last executing test programs:

1m41.517369634s ago: executing program 2 (id=308):
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000200)={[{@creator={'creator', 0x3d, "91b212f7"}}, {@nls={'nls', 0x3d, 'cp936'}}, {@gid}, {@type={'type', 0x3d, "abe89a7a"}}, {@nobarrier}]}, 0x1, 0x5d9, &(0x7f0000000cc0)="$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")
mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x9)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x90400, 0x0, 0x1, 0x0, &(0x7f0000000100))

1m41.44122155s ago: executing program 2 (id=309):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000f003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad4301000000000095"], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='f'], 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000240)=ANY=[], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

1m41.280092274s ago: executing program 2 (id=312):
r0 = inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r1 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x87, 0x1, 0x0, {0x3, 0xff, 0x5, 0x8, 0x2, 0xd615, 0x9, 0x5, 0xfffffffe, 0x6000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r2, 0x0)
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x2000000, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRESHEX, @ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0], 0xfe, 0xc17, &(0x7f0000001dc0)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c1040, 0x54)
mknod(&(0x7f0000000040)='./bus\x00', 0xa18, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
landlock_restrict_self(0xffffffffffffffff, 0xc)
inotify_add_watch(r0, &(0x7f0000000640)='.\x00', 0x80000001)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x102)
fallocate(r3, 0x0, 0x8e14, 0x8ffff)
copy_file_range(r3, 0x0, r3, &(0x7f0000000500)=0xffff, 0x9, 0x0)

1m39.614040386s ago: executing program 2 (id=328):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@metadata_ratio}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m37.68661739s ago: executing program 2 (id=341):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x800)
fanotify_init(0x4, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
gettid()
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0x8000, 0x100009, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0)
syz_emit_ethernet(0x9a, &(0x7f0000000240)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0xa)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600894f00000c0003"], 0x68}}, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x9, 0x4)
write(r0, &(0x7f0000000080)="5400000012000100"/24, 0x18)

1m36.018021659s ago: executing program 2 (id=348):
r0 = socket$inet6(0xa, 0x80005, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x410f8, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES8=r1], 0x5, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
syz_ublk_setup_io_uring(0x1afb, &(0x7f00000000c0)={0x0, 0x9a87, 0xda7c76d729af759a, 0x3, 0x34c, 0x0, r5}, 0x0, &(0x7f0000000300), &(0x7f0000000500))
r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2, 0x30, r3, 0x0)
syz_io_uring_setup(0x27c8, 0x0, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000480)={<r10=>0x0})
syz_io_uring_submit$UBLK(0x0, r6, r9, &(0x7f0000000600)=@ublk_get_features_sqe={0x2e, 0x1, 0x0, r3, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {r10, 0xffff, 0x8, &(0x7f00000005c0)}})
r11 = landlock_create_ruleset(&(0x7f0000000140)={0x4440}, 0x30, 0x0)
landlock_restrict_self(r11, 0x4)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)

1m35.954595102s ago: executing program 32 (id=348):
r0 = socket$inet6(0xa, 0x80005, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f000000c7c0)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x410f8, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES16=r1, @ANYRES8=r1], 0x5, 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
syz_ublk_setup_io_uring(0x1afb, &(0x7f00000000c0)={0x0, 0x9a87, 0xda7c76d729af759a, 0x3, 0x34c, 0x0, r5}, 0x0, &(0x7f0000000300), &(0x7f0000000500))
r6 = mmap$IORING_OFF_SQ_RING(0x0, 0x7, 0x2, 0x30, r3, 0x0)
syz_io_uring_setup(0x27c8, 0x0, &(0x7f0000000140)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_io_uring_submit(r7, r8, r9, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x8, 0x1, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r5, 0xc0207511, &(0x7f0000000480)={<r10=>0x0})
syz_io_uring_submit$UBLK(0x0, r6, r9, &(0x7f0000000600)=@ublk_get_features_sqe={0x2e, 0x1, 0x0, r3, 0x80207513, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, '\x00', {r10, 0xffff, 0x8, &(0x7f00000005c0)}})
r11 = landlock_create_ruleset(&(0x7f0000000140)={0x4440}, 0x30, 0x0)
landlock_restrict_self(r11, 0x4)
truncate(&(0x7f0000000240)='./file0\x00', 0x1)

35.211122538s ago: executing program 3 (id=963):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)

35.153040382s ago: executing program 3 (id=966):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0xffaeda10ca8f6c38}, 0x80010)

35.09189363s ago: executing program 3 (id=969):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f00000004c0)=0x8)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0x7}}}, &(0x7f0000000480)=0x84)

34.211584567s ago: executing program 3 (id=991):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000140)={[{@nls={'nls', 0x3d, 'macturkish'}}, {@nodecompose}, {@nodecompose}, {@creator={'creator', 0x3d, "e22ad8a4"}}, {@nodecompose}]}, 0x3, 0x60f, &(0x7f0000000200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0)

34.070364682s ago: executing program 3 (id=994):
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x18)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r1=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

33.822872098s ago: executing program 3 (id=1000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4)
shutdown(r0, 0x1)

33.617818926s ago: executing program 33 (id=1000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4)
shutdown(r0, 0x1)

1.533058255s ago: executing program 4 (id=1418):
r0 = socket$inet6(0xa, 0x80001, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000600)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000000)="d2f15270c1f2824de5ea159eadf70f75a80d6c68", 0x14)

720.941066ms ago: executing program 0 (id=1434):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0)

647.637374ms ago: executing program 4 (id=1437):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x0, {0x2, 0xff, 0x2}, 0x2}, 0x18)

572.294452ms ago: executing program 0 (id=1439):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006)
socket(0x11, 0x800000003, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8)

571.885256ms ago: executing program 4 (id=1441):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe)
listen(r0, 0xfffffff9)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)

489.629413ms ago: executing program 4 (id=1443):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x4)

489.482817ms ago: executing program 0 (id=1444):
r0 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x149040, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xdb)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$getflags(r0, 0x401)

382.19607ms ago: executing program 4 (id=1447):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xfe, 0x531, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvvPFudjfbpMABKrUUWrRbwdpJQ9uIQykSglMlRLkvIXGiKE4cxU67iSrI/gVICAESJ7hwQeIPQEIrceGIkCrBGaQiEIItSHCADhp7nARnnHiLE+86v580O+/NeOb7njdvPON5GgdwYT0bEa9FxPtpmr4QEdP58lI+xX5nyl733oO3l7IpiTR9469JJPmyOLJN5nq+2WREfPXLEd9Ijsdt7u6tL9brte28Xm1tbFWbu3u31zYWV2urtc35+bmXF15ZeGlhdijtvBERr37xj9/79k++9OovPvPWH+78+dY3s7Sm8vVH2/GQJk5a2Wl6+cpkzwbbHzDYoyhrT7lbuTrYNvfOMB8AAPrLztk/FBGfjIgXYjounXw6CwAAADyG0s9Pxb+TiLTY5T7LAQAAgMdIqT0GNilV8rEAU1EqVSqdMbwfiWuleqPZ+vRKY2dzuTNWdibKpZW1em02Hys8E+Ukq8+1y4f1F3vq8xHxZER8d/pqu15ZatSXR/3lBwAAAFwQ13uu//8x3bn+BwAAAMbMzKgTAAAAAM6c638AAAAYf67/AQAAYKx95fXXsynt/v718pu7O+uNN28v15rrlY2dpcpSY3urstporLaf2bdx2v7qjcbWZ2Nz5261VWu2qs3dvTsbjZ3N1p21mDyXBgEAAADHPPnx+79LImL/c1fbU+byqJMCzsXEQSnJ5wW9//dPdObvnlNSwLm4NMBr3r1SvNx5AjzeJnoX9OnrwPgpjzoBYOSSU9b3Hbzz63z+ieHmAwAADN/NjxXf/z/teiBiv3QO6QFnSCeGi6vn/n86PapEgHPXvv8/6EAeJwswVsoDjQAExtn/ff//VGn6UAkBAABDN9WeklIl/3pvKkqlSiXiRvtnAcrJylq9NhsRT0TEb6fLV7L6XHvLZIAxAgAAAAAAAAAAAAAAAAAAAAAAAABAtJ/KnUQKAAAAjLWI0p+SX3ae5X9z+vmp3u8HLif/av8k8OWIeOuHb3z/7mKrtT2XLf/bwfLWD/LlL47iGwwAAACgV/c6vT3/56izAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDcvPfg7aXuNMDLrw4r7l++EBEzRfEnYrI9n4xyRFz7exITR7ZLIuLSEOLv34uIjxbFT7K0DkIWxR/Gm3BK/JjJ34Wi+NeHEB8usvvZ8ee1ov5Ximfb8+L+NxHxP/UPqv/xLw6Of5f69P8bA8Z46p2fVfvGvxfx1ETx8acbP+kT/7kB43/9a3t7/dalP4q42f38aR/xjkY4LFVbG1vV5u7e7bWNxdXaam1zfn7u5YVXFl5amK2urNVr+b+FMb7z9M/fP6n91wo//5I8m/7tf75gf0WfSf955+6DD3cr+8fj33quIP6vfpy/4nj8Uh7nU3k5W3+zW97vlI965qe/eeak9i8ftr/8MP//t/rttNexjvL0oH86AMAZaO7urS/W67XtsS1kV+mPQBoKj2DhW0PdYZqmadanClbdj4hB9pPEkFtaKs7nsND3CDDqIxMAADBshyf9o84EAAAAAAAAAAAAAAAAAAAALq7zeMpab8zDRyAnw3iENgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUPw3AAD//zlr0/o=")

381.861197ms ago: executing program 0 (id=1449):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00')
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x40002000})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x24020000)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000003c0)='.\x00', 0x12158b9, &(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES64, @ANYRESOCT=0x0, @ANYRESOCT=r2, @ANYRESHEX, @ANYRESHEX=r2, @ANYRES32, @ANYRES64, @ANYRESHEX], 0x5, 0x0, &(0x7f0000000000))

317.729026ms ago: executing program 0 (id=1451):
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x2, 0x71, 0x10, 0x69, 0x400003}}, 0x0}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1)

221.533856ms ago: executing program 4 (id=1453):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x8000)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0105b08, &(0x7f0000000040))

134.360148ms ago: executing program 1 (id=1454):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)="03", 0x1, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000180)=@secondary)
keyctl$search(0xa, r0, &(0x7f0000000280)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, r0)

134.082897ms ago: executing program 1 (id=1455):
r0 = fsopen(&(0x7f0000000240)='smb3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0)

51.136632ms ago: executing program 1 (id=1456):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000004840)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001780)=ANY=[], 0x78, 0x20000000}}], 0x1, 0x0)

50.438793ms ago: executing program 1 (id=1457):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000300)=[0x0], 0x1})
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1b, 0xa, 0x4})
ioctl$VIDIOC_REQBUFS(r0, 0xc0585609, &(0x7f0000000280)={0x1, 0xa, 0x2})

690.541µs ago: executing program 1 (id=1458):
io_uring_setup(0x1bbe, &(0x7f0000000040)={0x0, 0x1dd7, 0x4000, 0x1, 0x2000279})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a0601010000000000000000030000090800a009800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x240040d4}, 0x48894)

396.69µs ago: executing program 0 (id=1459):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x5c}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x44080)

0s ago: executing program 1 (id=1460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000280)=0x522, 0x4)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x804, 0x9, 0x200000100, 0x400000000000003, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x8000000000000000, 0x2, 0x2a8, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0x7b1, 0x8, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x6, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x0, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x3ff, 0x3ff, 0x7, 0x7, 0xfffffffffffffffd, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x8, 0x3c, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x5, 0x4, 0x7, 0x406, 0x1, 0x5, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x0, 0x3, 0x4]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[   98.749518][ T6592] BTRFS warning (device loop2): discard failed for extent [6750208, 6754303]: errno=-512 unknown
[   98.753908][ T6592] BTRFS warning (device loop2): discard failed for extent [6762496, 6766591]: errno=-512 unknown
[   98.759508][ T6592] BTRFS warning (device loop2): discard failed for extent [6770688, 6774783]: errno=-512 unknown
[   98.798898][ T6592] BTRFS warning (device loop2): discard failed for extent [8519680, 15785983]: errno=-512 unknown
[   98.818464][ T6592] BTRFS warning (device loop2): discard failed for extent [5246976, 5255167]: errno=-512 unknown
[   98.835773][ T6592] BTRFS warning (device loop2): discard failed for extent [5353472, 6590463]: errno=-512 unknown
[   98.843402][ T6592] BTRFS warning (device loop2): discard failed for extent [6742016, 6750207]: errno=-512 unknown
[   98.849084][ T6592] BTRFS warning (device loop2): discard failed for extent [6754304, 6762495]: errno=-512 unknown
[   98.853875][ T6592] BTRFS warning (device loop2): discard failed for extent [6766592, 6770687]: errno=-512 unknown
[   98.859455][ T6592] BTRFS warning (device loop2): discard failed for extent [6774784, 6782975]: errno=-512 unknown
[   98.864312][ T6592] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.903243][ T6592] syz.2.328 (6592) used greatest stack depth: 18664 bytes left
[   99.052931][ T6620] loop1: detected capacity change from 0 to 512
[   99.105632][ T6620] EXT4-fs error (device loop1): ext4_read_inode_bitmap:141: comm syz.1.347: Invalid inode bitmap blk 4 in block_group 0
[   99.138761][ T6620] loop1: lost filesystem error report for type 5 error -117
[   99.143583][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   99.149257][    C1] EXT4-fs (loop1): initial error at time 1787670003: ext4_read_inode_bitmap:141
[   99.152732][    C1] EXT4-fs (loop1): last error at time 1787670003: ext4_read_inode_bitmap:141
[   99.169322][ T6620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.198314][ T6625] loop0: detected capacity change from 0 to 256
[   99.254822][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.274666][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.292812][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.302436][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.307799][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.318521][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.560390][ T6641] capability: warning: `syz.1.352' uses 32-bit capabilities (legacy support in use)
[   99.715426][ T6644] netlink: Conntrack attr type has unexpected length (type=0, length=1, expected=0)
[   99.718821][ T6644] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.077041][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.083259][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.089139][ T6626] bridge_slave_0: entered allmulticast mode
[  100.093238][ T6626] bridge_slave_0: entered promiscuous mode
[  100.104274][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.108269][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.111446][ T6626] bridge_slave_1: entered allmulticast mode
[  100.134509][ T6626] bridge_slave_1: entered promiscuous mode
[  100.168835][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.176622][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.210518][ T6626] team0: Port device team_slave_0 added
[  100.216578][ T6626] team0: Port device team_slave_1 added
[  100.252776][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.255868][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.269965][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.276491][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.279692][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  100.292368][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.372884][ T6626] hsr_slave_0: entered promiscuous mode
[  100.386909][ T6626] hsr_slave_1: entered promiscuous mode
[  100.390760][ T6626] debugfs: 'hsr0' already exists in 'hsr'
[  100.396598][ T6626] Cannot create hsr debugfs directory
[  100.853715][ T6626] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  100.876224][ T6626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  100.888507][ T6626] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  100.903442][ T6626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.912345][ T6674] loop1: detected capacity change from 0 to 2048
[  100.917967][ T6626] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  100.931501][ T6626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  100.937888][ T6626] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  100.942875][ T6674] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.981781][ T6626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  101.109502][ T6626] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.128061][ T6626] 8021q: adding VLAN 0 to HW filter on device team0
[  101.135022][  T170] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.137417][  T170] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.160681][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.164074][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.363591][ T5642] Bluetooth: hci2: command tx timeout
[  102.353430][ T6713] loop1: detected capacity change from 0 to 256
[  102.375875][ T6713] exFAT-fs (loop1): failed to load upcase table (idx : 0x00000c00, chksum : 0xd8e97c99, utbl_chksum : 0xe619d30d)
[  102.548679][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  102.552007][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'.
[  102.693741][ T6626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.770864][ T6626] veth0_vlan: entered promiscuous mode
[  102.828258][ T6626] veth1_vlan: entered promiscuous mode
[  102.928430][ T6626] veth0_macvtap: entered promiscuous mode
[  102.967584][ T6626] veth1_macvtap: entered promiscuous mode
[  103.429428][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.464036][ T5642] Bluetooth: hci2: command tx timeout
[  103.739940][ T6626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  103.810737][ T6736] netlink: 2 bytes leftover after parsing attributes in process `syz.1.380'.
[  103.845991][ T6737] netlink: 'syz.1.380': attribute type 7 has an invalid length.
[  103.884931][ T6737] netlink: 'syz.1.380': attribute type 8 has an invalid length.
[  103.985243][ T5532] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.006046][ T6732] netlink: 'syz.1.380': attribute type 7 has an invalid length.
[  104.010176][ T5532] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.018835][ T6732] netlink: 'syz.1.380': attribute type 8 has an invalid length.
[  104.032532][ T5532] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.057202][ T5532] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.038887][ T6608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.046211][ T6608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.175466][  T170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.180575][  T170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.350515][ T6756] loop1: detected capacity change from 0 to 512
[  105.370476][ T6756] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.385: bg 0: block 5: invalid block bitmap
[  105.401355][ T6756] loop1: lost filesystem error report for type 5 error -117
[  105.403877][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  105.409355][    C1] EXT4-fs (loop1): initial error at time 1787670009: ext4_validate_block_bitmap:432
[  105.413283][    C1] EXT4-fs (loop1): last error at time 1787670009: ext4_validate_block_bitmap:432
[  105.419758][ T6756] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  105.427486][ T6756] loop1: lost filesystem error report for type 5 error -117
[  105.427878][ T6756] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.385: invalid indirect mapped block 3 (level 2)
[  105.439058][ T6756] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  105.441930][ T6756] EXT4-fs (loop1): 1 orphan inode deleted
[  105.448450][ T6756] EXT4-fs (loop1): 1 truncate cleaned up
[  105.454541][ T6756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.488500][ T6756] syz.1.385 (pid 6756) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  105.513892][ T5642] Bluetooth: hci2: command tx timeout
[  105.540280][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.785638][ T6770] loop1: detected capacity change from 0 to 4096
[  105.858604][ T6770] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  105.895140][ T6773] loop3: detected capacity change from 0 to 2048
[  105.902738][ T6775] netlink: 'syz.0.384': attribute type 21 has an invalid length.
[  105.916008][ T6770] ntfs3(loop1): failed to convert name for inode 1e.
[  105.935298][ T5641] udevd[5641]: incorrect nilfs2 checksum on /dev/loop3
[  105.935558][ T6770] ntfs3(loop1): ino=1f, mi_enum_attr
[  105.938246][ T6773] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  105.938758][ T6773] NILFS (loop3): mounting unchecked fs
[  105.972868][ T6773] NILFS (loop3): recovery complete
[  105.979258][ T6778] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.110348][ T6783] loop1: detected capacity change from 0 to 4096
[  106.116989][ T6783] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  106.184754][ T6786] loop3: detected capacity change from 0 to 32768
[  106.188672][ T6786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.395 (6786)
[  106.204262][ T6786] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  106.208154][ T6786] BTRFS info (device loop3): using crc32c checksum algorithm
[  106.246121][ T6783] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  106.282733][ T6786] BTRFS info (device loop3): rebuilding free space tree
[  106.298928][ T6786] BTRFS info (device loop3): enabling ssd optimizations
[  106.301252][ T6786] BTRFS info (device loop3): turning on async discard
[  106.303407][ T6786] BTRFS info (device loop3): enabling free space tree
[  106.306003][ T6786] BTRFS info (device loop3): force clearing of disk cache
[  106.308797][ T6786] BTRFS info (device loop3): use lzo compression, level 1
[  106.466322][ T6806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[  106.497939][ T6806] bond1: option ad_user_port_key: invalid value (1120)
[  106.500889][ T6806] bond1: option ad_user_port_key: allowed values 0 - 1023
[  106.767378][ T6806] bond1 (unregistering): Released all slaves
[  107.174538][ T6626] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  107.428467][ T6830] binder: 6828:6830 ioctl c0306201 0 returned -14
[  107.448385][ T6830] process 'syz.3.402' launched './file2' with NULL argv: empty string added
[  107.481717][ T6830] comedi comedi1: Minor 4 specified more than once!
[  107.594400][ T5642] Bluetooth: hci2: command tx timeout
[  108.266325][ T6836] hsr0: entered promiscuous mode
[  108.275240][ T6836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'.
[  108.288680][ T6836] hsr_slave_0: left promiscuous mode
[  108.301523][ T6836] hsr_slave_1: left promiscuous mode
[  108.401115][ T6836] hsr0 (unregistering): left promiscuous mode
[  109.788199][ T6901] loop1: detected capacity change from 0 to 40427
[  109.794269][ T6901] F2FS-fs (loop1): build fault injection rate: 174
[  109.797479][ T6901] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  109.800830][ T6901] F2FS-fs (loop1): invalid crc value
[  109.843370][ T6901] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  109.848856][ T6901] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  109.885199][ T5640] syz-executor: attempt to access beyond end of device
[  109.885199][ T5640] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  109.904699][ T5640] CPU: 1 UID: 0 PID: 5640 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  109.904720][ T5640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  109.904727][ T5640] Call Trace:
[  109.904733][ T5640]  <TASK>
[  109.904738][ T5640]  dump_stack_lvl+0xe8/0x150
[  109.904759][ T5640]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  109.904778][ T5640]  f2fs_write_end_io+0x124b/0x1710
[  109.904809][ T5640]  __submit_merged_bio+0x258/0x6a0
[  109.904820][ T5640]  ? rcu_is_watching+0x15/0xb0
[  109.904840][ T5640]  __submit_merged_write_cond+0x3c9/0x4e0
[  109.904857][ T5640]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  109.904884][ T5640]  f2fs_write_data_pages+0x2a27/0x36f0
[  109.904898][ T5640]  ? is_bpf_text_address+0x292/0x2b0
[  109.904936][ T5640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.904949][ T5640]  ? is_bpf_text_address+0x26/0x2b0
[  109.904971][ T5640]  ? arch_stack_walk+0xfb/0x150
[  109.905000][ T5640]  ? add_lock_to_list+0xc7/0x100
[  109.905078][ T5640]  ? lockdep_unlock+0x5d/0xd0
[  109.905089][ T5640]  ? __lock_acquire+0x14b9/0x2e50
[  109.905121][ T5640]  ? do_raw_spin_lock+0x12b/0x2f0
[  109.905140][ T5640]  ? do_raw_spin_unlock+0x4d/0x210
[  109.905152][ T5640]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  109.905187][ T5640]  do_writepages+0x338/0x560
[  109.905211][ T5640]  ? do_raw_spin_unlock+0x4d/0x210
[  109.905226][ T5640]  filemap_fdatawrite+0x1e9/0x2f0
[  109.905245][ T5640]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  109.905291][ T5640]  ? do_raw_spin_unlock+0x4d/0x210
[  109.905306][ T5640]  f2fs_sync_dirty_inodes+0x30e/0x830
[  109.905333][ T5640]  f2fs_write_checkpoint+0xa3d/0x2710
[  109.905349][ T5640]  ? __lock_acquire+0x6df/0x2e50
[  109.905383][ T5640]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  109.905431][ T5640]  kill_f2fs_super+0x2f6/0x700
[  109.905450][ T5640]  ? __pfx_kill_f2fs_super+0x10/0x10
[  109.905472][ T5640]  ? call_rcu+0x64b/0x8b0
[  109.905490][ T5640]  ? lockdep_hardirqs_on+0x7a/0x110
[  109.905513][ T5640]  deactivate_locked_super+0xbc/0x130
[  109.905535][ T5640]  cleanup_mnt+0x3d3/0x460
[  109.905552][ T5640]  task_work_run+0x1d9/0x270
[  109.905572][ T5640]  ? __pfx_task_work_run+0x10/0x10
[  109.905594][ T5640]  exit_to_user_mode_loop+0x1fa/0x730
[  109.905611][ T5640]  ? rcu_is_watching+0x15/0xb0
[  109.905627][ T5640]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.905638][ T5640]  do_syscall_64+0x353/0x580
[  109.905650][ T5640]  ? trace_irq_disable+0x3b/0x140
[  109.905667][ T5640]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  109.905677][ T5640] RIP: 0033:0x7fd60fd9f317
[  109.905690][ T5640] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  109.905699][ T5640] RSP: 002b:00007fffbdff4128 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  109.905711][ T5640] RAX: 0000000000000000 RBX: 00007fd60fe34474 RCX: 00007fd60fd9f317
[  109.905718][ T5640] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbdff41e0
[  109.905724][ T5640] RBP: 00007fffbdff41e0 R08: 00007fffbdff51e0 R09: 00000000ffffffff
[  109.905732][ T5640] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbdff5270
[  109.905739][ T5640] R13: 00007fd60fe34474 R14: 000000000001ac94 R15: 00007fffbdff52b0
[  109.905758][ T5640]  </TASK>
[  109.911281][ T5640] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  110.367185][ T6921] MTRR 1 not used
[  110.601178][ T6931] misc userio: Can't change port id on an already running userio instance
[  110.677872][ T6928] loop1: detected capacity change from 0 to 40427
[  110.682799][ T6928] F2FS-fs (loop1): invalid crc value
[  110.729525][ T6928] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  110.738379][ T6928] F2FS-fs (loop1): f2fs_disable_checkpoint starts, unusable: 0
[  110.741381][ T6928] F2FS-fs (loop1): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  110.745947][ T6928] F2FS-fs (loop1): Start checkpoint disabled!
[  110.757168][ T6928] F2FS-fs (loop1): f2fs_disable_checkpoint finishes, err:0
[  110.760733][ T6928] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  111.315731][   T33] audit: type=1326 audit(1787670015.649:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ac19e0d9 code=0x7ffc0000
[  111.323323][   T33] audit: type=1326 audit(1787670015.649:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ac19e0d9 code=0x7ffc0000
[  111.332638][   T33] audit: type=1326 audit(1787670015.659:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.453" exe="/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f14ac19e0d9 code=0x7ffc0000
[  111.342394][   T33] audit: type=1326 audit(1787670015.659:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ac19e0d9 code=0x7ffc0000
[  111.349804][   T33] audit: type=1326 audit(1787670015.659:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.0.453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ac19e0d9 code=0x7ffc0000
[  111.407173][  T173] kworker/u9:3: attempt to access beyond end of device
[  111.407173][  T173] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  111.418785][  T173] CPU: 1 UID: 0 PID: 173 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  111.418805][  T173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.418813][  T173] Workqueue: writeback wb_workfn (flush-7:1)
[  111.418835][  T173] Call Trace:
[  111.418841][  T173]  <TASK>
[  111.418846][  T173]  dump_stack_lvl+0xe8/0x150
[  111.418865][  T173]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  111.418884][  T173]  f2fs_write_end_io+0x124b/0x1710
[  111.418911][  T173]  __submit_merged_bio+0x258/0x6a0
[  111.418924][  T173]  ? rcu_is_watching+0x15/0xb0
[  111.418946][  T173]  __submit_merged_write_cond+0x3c9/0x4e0
[  111.418965][  T173]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  111.418991][  T173]  f2fs_write_data_pages+0x2a27/0x36f0
[  111.419057][  T173]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.419081][  T173]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  111.419118][  T173]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  111.419142][  T173]  ? __lock_acquire+0x6df/0x2e50
[  111.419167][  T173]  ? set_shrinker_bit+0x7c/0x350
[  111.419194][  T173]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  111.419210][  T173]  do_writepages+0x338/0x560
[  111.419229][  T173]  ? reacquire_held_locks+0x117/0x1a0
[  111.419246][  T173]  ? writeback_sb_inodes+0x450/0x1b00
[  111.419265][  T173]  __writeback_single_inode+0x12e/0xf90
[  111.419287][  T173]  writeback_sb_inodes+0x9de/0x1b00
[  111.419300][  T173]  ? __lock_acquire+0x6df/0x2e50
[  111.419344][  T173]  ? lock_acquire+0x115/0x350
[  111.419362][  T173]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  111.419402][  T173]  ? rcu_is_watching+0x15/0xb0
[  111.419420][  T173]  ? queue_io+0x2d3/0x470
[  111.419437][  T173]  wb_writeback+0x41c/0xad0
[  111.419454][  T173]  ? queue_io+0x2d1/0x470
[  111.419472][  T173]  ? __pfx_wb_writeback+0x10/0x10
[  111.419486][  T173]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.419508][  T173]  wb_workfn+0x431/0x10f0
[  111.419533][  T173]  ? __pfx_wb_workfn+0x10/0x10
[  111.419548][  T173]  ? trace_hrtimer_start+0x82/0x200
[  111.419566][  T173]  ? do_raw_spin_lock+0x12b/0x2f0
[  111.419580][  T173]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  111.419594][  T173]  ? lock_acquire+0x115/0x350
[  111.419614][  T173]  ? rcu_is_watching+0x15/0xb0
[  111.419633][  T173]  ? process_scheduled_works+0xa20/0x14e0
[  111.419645][  T173]  process_scheduled_works+0xa8e/0x14e0
[  111.419675][  T173]  ? __pfx_process_scheduled_works+0x10/0x10
[  111.419693][  T173]  ? assign_work+0x3cf/0x5d0
[  111.419708][  T173]  worker_thread+0xa47/0xfb0
[  111.419729][  T173]  ? __kthread_parkme+0x71/0x1f0
[  111.419749][  T173]  kthread+0x388/0x470
[  111.419766][  T173]  ? __pfx_worker_thread+0x10/0x10
[  111.419776][  T173]  ? __pfx_kthread+0x10/0x10
[  111.419792][  T173]  ret_from_fork+0x514/0xb70
[  111.419809][  T173]  ? __pfx_ret_from_fork+0x10/0x10
[  111.419825][  T173]  ? __switch_to+0xc89/0x1420
[  111.419840][  T173]  ? __pfx_kthread+0x10/0x10
[  111.419856][  T173]  ret_from_fork_asm+0x1a/0x30
[  111.419883][  T173]  </TASK>
[  111.421005][  T173] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  111.534194][   T33] audit: type=1400 audit(1787670015.859:13): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/:o" pid=6950 comm="syz.0.457"
[  112.623569][ T5102] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  112.817190][ T5102] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01
[  112.826428][ T5102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.069245][ T5102] dln2 2-1:1.0: USB write failed: -110
[  113.077538][ T5102] dln2 2-1:1.0: failed to initialize hardware
[  113.102512][ T5102] dln2 2-1:1.0: probe with driver dln2 failed with error -110
[  113.210047][ T6993] bridge0: port 3(vlan2) entered blocking state
[  113.212075][ T6993] bridge0: port 3(vlan2) entered disabled state
[  113.214203][ T1285] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  113.217362][ T6993] vlan2: entered allmulticast mode
[  113.219370][ T6993] dummy0: entered allmulticast mode
[  113.225344][ T6993] vlan2: entered promiscuous mode
[  113.227321][ T6993] dummy0: entered promiscuous mode
[  113.375712][ T1285] usb 1-1: config 247 has an invalid interface number: 163 but max is 0
[  113.379373][ T1285] usb 1-1: config 247 has no interface number 0
[  113.392494][ T1285] usb 1-1: config 247 interface 163 has no altsetting 0
[  113.402767][ T1285] usb 1-1: string descriptor 0 read error: -22
[  113.405804][ T1285] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=4c.a3
[  113.409514][ T1285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.447220][ T1285] gspca_main: etoms-2.14.0 probing 102c:6251
[  113.676423][ T1285] usb 1-1: USB disconnect, device number 4
[  113.823814][ T5703] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  113.975765][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.982633][ T5703] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  113.986722][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.990039][ T5703] usb 4-1: Product: syz
[  113.992078][ T5703] usb 4-1: Manufacturer: syz
[  113.995978][ T5703] usb 4-1: SerialNumber: syz
[  114.009363][ T5703] usb 4-1: config 0 descriptor??
[  114.222745][ T5102] usb 4-1: USB disconnect, device number 2
[  114.453604][ T5703] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  114.608060][ T5703] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00
[  114.612097][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.797608][ T7011] loop3: detected capacity change from 0 to 128
[  114.807511][ T7011] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  114.820305][ T7011] hpfs: filesystem error: improperly stopped
[  114.826978][ T7011] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  114.835374][ T7011] hpfs: You really don't want any checks? You are crazy...
[  114.838155][ T7011] hpfs: Code page index out of array
[  114.840308][ T7011] hpfs: code page support is disabled
[  114.842614][ T7011] hpfs: hpfs_map_4sectors(): unaligned read
[  114.846243][ T7011] hpfs: hpfs_map_4sectors(): unaligned read
[  114.848725][ T7011] hpfs: filesystem error: unable to find root dir
[  114.951292][ T7014] loop3: detected capacity change from 0 to 512
[  114.967025][ T7014] EXT4-fs (loop3): Test dummy encryption mode enabled
[  114.984030][ T7014] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  114.992761][ T7014] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  115.006228][ T7014] EXT4-fs (loop3): 1 truncate cleaned up
[  115.010747][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.023150][ T7014] fscrypt: AES-256-XTS using blk-crypto-fallback
[  115.229733][   T33] audit: type=1800 audit(1787670019.559:14): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="bus" dev="loop3" ino=18 res=0 errno=0
[  115.262257][ T6626] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.421101][ T5751] usb 2-1: USB disconnect, device number 5
[  115.803562][ T5751] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  115.849593][ T5703] usb 1-1: USB disconnect, device number 5
[  115.994752][ T5751] usb 2-1: not running at top speed; connect to a high speed hub
[  115.998433][ T5751] usb 2-1: config 0 has an invalid interface number: 44 but max is 0
[  116.001556][ T5751] usb 2-1: config 0 has no interface number 0
[  116.008075][ T5751] usb 2-1: config 0 interface 44 has no altsetting 0
[  116.013915][ T5751] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.04
[  116.016974][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.021862][ T5751] usb 2-1: Product: syz
[  116.024785][ T5751] usb 2-1: Manufacturer: syz
[  116.027051][ T5751] usb 2-1: SerialNumber: syz
[  116.032181][ T5751] usb 2-1: config 0 descriptor??
[  116.263788][ T5751] go7007 2-1:0.44: probe with driver go7007 failed with error -12
[  116.279057][ T5751] usb 2-1: USB disconnect, device number 6
[  116.620390][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'.
[  116.624933][ T7134] netlink: 348 bytes leftover after parsing attributes in process `syz.3.494'.
[  116.628655][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.494'.
[  116.632261][ T7134] netlink: 348 bytes leftover after parsing attributes in process `syz.3.494'.
[  116.689156][ T7136] syz.3.495 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  116.753378][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  116.755634][ T5751] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  116.760970][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.496'.
[  116.923730][ T5751] usb 1-1: Using ep0 maxpacket: 8
[  116.931019][ T5751] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  116.933826][ T5751] usb 1-1: config 0 has no interface number 0
[  116.936032][ T5751] usb 1-1: config 0 interface 1 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.939728][ T5751] usb 1-1: config 0 interface 1 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.942896][ T5751] usb 1-1: config 0 interface 1 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  116.947627][ T5751] usb 1-1: config 0 interface 1 has no altsetting 0
[  116.950013][ T5751] usb 1-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00
[  116.954030][ T5751] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.961501][ T5751] usb 1-1: config 0 descriptor??
[  117.063671][ T1285] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  117.093802][ T5102] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  117.223653][ T1285] usb 2-1: Using ep0 maxpacket: 32
[  117.228682][ T1285] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  117.234638][ T1285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  117.239248][ T1285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  117.243207][ T1285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  117.248174][ T1285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  117.253610][ T5102] usb 4-1: Using ep0 maxpacket: 16
[  117.259447][ T1285] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  117.264689][ T1285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.268243][ T1285] usb 2-1: Product: syz
[  117.270777][ T1285] usb 2-1: Manufacturer: syz
[  117.272948][ T5102] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  117.276734][ T1285] usb 2-1: SerialNumber: syz
[  117.278763][ T5102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.284723][ T5102] usb 4-1: Product: syz
[  117.288058][ T1285] usb 2-1: config 0 descriptor??
[  117.290792][ T5102] usb 4-1: Manufacturer: syz
[  117.293608][ T5102] usb 4-1: SerialNumber: syz
[  117.384674][ T5751] uclogic 0003:28BD:1903.0001: interface is invalid, ignoring
[  117.515642][ T5102] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  117.531372][ T5102] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  117.536530][ T5102] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  117.540215][ T5102] usb 4-1: media controller created
[  117.565557][ T5102] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  117.587122][ T5703] usb 1-1: USB disconnect, device number 6
[  117.705139][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -32
[  117.707813][ T1285] input input6: Device does not respond to id packet M
[  117.712142][ T1285] input input6: Device does not respond to id packet P
[  117.715511][ T5102] zl10353_read_register: readreg error (reg=127, ret==-32)
[  117.774919][ T5102] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  117.787843][ T5102] usb 4-1: USB disconnect, device number 3
[  117.912345][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.915023][ T1285] input input6: Device does not respond to id packet B
[  117.919915][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.922406][ T1285] input input6: Device does not respond to id packet N
[  117.926049][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.929158][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.931948][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.935002][ T1285] iforce 2-1:0.0: usb_submit_urb failed: -71
[  117.942766][ T1285] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6
[  117.979084][ T1285] usb 2-1: USB disconnect, device number 7
[  118.375959][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  118.544387][ T7160] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  118.695707][ T7164] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.504'.
[  118.705757][ T7164] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'.
[  118.895186][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  119.338888][    T9] usb 1-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[  119.348717][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.351927][    T9] usb 1-1: Product: syz
[  119.354803][    T9] usb 1-1: Manufacturer: syz
[  119.359390][    T9] usb 1-1: SerialNumber: syz
[  119.367644][    T9] kaweth 1-1:1.0: couldn't find required endpoints
[  119.450619][ T7176] loop3: detected capacity change from 0 to 1756
[  119.456499][ T7176] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  119.459508][ T7176] UDF-fs: Scanning with blocksize 512 failed
[  119.465918][ T7176] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  119.468503][ T7176] UDF-fs: Scanning with blocksize 1024 failed
[  119.472766][ T7176] UDF-fs: INFO Mounting volume 'CDROM', timestamp 2022/11/22 15:59 (1000)
[  119.573040][ T7182] loop1: detected capacity change from 0 to 512
[  119.574713][ T5751] usb 1-1: USB disconnect, device number 7
[  119.621519][ T7182] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  119.637480][ T7182] EXT4-fs (loop1): invalid journal inode
[  119.642722][ T7182] EXT4-fs (loop1): can't get journal size
[  119.663628][ T7182] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #2: comm syz.1.509: blocks 4-4 from inode overlap system zone
[  119.675575][ T7182] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  119.676388][ T7182] EXT4-fs (loop1): Remounting filesystem read-only
[  119.682192][ T7182] EXT4-fs (loop1): failed to initialize system zone (-117)
[  119.684510][    C0] EXT4-fs (loop1): error count since last fsck: 1
[  119.684535][    C0] EXT4-fs (loop1): initial error at time 1787670024: ext4_protect_reserved_inode:182: inode 2
[  119.684549][    C0] EXT4-fs (loop1): last error at time 1787670024: ext4_protect_reserved_inode:182: inode 2
[  119.703845][ T7182] EXT4-fs (loop1): mount failed
[  120.009808][ T7196] mmap: syz.3.515 (7196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  120.803196][ T7226] Console: switching to colour dummy device 80x25
[  120.865528][ T7235] jffs2: notice: (7235) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  121.150883][ T7244] loop1: detected capacity change from 0 to 1024
[  122.023267][ T7252] loop3: detected capacity change from 0 to 32768
[  122.127094][ T7228] pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 conventional PCI endpoint
[  122.161658][ T7228] pci 0000:00:01.0: BAR 0 [mem 0xfd000000-0xfdffffff pref]
[  122.164675][ T7228] pci 0000:00:01.0: BAR 2 [mem 0xfebf0000-0xfebf0fff]
[  122.167258][ T7228] pci 0000:00:01.0: ROM [mem 0xfebe0000-0xfebeffff pref]
[  122.169971][ T7228] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff]
[  122.232119][ T7228] pci 0000:00:01.0: vgaarb: setting as boot VGA device
[  122.234847][ T7228] pci 0000:00:01.0: vgaarb: bridge control possible
[  122.237197][ T7228] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none
[  122.268455][ T7228] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x80ffffff pref]: assigned
[  122.291186][ T7228] pci 0000:00:01.0: BAR 2 [mem 0x81000000-0x81000fff]: assigned
[  122.338647][ T7228] bochs-drm 0000:00:01.0: vgaarb: deactivate vga console
[  122.370990][ T7228] [drm] Found bochs VGA, ID 0xb0c5.
[  122.375690][ T7228] [drm] Framebuffer size 16384 kB @ 0x80000000, mmio @ 0x81000000.
[  122.388662][ T7228] bochs-drm 0000:00:01.0: probe with driver bochs-drm failed with error -4
[  122.798476][ T7289] loop3: detected capacity change from 0 to 32768
[  122.821662][ T7289] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.554 (7289)
[  122.832064][ T7289] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.835471][ T7289] BTRFS info (device loop3): using crc32c checksum algorithm
[  122.998028][ T7289] BTRFS info (device loop3): allowing degraded mounts
[  123.003216][ T7289] BTRFS info (device loop3): enabling ssd optimizations
[  123.008473][ T7289] BTRFS info (device loop3): turning on flush-on-commit
[  123.015783][ T7289] BTRFS info (device loop3): enabling free space tree
[  123.019906][ T7289] BTRFS info (device loop3): force zlib compression, level 3
[  123.532306][ T6626] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.013648][ T5102] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  124.183239][ T5102] usb 4-1: config 0 interface 0 altsetting 216 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  124.190271][ T5102] usb 4-1: config 0 interface 0 altsetting 216 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  124.204151][ T5102] usb 4-1: config 0 interface 0 has no altsetting 0
[  124.209133][ T5102] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  124.215475][ T5102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.222584][ T5102] usb 4-1: config 0 descriptor??
[  124.672137][ T5102] steelseries 0003:1038:12B6.0002: unknown main item tag 0x2
[  124.745790][ T5102] steelseries 0003:1038:12B6.0002: hidraw0: USB HID v7f.fe Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0
[  124.887646][ T5102] steelseries 0003:1038:12B6.0002: hid_hw_raw_request() failed with -71
[  124.914085][ T5102] usb 4-1: USB disconnect, device number 4
[  124.938563][ T7337] netlink: 'syz.1.566': attribute type 15 has an invalid length.
[  125.013020][ T7342] netlink: 'syz.1.568': attribute type 1 has an invalid length.
[  125.061551][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.569'.
[  125.070683][ T7344] ip6tnl1: entered allmulticast mode
[  125.075527][ T5532] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  125.080803][ T7344] loop0: detected capacity change from 0 to 512
[  125.112651][ T7344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.124685][ T7344] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.152495][ T7344] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  125.158154][ T7344] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  125.163392][ T7344] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.569: Failed to acquire dquot type 0
[  125.190749][ T7344] Quota error (device loop0): find_block_dqentry: Quota for id 0 referenced but not present
[  125.199593][ T7344] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  125.206434][ T7344] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.569: Failed to acquire dquot type 0
[  125.243232][ T5637] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.400130][ T7364] netlink: 'syz.3.577': attribute type 9 has an invalid length.
[  125.671123][ T7378] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.584'.
[  125.684759][ T1285] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  125.854753][ T1285] usb 2-1: Using ep0 maxpacket: 8
[  125.862957][ T1285] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  125.870330][ T1285] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  125.875434][ T1285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  125.880316][ T1285] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  125.886637][ T1285] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  125.894075][ T1285] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  125.898873][ T1285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.131150][ T1285] usb 2-1: usb_control_msg returned -32
[  126.134221][ T1285] usbtmc 2-1:16.0: can't read capabilities
[  126.357365][ T5102] usb 2-1: USB disconnect, device number 8
[  127.179280][ T7432] Bluetooth: MGMT ver 1.23
[  127.185960][ T7432] Bluetooth: hci0: invalid length 0, exp 2 for type 16
[  127.352055][ T7430] loop1: detected capacity change from 0 to 32768
[  127.379050][ T7430] JBD2: Ignoring recovery information on journal
[  127.409888][ T7430] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  127.503735][ T7430] OCFS2: ERROR (device loop1): int ocfs2_reserve_local_alloc_bits(struct ocfs2_super *, u32, struct ocfs2_alloc_context *): local alloc inode 76 says it has 6 used bits, but a count shows 5
[  127.514000][ T7430] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  127.518258][ T7430] OCFS2: File system is now read-only.
[  127.520537][ T7430] (syz.1.608,7430,1):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  127.524579][ T7430] (syz.1.608,7430,1):ocfs2_reserve_clusters_with_limit:1288 ERROR: status = -30
[  127.528197][ T7430] (syz.1.608,7430,1):ocfs2_reserve_clusters_with_limit:1337 ERROR: status = -30
[  127.532653][ T7430] (syz.1.608,7430,1):ocfs2_mknod:361 ERROR: status = -30
[  127.537097][ T7430] (syz.1.608,7430,1):ocfs2_mknod:506 ERROR: status = -30
[  127.540667][ T7430] (syz.1.608,7430,1):ocfs2_create:679 ERROR: status = -30
[  127.645128][ T5640] ocfs2: Unmounting device (7,1) on (node local)
[  127.651025][ T7436] loop3: detected capacity change from 0 to 32768
[  127.653035][ T7444] loop0: detected capacity change from 0 to 164
[  127.674603][ T7436] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.610 (7436)
[  127.739050][ T7436] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  127.751520][ T7436] BTRFS info (device loop3): using xxhash64 checksum algorithm
[  127.901333][ T7436] BTRFS info (device loop3): enabling ssd optimizations
[  127.925395][ T7436] BTRFS info (device loop3): turning on async discard
[  127.934094][ T7436] BTRFS info (device loop3): enabling free space tree
[  128.087998][ T7467] netlink: 64 bytes leftover after parsing attributes in process `syz.0.617'.
[  128.155315][ T7471] syzkaller1: entered promiscuous mode
[  128.164879][ T7471] syzkaller1: entered allmulticast mode
[  128.303742][ T6626] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b
[  128.311730][ T7470] bond0: option arp_interval: invalid value ()
[  128.319995][ T7470] bond0: option arp_interval: allowed values 0 - 2147483647
[  128.644160][   T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  128.797127][   T24] usb 1-1: Using ep0 maxpacket: 16
[  128.802003][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  128.812456][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  128.841450][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  128.845436][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.852620][   T24] usb 1-1: Product: syz
[  128.861361][   T24] usb 1-1: Manufacturer: syz
[  128.873651][   T24] usb 1-1: SerialNumber: syz
[  128.921818][   T24] usb 1-1: config 0 descriptor??
[  128.956524][   T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  128.968510][   T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  128.986921][ T7496] loop1: detected capacity change from 0 to 128
[  129.035064][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  129.075295][ T7496] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  129.080728][ T7496] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  129.094129][ T7496] EXT4-fs (loop1): shut down requested (2)
[  129.137368][ T5640] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  129.726709][   T24] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  129.812821][   T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  130.468706][   T24] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  130.482775][   T24] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  130.510445][ T7521] loop1: detected capacity change from 0 to 4096
[  130.532239][ T7521] ntfs3(loop1): Failed to load $Extend (-22).
[  130.535042][ T7521] ntfs3(loop1): Failed to initialize $Extend.
[  130.719665][   T24] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  130.746931][   T24] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  130.774085][   T24] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  130.821963][ T7527] xt_hashlimit: max too large, truncated to 1048576
[  130.836575][ T7527] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  130.888672][   T24] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  130.978231][   T24] usb 1-1: USB disconnect, device number 8
[  131.731349][ T7529] loop0: detected capacity change from 0 to 256
[  131.750375][ T7529] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d)
[  132.058622][ T7537] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'.
[  132.072812][ T7537] sctp: [Deprecated]: syz.0.642 (pid 7537) Use of struct sctp_assoc_value in delayed_ack socket option.
[  132.072812][ T7537] Use struct sctp_sack_info instead
[  132.107116][ T7531] loop1: detected capacity change from 0 to 32768
[  132.178698][ T7531] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  132.215019][ T7531] XFS (loop1): Ending clean mount
[  132.279684][ T5640] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  132.452466][ T7551] kAFS: Invalid Command on /proc/fs/afs/cells file
[  132.737206][ T7568] tmpfs: Bad value for 'usrquota_block_hardlimit'
[  132.773385][ T7570] loop3: detected capacity change from 0 to 8
[  132.924368][ T7572] syz.1.653 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000
[  132.936853][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.1.653 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  132.936893][ T7572] Tainted: [L]=SOFTLOCKUP
[  132.936897][ T7572] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.936902][ T7572] Call Trace:
[  132.936907][ T7572]  <TASK>
[  132.936912][ T7572]  dump_stack_lvl+0xe8/0x150
[  132.936984][ T7572]  dump_header+0xd3/0x4b0
[  132.937000][ T7572]  oom_kill_process+0x3ab/0x970
[  132.937010][ T7572]  out_of_memory+0x1064/0x1480
[  132.937017][ T7572]  ? try_charge_memcg+0xc2e/0x15e0
[  132.937033][ T7572]  ? __pfx_out_of_memory+0x10/0x10
[  132.937039][ T7572]  ? do_raw_spin_unlock+0x4d/0x210
[  132.937051][ T7572]  try_charge_memcg+0xcdb/0x15e0
[  132.937064][ T7572]  ? do_pipe2+0xaa/0x190
[  132.937077][ T7572]  ? __pfx_try_charge_memcg+0x10/0x10
[  132.937090][ T7572]  ? percpu_ref_tryget+0x15/0x180
[  132.937098][ T7572]  ? __memcg_slab_post_alloc_hook+0x710/0xf10
[  132.937112][ T7572]  ? __memcg_slab_post_alloc_hook+0x710/0xf10
[  132.937125][ T7572]  ? __memcg_slab_post_alloc_hook+0x710/0xf10
[  132.937137][ T7572]  __memcg_slab_post_alloc_hook+0x909/0xf10
[  132.937155][ T7572]  ? __kmalloc_cache_noprof+0x150/0x660
[  132.937167][ T7572]  __kmalloc_cache_noprof+0x372/0x660
[  132.937178][ T7572]  ? security_inode_alloc+0xd5/0x310
[  132.937218][ T7572]  ? __kmalloc_cache_noprof+0x150/0x660
[  132.937227][ T7572]  ? alloc_pipe_info+0xe8/0x4c0
[  132.937234][ T7572]  ? alloc_pipe_info+0xe8/0x4c0
[  132.937244][ T7572]  alloc_pipe_info+0xe8/0x4c0
[  132.937257][ T7572]  create_pipe_files+0x88/0x7c0
[  132.937268][ T7572]  ? lock_acquire+0x115/0x350
[  132.937280][ T7572]  __do_pipe_flags+0x46/0x1f0
[  132.937291][ T7572]  do_pipe2+0xaa/0x190
[  132.937302][ T7572]  ? __pfx_do_pipe2+0x10/0x10
[  132.937312][ T7572]  ? rcu_is_watching+0x15/0xb0
[  132.937328][ T7572]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.937338][ T7572]  __x64_sys_pipe2+0x5a/0x70
[  132.937348][ T7572]  do_syscall_64+0x174/0x580
[  132.937382][ T7572]  ? trace_irq_disable+0x3b/0x140
[  132.937393][ T7572]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.937401][ T7572] RIP: 0033:0x7fd60fd9e0d9
[  132.937411][ T7572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  132.937418][ T7572] RSP: 002b:00007fd610b86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  132.937429][ T7572] RAX: ffffffffffffffda RBX: 00007fd610025fa0 RCX: 00007fd60fd9e0d9
[  132.937435][ T7572] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  132.937445][ T7572] RBP: 00007fd60fe35024 R08: 0000000000000000 R09: 0000000000000000
[  132.937450][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  132.937454][ T7572] R13: 00007fd610026038 R14: 00007fd610025fa0 R15: 00007fffbdff4eb8
[  132.937465][ T7572]  </TASK>
[  132.937469][ T7572] memory: usage 8kB, limit 8kB, failcnt 21
[  133.061783][ T7572] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0
[  133.082901][ T7572] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0
[  133.088042][ T7577] bridge_slave_0: left allmulticast mode
[  133.090369][ T7577] bridge_slave_0: left promiscuous mode
[  133.093608][ T7572] Memory cgroup stats for /syz1/test:
[  133.094657][ T7572] cache 0
[  133.095935][ T7577] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.105304][ T7572] rss 0
[  133.106502][ T7572] rss_huge 0
[  133.113042][ T7572] shmem 0
[  133.123696][ T7572] mapped_file 0
[  133.125161][ T7572] dirty 0
[  133.126318][ T7572] writeback 0
[  133.127529][ T7572] workingset_refault_anon 0
[  133.129230][ T7572] workingset_refault_file 0
[  133.129247][ T7577] bridge_slave_1: left allmulticast mode
[  133.130898][ T7572] swap 0
[  133.130946][ T7572] swapcached 0
[  133.130956][ T7572] pgpgin 0
[  133.130964][ T7572] pgpgout 0
[  133.130969][ T7572] pgfault 0
[  133.130977][ T7572] pgmajfault 0
[  133.130982][ T7572] inactive_anon 0
[  133.130989][ T7572] active_anon 0
[  133.130994][ T7572] inactive_file 0
[  133.131001][ T7572] active_file 0
[  133.131010][ T7572] unevictable 0
[  133.138453][ T7577] bridge_slave_1: left promiscuous mode
[  133.155180][ T7577] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.162549][ T7572] hierarchical_memory_limit 8192
[  133.165419][ T7572] hierarchical_memsw_limit 9223372036854771712
[  133.168643][ T7572] total_cache 0
[  133.171674][ T7572] total_rss 0
[  133.183608][ T7572] total_rss_huge 0
[  133.185001][ T7572] total_shmem 0
[  133.186224][ T7572] total_mapped_file 0
[  133.187578][ T7572] total_dirty 0
[  133.188765][ T7572] total_writeback 0
[  133.191115][ T7572] total_workingset_refault_anon 0
[  133.191437][ T7577] bond0: (slave bond_slave_0): Releasing backup interface
[  133.198804][ T7572] total_workingset_refault_file 0
[  133.207557][ T7572] total_swap 0
[  133.209970][ T7577] bond0: (slave bond_slave_1): Releasing backup interface
[  133.210484][ T7572] total_swapcached 0
[  133.219193][ T7572] total_pgpgin 0
[  133.220505][ T7572] total_pgpgout 0
[  133.221848][ T7572] total_pgfault 0
[  133.223170][ T7572] total_pgmajfault 0
[  133.224553][ T7572] total_inactive_anon 0
[  133.231134][ T7572] total_active_anon 0
[  133.232325][ T7577] team0: Port device team_slave_0 removed
[  133.232759][ T7572] total_inactive_file 0
[  133.236636][ T7572] total_active_file 0
[  133.238362][ T7577] team0: Port device team_slave_1 removed
[  133.238417][ T7572] total_unevictable 0
[  133.240940][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  133.242015][ T7572] anon_cost 0
[  133.245238][ T7577] batman_adv: batadv0: Removing interface: batadv_slave_0
[  133.253696][ T7572] file_cost 0
[  133.255133][ T7572] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.653,pid=7571,uid=0
[  133.262412][ T7577] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  133.264501][ T7572] Memory cgroup out of memory: Killed process 7571 (syz.1.653) total-vm:104300kB, anon-rss:1432kB, file-rss:23828kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000
[  133.267773][ T7577] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.286810][ T7577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  133.520652][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  133.523143][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  133.528774][ T1377] aoe: packet could not be sent on ipvlan1.  consider increasing tx_queue_len
[  133.538293][ T7588] xt_hashlimit: size too large, truncated to 1048576
[  134.033728][ T1285] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  134.205354][ T1285] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  134.208713][ T1285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.219441][ T1285] usb 4-1: config 0 descriptor??
[  134.249574][ T1285] cp210x 4-1:0.0: cp210x converter detected
[  134.681087][ T1285] usb 4-1: cp210x converter now attached to ttyUSB0
[  134.860451][ T1285] usb 4-1: USB disconnect, device number 5
[  134.881402][ T1285] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  134.898924][ T1285] cp210x 4-1:0.0: device disconnected
[  135.401469][ T7640] loop1: detected capacity change from 0 to 256
[  135.646009][ T7650] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  135.653572][ T7650] overlayfs: conflicting options: userxattr,metacopy=on
[  136.005541][ T7673] CUSE: unknown device info ""
[  136.010257][ T7673] CUSE: unknown device info ""
[  136.012209][ T7673] CUSE: unknown device info ""
[  136.014715][ T7673] CUSE: unknown device info ""
[  136.016656][ T7673] CUSE: unknown device info ""
[  136.018541][ T7673] CUSE: zero length info key specified
[  136.058938][ T7679] loop0: detected capacity change from 0 to 16
[  136.110753][ T7679] erofs (device loop0): mounted with root inode @ nid 36.
[  137.354244][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  137.464701][ T7719] netlink: 80 bytes leftover after parsing attributes in process `syz.1.718'.
[  137.612392][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'.
[  137.620245][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.721'.
[  137.790187][ T7735] netlink: 'syz.3.725': attribute type 1 has an invalid length.
[  137.842594][ T7735] 8021q: adding VLAN 0 to HW filter on device bond1
[  137.883183][ T7735] vlan3: entered allmulticast mode
[  137.885441][ T7735] bond1: entered allmulticast mode
[  137.918886][ T7735] bond1: (slave geneve2): making interface the new active one
[  137.921970][ T7735] geneve2: entered allmulticast mode
[  137.931943][ T7735] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  137.961181][ T7727] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  137.987973][ T7727] block device autoloading is deprecated and will be removed.
[  138.000618][ T7723] loop1: detected capacity change from 0 to 32768
[  138.018662][ T7723] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.032653][ T7723] XFS (loop1): Ending clean mount
[  138.067092][ T5640] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  138.196969][ T7750] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n	#|[8},)
[  138.254303][ T7750] bond0: option arp_interval: allowed values 0 - 2147483647
[  138.578106][ T7757] loop1: detected capacity change from 0 to 32768
[  138.603252][ T7757] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  138.737132][ T7764] netlink: 'syz.3.733': attribute type 1 has an invalid length.
[  139.072741][   T33] audit: type=1800 audit(1787670043.399:15): pid=7765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.730" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  139.081944][ T7765] netlink: 'syz.1.730': attribute type 4 has an invalid length.
[  139.172886][ T7774] xt_HMARK: spi-set and port-set can't be combined
[  139.428532][ T5640] ocfs2: Unmounting device (7,1) on (node local)
[  139.532473][ T7786] loop0: detected capacity change from 0 to 8
[  139.662786][ T7786] SQUASHFS error: lzo decompression failed, data probably corrupt
[  139.671908][ T7786] SQUASHFS error: Failed to read block 0x91: -5
[  139.678130][ T7786] SQUASHFS error: Unable to read metadata cache entry [8f]
[  139.688369][ T7786] SQUASHFS error: Unable to read inode 0x11f
[  140.044556][ T7796] loop0: detected capacity change from 0 to 64
[  140.464098][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  140.489066][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'.
[  141.641941][ T7832] netlink: 'syz.1.762': attribute type 4 has an invalid length.
[  141.773005][   T33] audit: type=1326 audit(1787670046.099:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.798470][   T33] audit: type=1326 audit(1787670046.099:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.808849][   T33] audit: type=1326 audit(1787670046.099:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.820111][   T33] audit: type=1326 audit(1787670046.109:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.829476][   T33] audit: type=1326 audit(1787670046.109:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.839962][   T33] audit: type=1326 audit(1787670046.109:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.764" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  141.951483][ T7840] openvswitch: netlink: Missing key (keys=c0, expected=500)
[  142.116389][ T7850] loop3: detected capacity change from 0 to 2048
[  142.122269][ T7850] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.377438][ T7880] loop1: detected capacity change from 0 to 256
[  143.821462][ T7887] i2c i2c-0: delete_device: Can't parse I2C address
[  143.889396][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.788'.
[  144.032085][ T7898] loop3: detected capacity change from 0 to 24
[  144.037207][ T7898] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  144.045109][ T7898] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  145.189244][ T7923] binder_alloc: 7922: binder_alloc_buf size 1024 failed, no address space
[  145.199090][ T7923] binder_alloc: allocated: 12280 (num: 1 largest: 12280), free: 8 (num: 1 largest: 8)
[  145.623924][ T5751] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.773706][ T5751] usb 2-1: Using ep0 maxpacket: 32
[  145.782572][ T5751] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.790681][ T5751] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  145.805106][ T5751] usb 2-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  145.812957][ T5751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.823185][ T5751] usb 2-1: Product: syz
[  145.828413][ T5751] usb 2-1: Manufacturer: syz
[  145.835170][ T5751] usb 2-1: SerialNumber: syz
[  145.841556][ T5751] usb 2-1: config 0 descriptor??
[  145.853145][ T5751] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22
[  146.065754][ T5751] usb 2-1: USB disconnect, device number 9
[  146.433893][ T5102] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  146.626023][ T5102] usb 1-1: Using ep0 maxpacket: 8
[  146.636492][ T5102] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  146.646522][ T5102] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  146.658148][ T5102] usb 1-1: New USB device found, idVendor=1fb9, idProduct=0100, bcdDevice=2c.b7
[  146.666433][ T5102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.672552][ T5102] usb 1-1: Product: syz
[  146.681360][ T5102] usb 1-1: Manufacturer: syz
[  146.684804][ T5102] usb 1-1: SerialNumber: syz
[  146.898337][    T9] usb 1-1: USB disconnect, device number 9
[  147.070487][ T7961] loop1: detected capacity change from 0 to 32768
[  147.082886][ T7961] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete
[  147.090290][ T5641] BTRFS error: device /dev/loop1 has incomplete metadata_uuid change, please use btrfstune to complete
[  147.164215][ T7963] loop1: detected capacity change from 0 to 1024
[  147.224940][ T7963] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.256696][   T33] audit: type=1800 audit(1787670050.579:22): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.821" name="file1" dev="loop1" ino=15 res=0 errno=0
[  147.312486][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.676244][ T7985] capability: warning: `syz.1.829' uses deprecated v2 capabilities in a way that may be insecure
[  147.908111][ T7995] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  147.912042][ T7995] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  148.030281][ T8002] comedi comedi3: 8255: I/O base address not correctly aligned
[  148.094039][ T5751] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  148.243732][ T5102] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  148.256343][ T5751] usb 1-1: config 1 has an invalid interface number: 7 but max is 2
[  148.261028][ T5751] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  148.266640][ T5751] usb 1-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  148.270442][ T5751] usb 1-1: config 1 has no interface number 3
[  148.272994][ T5751] usb 1-1: too many endpoints for config 1 interface 7 altsetting 1: 255, using maximum allowed: 30
[  148.281738][ T5751] usb 1-1: config 1 interface 7 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  148.292853][ T5751] usb 1-1: config 1 interface 7 has no altsetting 0
[  148.299747][ T5751] usb 1-1: New USB device found, idVendor=1235, idProduct=8210, bcdDevice= 0.40
[  148.306777][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.316736][ T5751] usb 1-1: Product: syz
[  148.319676][ T5751] usb 1-1: Manufacturer: syz
[  148.322964][ T5751] usb 1-1: SerialNumber: syz
[  148.413696][ T5102] usb 2-1: Using ep0 maxpacket: 16
[  148.422589][ T5102] usb 2-1: unable to get BOS descriptor or descriptor too short
[  148.437611][ T5102] usb 2-1: config 251 has an invalid interface number: 33 but max is 0
[  148.453321][ T5102] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config
[  148.459996][ T5102] usb 2-1: config 251 has no interface number 0
[  148.466318][ T5102] usb 2-1: config 251 interface 33 has no altsetting 0
[  148.472986][ T5102] usb 2-1: New USB device found, idVendor=12d1, idProduct=9634, bcdDevice=18.90
[  148.478209][ T5102] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.483176][ T5102] usb 2-1: Product: syz
[  148.486217][ T5102] usb 2-1: Manufacturer: syz
[  148.488189][ T5102] usb 2-1: SerialNumber: syz
[  148.547339][ T5751] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8210); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[  148.566294][ T5751] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -71
[  148.651502][ T5751] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71
[  148.670681][ T5751] usb 1-1: USB disconnect, device number 10
[  148.723135][ T5102] qmi_wwan 2-1:251.33: probe with driver qmi_wwan failed with error -22
[  148.732234][ T5102] usb 2-1: USB disconnect, device number 10
[  148.769603][ T5641] udevd[5641]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.314681][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'.
[  149.943896][ T5102] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  150.124686][ T5102] usb 1-1: Using ep0 maxpacket: 8
[  150.130131][ T5102] usb 1-1: config 8 has an invalid interface number: 190 but max is 0
[  150.137184][ T5102] usb 1-1: config 8 has no interface number 0
[  150.141699][ T5102] usb 1-1: config 8 interface 190 has no altsetting 0
[  150.148882][ T5102] usb 1-1: New USB device found, idVendor=0c45, idProduct=628e, bcdDevice=da.e7
[  150.152794][ T5102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.157589][ T5102] usb 1-1: Product: syz
[  150.159348][ T5102] usb 1-1: Manufacturer: syz
[  150.162183][ T5102] usb 1-1: SerialNumber: syz
[  150.534309][ T5102] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628e
[  150.537610][ T5102] gspca_sn9c20x: Write register 1000 failed -71
[  150.539915][ T5102] gspca_sn9c20x: Device initialization failed
[  150.545175][ T5102] gspca_sn9c20x 1-1:8.190: probe with driver gspca_sn9c20x failed with error -71
[  150.590674][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'.
[  150.597702][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.1.862'.
[  150.627968][ T5102] usb 1-1: USB disconnect, device number 11
[  150.906708][ T8065] fuse: Unknown parameter 'p{ zS'
[  151.271112][ T8074] bad cache= option: nonelock 0
[  151.271112][ T8074] nr_zspages 0
[  151.271112][ T8074] nr_free_cma 0
[  151.271112][ T8074] numa_hit 971771
[  151.271112][ T8074] numa_miss 1
[  151.271112][ T8074] numa_foreign 1
[  151.271112][ T8074] numa_interleave 6870
[  151.271112][ T8074] numa_local 967167
[  151.271112][ T8074] numa_other 4605
[  151.271112][ T8074] nr_inactive_anon 0
[  151.271112][ T8074] nr_active_anon 28258
[  151.271112][ T8074] nr_inactive_file 56817
[  151.271112][ T8074] nr_active_file 0
[  151.271112][ T8074] nr_unevictable 0
[  151.271112][ T8074] nr_slab_reclaimable 10447
[  151.271112][ T8074] nr_slab_unreclaimable 84993
[  151.271112][ T8074] nr_isolated_anon 0
[  151.271112][ T8074] nr_isolated_file 0
[  151.271112][ T8074] workingset_nodes 0
[  151.271112][ T8074] workingset_refault_anon 0
[  151.271112][ T8074] workingset_refault_file 0
[  151.271112][ T8074] workingset_activate_anon 0
[  151.271112][ T8074] workingset_activate_file 0
[  151.271112][ T8074] workingset_restore_anon 0
[  151.271112][ T8074] workingset_restore_file 0
[  151.271112][ T8074] workingset_nodereclaim 0
[  151.271112][ T8074] nr_anon_pages 5587
[  151.271112][ T8074] nr_mapped 19209
[  151.271112][ T8074] nr_file_pages 79473
[  151.271112][ T8074] nr_dirty 185
[  151.271112][ T8074] nr_writeback 0
[  151.271112][ T8074] nr_shmem 22676
[  151.271112][ T8074] nr_shmem_hugepages 0
[  151.271112][ T8074] nr_shmem_pmdmapped 0
[  151.271112][ T8074] nr_file_hugepages 0
[  151.271112][ T8074] nr_file_pmdmapped 0
[  151.271112][ T8074] nr_anon_transparent_hugepages 0
[  151.271112][ T8074] nr_vmscan_write 728
[  151.271112][ T8074] nr_vmscan_immediate_reclaim 0
[  151.271112][ T8074] nr_dirtied 5765
[  151.271112][ T8074] nr_written 5546
[  151.271112][ T8074] nr_throttled_written 0
[  151.271112][ T8074] nr_kernel_misc_reclaimable 0
[  151.271112][ T8074] nr_foll_pin_acquired 2307
[  151.271112][ T8074] nr_foll_pin_released 2307
[  151.271112][ T8074] nr_vmalloc 75614
[  151.271334][ T8074] CIFS: VFS: bad cache= option: nonelock 0
[  151.271334][ T8074] nr_zspages 0
[  151.271334][ T8074] nr_free_cma 0
[  151.271334][ T8074] numa_hit 971771
[  151.271334][ T8074] numa_miss 1
[  151.271334][ T8074] numa_foreign 1
[  151.271334][ T8074] numa_interleave 6870
[  151.271334][ T8074] numa_local 967167
[  151.271334][ T8074] numa_other 4605
[  151.271334][ T8074] nr_inactive_anon 0
[  151.271334][ T8074] nr_active_anon 28258
[  151.271334][ T8074] nr_inactive_file 56817
[  151.271334][ T8074] nr_active_file 0
[  151.271334][ T8074] nr_unevictable 0
[  151.271334][ T8074] nr_slab_reclaimable 10447
[  151.271334][ T8074] nr_slab_unreclaimable 84993
[  151.271334][ T8074] nr_isolated_anon 0
[  151.271334][ T8074] nr_isolated_file 0
[  151.271334][ T8074] workingset_nodes 0
[  151.271334][ T8074] workingset_refault_anon 0
[  151.271334][ T8074] workingset_refault_file 0
[  151.271334][ T8074] workingset_activate_anon 0
[  151.271334][ T8074] workingset_activate_file 0
[  151.271334][ T8074] workingset_restore_anon 0
[  151.271334][ T8074] workingset_restore_file 0
[  151.271334][ T8074] workingset_nodereclaim 0
[  151.271334][ T8074] nr_anon_pages 5587
[  151.271334][ T8074] nr_mapped 19209
[  151.271334][ T8074] nr_file_pages 79473
[  151.271334][ T8074] nr_dirty 185
[  151.271334][ T8074] nr_writeback 0
[  151.271334][ T8074] nr_shmem 22676
[  151.271334][ T8074] nr_shmem_hugepages 0
[  151.271334][ T8074] nr_shmem_pmdmapped 0
[  151.271334][ T8074] nr_file_hugepages 0
[  151.271334][ T8074] nr_file_pmdmapped 0
[  151.271334][ T8074] nr_anon_transparent_hugepages 0
[  151.271334][ T8074] nr_vmscan_write 728
[  151.271334][ T8074] nr_vmscan_immediate_reclaim 0
[  151.271334][ T8074] nr_dirtied 5765
[  151.271334][ T8074] nr_written 5546
[  151.271334][ T8074] nr_throttled_written 0
[  151.271334][ T8074] nr_kernel_misc_reclaimable 0
[  151.271334][ T8074] nr_foll_pin_acquired 2307
[  151.271334][ T8074] nr_foll_pin_released 2307
[  151.271334][ T8074] nr_vmalloc 75614
[  151.478948][ T8080] loop0: detected capacity change from 0 to 16
[  151.556632][ T8080] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  151.747167][ T8090] loop3: detected capacity change from 0 to 2048
[  151.779123][ T8093] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.045703][ T8111] loop1: detected capacity change from 0 to 2048
[  152.072933][ T8112] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.163669][ T1285] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  152.203647][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  152.313672][ T1285] usb 1-1: Using ep0 maxpacket: 16
[  152.318168][ T1285] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  152.321686][ T1285] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  152.325891][ T1285] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  152.329398][ T1285] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  152.332904][ T1285] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  152.336615][ T1285] usb 1-1: config 0 has no interface number 0
[  152.339163][ T1285] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  152.343872][ T1285] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  152.347931][ T1285] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  152.351888][ T1285] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  152.357387][ T1285] usb 1-1: config 0 interface 125 has no altsetting 0
[  152.360207][ T1285] usb 1-1: config 0 interface 125 has no altsetting 2
[  152.363628][    T9] usb 4-1: Using ep0 maxpacket: 8
[  152.365788][ T1285] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  152.365810][ T1285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.365824][ T1285] usb 1-1: Product: syz
[  152.372335][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  152.372760][ T1285] usb 1-1: Manufacturer: syz
[  152.377535][    T9] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  152.378214][ T1285] usb 1-1: SerialNumber: syz
[  152.381180][ T1285] usb 1-1: config 0 descriptor??
[  152.388658][    T9] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  152.392009][    T9] usb 4-1: Product: syz
[  152.392510][ T1285] usb 1-1: selecting invalid altsetting 2
[  152.401695][    T9] usb 4-1: Manufacturer: syz
[  152.404464][    T9] usb 4-1: SerialNumber: syz
[  152.615158][    T9] usb 4-1: Invalid connection information received from device
[  152.797564][    C1] usb 1-1: async_complete: urb error -71
[  152.799326][    C1] usb 1-1: async_complete: urb error -71
[  152.800976][    C1] usb 1-1: async_complete: urb error -71
[  152.804454][ T1285] get_1284_register: usb error -71
[  152.817354][ T1285] usb 1-1: USB disconnect, device number 12
[  152.831241][    T9] usb 4-1: USB disconnect, device number 6
[  153.409058][ T5751] kernel write not supported for file /input/mouse0 (pid: 5751 comm: kworker/1:5)
[  153.625774][ T8141] netlink: 'syz.1.899': attribute type 8 has an invalid length.
[  153.823632][ T5751] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  153.845521][ T8151] loop1: detected capacity change from 0 to 4096
[  153.861654][ T8151] NILFS (loop1): invalid segment: Checksum error in segment payload
[  153.865190][ T8151] NILFS (loop1): trying rollback from an earlier position
[  153.877580][ T8151] NILFS (loop1): recovery complete
[  153.880178][ T8152] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.993777][ T5751] usb 4-1: Using ep0 maxpacket: 8
[  154.008271][ T5751] usb 4-1: unable to get BOS descriptor or descriptor too short
[  154.019307][ T5751] usb 4-1: config 7 has an invalid interface number: 150 but max is 0
[  154.031095][ T5751] usb 4-1: config 7 has no interface number 0
[  154.037075][ T5751] usb 4-1: config 7 interface 150 has no altsetting 0
[  154.045485][ T5751] usb 4-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=2c.a5
[  154.053104][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.058348][ T5751] usb 4-1: Product: syz
[  154.060608][ T5751] usb 4-1: Manufacturer: syz
[  154.062601][ T5751] usb 4-1: SerialNumber: syz
[  154.294679][ T5751] usb 4-1: USB disconnect, device number 7
[  154.643672][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  155.056209][   T33] audit: type=1326 audit(1787670058.379:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.1.915" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd60fd9e0d9 code=0x0
[  155.193044][ T8178] usb usb8: usbfs: process 8178 (syz.1.916) did not claim interface 0 before use
[  155.213970][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  155.224155][ T1285] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  155.373839][    T9] usb 1-1: Using ep0 maxpacket: 16
[  155.374013][ T1285] usb 4-1: Using ep0 maxpacket: 8
[  155.378209][    T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  155.393753][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.396625][    T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  155.400312][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.400420][ T1285] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  155.407798][    T9] usb 1-1: config 0 descriptor??
[  155.410217][ T1285] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  155.415635][ T1285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  155.420300][ T1285] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  155.428147][ T1285] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  155.443148][ T1285] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.449811][ T1285] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  155.454221][ T1285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.688321][ T1285] usb 4-1: GET_CAPABILITIES returned 0
[  155.696897][ T1285] usbtmc 4-1:16.0: can't read capabilities
[  155.905601][ T8174] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -71
[  155.910389][ T5751] usb 4-1: USB disconnect, device number 8
[  155.964199][ T8185] loop1: detected capacity change from 0 to 32768
[  155.974938][ T8185] JBD2: Ignoring recovery information on journal
[  156.003799][ T8185] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  156.010497][    T9] lenovo 0003:17EF:60FE.0003: unknown main item tag 0x6
[  156.013184][    T9] lenovo 0003:17EF:60FE.0003: ignoring exceeding usage max
[  156.055293][ T8185] overlayfs: upper fs does not support tmpfile.
[  156.059606][ T8185] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  156.069138][ T8185] overlayfs: upper fs missing required features.
[  156.076771][    T9] lenovo 0003:17EF:60FE.0003: hidraw0: USB HID v0.05 Device [HID 17ef:60fe] on usb-dummy_hcd.0-1/input0
[  156.101944][    T9] usb 1-1: USB disconnect, device number 13
[  156.121653][ T5640] ocfs2: Unmounting device (7,1) on (node local)
[  156.484001][ T5703] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  156.667346][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  156.685089][ T5703] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  156.688809][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  156.691944][ T5703] usb 2-1: SerialNumber: syz
[  157.106787][ T5703] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  157.158768][ T5703] usb 2-1: USB disconnect, device number 11
[  157.473599][ T5712] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  157.634511][ T5712] usb 4-1: Using ep0 maxpacket: 16
[  157.644667][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.660740][ T5712] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  157.672402][ T5712] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  157.694838][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.704510][ T5712] usb 4-1: config 0 descriptor??
[  157.920836][ T5751] usb 4-1: USB disconnect, device number 9
[  159.209455][ T8271] loop3: detected capacity change from 0 to 512
[  159.267202][   T33] audit: type=1800 audit(1787670062.589:24): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.953" name="file0" dev="loop3" ino=1048611 res=0 errno=0
[  159.268862][ T8273] loop1: detected capacity change from 0 to 256
[  159.520809][   T33] audit: type=1326 audit(1787670062.849:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.537080][   T33] audit: type=1326 audit(1787670062.849:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.553548][   T33] audit: type=1326 audit(1787670062.869:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.574784][   T33] audit: type=1326 audit(1787670062.869:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.587781][   T33] audit: type=1326 audit(1787670062.879:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.599779][   T33] audit: type=1326 audit(1787670062.879:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.618741][   T33] audit: type=1326 audit(1787670062.879:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.632102][   T33] audit: type=1326 audit(1787670062.879:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8277 comm="syz.3.956" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f29e179e0d9 code=0x7ffc0000
[  159.806290][ T8288] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  160.129156][ T8317] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  160.131919][ T1285] team_slave_0: entered promiscuous mode
[  160.135182][ T1285] team_slave_1: entered promiscuous mode
[  160.361983][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.982'.
[  160.467181][ T8341] netlink: 260 bytes leftover after parsing attributes in process `syz.0.985'.
[  160.490734][ T8341] netlink: 104 bytes leftover after parsing attributes in process `syz.0.985'.
[  160.500128][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'.
[  160.624831][ T8345] loop1: detected capacity change from 0 to 32768
[  160.649304][ T8345] JBD2: Ignoring recovery information on journal
[  160.675534][ T8345] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  160.718380][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  160.718396][   T33] audit: type=1804 audit(1787670064.049:34): pid=8345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.987" name="/newroot/351/file1/file1" dev="loop1" ino=17059 res=1 errno=0
[  160.758942][ T5640] ocfs2: Unmounting device (7,1) on (node local)
[  160.912816][ T8356] loop3: detected capacity change from 0 to 1024
[  160.972639][ T6626] hfsplus: bad catalog entry type
[  161.462464][ T5532] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.609717][ T5024] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  161.624303][ T5024] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  161.630451][ T5024] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  161.634082][ T5024] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  161.637355][ T5024] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  161.653164][ T5532] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.851876][ T5532] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.972028][ T5532] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.332968][ T5532] vlan2: left allmulticast mode
[  162.342269][ T5532] dummy0: left allmulticast mode
[  162.351804][ T5532] vlan2: left promiscuous mode
[  162.354424][ T5532] dummy0: left promiscuous mode
[  162.360638][ T5532] bridge0: port 3(vlan2) entered disabled state
[  162.697176][ T5532] bond1 (unregistering): (slave geneve2): Releasing active interface
[  162.701355][ T5532] geneve2 (unregistering): left allmulticast mode
[  162.729043][ T5532] bond0 (unregistering): Released all slaves
[  162.743199][ T5532] bond1 (unregistering): Released all slaves
[  162.760579][ T5381] 8021q: adding VLAN 0 to HW filter on device eth1
[  162.964238][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.967512][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.970282][ T8381] bridge_slave_0: entered allmulticast mode
[  162.975670][ T8381] bridge_slave_0: entered promiscuous mode
[  162.982057][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.985109][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.987893][ T8381] bridge_slave_1: entered allmulticast mode
[  162.991377][ T8381] bridge_slave_1: entered promiscuous mode
[  163.014297][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.018694][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.038466][ T8381] team0: Port device team_slave_0 added
[  163.044527][ T8381] team0: Port device team_slave_1 added
[  163.205578][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.209287][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  163.223036][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.243852][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.251567][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  163.269802][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.277617][ T5381] 8021q: adding VLAN 0 to HW filter on device eth2
[  163.423400][ T8381] hsr_slave_0: entered promiscuous mode
[  163.429516][ T8381] hsr_slave_1: entered promiscuous mode
[  163.436287][ T8381] debugfs: 'hsr0' already exists in 'hsr'
[  163.438311][ T8381] Cannot create hsr debugfs directory
[  163.673871][ T5642] Bluetooth: hci2: command tx timeout
[  163.807123][ T5532] hsr_slave_0: left promiscuous mode
[  163.816415][ T5532] hsr_slave_1: left promiscuous mode
[  163.866894][ T5532] veth1_macvtap: left promiscuous mode
[  163.871037][ T5532] veth0_macvtap: left promiscuous mode
[  163.880922][ T5532] veth1_vlan: left promiscuous mode
[  163.887403][ T5532] veth0_vlan: left promiscuous mode
[  164.371824][ T5381] 8021q: adding VLAN 0 to HW filter on device eth3
[  164.740943][   T33] audit: type=1326 audit(1787670068.069:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8491 comm="syz.0.1037" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14ac19e0d9 code=0x0
[  164.879074][ T8381] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  164.895099][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  164.897681][ T8497] loop1: detected capacity change from 0 to 4096
[  164.904790][ T8381] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  164.923349][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  164.933015][ T8381] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.943041][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  164.948273][ T8381] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.952478][ T8497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.953738][ T8381] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  164.960882][ T5381] 8021q: adding VLAN 0 to HW filter on device eth4
[  165.128666][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.143910][ T8381] 8021q: adding VLAN 0 to HW filter on device team0
[  165.161223][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.163869][ T7080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  165.179712][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.206011][ T7080] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.208786][ T7080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  165.406592][ T8523] block2mtd: error: cannot open device #! 
[  165.406592][ T8523] ^$.TxzZTjrؐZI
[  165.754020][ T5642] Bluetooth: hci2: command tx timeout
[  165.775682][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.799062][ T8553] netlink: 'syz.0.1047': attribute type 2 has an invalid length.
[  165.884023][ T8553] : entered promiscuous mode
[  166.161145][ T8381] veth0_vlan: entered promiscuous mode
[  166.198253][ T8381] veth1_vlan: entered promiscuous mode
[  166.238807][ T8381] veth0_macvtap: entered promiscuous mode
[  166.244086][ T8381] veth1_macvtap: entered promiscuous mode
[  166.254313][ T7143] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  166.279028][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.289983][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.302589][ T5532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.308165][ T5532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.318169][ T5532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.352224][ T5532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.414085][ T7143] usb 1-1: Using ep0 maxpacket: 16
[  166.420368][ T7143] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  166.426499][ T7143] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  166.438695][ T7143] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  166.451489][ T7143] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  166.476306][ T7143] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  166.494508][ T7143] usb 1-1: config 0 has no interface number 0
[  166.503791][ T7143] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  166.517563][ T7143] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  166.525714][ T7143] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  166.531472][ T7089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.537014][ T7143] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  166.537065][ T7089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.559454][ T7143] usb 1-1: config 0 interface 125 has no altsetting 0
[  166.567874][ T7143] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  166.571206][ T7143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.575678][ T7143] usb 1-1: Product: syz
[  166.581068][ T7143] usb 1-1: Manufacturer: syz
[  166.584468][ T7143] usb 1-1: SerialNumber: syz
[  166.587650][ T7080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.594952][ T7080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.599163][ T7143] usb 1-1: config 0 descriptor??
[  166.865514][ T8604] netlink: 'syz.4.1059': attribute type 3 has an invalid length.
[  167.029533][ T7143] usb 1-1: USB disconnect, device number 14
[  167.187056][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1063'.
[  167.208101][ T8616] bond0: (slave bond_slave_1): Releasing backup interface
[  167.721643][ T8629] netlink: 'syz.0.1068': attribute type 10 has an invalid length.
[  167.724810][ T8629] geneve1: entered promiscuous mode
[  167.833766][ T5642] Bluetooth: hci2: command tx timeout
[  168.533869][ T8583] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  168.693719][ T8583] usb 5-1: Using ep0 maxpacket: 32
[  168.701841][ T8583] usb 5-1: unable to get BOS descriptor or descriptor too short
[  168.706924][ T8583] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  168.715024][ T8583] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  168.718688][ T8583] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.721789][ T8583] usb 5-1: Product: syz
[  168.725083][ T8583] usb 5-1: Manufacturer: syz
[  168.727039][ T8583] usb 5-1: SerialNumber: syz
[  168.954685][ T8583] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  168.957901][ T8583] usb 5-1: MIDIStreaming interface descriptor not found
[  169.033315][ T8583] usb 5-1: USB disconnect, device number 2
[  169.385806][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'.
[  169.388888][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1072'.
[  169.913907][ T5642] Bluetooth: hci2: command tx timeout
[  169.916666][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1086'.
[  170.251467][ T8674] loop1: detected capacity change from 0 to 4096
[  170.292298][ T8674] ntfs3(loop1): ino=b, mi_enum_attr
[  170.296017][ T8674] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  170.307406][ T8674] ntfs3(loop1): Failed to load $Extend (-22).
[  170.310076][ T8674] ntfs3(loop1): Failed to initialize $Extend.
[  170.421994][ T8583] IPVS: starting estimator thread 0...
[  170.547760][ T8678] IPVS: using max 81 ests per chain, 194400 per kthread
[  170.646473][ T8688] loop1: detected capacity change from 0 to 128
[  170.650171][ T8689] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1094'.
[  170.658135][ T8688] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  170.663335][ T8689] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1094'.
[  170.675242][ T8688] hpfs: filesystem error: improperly stopped
[  170.685364][ T8688] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  170.693369][ T8688] hpfs: You really don't want any checks? You are crazy...
[  170.699842][ T8688] hpfs: hpfs_map_sector(): read error
[  170.706321][ T8688] hpfs: code page support is disabled
[  170.710837][ T8688] hpfs: hpfs_map_4sectors(): unaligned read
[  170.721980][ T8688] hpfs: hpfs_map_4sectors(): unaligned read
[  170.728150][ T8688] hpfs: filesystem error: unable to find root dir
[  170.759816][ T8691] netlink: 'syz.0.1095': attribute type 11 has an invalid length.
[  170.837282][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'.
[  171.622729][ T8712] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  171.629000][ T8712] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  171.643923][ T8712] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  171.658189][ T8712] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  171.669732][ T8712] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  172.121313][ T8732] JFS: discard option not supported on device
[  172.126115][ T8732] Mount JFS Failure: -22
[  172.128542][ T8733] loop1: detected capacity change from 0 to 512
[  172.132407][ T8732] jfs_mount failed w/return code = -22
[  172.156937][ T8733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.162387][ T8733] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.230717][ T5640] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.354528][ T8749] kAFS: bad VL server IP address
[  172.555101][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  172.713905][    T9] usb 2-1: Using ep0 maxpacket: 16
[  172.720356][    T9] usb 2-1: config index 0 descriptor too short (expected 51443, got 18)
[  172.731348][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  172.734901][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.737637][    T9] usb 2-1: Product: syz
[  172.739067][    T9] usb 2-1: Manufacturer: syz
[  172.741018][    T9] usb 2-1: SerialNumber: syz
[  172.750251][    T9] r8152-cfgselector 2-1: Unknown version 0x0000
[  172.753956][    T9] r8152-cfgselector 2-1: config 0 descriptor??
[  172.828897][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1132'.
[  172.905173][ T8787] netlink: Invalid conntrack timeout
[  172.907461][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.946506][ T8789] overlayfs: failed to get inode (-116)
[  172.949899][ T8789] overlayfs: failed to get inode (-116)
[  173.134388][ T8798] syz_tun: entered allmulticast mode
[  173.162907][ T7143] r8152-cfgselector 2-1: USB disconnect, device number 12
[  173.878882][ T8811] netlink: 'syz.1.1146': attribute type 13 has an invalid length.
[  174.033054][ T8813] Bluetooth: hci0: unsupported parameter 255
[  174.035707][ T8813] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  174.415215][ T8823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1153'.
[  174.425101][ T8823] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  174.433618][ T1285] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  174.466886][ T8827] cgroup: fork rejected by pids controller in /syz0
[  174.586899][ T1285] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  174.592154][ T1285] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x14, changing to 0x4
[  174.604526][ T1285] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  174.608628][ T1285] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  174.629287][ T1285] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a2, bcdDevice= 0.40
[  174.637159][ T1285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.641200][ T1285] usb 5-1: Product: syz
[  174.643247][ T1285] usb 5-1: Manufacturer: syz
[  174.650274][ T1285] usb 5-1: SerialNumber: syz
[  174.676081][ T1285] cdc_subset 5-1:1.0: probe with driver cdc_subset failed with error -22
[  174.685487][ T8837] batadv_slave_0: Caught tx_queue_len zero misconfig
[  174.693713][ T1285] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[  174.697254][ T1285] cdc_ncm 5-1:1.0: bind() failure
[  174.721063][ T1285] cdc_subset 5-1:1.1: probe with driver cdc_subset failed with error -22
[  174.725157][ T1285] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  174.741316][ T1285] cdc_ncm 5-1:1.1: bind() failure
[  174.904177][ T7143] usb 5-1: USB disconnect, device number 3
[  175.166612][ T5024] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  175.171299][ T5024] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  175.178685][ T5024] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  175.193751][ T5024] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  175.198787][ T5024] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  175.385064][ T8860] Bluetooth: MGMT ver 1.23
[  175.675974][ T8866] loop4: detected capacity change from 0 to 256
[  175.745491][ T8866] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d)
[  176.727154][ T8850] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.729646][ T8850] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.732267][ T8850] bridge_slave_0: entered allmulticast mode
[  176.736782][ T8850] bridge_slave_0: entered promiscuous mode
[  176.746812][ T8850] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.749902][ T8850] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.752799][ T8850] bridge_slave_1: entered allmulticast mode
[  176.764584][ T8850] bridge_slave_1: entered promiscuous mode
[  176.855053][ T8850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.871233][ T8850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.892718][ T8850] team0: Port device team_slave_0 added
[  176.898422][ T8850] team0: Port device team_slave_1 added
[  176.913686][ T8583] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  176.918734][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.920987][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.930285][ T8850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.934888][ T8850] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.937161][ T8850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.947704][ T8850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.962826][ T8899] loop1: detected capacity change from 0 to 32768
[  176.975565][ T8850] hsr_slave_0: entered promiscuous mode
[  176.977918][ T8850] hsr_slave_1: entered promiscuous mode
[  176.980122][ T8850] debugfs: 'hsr0' already exists in 'hsr'
[  176.981957][ T8850] Cannot create hsr debugfs directory
[  177.005497][ T8899]  loop1: p1 < > p3 < p5 p6 p7 > p4[DM]
[  177.010098][ T8899] loop1: p5 size 50331648 extends beyond EOD, truncated
[  177.014432][ T8899] loop1: p7 size 1048576 extends beyond EOD, truncated
[  177.064079][ T8583] usb 5-1: Using ep0 maxpacket: 32
[  177.071153][ T8583] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  177.079854][ T8583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.096719][ T8583] usb 5-1: config 0 descriptor??
[  177.189608][ T8904] Attempt to restore checkpoint with obsolete wellknown handles
[  177.256472][ T5649] udevd[5649]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  177.275978][ T5642] Bluetooth: hci0: command tx timeout
[  177.288767][ T6617] udevd[6617]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  177.294498][ T5655] udevd[5655]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  177.298054][ T8018] udevd[8018]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  177.298298][ T5641] udevd[5641]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  177.308266][ T5653] udevd[5653]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  177.312910][ T8583] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  177.336511][ T8583] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  177.357884][ T8583] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  177.372610][ T8583] usb 5-1: media controller created
[  177.425050][ T8583] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  177.431578][ T8850] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.523302][ T8583] az6027: usb out operation failed. (-71)
[  177.543682][ T8583] az6027: usb out operation failed. (-71)
[  177.547391][ T8583] stb0899_attach: Driver disabled by Kconfig
[  177.549563][ T8583] az6027: no front-end attached
[  177.549563][ T8583] 
[  177.552808][ T8583] az6027: usb out operation failed. (-71)
[  177.560148][ T8850] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.561441][ T8583] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  177.571100][ T8583] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  177.577653][ T8583] dvb-usb: schedule remote query interval to 400 msecs.
[  177.579942][ T8583] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  177.587672][ T8583] usb 5-1: USB disconnect, device number 4
[  177.659147][ T8850] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.709727][ T8583] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  177.824877][ T8850] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.050663][ T8945] loop4: detected capacity change from 0 to 128
[  178.054947][ T8850] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  178.074885][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  178.080471][ T8850] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  178.091786][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  178.095714][ T8850] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  178.099975][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  178.103375][ T8850] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  178.108679][ T8850] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  178.157312][ T8850] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.181331][ T8850] 8021q: adding VLAN 0 to HW filter on device team0
[  178.187018][ T7108] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.189343][ T7108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.204890][ T7108] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.207806][ T7108] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.504094][ T8968] netlink: 'syz.4.1198': attribute type 1 has an invalid length.
[  178.507570][ T8968] netlink: 'syz.4.1198': attribute type 2 has an invalid length.
[  178.570831][ T8972] kAFS: Invalid Command on /proc/fs/afs/cells file
[  178.692042][ T8850] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.770204][ T8850] veth0_vlan: entered promiscuous mode
[  178.791634][ T8850] veth1_vlan: entered promiscuous mode
[  178.832976][ T8850] veth0_macvtap: entered promiscuous mode
[  178.846360][ T8850] veth1_macvtap: entered promiscuous mode
[  178.851158][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  178.869801][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'.
[  178.877155][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.898008][ T8850] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.914976][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.925069][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.930144][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.940169][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.096212][ T7122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.099302][ T7122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.144758][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1208'.
[  179.171171][ T7122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.177381][ T7122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.353920][ T5642] Bluetooth: hci0: command tx timeout
[  179.505888][ T9012] loop4: detected capacity change from 0 to 32768
[  179.518630][ T9012] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1215 (9012)
[  179.519791][ T9019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'.
[  179.560316][ T9012] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.564563][ T9012] BTRFS info (device loop4): using crc32c checksum algorithm
[  179.668225][ T9012] BTRFS info (device loop4): enabling ssd optimizations
[  179.671008][ T9012] BTRFS info (device loop4): turning on flush-on-commit
[  179.675253][ T9012] BTRFS info (device loop4): enabling free space tree
[  179.678046][ T9012] BTRFS info (device loop4): enabling auto defrag
[  179.680676][ T9012] BTRFS info (device loop4): use lzo compression, level 1
[  179.688985][ T9012] BTRFS info (device loop4): max_inline set to 4096
[  179.808781][ T9012] BTRFS info (device loop4 state M): max_inline set to 4096
[  179.828541][ T8381] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.573161][ T9066] loop1: detected capacity change from 0 to 4096
[  180.588003][ T9066] ntfs3(loop1): ino=3, mi_enum_attr
[  180.719331][ T9066] ntfs3(loop1): ino=9, attr_set_size_ex
[  181.573610][ T5642] Bluetooth: hci0: command tx timeout
[  182.276603][ T9108] kAFS: unable to lookup cell ''
[  182.283302][ T9108] kAFS: unable to lookup cell '(,c'
[  182.496616][ T9120] loop4: detected capacity change from 0 to 1024
[  182.856053][ T9142] netlink: 'syz.4.1266': attribute type 23 has an invalid length.
[  183.000771][ T5723] IPVS: starting estimator thread 0...
[  183.083865][ T9153] IPVS: using max 49 ests per chain, 117600 per kthread
[  183.163766][ T7143] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  183.243673][ T8583] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  183.312781][ T9169] syzkaller0: entered promiscuous mode
[  183.315369][ T7143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  183.315650][ T9169] syzkaller0: entered allmulticast mode
[  183.319462][ T7143] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7
[  183.329845][ T7143] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  183.334678][ T7143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.340245][ T7143] usb 2-1: Product: syz
[  183.341825][ T7143] usb 2-1: Manufacturer: syz
[  183.343743][ T7143] usb 2-1: SerialNumber: syz
[  183.396158][ T8583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.400714][ T8583] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  183.406151][ T8583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.414596][ T8583] usb 5-1: config 0 descriptor??
[  183.571197][ T7143] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  183.595419][ T5642] Bluetooth: hci0: command tx timeout
[  183.613246][ T7143] usb 2-1: USB disconnect, device number 13
[  183.648701][ T8583] usbhid 5-1:0.0: can't add hid device: -71
[  183.653599][ T8583] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  183.703000][ T8583] usb 5-1: USB disconnect, device number 5
[  184.183678][ T1285] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  184.253692][ T8583] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  184.336214][ T1285] usb 1-1: unable to get BOS descriptor or descriptor too short
[  184.340885][ T1285] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 32
[  184.347677][ T1285] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice= 0.40
[  184.351549][ T1285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.355563][ T1285] usb 1-1: Product: syz
[  184.357315][ T1285] usb 1-1: Manufacturer: syz
[  184.359220][ T1285] usb 1-1: SerialNumber: syz
[  184.370416][ T9186] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  184.383653][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  184.406434][ T8583] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.410091][ T8583] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[  184.412929][ T8583] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.419521][ T8583] usb 5-1: config 0 descriptor??
[  184.546900][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  184.551128][    T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  184.565564][    T9] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00
[  184.571266][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.574692][    T9] usb 2-1: Product: syz
[  184.576468][    T9] usb 2-1: Manufacturer: syz
[  184.578433][    T9] usb 2-1: SerialNumber: syz
[  184.596003][    T9] usbtmc 2-1:1.0: bulk endpoints not found
[  184.597263][ T1285] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  184.603375][    T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10
[  184.682867][ T1285] usb 1-1: USB disconnect, device number 15
[  184.769771][ T5648] udevd[5648]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  184.795842][ T7143] usb 2-1: USB disconnect, device number 14
[  185.036212][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.043068][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.234264][ T8583] aiptek 5-1:0.0: Aiptek using 400 ms programming speed
[  185.241017][ T8583] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9
[  185.540453][ T9198] loop1: detected capacity change from 0 to 4096
[  185.548550][ T9198] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  185.608807][ T8583] usb 5-1: USB disconnect, device number 6
[  185.608878][    C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[  185.649118][ T9198] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  185.930839][ T9204] dummy0: entered allmulticast mode
[  185.937193][ T9204] dummy0: left allmulticast mode
[  186.119357][ T7143] IPVS: starting estimator thread 0...
[  186.162122][ T9211] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1298'.
[  186.171403][ T9215] IPv6: NLM_F_CREATE should be specified when creating new route
[  186.203703][ T9210] IPVS: using max 82 ests per chain, 196800 per kthread
[  186.259637][ T9223] program syz.0.1302 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.385063][ T9234] loop1: detected capacity change from 0 to 1024
[  186.496955][ T9244] loop1: detected capacity change from 0 to 128
[  186.508425][ T9244] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  186.515184][ T9244] hpfs: filesystem error: improperly stopped
[  186.517170][ T9244] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  186.519519][ T9244] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories
[  186.522695][ T9244] hpfs: You really don't want any checks? You are crazy...
[  186.526104][ T9244] hpfs: hpfs_map_sector(): read error
[  186.528132][ T9244] hpfs: code page support is disabled
[  186.529948][ T9244] hpfs: hpfs_map_4sectors(): unaligned read
[  186.531814][ T9244] hpfs: hpfs_map_4sectors(): unaligned read
[  186.535682][ T9244] hpfs: filesystem error: unable to find root dir
[  187.047002][ T9280] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  187.353996][ T7143] usb 1-1: new full-speed USB device number 16 using dummy_hcd
[  187.518231][ T7143] usb 1-1: config 0 has an invalid interface number: 37 but max is 1
[  187.521810][ T7143] usb 1-1: config 0 has an invalid interface number: 255 but max is 1
[  187.526801][ T7143] usb 1-1: config 0 has no interface number 0
[  187.529632][ T7143] usb 1-1: config 0 has no interface number 1
[  187.532130][ T7143] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  187.544939][ T7143] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  187.550499][ T7143] usb 1-1: config 0 interface 255 has no altsetting 0
[  187.559832][ T7143] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[  187.563983][ T7143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.567449][ T7143] usb 1-1: Product: syz
[  187.570656][ T7143] usb 1-1: Manufacturer: syz
[  187.575574][ T7143] usb 1-1: SerialNumber: syz
[  187.585952][ T7143] usb 1-1: config 0 descriptor??
[  187.802249][ T7143] usb 1-1: USB disconnect, device number 16
[  188.567597][ T9331] loop1: detected capacity change from 0 to 8
[  188.595501][ T9333] loop4: detected capacity change from 0 to 256
[  188.614715][ T9333] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  188.629426][ T9333] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10)
[  188.642199][   T33] audit: type=1800 audit(1787670091.969:36): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1349" name="file1" dev="loop4" ino=1048627 res=0 errno=0
[  189.159382][ T9341] loop1: detected capacity change from 0 to 131072
[  189.194828][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  189.217421][ T9341] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  189.220296][ T9341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  189.226785][ T9341] F2FS-fs (loop1): invalid crc value
[  189.272508][ T9341] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.292474][ T9341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  189.295561][ T9341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  189.334244][ T9362] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1362'.
[  189.337726][ T9329] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  189.711298][ T9375] netlink: 'syz.0.1369': attribute type 7 has an invalid length.
[  189.732251][ T9375] netlink: 'syz.0.1369': attribute type 7 has an invalid length.
[  190.294462][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1363'.
[  190.414758][ T9393] loop4: detected capacity change from 0 to 512
[  190.422980][ T9393] EXT4-fs: Ignoring removed i_version option
[  190.454734][ T9393] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  190.530807][ T9393] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  190.537976][ T9393] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  190.543093][ T9393] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.1376: Failed to acquire dquot type 1
[  190.546964][ T9393] loop4: lost filesystem error report for type 5 error -5
[  190.552232][ T9393] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, 
[  190.555516][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  190.555536][    C0] EXT4-fs (loop4): initial error at time 1787670093: ext4_acquire_dquot:7041
[  190.555602][    C0] EXT4-fs (loop4): last error at time 1787670093: ext4_acquire_dquot:7041
[  190.573242][ T9393] block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  190.573628][ T5642] Bluetooth: hci0: command 0x0c1a tx timeout
[  190.578508][ T9393] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.1376: corrupted inode contents
[  190.584790][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.589838][ T9393] EXT4-fs error (device loop4): ext4_dirty_inode:6639: inode #12: comm syz.4.1376: mark_inode_dirty error
[  190.598055][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.598758][ T9393] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.1376: corrupted inode contents
[  190.606679][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.607133][ T9393] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.1376: mark_inode_dirty error
[  190.619119][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.619965][ T9393] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.1376: corrupted inode contents
[  190.632915][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.639842][ T9393] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  190.646667][ T9393] loop4: lost filesystem error report for type 5 error -117
[  190.650672][ T9393] EXT4-fs error (device loop4): ext4_do_update_inode:5742: inode #12: comm syz.4.1376: corrupted inode contents
[  190.662361][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.663160][ T9393] EXT4-fs error (device loop4): ext4_truncate:4691: inode #12: comm syz.4.1376: mark_inode_dirty error
[  190.674163][ T9393] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117
[  190.675318][ T9393] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  190.682026][ T9393] loop4: lost filesystem error report for type 5 error -117
[  190.683220][ T9393] EXT4-fs (loop4): 1 truncate cleaned up
[  190.690912][ T9393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.785624][ T8381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.383077][ T9404] loop4: detected capacity change from 0 to 4096
[  191.453179][ T9409] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  191.643311][ T9419] IPVS: sed: FWM 3 0x00000003 - no destination available
[  191.647935][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[  191.910997][ T9441] loop1: detected capacity change from 0 to 128
[  191.913738][ T5642] Bluetooth: hci1: command 0x0406 tx timeout
[  191.948411][ T9441] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  191.956738][ T9441] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  192.063628][ T5102] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  192.223592][ T5102] usb 5-1: Using ep0 maxpacket: 16
[  192.228896][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.235098][ T5102] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.239755][ T5102] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  192.248330][ T5102] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  192.253042][ T5102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.277246][ T5102] usb 5-1: config 0 descriptor??
[  192.643908][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  192.793892][    T9] usb 1-1: Using ep0 maxpacket: 8
[  192.813967][    T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  192.817367][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.820142][    T9] usb 1-1: Product: syz
[  192.821662][    T9] usb 1-1: Manufacturer: syz
[  192.823720][    T9] usb 1-1: SerialNumber: syz
[  192.852011][    T9] usb 1-1: config 0 descriptor??
[  192.859956][    T9] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  192.882964][ T5102] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input12
[  192.970391][ T5102] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  192.984784][ T5102] usb 5-1: USB disconnect, device number 7
[  193.077772][    T9] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  193.081324][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  193.086766][    T9] usb 1-1: USB disconnect, device number 17
[  193.290470][ T9479] loop1: detected capacity change from 0 to 128
[  194.393906][ T5642] Bluetooth: hci1: command 0x0406 tx timeout
[  194.448018][ T9528] loop1: detected capacity change from 0 to 256
[  194.546456][ T5024] Bluetooth: hci0: Unknown advertising packet type: 0x11
[  194.546502][ T5024] Bluetooth: hci0: Unknown advertising packet type: 0x17
[  194.590341][ T9538] kAFS: unparsable volume name
[  194.710680][ T9548] loop4: detected capacity change from 0 to 512
[  194.742272][ T9548] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  194.753935][ T9548] EXT4-fs (loop4): orphan cleanup on readonly fs
[  194.761393][ T9548] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6).
[  194.789642][ T9548] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  194.802433][ T9548] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  194.813877][ T9548] EXT4-fs (loop4): 1 truncate cleaned up
[  194.816534][ T9548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  194.834809][ T8381] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.960538][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  194.962684][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  195.068330][ T9570] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1458'.
[  195.154443][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  195.319133][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.335971][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.361252][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  195.371667][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.379245][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.638322][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.692996][ T9560] syz_tun (unregistering): left allmulticast mode
[  195.715720][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.778236][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.814467][    T9] usb 5-1: can't set config #16, error -71
[  195.867144][    T9] usb 5-1: USB disconnect, device number 8
[  195.929876][   T12] bridge_slave_1: left allmulticast mode
[  195.932197][   T12] bridge_slave_1: left promiscuous mode
[  195.935692][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.941812][   T12] bridge_slave_0: left allmulticast mode
[  195.944763][   T12] bridge_slave_0: left promiscuous mode
[  195.951179][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.079134][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  196.084650][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  196.091627][   T12] bond0 (unregistering): Released all slaves
[  196.111130][ T5381] 8021q: adding VLAN 0 to HW filter on device eth5
[  196.128465][ T5381] 8021q: adding VLAN 0 to HW filter on device eth6
[  196.160535][ T5381] 8021q: adding VLAN 0 to HW filter on device eth7
[  196.182742][ T5381] 8021q: adding VLAN 0 to HW filter on device eth8
[  196.350989][   T12] hsr_slave_0: left promiscuous mode
[  196.353940][   T12] hsr_slave_1: left promiscuous mode
[  196.356194][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.358685][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.361726][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.365982][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.378166][   T12] veth1_macvtap: left promiscuous mode
[  196.380251][   T12] veth0_macvtap: left promiscuous mode
[  196.382215][   T12] veth1_vlan: left promiscuous mode
[  196.387157][   T12] veth0_vlan: left promiscuous mode
[  196.606519][   T12] team0 (unregistering): Port device team_slave_1 removed
[  196.632608][   T12] team0 (unregistering): Port device team_slave_0 removed
[  197.032422][   T12] IPVS: stop unused estimator thread 0...
[  197.160853][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.238174][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.330174][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.390026][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.504666][ T5381] 8021q: adding VLAN 0 to HW filter on device eth9
[  197.509227][   T12] bridge_slave_1: left allmulticast mode
[  197.512124][   T12] bridge_slave_1: left promiscuous mode
[  197.516081][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.521201][   T12] bridge_slave_0: left allmulticast mode
[  197.523206][   T12] bridge_slave_0: left promiscuous mode
[  197.526098][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.638578][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.642890][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.652473][   T12] bond0 (unregistering): Released all slaves
[  197.675028][ T5381] 8021q: adding VLAN 0 to HW filter on device eth10
[  197.689908][ T5381] 8021q: adding VLAN 0 to HW filter on device eth11
[  197.719005][ T5381] 8021q: adding VLAN 0 to HW filter on device eth12
[  197.921374][   T12] hsr_slave_0: left promiscuous mode
[  197.924350][   T12] hsr_slave_1: left promiscuous mode
[  197.926983][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.929430][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.932424][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.935030][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.939908][   T12] veth1_macvtap: left promiscuous mode
[  197.941648][   T12] veth0_macvtap: left promiscuous mode
[  197.946923][   T12] veth1_vlan: left promiscuous mode
[  197.948715][   T12] veth0_vlan: left promiscuous mode
[  198.127302][   T12] team0 (unregistering): Port device team_slave_1 removed
[  198.138550][   T12] team0 (unregistering): Port device team_slave_0 removed
[  198.454935][   T12] IPVS: stop unused estimator thread 0...
[  200.146911][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.271847][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.340067][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.412337][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.537323][ T5381] 8021q: adding VLAN 0 to HW filter on device eth13
[  200.561675][   T13] bridge_slave_1: left allmulticast mode
[  200.564688][   T13] bridge_slave_1: left promiscuous mode
[  200.567063][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.572665][   T13] bridge_slave_0: left allmulticast mode
[  200.575718][   T13] bridge_slave_0: left promiscuous mode
[  200.578151][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.772170][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.779633][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.783275][   T13] bond0 (unregistering): Released all slaves
[  200.808094][ T5381] 8021q: adding VLAN 0 to HW filter on device eth14
[  200.834348][ T5381] 8021q: adding VLAN 0 to HW filter on device eth15
[  200.942943][ T5381] 8021q: adding VLAN 0 to HW filter on device eth16
[  201.058747][   T13] hsr_slave_0: left promiscuous mode
[  201.061564][   T13] hsr_slave_1: left promiscuous mode
[  201.065088][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.067974][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.071501][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.074600][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.084873][   T13] veth0_macvtap: left promiscuous mode
[  201.087399][   T13] veth1_vlan: left promiscuous mode
[  201.089620][   T13] veth0_vlan: left promiscuous mode
[  201.309328][   T13] team0 (unregistering): Port device team_slave_1 removed
[  201.318696][   T13] team0 (unregistering): Port device team_slave_0 removed
