last executing test programs:

1m28.362093092s ago: executing program 1 (id=118):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0x7, 0x9}, {0x0, 0x0, 0x10, 0x3, 0x4}, {0x0, 0x0, 0x8, 0x0, 0x4}, {0x0, 0x0, 0x28, 0x72}, {0x0, 0x0, 0x8, 0xff, 0x40}})

1m28.361863043s ago: executing program 1 (id=119):
futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0)
futex(&(0x7f000000cffc)=0x5, 0x3, 0x4000300, 0x0, &(0x7f0000000040)=0x7fffff5, 0x1000004)

1m27.45195931s ago: executing program 1 (id=123):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00')
writev(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)="ed", 0x1}], 0x1)

1m27.451656537s ago: executing program 1 (id=124):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})

1m27.369653702s ago: executing program 1 (id=125):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000240)={0x6, 0x1, 0x0, "e7f09842186bd7351a65254a872419e27e8ddf1e1c4429e87eb93f0844247b59", 0x32314d56})

1m27.101004743s ago: executing program 1 (id=130):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2)

1m26.982542747s ago: executing program 32 (id=130):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000000", 0x54}, {&(0x7f0000000480)="86d0f724", 0x4}], 0x2)

49.91175885s ago: executing program 2 (id=562):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0xf, @private0={0xfc, 0x0, '\x00', 0x1}, 0x405}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="b7", 0x1}], 0x1}}], 0x1, 0x20004801)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3b}}}, 0xffff, 0xffc0}, 0x90)

49.911505681s ago: executing program 2 (id=563):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0)

49.843081234s ago: executing program 2 (id=564):
r0 = syz_open_dev$video4linux(&(0x7f0000000200), 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000380)=@multiplanar_fd={0x2, 0xb, 0x4, 0x200, 0xf4, {0x0, 0xea60}, {0xc, 0x8, 0x1, 0x9, 0x62, 0x4, "b04f9e1d"}, 0x800, 0x4, {0x0}, 0x9})

49.842829028s ago: executing program 2 (id=565):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40)={[{@bh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x57c, &(0x7f0000000bc0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x200010, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

49.747431463s ago: executing program 2 (id=567):
syz_emit_ethernet(0x4a, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0xe, 0x6, "b70d9d", 0x14, 0x6, 0xff, @local, @mcast2, {[], {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x9, 0x0, 0x8a9}}}}}}}, 0x0)

49.527658203s ago: executing program 2 (id=569):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
connect$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x0, {0x0, 0x1, 0x2}, 0xff}, 0x18)

49.480795047s ago: executing program 33 (id=569):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
connect$can_j1939(r0, &(0x7f0000000240)={0x1d, r1, 0x0, {0x0, 0x1, 0x2}, 0xff}, 0x18)

29.675547751s ago: executing program 0 (id=822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0xffffffff, 0x3, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x2000081c)

29.672066955s ago: executing program 0 (id=823):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0xfffffe71}}, 0x20)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)

28.772953934s ago: executing program 0 (id=826):
syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@random="493f6b6e24d9", @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "bb0e9e", 0x18, 0x0, 0x0, @remote, @private0, {[@routing={0x0, 0x2, 0x1, 0x5, 0x0, [@mcast2]}]}}}}}, 0x0)

28.772684174s ago: executing program 0 (id=827):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0/../file0\x00')

28.692458335s ago: executing program 0 (id=828):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)

28.341217276s ago: executing program 0 (id=835):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})
select(0x40, &(0x7f0000000040)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1001, 0x0, 0x10000}, 0x0, 0x0, 0x0)

28.286333766s ago: executing program 34 (id=835):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000485, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}})
select(0x40, &(0x7f0000000040)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1001, 0x0, 0x10000}, 0x0, 0x0, 0x0)

2.331146386s ago: executing program 3 (id=1231):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x625c, &(0x7f000000bdc0)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x6}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x1}}, 0x24, 0x0)
listxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000580)=""/4096, 0x1000)

1.749415632s ago: executing program 3 (id=1235):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000010000006d05000002"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0, 0x0, 0x11000000}, 0x38)

1.562712321s ago: executing program 3 (id=1236):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20)

1.562502393s ago: executing program 3 (id=1237):
r0 = syz_io_uring_setup(0x1a1d, &(0x7f0000000180)={0x0, 0x755e, 0x13481, 0x3, 0x2b5, 0x0, 0x0}, &(0x7f0000000080), &(0x7f0000000040), &(0x7f0000000000))
r1 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0)
fallocate(r1, 0x0, 0x800657, 0x40000b7)
io_uring_enter(r0, 0x0, 0x1, 0x1, 0x0, 0x0)

949.864219ms ago: executing program 3 (id=1238):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

949.493406ms ago: executing program 4 (id=1240):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r0)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000002680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf250c000000180005800c00028004000200be0d0000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4020}, 0x8094)

825.748338ms ago: executing program 4 (id=1241):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0xc)

740.254768ms ago: executing program 4 (id=1243):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xb574, 0x9, 0x34324142, 0x6, 0x1ff, 0x0, 0x5, 0x32, 0x0, 0x1, 0x2}})

739.923325ms ago: executing program 4 (id=1244):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, 0xfffffffffffffffe, 0xba)

671.21146ms ago: executing program 4 (id=1246):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x60, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef)

441.781123ms ago: executing program 4 (id=1250):
syz_usb_connect(0x0, 0xa55, &(0x7f00000003c0)=ANY=[@ANYBLOB="12011003a4a9e410240430cf5ac7010203010902430a040706707209046a590d7ef1af050d24020100040c003c7163333f0a240201080476065a070d240201510207033770e81df90a24020275c706000905021040000b0808072501040301800905060008009a0c7809050a1eff03af010909050d0c4000da40220905061020000705020725010006000009050702400006080907250100090300090506"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})

380.953111ms ago: executing program 5 (id=1252):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x1, 0x7fffffff, 0x2}, 0x10)

301.852852ms ago: executing program 5 (id=1253):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x3b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

222.101453ms ago: executing program 5 (id=1254):
r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0x980902})

221.722614ms ago: executing program 5 (id=1255):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/rcu_normal', 0xc0a82, 0x146)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x9)
socket$inet6(0xa, 0x3, 0x7)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0xc, 0x4, 0x2}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
getdents64(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0xffffffff, 0x1}}, 0x20)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0)

143.508001ms ago: executing program 5 (id=1256):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000180)=0xffffd209, 0x4)

60.313495ms ago: executing program 5 (id=1257):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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")

0s ago: executing program 3 (id=1258):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x80000000, 0x1}}, 0x20)

kernel console output (not intermixed with test programs):

 mode: writeback.
[   76.518110][ T5612] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.648822][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[   76.651238][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[   76.673250][   T31] hub 1-1:0.0: 16 ports detected
[   76.678069][   T31] hub 1-1:0.0: insufficient power available to use all downstream ports
[   76.874312][   T31] hub 1-1:0.0: hub_hub_status failed (err = -71)
[   76.882495][   T31] hub 1-1:0.0: config failed, can't get hub status (err -71)
[   76.891211][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   76.893728][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   76.927241][   T31] usb 1-1: USB disconnect, device number 4
[   77.045967][  T994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.173367][    T9] usb 3-1: USB disconnect, device number 3
[   77.756673][    T9] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   77.908907][    T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   77.922722][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.935014][ T5680] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   77.945079][    T9] usb 1-1: config 0 descriptor??
[   77.955828][    T9] cp210x 1-1:0.0: cp210x converter detected
[   77.988008][ T5653] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.086269][   T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   78.138571][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.145440][ T5653] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.147271][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.156746][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.166458][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.171372][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.240255][ T5653] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.322691][ T5653] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.376180][    T9] usb 1-1: cp210x converter now attached to ttyUSB0
[   78.555184][ T5653] bridge_slave_1: left allmulticast mode
[   78.557563][ T5653] bridge_slave_1: left promiscuous mode
[   78.561630][ T5653] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.571776][   T24] usb 1-1: USB disconnect, device number 5
[   78.591074][ T5653] bridge_slave_0: left allmulticast mode
[   78.595724][ T5653] bridge_slave_0: left promiscuous mode
[   78.598257][ T5653] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.598454][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   78.624518][   T24] cp210x 1-1:0.0: device disconnected
[   78.861160][ T5653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.868789][ T5653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.873454][ T5653] bond0 (unregistering): Released all slaves
[   78.887290][ T5653] bond1 (unregistering): Released all slaves
[   78.901952][ T5357] 8021q: adding VLAN 0 to HW filter on device eth1
[   79.313196][ T5653] hsr_slave_0: left promiscuous mode
[   79.315540][ T5653] hsr_slave_1: left promiscuous mode
[   79.317837][ T5653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.325065][ T5653] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.331951][ T5653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.335065][ T5653] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.357911][ T5653] veth1_macvtap: left promiscuous mode
[   79.361095][ T5653] veth0_macvtap: left promiscuous mode
[   79.366647][ T5653] veth1_vlan: left promiscuous mode
[   79.368910][ T5653] veth0_vlan: left promiscuous mode
[   79.509764][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'.
[   79.553587][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'.
[   79.597729][ T5653] team0 (unregistering): Port device team_slave_1 removed
[   79.608117][ T5653] team0 (unregistering): Port device team_slave_0 removed
[   79.702808][ T5357] 8021q: adding VLAN 0 to HW filter on device eth2
[   79.798181][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.800983][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.805530][ T6063] bridge_slave_0: entered allmulticast mode
[   79.809866][ T6063] bridge_slave_0: entered promiscuous mode
[   79.813336][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.817331][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.820091][ T6063] bridge_slave_1: entered allmulticast mode
[   79.823312][ T6063] bridge_slave_1: entered promiscuous mode
[   79.828839][ T6120] mmap: syz.0.145 (6120) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   79.842967][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.850410][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.870296][ T6063] team0: Port device team_slave_0 added
[   79.874032][ T6063] team0: Port device team_slave_1 added
[   79.907472][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.912818][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.928354][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.934954][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.939922][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.958302][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.986467][ T6124] netlink: 136 bytes leftover after parsing attributes in process `syz.0.146'.
[   79.995753][ T6124] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[   80.085644][ T6063] hsr_slave_0: entered promiscuous mode
[   80.089797][ T6063] hsr_slave_1: entered promiscuous mode
[   80.092194][ T6063] debugfs: 'hsr0' already exists in 'hsr'
[   80.094681][ T6063] Cannot create hsr debugfs directory
[   80.097900][ T5357] 8021q: adding VLAN 0 to HW filter on device eth3
[   80.245024][ T5615] Bluetooth: hci0: command tx timeout
[   80.290938][ T6146] warning: `syz.2.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   80.382514][ T5357] 8021q: adding VLAN 0 to HW filter on device eth4
[   80.426380][ T6063] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.431356][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   80.436542][ T6063] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.441264][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.444802][ T6063] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.450492][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.453186][ T6063] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.458957][ T6063] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   80.536385][ T6063] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.552936][ T6063] 8021q: adding VLAN 0 to HW filter on device team0
[   80.561534][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.563902][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.578069][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.580441][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.824811][ T6063] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.878572][ T6063] veth0_vlan: entered promiscuous mode
[   80.887358][ T6063] veth1_vlan: entered promiscuous mode
[   80.915238][ T6063] veth0_macvtap: entered promiscuous mode
[   80.920870][ T6063] veth1_macvtap: entered promiscuous mode
[   80.936269][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.946931][ T6063] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.956083][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.959942][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.962659][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.970314][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.028026][  T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.032597][  T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.051577][  T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.055968][  T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.150982][ T6189] loop3: detected capacity change from 0 to 4096
[   81.156626][ T6189] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   81.176422][ T6189] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   81.188056][ T6189] ntfs3(loop3): Failed to load $Extend (-22).
[   81.190701][ T6189] ntfs3(loop3): Failed to initialize $Extend.
[   81.405334][ T6201] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   81.468356][ T6203] program syz.3.166 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   81.516559][ T5615] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[   81.521600][ T5615] CPU: 0 UID: 0 PID: 5615 Comm: kworker/u11:2 Not tainted syzkaller #0 PREEMPT(full) 
[   81.521618][ T5615] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.521627][ T5615] Workqueue: hci0 hci_rx_work
[   81.521650][ T5615] Call Trace:
[   81.521657][ T5615]  <TASK>
[   81.521663][ T5615]  dump_stack_lvl+0xe8/0x150
[   81.521679][ T5615]  sysfs_create_dir_ns+0x271/0x2a0
[   81.521699][ T5615]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[   81.521747][ T5615]  ? do_raw_spin_unlock+0x4d/0x210
[   81.521770][ T5615]  kobject_add_internal+0x62b/0xd00
[   81.521794][ T5615]  kobject_add+0x163/0x240
[   81.521812][ T5615]  ? __pfx_kobject_add+0x10/0x10
[   81.521829][ T5615]  ? _raw_spin_unlock+0x28/0x50
[   81.521845][ T5615]  ? get_device_parent+0x366/0x3a0
[   81.521864][ T5615]  device_add+0x408/0xbb0
[   81.521882][ T5615]  hci_conn_add_sysfs+0xd5/0x210
[   81.521901][ T5615]  le_conn_complete_evt+0x10e6/0x16b0
[   81.521921][ T5615]  ? __pfx_le_conn_complete_evt+0x10/0x10
[   81.521933][ T5615]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[   81.521950][ T5615]  ? __asan_memcpy+0x40/0x70
[   81.521968][ T5615]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   81.521983][ T5615]  ? skb_pull_data+0xfb/0x200
[   81.521998][ T5615]  hci_le_conn_complete_evt+0x187/0x470
[   81.522017][ T5615]  hci_event_packet+0x659/0xef0
[   81.522039][ T5615]  ? __pfx_hci_le_meta_evt+0x10/0x10
[   81.522057][ T5615]  ? __pfx_hci_event_packet+0x10/0x10
[   81.522097][ T5615]  ? kcov_remote_start+0x49a/0x7a0
[   81.522118][ T5615]  ? hci_send_to_monitor+0xe2/0x590
[   81.522136][ T5615]  hci_rx_work+0x3ee/0x1040
[   81.522158][ T5615]  ? process_scheduled_works+0xa70/0x1860
[   81.522175][ T5615]  process_scheduled_works+0xb5d/0x1860
[   81.522210][ T5615]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.522227][ T5615]  ? assign_work+0x3d5/0x5e0
[   81.522245][ T5615]  worker_thread+0xa53/0xfc0
[   81.522279][ T5615]  kthread+0x388/0x470
[   81.522294][ T5615]  ? __pfx_worker_thread+0x10/0x10
[   81.522305][ T5615]  ? __pfx_kthread+0x10/0x10
[   81.522319][ T5615]  ret_from_fork+0x514/0xb70
[   81.522332][ T5615]  ? __pfx_ret_from_fork+0x10/0x10
[   81.522345][ T5615]  ? __switch_to+0xc79/0x1410
[   81.522361][ T5615]  ? __pfx_kthread+0x10/0x10
[   81.522374][ T5615]  ret_from_fork_asm+0x1a/0x30
[   81.522395][ T5615]  </TASK>
[   81.522884][ T5615] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   81.624919][ T5615] Bluetooth: hci0: failed to register connection device
[   82.326918][ T5615] Bluetooth: hci0: command tx timeout
[   82.511748][ T6207] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   83.496367][ T6245] tipc: Can't bind to reserved service type 2
[   83.824912][ T6264] loop3: detected capacity change from 0 to 1024
[   83.911886][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'.
[   83.915834][ T6268] netlink: 'syz.2.194': attribute type 7 has an invalid length.
[   83.919416][ T6268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.194'.
[   84.117064][ T6279] x_tables: duplicate underflow at hook 1
[   84.244273][ T6280] loop2: detected capacity change from 0 to 512
[   84.256935][ T6280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   84.262381][ T6280] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.374093][ T6280] EXT4-fs (loop2): 1 truncate cleaned up
[   84.387077][ T6280] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.404065][ T5615] Bluetooth: hci0: command 0x040f tx timeout
[   85.056250][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.137379][ T6308] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[   85.567047][ T6332] bond1 (unregistering): Released all slaves
[   85.634826][   T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   85.807933][   T31] usb 1-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[   85.815622][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.823595][   T31] usb 1-1: Product: syz
[   85.827210][   T31] usb 1-1: Manufacturer: syz
[   85.830593][   T31] usb 1-1: SerialNumber: syz
[   85.837420][   T31] usb 1-1: config 0 descriptor??
[   85.963896][  T994] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.070306][   T31] usb 1-1: selecting invalid altsetting 1
[   86.075572][   T31] comedi comedi5: could not switch to alternate setting 1
[   86.078769][   T31] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[   86.124584][   T31] usb 1-1: USB disconnect, device number 6
[   86.135395][  T994] usb 4-1: Using ep0 maxpacket: 8
[   86.148867][  T994] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   86.164857][  T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   86.177981][  T994] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   86.197164][  T994] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   86.214806][  T994] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   86.220193][  T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.461695][  T994] usb 4-1: usb_control_msg returned -32
[   86.469752][  T994] usbtmc 4-1:16.0: can't read capabilities
[   86.484132][ T5615] Bluetooth: hci0: command 0x040f tx timeout
[   86.536690][ T6376] loop2: detected capacity change from 0 to 65536
[   86.550704][ T6376] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   86.573326][ T6376] XFS (loop2): Metadata corruption detected at xfs_dinode_verify+0x1a9/0x1590, inode 0x20 dinode
[   86.578399][ T6376] XFS (loop2): Unmount and run xfs_repair
[   86.580779][ T6376] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   86.583772][ T6376] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[   86.587380][ T6376] 00000010: 00 00 00 03 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.590519][ T6376] 00000020: 1d cd 65 00 00 00 00 00 34 f7 58 68 7a bb 44 4d  ..e.....4.Xhz.DM
[   86.593255][ T6376] 00000030: 34 f7 58 68 7a bb 44 4d 01 00 00 00 00 00 00 4b  4.Xhz.DM.......K
[   86.596115][ T6376] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.599458][ T6376] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   86.602808][ T6376] 00000060: ff ff ff ff b4 5c 6c 62 00 00 00 00 00 00 00 07  .....\lb........
[   86.606309][ T6376] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[   86.609219][ T6376] loop2: lost filesystem error report for type 5 error -117
[   86.609272][ T6376] XFS (loop2): Failed to read root inode 0x20, error 117
[   86.838201][    C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[   86.899294][   T32] cfg80211: failed to load regulatory.db
[   87.047843][ T6412] loop0: detected capacity change from 0 to 32768
[   87.050802][ T6412] btrfs: Deprecated parameter 'usebackuproot'
[   87.053348][ T6412] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   87.060132][ T6412] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.239 (6412)
[   87.106821][ T6412] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.110983][ T6412] BTRFS info (device loop0): using crc32c checksum algorithm
[   87.114098][ T6412] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   87.245547][ T1111] BTRFS warning (device loop0): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb0e5ffa5 level 0
[   87.262338][ T6412] BTRFS warning (device loop0): couldn't read tree root
[   87.265156][ T6412] BTRFS warning (device loop0): try to load backup roots slot 1
[   87.268677][ T1110] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x32d10ca2 level 0
[   87.281983][ T6412] BTRFS warning (device loop0): couldn't read tree root
[   87.285722][ T6412] BTRFS warning (device loop0): try to load backup roots slot 2
[   87.288998][ T1111] BTRFS warning (device loop0): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x6344b7f5 level 1
[   87.302182][ T6412] BTRFS warning (device loop0): couldn't read tree root
[   87.305363][ T6412] BTRFS warning (device loop0): try to load backup roots slot 3
[   87.337591][ T6412] BTRFS info (device loop0): rebuilding free space tree
[   87.375826][ T6412] BTRFS info (device loop0): disabling free space tree
[   87.379371][ T6412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   87.383173][ T6412] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   87.391469][ T6412] BTRFS info (device loop0): checking UUID tree
[   87.395995][ T6412] BTRFS info (device loop0): enabling ssd optimizations
[   87.398690][ T6412] BTRFS info (device loop0): turning off barriers
[   87.400999][ T6412] BTRFS info (device loop0): turning on sync discard
[   87.403672][ T6412] BTRFS info (device loop0): enabling disk space caching
[   87.406473][ T6412] BTRFS info (device loop0): force clearing of disk cache
[   87.409095][ T6412] BTRFS info (device loop0): enabling auto defrag
[   87.411459][ T6412] BTRFS info (device loop0): trying to use backup root at mount time
[   87.415092][ T6412] BTRFS info (device loop0): max_inline set to 0
[   87.892734][ T5621] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   88.158395][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.165501][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.168681][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.171204][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.174876][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.177649][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.180546][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.183575][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.187926][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.191126][  T994] hid-generic 0005:5B44:0004.0002: unknown main item tag 0x0
[   88.199519][ T6450] loop2: detected capacity change from 0 to 2048
[   88.202167][  T994] hid-generic 0005:5B44:0004.0002: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz1
[   88.217345][ T6450] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.262084][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[   88.554118][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   88.563961][ T5615] Bluetooth: hci0: command 0x040f tx timeout
[   88.703923][    T9] usb 1-1: Using ep0 maxpacket: 8
[   88.711236][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   88.715980][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.719359][    T9] usb 1-1: Product: syz
[   88.721241][    T9] usb 1-1: Manufacturer: syz
[   88.723218][    T9] usb 1-1: SerialNumber: syz
[   88.736519][    T9] usb 1-1: config 0 descriptor??
[   88.771310][  T798] usb 4-1: USB disconnect, device number 2
[   88.948042][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   89.364441][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[   89.379761][    T9] usb 1-1: USB disconnect, device number 7
[   89.625812][ T6469] loop3: detected capacity change from 0 to 32768
[   89.633708][ T6469] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.256 (6469)
[   89.650054][ T6469] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   89.661842][ T6469] BTRFS info (device loop3): using sha256 checksum algorithm
[   89.751213][ T6469] BTRFS info (device loop3): enabling ssd optimizations
[   89.765782][ T6469] BTRFS info (device loop3): turning on async discard
[   89.769865][ T6469] BTRFS info (device loop3): enabling free space tree
[   89.775025][ T6469] BTRFS info (device loop3): enabling auto defrag
[   89.777392][ T6469] BTRFS info (device loop3): max_inline set to 4096
[   89.791434][ T6469] BTRFS info (device loop3 state M): max_inline set to 4096
[   89.827198][ T6063] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   89.989055][ T6512] loop2: detected capacity change from 0 to 512
[   90.031254][ T6512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.044970][ T6512] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   90.092304][ T6512] EXT4-fs (loop2): shut down requested (0)
[   90.190692][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.206476][  T145] __quota_error: 14 callbacks suppressed
[   90.206488][  T145] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[   90.296707][ T6530] loop0: detected capacity change from 0 to 256
[   90.302257][ T6530] exfat: Deprecated parameter 'utf8'
[   90.311393][ T6530] exfat: Deprecated parameter 'utf8'
[   90.317892][ T6530] exfat: Deprecated parameter 'namecase'
[   90.326563][ T6530] exfat: Deprecated parameter 'namecase'
[   90.343759][ T6530] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   90.594109][  T994] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.626694][ T6550] netlink: 44 bytes leftover after parsing attributes in process `syz.2.285'.
[   90.630933][ T6550] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.766305][  T994] usb 4-1: too many configurations: 151, using maximum allowed: 8
[   90.788691][  T994] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   90.795096][  T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   90.799223][  T994] usb 4-1: Product: syz
[   90.800478][  T994] usb 4-1: Manufacturer: syz
[   90.805217][  T994] usb 4-1: SerialNumber: syz
[   90.813239][  T994] usb 4-1: config 0 descriptor??
[   90.827952][  T994] ims_pcu 4-1:0.0: Zero length descriptor
[   90.830853][  T994] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22
[   91.040124][ T5693] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   91.054880][    T9] usb 4-1: USB disconnect, device number 3
[   91.193917][ T5693] usb 1-1: Using ep0 maxpacket: 16
[   91.198222][ T5693] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[   91.201195][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.207491][ T5693] usb 1-1: config 0 descriptor??
[   91.216545][ T5693] gspca_main: sonixj-2.14.0 probing 0471:0327
[   91.413989][  T994] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   91.567121][  T994] usb 3-1: unable to get BOS descriptor or descriptor too short
[   91.575714][  T994] usb 3-1: config 3 has an invalid interface number: 73 but max is 1
[   91.579226][  T994] usb 3-1: config 3 has no interface number 1
[   91.581781][  T994] usb 3-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7
[   91.588082][  T994] usb 3-1: config 3 interface 0 has no altsetting 0
[   91.590971][  T994] usb 3-1: config 3 interface 73 has no altsetting 0
[   91.595931][  T994] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7
[   91.605222][ T5615] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   91.609036][ T5615] Bluetooth: hci1: Injecting HCI hardware error event
[   91.612365][ T5615] Bluetooth: hci1: hardware error 0x00
[   91.618320][  T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.624277][  T994] usb 3-1: Product: syz
[   91.631543][  T994] usb 3-1: Manufacturer: syz
[   91.635966][  T994] usb 3-1: SerialNumber: syz
[   91.872888][  T994] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   91.880096][  T994] dvb_usb_af9035 3-1:3.0: probe with driver dvb_usb_af9035 failed with error -22
[   91.893042][  T994] usb 3-1: USB disconnect, device number 4
[   91.972210][ T6602] loop3: detected capacity change from 0 to 2048
[   91.978185][ T6602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.075664][   T34] audit: type=1800 audit(1777367077.504:26): pid=6603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.302" name="file1" dev="loop3" ino=1368 res=0 errno=0
[   92.470552][ T5693] gspca_sonixj: reg_w1 err -71
[   92.488262][ T5693] sonixj 1-1:0.0: probe with driver sonixj failed with error -71
[   92.509148][ T5693] usb 1-1: USB disconnect, device number 8
[   93.434113][ T5693] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   93.594734][ T5693] usb 3-1: Using ep0 maxpacket: 8
[   93.599222][ T5693] usb 3-1: unable to get BOS descriptor or descriptor too short
[   93.603441][ T5693] usb 3-1: config 129 interface 0 has no altsetting 0
[   93.609840][ T5693] usb 3-1: New USB device found, idVendor=1c73, idProduct=861f, bcdDevice=a1.3b
[   93.613609][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.616995][ T5693] usb 3-1: Product: syz
[   93.618773][ T5693] usb 3-1: Manufacturer: syz
[   93.620579][ T5693] usb 3-1: SerialNumber: syz
[   93.684964][ T5615] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   93.715103][ T6635] loop3: detected capacity change from 0 to 32768
[   93.726366][ T6635] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.747717][ T6635] XFS (loop3): Ending clean mount
[   93.757142][ T6635] XFS (loop3): Quotacheck needed: Please wait.
[   93.783476][ T6635] XFS (loop3): Quotacheck: Done.
[   93.804381][   T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   93.816653][ T6063] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   93.888229][ T5693] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[   93.897727][ T5693] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   93.906068][ T5693] dvb_usb_anysee 3-1:129.0: probe with driver dvb_usb_anysee failed with error -22
[   93.913155][ T5693] usb 3-1: USB disconnect, device number 5
[   93.941034][ T6649] loop3: detected capacity change from 0 to 8
[   93.956971][   T31] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[   93.962224][   T31] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   93.965331][   T31] usb 1-1: Product: syz
[   93.967400][ T6649] SQUASHFS error: Unable to read inode 0xa7
[   93.970940][   T31] usb 1-1: SerialNumber: syz
[   93.974521][   T31] usb 1-1: config 0 descriptor??
[   94.047374][ T6651] loop3: detected capacity change from 0 to 4096
[   94.050722][ T6651] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   94.053768][ T6651] ntfs3(loop3): ino=3, mi_enum_attr
[   94.076518][ T6651] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   94.080249][ T6651] ntfs3(loop3): ino=1a, mi_enum_attr
[   94.082573][ T6651] ntfs3(loop3): ino=1a, mi_enum_attr
[   94.085071][ T6651] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[   94.172130][ T6655] loop3: detected capacity change from 0 to 256
[   94.176258][ T6655] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   94.192112][   T31] hso 1-1:0.0: Failed to find BULK eps
[   94.304452][ T6661] loop3: detected capacity change from 0 to 128
[   94.370713][ T6663] loop3: detected capacity change from 0 to 2048
[   94.400336][  T994] usb 1-1: USB disconnect, device number 9
[   94.408655][ T6663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.445099][ T6063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.449529][ T6667] loop2: detected capacity change from 0 to 512
[   94.462655][ T6667] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   94.481879][ T6667] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   94.493176][ T6667] EXT4-fs (loop2): 1 truncate cleaned up
[   94.497162][ T6667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.559041][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.796858][ T6672] loop3: detected capacity change from 0 to 32768
[   95.201738][ T6674] loop2: detected capacity change from 0 to 131072
[   95.282693][ T6674] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   95.290933][ T6674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   95.368709][ T6690] netlink: 'syz.0.332': attribute type 10 has an invalid length.
[   95.396105][ T6690] team0: Port device vlan0 added
[   95.600885][ T6698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   95.610215][ T6700] Bluetooth: MGMT ver 1.23
[   95.782099][ T6710] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   95.795311][ T6710] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   95.806715][ T6710] ntfs3(loop2): ino=19, mi_enum_attr
[   96.010044][ T6725] nft_compat: unsupported protocol 8
[   96.036168][   T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   96.241107][   T31] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   96.249633][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.257271][   T31] usb 1-1: Product: syz
[   96.260718][   T31] usb 1-1: Manufacturer: syz
[   96.264801][   T31] usb 1-1: SerialNumber: syz
[   96.271984][   T31] usb 1-1: config 0 descriptor??
[   96.275291][   T31] hub 1-1:0.0: bad descriptor, ignoring hub
[   96.277532][   T31] hub 1-1:0.0: probe with driver hub failed with error -5
[   96.480891][   T31] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   96.494396][   T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   96.498563][   T31] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   96.502944][   T31] usb 1-1: media controller created
[   96.514621][   T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   96.540835][   T31] DVB: Unable to find symbol dib7000p_attach()
[   96.543355][   T31] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   96.584727][   T31] rc_core: IR keymap rc-dib0700-rc5 not found
[   96.586911][   T31] Registered IR keymap rc-empty
[   96.588993][   T31] dvb-usb: could not initialize remote control.
[   96.591664][   T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   96.693585][   T31] usb 1-1: USB disconnect, device number 10
[   96.717629][   T31] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   96.872791][   T34] audit: type=1326 audit(1777367082.294:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.3.355" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75afb9cdd9 code=0x0
[   97.344471][ T6736] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   97.350393][ T6745] overlayfs: "xino" feature enabled using 3 upper inode bits.
[   97.565285][ T6736] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3)
[   97.568897][ T6736] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3)
[   97.578743][ T6736] overlayfs: d_ino too big (135, ino=9223372036854776517, xinobits=3)
[   97.583399][ T6736] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3)
[   97.587686][ T6736] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3)
[   97.591471][ T6736] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3)
[   97.595757][ T6736] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3)
[   97.599563][ T6736] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3)
[   97.603729][ T6736] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3)
[   97.610138][ T6736] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3)
[   97.717109][  T994] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   97.781402][ T6752] set_capacity_and_notify: 1 callbacks suppressed
[   97.781468][ T6752] loop3: detected capacity change from 0 to 256
[   97.884431][  T994] usb 1-1: Using ep0 maxpacket: 16
[   97.930729][  T994] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   97.943542][  T994] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   97.960366][  T994] usb 1-1: New USB device found, idVendor=1f6b, idProduct=0101, bcdDevice= 0.40
[   97.970383][  T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.979622][  T994] usb 1-1: Product: syz
[   97.987238][  T994] usb 1-1: Manufacturer: syz
[   97.993403][  T994] usb 1-1: SerialNumber: syz
[   98.101190][  T994] usb 1-1: 0:66 : does not exist
[   98.109481][  T994] usb 1-1: unit 4 not found!
[   98.335299][  T994] usb 1-1: USB disconnect, device number 11
[   98.395626][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.914865][ T6761] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[   98.919107][ T6761] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[   98.945917][   T82] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1
[   98.987105][   T82] Bluetooth: hci3: Frame reassembly failed (-84)
[   99.002037][ T6763] loop0: detected capacity change from 0 to 1024
[   99.007685][ T6763] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   99.015349][ T6763] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   99.021646][ T6763] EXT4-fs (loop0): orphan cleanup on readonly fs
[   99.025837][ T6763] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.363: Freeing blocks not in datazone - block = 0, count = 4096
[   99.031571][ T6763] loop0: lost filesystem error report for type 5 error -117
[   99.034264][    C1] EXT4-fs (loop0): error count since last fsck: 1
[   99.039727][    C1] EXT4-fs (loop0): initial error at time 1777367084: ext4_free_blocks:6718
[   99.043067][    C1] EXT4-fs (loop0): last error at time 1777367084: ext4_free_blocks:6718
[   99.051743][ T6763] EXT4-fs (loop0): Remounting filesystem read-only
[   99.054958][ T6763] EXT4-fs (loop0): 1 orphan inode deleted
[   99.059067][ T6763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   99.085870][ T5621] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.145349][ T6766] netlink: 'syz.0.364': attribute type 2 has an invalid length.
[   99.265674][   T34] audit: type=1326 audit(1777367084.684:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.362" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[   99.277168][   T34] audit: type=1326 audit(1777367084.694:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.362" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[   99.293235][   T34] audit: type=1326 audit(1777367084.694:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.362" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[   99.306519][   T34] audit: type=1326 audit(1777367084.694:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.362" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[   99.317374][   T34] audit: type=1326 audit(1777367084.694:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6768 comm="syz.2.362" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[   99.578905][ T6774] loop2: detected capacity change from 0 to 32768
[   99.582139][ T6774] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.366 (6774)
[   99.593337][ T6774] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.596690][ T6774] BTRFS info (device loop2): using sha256 checksum algorithm
[   99.642446][ T6774] BTRFS info (device loop2): enabling ssd optimizations
[   99.653930][ T6774] BTRFS info (device loop2): turning on async discard
[   99.658076][ T6774] BTRFS info (device loop2): enabling free space tree
[   99.671734][ T6774] BTRFS warning (device loop2): can't clear the incompat:0,mixed_groups,compress_zstd feature bits while mounted
[   99.696784][ T5616] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   99.926908][ T6799] loop2: detected capacity change from 0 to 4096
[   99.931968][ T6799] EXT4-fs: inline encryption not supported
[   99.936108][ T6799] EXT4-fs (loop2): Test dummy encryption mode enabled
[   99.939265][ T6799] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[   99.942262][ T6799] System zones: 0-5
[   99.947241][ T6799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.967025][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.186036][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'.
[  100.189772][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.376'.
[  100.193670][ T6811] netlink: 'syz.0.376': attribute type 19 has an invalid length.
[  100.197440][ T6811] netlink: 'syz.0.376': attribute type 20 has an invalid length.
[  100.332198][ T6817] loop0: detected capacity change from 0 to 4096
[  100.336144][ T6817] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  100.356901][ T6817] ntfs3(loop0): ino=19, mi_enum_attr
[  100.369028][ T6817] ntfs3(loop0): failed to convert "c46c" to iso8859-4
[  100.375445][ T6817] ntfs3(loop0): ino=20, mi_enum_attr
[  100.677991][   T34] audit: type=1326 audit(1777367086.104:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[  100.686551][   T34] audit: type=1326 audit(1777367086.104:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[  100.693570][   T34] audit: type=1326 audit(1777367086.114:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.384" exe="/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[  100.705714][   T34] audit: type=1326 audit(1777367086.114:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.2.384" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c979cdd9 code=0x7ffc0000
[  100.786231][  T994] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  100.844002][ T6834] loop2: detected capacity change from 0 to 512
[  100.852998][ T6834] EXT4-fs: Ignoring removed mblk_io_submit option
[  100.861255][ T6834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.878920][ T6834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.906253][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.946901][  T994] usb 1-1: config 11 has an invalid interface number: 184 but max is 0
[  100.952112][  T994] usb 1-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  100.957366][  T994] usb 1-1: config 11 has no interface number 0
[  100.959907][  T994] usb 1-1: config 11 interface 184 has no altsetting 0
[  100.963981][ T5002] Bluetooth: hci3: command 0x1003 tx timeout
[  100.964528][ T5615] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  101.043034][  T994] usb 1-1: New USB device found, idVendor=04e2, idProduct=1402, bcdDevice=6d.9a
[  101.051839][  T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.055443][  T994] usb 1-1: Product: syz
[  101.057991][  T994] usb 1-1: Manufacturer: syz
[  101.060047][  T994] usb 1-1: SerialNumber: syz
[  101.153474][ T6846] program syz.3.392 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  101.406618][   T10] usb 1-1: USB disconnect, device number 12
[  101.633941][  T994] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  101.783889][  T994] usb 4-1: Using ep0 maxpacket: 8
[  101.787481][  T994] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  101.790800][  T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.794751][  T994] usb 4-1: config 0 has no interface number 0
[  101.799117][  T994] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  101.802822][  T994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.806057][  T994] usb 4-1: Product: syz
[  101.807742][  T994] usb 4-1: Manufacturer: syz
[  101.809579][  T994] usb 4-1: SerialNumber: syz
[  101.813955][  T994] usb 4-1: config 0 descriptor??
[  101.822037][  T994] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  101.825824][  T994] uvcvideo 4-1:0.31: No valid video chain found.
[  102.050280][  T994] usb 4-1: USB disconnect, device number 4
[  102.057822][ T6853] loop2: detected capacity change from 0 to 512
[  102.110279][ T6853] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.395: corrupted inode contents
[  102.114988][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.117750][ T6853] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.395: mark_inode_dirty error
[  102.124722][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  102.124743][    C0] EXT4-fs (loop2): initial error at time 101: ext4_do_update_inode:5690: inode 16
[  102.124755][    C0] EXT4-fs (loop2): last error at time 101: ext4_do_update_inode:5690: inode 16
[  102.143597][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.147938][ T6853] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.395: corrupted inode contents
[  102.155854][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.156068][ T6853] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.395: mark_inode_dirty error
[  102.165612][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.165863][ T6853] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.395: corrupted inode contents
[  102.177772][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.181160][ T6853] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  102.190270][ T6853] loop2: lost filesystem error report for type 5 error -117
[  102.192935][ T6853] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.395: corrupted inode contents
[  102.205171][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.212640][ T6853] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.395: mark_inode_dirty error
[  102.222297][ T6853] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  102.222542][ T6853] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  102.231355][ T6853] loop2: lost filesystem error report for type 5 error -117
[  102.234839][ T6853] EXT4-fs (loop2): 1 truncate cleaned up
[  102.240278][ T6853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.257505][   T63] __quota_error: 4 callbacks suppressed
[  102.257518][   T63] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  102.265837][   T63] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u9:2: Failed to release dquot type 1
[  102.283548][ T6863] loop0: detected capacity change from 0 to 2048
[  102.305977][ T6863] NILFS (loop0): too small inode size: 0 bytes
[  102.334580][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.624358][ T5672] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  102.784028][ T5672] usb 1-1: Using ep0 maxpacket: 8
[  102.789528][ T5672] usb 1-1: config 6 has an invalid interface number: 220 but max is 0
[  102.801256][ T5672] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  102.813503][ T5672] usb 1-1: config 6 has no interface number 0
[  102.816647][ T5672] usb 1-1: config 6 interface 220 has no altsetting 0
[  102.822464][ T5672] usb 1-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[  102.826548][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.831029][ T5672] usb 1-1: Product: syz
[  102.835646][ T5672] usb 1-1: Manufacturer: syz
[  102.839132][ T5672] usb 1-1: SerialNumber: syz
[  103.074254][ T5672] uvcvideo 1-1:6.220: probe with driver uvcvideo failed with error -22
[  103.080046][ T6909] loop3: detected capacity change from 0 to 256
[  103.085060][ T5672] usb 1-1: USB disconnect, device number 13
[  103.096950][ T6909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  103.108103][ T6909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  103.117338][ T6909] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  103.122439][ T6909] UDF-fs: Scanning with blocksize 512 failed
[  103.131452][ T6909] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  103.136863][ T6909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.152979][   T34] audit: type=1800 audit(103.029:41): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.418" name="file1" dev="loop3" ino=55 res=0 errno=0
[  103.205240][   T34] audit: type=1326 audit(103.089:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75afb9cdd9 code=0x7ffc0000
[  103.217648][   T34] audit: type=1326 audit(103.089:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.419" exe="/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f75afb9cdd9 code=0x7ffc0000
[  103.226974][   T34] audit: type=1326 audit(103.089:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75afb9cdd9 code=0x7ffc0000
[  103.236156][   T34] audit: type=1326 audit(103.089:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6910 comm="syz.3.419" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75afb9cdd9 code=0x7ffc0000
[  103.329649][ T6916] loop3: detected capacity change from 0 to 256
[  103.631731][ T6931] netlink: 'syz.3.427': attribute type 3 has an invalid length.
[  104.623268][ T6943] loop2: detected capacity change from 0 to 32768
[  104.631313][ T6943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.432 (6943)
[  104.662699][ T6943] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.668074][ T6943] BTRFS info (device loop2): using sha256 checksum algorithm
[  104.784724][ T6943] BTRFS info (device loop2): enabling ssd optimizations
[  104.787620][ T6943] BTRFS info (device loop2): turning on async discard
[  104.790418][ T6943] BTRFS info (device loop2): enabling free space tree
[  104.808523][ T6943] BTRFS error (device loop2): balance: invalid convert metadata profile single
[  104.848717][ T5616] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  105.217733][ T6982] loop2: detected capacity change from 0 to 4096
[  105.262104][ T6983] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.341092][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[  105.344472][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.441'.
[  106.145664][ T6994] loop3: detected capacity change from 0 to 32768
[  106.164285][ T6994] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.194610][ T6994] XFS (loop3): Ending clean mount
[  106.201905][ T6994] XFS (loop3): Quotacheck needed: Please wait.
[  106.235516][ T6994] XFS (loop3): Quotacheck: Done.
[  106.721283][ T7010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'.
[  106.751784][ T6063] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  107.045112][ T7022] loop2: detected capacity change from 0 to 64
[  107.294731][   T31] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  107.996423][ T5615] Bluetooth: hci0: unexpected event for opcode 0x0c47
[  108.007490][ T7066] sctp: [Deprecated]: syz.3.473 (pid 7066) Use of struct sctp_assoc_value in delayed_ack socket option.
[  108.007490][ T7066] Use struct sctp_sack_info instead
[  108.035320][  T994] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  108.197527][  T994] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  108.204418][  T994] usb 3-1: config 2 interface 0 has no altsetting 0
[  108.211432][  T994] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  108.213423][ T7076] loop3: detected capacity change from 0 to 128
[  108.219828][ T7076] EXT4-fs (loop3): Test dummy encryption mode enabled
[  108.222922][  T994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.222944][  T994] usb 3-1: Product: syz
[  108.222950][  T994] usb 3-1: Manufacturer: syz
[  108.222956][  T994] usb 3-1: SerialNumber: syz
[  108.235410][  T994] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  108.243281][  T994] usb 3-1: selecting invalid altsetting 0
[  108.248082][ T7076] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a806c018, mo2=0042]
[  108.250753][ T7076] System zones: 1-3, 19-19, 35-36
[  108.252168][  T994] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  108.257764][ T7076] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  108.260327][  T994] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0)
[  108.265835][  T994] usb 3-1: media controller created
[  108.278908][  T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.279148][ T6063] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  108.307986][ T7080] loop3: detected capacity change from 0 to 1024
[  108.325259][ T7080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.335323][ T7080] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.479: missing EA_INODE flag
[  108.342918][ T7080] EXT4-fs (loop3): Remounting filesystem read-only
[  108.357862][ T6063] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.462728][  T798] usb 3-1: USB disconnect, device number 6
[  108.957081][ T7095] loop3: detected capacity change from 0 to 65536
[  108.978403][ T7095] XFS (loop3): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  109.025896][ T7095] XFS (loop3): Ending clean mount
[  109.041470][   T34] audit: type=1800 audit(108.919:46): pid=7095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.485" name="file1" dev="loop3" ino=70 res=0 errno=0
[  109.066105][ T6063] XFS (loop3): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[  109.331523][ T7112] x_tables: unsorted entry at hook 3
[  109.412495][ T7116] loop3: detected capacity change from 0 to 1024
[  109.415834][ T7116] ext4: Unknown parameter 'noacl'
[  109.937902][   T31] usb 1-1: unable to read config index 0 descriptor/start: -71
[  109.940238][   T31] usb 1-1: can't read configurations, error -71
[  110.070102][ T7124] xt_connbytes: Forcing CT accounting to be enabled
[  110.364739][ T7135] sg_write: process 309 (syz.0.499) changed security contexts after opening file descriptor, this is not allowed.
[  110.408227][ T7141] loop3: detected capacity change from 0 to 512
[  110.412822][ T7141] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  110.419263][ T7141] EXT4-fs (loop3): group descriptors corrupted!
[  110.465110][ T7144] loop3: detected capacity change from 0 to 128
[  110.468782][ T7144] EXT4-fs (loop3): Test dummy encryption mode enabled
[  110.480146][ T7144] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  110.502903][ T7144] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  110.510849][ T7144] EXT4-fs error (device loop3): ext4_validate_block_bitmap:423: comm syz.3.503: bg 0: bad block bitmap checksum
[  110.539891][ T6063] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  110.778050][ T7163] netlink: 176 bytes leftover after parsing attributes in process `syz.3.512'.
[  110.782174][ T7163] sch_tbf: peakrate 3 is lower than or equals to rate 183 !
[  110.861355][ T7173] loop3: detected capacity change from 0 to 128
[  110.864577][ T7173] EXT4-fs: Ignoring removed nomblk_io_submit option
[  110.866701][ T7173] ext4: Unknown parameter 'euid'
[  110.933730][ T7174] process 'syz.3.517' launched '/dev/fd/4' with NULL argv: empty string added
[  111.766496][ T7179] loop3: detected capacity change from 0 to 1024
[  111.778876][ T7179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  111.790698][ T7179] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 3: comm syz.3.519: lblock 3 mapped to illegal pblock 3 (length 3)
[  111.799392][ T7179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  111.806009][ T7179] EXT4-fs (loop3): This should not happen!! Data will be lost
[  111.806009][ T7179] 
[  111.811268][ T7179] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: block 8: comm syz.3.519: lblock 8 mapped to illegal pblock 8 (length 5)
[  111.822851][ T7179] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117
[  111.827377][ T7179] EXT4-fs (loop3): This should not happen!! Data will be lost
[  111.827377][ T7179] 
[  111.844173][   T26] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u9:0: bg 0: block 112: padding at end of block bitmap is not set
[  111.853652][   T26] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[  111.862400][   T26] EXT4-fs (loop3): This should not happen!! Data will be lost
[  111.862400][   T26] 
[  111.866412][   T26] EXT4-fs (loop3): Total free blocks count 0
[  111.870274][   T26] EXT4-fs (loop3): Free/Dirty block details
[  111.872893][   T26] EXT4-fs (loop3): free_blocks=0
[  111.878067][ T6063] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  111.937394][ T7184] syzkaller0: entered promiscuous mode
[  111.939690][ T7184] syzkaller0: entered allmulticast mode
[  112.075562][ T7188] loop3: detected capacity change from 0 to 2048
[  112.090095][ T7188] EXT4-fs error (device loop3): __ext4_fill_super:5596: inode #2: comm syz.3.522: inode has both inline data and extents flags
[  112.098830][ T7188] loop3: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[  112.100661][ T7188] EXT4-fs (loop3): get root inode failed
[  112.104359][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  112.104372][    C0] EXT4-fs (loop3): initial error at time 111: __ext4_fill_super:5596: inode 2
[  112.104392][    C0] EXT4-fs (loop3): last error at time 111: __ext4_fill_super:5596: inode 2
[  112.119886][ T7188] EXT4-fs (loop3): mount failed
[  112.232938][ T7192] loop2: detected capacity change from 0 to 512
[  112.265924][ T7192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.281623][ T7192] EXT4-fs (loop2): shut down requested (1)
[  112.324085][ T5616] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  112.540483][ T7208] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  112.776582][ T7206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.529 (7206)
[  112.794461][ T7206] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.801183][ T7206] BTRFS info (device loop3): using sha256 checksum algorithm
[  112.864063][  T994] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  112.874888][ T7206] BTRFS info (device loop3): enabling ssd optimizations
[  112.881574][ T7206] BTRFS info (device loop3): turning on async discard
[  112.887927][ T7206] BTRFS info (device loop3): enabling free space tree
[  112.979726][ T6063] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  113.026560][  T994] usb 1-1: Using ep0 maxpacket: 16
[  113.029942][  T994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  113.044051][  T994] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  113.051673][  T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.057862][  T994] usb 1-1: Product: syz
[  113.060344][  T994] usb 1-1: Manufacturer: syz
[  113.064463][  T994] usb 1-1: SerialNumber: syz
[  113.092804][  T994] usb 1-1: config 0 descriptor??
[  113.099450][  T994] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  113.105588][  T994] em28xx 1-1:0.0: DVB interface 0 found: bulk
[  113.286846][ T7251] netlink: 'syz.3.542': attribute type 10 has an invalid length.
[  113.308919][ T7251] team0 (unregistering): Port device team_slave_0 removed
[  113.313665][ T7251] team0 (unregistering): Port device team_slave_1 removed
[  113.354661][  T994] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  113.418935][  T994] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  113.422403][  T994] em28xx 1-1:0.0: board has no eeprom
[  113.469908][ T7257] capability: warning: `syz.3.545' uses 32-bit capabilities (legacy support in use)
[  113.483878][  T994] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  113.488193][  T994] em28xx 1-1:0.0: dvb set to bulk mode.
[  113.492041][   T31] em28xx 1-1:0.0: Binding DVB extension
[  113.502980][  T994] usb 1-1: USB disconnect, device number 16
[  113.515962][  T994] em28xx 1-1:0.0: Disconnecting em28xx
[  113.565413][   T31] em28xx 1-1:0.0: Registering input extension
[  113.568146][  T994] em28xx 1-1:0.0: Closing input extension
[  113.587758][  T994] em28xx 1-1:0.0: Freeing device
[  114.253923][  T798] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  114.406974][  T798] usb 4-1: unable to get BOS descriptor or descriptor too short
[  114.409995][  T798] usb 4-1: not running at top speed; connect to a high speed hub
[  114.414225][  T798] usb 4-1: config 47 has an invalid interface number: 47 but max is 0
[  114.418590][  T798] usb 4-1: config 47 has no interface number 0
[  114.421419][  T798] usb 4-1: config 47 interface 47 has no altsetting 0
[  114.428451][  T798] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=e0.a0
[  114.433109][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.439144][  T798] usb 4-1: Product: syz
[  114.440554][  T798] usb 4-1: Manufacturer: syz
[  114.442114][  T798] usb 4-1: SerialNumber: syz
[  114.467807][ T7287] netlink: 28 bytes leftover after parsing attributes in process `syz.0.559'.
[  114.668514][  T798] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state.
[  114.672648][  T798] dvb-usb: bulk message failed: -22 (2/0)
[  114.675569][  T798] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  114.678885][  T798] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver error while loading driver (-19)
[  114.688341][  T798] usb 4-1: USB disconnect, device number 5
[  114.784373][ T7293] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004
[  114.966376][ T5002] Bluetooth: hci3: command 0x1003 tx timeout
[  114.969357][ T5615] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  115.037595][ T7295] set_capacity_and_notify: 1 callbacks suppressed
[  115.037609][ T7295] loop2: detected capacity change from 0 to 16
[  115.049797][ T7295] erofs (device loop2): EXPERIMENTAL 48-bit layout support in use. Use at your own risk!
[  115.054572][ T7295] erofs (device loop2): EXPERIMENTAL metadata compression support in use. Use at your own risk!
[  115.062004][ T7295] erofs (device loop2): bogus i_mode (0) @ nid 916717819658240
[  115.213394][ T7303] loop2: detected capacity change from 0 to 1024
[  115.218126][ T7303] EXT4-fs: Ignoring removed bh option
[  115.220407][ T7303] EXT4-fs: Ignoring removed bh option
[  115.238030][ T7303] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.325286][ T5616] EXT4-fs error (device loop2): ext4_read_inline_dir:1494: inode #12: block 7: comm syz-executor: path /195/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  115.342352][ T5616] EXT4-fs (loop2): Remounting filesystem read-only
[  115.407526][ T6921] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.633876][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.664914][ T5002] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  115.673425][ T5002] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  115.677222][ T5002] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  115.681719][ T5002] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  115.685952][ T5002] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  115.755109][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.816100][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.854377][   T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  115.884791][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.016396][   T31] usb 4-1: Using ep0 maxpacket: 16
[  116.023467][   T31] usb 4-1: config 5 has an invalid interface number: 213 but max is 0
[  116.030132][   T31] usb 4-1: config 5 has no interface number 0
[  116.034447][   T31] usb 4-1: config 5 interface 213 altsetting 60 endpoint 0x4 has invalid maxpacket 568, setting to 64
[  116.047686][   T31] usb 4-1: config 5 interface 213 has no altsetting 0
[  116.057517][   T31] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=ce.ff
[  116.067026][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.081328][   T31] usb 4-1: Product: syz
[  116.082775][   T31] usb 4-1: Manufacturer: syz
[  116.094689][   T31] usb 4-1: SerialNumber: syz
[  116.100344][   T13] bridge_slave_1: left allmulticast mode
[  116.103881][   T13] bridge_slave_1: left promiscuous mode
[  116.107558][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.118444][   T13] bridge_slave_0: left allmulticast mode
[  116.120641][   T13] bridge_slave_0: left promiscuous mode
[  116.123087][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.284492][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.289699][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.293516][   T13] bond0 (unregistering): Released all slaves
[  116.323261][   T31] uvcvideo 4-1:5.213: Found UVC 0.00 device syz (05ac:8501)
[  116.328562][   T31] uvcvideo 4-1:5.213: No valid video chain found.
[  116.344433][   T31] usb 4-1: USB disconnect, device number 6
[  116.585265][ T5357] 8021q: adding VLAN 0 to HW filter on device eth5
[  116.653761][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'.
[  116.659988][ T7362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'.
[  116.680963][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.702589][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.707180][ T7316] bridge_slave_0: entered allmulticast mode
[  116.713381][ T7316] bridge_slave_0: entered promiscuous mode
[  116.739633][   T13] hsr_slave_0: left promiscuous mode
[  116.743232][   T13] hsr_slave_1: left promiscuous mode
[  116.747179][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.749923][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.754317][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.757257][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.772828][   T13] veth1_macvtap: left promiscuous mode
[  116.777309][   T13] veth0_macvtap: left promiscuous mode
[  116.779481][   T13] veth1_vlan: left promiscuous mode
[  116.781875][   T13] veth0_vlan: left promiscuous mode
[  117.193961][  T798] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  117.276031][   T13] team0 (unregistering): Port device team_slave_1 removed
[  117.316762][   T13] team0 (unregistering): Port device team_slave_0 removed
[  117.353922][  T798] usb 4-1: Using ep0 maxpacket: 32
[  117.365096][  T798] usb 4-1: unable to get BOS descriptor or descriptor too short
[  117.375994][  T798] usb 4-1: config 5 has an invalid interface number: 211 but max is 0
[  117.379592][  T798] usb 4-1: config 5 has no interface number 0
[  117.382314][  T798] usb 4-1: config 5 interface 211 has no altsetting 0
[  117.395679][  T798] usb 4-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=77.30
[  117.399873][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.403566][  T798] usb 4-1: Product: syz
[  117.407092][  T798] usb 4-1: Manufacturer: syz
[  117.409119][  T798] usb 4-1: SerialNumber: syz
[  117.550919][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.553375][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.555871][ T7316] bridge_slave_1: entered allmulticast mode
[  117.561358][ T7316] bridge_slave_1: entered promiscuous mode
[  117.653882][  T798] cypress_m8 4-1:5.211: DeLorme Earthmate USB converter detected
[  117.660607][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.668071][  T798] earthmate ttyUSB0: required endpoint is missing
[  117.672120][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.679574][  T798] usb 4-1: USB disconnect, device number 7
[  117.707756][  T798] cypress_m8 4-1:5.211: device disconnected
[  117.726083][ T7316] team0: Port device team_slave_0 added
[  117.729165][ T7316] team0: Port device team_slave_1 added
[  117.764159][ T5002] Bluetooth: hci1: command tx timeout
[  117.800709][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.803992][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.819189][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.837164][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.846646][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.858210][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.968524][ T7316] hsr_slave_0: entered promiscuous mode
[  117.971753][ T7316] hsr_slave_1: entered promiscuous mode
[  118.272075][ T5357] 8021q: adding VLAN 0 to HW filter on device eth6
[  118.419079][ T7316] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.438144][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  118.446201][ T7316] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.462977][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  118.476947][ T7316] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.490135][ T7388] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.591'.
[  118.494514][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  118.499325][ T7316] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.507681][ T7316] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  118.553663][ T5357] 8021q: adding VLAN 0 to HW filter on device eth7
[  118.641636][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.686454][ T7316] 8021q: adding VLAN 0 to HW filter on device team0
[  118.696108][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.698311][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.712200][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.714796][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.752040][ T5357] 8021q: adding VLAN 0 to HW filter on device eth8
[  118.767757][ T7417] i2c i2c-1: dtv_property_process_set: SET cmd 0x0023646e undefined
[  119.310569][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.736730][ T7461] bridge1: the hash_elasticity option has been deprecated and is always 16
[  119.839446][ T7316] veth0_vlan: entered promiscuous mode
[  119.851010][ T7316] veth1_vlan: entered promiscuous mode
[  119.855592][ T5002] Bluetooth: hci1: command tx timeout
[  119.880896][ T7463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.609'.
[  119.979718][ T7316] veth0_macvtap: entered promiscuous mode
[  119.985280][ T7463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.609'.
[  119.989161][ T7463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.609'.
[  119.999540][ T7316] veth1_macvtap: entered promiscuous mode
[  120.087431][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.112131][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.149616][ T5653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.155925][ T5653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.173708][ T5653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.182611][ T5653] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.278463][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.286474][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.330599][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.333424][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.430352][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.619'.
[  120.714020][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  120.865895][    T9] usb 5-1: Using ep0 maxpacket: 8
[  120.870008][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 1024
[  120.875299][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  120.880786][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  120.885387][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.892554][    T9] usb 5-1: config 0 descriptor??
[  120.896997][ T7490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  121.226681][   T32] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  121.340772][    T9] hid_parser_main: 159 callbacks suppressed
[  121.340784][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.345456][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.347747][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.350019][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.352577][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.355865][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.358708][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.361466][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.366862][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.369125][    T9] logitech 0003:046D:CA04.0003: unknown main item tag 0x0
[  121.377694][    T9] logitech 0003:046D:CA04.0003: hidraw0: USB HID v0.08 Device [HID 046d:ca04] on usb-dummy_hcd.4-1/input0
[  121.382058][    T9] logitech 0003:046D:CA04.0003: no inputs found
[  121.397350][   T32] usb 1-1: config index 0 descriptor too short (expected 4188, got 92)
[  121.400870][   T32] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.405263][   T32] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  121.410056][   T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 512, setting to 64
[  121.415834][   T32] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  121.423449][   T32] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  121.428464][   T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.432094][   T32] usb 1-1: Product: syz
[  121.434702][   T32] usb 1-1: Manufacturer: syz
[  121.436582][   T32] usb 1-1: SerialNumber: syz
[  121.539429][    T9] usb 5-1: USB disconnect, device number 2
[  121.924017][ T5002] Bluetooth: hci1: command tx timeout
[  122.368584][ T7521] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  122.464047][   T32] cdc_ncm 1-1:1.0: bind() failure
[  122.478349][   T32] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  122.482935][   T32] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  122.487685][   T32] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  122.493470][   T32] usb 1-1: USB disconnect, device number 17
[  122.703738][ T7533] bond1: Unable to set down delay as MII monitoring is disabled
[  122.711961][  T145] Bluetooth: (null): Invalid header checksum
[  122.716774][ T7533] bond1 (unregistering): Released all slaves
[  122.815134][  T145] Bluetooth: (null): Invalid header checksum
[  122.924889][  T145] Bluetooth: (null): Invalid header checksum
[  123.035498][   T33] Bluetooth: (null): Invalid header checksum
[  123.146497][   T33] Bluetooth: (null): Invalid header checksum
[  123.218539][ T7550] overlayfs: failed to clone upperpath
[  123.254915][  T145] Bluetooth: (null): Invalid header checksum
[  123.287408][ T7553] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  123.364695][   T63] Bluetooth: (null): Invalid header checksum
[  123.479570][  T145] Bluetooth: (null): Invalid header checksum
[  123.577567][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'.
[  123.593340][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.658'.
[  123.994013][   T31] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  124.004278][ T5002] Bluetooth: hci1: command tx timeout
[  124.163927][   T31] usb 5-1: Using ep0 maxpacket: 16
[  124.168276][   T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.173442][   T31] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  124.178370][   T31] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  124.185280][   T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a2a1, bcdDevice= 0.40
[  124.189023][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  124.192284][   T31] usb 5-1: SerialNumber: syz
[  124.408227][   T31] usb 5-1: USB disconnect, device number 3
[  124.985341][ T7626] batman_adv: batadv0: Adding interface: dummy0
[  124.987903][ T7626] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.998247][ T7626] batman_adv: batadv0: Interface activated: dummy0
[  125.815293][ T7646] fuse: blksize only supported for fuseblk
[  126.353304][   T34] audit: type=1326 audit(126.229:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7691 comm="syz.4.700" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x0
[  126.618533][ T7711] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'.
[  126.746481][ T7714] tipc: Started in network mode
[  126.748651][ T7714] tipc: Node identity ac14140f, cluster identity 4711
[  126.756603][ T7714] tipc: New replicast peer: 255.255.255.255
[  126.760313][ T7714] tipc: Enabled bearer <udp:syz2>, priority 10
[  126.851672][  T798] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  127.050833][  T798] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  127.057004][  T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.069137][  T798] usb 1-1: Product: syz
[  127.071361][  T798] usb 1-1: Manufacturer: syz
[  127.073385][  T798] usb 1-1: SerialNumber: syz
[  127.487989][ T7730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'.
[  127.648761][ T7739] : renamed from team_slave_1 (while UP)
[  127.888425][  T798] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  127.889022][   T32] tipc: Node number set to 2886997007
[  127.892250][  T798] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  127.895849][  T798] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  127.909010][  T798] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  128.864537][ T7775] netlink: 'syz.4.729': attribute type 2 has an invalid length.
[  129.029335][ T7781] loop4: detected capacity change from 0 to 512
[  129.055902][ T7781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  129.061413][ T7781] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal
[  129.187603][ T7784] veth0: entered promiscuous mode
[  129.190146][ T7784] veth0: left promiscuous mode
[  129.483721][ T5693] usb 1-1: USB disconnect, device number 18
[  129.825348][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'.
[  129.893445][   T34] audit: type=1326 audit(129.769:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  129.905860][   T34] audit: type=1326 audit(129.769:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  129.916212][   T34] audit: type=1326 audit(129.789:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  129.928757][   T34] audit: type=1326 audit(129.789:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  129.951419][   T34] audit: type=1326 audit(129.789:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ca2d5d60e code=0x7ffc0000
[  129.971536][   T34] audit: type=1326 audit(129.789:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  129.983947][ T5693] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  129.989326][   T34] audit: type=1326 audit(129.789:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  130.000918][   T34] audit: type=1326 audit(129.799:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  130.012989][   T34] audit: type=1326 audit(129.799:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.4.751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ca2d9cdd9 code=0x7ffc0000
[  130.097905][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.755'.
[  130.155082][ T5693] usb 1-1: Using ep0 maxpacket: 16
[  130.158591][ T5693] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  130.163234][ T5693] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  130.171037][ T5693] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.185993][ T5693] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.192417][ T5693] usb 1-1: Product: syz
[  130.193545][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'.
[  130.197659][ T5693] usb 1-1: Manufacturer: syz
[  130.201488][ T5693] usb 1-1: SerialNumber: syz
[  130.204805][ T7845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.757'.
[  130.226371][ T5693] usb 1-1: cannot find UAC_HEADER
[  130.289700][ T5693] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  130.352947][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  130.362645][ T7852] 9p: Bad value for 'wfdno'
[  130.955803][ T7889] fuse: fd is not a fuse device
[  132.231689][ T7914] loop4: detected capacity change from 0 to 256
[  132.234931][ T7914] exfat: Deprecated parameter 'utf8'
[  132.240641][ T7914] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe0a6470d, utbl_chksum : 0xe619d30d)
[  132.680252][ T7926] fuse: fd is not a fuse device
[  132.694222][   T32] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  132.749888][  T994] usb 1-1: USB disconnect, device number 19
[  132.777182][ T7930] netlink: 228 bytes leftover after parsing attributes in process `syz.3.790'.
[  132.863987][   T32] usb 5-1: Using ep0 maxpacket: 32
[  132.867797][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.871698][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.875237][   T32] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  132.879931][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.891474][   T32] usb 5-1: config 0 descriptor??
[  132.900524][   T32] hub 5-1:0.0: USB hub found
[  133.105008][   T32] hub 5-1:0.0: 1 port detected
[  133.308558][   T32] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  133.314063][   T32] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  133.319373][   T32] usbhid 5-1:0.0: can't add hid device: -71
[  133.321396][   T32] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  133.344852][   T32] usb 5-1: USB disconnect, device number 4
[  134.019536][ T7958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'.
[  135.329857][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.821'.
[  135.438499][ T8008] netlink: 'syz.3.824': attribute type 7 has an invalid length.
[  135.441644][ T8008] netlink: 'syz.3.824': attribute type 8 has an invalid length.
[  135.476581][ T5693] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  135.634068][ T5693] usb 5-1: Using ep0 maxpacket: 32
[  135.638214][ T5693] usb 5-1: unable to get BOS descriptor or descriptor too short
[  135.642040][ T5693] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 60, changing to 7
[  135.648154][ T5693] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  135.651579][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.654834][ T5693] usb 5-1: Product: syz
[  135.656480][ T5693] usb 5-1: Manufacturer: syz
[  135.658429][ T5693] usb 5-1: SerialNumber: syz
[  135.723433][ T8012] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  135.922103][ T5693] usb 5-1: failed waiting for Axe-Fx III to boot: -71
[  135.924588][ T5693] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  135.934701][ T5693] usb 5-1: USB disconnect, device number 5
[  136.411897][ T8018] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.829'.
[  136.527289][ T8024] overlayfs: missing 'lowerdir'
[  136.556291][ T8026] 9p: Bad value for 'rfdno'
[  136.694847][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.870112][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  136.929317][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  136.942368][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  136.946627][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  136.954385][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  136.961526][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  137.138486][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.240904][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  137.322518][ T8054] xt_l2tp: missing protocol rule (udp|l2tpip)
[  137.964586][   T12] bridge_slave_1: left allmulticast mode
[  137.970160][   T12] bridge_slave_1: left promiscuous mode
[  137.974603][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.988672][   T12] bridge_slave_0: left allmulticast mode
[  137.995326][   T12] bridge_slave_0: left promiscuous mode
[  138.000375][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.091011][ T1382] ieee802154 phy0 wpan0: encryption failed: -22
[  138.093739][ T1382] ieee802154 phy1 wpan1: encryption failed: -22
[  138.237793][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.242693][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.248313][   T12] bond0 (unregistering): Released all slaves
[  138.256837][ T5357] 8021q: adding VLAN 0 to HW filter on device eth9
[  138.285832][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  138.468722][    T9] usb 5-1: Using ep0 maxpacket: 16
[  138.473063][ T5357] 8021q: adding VLAN 0 to HW filter on device eth10
[  138.478587][    T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  138.485014][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.498609][    T9] usb 5-1: config 0 descriptor??
[  138.506665][    T9] gspca_main: sonixj-2.14.0 probing 0471:0327
[  138.527494][ T8090] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  138.633645][   T12] hsr_slave_0: left promiscuous mode
[  138.645611][   T12] hsr_slave_1: left promiscuous mode
[  138.648102][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  138.654179][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  138.657101][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  138.660770][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  138.679228][   T12] veth1_macvtap: left promiscuous mode
[  138.682675][   T12] veth0_macvtap: left promiscuous mode
[  138.686375][   T12] veth1_vlan: left promiscuous mode
[  138.690118][   T12] veth0_vlan: left promiscuous mode
[  138.815064][   T12] team0 (unregistering): Port device vlan0 removed
[  138.892722][   T12] team0 (unregistering): Port device 26 removed
[  138.911169][   T12] team0 (unregistering): Port device team_slave_0 removed
[  139.018180][ T8037] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.020820][ T8037] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.023527][ T8037] bridge_slave_0: entered allmulticast mode
[  139.030553][ T8037] bridge_slave_0: entered promiscuous mode
[  139.037364][ T5357] 8021q: adding VLAN 0 to HW filter on device eth11
[  139.043488][ T8037] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.050110][ T8037] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.054179][ T5002] Bluetooth: hci2: command tx timeout
[  139.054403][ T8037] bridge_slave_1: entered allmulticast mode
[  139.060002][ T8037] bridge_slave_1: entered promiscuous mode
[  139.088600][ T8037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.093130][ T8037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.151859][ T8037] team0: Port device team_slave_0 added
[  139.160421][ T8037] team0: Port device team_slave_1 added
[  139.213046][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.219568][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.228466][ T8037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.234101][ T8037] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.237069][ T8037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.263099][ T8037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.342430][ T8037] hsr_slave_0: entered promiscuous mode
[  139.347545][ T8037] hsr_slave_1: entered promiscuous mode
[  139.350760][ T8037] debugfs: 'hsr0' already exists in 'hsr'
[  139.353124][ T8037] Cannot create hsr debugfs directory
[  139.485061][ T5357] 8021q: adding VLAN 0 to HW filter on device eth12
[  139.562985][ T8037] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  139.573644][ T8037] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  139.578608][ T8037] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  139.591715][ T8037] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  139.599760][ T8037] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  139.604858][ T8037] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  139.608323][ T8037] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  139.620796][ T8037] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  139.757875][ T8037] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.777855][ T8135] fuse: fd is not a fuse device
[  139.797555][ T8037] 8021q: adding VLAN 0 to HW filter on device team0
[  139.811000][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.813758][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.828098][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.831025][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.940774][ T8145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'.
[  139.947360][ T8145] tipc: Started in network mode
[  139.950784][ T8145] tipc: Node identity 7f000001, cluster identity 4711
[  139.953083][ T8145] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  139.978698][ T8145] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  139.987716][ T8145] tipc: Enabled bearer <udp:syz0>, priority 10
[  140.177173][ T8037] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.333724][ T8037] veth0_vlan: entered promiscuous mode
[  140.340422][ T8037] veth1_vlan: entered promiscuous mode
[  140.359793][ T8037] veth0_macvtap: entered promiscuous mode
[  140.365518][ T8037] veth1_macvtap: entered promiscuous mode
[  140.379951][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.388341][ T8037] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.396619][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.402348][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.415263][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.435201][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.498094][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.502578][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.543459][    T9] gspca_sonixj: reg_r err -71
[  140.544903][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.548908][    T9] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  140.550618][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.555737][    T9] usb 5-1: USB disconnect, device number 6
[  140.629586][ T8188] fuse: fd is not a fuse device
[  141.126362][ T5002] Bluetooth: hci2: command tx timeout
[  141.129514][    T9] tipc: Node number set to 2130706433
[  141.177241][ T8221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.890'.
[  142.209489][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.3.910'.
[  142.423506][   T34] kauditd_printk_skb: 5 callbacks suppressed
[  142.423526][   T34] audit: type=1326 audit(142.299:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8278 comm="syz.5.916" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feac559cdd9 code=0x0
[  142.604112][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  142.766479][    T9] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  142.773556][    T9] usb 5-1: config 0 has no interface number 0
[  142.778918][    T9] usb 5-1: too many endpoints for config 0 interface 255 altsetting 0: 130, using maximum allowed: 30
[  142.789039][    T9] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.793391][    T9] usb 5-1: config 0 interface 255 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.798624][    T9] usb 5-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130
[  142.808820][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  142.812406][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.820997][    T9] usb 5-1: config 0 descriptor??
[  143.147331][ T8311] overlayfs: failed to clone upperpath
[  143.214665][ T5002] Bluetooth: hci2: command tx timeout
[  143.341982][    T9] hid_parser_main: 30 callbacks suppressed
[  143.341997][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.353277][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.355665][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.357928][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.360284][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.362995][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.365976][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.368918][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.372342][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.375139][    T9] microsoft 0003:045E:009D.0004: unknown main item tag 0x0
[  143.384105][    T9] microsoft 0003:045E:009D.0004: hidraw0: USB HID v6f.fd Device [HID 045e:009d] on usb-dummy_hcd.4-1/input255
[  143.390396][    T9] microsoft 0003:045E:009D.0004: no inputs found
[  143.393152][    T9] microsoft 0003:045E:009D.0004: could not initialize ff, continuing anyway
[  143.526227][  T994] usb 5-1: USB disconnect, device number 7
[  143.828894][ T8331] ieee802154 phy0 wpan0: encryption failed: -22
[  144.215626][ T8350] netlink: 14 bytes leftover after parsing attributes in process `syz.4.950'.
[  144.631312][ T8363] loop5: detected capacity change from 0 to 32768
[  144.728432][ T8377] @: renamed from veth0_vlan (while UP)
[  144.820245][ T8381] No source specified
[  145.127366][ T8406] sctp: [Deprecated]: syz.3.971 (pid 8406) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.127366][ T8406] Use struct sctp_sack_info instead
[  145.287462][ T5002] Bluetooth: hci2: command tx timeout
[  145.442957][ T8435] netlink: 'syz.4.982': attribute type 10 has an invalid length.
[  145.453270][ T8435] netlink: 'syz.4.982': attribute type 10 has an invalid length.
[  145.456250][ T8435] netlink: 40 bytes leftover after parsing attributes in process `syz.4.982'.
[  145.460650][ T8435] vxcan0: entered promiscuous mode
[  145.463294][ T8435] vxcan0: entered allmulticast mode
[  145.468269][ T8435] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check.
[  145.510174][ T8413] loop5: detected capacity change from 0 to 65536
[  145.572316][ T8413] XFS (loop5): Deprecated V4 format (crc=0) not supported by kernel.
[  146.569026][ T8456] syz.5.988 uses obsolete (PF_INET,SOCK_PACKET)
[  146.792686][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.990'.
[  147.089593][  T994] hsr0: entered promiscuous mode
[  147.099122][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'.
[  147.501813][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.999'.
[  147.612228][ T5002] Bluetooth: hci0: unexpected event for opcode 0x2027
[  148.212231][ T8507] bridge_slave_0: default FDB implementation only supports local addresses
[  148.239943][ T8507] bridge_slave_0: default FDB implementation only supports local addresses
[  148.544126][  T798] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  148.774455][  T798] usb 6-1: Using ep0 maxpacket: 32
[  148.810725][  T798] usb 6-1: unable to get BOS descriptor or descriptor too short
[  148.819762][  T798] usb 6-1: config 128 has an invalid interface number: 24 but max is 0
[  148.826763][  T798] usb 6-1: config 128 has no interface number 0
[  148.832794][  T798] usb 6-1: config 128 interface 24 altsetting 4 bulk endpoint 0xA has invalid maxpacket 1024
[  148.841349][  T798] usb 6-1: config 128 interface 24 has no altsetting 0
[  148.849935][  T798] usb 6-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=42.06
[  148.858007][  T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.864464][  T798] usb 6-1: Product: syz
[  148.868486][  T798] usb 6-1: Manufacturer: syz
[  148.872670][  T798] usb 6-1: SerialNumber: syz
[  148.879963][ T8509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  149.105109][  T798] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  149.117467][  T798] usb 6-1: USB disconnect, device number 2
[  149.874637][ T8525] loop4: detected capacity change from 0 to 131072
[  149.881431][ T8525] F2FS-fs (loop4): Test dummy encryption mode enabled
[  149.885332][ T8525] F2FS-fs (loop4): invalid crc value
[  149.958534][ T8525] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.969186][ T8525] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  150.065413][ T8552] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1026'.
[  150.111826][ T8525] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))"
[  150.147904][ T8558] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  150.153173][ T8558] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  150.559347][ T8569] overlayfs: failed to clone upperpath
[  151.046313][ T8592] loop4: detected capacity change from 0 to 16
[  151.330053][ T8592] erofs (device loop4): mounted with root inode @ nid 36.
[  151.363052][ T8591] syz.4.1042: attempt to access beyond end of device
[  151.363052][ T8591] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16
[  151.379343][ T8591] syz.4.1042: attempt to access beyond end of device
[  151.379343][ T8591] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16
[  151.385858][ T8591] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192
[  151.389728][ T8591] erofs (device loop4): read error -117 @ 1 of nid 89
[  151.392051][   T34] audit: type=1800 audit(151.269:63): pid=8591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1042" name="file2" dev="loop4" ino=89 res=0 errno=0
[  151.457376][ T8601] loop5: detected capacity change from 0 to 256
[  151.470041][ T8601] exfat: Deprecated parameter 'utf8'
[  151.473523][ T8601] exfat: Deprecated parameter 'namecase'
[  151.477988][ T8601] exfat: Deprecated parameter 'namecase'
[  151.484098][ T8601] exfat: Deprecated parameter 'utf8'
[  151.490381][ T8601] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  152.086794][ T8591] syz.4.1042 (8591) used greatest stack depth: 19928 bytes left
[  152.330249][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1055'.
[  152.384145][ T8637] loop4: detected capacity change from 0 to 8
[  152.434616][ T8637] SQUASHFS error: Unable to read directory block [249:c]
[  152.524795][   T10] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  152.617596][ T8649] loop4: detected capacity change from 0 to 512
[  152.622847][ T8649] EXT4-fs: inline encryption not supported
[  152.649137][ T8649] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1059: corrupted in-inode xattr: e_value size too large
[  152.656204][ T8649] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  152.656525][ T8649] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1059: couldn't read orphan inode 15 (err -117)
[  152.663237][ T8649] loop4: lost filesystem error report for type 5 error -117
[  152.664529][ T8649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.673668][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  152.680915][ T8653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'.
[  152.690242][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  152.701920][   T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  152.706426][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  152.710309][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  152.717474][   T10] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  152.719023][ T7316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.726993][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.744988][   T10] usb 6-1: Product: syz
[  152.747080][   T10] usb 6-1: Manufacturer: syz
[  152.750654][   T10] usb 6-1: SerialNumber: syz
[  152.768824][   T10] usb 6-1: config 0 descriptor??
[  152.786836][ T8626] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  152.830574][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input15
[  152.861309][    C1] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  153.009057][ T8667] bond1 (unregistering): Released all slaves
[  153.021116][ T5672] usb 6-1: USB disconnect, device number 3
[  153.756801][ T8678] loop4: detected capacity change from 0 to 131072
[  153.759920][ T8678] F2FS-fs (loop4): Test dummy encryption mode enabled
[  153.763068][ T8678] F2FS-fs (loop4): invalid crc value
[  153.826275][ T8678] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.835933][ T8678] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  153.859709][   T34] audit: type=1800 audit(153.739:64): pid=8678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1073" name="file1" dev="loop4" ino=11 res=0 errno=0
[  154.552854][ T8713] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  154.665446][ T8723] loop4: detected capacity change from 0 to 2048
[  154.678530][ T8723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.708005][ T7316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.975235][ T8737] loop4: detected capacity change from 0 to 32768
[  154.978170][ T8737] btrfs: Deprecated parameter 'usebackuproot'
[  154.980126][ T8737] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  154.985640][ T8737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1098 (8737)
[  154.994888][ T8737] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.998154][ T8737] BTRFS info (device loop4): using crc32c checksum algorithm
[  155.079355][   T46] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  155.111569][ T8737] BTRFS error (device loop4): failed to load root extent
[  155.115269][ T8737] BTRFS warning (device loop4): try to load backup roots slot 1
[  155.118621][   T36] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  155.140636][ T8737] BTRFS warning (device loop4): couldn't read tree root
[  155.143434][ T8737] BTRFS warning (device loop4): try to load backup roots slot 2
[  155.147685][   T46] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  155.154939][ T8737] BTRFS warning (device loop4): couldn't read tree root
[  155.157668][ T8737] BTRFS warning (device loop4): try to load backup roots slot 3
[  155.168778][ T8737] BTRFS info (device loop4): rebuilding free space tree
[  155.189031][ T8737] BTRFS info (device loop4): checking UUID tree
[  155.191961][ T8737] BTRFS info (device loop4): enabling ssd optimizations
[  155.195310][ T8737] BTRFS info (device loop4): using spread ssd allocation scheme
[  155.198464][ T8737] BTRFS info (device loop4): turning on async discard
[  155.201273][ T8737] BTRFS info (device loop4): enabling free space tree
[  155.204323][ T8737] BTRFS info (device loop4): force clearing of disk cache
[  155.207175][ T8737] BTRFS info (device loop4): trying to use backup root at mount time
[  155.210372][ T8737] BTRFS info (device loop4): force zlib compression, level 3
[  155.342591][ T7316] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.682042][ T8778] netlink: 'syz.4.1110': attribute type 29 has an invalid length.
[  155.686055][ T8778] netlink: 'syz.4.1110': attribute type 29 has an invalid length.
[  155.761316][ T8772] loop5: detected capacity change from 0 to 40427
[  155.779192][ T8772] F2FS-fs (loop5): invalid crc value
[  155.822043][ T8772] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.836001][ T8772] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  155.878559][ T8772] syz.5.1107: attempt to access beyond end of device
[  155.878559][ T8772] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.967669][ T8037] syz-executor: attempt to access beyond end of device
[  155.967669][ T8037] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  155.996967][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  155.996991][ T8037] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.997006][ T8037] Call Trace:
[  155.997012][ T8037]  <TASK>
[  155.997018][ T8037]  dump_stack_lvl+0xe8/0x150
[  155.997039][ T8037]  f2fs_stop_checkpoint+0x3c7/0x590
[  155.997058][ T8037]  f2fs_write_end_io+0x1274/0x1740
[  155.997089][ T8037]  __submit_merged_bio+0x256/0x6a0
[  155.997108][ T8037]  __submit_merged_write_cond+0x3c9/0x4e0
[  155.997129][ T8037]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  155.997157][ T8037]  f2fs_write_data_pages+0x287e/0x34f0
[  155.997173][ T8037]  ? __lock_acquire+0x6b5/0x2cf0
[  155.997209][ T8037]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.997232][ T8037]  ? unwind_next_frame+0xa6/0x2550
[  155.997263][ T8037]  ? unwind_next_frame+0xa6/0x2550
[  155.997274][ T8037]  ? rcu_is_watching+0x15/0xb0
[  155.997286][ T8037]  ? __kasan_check_byte+0x12/0x40
[  155.997297][ T8037]  ? __pfx_hlock_conflict+0x10/0x10
[  155.997309][ T8037]  ? __bfs+0x153/0x290
[  155.997319][ T8037]  ? __pfx_hlock_conflict+0x10/0x10
[  155.997344][ T8037]  ? lockdep_unlock+0x5d/0xd0
[  155.997355][ T8037]  ? __lock_acquire+0x146e/0x2cf0
[  155.997383][ T8037]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.997399][ T8037]  do_writepages+0x32e/0x550
[  155.997419][ T8037]  ? do_raw_spin_unlock+0x4d/0x210
[  155.997436][ T8037]  filemap_fdatawrite+0x1e9/0x2f0
[  155.997451][ T8037]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.997489][ T8037]  ? do_raw_spin_unlock+0x4d/0x210
[  155.997507][ T8037]  f2fs_sync_dirty_inodes+0x30e/0x830
[  155.997533][ T8037]  f2fs_write_checkpoint+0x9df/0x26a0
[  155.997549][ T8037]  ? __lock_acquire+0x6b5/0x2cf0
[  155.997578][ T8037]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.997626][ T8037]  kill_f2fs_super+0x314/0x730
[  155.997666][ T8037]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.997691][ T8037]  ? lockdep_hardirqs_on+0x7a/0x110
[  155.997744][ T8037]  deactivate_locked_super+0xbc/0x130
[  155.997764][ T8037]  cleanup_mnt+0x437/0x4d0
[  155.997775][ T8037]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.997792][ T8037]  task_work_run+0x1d9/0x270
[  155.997811][ T8037]  ? __pfx_task_work_run+0x10/0x10
[  155.997832][ T8037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.997845][ T8037]  exit_to_user_mode_loop+0xed/0x480
[  155.997856][ T8037]  ? rcu_is_watching+0x15/0xb0
[  155.997876][ T8037]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.997887][ T8037]  do_syscall_64+0x33e/0xf80
[  155.997903][ T8037]  ? trace_irq_disable+0x3b/0x140
[  155.997924][ T8037]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.997936][ T8037] RIP: 0033:0x7feac559e017
[  155.997949][ T8037] Code: a2 c7 05 dc 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  155.997959][ T8037] RSP: 002b:00007ffe4ec42448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.997974][ T8037] RAX: 0000000000000000 RBX: 00007feac5632120 RCX: 00007feac559e017
[  155.997981][ T8037] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4ec42500
[  155.997988][ T8037] RBP: 00007ffe4ec42500 R08: 00007ffe4ec43500 R09: 00000000ffffffff
[  155.998003][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4ec43590
[  155.998010][ T8037] R13: 00007feac5632120 R14: 00000000000260bc R15: 00007ffe4ec435d0
[  155.998029][ T8037]  </TASK>
[  155.999570][ T8037] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  156.610437][ T8793] loop4: detected capacity change from 0 to 1024
[  156.613113][ T8793] hfsplus: unable to change nls mapping
[  156.708172][ T8802] pim6reg: entered allmulticast mode
[  156.713656][ T8802] syz_tun: entered allmulticast mode
[  156.998142][ T8807] loop5: detected capacity change from 0 to 32768
[  157.004579][ T8807] XFS (loop5): sunit and swidth must be specified together
[  157.239885][ T8833] loop4: detected capacity change from 0 to 4096
[  157.251505][ T8833] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  157.297176][ T8843] smc: net device bond0 applied user defined pnetid SYZ2
[  157.531572][ T8868] FAULT_FLAG_ALLOW_RETRY missing 801
[  157.535616][ T8868] CPU: 0 UID: 0 PID: 8868 Comm: syz.4.1147 Not tainted syzkaller #0 PREEMPT(full) 
[  157.535637][ T8868] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  157.535646][ T8868] Call Trace:
[  157.535652][ T8868]  <TASK>
[  157.535657][ T8868]  dump_stack_lvl+0xe8/0x150
[  157.535709][ T8868]  handle_userfault+0x1532/0x17f0
[  157.535730][ T8868]  ? __pfx___folio_put+0x10/0x10
[  157.535743][ T8868]  ? __pfx_handle_userfault+0x10/0x10
[  157.535760][ T8868]  ? handle_mm_fault+0xee/0x3170
[  157.535773][ T8868]  handle_mm_fault+0x1bd7/0x3170
[  157.535789][ T8868]  ? handle_mm_fault+0xee/0x3170
[  157.535801][ T8868]  ? __pfx_handle_mm_fault+0x10/0x10
[  157.535812][ T8868]  ? follow_page_pte+0x6b5/0xe50
[  157.535825][ T8868]  ? __pfx_follow_page_pte+0x10/0x10
[  157.535837][ T8868]  __get_user_pages+0x1683/0x2720
[  157.535857][ T8868]  populate_vma_page_range+0x2be/0x3c0
[  157.535866][ T8868]  ? __pfx_populate_vma_page_range+0x10/0x10
[  157.535874][ T8868]  ? vma_wants_writenotify+0xba/0x2c0
[  157.535883][ T8868]  ? vma_set_page_prot+0xc3/0x100
[  157.535893][ T8868]  mprotect_fixup+0x9e5/0xb60
[  157.535901][ T8868]  ? __pfx_mprotect_fixup+0x10/0x10
[  157.535914][ T8868]  ? apparmor_file_mprotect+0x1d0/0x400
[  157.535922][ T8868]  ? security_file_mprotect+0x1a/0x290
[  157.535934][ T8868]  do_mprotect_pkey+0x8d5/0xd20
[  157.535945][ T8868]  ? __pfx_do_mprotect_pkey+0x10/0x10
[  157.535962][ T8868]  ? rcu_is_watching+0x15/0xb0
[  157.535975][ T8868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.535983][ T8868]  __x64_sys_mprotect+0x80/0x90
[  157.535990][ T8868]  do_syscall_64+0x15f/0xf80
[  157.536000][ T8868]  ? trace_irq_disable+0x3b/0x140
[  157.536012][ T8868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  157.536019][ T8868] RIP: 0033:0x7f5ca2d9cdd9
[  157.536027][ T8868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  157.536033][ T8868] RSP: 002b:00007f5ca3ca0028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a
[  157.536043][ T8868] RAX: ffffffffffffffda RBX: 00007f5ca3016090 RCX: 00007f5ca2d9cdd9
[  157.536048][ T8868] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000
[  157.536055][ T8868] RBP: 00007f5ca2e32d69 R08: 0000000000000000 R09: 0000000000000000
[  157.536060][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  157.536065][ T8868] R13: 00007f5ca3016128 R14: 00007f5ca3016090 R15: 00007ffff84186c8
[  157.536076][ T8868]  </TASK>
[  157.733041][ T8873] vlan2: entered promiscuous mode
[  157.737962][ T8873] syz_tun: entered promiscuous mode
[  157.740086][ T8873] vlan2: entered allmulticast mode
[  157.741989][ T8873] syz_tun: entered allmulticast mode
[  158.263447][ T8886] Bluetooth: MGMT ver 1.23
[  158.825204][ T8902] loop4: detected capacity change from 0 to 65536
[  158.827650][ T8902] xfs: Deprecated parameter 'ikeep'
[  158.829357][ T8902] XFS: ikeep mount option is deprecated.
[  158.834844][   T32] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  158.839762][ T8902] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  158.850437][ T8902] XFS (loop4): Ending clean mount
[  158.865502][ T8902] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  158.870562][ T8902] XFS (loop4): Unmount and run xfs_repair
[  158.872690][ T8902] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  158.875314][ T8902] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  158.878045][ T8902] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  158.880805][ T8902] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  158.883635][ T8902] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  158.886778][ T8902] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  158.889647][ T8902] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  158.892835][ T8902] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  158.895806][ T8902] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  158.898813][ T8902] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2b0/0x490" at daddr 0x6 len 2 error 74
[  158.902732][ T8902] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x518/0x8f0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  158.907272][ T8902] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  158.928929][ T7316] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  159.004731][   T32] usb 6-1: Using ep0 maxpacket: 32
[  159.019149][   T32] usb 6-1: unable to get BOS descriptor or descriptor too short
[  159.030847][   T32] usb 6-1: config 129 has an invalid interface number: 242 but max is 0
[  159.041945][   T32] usb 6-1: config 129 has no interface number 0
[  159.049936][   T32] usb 6-1: config 129 interface 242 has no altsetting 0
[  159.061202][   T32] usb 6-1: New USB device found, idVendor=0c45, idProduct=624c, bcdDevice=1e.54
[  159.066478][   T32] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.073930][   T32] usb 6-1: Product: syz
[  159.083934][   T32] usb 6-1: Manufacturer: syz
[  159.085739][   T32] usb 6-1: SerialNumber: syz
[  159.202131][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1175'.
[  159.304203][   T32] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624c
[  159.310125][   T32] gspca_sn9c20x: Write register 1000 failed -71
[  159.313069][   T32] gspca_sn9c20x: Device initialization failed
[  159.315991][   T32] gspca_sn9c20x 6-1:129.242: probe with driver gspca_sn9c20x failed with error -71
[  159.327521][   T32] usb 6-1: USB disconnect, device number 4
[  159.463475][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1183'.
[  159.467124][ T8949] netlink: 'syz.4.1183': attribute type 21 has an invalid length.
[  159.571225][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1187'.
[  159.583143][ T8958] bond1: option primary_reselect: invalid value (133)
[  159.586478][ T8958] bond1 (unregistering): Released all slaves
[  160.048288][ T8982] binder: 8981:8982 ioctl c0306201 200000000680 returned -14
[  160.269901][ T9002] comedi comedi3: dt2801: I/O base address or length out of range
[  160.486167][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1213'.
[  160.491364][ T9014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.519958][ T9014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.542136][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.672473][ T9027] xt_TCPMSS: Only works on TCP SYN packets
[  160.695765][ T9029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1220'.
[  160.730096][ T9032] netlink: 'syz.4.1221': attribute type 11 has an invalid length.
[  160.736117][ T9032] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1221'.
[  160.890281][ T5002] Bluetooth: hci2: unexpected cc 0x204b length: 9 > 3
[  161.206181][ T9040] loop4: detected capacity change from 0 to 40427
[  161.209920][ T9040] F2FS-fs (loop4): Image doesn't support compression
[  161.212179][ T9040] F2FS-fs (loop4): build fault injection rate: 690
[  161.215294][ T9040] F2FS-fs (loop4): invalid crc value
[  161.471366][ T9040] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  161.562505][ T9040] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  163.138457][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'.
[  163.146668][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'.
[  164.063323][ T9097] loop5: detected capacity change from 0 to 512
[  164.077455][ T9097] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  164.089698][ T9097] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  164.095969][ T9097] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  164.103027][ T9097] System zones: 0-1, 15-15, 18-18, 34-34
[  164.108374][ T9097] EXT4-fs (loop5): orphan cleanup on readonly fs
[  164.110523][ T9097] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0
[  164.116020][ T9097] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  164.121475][ T9097] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  164.129428][ T9097] EXT4-fs (loop5): 1 truncate cleaned up
[  164.132049][ T9097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  164.143727][ T9097] fscrypt (loop5, inode 16): Error -61 getting encryption context
[  164.164474][ T5002] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  164.170196][ T5002] Bluetooth: hci1: Injecting HCI hardware error event
[  164.177353][ T5002] Bluetooth: hci1: hardware error 0x00
[  164.191786][ T8037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.586826][ T9121] xt_ecn: cannot match TCP bits for non-tcp packets
[  164.834330][   T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  164.983984][   T32] usb 5-1: Using ep0 maxpacket: 16
[  164.997847][   T32] usb 5-1: unable to get BOS descriptor or descriptor too short
[  165.002789][ T9138] loop5: detected capacity change from 0 to 512
[  165.004659][   T32] usb 5-1: config 7 has an invalid interface number: 106 but max is 3
[  165.009247][   T32] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  165.012868][   T32] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 4
[  165.019068][   T32] usb 5-1: config 7 has no interface number 0
[  165.023711][   T32] usb 5-1: config 7 interface 106 altsetting 89 endpoint 0x6 has invalid wMaxPacketSize 0
[  165.030698][   T32] usb 5-1: config 7 interface 106 altsetting 89 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  165.039805][   T32] usb 5-1: config 7 interface 106 has no altsetting 0
[  165.050734][   T32] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=c7.5a
[  165.056867][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.062914][   T32] usb 5-1: Product: syz
[  165.066722][   T32] usb 5-1: Manufacturer: syz
[  165.069263][ T9138] 
[  165.070316][   T32] usb 5-1: SerialNumber: syz
[  165.070346][ T9138] ======================================================
[  165.075027][ T9138] WARNING: possible circular locking dependency detected
[  165.077866][ T9138] syzkaller #0 Not tainted
[  165.079751][ T9138] ------------------------------------------------------
[  165.082495][ T9138] syz.5.1257/9138 is trying to acquire lock:
[  165.085005][ T9138] ffff8881125f8c18 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  165.089104][ T9138] 
[  165.089104][ T9138] but task is already holding lock:
[  165.092080][ T9138] ffff888023a82640 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  165.096024][ T9138] 
[  165.096024][ T9138] which lock already depends on the new lock.
[  165.096024][ T9138] 
[  165.100137][ T9138] 
[  165.100137][ T9138] the existing dependency chain (in reverse order) is:
[  165.103703][ T9138] 
[  165.103703][ T9138] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  165.106820][ T9138]        down_write+0x96/0x200
[  165.108827][ T9138]        ext4_destroy_inline_data+0x28/0xe0
[  165.111224][ T9138]        ext4_do_writepages+0x51e/0x4670
[  165.113467][ T9138]        ext4_writepages+0x241/0x3b0
[  165.115609][ T9138]        do_writepages+0x32e/0x550
[  165.117563][ T9138]        file_write_and_wait_range+0x36e/0x440
[  165.119958][ T9138]        mmb_fsync_noflush+0x76/0x1c0
[  165.122053][ T9138]        ext4_sync_file+0x437/0xd50
[  165.124156][ T9138]        ext4_buffered_write_iter+0x2ca/0x3a0
[  165.126568][ T9138]        ext4_file_write_iter+0x298/0x1bf0
[  165.128876][ T9138]        vfs_write+0x61d/0xb90
[  165.130822][ T9138]        __x64_sys_pwrite64+0x199/0x230
[  165.132935][ T9138]        do_syscall_64+0x15f/0xf80
[  165.135016][ T9138]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.137616][ T9138] 
[  165.137616][ T9138] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  165.140915][ T9138]        __lock_acquire+0x15a5/0x2cf0
[  165.143100][ T9138]        lock_acquire+0x106/0x350
[  165.145120][ T9138]        percpu_down_read_internal+0x48/0x1c0
[  165.147465][ T9138]        ext4_writepages+0x205/0x3b0
[  165.149566][ T9138]        do_writepages+0x32e/0x550
[  165.151610][ T9138]        __writeback_single_inode+0x133/0x10e0
[  165.154020][ T9138]        writeback_single_inode+0x4ac/0xdc0
[  165.156350][ T9138]        write_inode_now+0x1c2/0x290
[  165.158450][ T9138]        iput+0x8c1/0xe80
[  165.160190][ T9138]        ext4_xattr_block_set+0x2359/0x2ad0
[  165.162378][ T9138]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  165.164822][ T9138]        __ext4_expand_extra_isize+0x30d/0x400
[  165.166923][ T9138]        __ext4_mark_inode_dirty+0x45c/0x710
[  165.169236][ T9138]        ext4_evict_inode+0x986/0x10e0
[  165.171472][ T9138]        evict+0x61e/0xb10
[  165.173224][ T9138]        ext4_orphan_cleanup+0xc38/0x1470
[  165.175188][ T9138]        ext4_fill_super+0x5a19/0x6330
[  165.176906][ T9138]        get_tree_bdev_flags+0x431/0x4f0
[  165.178692][ T9138]        vfs_get_tree+0x92/0x2a0
[  165.180209][ T9138]        do_new_mount+0x341/0xd30
[  165.181867][ T9138]        __se_sys_mount+0x31d/0x420
[  165.183885][ T9138]        do_syscall_64+0x15f/0xf80
[  165.185498][ T9138]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.187719][ T9138] 
[  165.187719][ T9138] other info that might help us debug this:
[  165.187719][ T9138] 
[  165.191216][ T9138]  Possible unsafe locking scenario:
[  165.191216][ T9138] 
[  165.193643][ T9138]        CPU0                    CPU1
[  165.195377][ T9138]        ----                    ----
[  165.197073][ T9138]   lock(&ei->xattr_sem);
[  165.198689][ T9138]                                lock(&sbi->s_writepages_rwsem);
[  165.201687][ T9138]                                lock(&ei->xattr_sem);
[  165.204359][ T9138]   rlock(&sbi->s_writepages_rwsem);
[  165.206425][ T9138] 
[  165.206425][ T9138]  *** DEADLOCK ***
[  165.206425][ T9138] 
[  165.209545][ T9138] 3 locks held by syz.5.1257/9138:
[  165.211569][ T9138]  #0: ffff8881125fa0d8 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x28c/0xab0
[  165.215616][ T9138]  #1: ffff8881125fa600 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  165.219226][ T9138]  #2: ffff888023a82640 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3db/0x710
[  165.222410][ T9138] 
[  165.222410][ T9138] stack backtrace:
[  165.224285][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: syz.5.1257 Not tainted syzkaller #0 PREEMPT(full) 
[  165.224302][ T9138] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  165.224311][ T9138] Call Trace:
[  165.224320][ T9138]  <TASK>
[  165.224325][ T9138]  dump_stack_lvl+0xe8/0x150
[  165.224339][ T9138]  print_circular_bug+0x2e1/0x300
[  165.224350][ T9138]  check_noncircular+0x12e/0x150
[  165.224364][ T9138]  __lock_acquire+0x15a5/0x2cf0
[  165.224379][ T9138]  ? rcu_is_watching+0x15/0xb0
[  165.224392][ T9138]  ? __kasan_check_byte+0x12/0x40
[  165.224403][ T9138]  ? rcu_is_watching+0x15/0xb0
[  165.224415][ T9138]  ? lock_release+0x4b/0x3c0
[  165.224425][ T9138]  ? lock_release+0x4b/0x3c0
[  165.224436][ T9138]  ? ext4_writepages+0x205/0x3b0
[  165.224450][ T9138]  lock_acquire+0x106/0x350
[  165.224458][ T9138]  ? ext4_writepages+0x205/0x3b0
[  165.224468][ T9138]  percpu_down_read_internal+0x48/0x1c0
[  165.224479][ T9138]  ? ext4_writepages+0x205/0x3b0
[  165.224493][ T9138]  ext4_writepages+0x205/0x3b0
[  165.224507][ T9138]  ? __pfx_ext4_writepages+0x10/0x10
[  165.224524][ T9138]  ? fs_reclaim_acquire+0x7c/0x100
[  165.224539][ T9138]  ? fs_reclaim_acquire+0x7c/0x100
[  165.224554][ T9138]  ? __pfx_ext4_writepages+0x10/0x10
[  165.224567][ T9138]  do_writepages+0x32e/0x550
[  165.224604][ T9138]  __writeback_single_inode+0x133/0x10e0
[  165.224623][ T9138]  ? do_raw_spin_unlock+0x4d/0x210
[  165.224641][ T9138]  writeback_single_inode+0x4ac/0xdc0
[  165.224656][ T9138]  write_inode_now+0x1c2/0x290
[  165.224669][ T9138]  ? __pfx_write_inode_now+0x10/0x10
[  165.224692][ T9138]  ? do_raw_spin_unlock+0x4d/0x210
[  165.224709][ T9138]  iput+0x8c1/0xe80
[  165.224725][ T9138]  ext4_xattr_block_set+0x2359/0x2ad0
[  165.224743][ T9138]  ? __pfx___ext4_get_inode_loc+0x10/0x10
[  165.224757][ T9138]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  165.224771][ T9138]  ? ext4_xattr_block_find+0xea/0x350
[  165.224786][ T9138]  ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  165.224807][ T9138]  __ext4_expand_extra_isize+0x30d/0x400
[  165.224824][ T9138]  __ext4_mark_inode_dirty+0x45c/0x710
[  165.224847][ T9138]  ext4_evict_inode+0x986/0x10e0
[  165.224869][ T9138]  ? __pfx_ext4_evict_inode+0x10/0x10
[  165.224889][ T9138]  ? do_raw_spin_unlock+0x4d/0x210
[  165.224906][ T9138]  ? __pfx_ext4_evict_inode+0x10/0x10
[  165.224923][ T9138]  evict+0x61e/0xb10
[  165.224937][ T9138]  ? __pfx_evict+0x10/0x10
[  165.224947][ T9138]  ? _raw_spin_unlock+0x28/0x50
[  165.224956][ T9138]  ? iput+0xb25/0xe80
[  165.224965][ T9138]  ext4_orphan_cleanup+0xc38/0x1470
[  165.224973][ T9138]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  165.224979][ T9138]  ? ext4_register_li_request+0x640/0x720
[  165.224989][ T9138]  ? errseq_check_and_advance+0x66/0x120
[  165.224997][ T9138]  ext4_fill_super+0x5a19/0x6330
[  165.225010][ T9138]  ? __pfx_ext4_fill_super+0x10/0x10
[  165.225020][ T9138]  ? snprintf+0xe8/0x140
[  165.225028][ T9138]  ? __pfx_snprintf+0x10/0x10
[  165.225035][ T9138]  ? set_blocksize+0x1c9/0x440
[  165.225048][ T9138]  ? sb_set_blocksize+0x155/0x240
[  165.225058][ T9138]  ? setup_bdev_super+0x4c1/0x5b0
[  165.225065][ T9138]  get_tree_bdev_flags+0x431/0x4f0
[  165.225072][ T9138]  ? __pfx_ext4_fill_super+0x10/0x10
[  165.225081][ T9138]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  165.225090][ T9138]  vfs_get_tree+0x92/0x2a0
[  165.225096][ T9138]  do_new_mount+0x341/0xd30
[  165.225104][ T9138]  ? apparmor_capable+0x126/0x170
[  165.225112][ T9138]  ? __pfx_do_new_mount+0x10/0x10
[  165.225120][ T9138]  ? ns_capable+0x89/0xe0
[  165.225128][ T9138]  ? user_path_at+0xd4/0x160
[  165.225138][ T9138]  __se_sys_mount+0x31d/0x420
[  165.225147][ T9138]  ? __pfx___se_sys_mount+0x10/0x10
[  165.225156][ T9138]  ? __x64_sys_mount+0x20/0xc0
[  165.225164][ T9138]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.225171][ T9138]  do_syscall_64+0x15f/0xf80
[  165.225182][ T9138]  ? trace_irq_disable+0x3b/0x140
[  165.225192][ T9138]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.225199][ T9138] RIP: 0033:0x7feac559e04a
[  165.225209][ T9138] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.225215][ T9138] RSP: 002b:00007feac642ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  165.225224][ T9138] RAX: ffffffffffffffda RBX: 00007feac642eee0 RCX: 00007feac559e04a
[  165.225229][ T9138] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007feac642eea0
[  165.225233][ T9138] RBP: 0000200000000180 R08: 00007feac642eee0 R09: 0000000000000000
[  165.225238][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  165.225242][ T9138] R13: 00007feac642eea0 R14: 000000000000047a R15: 0000200000000b40
[  165.225249][ T9138]  </TASK>
[  165.392227][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1257: iget: bad extra_isize 58 (inode size 256)
[  165.397287][ T9138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  165.397796][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1257: error while reading EA inode 11 err=-117
[  165.405647][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  165.405664][    C0] EXT4-fs (loop5): initial error at time 165: ext4_xattr_inode_iget:441: inode 11
[  165.405683][    C0] EXT4-fs (loop5): last error at time 165: ext4_xattr_inode_iget:441: inode 11
[  165.415667][ T9138] loop5: lost filesystem error report for type 5 error -117
[  165.416490][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.1257: iget: bad extra_isize 58 (inode size 256)
[  165.424044][ T9138] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  165.424311][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1257: error while reading EA inode 11 err=-117
[  165.430809][ T9138] loop5: lost filesystem error report for type 5 error -117
[  165.431163][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1257: iget: bad extra_isize 58 (inode size 256)
[  165.439299][ T9138] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  165.439853][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1257: error while reading EA inode 18 err=-117
[  165.451351][ T9138] loop5: lost filesystem error report for type 5 error -117
[  165.451888][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.1257: iget: bad extra_isize 58 (inode size 256)
[  165.460542][ T9138] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  165.461004][ T9138] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.1257: error while reading EA inode 18 err=-117
[  165.470000][ T9138] loop5: lost filesystem error report for type 5 error -117
[  165.470525][ T9138] EXT4-fs (loop5): 1 orphan inode deleted
[  165.477289][ T9138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.516114][ T8037] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.602712][   T32] usb 5-1: USB disconnect, device number 8
[  166.244646][ T5002] Bluetooth: hci1: Opcode 0x0c03 failed: -110
