ T8507] loop2: detected capacity change from 0 to 40427
[  168.422827][ T8507] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(56834) root(3)
[  168.427218][ T8507] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  168.511531][ T8507] F2FS-fs (loop2): invalid crc value
[  168.526466][ T8507] F2FS-fs (loop2): Invalid segment type: 8, segno: 11
[  168.546636][ T8507] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  168.594995][ T8522] loop3: detected capacity change from 0 to 512
[  168.608987][ T8522] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  168.631056][ T8522] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1082: invalid indirect mapped block 4294967295 (level 1)
[  168.638066][ T8522] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  168.646780][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  168.652661][    C0] EXT4-fs (loop3): initial error at time 1775718415: ext4_free_branches:1023: inode 11
[  168.656190][    C0] EXT4-fs (loop3): last error at time 1775718415: ext4_free_branches:1023: inode 11
[  168.662549][ T8522] EXT4-fs (loop3): Remounting filesystem read-only
[  168.666002][ T8522] EXT4-fs (loop3): 2 truncates cleaned up
[  168.672243][ T8522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.705713][ T7214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.753765][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[  168.767368][ T8528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1084'.
[  168.799980][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1084'.
[  168.852456][ T8536] loop2: detected capacity change from 0 to 256
[  168.867733][ T8536] exfat: Deprecated parameter 'utf8'
[  168.886585][ T8536] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  169.012173][ T8545] loop2: detected capacity change from 0 to 2048
[  169.032361][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop2
[  169.040130][ T8545] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  169.050137][ T5914] udevd[5914]: incorrect nilfs2 checksum on /dev/loop2
[  169.068499][ T8549] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  169.072673][ T8545] nilfs2: Unknown parameter '01777777777777777777777184467440737095516150xffffffffffffffff0x00000000000000002VcǟT'
[  169.837441][ T8555] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  169.841277][ T8555] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[  169.845289][ T8555] bridge_slave_1: invalid flags given to default FDB implementation
[  171.076902][ T5966] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  171.230701][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short
[  171.236522][ T5966] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  171.240699][ T5966] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  171.244273][ T5966] usb 4-1: config 1 has no interface number 0
[  171.246664][ T5966] usb 4-1: config 1 interface 1 has no altsetting 0
[  171.251692][ T5966] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40
[  171.255013][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.258921][ T5966] usb 4-1: Product: syz
[  171.260466][ T5966] usb 4-1: Manufacturer: syz
[  171.262129][ T5966] usb 4-1: SerialNumber: syz
[  171.481569][ T5966] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -71
[  171.491837][ T5966] usb 4-1: USB disconnect, device number 5
[  171.721569][ T8616] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1120'.
[  171.744511][ T8614] loop2: detected capacity change from 0 to 4096
[  171.755597][ T8614] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  171.768274][ T8614] ntfs3(loop2): ino=3, mi_enum_attr
[  171.814436][ T8614] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  171.817687][ T8614] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[  171.822875][ T8614] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to write
[  172.510506][ T8622] loop2: detected capacity change from 0 to 32768
[  172.927287][ T8639] loop3: detected capacity change from 0 to 512
[  172.941916][ T8639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.945725][ T8639] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.986219][ T7214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.062769][ T8645] wg0 speed is unknown, defaulting to 1000
[  173.166363][ T8654] ip6tnl1: entered allmulticast mode
[  173.800406][ T8676] bond1: option min_links: invalid value (18446744073709551612)
[  173.802786][ T8676] bond1: option min_links: allowed values 0 - 2147483647
[  173.849735][ T8676] bond1 (unregistering): Released all slaves
[  173.929807][ T5917] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.933442][ T5917] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.967001][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.022070][ T8682] loop3: detected capacity change from 0 to 128
[  174.032203][ T8682] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  174.087141][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.107100][ T5803] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  174.175111][ T8689] loop3: detected capacity change from 0 to 128
[  174.184240][ T8689] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  174.197644][ T8689] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  174.617039][ T5803] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  174.787004][ T5803] usb 4-1: Using ep0 maxpacket: 32
[  174.793886][ T5803] usb 4-1: config 210 has an invalid descriptor of length 0, skipping remainder of the config
[  174.798157][ T5803] usb 4-1: config 210 has 1 interface, different from the descriptor's value: 3
[  174.806331][ T5803] usb 4-1: New USB device found, idVendor=0763, idProduct=2012, bcdDevice= 0.40
[  174.810057][ T5803] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.813040][ T5803] usb 4-1: Product: syz
[  174.815037][ T5803] usb 4-1: Manufacturer: syz
[  174.817524][ T5803] usb 4-1: SerialNumber: syz
[  175.079601][ T5803] usb 4-1: Fast Track Pro config OK
[  175.085954][ T5803] usb 4-1: cannot find UAC_HEADER
[  175.162514][ T8707] bridge0: entered promiscuous mode
[  175.166444][ T8707] bridge0: port 4(macsec1) entered blocking state
[  175.169142][ T5803] snd-usb-audio 4-1:210.0: probe with driver snd-usb-audio failed with error -22
[  175.171126][ T8707] bridge0: port 4(macsec1) entered disabled state
[  175.175077][ T8707] macsec1: entered allmulticast mode
[  175.176979][ T5803] usb 4-1: USB disconnect, device number 6
[  175.177319][ T8707] bridge0: entered allmulticast mode
[  175.189413][ T8707] macsec1: left allmulticast mode
[  175.192849][ T8707] bridge0: left allmulticast mode
[  175.201984][ T5914] udevd[5914]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:210.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.208623][ T8707] bridge0: left promiscuous mode
[  175.449844][ T8709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1158'.
[  175.688881][ T8718] overlayfs: failed to clone upperpath
[  175.797312][ T8727] input: syz0 as /devices/virtual/input/input11
[  176.160271][ T8738] loop3: detected capacity change from 0 to 512
[  176.191311][ T8738] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  176.194214][ T8738] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[  176.198404][ T8738] EXT4-fs (loop3): orphan cleanup on readonly fs
[  176.201217][ T8738] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  176.206331][ T8738] EXT4-fs warning (device loop3): ext4_enable_quotas:7261: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  176.211686][ T8738] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  176.224494][ T8738] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1169: bg 0: block 40: padding at end of block bitmap is not set
[  176.230424][ T8738] loop3: lost filesystem error report for type 5 error -117
[  176.233919][ T8738] EXT4-fs (loop3): Remounting filesystem read-only
[  176.238504][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  176.238523][    C1] EXT4-fs (loop3): initial error at time 1775718423: ext4_validate_block_bitmap:441
[  176.238542][    C1] EXT4-fs (loop3): last error at time 1775718423: ext4_validate_block_bitmap:441
[  176.246580][ T8738] EXT4-fs (loop3): 1 truncate cleaned up
[  176.256949][ T8738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  176.403983][ T8741] loop2: detected capacity change from 0 to 32768
[  176.408265][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.413397][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  176.434698][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  176.439475][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  176.444604][ T8741] JBD2: Ignoring recovery information on journal
[  176.468932][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC.
[  176.474691][ T8741] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  176.478829][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC.
[  176.495662][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  176.545503][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  176.559656][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC.
[  176.564206][ T8741] (syz.2.1172,8741,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af
[  176.568207][ T8741] (syz.2.1172,8741,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  176.571543][ T8741] (syz.2.1172,8741,0):ocfs2_quota_read:201 ERROR: status = -5
[  176.574343][ T8741] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5
[  176.577950][ T8741] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  176.581379][ T8741] (syz.2.1172,8741,0):ocfs2_acquire_dquot:890 ERROR: status = -5
[  176.586322][ T8741] (syz.2.1172,8741,0):ocfs2_mknod:318 ERROR: status = -5
[  176.589297][ T8741] (syz.2.1172,8741,0):ocfs2_mknod:506 ERROR: status = -5
[  176.592188][ T8741] (syz.2.1172,8741,0):ocfs2_create:679 ERROR: status = -5
[  176.614806][ T8741] syz.2.1172 (8741) used greatest stack depth: 18080 bytes left
[  176.665090][ T5900] ocfs2: Unmounting device (7,2) on (node local)
[  176.800365][ T8738] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.088500][ T8761] kernel profiling enabled (shift: 63)
[  177.090331][ T8761] profiling shift: 63 too large
[  177.385884][ T8771] netlink: 'syz.2.1184': attribute type 21 has an invalid length.
[  178.102475][ T5966] IPVS: starting estimator thread 0...
[  178.146968][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  178.186973][ T8797] IPVS: using max 65 ests per chain, 156000 per kthread
[  178.834720][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1199'.
[  180.007180][ T5966] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  180.235346][ T5966] usb 4-1: unable to get BOS descriptor or descriptor too short
[  180.241669][ T5966] usb 4-1: config 8 has an invalid interface number: 109 but max is 0
[  180.244924][ T5966] usb 4-1: config 8 has no interface number 0
[  180.247515][ T5966] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8
[  180.252298][ T5966] usb 4-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8
[  180.256610][ T5966] usb 4-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  180.264610][ T5966] usb 4-1: string descriptor 0 read error: -22
[  180.267293][ T5966] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29
[  180.270843][ T5966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.278924][ T8827] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.285567][ T5966] metro_usb 4-1:8.109: Metrologic USB to Serial converter detected
[  180.296204][ T5966] usb 4-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  180.411349][ T8837] overlay: Unexpected value for 'default_permissions'
[  180.540788][  T838] usb 4-1: USB disconnect, device number 7
[  180.556691][  T838] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  180.569284][  T838] metro_usb 4-1:8.109: device disconnected
[  180.995793][ T8853] tmpfs: Bad value for 'mpol'
[  181.211461][ T8859] loop3: detected capacity change from 0 to 512
[  181.215898][ T8859] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  181.221813][ T8859] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  181.247005][ T8859] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1222: bad orphan inode 131083
[  181.262962][ T8859] loop3: lost filesystem error report for type 5 error -117
[  181.264154][ T8859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.319346][ T7214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.581615][ T8874] loop2: detected capacity change from 0 to 128
[  181.584723][ T8868] loop3: detected capacity change from 0 to 40427
[  181.598939][ T8868] F2FS-fs (loop3): invalid crc value
[  181.607949][ T8874] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  181.616517][ T8874] hpfs: filesystem error: improperly stopped
[  181.627074][ T8874] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  181.633835][ T8874] hpfs: You really don't want any checks? You are crazy...
[  181.643735][ T8868] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  181.647269][ T8868] F2FS-fs (loop3): Start checkpoint disabled!
[  181.655329][ T8874] hpfs: hpfs_map_sector(): read error
[  181.659675][ T8868] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  181.662303][ T8868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  181.682113][   T33] audit: type=1800 audit(1775718428.601:14): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1225" name="file1" dev="loop3" ino=10 res=0 errno=0
[  181.692328][ T8874] hpfs: code page support is disabled
[  181.694456][ T8874] hpfs: hpfs_map_4sectors(): unaligned read
[  181.696376][ T8874] hpfs: hpfs_map_4sectors(): unaligned read
[  181.707012][ T8874] hpfs: filesystem error: unable to find root dir
[  181.945539][ T8880] bio_check_eod: 6 callbacks suppressed
[  181.945588][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.945588][ T8880] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  181.960104][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.960104][ T8880] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  181.968434][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.968434][ T8880] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  181.974083][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.974083][ T8880] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  181.983651][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.983651][ T8880] loop3: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  181.997378][ T8880] syz.3.1225: attempt to access beyond end of device
[  181.997378][ T8880] loop3: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  182.007846][ T8880] syz.3.1225: attempt to access beyond end of device
[  182.007846][ T8880] loop3: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  182.018504][ T8880] syz.3.1225: attempt to access beyond end of device
[  182.018504][ T8880] loop3: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  182.028481][ T8880] syz.3.1225: attempt to access beyond end of device
[  182.028481][ T8880] loop3: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  182.035553][ T8880] syz.3.1225: attempt to access beyond end of device
[  182.035553][ T8880] loop3: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  182.122778][ T8879] loop2: detected capacity change from 0 to 4096
[  182.150470][ T8877] ip6t_REJECT: ECHOREPLY is not supported
[  182.158053][ T8881] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.381230][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[  182.381254][   T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  182.381264][   T40] Workqueue: writeback wb_workfn (flush-7:3)
[  182.384337][   T40] Call Trace:
[  182.384351][   T40]  <TASK>
[  182.384371][   T40]  dump_stack_lvl+0xe8/0x150
[  182.384397][   T40]  f2fs_handle_critical_error+0x37c/0x540
[  182.384425][   T40]  f2fs_write_end_io+0xcdb/0xff0
[  182.384455][   T40]  __submit_merged_bio+0x256/0x700
[  182.384481][   T40]  __submit_merged_write_cond+0x3c9/0x4e0
[  182.384508][   T40]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  182.384547][   T40]  f2fs_write_data_pages+0x2975/0x35e0
[  182.384568][   T40]  ? unwind_next_frame+0xa5/0x23c0
[  182.384587][   T40]  ? lock_release+0x4b/0x3d0
[  182.384633][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.384666][   T40]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  182.384709][   T40]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  182.384749][   T40]  ? __lock_acquire+0x6b5/0x2cf0
[  182.384778][   T40]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  182.384798][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  182.384820][   T40]  do_writepages+0x32e/0x550
[  182.384871][   T40]  ? reacquire_held_locks+0x104/0x190
[  182.384891][   T40]  ? writeback_sb_inodes+0x477/0x1a20
[  182.384916][   T40]  __writeback_single_inode+0x133/0x11a0
[  182.384937][   T40]  ? do_raw_spin_unlock+0x4d/0x210
[  182.384957][   T40]  writeback_sb_inodes+0x992/0x1a20
[  182.385001][   T40]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  182.385018][   T40]  ? do_raw_spin_lock+0x12b/0x2f0
[  182.385075][   T40]  ? rcu_is_watching+0x15/0xb0
[  182.385101][   T40]  wb_writeback+0x456/0xb70
[  182.385124][   T40]  ? queue_io+0x251/0x4a0
[  182.385149][   T40]  ? __pfx_wb_writeback+0x10/0x10
[  182.385167][   T40]  ? do_raw_spin_lock+0x12b/0x2f0
[  182.385202][   T40]  wb_workfn+0x414/0xf50
[  182.385222][   T40]  ? look_up_lock_class+0x57/0x110
[  182.385251][   T40]  ? __pfx_wb_workfn+0x10/0x10
[  182.385271][   T40]  ? do_raw_spin_lock+0x12b/0x2f0
[  182.385380][   T40]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  182.385416][   T40]  ? process_scheduled_works+0xa8d/0x18c0
[  182.385436][   T40]  ? process_scheduled_works+0xa8d/0x18c0
[  182.385456][   T40]  process_scheduled_works+0xb6e/0x18c0
[  182.385503][   T40]  ? __pfx_process_scheduled_works+0x10/0x10
[  182.385527][   T40]  ? assign_work+0x3d5/0x5e0
[  182.385551][   T40]  worker_thread+0xa53/0xfc0
[  182.385593][   T40]  kthread+0x388/0x470
[  182.385609][   T40]  ? __pfx_worker_thread+0x10/0x10
[  182.385627][   T40]  ? __pfx_kthread+0x10/0x10
[  182.385642][   T40]  ret_from_fork+0x51e/0xb90
[  182.385664][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[  182.385682][   T40]  ? __switch_to+0xc7d/0x1450
[  182.385702][   T40]  ? __pfx_kthread+0x10/0x10
[  182.385718][   T40]  ret_from_fork_asm+0x1a/0x30
[  182.385753][   T40]  </TASK>
[  182.385762][   T40] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  182.492496][ T8885] loop2: detected capacity change from 0 to 4096
[  182.579101][ T8885] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  182.597034][ T8885] ntfs3(loop2): ino=3, mi_enum_attr
[  182.599520][ T8885] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  182.602225][ T8885] ntfs3(loop2): Failed to load $LogFile (-2).
[  182.739095][ T8889] loop2: detected capacity change from 0 to 1024
[  182.846311][   T91] hfsplus: b-tree write err: -5, ino 25
[  182.850786][   T91] hfsplus: b-tree write err: -5, ino 4
[  182.852889][   T91] hfsplus: b-tree write err: -5, ino 2
[  182.952287][ T8897] loop2: detected capacity change from 0 to 64
[  183.038367][ T5952] kernel write not supported for file bpf-prog (pid: 5952 comm: kworker/1:3)
[  183.050702][ T8902] buffer_io_error: 4 callbacks suppressed
[  183.050783][ T8902] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  183.063583][ T8902] Buffer I/O error on dev loop2, logical block 134217734, async page read
[  183.886451][ T8915] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1245'.
[  184.371960][ T8933] overlay: Bad value for 'workdir'
[  184.519060][ T8944] loop2: detected capacity change from 0 to 16
[  184.539328][ T8944] erofs (device loop2): mounted with root inode @ nid 36.
[  184.637305][ T8944] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  184.641885][ T8944] erofs (device loop2): read error -117 @ 1 of nid 89
[  184.682815][ T8944] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  184.687214][ T8944] erofs (device loop2): read error -117 @ 1 of nid 89
[  184.917508][   T33] audit: type=1800 audit(1775718431.561:15): pid=8944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1257" name="file2" dev="loop2" ino=89 res=0 errno=0
[  185.456378][   T57] block nbd0: Receive control failed (result -32)
[  185.896862][  T838] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  186.056834][  T838] usb 4-1: Using ep0 maxpacket: 16
[  186.061018][  T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  186.065295][  T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  186.069325][  T838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  186.074146][  T838] usb 4-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  186.077867][  T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.083204][  T838] usb 4-1: config 0 descriptor??
[  186.495967][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.504100][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.511273][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.513212][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.516177][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.518895][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.520914][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.523307][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.525348][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.528493][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.531293][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x0
[  186.533384][  T838] apple 0003:05AC:027D.000A: unknown main item tag 0x2
[  186.541918][  T838] apple 0003:05AC:027D.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.3-1/input0
[  186.668932][ T8991] loop2: detected capacity change from 0 to 32768
[  186.681580][ T8991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1280 (8991)
[  186.708532][ T8991] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.712195][ T8991] BTRFS info (device loop2): using crc32c checksum algorithm
[  186.720488][ T5952] usb 4-1: USB disconnect, device number 8
[  186.804450][ T8991] BTRFS info (device loop2): enabling ssd optimizations
[  186.816854][ T8991] BTRFS info (device loop2): turning on flush-on-commit
[  186.819646][ T8991] BTRFS info (device loop2): enabling free space tree
[  186.822265][ T8991] BTRFS info (device loop2): enabling auto defrag
[  186.824724][ T8991] BTRFS info (device loop2): use lzo compression, level 1
[  186.833294][ T8991] BTRFS info (device loop2): max_inline set to 4096
[  187.026898][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  187.600452][ T5900] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.654216][ T9026] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1290'.
[  187.754381][ T9029] loop3: detected capacity change from 0 to 1024
[  187.756989][ T9031] netlink: 'syz.1.1292': attribute type 1 has an invalid length.
[  187.880612][ T9035] loop2: detected capacity change from 0 to 512
[  188.055520][ T6124] hfsplus: bad catalog file entry
[  188.062191][ T6124] hfsplus: b-tree write err: -5, ino 3
[  188.450231][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  188.453540][ T9044] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1296'.
[  188.463395][ T9044] geneve2: entered promiscuous mode
[  188.465352][ T9044] geneve2: entered allmulticast mode
[  188.924502][ T9062] netlink: 3264 bytes leftover after parsing attributes in process `syz.2.1304'.
[  190.288576][ T9082] loop2: detected capacity change from 0 to 2048
[  190.309929][ T9083] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.127235][  T782] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  191.292129][  T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.296599][  T782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.300903][  T782] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  191.304291][  T782] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.329028][  T782] usb 4-1: config 0 descriptor??
[  191.977502][  T782] hid_parser_main: 5 callbacks suppressed
[  191.977523][  T782] stadia 0003:18D1:9400.000B: unknown main item tag 0x4
[  191.992952][  T782] stadia 0003:18D1:9400.000B: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.3-1/input0
[  192.001785][  T782] stadia 0003:18D1:9400.000B: no inputs found
[  192.004270][  T782] stadia 0003:18D1:9400.000B: force feedback init failed
[  192.192541][  T838] usb 4-1: USB disconnect, device number 9
[  192.346165][ T5803] IPVS: starting estimator thread 0...
[  192.368379][ T9112] IPVS: nq: FWM 3 0x00000003 - no destination available
[  192.370990][    C1] IPVS: nq: FWM 3 0x00000003 - no destination available
[  192.459230][ T9111] IPVS: using max 38 ests per chain, 91200 per kthread
[  193.337840][ T9126] loop2: detected capacity change from 0 to 1024
[  193.405343][ T9126] hfsplus: failed to load root directory
[  194.089593][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'.
[  194.107253][ T9131] bond_slave_0: entered promiscuous mode
[  194.109149][ T9131] bond_slave_1: entered promiscuous mode
[  194.113006][ T9131] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  194.117664][ T9131] bond_slave_0: left promiscuous mode
[  194.119304][ T9131] bond_slave_1: left promiscuous mode
[  194.462641][   T24] IPVS: starting estimator thread 0...
[  194.560334][ T9144] "syz.3.1335" (9144) uses obsolete ecb(arc4) skcipher
[  194.567225][ T9142] IPVS: using max 45 ests per chain, 108000 per kthread
[  194.594867][ T9152] input: syz1 as /devices/virtual/input/input12
[  194.655186][ T9155] loop3: detected capacity change from 0 to 512
[  194.677256][ T9155] EXT4-fs: Ignoring removed nobh option
[  194.703970][ T9155] EXT4-fs error (device loop3): ext4_iget_extra_inode:5040: inode #15: comm syz.3.1339: corrupted in-inode xattr: overlapping e_value 
[  194.727684][ T9155] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  194.728012][ T9155] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1339: couldn't read orphan inode 15 (err -117)
[  194.736793][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  194.738696][    C1] EXT4-fs (loop3): initial error at time 1775718441: ext4_iget_extra_inode:5040: inode 15
[  194.741831][    C1] EXT4-fs (loop3): last error at time 1775718441: ext4_iget_extra_inode:5040: inode 15
[  194.745764][ T9155] loop3: lost filesystem error report for type 5 error -117
[  194.747429][ T9155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  194.781613][ T9155] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  194.797252][ T9155] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000
[  194.905701][ T7214] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.934322][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'.
[  194.947168][ T9167] loop2: detected capacity change from 0 to 2048
[  194.981971][ T9171] loop3: detected capacity change from 0 to 16
[  194.985723][ T9171] erofs (device loop3): mounted with root inode @ nid 36.
[  195.013629][ T9167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  195.562765][ T9175] loop3: detected capacity change from 0 to 131072
[  195.742612][ T9175] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0)
[  195.745075][ T9175] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  195.748286][ T9175] F2FS-fs (loop3): invalid crc value
[  195.798258][ T9175] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  195.806913][ T9175] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  195.808988][ T9175] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  195.911153][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.273696][ T9197] loop2: detected capacity change from 0 to 256
[  196.277006][ T9197] exfat: Deprecated parameter 'utf8'
[  196.280191][ T9197] exfat: Deprecated parameter 'namecase'
[  196.282398][ T9197] exfat: Deprecated parameter 'namecase'
[  196.284465][ T9197] exfat: Deprecated parameter 'utf8'
[  196.301163][ T9197] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  196.403924][ T9202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'.
[  196.427531][ T9202] Unknown options in mask b7f2
[  197.649946][ T9235] loop3: detected capacity change from 0 to 512
[  197.665135][ T9235] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  197.720763][ T9235] EXT4-fs (loop3): orphan cleanup on readonly fs
[  197.726018][ T9235] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  197.728706][ T9235] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  197.750005][ T9235] EXT4-fs (loop3): 1 truncate cleaned up
[  197.759349][ T9235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.781656][ T9235] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.975157][ T9241] netlink: 'syz.1.1371': attribute type 5 has an invalid length.
[  198.903398][ T9254] loop2: detected capacity change from 0 to 32768
[  198.944372][ T9254] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.956534][ T9254] XFS (loop2): Ending clean mount
[  199.040741][ T5803] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  199.086188][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'.
[  199.194980][ T5900] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  199.269949][ T5803] usb 4-1: Using ep0 maxpacket: 8
[  199.273985][ T5803] usb 4-1: config 2 has an invalid interface number: 138 but max is 0
[  199.282201][ T5803] usb 4-1: config 2 has no interface number 0
[  199.284545][ T5803] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a
[  199.288035][ T5803] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.487035][ T9301] loop2: detected capacity change from 0 to 2048
[  199.495464][ T9302] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.504943][ T5803] usb 4-1: USB disconnect, device number 10
[  199.708335][ T9302] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  199.711744][ T9302] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  199.719865][ T9302] Remounting filesystem read-only
[  199.724766][ T5900] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  199.837143][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  199.839513][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  199.866672][ T9309] overlayfs: overlapping lowerdir path
[  200.227309][ T9318] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1401'.
[  201.263640][ T9331] loop2: detected capacity change from 0 to 512
[  201.327501][ T9331] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1406: inode has both inline data and extents flags
[  201.336775][ T9331] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  201.337145][ T9331] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1406: couldn't read orphan inode 15 (err -117)
[  201.353208][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  201.355597][    C0] EXT4-fs (loop2): initial error at time 1775718448: ext4_orphan_get:1397: inode 15
[  201.358595][    C0] EXT4-fs (loop2): last error at time 1775718448: ext4_orphan_get:1397: inode 15
[  201.364033][ T9331] loop2: lost filesystem error report for type 5 error -117
[  201.365005][ T9331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.394019][ T5900] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.911061][ T5907] Bluetooth: hci2: command 0x0406 tx timeout
[  202.036949][  T838] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  202.069077][ T9362] loop3: detected capacity change from 0 to 256
[  202.083082][ T9362] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  202.216955][  T838] usb 3-1: Using ep0 maxpacket: 8
[  202.229622][  T838] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  202.233227][  T838] usb 3-1: config 179 has no interface number 0
[  202.235661][  T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  202.241047][  T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  202.245320][  T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  202.255019][  T838] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  202.259598][  T838] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  202.264616][  T838] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  202.268328][  T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.274371][ T9357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  202.384007][ T9366] loop3: detected capacity change from 0 to 32768
[  202.403552][ T9366] JBD2: Ignoring recovery information on journal
[  202.423364][ T9366] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  202.555506][  T838] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13
[  202.740138][ T9370] 
[  202.740938][ T9370] ======================================================
[  202.742913][ T9370] WARNING: possible circular locking dependency detected
[  202.744896][ T9370] syzkaller #0 Not tainted
[  202.746338][ T9370] ------------------------------------------------------
[  202.748344][ T9370] syz.3.1421/9370 is trying to acquire lock:
[  202.750106][ T9370] ffff8881bbf25d60 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x340
[  202.753423][ T9370] 
[  202.753423][ T9370] but task is already holding lock:
[  202.755430][ T9370] ffff8881bbf25df8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  202.758441][ T9370] 
[  202.758441][ T9370] which lock already depends on the new lock.
[  202.758441][ T9370] 
[  202.761551][ T9370] 
[  202.761551][ T9370] the existing dependency chain (in reverse order) is:
[  202.764677][ T9370] 
[  202.764677][ T9370] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  202.767582][ T9370]        down_read+0x47/0x2e0
[  202.769351][ T9370]        ocfs2_init_acl+0x2fd/0x7e0
[  202.771121][ T9370]        ocfs2_mknod+0x1679/0x2290
[  202.772582][ T9370]        ocfs2_mkdir+0x181/0x490
[  202.774014][ T9370]        vfs_mkdir+0x413/0x630
[  202.775425][ T9370]        filename_mkdirat+0x285/0x510
[  202.776968][ T9370]        __se_sys_mkdirat+0x35/0x150
[  202.778476][ T9370]        do_syscall_64+0x14d/0xf80
[  202.779966][ T9370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.781802][ T9370] 
[  202.781802][ T9370] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  202.784277][ T9370]        down_read+0x47/0x2e0
[  202.785624][ T9370]        ocfs2_start_trans+0x3ab/0x700
[  202.787552][ T9370]        ocfs2_modify_bh+0xe3/0x4d0
[  202.789262][ T9370]        ocfs2_local_read_info+0x1454/0x1810
[  202.791150][ T9370]        dquot_load_quota_sb+0x791/0xbd0
[  202.792816][ T9370]        dquot_load_quota_inode+0x2e1/0x5d0
[  202.794710][ T9370]        ocfs2_enable_quotas+0x1c8/0x4a0
[  202.796467][ T9370]        ocfs2_fill_super+0x5305/0x6900
[  202.798116][ T9370]        get_tree_bdev_flags+0x431/0x4f0
[  202.799848][ T9370]        vfs_get_tree+0x92/0x2a0
[  202.801331][ T9370]        do_new_mount+0x341/0xd30
[  202.802990][ T9370]        __se_sys_mount+0x31d/0x420
[  202.804504][ T9370]        do_syscall_64+0x14d/0xf80
[  202.806311][ T9370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.808566][ T9370] 
[  202.808566][ T9370] -> #1 (sb_internal#4){.+.+}-{0:0}:
[  202.811276][ T9370]        lock_release+0x199/0x3d0
[  202.813197][ T9370]        up_write+0x2d/0x410
[  202.815085][ T9370]        ocfs2_free_alloc_context+0x97/0x1a0
[  202.816910][ T9370]        ocfs2_write_begin_nolock+0x4159/0x41e0
[  202.818884][ T9370]        ocfs2_write_begin+0x1c5/0x320
[  202.820767][ T9370]        generic_perform_write+0x2e2/0x8f0
[  202.822477][ T9370]        ocfs2_file_write_iter+0x1663/0x1ed0
[  202.824219][ T9370]        vfs_write+0x61d/0xb90
[  202.825594][ T9370]        __x64_sys_pwrite64+0x199/0x230
[  202.827272][ T9370]        do_syscall_64+0x14d/0xf80
[  202.829066][ T9370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.831185][ T9370] 
[  202.831185][ T9370] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  202.834516][ T9370]        __lock_acquire+0x15a5/0x2cf0
[  202.836559][ T9370]        lock_acquire+0xf0/0x2e0
[  202.838573][ T9370]        down_write+0x96/0x200
[  202.840386][ T9370]        ocfs2_try_remove_refcount_tree+0xb6/0x340
[  202.842271][ T9370]        ocfs2_truncate_file+0xdf3/0x1540
[  202.843918][ T9370]        ocfs2_setattr+0x15e5/0x1cc0
[  202.845409][ T9370]        notify_change+0xc1a/0xf40
[  202.846731][ T9370]        do_truncate+0x1c2/0x250
[  202.848340][ T9370]        path_openat+0x2f89/0x3860
[  202.850149][ T9370]        do_file_open+0x23e/0x4a0
[  202.851866][ T9370]        do_sys_openat2+0x113/0x200
[  202.853762][ T9370]        __x64_sys_openat+0x138/0x170
[  202.855736][ T9370]        do_syscall_64+0x14d/0xf80
[  202.857623][ T9370]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.859651][ T9370] 
[  202.859651][ T9370] other info that might help us debug this:
[  202.859651][ T9370] 
[  202.862643][ T9370] Chain exists of:
[  202.862643][ T9370]   &ocfs2_file_ip_alloc_sem_key --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  202.862643][ T9370] 
[  202.867886][ T9370]  Possible unsafe locking scenario:
[  202.867886][ T9370] 
[  202.870557][ T9370]        CPU0                    CPU1
[  202.872319][ T9370]        ----                    ----
[  202.874196][ T9370]   lock(&oi->ip_xattr_sem);
[  202.875940][ T9370]                                lock(&journal->j_trans_barrier);
[  202.878897][ T9370]                                lock(&oi->ip_xattr_sem);
[  202.881650][ T9370]   lock(&ocfs2_file_ip_alloc_sem_key);
[  202.883691][ T9370] 
[  202.883691][ T9370]  *** DEADLOCK ***
[  202.883691][ T9370] 
[  202.886588][ T9370] 3 locks held by syz.3.1421/9370:
[  202.888504][ T9370]  #0: ffff8881740f2420 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  202.891512][ T9370]  #1: ffff8881bbf260c0 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: do_truncate+0x18f/0x250
[  202.895025][ T9370]  #2: ffff8881bbf25df8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x340
[  202.899146][ T9370] 
[  202.899146][ T9370] stack backtrace:
[  202.901221][ T9370] CPU: 1 UID: 0 PID: 9370 Comm: syz.3.1421 Not tainted syzkaller #0 PREEMPT(full) 
[  202.901239][ T9370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  202.901249][ T9370] Call Trace:
[  202.901256][ T9370]  <TASK>
[  202.901262][ T9370]  dump_stack_lvl+0xe8/0x150
[  202.901284][ T9370]  print_circular_bug+0x2e1/0x300
[  202.901306][ T9370]  check_noncircular+0x12e/0x150
[  202.901325][ T9370]  __lock_acquire+0x15a5/0x2cf0
[  202.901346][ T9370]  lock_acquire+0xf0/0x2e0
[  202.901360][ T9370]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  202.901381][ T9370]  down_write+0x96/0x200
[  202.901400][ T9370]  ? ocfs2_try_remove_refcount_tree+0xb6/0x340
[  202.901417][ T9370]  ? __pfx_down_write+0x10/0x10
[  202.901445][ T9370]  ocfs2_try_remove_refcount_tree+0xb6/0x340
[  202.901464][ T9370]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  202.901483][ T9370]  ? ocfs2_metadata_cache_get_super+0x43/0x80
[  202.901500][ T9370]  ocfs2_truncate_file+0xdf3/0x1540
[  202.901517][ T9370]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[  202.901534][ T9370]  ? do_raw_spin_lock+0x12b/0x2f0
[  202.901549][ T9370]  ? do_raw_spin_unlock+0x4d/0x210
[  202.901561][ T9370]  ? _raw_spin_unlock+0x28/0x50
[  202.901575][ T9370]  ? jbd2_journal_begin_ordered_truncate+0xb4/0x150
[  202.901594][ T9370]  ocfs2_setattr+0x15e5/0x1cc0
[  202.901611][ T9370]  ? __pfx_ocfs2_setattr+0x10/0x10
[  202.901628][ T9370]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  202.901641][ T9370]  ? lockdep_hardirqs_on+0x7a/0x110
[  202.901657][ T9370]  ? ktime_get_coarse_real_ts64_mg+0x59/0x1e0
[  202.901672][ T9370]  ? seqcount_lockdep_reader_access+0xea/0x100
[  202.901685][ T9370]  ? ktime_get_coarse_real_ts64_mg+0x1c5/0x1e0
[  202.901699][ T9370]  ? current_time+0x22a/0x370
[  202.901712][ T9370]  ? evm_inode_setattr+0x1b6/0x7d0
[  202.901729][ T9370]  ? __pfx_current_time+0x10/0x10
[  202.901746][ T9370]  ? try_break_deleg+0x5b/0x180
[  202.901763][ T9370]  ? __pfx_ocfs2_setattr+0x10/0x10
[  202.901777][ T9370]  notify_change+0xc1a/0xf40
[  202.901794][ T9370]  do_truncate+0x1c2/0x250
[  202.901809][ T9370]  ? __pfx_do_truncate+0x10/0x10
[  202.901859][ T9370]  ? apparmor_file_truncate+0x39f/0x470
[  202.901881][ T9370]  path_openat+0x2f89/0x3860
[  202.901905][ T9370]  ? stack_depot_save_flags+0x33/0x810
[  202.901931][ T9370]  ? __pfx_path_openat+0x10/0x10
[  202.901946][ T9370]  ? __x64_sys_openat+0x138/0x170
[  202.901967][ T9370]  ? do_syscall_64+0x14d/0xf80
[  202.901983][ T9370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.902000][ T9370]  ? __lock_acquire+0x6b5/0x2cf0
[  202.902022][ T9370]  do_file_open+0x23e/0x4a0
[  202.902039][ T9370]  ? __pfx_do_file_open+0x10/0x10
[  202.902060][ T9370]  ? _raw_spin_unlock+0x28/0x50
[  202.902072][ T9370]  ? alloc_fd+0x64b/0x6c0
[  202.902084][ T9370]  do_sys_openat2+0x113/0x200
[  202.902095][ T9370]  ? lockdep_hardirqs_on+0x7a/0x110
[  202.902109][ T9370]  ? __pfx_do_sys_openat2+0x10/0x10
[  202.902131][ T9370]  __x64_sys_openat+0x138/0x170
[  202.902154][ T9370]  do_syscall_64+0x14d/0xf80
[  202.902172][ T9370]  ? trace_irq_disable+0x3b/0x150
[  202.902185][ T9370]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.902201][ T9370]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.902215][ T9370] RIP: 0033:0x7f2d5f79c819
[  202.902229][ T9370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.902239][ T9370] RSP: 002b:00007f2d606da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  202.902249][ T9370] RAX: ffffffffffffffda RBX: 00007f2d5fa16180 RCX: 00007f2d5f79c819
[  202.902256][ T9370] RDX: 0000000000101e42 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  202.902263][ T9370] RBP: 00007f2d5f832c91 R08: 0000000000000000 R09: 0000000000000000
[  202.902272][ T9370] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000000
[  202.902280][ T9370] R13: 00007f2d5fa16218 R14: 00007f2d5fa16180 R15: 00007ffd8e995998
[  202.902296][ T9370]  </TASK>
[  203.054024][ T5803] usb 3-1: USB disconnect, device number 16
[  203.056314][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  203.056353][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  203.345394][ T7214] ocfs2: Unmounting device (7,3) on (node local)
[  203.676915][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
