last executing test programs:

2m2.463759047s ago: executing program 2 (id=1411):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))

2m2.332529495s ago: executing program 2 (id=1412):
r0 = socket(0x25, 0x1, 0x0)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)

2m2.244132489s ago: executing program 2 (id=1413):
r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)={{}, {}, [], {}, [{0x8, 0x3}]}, 0x2c, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x4000, r0}, 0x18)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1)
r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
close(r2)

2m2.117357731s ago: executing program 2 (id=1414):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m1.936981407s ago: executing program 2 (id=1415):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[&(0x7f0000000380)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x03\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\xdch\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc', &(0x7f0000000000)='.-+\x00']}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']})

2m1.744301594s ago: executing program 2 (id=1416):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x200000000000000, 0x0, 0x1)

2m1.603849208s ago: executing program 32 (id=1416):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x200000000000000, 0x0, 0x1)

36.225731725s ago: executing program 3 (id=2264):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x12777000)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000356000/0x3000)=nil, 0x3000, &(0x7f0000000300)='{)}\xf0-[\x00')

35.864347691s ago: executing program 3 (id=2268):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2}}]}}]}, 0x44}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

35.792110972s ago: executing program 3 (id=2270):
r0 = semget(0x1, 0x4, 0x3c4)
semop(r0, &(0x7f0000000080)=[{0x1, 0x7, 0x800}, {0x1, 0x0, 0x1000}], 0x2)
semop(r0, &(0x7f0000000040)=[{0x2, 0xbbdd, 0x1000}], 0x1)
semctl$GETZCNT(r0, 0x1, 0xf, 0x0)

34.750155452s ago: executing program 3 (id=2288):
syz_mount_image$exfat(&(0x7f00000003c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000003680)="$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")
chdir(&(0x7f0000000200)='./file0\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
creat(&(0x7f00000001c0)='./file0\x00', 0x8)

34.542952099s ago: executing program 3 (id=2291):
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0xf2, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r0, r0}, &(0x7f0000000000)=""/50, 0x32, &(0x7f0000000100)={&(0x7f0000000080)={'sha384\x00'}})

34.172986777s ago: executing program 3 (id=2294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

34.045531891s ago: executing program 33 (id=2294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

6.196156843s ago: executing program 0 (id=2553):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x80}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0)

6.070862769s ago: executing program 0 (id=2557):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000400009002bbd7000fddbdf250200000004001f000800018004001f9010000480"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

6.070567008s ago: executing program 0 (id=2558):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0)
syz_usb_connect$hid(0x7, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0xff, 0x172f, 0x32, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7c, 0xc0, 0xd, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x3, 0xd, {0x9, 0x21, 0x1, 0x41, 0x1, {0x22, 0x3e0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x9, 0x12}}}}}]}}]}}, 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

3.040729378s ago: executing program 0 (id=2584):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0)

2.659282465s ago: executing program 0 (id=2587):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000840)={[{@delalloc}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@noblock_validity}, {@nogrpid}, {@mblk_io_submit}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x65cf}}], [], 0x3d}, 0x65, 0x51c, &(0x7f0000000200)="$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")

2.550633288s ago: executing program 0 (id=2590):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x27, 0x23, 0x21, 0x20, 0x4bb, 0x930, 0xe5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xff, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xaf, 0x0, 0x2, 0x11, 0x0, 0x90, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x200}}, {{0x9, 0x5, 0x82, 0x2, 0x18}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000280)={0x20, 0x6, 0x85, "af95161f0db2c838c14e021a6ac52abe2981a03a262f286d53e149c64147493c873a283ba67811034c6520441cc8886f8e2519a93c1fef7c80b03092922ef3ab3b1bb731b740450800dddc2fae99f72d75f13aa1edf9f0208e35266c101b847add29c225963ddc8a66811e913c64950e8545930d3adda1041e20b1a3a87c036e9e5cc53360"}, 0x0, 0x0})

1.58032164s ago: executing program 1 (id=2602):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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")
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)

1.22978385s ago: executing program 4 (id=2603):
r0 = creat(&(0x7f0000000100)='./file1\x00', 0x102)
close(r0)
r1 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x1)
mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000001200), 0xa, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.170706154s ago: executing program 4 (id=2604):
r0 = socket$inet(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0xff, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x100, @void}}}}}}}, 0x0)

1.120255696s ago: executing program 4 (id=2605):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x42000)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x6)

1.060317096s ago: executing program 4 (id=2606):
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x1, 0xdc, 0x2, 0x6, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x0, 0x79, 0xfffffffc, 0x9, 0x1, 0x1000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006200)="0e24ac7705237246fc1db898fda0c7f95d375ea7f4bc7a07517a51095880f2219d9e4329f6c4e734f2bb34564a1c2e298d7eb8844d8af7b30e1a71750a2511e44b368fc6e9ae65e40e64e4b5fd3d0f87009b5727519df1ddbcbb38ef00871f00ed2543b7f2990a44482bf3d7478c3c2799dd8120fc3258cfeccf648fe15128c54d1d4272bfd44950915afd3aa0abb5b04d4dbec287df0816c3e43c2503cac6e95041aa205c5958f51a9c4c8214ae2108401b08ae7ff8440988c93424422f06c628077d767432521fefa0f8d0f387e685e4af54bdd7f931c3eace52ca7a6ba2d0fd701e5d77393e6268f52e68d97087f87edd2ae49180028bf08ab7e02c3ef12aec2f286d1bf40fd3a5f337b0f0b63d701c60bae36a5e1644bc90f34165049ac5c4fc8a0ada90e345df1420a58c92cfcc6973d3fa532b8b4088592e0f2c36f7e756139b272fc99104a93c5cf2599c683b60910af98a55b17bf646ddddb13e73d0bfdcfb3e3d261d84f83270832708f6e5b3fd2bb98e135b914e21681b409d717afa8f65dc9d3ab6a78b9b026b6aa1f1ee5872426b4bd4fd652072f86dfb96ef79649396a0f19239b0ce6ba9a8ff49f8f4820579a3169fe54b6f060a69236d57a1a13f033054fb22dbfb3f72861acc7ed51ebed60a8a03c3e16030e7a114d0690c268713d8206b34a005fb89d5123103d36ab57594fc731e8a6353ab3be3af22faa6f85b54ba78b90aba30e17dad90c31a20cc5f39c8ff50097bb310535efd6ecbc49dfc2d547bee78d5c5ebfe0d4bd3c093413e12cfefbfdb5f38c437ce831b209f3337979f6e0c46d8bf67d2285d2a7d0e75f1765f0c080f1dfd9bae98afdfda7e7837d1081d83effab72e6eff493cc9031a299383f726227d75474e4c8378b2376fc7fe5a88980a6794edc4c2fc110d917b863d25e7382b19b1b90cc90428f6aa0b1df015bcbbe83de36ff56c065ba92f1f49e61ac6bc6b3c20e42e7763dd52f66095f07e235f0062accb0eab60ce54d84391cbf2613096ded353543b5d6a884cc981b759e4499ab72881f88542208c9fd81b541514d6d2ed54683926b0d6bfe904b76215aea6db4cff8242d3ee5524acb456ec219e42d46c1b1e3fa9748404db4583537b195ad326853ed9472790656ab01bd031b19fb64b0e5227d18ea09ea7557c9afdc918c918a1fafdd18f9f54682bf0f49ba2ae14f963340dc6600e1b344ce50ed61af0726e3441583f8cf045df193dfbce93285d7fddfc0d831fefc85cd3e7920757f27a4e09b5cfa77b93a5e82f571d1293d9437cf89997011eee6ba9f9b7e6ce2fe1c381cb2db053a6e2d9351edbddcc10faf80f5b686727dd8982b12604fde3467f4a7e98b13250df7e1eef67da8f7fe3fffd3a185457aaaecb38f5ca31ea3e35cc7c6adc3873c734cb661e3c43e64bf0843b2cf1d950642eeb20d698cc9e598eb7ec71d3a0d83f311afa2d40a659a219defad76fdb7e8146756ff02a8a74abf8a8ccd72ffd7f70911698d54552aada8ef27b3f5b2644d4d0fda2976d838686a7469b296a98b67b7cc9834dc94f2292581dd242d1abb42db30d4de42c4611c0fbdc77134a6cb0c0d7b36d18a217aaabd34744ed5cac171e2a8bfe90b2dad03d0ca5f74d3eb95c454757be4c77f386c63fee91e95a508d8fcea5cd6bef9bd05e0b992da4e4cbc2f52c9cfde09b6f17f3d73fffc01d7ac55f328061516cf0e4fa50fff5b03dca67b163a68d9ddbb988f50a68fdbfc6e6feb6c892b58eb766d3429396669228dd1653bcbb5cb47c0857d27660e62d23e90178ef2b75713c2c58a207d8c21e9ce64556bfd71b40207ee76416f9f40c5601173b1d84105ac331247c021941a6a27e86de4f9a4db382f67dd6dc8e86a02a8438ddda1a636256fcac8e2328aaa3c054ab86f55c9d7bb2c2999a5c7933f092a3bf66523cb388052c65d138346ad1c5137fa383d7b9023b1868af02cf48923289162544db8fb29cf592c306a76ec92b35f33fae90f5aeac830b82dcc3f0069f668aebe6e5fe13c811f150de080632e357221d2f220ef95ce436730d1f9390d9f192220347d04ac5a94631e349ad330276b9524f775f7a8f68be7823ad7ed3ac4b4d87a12c0261846ec1dfe785b60675968e79496d7ae4e5d478661bd7125f2cc0de35422764556b63d687b339e2b25ad43ca85bc861944d19f9689dffe71d87030d23e0428942441d622de361778cbe8952f7b93c74783552b0087bff535afaf92935aa889018e46d34b2a258f863d89e4b6da841389fa63d489d135e559b7d11b8d97215323548501c275248eb07916ae3f0814c6af32f5ece7eb0330bdaac4394c518f3c8e48cafc36057cfa7788fb2f9ffffffffd40546cf21b681e6c9ef6f0ac43c512762323209b2c878ed5a9f55e207b56a33c863eaa34a6eb14ad8de9885d52a7c073a406ea4324f8433ddfd89b269d6716072627054197928370ae01a94e3dd4d07125560a5cb1d1bfbbd8c099194de5f787a550a3400ce796e115702255d1f17d96a7fb63384ff497cf72beeb50bd24008ffc58256aec6b2faff2c20336e29bc1acd853214496893af25e8efb571c96edf64fbcd136c95e1213e73bc3f1a896fca2bde0894449ee2927c38114de5f1063d0c203c3fab1389861c4cda173a991eb275ccffe04f75d67df181c26777b18e5552b42fb4332046554109a9a6007592a62d2553dbd098f1daae593322e45f66a64bdb09869feede70d1fcc88fd4c19f4008d1b1d5f34a6025a71d9bf6ff20daccda25cbcc662cfc687ffe5ebc344468f338f4c9bbdc7ed9820feb5e3b09ace47f4253a81da7029816656613aef7456524fc68f4345bc0e7f26240d4594374d2fcb39560e2828e0e219b2417f5787add73418b465b1308d5ac5169791f55802d11354eb62940a492d955e8bd11b952a28acea90cb43af774e6fc75e57383e68937aa3643aa37f7e7665c703576579dcccf63d2bdadfbf14be796d4023689880453b0ff576fb01bb141be3c17478f0d555c106ff7c3f3e4f53be1f088827203fab2008ec6687e4f5df305f58fe647b93ad09a70165c989498d313ca5ba05f3ce90adc80d55b56d0ec4cd5a78268cc6def7e8bb810bc29f8e742487048363815fa3fe645194ee8529ffba2b8d6756915530f142b42f31eae1703faeae14f3d81ae5c2297c3476b0f89b32f53802453fc74c80bf217097577a910a51860bbead4f73a29423816eadca7b1e2d24a9895949b352fe59f13abfa7b69c0f0061eaae2ada6d72b2f90c9c553ad8be9ee4e4ad2876851a3f3e979c4d770d7df9a27e72ab215ec3efd252d622e7ec6160ac951d1ee9b8c0adc0fc853f2a4f36602c955b61646246e07bd7b745f5d3e99f95f55a1616ed36633db6efa97a96dacf12219cf1555222cc6a589a6def5680124f7ac2f1ec83832a30fd011ff02dbf4ab01afb5989fcc678383f179b5d647cf0a762acf0714e9e4151afa39626884e6f56859d3aafc9fc7f7bbcfb27e038e238783cf56c86f0be52568c4bed0917d651f4d26f76ba6c343e075146504590da391e1c4d028dc81767294df5de9370d62756584baa3bfa31578b6f754e77b0d6ea7357d8915ff0bda182b604b014ecf7dc94ab97061765bfab2053fa863fb671fad3b6312d6e59ba0e70b0ea2476399e925f8fa2e51c9bbfac19aeb11dbf9d6ea8d916c4d4eae7de17259e6155591be9b704d3e24cda131eded5e9dd6758dc90a5c7a43332957d26ac91bc65120b1c6b7b94fdf83b397bd8990747f01d3ed912abeab74bb5ae3ff2ee0009cfe8cdb6b4e75a7de3566c8ff7bdddb06b7775cf3116b029e7c85fb7189147e753d614caa490594ff2e22b7144153c635ac7b20a49c2d8575af2f546b968bea9fc4ee5ff417a6fa86ca09c8fed14ea4b721b2d5870d4b670761c70516daa07809ac3817246844f01eadda045c57d1c864cbaabedf90cb42d374392e77b3d1a1afdf962feb55a4e04a77c8fb452429007e0046a406a5f2325f0c7f75a19deed1b456ac5de6486eebbc126ff97c5ee8531a975676b61a0d79f56ff75cbcd20337119422815537a57766648777f1b5f75d358dc63764083406e2d95afd87d00099581940367ed029065df0d9008301fb92e019feac9bb406032167eb053ab07309385771aacc2c52a5d526d14721fd530e63cb7c53f27518c679ccd0f3d2db8aa52ef95c6ac3f5dac0b9b5c3a96a794690f3d49aa0e5a4a95b36609cf61d471cc2c0cd55e8cd96be47558b055280313b15907eba5761180f5229a59341faa1e11eb5b6a48ec9320efb1d9f00936d9a5d91f2bf837fe72edf6ec025c1c4e87171cc02c7342fa5d4f825157d70d8f66f6fa0542de2255373d8743612e7d4e16b8ceebf4e92c40926f21929cab343b981120236b8b0b900772a33bbe4eef06feff3c7b104cf63d92c7f9233982f9b713489fb8bf80f2feffd6c22007b63925209e158a837dc95b42d52ed764350b5f83ad54041bc15a7552c0b8c1933d674a16b0c0934277d9895c1ad01327231a7fffc4b5e1a1495489559bebff324d54f2894563a23b85d3bef62c356eb476e01e0c039287ca38626751f701ef4e20d951433940ce1138660589ff389dee9f85a7faebb9cc494bbe7138b413303af6e05806032d8131d5a25a5d7c0ed87906d92bdd87ce7d62c13989f3435ad77a29b721d8219d2cf530c2ec9edc3de9ce2dcd5053c38a6797de8d8cbd3596ed545d2dc6f825a0e65428dd73df96d5f3e40dbe5a62f0f440f712419d1558ef97bf1d0ca1d59fa1caf6ed0d422456848e196e94b4741b757935bc3aef3a46f53066dc7a74f42d539da2228fb8593ddb79ac977a8b67c0a6058efdbe23ba75fb2faf5b9f152e60b8a96ee19fbf0c417c89f882c53d389bf27a18b9e34b2a33aa27029cfed7a03335cf33d95ea803ad125237a9cc70520f18bc7e9f0c1432368a5304544f5d1e1599242bcd905f69f25cd0fcde391960fc57426e0bf22155ea315f0caee330bf3b7f4f4363f87146531175ad4f69002d46e95a48f714c9bbd9e39b95783406d477dabe03397d68e7af5ee623b4c05eb64120ca76af4f1d37348f93f39d8fa1d22fef874ce65b66f8a1aaff9db97520dab97eb8d1f99efef4d4c9704d181d687874ec4fbb400ed4ce050ac997c843e647bebeddc33eeb70201b3286ea25ad1bdb80dba1fc78a6883ecca84d17645be16bee32967bd487c6f5e0714ca819d5913436ac9aeeab4e5092ec1897dad39737365e8414246a81a731bf7d3ad8d789b42c651702b70ee786032356e3b9fc4402104ffbe55026c84e8ec5dd2a1860cefd0e7789ac2a47fa5ee9610dee980fa3c2fa7219b4e57642f31012b3e00e64285fda219fa9ca37955e3c25f51d208897ed4e1d224243b2f241f24580e924e02cb60af5e14898028596400a770f94e67590df5fe99e9d170d061397f71f4202eca4c91c7fc27d6379358a8d9bfc28c2fb67842b0bd1e5e68e017b34084aa08e7453fc6b03bd42772643eae036f25f10e4da022818dc84f35eea2c07e4dbb41e861b8a4c6df4f0b4b785f0df55f863707a0563cdd5b9fcaa352b54071cd486cf4948575ddbe4654a566438922887a3bd304853a98283c7a4d7757cc6e8298b0121aca5fdb64d86996d8c0ddfa1ee4ccef1ee21dcf853bdb02471383f73ddae17dfef217c6a3f79b182fc36bdb47d1899e87bb4c4e490ad4a2724d223b31b889685355f349ca8bc62d39150ebccaba863bd72bf91d65cffe560eecf162b2440f9d74fe0fb3f8479fd8f6293f16e4d67b3ec30e83180444cec51d2b455a3ab2b6286d4fac1acba8b7b5026671fef497d5e050e0aa34dcecf2d06a9e4b60cdb3f9cbb7cadd73c817f255f8e2eb22d6283a7934e0fd64eaf52caab2d1862baf505889e4db1a1870f0049b3ada06d38af52535da352bedbf1e88e34595820cedd4559cbe0fe0578c557a62f56060d75c5a6806e384d3c274c218d57beecbd8e7832f3cc050668b44c1b8ff8cdcd2b85b5ecb9eca1dcc1204d27bc3689578eab43dac5658a1cfe75456b221c15ed26720a49829f96d501fda6d7839724207d6a5f6bb3d8390e90dd7c6b80e15e6b20b7c74ff3282c770eb1c77583fc97bdb5f2df62a74b3385e2e8ba06fc39730f1f02107477c215deb6c8599cdacc7c710b7b1a77afbe3b2a593f6eec5c8014dd366f5890a1a579e51d858cc8ef93aff098af9903b4e3633a3090a630e64be99f49d32d63d779f989d0198044717741d3bfab4242a05dae33f11ed6b1d850fb379f725fdb7b296d9d9b3024160d4fd735a77c8ab23f0816bfc2715a2561c3cee6e41cf79030c1500c09e75ebbd5a7aa8a0e4826542ad46a9350e969b357c142af13afdd8927cdce3d1f35493f6a7a14c5a20739d462d566fe3ab620f1ef323768bd871eb454dad947f2a871efa05d601cf9fb08d992caf6f4b0f652e13df7dfc658f50e0c9bfc3bf28114a51142f65e25435a32c8719fde2a3d5c4850e31ffa675fa44f9e54957d108e46a67a3b7d71b272ecb0385466e39238f6421b2fd6f33a258883a4501b63001ee9ecb9137162488051f7ff15e6f4be81ca31ffac70f48bcd3457fcb137a2f5108d908ba1d51b0fca7e14273b176af4b954837dc3d40b4341fd03063ee145dfc4456bb303bb0540db3aadb26240242f4a55cb9f6623b6e724e0f9d8b73d02c9fd9140873c0bb884e3cf4c844bad6f27388b56840b63d65ca760dbddf778e430e1f03c246e74e9b56a08a56617658f7fc42e3582f3181a720e51598d22062815ca3caebf36389a58278acc788035d8deb0b800180ef6537d92bfa18947cb18232bfd27e048fcd49d44c137f1d8a10294a6dd20251a00c379bb0936fcb5137c9f5a7a7404976c778912a37f1503deb27b85d3b1d886415a98348d3632c7eb4bf58fdfddd5b24407709474e4478c991a03ed8b456d9a71ec82f05791eb17425e0360493fb5ec343eba7e9c970f47f4cd85edda849cc524d42a11eaf29be950e621cd12e16e3a304516ce5c74a2b47a1baf1f3321b84318883bb023cb5f67dc3541a4d72ebb3316244f96cde4aebc1a77336a93d226c315ab02581123140e45373f40c8cfc7fb5d478607f9b38c2b95bcd55fb8a2047569ac7927b9e4208f75032abfe83442d2ca5db1ee8903888548b5fa9724520083052f8e652f1b0d39d031d2c61f63e5cfb98061b5b913dc6da26e690c85b07fa19b9bf83d124a5fcf96de21d9f00c9aaf2ec66580e4dd99c21c01b7557b7c6336cec525003157d3efdd16a52407b35225f65e44933d56c90dbeeffcfbe2b10bdd921a507592817043c88bab1882ac8863f8a73fed3310138ae56c9b5fb8aa22d5d6ab9e5ece2afb94c5054bdc8444b00a46d74716c21346f2dce31f180f3e01453d7a7aaf4200c4be278a2a88fbec4529a551189da822d1365c8ac70bd6c6cb3c3791e183eeba95e65f1f87c10b2f740bee2575807c486e3b7939f093d44693ac069089830afff26d7165712abb7ba5bf8aaa87a3d57c5670b3a45d707b87aa7689b18292d851cac59802b38bd7ab8e1c3b8a134db1a366aaa8f77a6e2c937f49961637d291970b4541e3405948ba2ef49b40f600e28861c54f06a2400f82ffb2b9a0d4c6da720f9fea31dbe3f42aa29bd126fcbfccb9d809c8bbd76d241fc2588963f10434b69e9415d20bea13c30a08b22f5f21bd945a11466d228848b7b68927725239142fc536f784b705d3bd318f5d5fce31ddd32eca57309b1f9e5cdb0164df0bc45d04db323ed272fef5e4e0554cbe0eef83999d6dd82b67a5de6986b7063851602f833a23946ffb004b9cb30f6af2108e2aee029aa3e4fd525597f4a8d0184750731821bf21aaf703753270d3f12d5ed5f7bdb47c891074a44c63bebe47c66aab7f24e422b5f549249f26cab0aac9484087871de53cdb6d575e0e7ea3c73de23460c5b1bbe1e838433de48ecc812c1e21861dc290f22733090b5d3f88910478bff51307e6d869b68a745255ca007b9f5dda63074845d4d8f03604ada7cb5f8c1bcad9f3a84bab71e6c109ef7bd8eb29ba18011430f28eee91aa83749594aa5c717c0d53e0ff68372284e356e55f9cf33716ade1e148beda327236f4005472600f99a1c2fbe10c5492d2e082d15fa962492b16029a222bce55a001b2726fad239160f3ed55e98343fa5266cd7f5e36158480430e2f802fbfa3aa6e7299ab0940eea91682c79fffb171a705a23b70173f0973ca0b0ea230b306418677be4e6bcca0e6cc7bdbf6a3a96090819d541f505402ce505b40bd7d012ffb6a62f2528c5d370b2d6d6cf4b49c6886d20a5cc94cbe5e7cdf012af5d27c0c89c190956d1aaf1911888b33f67341fe74a10cba3328b84e3c4b83bb8b25da32122ed8df7b831e77bf9528af4b0960a0abb420e931eead4dcf31849cafc6099e8a3053758200bdbb411346662442e8274bc9780fd69abb4ef9ddd292f791b846a5849610862453cdb9263ddc232492de5d24c2c52751223cb961bb9ba7c86988b2a5490c3540ada6ffb9ba287c3e15d228aa0a6491ceced135cb1533b31c0b8ca218ffe4e1a07f29b4557a05b447358350ebfdcff9793b2eb1d7e0ea082b1f4fde8207071a8beb8c1e5efc49e1153fb8fb21ebc46c4d5b404a743a54076e4987da1748a39c70c083960873ffa0b88d4cccae69cdf4630a78250db81141e216e2007b7aea7500ad3176ae8e22c5fce5f14f0aa581bbe520a6d6c5f504547b178e62236f54809dd43763107e49b0d44a7968dcdf73a8c3c395fecd8a557ab850bebf1a67e82714131e0380fd6684e8094783190ce491a03243d903b4488d574be3847b4219145f5aa05201b4bafcbe2c2c98fb4e968c15822e20c06e83b0fc24d8d30acc9e24b36cfd06ad1a073719bf3a92922111e76efac5a813faaca76acfb065ad4faf1efe403aee89bc149bfa4e907008fe5f81d4e795c7a646c2b48e79b7ba54ec42425978c4d084c3c1f66ccdf230515366b08cd506a210e92e75bf7adfbaada44b619feecc4427ca23e74b68abfe9796a6e9a1f540d6a438042f506c27bb4f4814c73541b38eb7d548010363cdf7b2b6faf1a41a10fb71bd206388f32777c6b8e3fd7f6cd76342a1fba80deba8100f878eb4e4a09287ce513bb6b1f445e3cbdf220ff5faceb36c3a7f1a1710e780b9772124e5728fed14bbe348f0f4831913ae69ff40c953cc6447babbcf55b08491357531dc9d86fbe5cd4fd0d6e03e5b71daca299a8d31c3596fb98d21acc09d03e3fe7cc1f13c3e8b49b9dd40b8397ae617b322951a4bd8fe8a1eff9f920b79ddad1639da4d4a18c12ca3b65430e41506198483d5a2a0bc058269e7575cd6dc8d1a0393748622369c107b8a5fe570a7795d98b75e23d4c05c39655c8b81a389b512461a20711487695b8d4ff2d81ab4fe8c884768cbb99640a9ec5b54d3cd13a90f318e0264038b7f91dd73205172400eb9d186ed30286ff7cb9e459341ee59638b253148cfa74bada6b959f185b5cf68a313ff757836aafbbdf1f4440ec0f44d99c3950a6e2fdc6b7d8c6120f921630b93ec31c216e93e6b3781d02ef2339dbea56125ffe79019b1689c25d35db7d3f3e5c613060400977a2f7e142b50591b2ae5738dfd208c0f4daeda71edd05beaf4fc0b128fd004bd2bf1cea1d6883b4287cab96354e8f34f9d3707763b731686cbe6c175848a9f4bdd7c2961d270d9ef63ac95aa0603d3612a8933660c303fd1a91b3eb700718cdf40a34795399a7812c89b44f7b223dbe8bb08e0c01c4bf740c95431445a6b6fae337df7778e834816e34e0e6d3f0e935fdd136e6ac50c8e11fffb518b06c734985f31884a411293a3a3757a6e5be3d2495916314dc072fc9c0dbefcb5100513df15c18e04b2ad744d660f9cb5f4c64eead30fdd52507bba003c625108e6cdfcd7a1b38e8fd4fef0d419f695904be3026aeb9bab1ad3566a0a46a2a2d092c75ae2cbad109a117b7db76b729aaab3a89bcef8a5e63008613414fa5ce56988bbe3e839ccb8e192c56115522620e0851fbd19790f3acf9669915ef0f1ca0a2ca8a5578747f2d6cbec07a7bc4128ae131b7685191d5cf05210cc4bca2dc6303747c72cc0e4165512cccd43c5a79800b84ca018190a70984d73056e2a8bbdea91fdfcda72d9f8705227c5c4fdef9e0b81948420cae7344ba872a85e2d47c1e40fefcaa8d246fac5c7abe90b2bf39ec601390dd0a8cacbe82fc1ba0cf13c3cd89220a42e82ce62ccdf63fcb1be53c91d36349c7d3aa30170dccd5262d9ee570581ae5c9f84cf5b32261d8f531f6df0636cea496c698f36aee3274f0f9dfb7d72c074530a2679d13e5cc1bfcd957be3eba04a12f8897507122fc74ad66a7f621012ea43878cfa9a2a3ed95581aebdf1ffd7a8985f65c63de9eab4286cb94e57e3076e4e2850faef69b1d9f75ff45227b9e1bcc256c0236dc63483cffb8d72543eb213b2e0a487217850ab3bf7213dabb360c35714dbab5604357ea7b23fc0ba27d0bd09dc09e7ac471088c58d28e3ef12c3054d8a017a5023f378ae81bbbf55228620e061ace44906cc82520bfac2e1d7f7e340f53215bcf6f6078d82266abaaf479e084e73f0600572a7d482a84633eefc6e196f27638e8f08c6a4c615ef98238895d2cffb221a800424e115b0e84b960424fe39a2f33a203eb42f7f5e70e8f73aa172a8adf1d977b176cae2750859c96692bdac1067b7a1b1496dbd7c8220f3f0b42938ba0779c9bfa414a0e6073556d651d526875a4cfa95e8e981f40fc6d8bdd4704a12f44612e8eb8842535edea3d609d929b3fc05c2b02bd44e02a732ba814caf9e03e0bd7f41a24b3b6e282d07d74de2ab968ac739e994c0265416a7347f44bb80d1948cf8c9a69409e850b13f379dd672eb34a732b0b1d7b67ef2ee1bcb686cc4d1f4512c1ffb105ad2e46d783e0ca5f97ef9e4ab2798ce1c29b0f3292fbf1001d9487adfc3b34b4329be6b72ebf7a62158e488bd7888060f1e562045ecf9388c492fe3e0a6ce9b92b5a3eb29c80cc69da72f7dc2f2ac730e5d82cc5b75cecdd0809db8f1cc17bf5b72ed46fa3038722b6369d9f9497b83cc2ea1d0ebea0ac1306a83249705ae0b1c0145af67388d2153dbcb8856971216ee8f3d0cc6f532f159e5e28c6308154bf8efe46333b30740e9d94993393a27eb263dc0d19f182913ffa3953a52847fe979b9e682d304944529131b02ed468c88b5aac0483ff22ad56f9630b4f6134f266ee446068edd079411571f7e77acf2035d483043b8ad85b6277dca9e590ca801dc1896acdfc88dcf3cf83fca85afefe6addd27131f8be0fd5a80a0723556639fff59d56453ec76d3ebad3f5cb04e7b758b13e3d64c2ff5c3b018f52ba9363e053ee2fd78e35b2a834a069953e759455047521ad6615ab87e6381f0363a4554b86dd14f5ab43eb6b3fff64d94af0949a9e5c63d8c8e883886e61bd36f5ca11dfe2c025290cd49f369f8a3f9023d5daa7410fba96927fd0b5d2c75e00", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x3, {0x5, 0x3, 0x0, 0x4000000000008, 0xfffffffd, 0x7, {0x2, 0xfffffffffffffffc, 0x1, 0x6, 0x36, 0x81, 0xffffff01, 0x9, 0x8, 0x8000, 0x0, r2, r3, 0xffffffff, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x4c2, 0x0)

669.640974ms ago: executing program 1 (id=2607):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x28, 0x2d, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x4040080)

610.550644ms ago: executing program 1 (id=2608):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1})
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)

610.208106ms ago: executing program 1 (id=2609):
r0 = socket(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x10)

540.174093ms ago: executing program 1 (id=2610):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38)

539.914371ms ago: executing program 1 (id=2611):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

70.069041ms ago: executing program 4 (id=2612):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[], 0x7c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8)

0s ago: executing program 4 (id=2613):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0xfd, 0x4442, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 0 to 512
[  180.555723][ T9193] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  181.214552][ T9190] 9pnet_fd: p9_fd_create_tcp (9190): problem connecting socket to 127.0.0.1
[  182.072450][ T8128] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  182.227060][ T8128] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  182.230521][ T8128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.233335][ T8128] usb 3-1: Product: syz
[  182.234994][ T8128] usb 3-1: Manufacturer: syz
[  182.236596][ T8128] usb 3-1: SerialNumber: syz
[  182.241873][ T8128] usb 3-1: config 0 descriptor??
[  182.247623][ T8128] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  182.357492][ T9219] serio: Serial port ptm0
[  182.595689][ T9231] loop1: detected capacity change from 0 to 4096
[  182.599672][ T9231] EXT4-fs: Ignoring removed mblk_io_submit option
[  182.617924][ T9231] EXT4-fs (loop1): Test dummy encryption mode enabled
[  182.640957][ T9231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.660709][ T8128] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9
[  182.665216][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.790193][ T9247] batadv0: entered promiscuous mode
[  182.803568][ T9247] net_ratelimit: 3 callbacks suppressed
[  182.803580][ T9247] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  182.863228][ T8128] usb 3-1: USB disconnect, device number 17
[  182.865215][ T9251] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1327'.
[  182.871341][ T9251] program syz.1.1327 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.893365][ T9287] loop2: detected capacity change from 0 to 8
[  183.896762][ T9287] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  183.901034][ T9287] cramfs: unsupported filesystem features
[  184.069937][ T9281] loop1: detected capacity change from 0 to 32768
[  184.121638][ T9281] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  184.141152][ T9281] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  184.150833][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  184.192401][ T9281] (syz.1.1344,9281,1):ocfs2_find_entry:1094 ERROR: status = -117
[  184.195693][ T9281] (syz.1.1344,9281,1):ocfs2_orphan_del:2396 ERROR: status = -117
[  184.200462][ T9281] (syz.1.1344,9281,0):ocfs2_orphan_del:2418 ERROR: status = -117
[  184.207329][ T9281] (syz.1.1344,9281,0):ocfs2_remove_inode:752 ERROR: status = -117
[  184.210907][ T9281] (syz.1.1344,9281,0):ocfs2_wipe_inode:897 ERROR: status = -117
[  184.219833][ T9281] (syz.1.1344,9281,0):ocfs2_delete_inode:1158 ERROR: status = -117
[  184.252040][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[  184.347460][ T9301] netlink: 'syz.0.1353': attribute type 63 has an invalid length.
[  184.450718][ T9307] loop1: detected capacity change from 0 to 16
[  184.498789][ T9307] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  184.504378][ T9307] erofs (device loop1): mounted with root inode @ nid 36.
[  185.278800][ T9321] loop1: detected capacity change from 0 to 32768
[  185.282185][ T9321] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1362 (9321)
[  185.312557][ T9321] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.315759][ T9321] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  185.318681][ T9321] BTRFS info (device loop1): using free-space-tree
[  185.619039][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'.
[  185.623522][ T9354] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1369'.
[  185.657799][ T5848] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  185.869228][ T9361] macvtap0: refused to change device tx_queue_len
[  186.063404][ T9371] loop1: detected capacity change from 0 to 64
[  186.158032][ T9373] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1378'.
[  186.232971][ T9377] loop2: detected capacity change from 0 to 2048
[  186.257746][ T9377] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.275715][ T9377] cifs: Unknown parameter 'norecovery'
[  186.282989][ T9381] loop1: detected capacity change from 0 to 512
[  186.306940][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.329943][ T9381] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  186.367610][ T9381] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[  186.487379][ T9387] sctp: [Deprecated]: syz.1.1384 (pid 9387) Use of struct sctp_assoc_value in delayed_ack socket option.
[  186.487379][ T9387] Use struct sctp_sack_info instead
[  186.602314][ T1279] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  186.755014][ T1279] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=cb.d7
[  186.758715][ T1279] usb 3-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3
[  186.765201][ T1279] usb 3-1: Product: syz
[  186.766832][ T1279] usb 3-1: Manufacturer: syz
[  186.768989][ T1279] usb 3-1: SerialNumber: syz
[  186.783253][ T1279] usb 3-1: config 0 descriptor??
[  186.792798][ T1279] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware
[  186.803027][ T1279] dvb-usb: did not find the firmware file '(null)' (status -22). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  187.195704][ T5900] usb 3-1: USB disconnect, device number 18
[  187.627403][ T9415] mkiss: ax0: crc mode is auto.
[  187.679263][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  187.684293][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1396'.
[  187.687912][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1396'.
[  187.698429][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1396'.
[  187.702207][ T9417] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1396'.
[  188.399604][ T5900] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  188.550983][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.554534][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.557573][ T5900] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  188.561180][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.569689][ T5900] usb 2-1: config 0 descriptor??
[  189.073152][ T9443] loop2: detected capacity change from 0 to 512
[  189.093649][ T9443] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  189.099068][ T9443] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  189.108898][ T9443] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  189.113265][ T9443] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  189.116531][ T9443] System zones: 0-2, 18-18, 34-35
[  189.126315][ T9443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.201613][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.341778][ T9451] loop2: detected capacity change from 0 to 512
[  189.352031][ T9451] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1411: corrupted in-inode xattr: invalid ea_ino
[  189.357218][ T9451] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1411: couldn't read orphan inode 15 (err -117)
[  189.367079][ T9451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.406594][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.528299][ T9456] loop2: detected capacity change from 0 to 512
[  189.558649][ T9456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.578235][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.586360][ T9456] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1413: mark_inode_dirty error
[  189.592243][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.601770][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.611684][ T9456] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1413: mark_inode_dirty error
[  189.616460][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.621077][ T9456] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1413: mark_inode_dirty error
[  189.625874][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.631043][ T9456] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.1413: mark_inode_dirty error
[  189.640663][ T9456] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.1413: corrupted inode contents
[  189.673042][ T5854] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.735900][ T9460] loop2: detected capacity change from 0 to 2048
[  189.760867][ T9460] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  189.784276][ T9460] overlayfs: upper fs needs to support d_type.
[  189.791928][ T9460] overlayfs: cleanup of 'work/#12' failed (-2)
[  189.794887][ T9460] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  189.796675][ T5900] uclogic 0003:256C:006D.000E: v1 frame probing failed: -71
[  189.797692][ T9460] overlayfs: failed to set xattr on upper
[  189.803589][ T9460] overlayfs: ...falling back to redirect_dir=nofollow.
[  189.806038][ T9460] overlayfs: ...falling back to index=off.
[  189.808193][ T9460] overlayfs: ...falling back to uuid=null.
[  189.810620][ T5900] uclogic 0003:256C:006D.000E: failed probing parameters: -71
[  189.810675][ T5900] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71
[  189.818676][ T5900] usb 2-1: USB disconnect, device number 22
[  189.857100][ T5854] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  189.861550][ T5854] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  190.381499][   T12] bridge_slave_1: left allmulticast mode
[  190.383532][   T12] bridge_slave_1: left promiscuous mode
[  190.387842][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.398521][   T12] bridge_slave_0: left allmulticast mode
[  190.400934][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.540735][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  190.546887][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  190.554136][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  190.561455][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  190.564845][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  190.703814][   T51] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  190.891642][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.895803][   T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.908645][   T51] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  190.913684][   T51] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  190.917409][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.931904][   T51] usb 2-1: config 0 descriptor??
[  190.946210][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.952172][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  190.956238][   T12] bond0 (unregistering): Released all slaves
[  191.080401][   T12] tipc: Disabling bearer <udp:syz2>
[  191.087264][   T12] tipc: Left network mode
[  191.287054][ T9468] chnl_net:caif_netlink_parms(): no params data found
[  191.374950][   T51] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  191.382985][   T51] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  191.391892][   T51] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  191.402786][   T51] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  191.406996][   T51] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0
[  191.412952][   T12] hsr_slave_0: left promiscuous mode
[  191.418458][   T12] hsr_slave_1: left promiscuous mode
[  191.425646][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  191.434187][   T51] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  191.444908][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  191.645243][ T1279] usb 2-1: USB disconnect, device number 23
[  191.905497][   T12] team0 (unregistering): Port device team_slave_1 removed
[  191.939225][   T12] team0 (unregistering): Port device team_slave_0 removed
[  192.456914][ T9468] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.468767][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.471897][ T9468] bridge_slave_0: entered allmulticast mode
[  192.494443][ T9468] bridge_slave_0: entered promiscuous mode
[  192.505676][ T9468] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.511095][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.513958][ T9468] bridge_slave_1: entered allmulticast mode
[  192.517715][ T9468] bridge_slave_1: entered promiscuous mode
[  192.590988][ T9468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.600859][ T9468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.638542][ T5857] Bluetooth: hci2: command tx timeout
[  192.838311][ T9468] team0: Port device team_slave_0 added
[  192.873524][ T9468] team0: Port device team_slave_1 added
[  193.018898][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.021592][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.025584][   T12] IPVS: stop unused estimator thread 0...
[  193.051988][ T9468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.064904][ T9468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.091989][ T9468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.126014][ T9468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.313580][ T9468] hsr_slave_0: entered promiscuous mode
[  193.317846][ T9468] hsr_slave_1: entered promiscuous mode
[  193.321780][ T9468] debugfs: 'hsr0' already exists in 'hsr'
[  193.324003][ T9468] Cannot create hsr debugfs directory
[  193.801559][ T9468] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  193.828386][ T9468] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  193.845719][ T9468] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  193.865484][ T9468] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  194.098974][ T9527] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1431'.
[  194.113990][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.152862][ T9468] 8021q: adding VLAN 0 to HW filter on device team0
[  194.162877][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.165485][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.234454][ T4548] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.239027][ T4548] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.266894][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.269869][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.716623][ T5857] Bluetooth: hci2: command tx timeout
[  194.799012][ T9468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.902043][ T9558] 9pnet_fd: Insufficient options for proto=fd
[  194.961189][ T9468] veth0_vlan: entered promiscuous mode
[  195.125435][ T9468] veth1_vlan: entered promiscuous mode
[  195.379882][ T9468] veth0_macvtap: entered promiscuous mode
[  195.401967][ T9468] veth1_macvtap: entered promiscuous mode
[  195.457450][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  195.481768][ T9468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  195.518473][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  195.521972][ T5878] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  195.532559][ T5878] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  195.544557][ T5878] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  195.858278][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.872353][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.972666][  T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.976508][  T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  196.525312][   T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  196.687773][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  196.693409][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.698778][   T10] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  196.703597][   T10] usb 2-1: config 1 has no interface number 1
[  196.706860][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  196.711047][   T10] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  196.718165][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.721374][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.723897][   T10] usb 2-1: Product: syz
[  196.727983][   T10] usb 2-1: Manufacturer: syz
[  196.729552][   T10] usb 2-1: SerialNumber: syz
[  196.795383][ T5857] Bluetooth: hci2: command tx timeout
[  196.942021][ T9601] nfs4: Unexpected value for 'acl'
[  196.958366][   T10] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  196.979592][   T10] usb 2-1: USB disconnect, device number 24
[  197.022893][ T6842] udevd[6842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  197.814572][   T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  197.966447][   T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  197.970429][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.977636][   T10] usb 2-1: config 0 descriptor??
[  198.054491][ T5828] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  198.184995][   T10] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e
[  198.188396][   T10] hackrf 2-1:0.0: Could not detect board
[  198.191002][   T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -71
[  198.195272][   T10] usb 2-1: USB disconnect, device number 25
[  198.214634][ T5828] usb 4-1: Using ep0 maxpacket: 16
[  198.217981][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.221466][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.225014][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  198.229069][ T5828] usb 4-1: New USB device found, idVendor=045e, idProduct=fc40, bcdDevice=72.a8
[  198.231963][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.238554][ T5828] usb 4-1: config 0 descriptor??
[  198.653881][ T5828] hid-generic 0003:045E:FC40.0010: hidraw0: USB HID v0.00 Device [HID 045e:fc40] on usb-dummy_hcd.3-1/input0
[  198.740533][ T9682] netlink: 'syz.0.1481': attribute type 10 has an invalid length.
[  198.743607][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1481'.
[  198.751817][ T9682] team0: entered promiscuous mode
[  198.753803][ T9682] team_slave_0: entered promiscuous mode
[  198.756958][ T9682] team_slave_1: entered promiscuous mode
[  198.759378][ T9682] team0: entered allmulticast mode
[  198.761325][ T9682] team_slave_0: entered allmulticast mode
[  198.766395][ T9682] team_slave_1: entered allmulticast mode
[  198.775239][ T9682] 8021q: adding VLAN 0 to HW filter on device team0
[  198.778535][ T9682] bridge0: port 3(team0) entered blocking state
[  198.784221][ T9682] bridge0: port 3(team0) entered disabled state
[  198.793826][ T9682] bridge0: port 3(team0) entered blocking state
[  198.796711][ T9682] bridge0: port 3(team0) entered forwarding state
[  198.858697][   T24] usb 4-1: USB disconnect, device number 2
[  198.875046][ T5857] Bluetooth: hci2: command tx timeout
[  198.909850][ T9690] autofs: Unknown parameter 'no9 PG!8E	'
[  199.215630][ T9696] loop1: detected capacity change from 0 to 32768
[  199.257230][ T9696] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  199.273209][ T9696] XFS (loop1): Ending clean mount
[  199.319993][ T5848] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  199.713677][ T5828] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  199.843888][ T5880] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  199.866665][ T5828] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  199.870175][ T5828] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204
[  199.874867][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.879074][ T5828] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.882850][ T5828] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.888203][ T5828] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  199.891979][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.898506][ T5828] usb 4-1: config 0 descriptor??
[  199.994766][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  199.999461][ T5880] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  200.002774][ T5880] usb 2-1: config 0 has no interface number 0
[  200.008538][ T5880] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  200.012102][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.015454][ T5880] usb 2-1: Product: syz
[  200.017652][ T5880] usb 2-1: Manufacturer: syz
[  200.019629][ T5880] usb 2-1: SerialNumber: syz
[  200.025629][ T5880] usb 2-1: config 0 descriptor??
[  200.031133][ T5880] smsc95xx v2.0.0
[  200.323474][ T5828] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.0011/input/input10
[  200.391816][ T5828] uclogic 0003:28BD:0909.0011: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0
[  200.527766][ T9732] netlink: 'syz.0.1502': attribute type 10 has an invalid length.
[  200.532844][ T9732] team0: Device dummy0 is up. Set it down before adding it as a team port
[  200.577478][ T9734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.580430][ T9734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.836574][ T5880] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  201.045006][ T5880] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  201.049303][ T5880] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[  201.053990][ T5880] usb 2-1: USB disconnect, device number 26
[  201.102557][ T5828] usb 4-1: USB disconnect, device number 3
[  201.923314][ T9756] batadv_slave_0: entered promiscuous mode
[  201.928595][ T9755] batadv_slave_0: left promiscuous mode
[  202.046151][ T9761] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1512'.
[  202.050293][ T9761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1512'.
[  202.312350][ T9772] loop1: detected capacity change from 0 to 40427
[  202.321655][ T9772] F2FS-fs (loop1): invalid crc value
[  202.390451][ T9772] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  202.396059][ T9772] F2FS-fs (loop1): Start checkpoint disabled!
[  202.406771][ T9772] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  203.139479][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.139479][ T9780] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  203.149542][   T33] audit: type=1800 audit(203.077:174): pid=9780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1515" name="bus" dev="loop1" ino=10 res=0 errno=0
[  203.165579][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.165579][ T9780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.212278][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.212278][ T9780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.248934][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.248934][ T9780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.266360][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.266360][ T9780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.304868][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.304868][ T9780] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  203.376428][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.376428][ T9780] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.475533][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.475533][ T9780] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  203.544491][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.544491][ T9780] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  203.611281][ T9780] syz.1.1515: attempt to access beyond end of device
[  203.611281][ T9780] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  203.717991][ T4548] CPU: 0 UID: 0 PID: 4548 Comm: kworker/u9:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  203.718008][ T4548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.718014][ T4548] Workqueue: writeback wb_workfn (flush-7:1)
[  203.718030][ T4548] Call Trace:
[  203.718034][ T4548]  <TASK>
[  203.718039][ T4548]  dump_stack_lvl+0x189/0x250
[  203.718053][ T4548]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.718063][ T4548]  ? __pfx_queue_work_on+0x10/0x10
[  203.718071][ T4548]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  203.718082][ T4548]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.718096][ T4548]  f2fs_handle_critical_error+0x37c/0x540
[  203.718136][ T4548]  f2fs_write_end_io+0x886/0xb60
[  203.718154][ T4548]  __submit_merged_bio+0x27a/0x6a0
[  203.718168][ T4548]  __submit_merged_write_cond+0x255/0x530
[  203.718181][ T4548]  f2fs_write_data_pages+0x261d/0x3000
[  203.718207][ T4548]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.718225][ T4548]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  203.718248][ T4548]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  203.718264][ T4548]  ? trace_f2fs_writepages+0x7f/0x200
[  203.718275][ T4548]  ? f2fs_write_node_pages+0x478/0x6e0
[  203.718288][ T4548]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  203.718304][ T4548]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.718316][ T4548]  do_writepages+0x32e/0x550
[  203.718329][ T4548]  ? reacquire_held_locks+0x127/0x1d0
[  203.718337][ T4548]  ? writeback_sb_inodes+0x384/0x1010
[  203.718351][ T4548]  __writeback_single_inode+0x145/0xff0
[  203.718361][ T4548]  ? do_raw_spin_unlock+0x4d/0x240
[  203.718372][ T4548]  writeback_sb_inodes+0x6c7/0x1010
[  203.718394][ T4548]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  203.718422][ T4548]  ? rcu_is_watching+0x15/0xb0
[  203.718435][ T4548]  wb_writeback+0x43b/0xaf0
[  203.718448][ T4548]  ? queue_io+0x3d1/0x590
[  203.718459][ T4548]  ? __pfx_wb_writeback+0x10/0x10
[  203.718472][ T4548]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.718484][ T4548]  wb_workfn+0x409/0xef0
[  203.718499][ T4548]  ? __pfx_wb_workfn+0x10/0x10
[  203.718509][ T4548]  ? __lock_acquire+0xab9/0xd20
[  203.718525][ T4548]  ? process_scheduled_works+0x9ef/0x17b0
[  203.718536][ T4548]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.718544][ T4548]  ? process_scheduled_works+0x9ef/0x17b0
[  203.718551][ T4548]  ? process_scheduled_works+0x9ef/0x17b0
[  203.718565][ T4548]  process_scheduled_works+0xae1/0x17b0
[  203.718585][ T4548]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.718601][ T4548]  worker_thread+0x8a0/0xda0
[  203.718611][ T4548]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.718624][ T4548]  ? __kthread_parkme+0x7b/0x200
[  203.718637][ T4548]  kthread+0x711/0x8a0
[  203.718648][ T4548]  ? __pfx_worker_thread+0x10/0x10
[  203.718656][ T4548]  ? __pfx_kthread+0x10/0x10
[  203.718666][ T4548]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.718675][ T4548]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.718684][ T4548]  ? __pfx_kthread+0x10/0x10
[  203.718694][ T4548]  ret_from_fork+0x3fc/0x770
[  203.718704][ T4548]  ? __pfx_ret_from_fork+0x10/0x10
[  203.718715][ T4548]  ? __switch_to_asm+0x39/0x70
[  203.718724][ T4548]  ? __switch_to_asm+0x33/0x70
[  203.718733][ T4548]  ? __pfx_kthread+0x10/0x10
[  203.718743][ T4548]  ret_from_fork_asm+0x1a/0x30
[  203.718760][ T4548]  </TASK>
[  203.718764][ T4548] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  203.990321][ T9804] loop3: detected capacity change from 0 to 256
[  204.321624][ T5828] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  204.490037][ T5828] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  204.494160][ T5828] usb 2-1: config 0 has no interface number 0
[  204.496582][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  204.500724][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  204.505641][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  204.509745][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  204.517282][ T5828] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  204.524805][ T5828] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  204.533890][ T5828] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  204.537423][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.556895][ T5828] usb 2-1: config 0 descriptor??
[  204.566990][ T9806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  204.575149][ T9806] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  204.584461][ T5828] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  204.792531][   T10] usb 2-1: USB disconnect, device number 27
[  204.801675][   T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  205.000348][ T9814] netlink: 'syz.3.1530': attribute type 30 has an invalid length.
[  205.260282][ T9820] netlink: 'syz.3.1533': attribute type 13 has an invalid length.
[  205.264653][ T9820] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1533'.
[  205.271177][ T9820] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  206.081165][ T9829] loop1: detected capacity change from 0 to 32768
[  206.092179][ T9829] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1537 (9829)
[  206.101194][ T9829] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.104548][ T9829] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  206.107440][ T9829] BTRFS info (device loop1): using free-space-tree
[  206.338033][ T9851] loop3: detected capacity change from 0 to 1024
[  206.401091][  T728] hfsplus: b-tree write err: -5, ino 8
[  206.443272][ T5848] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.933088][ T9875] loop3: detected capacity change from 0 to 2048
[  206.938794][ T9875] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  206.946917][ T9875] NILFS (loop3): mounting unchecked fs
[  206.965879][ T6378] udevd[6378]: incorrect nilfs2 checksum on /dev/loop3
[  206.970532][ T9875] NILFS (loop3): recovery complete
[  206.994463][ T9881] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  207.768913][ T9912] loop1: detected capacity change from 0 to 32768
[  207.773086][ T9912] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1558 (9912)
[  207.781932][ T9912] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.786067][ T9912] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  207.790070][ T9912] BTRFS info (device loop1): using free-space-tree
[  208.038485][ T5848] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.324490][ T9948] loop3: detected capacity change from 0 to 512
[  208.385962][ T9948] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  208.397962][ T9948] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61
[  208.402563][ T9948] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.1561: iget: bad i_size value: 12154757448730
[  208.446109][ T9948] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1561: couldn't read orphan inode 13 (err -117)
[  208.815441][ T9948] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  208.866256][ T9948] fscrypt (loop3, inode 2): Error -61 getting encryption context
[  208.917416][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1559'.
[  208.933109][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.098199][ T9968] loop1: detected capacity change from 0 to 512
[  209.122148][ T9968] EXT4-fs (loop1): external journal device major/minor numbers have changed
[  209.476690][ T9968] block device autoloading is deprecated and will be removed.
[  209.488068][ T9968] EXT4-fs (loop1): external journal has bad superblock
[  210.309672][ T9993] block device autoloading is deprecated and will be removed.
[  210.852029][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1573'.
[  210.855201][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1573'.
[  210.861225][ T9991] loop1: detected capacity change from 0 to 32768
[  210.872291][T10003] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  210.992334][ T9991] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,data_checksum=none,compression=lz4,degraded=yes,no_splitbrain_check,fix_errors=no,norecovery,recovery_pass_last=resume_logged_ops,nojournal_transaction_names,version_upgrade=none
[  210.992350][ T9991]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  211.002655][T10020] netlink: 'syz.0.1577': attribute type 4 has an invalid length.
[  211.032389][ T9991] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  211.035228][ T9991] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  211.044435][ T9991] bcachefs (loop1): superblock requires following recovery passes to be run:
[  211.044435][ T9991]   recovery_pass_empty,check_unreachable_inodes,lookup_root_inode
[  211.085433][ T9991] bcachefs (loop1): accounting_read...
[  211.103130][T10026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1581'.
[  211.113794][ T9991]  done
[  211.114867][ T9991] bcachefs (loop1): alloc_read... done
[  211.116896][ T9991] bcachefs (loop1): snapshots_read... done
[  211.137057][ T9991] bcachefs (loop1): done starting filesystem
[  211.399154][ T5848] bcachefs (loop1): shutting down
[  211.422201][T10028] loop3: detected capacity change from 0 to 32768
[  211.442030][T10028] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  211.464231][T10028] XFS (loop3): Ending clean mount
[  211.469508][ T5848] bcachefs (loop1): shutdown complete
[  211.475567][T10028] XFS (loop3): Quotacheck needed: Please wait.
[  211.509247][T10028] XFS (loop3): Quotacheck: Done.
[  211.607311][ T9468] XFS (loop3): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  211.952329][   T33] audit: type=1326 audit(211.902:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10039 comm="syz.3.1584" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe1ef58ebe9 code=0x0
[  212.983675][T10059] loop1: detected capacity change from 0 to 2048
[  212.992783][T10059] udf: Unknown parameter '18446744073709551615000000000000000000000x0000000000000003'
[  213.077618][T10061] comedi comedi1: pcmda12: I/O port conflict (0x2f00,16)
[  213.117483][ T5828] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  213.128660][T10063] loop1: detected capacity change from 0 to 512
[  213.149628][T10063] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1594: iget: bad i_size value: 38620345925642
[  213.155021][T10063] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1594: couldn't read orphan inode 15 (err -117)
[  213.161584][T10063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.196184][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.266946][ T5828] usb 4-1: Using ep0 maxpacket: 8
[  213.272582][ T5828] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  213.276156][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.281938][ T5828] usb 4-1: config 0 descriptor??
[  213.535438][T10073] loop1: detected capacity change from 0 to 16
[  213.540300][T10073] erofs (device loop1): mounted with root inode @ nid 36.
[  213.641184][T10075] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1599'.
[  213.760105][T10081] .: renamed from bond0
[  214.018688][T10083] loop1: detected capacity change from 0 to 32768
[  214.022737][T10083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1602 (10083)
[  214.046704][T10083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.057878][T10083] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  214.061074][T10083] BTRFS info (device loop1): using free-space-tree
[  214.114829][ T5848] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  214.725676][ T5828] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  214.733148][ T5828] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  214.737391][ T5828] asix 4-1:0.0: probe with driver asix failed with error -71
[  214.742188][ T5828] usb 4-1: USB disconnect, device number 4
[  215.985637][ T5828] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  216.135341][ T5828] usb 4-1: Using ep0 maxpacket: 16
[  216.139672][ T5828] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  216.143046][ T5828] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  216.146059][ T5828] usb 4-1: config 0 has no interface number 0
[  216.152397][ T5828] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  216.156305][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.159519][ T5828] usb 4-1: Product: syz
[  216.161246][ T5828] usb 4-1: Manufacturer: syz
[  216.163158][ T5828] usb 4-1: SerialNumber: syz
[  216.168717][ T5828] usb 4-1: config 0 descriptor??
[  216.173952][ T5828] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  216.177932][ T5828] usb 4-1: No valid video chain found.
[  216.376534][ T5828] usb 4-1: USB disconnect, device number 5
[  216.731011][T10145] loop1: detected capacity change from 0 to 128
[  216.946496][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1629'.
[  217.355047][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  217.866547][   T10] usb 2-1: Using ep0 maxpacket: 32
[  217.870644][   T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  217.873725][   T10] usb 2-1: config 0 has no interface number 0
[  217.876713][   T10] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  217.880922][   T10] usb 2-1: config 0 interface 85 has no altsetting 0
[  217.886371][   T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  217.889883][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.892895][   T10] usb 2-1: Product: syz
[  217.895206][   T10] usb 2-1: Manufacturer: syz
[  217.897111][   T10] usb 2-1: SerialNumber: syz
[  217.901515][   T10] usb 2-1: config 0 descriptor??
[  217.934540][ T5828] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  218.094718][ T5828] usb 4-1: Using ep0 maxpacket: 32
[  218.101071][ T5828] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  218.104688][ T5828] usb 4-1: config 0 has no interface number 0
[  218.112957][ T5828] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  218.117716][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.120879][ T5828] usb 4-1: Product: syz
[  218.122576][ T5828] usb 4-1: Manufacturer: syz
[  218.126403][ T5828] usb 4-1: SerialNumber: syz
[  218.131918][ T5828] usb 4-1: config 0 descriptor??
[  218.138907][ T5828] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  218.353470][ T5828] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  218.363138][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1641'.
[  218.365405][ T5828] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  218.513143][   T10] appletouch 2-1:0.85: Geyser mode initialized.
[  218.521198][   T10] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input11
[  218.725520][ T8128] usb 2-1: USB disconnect, device number 28
[  218.749074][ T8128] appletouch 2-1:0.85: input: appletouch disconnected
[  218.762266][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  218.762566][ T5900] usb 4-1: USB disconnect, device number 6
[  218.775858][ T5900] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  218.785473][ T5900] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  218.794194][ T5900] quatech2 4-1:0.51: device disconnected
[  219.328106][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'.
[  219.333335][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1646'.
[  219.541333][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1650'.
[  219.545099][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1650'.
[  219.861900][T10207] loop3: detected capacity change from 0 to 32768
[  220.820914][T10220] vcan0: entered allmulticast mode
[  220.823386][T10220] vcan0: left allmulticast mode
[  221.172804][ T8128] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  221.335986][ T8128] usb 4-1: unable to get BOS descriptor or descriptor too short
[  221.340469][ T8128] usb 4-1: not running at top speed; connect to a high speed hub
[  221.345634][ T8128] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.352177][ T8128] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  221.356098][ T8128] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  221.359310][ T8128] usb 4-1: Product: syz
[  221.361042][ T8128] usb 4-1: Manufacturer: syz
[  221.363196][ T8128] usb 4-1: SerialNumber: syz
[  221.367743][ T8128] usb 4-1: config 0 descriptor??
[  221.583671][ T8128] usb 4-1: USB disconnect, device number 7
[  221.837545][   T33] audit: type=1804 audit(221.797:176): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1666" name="/newroot/489/file0/bus" dev="overlay" ino=2591 res=1 errno=0
[  221.856103][   T33] audit: type=1804 audit(221.817:177): pid=10235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1666" name="/newroot/489/file0/bus" dev="overlay" ino=2591 res=1 errno=0
[  222.912395][T10284] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  222.915532][T10284] netlink: 'syz.1.1688': attribute type 1 has an invalid length.
[  223.338791][T10296] overlayfs: overlapping lowerdir path
[  223.650361][T10291] loop1: detected capacity change from 0 to 32768
[  223.696687][T10291] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop1: erofs_nochanges
[  223.701832][T10291] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  224.609053][T10333] loop1: detected capacity change from 0 to 1024
[  224.646977][T10333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.209777][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.413527][   T33] audit: type=1326 audit(225.379:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.441148][   T33] audit: type=1326 audit(225.379:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.463458][   T33] audit: type=1326 audit(225.379:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.486312][   T33] audit: type=1326 audit(225.379:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.502718][   T33] audit: type=1326 audit(225.379:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.514238][   T33] audit: type=1326 audit(225.379:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.523135][   T33] audit: type=1326 audit(225.379:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  225.533677][   T33] audit: type=1326 audit(225.379:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10343 comm="syz.1.1715" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  226.377947][T10355] loop3: detected capacity change from 0 to 512
[  226.386657][T10355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  226.422048][T10355] EXT4-fs error (device loop3): ext4_quota_enable:7120: comm syz.3.1720: Bad quota inum: 29696, type: 1
[  226.427062][T10355] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=29696). Please run e2fsck to fix.
[  226.438355][T10355] EXT4-fs (loop3): mount failed
[  226.512668][T10362] loop3: detected capacity change from 0 to 256
[  226.519681][T10362] exfat: Deprecated parameter 'utf8'
[  226.527288][T10362] exfat: Deprecated parameter 'namecase'
[  226.529329][T10362] exfat: Deprecated parameter 'namecase'
[  226.532796][T10362] exfat: Deprecated parameter 'utf8'
[  226.538745][T10362] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  226.557885][T10364] loop1: detected capacity change from 0 to 1024
[  226.568978][T10364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.643441][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.806640][T10375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  226.847119][T10377] loop3: detected capacity change from 0 to 512
[  226.878238][T10377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.895022][T10377] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #12: comm syz.3.1729: corrupted xattr block 6: invalid header
[  226.904358][T10377] EXT4-fs (loop3): Remounting filesystem read-only
[  226.927837][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.933146][   T27] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  226.938328][   T27] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  226.989456][T10381] loop3: detected capacity change from 0 to 512
[  227.028075][T10381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.056888][T10373] loop1: detected capacity change from 0 to 32768
[  227.076704][T10373] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.083354][T10381] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  227.105069][T10381] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  227.111641][T10373] XFS (loop1): Ending clean mount
[  227.120978][T10381] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1730: Failed to acquire dquot type 1
[  227.161370][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.248352][ T5848] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  227.451744][T10395] loop3: detected capacity change from 0 to 32768
[  227.457814][T10395] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1733 (10395)
[  227.472447][T10395] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.477359][T10395] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  227.481023][T10395] BTRFS info (device loop3): using free-space-tree
[  227.561610][ T9468] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.931928][T10411] loop1: detected capacity change from 0 to 32768
[  227.972560][T10411] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.987458][T10411] XFS (loop1): Ending clean mount
[  228.047396][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  228.491392][T10457] loop1: detected capacity change from 0 to 128
[  228.491784][T10461] loop3: detected capacity change from 0 to 256
[  228.525600][T10457] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535)
[  228.537381][T10461] FAT-fs (loop3): Directory bread(block 64) failed
[  228.540117][T10461] FAT-fs (loop3): Directory bread(block 65) failed
[  228.544940][T10461] FAT-fs (loop3): Directory bread(block 66) failed
[  228.547433][T10461] FAT-fs (loop3): Directory bread(block 67) failed
[  228.553236][T10457] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  228.566973][T10461] FAT-fs (loop3): Directory bread(block 68) failed
[  228.572393][T10461] FAT-fs (loop3): Directory bread(block 69) failed
[  228.574549][T10461] FAT-fs (loop3): Directory bread(block 70) failed
[  228.576819][T10461] FAT-fs (loop3): Directory bread(block 71) failed
[  228.578905][T10461] FAT-fs (loop3): Directory bread(block 72) failed
[  228.581566][T10461] FAT-fs (loop3): Directory bread(block 73) failed
[  228.586739][T10457] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz.1.1748: No space for directory leaf checksum. Please run e2fsck -D.
[  228.594211][T10457] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #11: comm syz.1.1748: checksumming directory block 0
[  228.634115][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  229.345952][T10493] netlink: 'syz.1.1766': attribute type 5 has an invalid length.
[  229.633750][T10510] loop3: detected capacity change from 0 to 4096
[  229.660453][T10510] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.732357][T10516] loop1: detected capacity change from 0 to 4096
[  229.761997][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.873402][T10522] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (8)
[  229.873713][T10516] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  229.956463][T10527] mkiss: ax0: crc mode is auto.
[  230.013662][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1782'.
[  230.017451][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1782'.
[  230.022013][T10530] netlink: 'syz.0.1782': attribute type 13 has an invalid length.
[  230.027595][T10530] netlink: 'syz.0.1782': attribute type 14 has an invalid length.
[  230.045749][ T5857] Bluetooth: hci2: ISO packet too small
[  230.318410][ T5828] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  230.466113][ T5848] ntfs3(loop1): ino=9, ntfs_sync_fs failed, -22.
[  230.469016][ T5828] usb 4-1: Using ep0 maxpacket: 16
[  230.483178][ T5828] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  230.486474][ T5828] usb 4-1: config 0 has no interface number 0
[  230.495444][ T5828] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  230.505160][ T5828] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  230.512439][ T5828] usb 4-1: config 0 interface 41 has no altsetting 0
[  230.534108][ T5828] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  230.542746][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.548295][ T5828] usb 4-1: Product: syz
[  230.558245][ T5828] usb 4-1: Manufacturer: syz
[  230.560203][ T5828] usb 4-1: SerialNumber: syz
[  230.564567][ T5828] usb 4-1: config 0 descriptor??
[  230.567229][T10535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.572010][T10535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.662930][   T33] audit: type=1326 audit(230.621:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  230.678056][   T33] audit: type=1326 audit(230.621:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  230.704480][   T33] audit: type=1326 audit(230.621:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1795" exe="/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  230.719846][   T33] audit: type=1326 audit(230.621:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10560 comm="syz.1.1795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  230.783997][T10535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  230.786819][T10535] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  231.007880][   T10] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  231.160293][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[  231.164776][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 197, setting to 64
[  231.169034][   T10] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  231.172694][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.180147][   T10] usb 2-1: config 0 descriptor??
[  231.182991][T10565] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  231.190933][   T10] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  231.393158][   T51] usb 2-1: USB disconnect, device number 29
[  231.401794][ T5828] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  231.811137][ T5828] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[  231.815905][ T5828] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71
[  231.821015][ T5828] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  231.828386][ T5828] usb 4-1: USB disconnect, device number 8
[  232.107343][T10579] loop1: detected capacity change from 0 to 32768
[  232.110812][T10579] XFS: noikeep mount option is deprecated.
[  232.130658][T10579] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.144556][T10579] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  232.153885][T10579] XFS (loop1): Starting recovery (logdev: internal)
[  232.165872][T10579] XFS (loop1): Ending recovery (logdev: internal)
[  232.179574][T10579] XFS (loop1): Metadata corruption detected at xfs_inobt_verify+0x9e/0x1f0, xfs_finobt block 0x8 
[  232.183531][T10579] XFS (loop1): Unmount and run xfs_repair
[  232.185595][T10579] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  232.188055][T10579] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  232.190712][T10579] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  232.193833][T10579] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  232.196752][T10579] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  232.200468][T10579] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  232.203576][T10579] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  232.206749][T10579] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  232.209571][T10579] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  232.212809][T10579] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x8 len 8 error 117
[  232.231334][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.241086][ T5848] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  232.375125][T10589] macsec1: entered promiscuous mode
[  232.733513][T10596] loop3: detected capacity change from 0 to 32768
[  232.753922][T10596] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  232.815196][ T9468] ocfs2: Unmounting device (7,3) on (node local)
[  232.957740][T10605] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  233.207399][T10607] loop3: detected capacity change from 0 to 32768
[  233.213111][T10607] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1810 (10607)
[  233.222465][T10607] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  233.226361][T10607] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  233.237077][T10607] BTRFS info (device loop3): using free-space-tree
[  233.360956][ T9468] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  233.817038][T10641] loop3: detected capacity change from 0 to 47
[  233.936595][   T51] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  234.086394][   T51] usb 2-1: Using ep0 maxpacket: 8
[  234.098222][   T51] usb 2-1: config 32 has an invalid descriptor of length 0, skipping remainder of the config
[  234.102457][   T51] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  234.105922][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.123429][   T51] hub 2-1:32.0: bad descriptor, ignoring hub
[  234.125871][   T51] hub 2-1:32.0: probe with driver hub failed with error -5
[  234.152419][T10643] loop3: detected capacity change from 0 to 32768
[  234.162184][T10643] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1820 (10643)
[  234.192677][T10643] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.196860][T10643] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  234.200384][T10643] BTRFS info (device loop3): disk space caching is enabled
[  234.203443][T10643] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  234.252516][T10643] BTRFS info (device loop3): rebuilding free space tree
[  234.272883][T10643] BTRFS info (device loop3): disabling free space tree
[  234.275682][T10643] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  234.282072][T10643] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  234.403433][ T9468] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  234.677988][   T10] usb 2-1: reset high-speed USB device number 30 using dummy_hcd
[  234.690871][T10669] pim6reg: entered allmulticast mode
[  234.695093][T10669] netlink: 'syz.3.1824': attribute type 10 has an invalid length.
[  234.712210][T10669] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  234.716197][T10669] team0: Failed to send options change via netlink (err -105)
[  234.719090][T10669] team0: Port device netdevsim0 added
[  234.761505][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1825'.
[  234.765023][T10671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1825'.
[  234.809942][T10673] loop3: detected capacity change from 0 to 256
[  234.825033][T10673] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  234.830441][T10673] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  235.291052][T10690] loop3: detected capacity change from 0 to 256
[  235.300543][T10690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  235.516407][T10700] loop3: detected capacity change from 0 to 4096
[  235.533301][T10701] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.542898][T10700] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[  235.549815][T10700] Remounting filesystem read-only
[  235.552066][T10700] NILFS error (device loop3): nilfs_readdir: bad page in #2
[  235.629666][T10705] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1840'.
[  235.633060][T10705] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1840'.
[  235.676339][T10707] futex_wake_op: syz.1.1842 tries to shift op by 36; fix this program
[  235.687587][   T51] usb 2-1: USB disconnect, device number 30
[  235.934011][T10719] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  236.262394][T10735] CIFS: Unable to determine destination address
[  237.325668][T10740] loop3: detected capacity change from 0 to 4096
[  237.354021][T10740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.381058][T10740] Quota error (device loop3): do_check_range: Getting block 327682 out of range 1-5
[  237.401799][T10740] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  237.417508][T10740] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1857: Failed to acquire dquot type 1
[  237.430238][T10740] Quota error (device loop3): do_check_range: Getting block 327682 out of range 1-5
[  237.436827][T10740] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  237.439885][T10740] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1857: Failed to acquire dquot type 1
[  237.474001][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.513563][T10751] loop1: detected capacity change from 0 to 512
[  237.574131][T10751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  237.643349][T10751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  237.700057][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.860632][T10771] loop1: detected capacity change from 0 to 2048
[  237.872200][T10771] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  237.883118][T10771] UDF-fs: error (device loop1): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  237.886619][   T33] audit: type=1326 audit(237.845:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10772 comm="syz.3.1871" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe1ef58ebe9 code=0x0
[  238.018124][T10781] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1874'.
[  238.057060][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1875'.
[  238.870107][T10789] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid
[  239.510336][T10802] loop3: detected capacity change from 0 to 32768
[  239.807738][T10823] loop1: detected capacity change from 0 to 8192
[  239.971716][T10834] random: crng reseeded on system resumption
[  240.063666][T10839] loop1: detected capacity change from 0 to 4096
[  240.070101][T10839] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  240.105748][T10839] ntfs3(loop1): ino=19, mi_enum_attr
[  240.107596][T10839] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  240.119438][T10839] ntfs3(loop1): failed to convert "c46c" to iso8859-5
[  240.122092][T10839] ntfs3(loop1): ino=20, mi_enum_attr
[  240.199626][T10843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1903'.
[  240.597100][T10860] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  240.601643][T10860] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  240.683050][ T5880] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  240.768999][T10861] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  240.833522][ T5880] usb 2-1: Using ep0 maxpacket: 8
[  240.840314][ T5880] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  240.844769][ T5880] usb 2-1: config 6 has no interface number 0
[  240.846649][ T5880] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  240.854329][ T5880] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  240.864467][ T5880] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  240.867945][ T5880] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  240.875530][ T5880] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  240.878581][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.881306][ T5880] usb 2-1: Product: syz
[  240.884831][ T5880] usb 2-1: Manufacturer: syz
[  240.886255][ T5880] usb 2-1: SerialNumber: syz
[  240.897491][ T5880] hso 2-1:6.2: Failed to find BULK IN ep
[  241.096433][ T5880] usb 2-1: USB disconnect, device number 31
[  242.008155][T10880] loop1: detected capacity change from 0 to 16
[  242.016205][T10880] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  242.076935][T10882] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  242.146577][T10884] loop1: detected capacity change from 0 to 4096
[  242.150205][T10884] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  242.690403][T10895] block nbd1: shutting down sockets
[  242.886009][   T33] audit: type=1400 audit(242.857:191): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=10898 comm="syz.0.1928"
[  245.225517][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1946'.
[  245.275569][T10944] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  245.298041][T10937] netlink: 'syz.1.1945': attribute type 13 has an invalid length.
[  245.311861][T10937] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  247.225476][T10975] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1960'.
[  248.455732][T11007] netlink: 'syz.0.1974': attribute type 7 has an invalid length.
[  248.518973][T11007] : entered promiscuous mode
[  249.302744][T11013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1977'.
[  250.657538][T11088] loop3: detected capacity change from 0 to 1024
[  250.679451][T11088] EXT4-fs: Ignoring removed orlov option
[  250.690406][T11088] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  250.693415][T11088] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  250.707110][T11088] EXT4-fs (loop3): invalid journal inode
[  250.712243][T11088] EXT4-fs (loop3): can't get journal size
[  250.725863][T11088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  251.534572][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.713556][T11113] loop3: detected capacity change from 0 to 40427
[  251.716662][T11113] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  251.719241][T11113] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  251.722254][T11113] F2FS-fs (loop3): build fault injection rate: 2
[  251.724798][T11113] F2FS-fs (loop3): build fault injection type: 0x6
[  251.728184][T11113] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  251.732240][T11113] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  251.735452][T11113] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  251.738874][T11113] F2FS-fs (loop3): invalid crc value
[  251.742018][T11113] F2FS-fs (loop3): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4429/0x6ff0
[  251.745464][T11113] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  251.969611][T11118] bond1: entered promiscuous mode
[  251.972035][T11118] bond1: entered allmulticast mode
[  251.974814][T11118] 8021q: adding VLAN 0 to HW filter on device bond1
[  252.380293][T11140] loop3: detected capacity change from 0 to 4096
[  252.384527][T11140] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  253.938872][T11195] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2051'.
[  253.942354][T11195] netlink: 'syz.0.2051': attribute type 7 has an invalid length.
[  253.955324][T11195] netlink: 'syz.0.2051': attribute type 8 has an invalid length.
[  253.959233][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2051'.
[  254.230113][T11214] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2060'.
[  255.189881][T11222] loop3: detected capacity change from 0 to 512
[  255.193281][T11222] EXT4-fs: Ignoring removed i_version option
[  255.209935][T11222] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  255.223445][T11222] EXT4-fs (loop3): 1 truncate cleaned up
[  255.227698][T11222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.731255][   T33] audit: type=1804 audit(255.634:192): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2062" name="/newroot/221/bus/bus" dev="loop3" ino=18 res=1 errno=0
[  255.732896][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.742802][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  256.555151][ T5828] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  256.707104][ T5828] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  256.711642][ T5828] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  256.715788][ T5828] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  256.719555][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.727938][T11231] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  256.734663][ T5828] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  256.944014][ T5828] usb 2-1: USB disconnect, device number 32
[  258.261263][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  259.276191][T11272] loop3: detected capacity change from 0 to 256
[  259.279955][T11272] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  259.293736][T11272] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  259.308285][T11272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb62de5b7, utbl_chksum : 0xe619d30d)
[  259.661839][T11290] netlink: 495 bytes leftover after parsing attributes in process `syz.3.2087'.
[  261.410221][ T5880] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  261.571438][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  261.577621][ T5880] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  261.581656][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  261.590322][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  261.612215][ T5880] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  261.618782][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.621338][ T5880] usb 2-1: Product: syz
[  261.626364][ T5880] usb 2-1: Manufacturer: syz
[  261.627888][ T5880] usb 2-1: SerialNumber: syz
[  261.634738][ T5880] usb 2-1: config 0 descriptor??
[  261.640970][T11311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  261.654107][ T5880] usb 2-1: ucan: probing device on interface #0
[  261.656268][ T5880] usb 2-1: ucan: invalid endpoint configuration
[  261.658225][ T5880] usb 2-1: ucan: probe failed; try to update the device firmware
[  261.852023][ T5880] usb 2-1: USB disconnect, device number 33
[  261.856480][T11319] loop3: detected capacity change from 0 to 8
[  261.888643][T11319] SQUASHFS error: lzo decompression failed, data probably corrupt
[  261.891242][T11319] SQUASHFS error: Failed to read block 0x91: -5
[  261.900994][T11319] SQUASHFS error: Unable to read metadata cache entry [8f]
[  261.904121][T11319] SQUASHFS error: Unable to read inode 0x11f
[  262.090035][T11326] loop3: detected capacity change from 0 to 8
[  262.136127][T11326] SQUASHFS error: xz decompression failed, data probably corrupt
[  262.138637][T11326] SQUASHFS error: Failed to read block 0x108: -5
[  262.140615][T11326] SQUASHFS error: Unable to read metadata cache entry [106]
[  262.155215][T11326] SQUASHFS error: Unable to read inode 0x11f
[  262.332263][T11329] 9pnet_fd: p9_fd_create_tcp (11329): problem connecting socket to 127.0.0.1
[  262.359950][T11326] loop3: detected capacity change from 0 to 1024
[  262.414622][T11326] hfsplus: Bad value for 'gid'
[  263.781489][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  263.797901][T11351] loop3: detected capacity change from 0 to 32768
[  263.810380][T11351] jfs_lookup: iget failed on inum 4
[  263.820397][T11351] jfs_lookup: iget failed on inum 4
[  263.874284][T11364] tipc: Started in network mode
[  263.876250][T11364] tipc: Node identity 5238ab5016b3, cluster identity 4711
[  263.879276][T11364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  263.884741][T11364] syzkaller0: entered promiscuous mode
[  263.886712][T11364] syzkaller0: entered allmulticast mode
[  263.909052][T11364] tipc: Resetting bearer <eth:syzkaller0>
[  263.931145][T11363] tipc: Resetting bearer <eth:syzkaller0>
[  263.948268][   T10] usb 2-1: Using ep0 maxpacket: 16
[  263.953111][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.954016][T11363] tipc: Disabling bearer <eth:syzkaller0>
[  263.956948][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  263.964565][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  263.967606][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  263.970626][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  263.976602][   T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  263.979887][   T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  263.983036][   T10] usb 2-1: Manufacturer: syz
[  263.989308][   T10] usb 2-1: config 0 descriptor??
[  264.074594][T11370] loop3: detected capacity change from 0 to 1024
[  264.108912][T11370] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.123936][T11370] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.2122: missing EA_INODE flag
[  264.137907][T11370] EXT4-fs (loop3): Remounting filesystem read-only
[  264.159812][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.273330][   T10] rc_core: IR keymap rc-hauppauge not found
[  264.275927][   T10] Registered IR keymap rc-empty
[  264.278469][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.301385][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.326790][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  264.333332][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  264.339818][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.350321][T11379] loop3: detected capacity change from 0 to 32768
[  264.363156][T11379] (syz.3.2123,11379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  264.364814][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.368980][T11379] (syz.3.2123,11379,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  264.385258][T11379] JBD2: Ignoring recovery information on journal
[  264.401500][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.422741][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.430755][T11379] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  264.441442][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.461223][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.484391][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.501275][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.522971][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.539742][ T9468] ocfs2: Unmounting device (7,3) on (node local)
[  264.541288][   T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  264.577222][   T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  264.580909][   T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  264.696049][   T10] usb 2-1: USB disconnect, device number 34
[  264.980347][T11398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2130'.
[  265.153531][T11400] loop3: detected capacity change from 0 to 32768
[  265.166328][T11400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2131 (11400)
[  265.304917][T11400] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.308953][T11400] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  265.312613][T11400] BTRFS info (device loop3): using free-space-tree
[  265.393439][T11415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2135'.
[  265.397168][T11415] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  265.784301][ T9468] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  266.186483][T11443] loop3: detected capacity change from 0 to 1764
[  266.481777][T11449] loop3: detected capacity change from 0 to 32768
[  266.491587][T11449] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  266.512931][T11449] XFS (loop3): Ending clean mount
[  266.517708][T11449] XFS (loop3): Quotacheck needed: Please wait.
[  266.553975][T11449] XFS (loop3): Quotacheck: Done.
[  266.590191][T11470] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2152'.
[  266.592944][ T9468] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  267.059637][T11494] loop3: detected capacity change from 0 to 32768
[  267.120655][ T5828] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  267.271749][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.276125][ T5828] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.282285][ T5828] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  267.285854][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.291385][ T5828] usb 2-1: config 0 descriptor??
[  267.599967][T11500] bridge_slave_0: left allmulticast mode
[  267.602030][T11500] bridge_slave_0: left promiscuous mode
[  267.606074][T11500] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.624667][T11500] bridge_slave_1: left allmulticast mode
[  267.627166][T11500] bridge_slave_1: left promiscuous mode
[  267.631966][T11500] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.665243][T11500] bond0: (slave bond_slave_0): Releasing backup interface
[  267.676455][T11500] bond0: (slave bond_slave_1): Releasing backup interface
[  267.698890][T11500] team0: Port device team_slave_0 removed
[  267.713019][ T5828] hid_mf 0003:0079:1846.0012: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0
[  267.721253][T11500] team0: Port device team_slave_1 removed
[  267.725921][ T5828] hid_mf 0003:0079:1846.0012: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  267.732309][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.735930][T11500] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.744622][T11500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.749358][T11500] batman_adv: batadv0: Removing interface: batadv_slave_1
[  267.767365][T11500] team0: Port device netdevsim0 removed
[  267.918279][ T5900] usb 2-1: USB disconnect, device number 35
[  268.699027][ T5880] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  268.851228][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.855042][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  268.860368][ T5880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  268.863797][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.869662][ T5880] usb 2-1: config 0 descriptor??
[  269.281699][ T5880] kovaplus 0003:1E7D:2D50.0013: item fetching failed at offset 2/5
[  269.285473][ T5880] kovaplus 0003:1E7D:2D50.0013: parse failed
[  269.288056][ T5880] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -22
[  269.480872][ T5900] usb 2-1: USB disconnect, device number 36
[  270.154394][T11518] netlink: 'syz.0.2173': attribute type 1 has an invalid length.
[  270.566004][T11533] loop3: detected capacity change from 0 to 4096
[  270.599792][T11533] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  270.604968][T11533] ntfs3(loop3): $Secure::$SDH is corrupted.
[  270.607323][T11533] ntfs3(loop3): Failed to initialize $Secure (-22).
[  270.993350][T11556] overlayfs: failed to decode file handle (len=5, type=0, flags=0, err=-22)
[  271.435280][T11559] loop3: detected capacity change from 0 to 16
[  271.462455][T11559] erofs (device loop3): mounted with root inode @ nid 36.
[  271.474163][T11559] erofs (device loop3): read error -95 @ 8200 of nid 36
[  271.862378][T11574] netlink: 'syz.1.2196': attribute type 21 has an invalid length.
[  271.864823][T11574] netlink: 'syz.1.2196': attribute type 15 has an invalid length.
[  271.899334][T11574] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2196'.
[  271.907672][T11574] IPv6: NLM_F_CREATE should be specified when creating new route
[  271.924137][T11574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  271.926871][T11574] IPv6: NLM_F_CREATE should be set when creating new route
[  271.929825][T11574] IPv6: NLM_F_CREATE should be set when creating new route
[  271.932686][T11574] IPv6: NLM_F_CREATE should be set when creating new route
[  272.156210][   T33] audit: type=1326 audit(272.132:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.163690][   T33] audit: type=1326 audit(272.132:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.171117][   T33] audit: type=1326 audit(272.142:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.180226][   T33] audit: type=1326 audit(272.142:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.186835][   T33] audit: type=1326 audit(272.142:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.193410][   T33] audit: type=1326 audit(272.152:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.202270][   T33] audit: type=1326 audit(272.152:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.209244][   T33] audit: type=1326 audit(272.152:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.216682][   T33] audit: type=1326 audit(272.162:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.235831][   T33] audit: type=1326 audit(272.212:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11584 comm="syz.1.2201" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdefc58ebe9 code=0x7ffc0000
[  272.736669][T11622] netlink: 'syz.1.2218': attribute type 12 has an invalid length.
[  272.741048][T11622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2218'.
[  272.828938][T11628] loop3: detected capacity change from 0 to 512
[  272.832964][T11628] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  272.845940][T11628] EXT4-fs (loop3): 1 truncate cleaned up
[  272.850209][T11628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.882904][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.111494][T11645] netlink: 'syz.3.2229': attribute type 2 has an invalid length.
[  273.316976][   T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  273.699380][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  273.702813][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  273.707591][   T10] usb 2-1: config 1 has an invalid interface number: 130 but max is 0
[  273.710807][   T10] usb 2-1: config 1 has no interface number 0
[  273.713116][   T10] usb 2-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  273.717797][   T10] usb 2-1: config 1 interface 130 has no altsetting 0
[  273.722948][   T10] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac
[  273.726352][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.729930][   T10] usb 2-1: Product: syz
[  273.731638][   T10] usb 2-1: Manufacturer: syz
[  273.733384][   T10] usb 2-1: SerialNumber: syz
[  273.739881][T11640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  273.876438][ T5857] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  273.876773][ T5235] Bluetooth: hci3: command 0x1003 tx timeout
[  273.963699][   T10] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware
[  273.984806][   T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  273.989809][   T10] dib0700: firmware download failed at 7 with -71
[  274.001669][   T10] usb 2-1: USB disconnect, device number 37
[  274.072829][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2234'.
[  274.122915][T11657] nbd: socks must be embedded in a SOCK_ITEM attr
[  274.134305][ T6378] block nbd64: NBD_DISCONNECT
[  274.161850][T11662] loop3: detected capacity change from 0 to 512
[  274.193895][T11662] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  274.209411][T11662] EXT4-fs (loop3): orphan cleanup on readonly fs
[  274.212285][T11662] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2236: bad orphan inode 15
[  274.221025][T11662] ext4_test_bit(bit=14, block=18) = 1
[  274.223112][T11662] is_bad_inode(inode)=0
[  274.224791][T11662] NEXT_ORPHAN(inode)=1023
[  274.226650][T11662] max_ino=32
[  274.227970][T11662] i_nlink=0
[  274.236103][T11662] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.2236: corrupted xattr block 19: e_value size too large
[  274.244781][T11662] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  274.250637][T11662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  274.287516][ T9468] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.374674][T11669] loop3: detected capacity change from 0 to 128
[  274.385307][T11669] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  274.393158][T11669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  274.702668][T11691] overlayfs: failed to resolve './cgroup': -2
[  275.416220][T11723] loop3: detected capacity change from 0 to 32768
[  275.437117][T11723] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.461339][T11723] XFS (loop3): Ending clean mount
[  275.469351][T11723] XFS (loop3): Quotacheck needed: Please wait.
[  275.503205][T11723] XFS (loop3): Quotacheck: Done.
[  275.586423][ T9468] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  275.918815][T11743] program syz.1.2269 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  276.070209][T11753] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  276.070209][T11753] The task syz.3.2270 (11753) triggered the difference, watch for misbehavior.
[  276.182014][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'.
[  276.185802][T11765] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2279'.
[  277.041848][T11788] loop3: detected capacity change from 0 to 256
[  277.051894][T11788] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  277.067181][T11788] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  277.084686][T11788] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  277.144073][T11788] loop3: detected capacity change from 256 to 0
[  277.159649][T11788] bio_check_eod: 13 callbacks suppressed
[  277.159674][T11788] syz.3.2288: attempt to access beyond end of device
[  277.159674][T11788] loop3: rw=2049, sector=168, nr_sectors = 1 limit=0
[  277.169562][T11788] Buffer I/O error on dev loop3, logical block 168, lost sync page write
[  277.191612][ T9468] syz-executor: attempt to access beyond end of device
[  277.191612][ T9468] loop3: rw=524288, sector=160, nr_sectors = 1 limit=0
[  277.198836][ T9468] syz-executor: attempt to access beyond end of device
[  277.198836][ T9468] loop3: rw=524288, sector=161, nr_sectors = 1 limit=0
[  277.204360][ T9468] syz-executor: attempt to access beyond end of device
[  277.204360][ T9468] loop3: rw=524288, sector=162, nr_sectors = 1 limit=0
[  277.212857][ T9468] syz-executor: attempt to access beyond end of device
[  277.212857][ T9468] loop3: rw=524288, sector=163, nr_sectors = 1 limit=0
[  277.219065][ T9468] syz-executor: attempt to access beyond end of device
[  277.219065][ T9468] loop3: rw=524288, sector=164, nr_sectors = 1 limit=0
[  277.223611][ T9468] syz-executor: attempt to access beyond end of device
[  277.223611][ T9468] loop3: rw=524288, sector=165, nr_sectors = 1 limit=0
[  277.229658][ T9468] syz-executor: attempt to access beyond end of device
[  277.229658][ T9468] loop3: rw=524288, sector=166, nr_sectors = 1 limit=0
[  277.234348][ T9468] syz-executor: attempt to access beyond end of device
[  277.234348][ T9468] loop3: rw=524288, sector=167, nr_sectors = 1 limit=0
[  277.262290][ T9468] syz-executor: attempt to access beyond end of device
[  277.262290][ T9468] loop3: rw=0, sector=160, nr_sectors = 1 limit=0
[  277.919315][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  277.928108][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  277.932322][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  277.937001][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  277.940055][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  278.077769][T11803] chnl_net:caif_netlink_parms(): no params data found
[  278.109106][T11816] MINIX-fs: unable to read superblock
[  278.152462][T11803] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.154916][T11803] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.157566][T11803] bridge_slave_0: entered allmulticast mode
[  278.160246][T11803] bridge_slave_0: entered promiscuous mode
[  278.164006][T11803] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.166853][T11803] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.169226][T11803] bridge_slave_1: entered allmulticast mode
[  278.172148][T11803] bridge_slave_1: entered promiscuous mode
[  278.196671][T11803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.207069][T11803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.232873][T11803] team0: Port device team_slave_0 added
[  278.237895][T11803] team0: Port device team_slave_1 added
[  278.270944][T11803] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.273811][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.285261][T11803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.291123][T11803] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.293951][T11803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.305159][T11803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.356175][T11803] hsr_slave_0: entered promiscuous mode
[  278.359339][T11803] hsr_slave_1: entered promiscuous mode
[  278.362214][T11803] debugfs: 'hsr0' already exists in 'hsr'
[  278.365238][T11803] Cannot create hsr debugfs directory
[  278.565772][T11803] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  278.573772][T11803] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  278.581497][T11803] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  278.591077][T11803] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  278.665052][ T5900] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  278.681603][T11803] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.696401][T11803] 8021q: adding VLAN 0 to HW filter on device team0
[  278.706050][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.709135][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  278.719282][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.722025][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  278.836808][ T5900] usb 2-1: Using ep0 maxpacket: 32
[  278.844278][ T5900] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  278.847908][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.851203][ T5900] usb 2-1: Product: syz
[  278.852872][ T5900] usb 2-1: Manufacturer: syz
[  278.858527][ T5900] usb 2-1: SerialNumber: syz
[  278.863789][T11803] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.028983][T11803] veth0_vlan: entered promiscuous mode
[  279.037136][T11803] veth1_vlan: entered promiscuous mode
[  279.056301][T11803] veth0_macvtap: entered promiscuous mode
[  279.060975][T11803] veth1_macvtap: entered promiscuous mode
[  279.076782][ T5900] usb 2-1: palm_os_4_probe - error -71 getting connection info
[  279.081126][ T5900] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  279.083052][T11803] batman_adv: batadv0: Interface activated: batadv_slave_0
[  279.090313][T11803] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.101935][ T5878] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.111514][ T5900] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  279.115377][ T5878] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.118791][ T5878] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.131290][ T5900] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  279.137725][ T5900] usb 2-1: USB disconnect, device number 38
[  279.140435][ T5878] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.150047][ T5900] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  279.158464][ T5900] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  279.162786][ T5900] visor 2-1:1.0: device disconnected
[  279.223174][ T4548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.230020][ T4548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.256494][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.259036][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.754496][ T5880] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  279.904128][ T5880] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  279.908438][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.911943][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.918130][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.921270][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.924781][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.928259][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.932997][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.940654][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.946033][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.949988][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.959043][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.963927][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.968302][ T5235] Bluetooth: hci2: command tx timeout
[  279.969740][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.975026][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.979517][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.984916][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  279.988631][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  279.992749][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  279.997994][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.001521][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  280.005957][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  280.009852][ T5880] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  280.013621][ T5880] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  280.018272][ T5880] usb 5-1: config 0 interface 0 has no altsetting 0
[  280.022915][ T5880] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  280.026105][ T5880] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  280.029320][ T5880] usb 5-1: Product: syz
[  280.031019][ T5880] usb 5-1: Manufacturer: syz
[  280.032864][ T5880] usb 5-1: SerialNumber: syz
[  280.038124][ T5880] usb 5-1: config 0 descriptor??
[  280.049475][ T5880] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  280.413289][ T5900] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  280.563814][ T5900] usb 2-1: Using ep0 maxpacket: 8
[  280.568052][ T5900] usb 2-1: config 0 has an invalid interface number: 94 but max is 0
[  280.571224][ T5900] usb 2-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config
[  280.575707][ T5900] usb 2-1: config 0 has no interface number 0
[  280.578277][ T5900] usb 2-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd
[  280.582849][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.589888][ T5900] usb 2-1: config 0 descriptor??
[  280.609276][ T5900] bfusb 2-1:0.94: probe with driver bfusb failed with error -5
[  280.831493][ T5900] usb 2-1: USB disconnect, device number 39
[  282.032732][ T5235] Bluetooth: hci2: command tx timeout
[  282.523064][   T51] usb 5-1: USB disconnect, device number 2
[  282.559419][   T51] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  282.910849][T11923] tmpfs: Bad value for 'mpol'
[  282.953476][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'.
[  282.956279][T11925] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2340'.
[  282.978999][T11925] netlink: 21 bytes leftover after parsing attributes in process `syz.1.2340'.
[  283.057191][T11921] loop4: detected capacity change from 0 to 40427
[  283.069328][T11921] F2FS-fs (loop4): Image doesn't support compression
[  283.085148][T11921] F2FS-fs (loop4): invalid crc value
[  283.092780][T11921] F2FS-fs (loop4): SIT is corrupted node# 2 vs 7
[  283.109938][T11921] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  283.551610][ T8128] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  283.716687][ T8128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.721017][ T8128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.725484][ T8128] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[  283.728926][ T8128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.734761][ T8128] usb 2-1: config 0 descriptor??
[  284.112056][ T5235] Bluetooth: hci2: command tx timeout
[  284.163562][ T8128] logitech 0003:046D:C293.0014: unbalanced collection at end of report description
[  284.172874][ T8128] logitech 0003:046D:C293.0014: parse failed
[  284.176317][ T8128] logitech 0003:046D:C293.0014: probe with driver logitech failed with error -22
[  284.398432][ T8128] usb 2-1: USB disconnect, device number 40
[  284.496837][T11964] AppArmor: change_hat: Invalid input, NULL hat and NULL magic
[  284.841279][   T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  284.986059][T11972] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  284.988577][T11972] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  285.000191][T11972] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  285.003127][T11972] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  285.005971][T11972] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  285.008885][T11972] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  285.013041][T11972] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  285.016048][T11972] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  285.018659][T11972] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  285.021832][T11972] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  285.024429][T11972] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  285.034177][   T51] usb 5-1: config 1 has an invalid descriptor of length 126, skipping remainder of the config
[  285.038186][   T51] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  285.063624][   T51] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  285.067162][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  285.070467][   T51] usb 5-1: SerialNumber: syz
[  285.288974][   T51] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  285.311562][   T51] usb 5-1: USB disconnect, device number 3
[  285.472005][T11984] gretap0: entered promiscuous mode
[  285.529784][T11990] binder: 11989:11990 ioctl c0306201 2000000001c0 returned -22
[  286.184824][T12015] loop4: detected capacity change from 0 to 32768
[  286.193543][ T5235] Bluetooth: hci2: command tx timeout
[  286.241164][T12015] JBD2: Ignoring recovery information on journal
[  286.281035][T12015] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  286.309719][T12015] OCFS2: ERROR (device loop4): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  286.309826][T12015] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  286.321737][T12015] OCFS2: File system is now read-only.
[  286.323598][T12015] (syz.4.2381,12015,1):ocfs2_calc_xattr_init:638 ERROR: status = -117
[  286.327395][T12015] (syz.4.2381,12015,1):ocfs2_mknod:337 ERROR: status = -117
[  286.330503][T12015] (syz.4.2381,12015,1):ocfs2_mknod:505 ERROR: status = -117
[  286.334374][T12015] (syz.4.2381,12015,1):ocfs2_create:678 ERROR: status = -117
[  286.459583][T11803] ocfs2: Unmounting device (7,4) on (node local)
[  287.729613][T12049] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.2390'.
[  287.761735][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  287.761749][   T33] audit: type=1326 audit(287.750:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12050 comm="syz.1.2391" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdefc58ebe9 code=0x0
[  288.719067][   T51] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  288.882328][   T51] usb 5-1: Using ep0 maxpacket: 16
[  288.886306][   T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.891628][   T51] usb 5-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[  288.895208][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.904525][   T51] usb 5-1: config 0 descriptor??
[  289.059101][ T5828] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  289.210830][ T5828] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00
[  289.214171][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.221716][ T5828] usb 2-1: config 0 descriptor??
[  289.525146][   T51] usb 5-1: USB disconnect, device number 4
[  289.634599][ T5828] uclogic 0003:28BD:0055.0016: interface is invalid, ignoring
[  289.839117][   T51] usb 2-1: USB disconnect, device number 41
[  290.072744][T12082] loop4: detected capacity change from 0 to 512
[  290.104596][T12082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.124207][T12082] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.2406: corrupted xattr block 19: overlapping e_value 
[  290.133151][T12082] EXT4-fs (loop4): Remounting filesystem read-only
[  290.156432][T11803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.400814][T12087] loop4: detected capacity change from 0 to 32768
[  290.403909][T12087] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  290.484433][T12093] loop4: detected capacity change from 0 to 4096
[  290.520034][T12094] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  290.664310][T12101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2413'.
[  290.834723][T12114] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  291.139133][T12131] loop4: detected capacity change from 0 to 4096
[  292.161560][T12148] loop4: detected capacity change from 0 to 8
[  292.193536][T12148] SQUASHFS error: Failed to read block 0x738: -5
[  292.204761][T12148] SQUASHFS error: Unable to read metadata cache entry [736]
[  292.264418][T12151] netlink: 'syz.1.2436': attribute type 12 has an invalid length.
[  292.601008][ T5900] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  292.769569][ T5900] usb 5-1: unable to get BOS descriptor or descriptor too short
[  292.773986][ T5900] usb 5-1: config 4 has an invalid interface number: 4 but max is 0
[  292.777497][ T5900] usb 5-1: config 4 has no interface number 0
[  292.779882][ T5900] usb 5-1: config 4 interface 4 has no altsetting 0
[  292.785026][ T5900] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=53.4f
[  292.789047][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.792058][ T5900] usb 5-1: Product: syz
[  292.793805][ T5900] usb 5-1: Manufacturer: syz
[  292.795622][ T5900] usb 5-1: SerialNumber: syz
[  293.008753][ T5900] sierra 5-1:4.4: Sierra USB modem converter detected
[  293.016671][ T5900] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  293.022927][ T5900] usb 5-1: USB disconnect, device number 5
[  293.034277][ T5900] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  293.038247][ T5900] sierra 5-1:4.4: device disconnected
[  293.160856][T12168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'.
[  293.994851][T12184] loop4: detected capacity change from 0 to 512
[  293.998373][T12184] EXT4-fs: Ignoring removed oldalloc option
[  294.007911][T12184] EXT4-fs (loop4): 1 truncate cleaned up
[  294.018211][T12184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  294.045891][T12184] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2451: invalid indirect mapped block 234881024 (level 0)
[  294.058317][T12184] EXT4-fs (loop4): Remounting filesystem read-only
[  294.080261][T11803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  295.355979][T12211] loop4: detected capacity change from 0 to 32768
[  295.360095][T12211] (syz.4.2463,12211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  295.364513][T12211] (syz.4.2463,12211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  295.390778][T12211] JBD2: Ignoring recovery information on journal
[  295.413865][T12211] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  295.421877][T12211] (syz.4.2463,12211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  295.482922][T12211] (syz.4.2463,12211,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  295.487880][T12211] (syz.4.2463,12211,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  295.492130][T12211] (syz.4.2463,12211,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  295.495810][T12211] (syz.4.2463,12211,1):ocfs2_quota_read:201 ERROR: status = -5
[  295.506287][T12211] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  295.510509][T12211] (syz.4.2463,12211,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  295.564640][T11803] ocfs2: Unmounting device (7,4) on (node local)
[  296.084824][ T5900] IPVS: starting estimator thread 0...
[  296.185928][T12236] IPVS: using max 40 ests per chain, 96000 per kthread
[  296.267306][T12231] loop4: detected capacity change from 0 to 32768
[  296.278918][T12231] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2470 (12231)
[  296.294590][T12231] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.298655][T12231] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  296.301303][T12231] BTRFS info (device loop4): using free-space-tree
[  296.361258][T11803] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  296.755151][   T51] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  296.905035][   T51] usb 5-1: Using ep0 maxpacket: 16
[  296.909369][   T51] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  296.912897][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.932262][   T51] usb 5-1: config 0 descriptor??
[  296.941277][   T51] gspca_main: sonixj-2.14.0 probing 0471:0327
[  297.089053][T12271] overlayfs: failed to resolve './file0': -2
[  297.395127][ T5828] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  297.545024][ T5828] usb 2-1: Using ep0 maxpacket: 8
[  297.551415][ T5828] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  297.554298][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.558181][ T5828] usb 2-1: Product: syz
[  297.559927][ T5828] usb 2-1: Manufacturer: syz
[  297.561806][ T5828] usb 2-1: SerialNumber: syz
[  297.570336][ T5828] usb 2-1: config 0 descriptor??
[  297.574437][ T5828] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  298.191484][ T5828] gspca_sonixj: reg_w1 err -71
[  298.193477][ T5828] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  298.203452][ T5828] usb 2-1: USB disconnect, device number 42
[  298.960428][   T51] gspca_sonixj: reg_r err -71
[  298.962369][   T51] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  298.983970][   T51] usb 5-1: USB disconnect, device number 6
[  300.089437][T12321] loop4: detected capacity change from 0 to 256
[  300.111703][T12321] MINIX-fs: mounting file system with errors, running fsck is recommended
[  301.972782][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2510'.
[  302.272809][T12351] loop4: detected capacity change from 0 to 32768
[  302.276150][T12351] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2509 (12351)
[  302.292987][T12351] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  302.296858][T12351] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  302.300430][T12351] BTRFS info (device loop4): using free-space-tree
[  302.569356][T11803] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  302.871900][T12390] syz.4.2520 (12390): /proc/12389/oom_adj is deprecated, please use /proc/12389/oom_score_adj instead.
[  303.080096][T12399] netlink: 'syz.0.2525': attribute type 1 has an invalid length.
[  303.083464][T12399] netlink: 'syz.0.2525': attribute type 4 has an invalid length.
[  303.089851][T12399] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2525'.
[  303.093257][T12399] NCSI netlink: No device for ifindex 3088861696
[  303.191669][T12403] loop4: detected capacity change from 0 to 1024
[  303.272970][T12403] loop4: detected capacity change from 0 to 2048
[  303.292172][T12403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  303.352614][T11803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  303.437343][   T51] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  303.616774][   T51] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  303.627710][   T51] usb 2-1: config 0 has no interface number 0
[  303.677591][   T51] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  303.693251][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.705402][   T51] usb 2-1: Product: syz
[  303.707344][   T51] usb 2-1: Manufacturer: syz
[  303.709340][   T51] usb 2-1: SerialNumber: syz
[  303.729546][   T51] usb 2-1: config 0 descriptor??
[  303.993512][T12418] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3946
[  304.070470][   T51] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  304.098433][T12420] loop4: detected capacity change from 0 to 1024
[  304.148487][   T51] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  304.167682][   T51] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  304.170996][ T4224] hfsplus: b-tree write err: -5, ino 4
[  304.178715][   T51] usb 2-1: media controller created
[  304.441680][   T51] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  304.550477][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2535'.
[  304.972251][   T51] usb 2-1: USB disconnect, device number 43
[  305.097208][T12438] loop4: detected capacity change from 0 to 512
[  305.106978][T12438] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2541: iget: bad extended attribute block 1
[  305.117947][T12438] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2541: couldn't read orphan inode 15 (err -117)
[  305.126561][T12438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  305.153895][T11803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.192753][T12442] loop4: detected capacity change from 0 to 512
[  305.208282][T12442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  305.243350][T11803] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.591323][T12467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  305.594172][T12467] IPv6: NLM_F_CREATE should be set when creating new route
[  305.819671][T12485] netlink: 'syz.1.2562': attribute type 1 has an invalid length.
[  305.822864][T12485] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2562'.
[  306.996554][T12507] loop4: detected capacity change from 0 to 32768
[  307.022199][T12507] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  307.038934][   T33] audit: type=1800 audit(563.033:205): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2571" name="file1" dev="loop4" ino=17058 res=0 errno=0
[  307.804538][T11803] ocfs2: Unmounting device (7,4) on (node local)
[  308.282884][T12529] vivid-000: disconnect
[  308.290895][T12529] vivid-000: reconnect
[  308.764307][T12537] netlink: 'syz.0.2584': attribute type 1 has an invalid length.
[  308.809360][T12537] bond0: (slave vcan0): The slave device specified does not support setting the MAC address
[  308.813328][T12537] bond0: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[  308.823006][T12537] bond0: (slave vcan0): making interface the new active one
[  308.826450][ T5857] Bluetooth: hci0: command 0x0c1a tx timeout
[  308.829383][T12537] bond0: (slave vcan0): Enslaving as an active interface with an up link
[  309.317893][T12561] loop4: detected capacity change from 0 to 2048
[  309.338127][T12561] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  309.471089][   T33] audit: type=1326 audit(565.463:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  309.481331][   T33] audit: type=1326 audit(565.463:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  309.491036][   T33] audit: type=1326 audit(565.483:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  309.501230][   T33] audit: type=1326 audit(565.483:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  309.513256][   T33] audit: type=1326 audit(565.483:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  309.532051][   T33] audit: type=1326 audit(565.483:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.4.2596" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f330cb8ebe9 code=0x7ffc0000
[  311.109594][T12593] netlink: 'syz.1.2607': attribute type 11 has an invalid length.
[  311.930373][T12607] loop4: detected capacity change from 0 to 32768
[  311.938587][T12607] JBD2: Ignoring recovery information on journal
[  311.963274][T12607] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  311.976658][T12607] 
[  311.977623][T12607] ======================================================
[  311.980063][T12607] WARNING: possible circular locking dependency detected
[  311.982474][T12607] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  311.985438][T12607] ------------------------------------------------------
[  311.988252][T12607] syz.4.2613/12607 is trying to acquire lock:
[  311.990295][T12607] ffff888118b54ee0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  311.993947][T12607] 
[  311.993947][T12607] but task is already holding lock:
[  311.996286][T12607] ffff888118b54f78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  311.999594][T12607] 
[  311.999594][T12607] which lock already depends on the new lock.
[  311.999594][T12607] 
[  312.003472][T12607] 
[  312.003472][T12607] the existing dependency chain (in reverse order) is:
[  312.006326][T12607] 
[  312.006326][T12607] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[  312.008875][T12607]        lock_acquire+0x120/0x360
[  312.010636][T12607]        down_read+0x46/0x2e0
[  312.012446][T12607]        ocfs2_init_acl+0x2f9/0x720
[  312.014175][T12607]        ocfs2_mknod+0x1321/0x2050
[  312.015922][T12607]        ocfs2_mkdir+0x191/0x440
[  312.017830][T12607]        vfs_mkdir+0x306/0x510
[  312.019605][T12607]        do_mkdirat+0x247/0x590
[  312.021442][T12607]        __x64_sys_mkdirat+0x87/0xa0
[  312.023424][T12607]        do_syscall_64+0xfa/0x3b0
[  312.025163][T12607]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.027451][T12607] 
[  312.027451][T12607] -> #3 (jbd2_handle){++++}-{0:0}:
[  312.029711][T12607]        lock_acquire+0x120/0x360
[  312.031348][T12607]        start_this_handle+0x1fa7/0x21c0
[  312.033123][T12607]        jbd2__journal_start+0x2c1/0x5b0
[  312.034909][T12607]        jbd2_journal_start+0x2a/0x40
[  312.036573][T12607]        ocfs2_start_trans+0x376/0x6d0
[  312.038285][T12607]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  312.040345][T12607]        ocfs2_dismount_volume+0x201/0x8d0
[  312.042659][T12607]        generic_shutdown_super+0x135/0x2c0
[  312.045017][T12607]        kill_block_super+0x44/0x90
[  312.046863][T12607]        deactivate_locked_super+0xbc/0x130
[  312.048801][T12607]        cleanup_mnt+0x425/0x4c0
[  312.050767][T12607]        task_work_run+0x1d4/0x260
[  312.052805][T12607]        exit_to_user_mode_loop+0xec/0x110
[  312.055085][T12607]        do_syscall_64+0x2bd/0x3b0
[  312.057104][T12607]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.059640][T12607] 
[  312.059640][T12607] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  312.062908][T12607]        lock_acquire+0x120/0x360
[  312.064908][T12607]        down_read+0x46/0x2e0
[  312.066505][T12607]        ocfs2_start_trans+0x36a/0x6d0
[  312.068213][T12607]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  312.070217][T12607]        ocfs2_dismount_volume+0x201/0x8d0
[  312.072221][T12607]        generic_shutdown_super+0x135/0x2c0
[  312.074558][T12607]        kill_block_super+0x44/0x90
[  312.076615][T12607]        deactivate_locked_super+0xbc/0x130
[  312.079000][T12607]        cleanup_mnt+0x425/0x4c0
[  312.080954][T12607]        task_work_run+0x1d4/0x260
[  312.082903][T12607]        exit_to_user_mode_loop+0xec/0x110
[  312.085188][T12607]        do_syscall_64+0x2bd/0x3b0
[  312.087248][T12607]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.089790][T12607] 
[  312.089790][T12607] -> #1 (sb_internal#3){.+.+}-{0:0}:
[  312.092757][T12607]        lock_acquire+0x120/0x360
[  312.094793][T12607]        ocfs2_start_trans+0x26b/0x6d0
[  312.096977][T12607]        ocfs2_setattr+0x969/0x1b40
[  312.099068][T12607]        notify_change+0xb36/0xe40
[  312.101127][T12607]        do_truncate+0x1a4/0x220
[  312.103098][T12607]        do_ftruncate+0x489/0x540
[  312.105134][T12607]        __x64_sys_ftruncate+0x92/0xf0
[  312.107310][T12607]        do_syscall_64+0xfa/0x3b0
[  312.109345][T12607]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.111859][T12607] 
[  312.111859][T12607] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  312.115346][T12607]        validate_chain+0xb9b/0x2140
[  312.117445][T12607]        __lock_acquire+0xab9/0xd20
[  312.119529][T12607]        lock_acquire+0x120/0x360
[  312.121557][T12607]        down_write+0x96/0x1f0
[  312.123418][T12607]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.125977][T12607]        ocfs2_xattr_set+0x595/0x11f0
[  312.128122][T12607]        ocfs2_set_acl+0x701/0x7b0
[  312.130083][T12607]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  312.132160][T12607]        vfs_set_acl+0x887/0xb00
[  312.134019][T12607]        filename_setxattr+0x2e0/0x600
[  312.136064][T12607]        path_setxattrat+0x364/0x3a0
[  312.138014][T12607]        __x64_sys_setxattr+0xbc/0xe0
[  312.140004][T12607]        do_syscall_64+0xfa/0x3b0
[  312.141907][T12607]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.144326][T12607] 
[  312.144326][T12607] other info that might help us debug this:
[  312.144326][T12607] 
[  312.148100][T12607] Chain exists of:
[  312.148100][T12607]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  312.148100][T12607] 
[  312.153196][T12607]  Possible unsafe locking scenario:
[  312.153196][T12607] 
[  312.156098][T12607]        CPU0                    CPU1
[  312.158163][T12607]        ----                    ----
[  312.160216][T12607]   lock(&oi->ip_xattr_sem);
[  312.162064][T12607]                                lock(jbd2_handle);
[  312.164602][T12607]                                lock(&oi->ip_xattr_sem);
[  312.167413][T12607]   lock(&ocfs2_file_ip_alloc_sem_key);
[  312.169622][T12607] 
[  312.169622][T12607]  *** DEADLOCK ***
[  312.169622][T12607] 
[  312.172819][T12607] 3 locks held by syz.4.2613/12607:
[  312.174876][T12607]  #0: ffff88811f72e428 (sb_writers#21){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  312.178524][T12607]  #1: ffff888118b55240 (&type->i_mutex_dir_key#14){++++}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  312.182550][T12607]  #2: ffff888118b54f78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  312.186867][T12607] 
[  312.186867][T12607] stack backtrace:
[  312.189186][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.4.2613 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  312.189215][T12607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  312.189226][T12607] Call Trace:
[  312.189233][T12607]  <TASK>
[  312.189240][T12607]  dump_stack_lvl+0x189/0x250
[  312.189262][T12607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.189277][T12607]  ? __pfx__printk+0x10/0x10
[  312.189296][T12607]  ? print_lock_name+0xde/0x100
[  312.189316][T12607]  print_circular_bug+0x2ee/0x310
[  312.189332][T12607]  check_noncircular+0x134/0x160
[  312.189348][T12607]  validate_chain+0xb9b/0x2140
[  312.189363][T12607]  ? check_path+0x21/0x40
[  312.189378][T12607]  ? look_up_lock_class+0x74/0x170
[  312.189396][T12607]  ? register_lock_class+0x51/0x320
[  312.189418][T12607]  __lock_acquire+0xab9/0xd20
[  312.189440][T12607]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.189456][T12607]  lock_acquire+0x120/0x360
[  312.189473][T12607]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.189492][T12607]  ? ocfs2_xattr_set+0x40f/0x11f0
[  312.189511][T12607]  down_write+0x96/0x1f0
[  312.189530][T12607]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.189545][T12607]  ? __pfx_down_write+0x10/0x10
[  312.189567][T12607]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  312.189583][T12607]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  312.189599][T12607]  ? up_write+0x1c4/0x420
[  312.189612][T12607]  ? ocfs2_xattr_set+0x334/0x11f0
[  312.189629][T12607]  ocfs2_xattr_set+0x595/0x11f0
[  312.189652][T12607]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  312.189668][T12607]  ? do_raw_spin_unlock+0x4d/0x240
[  312.189718][T12607]  ? __lock_acquire+0xab9/0xd20
[  312.189746][T12607]  ? do_raw_spin_unlock+0x4d/0x240
[  312.189763][T12607]  ? _raw_spin_unlock+0x28/0x50
[  312.189779][T12607]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  312.189796][T12607]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  312.189810][T12607]  ocfs2_set_acl+0x701/0x7b0
[  312.189824][T12607]  ? __lock_acquire+0xab9/0xd20
[  312.189844][T12607]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  312.189858][T12607]  ? vfs_set_acl+0x3cd/0xb00
[  312.189874][T12607]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  312.189888][T12607]  ? evm_inode_set_acl+0xba/0x410
[  312.189905][T12607]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  312.189921][T12607]  ? down_write+0x162/0x1f0
[  312.189940][T12607]  ? __pfx_down_write+0x10/0x10
[  312.189955][T12607]  ? evm_revalidate_status+0x4f/0xb0
[  312.189969][T12607]  ? make_vfsuid+0x49/0xa0
[  312.189982][T12607]  ? inode_owner_or_capable+0xf1/0x1c0
[  312.189999][T12607]  vfs_set_acl+0x887/0xb00
[  312.190018][T12607]  filename_setxattr+0x2e0/0x600
[  312.190040][T12607]  ? __pfx_filename_setxattr+0x10/0x10
[  312.190059][T12607]  ? getname_flags+0x1e5/0x540
[  312.190072][T12607]  path_setxattrat+0x364/0x3a0
[  312.190089][T12607]  ? __pfx_path_setxattrat+0x10/0x10
[  312.190103][T12607]  ? do_futex+0x333/0x420
[  312.190126][T12607]  ? rcu_is_watching+0x15/0xb0
[  312.190139][T12607]  __x64_sys_setxattr+0xbc/0xe0
[  312.190160][T12607]  do_syscall_64+0xfa/0x3b0
[  312.190177][T12607]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.190195][T12607]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.190215][T12607]  ? exc_page_fault+0x9f/0xf0
[  312.190232][T12607]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  312.190246][T12607] RIP: 0033:0x7f330cb8ebe9
[  312.190260][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.190273][T12607] RSP: 002b:00007f330da8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  312.190287][T12607] RAX: ffffffffffffffda RBX: 00007f330cdb5fa0 RCX: 00007f330cb8ebe9
[  312.190297][T12607] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00
[  312.190306][T12607] RBP: 00007f330cc11e19 R08: 0000000000000000 R09: 0000000000000000
[  312.190315][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  312.190323][T12607] R13: 00007f330cdb6038 R14: 00007f330cdb5fa0 R15: 00007ffdf6328c38
[  312.190338][T12607]  </TASK>
[  312.407000][T11803] ocfs2: Unmounting device (7,4) on (node local)
[  316.988909][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.991544][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
12:46:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44b9b RBX=1ffff11026cc7f61 RCX=ffff88801cad8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900001ef7e0 RSP=ffffc900001ef660
R8 =ffffffff8fa37d37 R9 =1ffffffff1f46fa6 R10=dffffc0000000000 R11=fffffbfff1f46fa7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44b83 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f330cdb7dac CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f418e012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001466 RDI=0000000000001467 RBP=00000000000003f8 RSP=ffffc9000401eab0
R8 =ffff888107bc0237 R9 =1ffff11020f78046 R10=dffffc0000000000 R11=ffffffff854efc10
R12=dffffc0000000000 R13=ffffffff99af98e6 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efc8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f330da8b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a00 CR3=000000011d2d0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fdefc787498 00007fdefc787470 XMM03=00007fdefc7874a8 00007fdefc7874a0
XMM04=00007fdefd2ed100 00007fdefc787460 XMM05=00007fdefc787478 00007fdefc7874c0
XMM06=00007fdefc7874b8 00007fdefc7874b0 XMM07=00007fdefc7874a8 00007fdefc7874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fdefc612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
