last executing test programs:

1m41.471838025s ago: executing program 1 (id=316):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x2010000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0)

1m41.358493828s ago: executing program 1 (id=317):
r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d000100006000090400800203000000092106040001220500090581032000090807090502"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0)

1m41.231843592s ago: executing program 2 (id=318):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@delneigh={0x24, 0x1d, 0x1, 0x70bd25, 0x25dfdbfb, {0x1c, 0x0, 0x0, 0x0, 0x4, 0x145, 0x5}, [@NDA_VLAN={0x6, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)

1m41.16096437s ago: executing program 2 (id=319):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1})
fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3})
fcntl$lock(r0, 0x26, &(0x7f0000000180))
fcntl$lock(r0, 0x6, &(0x7f0000000200)={0x0, 0x2, 0xa, 0x1})

1m41.031405038s ago: executing program 0 (id=322):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000014c0)=@newlink={0x58, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1}}, @IFLA_VLAN_INGRESS_QOS={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1m40.971902869s ago: executing program 0 (id=323):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1m40.288205415s ago: executing program 2 (id=324):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@discard_size={'discard', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@discard}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_remount}, {@grpquota}, {@usrquota}, {@errors_continue}, {@nodiscard}, {@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x2c, 0x6319, &(0x7f0000002080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0x1000, 0x2, 0x11, r0, 0x0)
pwritev(r0, &(0x7f000000a7c0)=[{&(0x7f00000083c0)="1a", 0x1}], 0x1, 0x681, 0x6)

1m40.088865555s ago: executing program 0 (id=325):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000100)=0x8)

1m40.011312269s ago: executing program 0 (id=326):
syz_emit_ethernet(0x376, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x340, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f018"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0)

1m39.926419119s ago: executing program 0 (id=327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888)

1m39.907447759s ago: executing program 2 (id=328):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2f}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
syz_emit_ethernet(0x86, &(0x7f00000005c0)=ANY=[], 0x0)

1m39.741134099s ago: executing program 0 (id=329):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7d, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m39.651043271s ago: executing program 2 (id=330):
r0 = syz_io_uring_setup(0x33, &(0x7f0000000080)={0x0, 0x1, 0x80000, 0x0, 0x34}, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000040)={0xffffff01, 0x3}, 0x1)

1m39.601496049s ago: executing program 2 (id=331):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])

1m38.80056811s ago: executing program 1 (id=332):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50)

1m38.759806266s ago: executing program 1 (id=333):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0)
landlock_restrict_self(r1, 0x0)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x1c, 0x0}}], 0x4d, 0x24000000)

1m38.630524648s ago: executing program 1 (id=334):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r0, r1, 0x300, 0xffffffffffffffff, 0xffffffffffffffff)

1m38.529203323s ago: executing program 1 (id=335):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)

1m9.18027926s ago: executing program 32 (id=329):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7d, 0xff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x28, {0x28, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a4779"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1m9.048916451s ago: executing program 33 (id=335):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000e01000700000000000000000000ffff0000000200000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)

1m8.890543874s ago: executing program 34 (id=331):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])

3.308152903s ago: executing program 3 (id=962):
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYRESDEC], 0x3f, 0x0, 0x0)

3.20014379s ago: executing program 3 (id=964):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000200))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xec776000)
ioctl$int_in(r1, 0x5452, &(0x7f0000001080)=0x3)
write(r1, &(0x7f0000000080)='g', 0x1)
ioctl$TCSETS(r1, 0x5402, 0x0)

3.059725779s ago: executing program 3 (id=966):
r0 = open(&(0x7f0000000340)='./file1\x00', 0x1f6000, 0x5)
r1 = open(&(0x7f00000000c0)='.\x00', 0x100000, 0x0)
flock(r1, 0x1)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r1, 0x40106e80, &(0x7f0000000040)={0xc9, 0x1})
open_tree(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@noenospc_debug}, {@compress}, {@discard}]}, 0xfc, 0x559e, &(0x7f000000ac40)="$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")
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getpeername$unix(r3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r5 = open(&(0x7f0000000440)='./file1\x00', 0x4242, 0x1df2a23c5997faa6)
r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, r6, 0x0, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
sendmsg$can_raw(r7, 0x0, 0x1400400d)
close_range(0xffffffffffffffff, r4, 0x2)
write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1, 0x0, 0x5, 0x85, 0x1, 0x1, {0x3, 0xff, 0x5, 0x8, 0x200, 0xd615, 0x9, 0x535, 0xfffffffe, 0x1000, 0x4000000, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x13}}}, 0xa0)
sendfile(r5, r5, &(0x7f0000000080), 0x7f03)
flock(r0, 0x6)

1.368785318s ago: executing program 3 (id=975):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBDIACR(r0, 0x4b4b, &(0x7f00000000c0)=""/171)

1.089039821s ago: executing program 3 (id=981):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r0, &(0x7f0000000200)='S', 0x1)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100))
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000080)={0x5, 0x0, 0xffff5f11, 0xfffd, 0xfffffffffffffffb, 0xb, 0xfffffffffffffffe, 0x1fe, 0x49, 0x28, 0x0, 0x2})

930.011393ms ago: executing program 5 (id=984):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x2010080, &(0x7f0000000340)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c6865617274626561743d6e6f6e652c6572726f72733d636f6e74696e75652c6e6f696e74722c67727071756f74612c001796fa694353e3807803df5ea6fd4d6e6a2613d336eb62b863dcd89e37b45f8bd04199a14c48b3e553e035ab300ba3c60c27682a8ab5656969d829535c0862f6e3a35f15fe4d50c0d5c74631344625d6224c4364749b101ff47a14c51e342ca291c09c35d9d31b06b6b86cb9dccae387b5f1e7c5e1d445d52845a3fa4c77234ea9d37c8a69b80ee303c9a21c58db5d96fb87f1a978259a0847e9fb08dcb8b9f84f616463da2507db1b3489769e9900"/301], 0x1, 0x470d, &(0x7f00000047c0)="$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")

677.296392ms ago: executing program 4 (id=987):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008a00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)

618.020165ms ago: executing program 4 (id=988):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r0, 0x800a6f2f, &(0x7f0000000000))

559.85337ms ago: executing program 4 (id=989):
r0 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r0, 0x402, 0x8000003b)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x80000034)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0)
fcntl$notify(r2, 0x402, 0x40000029)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x110)
fcntl$notify(r3, 0x402, 0x41)
r4 = open(&(0x7f0000000040)='.\x00', 0x163100, 0x0)
getdents64(r4, &(0x7f0000000fc0)=""/224, 0x18)

457.64329ms ago: executing program 3 (id=990):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000)
read(r0, &(0x7f0000000180)=""/145, 0x91)
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0)
r1 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000, 0x1})
syz_open_dev$tty1(0xc, 0x4, 0x1)

457.402902ms ago: executing program 4 (id=991):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETS(r1, 0x5402, &(0x7f00000001c0)={0xff7f, 0x0, 0x0, 0x7fff, 0x2, "db2d416fbecfb84b5452b768e08ee2df361089"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0xd)

398.921058ms ago: executing program 4 (id=992):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3})

279.925072ms ago: executing program 5 (id=993):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x6}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0)

249.31139ms ago: executing program 5 (id=994):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', r1, 0x0, 0x41)

127.770018ms ago: executing program 4 (id=995):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003500)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="ea6d177f4bca9fdd116cfe98efd4953a9819c23df89e0915ca8703c0e8f94b157f55799d27afa84640e03a455bc243e90b1abb18f2907a0741170177e74f7c883ffacb823f2db3515b8e6aa8", 0x4c}, {&(0x7f0000000840)="3f67466b434f0f1dab64b413f241dddea2dbdf0911184a79c6d06cb884a50159037441904c0acf6a994e41d7790cac9d46215c54cd9cd1c8c424bda885bc6dd022b01fff74a0f6227fd01fa455f675b59ef6c2ec767b7883f3e68d209fe15dd3eecaa7bbc3cfadf815a0ef1471c05f17", 0x70}, {&(0x7f0000000a40)="7f9dd881777fea034ee968a3f4d1b230a014767a2fcd073cbd069735a30f70cb161811abe3cb1a0695e82c10a79ab1ff167fd5fcd27035cba4fd82b59b4c6e95368bdf3f511238bbec681e0b8391960f26320dedd0ec55c747628ad1cf3cb5c3229d2f0d1406ce55bc6850fb5b7d6640d9494c", 0x73}], 0x3}}], 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4)
sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88722db6e38df1089394f438cb9fbc08e62754c233cced4a4d4d05a3e5029a01298d3ee87d8a0803a2d26906f42f5b5aaf47d2752a8b23954f309cae13ef250cf76775ddfd153eef2b1a8458a3cb6dc764f19b41c8c61c7305a51a4bfa0c897c7c1f438a851222a5560c0e77b0b5934296bc6f28af87d651f7348a2ba2ca67f930cc655afe0220cbeb79a2a87bba6be2de3e756e674c405bcc51843b4cc75ff7ec38a34d1a2a61f0a1223e69484b5d922b5590758c33317df18c401ff910f9b3f0eaef8b9d928392097a025b0459", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93)

126.328822ms ago: executing program 5 (id=996):
r0 = socket$inet(0x2, 0x801, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x40000000003, 0x0)

60.011951ms ago: executing program 5 (id=997):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv(r0, &(0x7f0000002d00)=[{0x0}, {&(0x7f0000001800)=""/120, 0x78}], 0x2, 0x180, 0x4)

0s ago: executing program 5 (id=998):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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")

kernel console output (not intermixed with test programs):

T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.380872][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   57.389705][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input4
[   57.410931][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.438310][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.458126][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.479023][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.498519][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.511081][ T5723] loop2: detected capacity change from 0 to 512
[   57.518654][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.531478][ T5723] EXT4-fs (loop2): Test dummy encryption mode enabled
[   57.538097][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.544416][ T5723] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.9: inode has both inline data and extents flags
[   57.554399][ T5723] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   57.555252][ T5723] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.9: couldn't read orphan inode 15 (err -117)
[   57.558498][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   57.558514][    C1] EXT4-fs (loop2): initial error at time 1785562751: ext4_orphan_get:1391: inode 15
[   57.558526][    C1] EXT4-fs (loop2): last error at time 1785562751: ext4_orphan_get:1391: inode 15
[   57.574610][ T5723] loop2: lost filesystem error report for type 5 error -117
[   57.575535][ T5723] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.576538][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.608045][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.632746][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.651593][ T5739] loop1: detected capacity change from 0 to 2048
[   57.658322][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[   57.664159][ T5739] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   57.680950][   T24] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[   57.688022][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[   57.861459][   T24] usb 3-1: USB disconnect, device number 2
[   58.238224][ T4982] Bluetooth: hci0: command tx timeout
[   58.408063][   T56] Bluetooth: hci2: command tx timeout
[   58.410429][ T4982] Bluetooth: hci1: command tx timeout
[   58.450907][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.524187][ T5765] loop0: detected capacity change from 0 to 512
[   58.526605][ T5765] =======================================================
[   58.526605][ T5765] WARNING: The mand mount option has been deprecated and
[   58.526605][ T5765]          and is ignored by this kernel. Remove the mand
[   58.526605][ T5765]          option from the mount to silence this warning.
[   58.526605][ T5765] =======================================================
[   58.930580][ T5773] sit0: entered promiscuous mode
[   58.934043][ T5773] netlink: 'syz.1.29': attribute type 1 has an invalid length.
[   58.936345][ T5773] netlink: 9 bytes leftover after parsing attributes in process `syz.1.29'.
[   59.127234][ T5775] loop1: detected capacity change from 0 to 32768
[   59.147819][ T5775] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   59.166603][ T5775] XFS (loop1): Ending clean mount
[   59.174917][ T5775] XFS (loop1): Quotacheck needed: Please wait.
[   59.193473][ T5775] XFS (loop1): Quotacheck: Done.
[   59.214842][ T5591] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   59.297955][ T5661] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   59.449110][ T5795] loop0: detected capacity change from 0 to 128
[   59.500446][ T5661] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.503440][ T5661] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   59.506424][ T5661] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   59.525399][ T5661] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40
[   59.529070][ T5661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.531683][ T5661] usb 3-1: Product: syz
[   59.533322][ T5661] usb 3-1: Manufacturer: syz
[   59.536081][ T5661] usb 3-1: SerialNumber: syz
[   59.760496][ T5661] usb 3-1: 0:2 : does not exist
[   59.782030][ T5661] usb 3-1: USB disconnect, device number 3
[   59.803007][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   60.319103][ T4982] Bluetooth: hci0: command tx timeout
[   60.477982][   T56] Bluetooth: hci2: command tx timeout
[   60.479422][ T4982] Bluetooth: hci1: command tx timeout
[   60.598328][ T5060] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   60.638930][   T31] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   60.747919][ T5060] usb 3-1: Using ep0 maxpacket: 32
[   60.751578][ T5060] usb 3-1: config 0 has too many interfaces: 193, using maximum allowed: 32
[   60.754634][ T5060] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 193
[   60.757627][ T5060] usb 3-1: config 0 has no interface number 0
[   60.760136][ T5060] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.764386][ T5060] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.768642][ T5060] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[   60.772504][ T5060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.781272][ T5060] usb 3-1: config 0 descriptor??
[   60.794612][   T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.801959][   T31] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   60.806070][   T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   60.812654][   T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.815567][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.818567][   T31] usb 1-1: Product: syz
[   60.820124][   T31] usb 1-1: Manufacturer: syz
[   60.821896][   T31] usb 1-1: SerialNumber: syz
[   60.834858][   T31] cdc_ncm 1-1:1.0: skipping garbage
[   61.201458][ T5060] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   61.203931][ T5060] corsair 0003:1B1C:1B34.0001: unknown main item tag 0x0
[   61.207306][ T5060] corsair 0003:1B1C:1B34.0001: failed to start in urb: -90
[   61.214117][ T5060] corsair 0003:1B1C:1B34.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input1
[   61.409062][    T9] usb 3-1: USB disconnect, device number 4
[   61.647926][ T5060] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   61.807942][ T5060] usb 2-1: Using ep0 maxpacket: 8
[   61.811165][ T5060] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[   61.814314][ T5060] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   61.817747][ T5060] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   61.821157][ T5060] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   61.824800][ T5060] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   61.829205][ T5060] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   61.832018][ T5060] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.840641][   T31] cdc_ncm 1-1:1.0: bind() failure
[   61.847397][   T31] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[   61.853135][   T31] usb 1-1: USB disconnect, device number 2
[   61.995440][ T5821] IPVS: Scheduler module ip_vs_sip not found
[   62.043351][ T5060] usb 2-1: GET_CAPABILITIES returned 0
[   62.045533][ T5060] usbtmc 2-1:16.0: can't read capabilities
[   62.209927][ T5830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.51'.
[   62.246599][ T5060] usb 2-1: USB disconnect, device number 2
[   62.398047][ T4982] Bluetooth: hci0: command tx timeout
[   62.400608][ T5840] nbd: must specify a device to reconfigure
[   62.490643][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.493090][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.495637][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.501299][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.503850][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.506221][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.510887][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.515435][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.518230][ T5846] netlink: 'syz.0.59': attribute type 3 has an invalid length.
[   62.558004][ T4982] Bluetooth: hci1: command tx timeout
[   62.559045][   T56] Bluetooth: hci2: command tx timeout
[   62.828012][  T782] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   62.962476][ T5876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   62.972680][ T5876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   62.978532][ T5876] bond0 (unregistering): Released all slaves
[   62.999787][  T782] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   63.003845][  T782] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   63.013515][  T782] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.017145][  T782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   63.038042][  T782] usb 1-1: SerialNumber: syz
[   63.045441][  T782] usb 1-1: bad CDC descriptors
[   63.123007][ T5887] loop2: detected capacity change from 0 to 128
[   63.255491][ T5060] usb 1-1: USB disconnect, device number 3
[   63.945063][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   63.949534][ T5896] netlink: 32 bytes leftover after parsing attributes in process `syz.1.82'.
[   64.161030][ T5906] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0
[   64.181649][ T5905] binder: 5903:5905 ioctl 4018620d 0 returned -22
[   64.434135][ T5914] capability: warning: `syz.1.90' uses 32-bit capabilities (legacy support in use)
[   64.590161][ T5920] loop1: detected capacity change from 0 to 256
[   64.696682][ T5924] loop0: detected capacity change from 0 to 1024
[   64.700100][ T5920] block device autoloading is deprecated and will be removed.
[   64.714381][ T5924] EXT4-fs: Ignoring removed bh option
[   64.720252][ T5924] EXT4-fs (loop0): stripe (17) is not aligned with cluster size (16), stripe is disabled
[   64.780406][ T5924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.823917][   T33] audit: type=1804 audit(1785562757.807:2): pid=5924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.95" name="/newroot/28/file1/bus" dev="loop0" ino=18 res=1 errno=0
[   64.853567][ T5929] bridge0: entered promiscuous mode
[   65.278081][  T782] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   65.444151][  T782] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.449963][  T782] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[   65.459206][  T782] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   65.462553][  T782] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.465457][  T782] usb 2-1: Product: syz
[   65.482350][  T782] usb 2-1: Manufacturer: syz
[   65.485176][  T782] usb 2-1: SerialNumber: syz
[   65.540173][ T5935] loop2: detected capacity change from 0 to 64
[   65.616950][ T5599] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   66.088061][ T5946] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[   66.180214][ T5945] loop1: detected capacity change from 0 to 32768
[   66.184227][ T5945] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.97 (5945)
[   66.198344][ T5945] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   66.203175][ T5945] BTRFS info (device loop1): using sha256 checksum algorithm
[   66.283503][ T5945] BTRFS info (device loop1): rebuilding free space tree
[   66.303378][ T5945] BTRFS info (device loop1): setting nodatasum
[   66.305880][ T5945] BTRFS info (device loop1): setting nodatacow
[   66.308646][ T5945] BTRFS info (device loop1): turning off barriers
[   66.311124][ T5945] BTRFS info (device loop1): turning on sync discard
[   66.313736][ T5945] BTRFS info (device loop1): enabling free space tree
[   66.316386][ T5945] BTRFS info (device loop1): force clearing of disk cache
[   66.727923][  T782] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   66.888139][  T782] usb 3-1: Using ep0 maxpacket: 32
[   66.891119][ T5967] program syz.0.104 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   66.891612][  T782] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   66.899095][  T782] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   66.904346][  T782] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   66.907198][  T782] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   66.912246][  T782] usb 3-1: Product: syz
[   66.916401][  T782] usb 3-1: Manufacturer: syz
[   66.940573][  T782] hub 3-1:4.0: USB hub found
[   66.964970][ T5972] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[   66.968596][ T5972] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   67.135728][  T782] hub 3-1:4.0: 2 ports detected
[   67.488366][ T6001] validate_nla: 45 callbacks suppressed
[   67.488375][ T6001] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   67.493297][ T6001] syz_tun: entered promiscuous mode
[   67.499643][ T6001] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[   67.505589][ T6001] netlink: 'syz.0.119': attribute type 10 has an invalid length.
[   67.512275][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.516365][ T6001] team0: Port device bond0 added
[   67.550077][  T782] hub 3-1:4.0: set hub depth failed
[   67.559574][  T782] usb 3-1: USB disconnect, device number 5
[   68.036976][   T24] usb 2-1: USB disconnect, device number 3
[   68.092747][ T5591] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   68.425703][ T6026] loop2: detected capacity change from 0 to 128
[   68.440442][ T6026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[   68.449382][ T6026] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   68.519948][ T5600] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09.
[   68.571641][ T6040] loop0: detected capacity change from 0 to 16
[   68.582359][ T6040] erofs (device loop0): mounted with root inode @ nid 36.
[   68.607932][   T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   68.760868][   T24] usb 2-1: config 1 interface 0 altsetting 108 endpoint 0x81 has invalid maxpacket 1983, setting to 1024
[   68.768973][   T24] usb 2-1: config 1 interface 0 altsetting 108 bulk endpoint 0x82 has invalid maxpacket 1023
[   68.785424][   T24] usb 2-1: config 1 interface 0 altsetting 108 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   68.790955][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[   68.803302][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   68.806591][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.810678][   T24] usb 2-1: Product: syz
[   68.813682][   T24] usb 2-1: Manufacturer: syz
[   68.815690][   T24] usb 2-1: SerialNumber: syz
[   68.824033][ T6020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   68.826713][ T6020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   68.835268][ T6020] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   69.093306][   T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[   69.115890][   T24] usb 2-1: USB disconnect, device number 4
[   69.460987][ T6085] warning: `syz.2.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.480760][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.483199][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.485688][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.489441][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.491915][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.494664][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.497502][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.503667][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.507763][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.515061][    T9] hid-generic 0006:0008:0008.0002: unknown main item tag 0x0
[   69.520789][    T9] hid-generic 0006:0008:0008.0002: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1
[   69.743392][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.1.159'.
[   70.027991][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   70.188032][    T9] usb 2-1: Using ep0 maxpacket: 32
[   70.192556][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.197468][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0
[   70.201540][    T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0
[   70.205375][    T9] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.210705][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   70.216031][    T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   70.220531][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.223924][    T9] usb 2-1: Product: syz
[   70.225785][    T9] usb 2-1: Manufacturer: syz
[   70.227750][    T9] usb 2-1: SerialNumber: syz
[   70.231888][    T9] usb 2-1: config 0 descriptor??
[   70.236130][    T9] gs_usb 2-1:0.0: Required endpoints not found
[   70.401087][ T6093] Bluetooth: hci0: Opcode 0x0401 failed: -4
[   70.443655][   T24] usb 2-1: USB disconnect, device number 5
[   70.558501][ T6130] loop2: detected capacity change from 0 to 4096
[   70.574425][ T6130] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   70.576746][ T6130] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   70.606945][   T36] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   70.611852][ T5600] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   70.614375][ T5600] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   70.617350][ T5600] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[   70.622916][   T36] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[   70.659973][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[   70.899603][ T6151] loop2: detected capacity change from 0 to 1024
[   70.930514][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.424764][   T36] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   71.431718][   T36] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28
[   71.435822][   T36] EXT4-fs (loop2): This should not happen!! Data will be lost
[   71.435822][   T36] 
[   71.439542][   T36] EXT4-fs (loop2): Total free blocks count 0
[   71.441965][   T36] EXT4-fs (loop2): Free/Dirty block details
[   71.444677][   T36] EXT4-fs (loop2): free_blocks=20480
[   71.447063][   T36] EXT4-fs (loop2): dirty_blocks=10528
[   71.449760][   T36] EXT4-fs (loop2): Block reservation details
[   71.452353][   T36] EXT4-fs (loop2): i_reserved_data_blocks=658
[   71.622032][   T56] Bluetooth: hci0: command 0x0401 tx timeout
[   71.655630][   T53] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28
[   71.883251][ T6172] syzkaller0: entered promiscuous mode
[   71.885941][ T6172] syzkaller0: entered allmulticast mode
[   72.296930][ T6184] loop1: detected capacity change from 0 to 256
[   72.311396][ T6184] exfat: Deprecated parameter 'utf8'
[   72.317638][ T6184] exfat: Deprecated parameter 'namecase'
[   72.331019][ T6184] exfat: Deprecated parameter 'namecase'
[   72.342491][ T6184] exfat: Deprecated parameter 'namecase'
[   72.434270][ T6184] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[   72.580461][ T6192] Invalid source name
[   72.655071][ T6198] netlink: 'syz.1.197': attribute type 12 has an invalid length.
[   72.659706][ T6198] netlink: 'syz.1.197': attribute type 29 has an invalid length.
[   72.668690][ T6198] netlink: 148 bytes leftover after parsing attributes in process `syz.1.197'.
[   72.672299][ T6198] netlink: 'syz.1.197': attribute type 1 has an invalid length.
[   72.809257][ T6204] loop1: detected capacity change from 0 to 2048
[   72.823932][ T6204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.081667][ T6213] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size.
[   73.448052][ T5060] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   73.613159][ T5060] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[   73.617742][ T5060] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   73.622164][ T5060] usb 2-1: config 220 has no interface number 2
[   73.624953][ T5060] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   73.631192][ T5060] usb 2-1: config 220 interface 0 has no altsetting 0
[   73.634098][ T5060] usb 2-1: config 220 interface 76 has no altsetting 0
[   73.636934][ T5060] usb 2-1: config 220 interface 1 has no altsetting 0
[   73.647567][ T5060] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   73.651309][ T5060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.654414][ T5060] usb 2-1: Product: syz
[   73.656080][ T5060] usb 2-1: Manufacturer: syz
[   73.658054][ T5060] usb 2-1: SerialNumber: syz
[   73.929171][ T5060] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[   73.939795][ T5060] uvcvideo 2-1:220.0: No valid video chain found.
[   73.943008][ T5060] usb 2-1: selecting invalid altsetting 0
[   73.945628][ T6220] loop0: detected capacity change from 0 to 164
[   73.961418][ T5060] usb 2-1: selecting invalid altsetting 0
[   73.963849][ T5060] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[   73.970103][ T6220] Unable to read rock-ridge attributes
[   73.976842][ T5060] usb 2-1: USB disconnect, device number 6
[   74.481283][   T33] audit: type=1326 audit(1785562767.457:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.1.207" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f411c19e019 code=0x0
[   74.705768][ T6235] pim6reg: entered allmulticast mode
[   74.710959][ T6235] pim6reg: left allmulticast mode
[   74.848275][ T6240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.213'.
[   75.000260][ T6247] Format for deleting device is "id" (uint).
[   75.007331][ T6245] netlink: 'syz.2.216': attribute type 10 has an invalid length.
[   75.291788][ T6263] loop2: detected capacity change from 0 to 2048
[   75.342264][ T5814]  loop2: p1 < > p4 < >
[   75.353259][ T6263]  loop2: p1 < > p4 < >
[   75.472796][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   75.478377][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   75.510702][ T5611] udevd[5611]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   75.525307][ T5814] udevd[5814]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[   75.611496][   T33] audit: type=1326 audit(1785562768.567:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4059e019 code=0x7ffc0000
[   75.657969][   T33] audit: type=1326 audit(1785562768.567:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4059e019 code=0x7ffc0000
[   75.666276][   T33] audit: type=1326 audit(1785562768.567:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.227" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fdb4059e019 code=0x7ffc0000
[   75.680872][ T6273] loop2: detected capacity change from 0 to 2048
[   75.708224][ T6273] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.735052][   T33] audit: type=1326 audit(1785562768.567:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4059e019 code=0x7ffc0000
[   75.769018][   T33] audit: type=1326 audit(1785562768.567:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6268 comm="syz.0.227" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb4059e019 code=0x7ffc0000
[   75.777299][   T33] audit: type=1800 audit(1785562768.747:9): pid=6273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.229" name="bus" dev="loop2" ino=1367 res=0 errno=0
[   76.187364][ T6300] ptrace attach of "/syz-executor exec"[5591] was attempted by ""[6300]
[   76.191834][ T6298] binder: 6295:6298 ioctl c0306201 200000000680 returned -14
[   76.335708][ T6304] loop2: detected capacity change from 0 to 32768
[   76.339425][ T6304] btrfs: Deprecated parameter 'usebackuproot'
[   76.341938][ T6304] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   76.346405][ T6304] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.244 (6304)
[   76.362790][ T6304] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   76.366753][ T6304] BTRFS info (device loop2): using crc32c checksum algorithm
[   76.469918][ T6078] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   76.479722][ T6304] BTRFS error (device loop2): failed to load root extent
[   76.481283][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.482904][ T6304] BTRFS warning (device loop2): try to load backup roots slot 1
[   76.487970][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.489417][ T6078] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   76.508730][ T6304] BTRFS warning (device loop2): couldn't read tree root
[   76.511486][ T6304] BTRFS warning (device loop2): try to load backup roots slot 2
[   76.514943][ T6078] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   76.528132][ T6304] BTRFS warning (device loop2): couldn't read tree root
[   76.530774][ T6304] BTRFS warning (device loop2): try to load backup roots slot 3
[   76.541122][ T6304] BTRFS info (device loop2): rebuilding free space tree
[   76.555066][ T6304] BTRFS info (device loop2): checking UUID tree
[   76.562792][ T6304] BTRFS info (device loop2): enabling ssd optimizations
[   76.564892][ T6304] BTRFS info (device loop2): turning on async discard
[   76.567235][ T6304] BTRFS info (device loop2): enabling free space tree
[   76.570143][ T6304] BTRFS info (device loop2): force clearing of disk cache
[   76.573032][ T6304] BTRFS info (device loop2): enabling auto defrag
[   76.575584][ T6304] BTRFS info (device loop2): trying to use backup root at mount time
[   76.578919][ T6304] BTRFS info (device loop2): use zstd compression, level 3
[   76.807585][ T6340] loop5: detected capacity change from 0 to 7
[   76.822109][ T6340] Dev loop5: unable to read RDB block 7
[   76.828155][ T6340]  loop5: AHDI p1 p2 p3
[   76.834988][ T6340] loop5: partition table partially beyond EOD, truncated
[   76.850115][ T6340] loop5: p1 start 1818582900 is beyond EOD, truncated
[   76.861591][ T6340] loop5: p3 start 335544320 is beyond EOD, truncated
[   77.356221][ T6348] loop1: detected capacity change from 0 to 512
[   77.398498][ T6348] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #2: block 3: comm syz.1.255: lblock 0 mapped to illegal pblock 3 (length 1)
[   77.404162][ T6348] loop1: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117
[   77.406840][ T6348] EXT4-fs warning (device loop1): dx_probe:791: inode #2: lblock 0: comm syz.1.255: error -117 reading directory block
[   77.410718][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   77.410732][    C1] EXT4-fs (loop1): initial error at time 1785562770: ext4_map_blocks:776: inode 2: block 3
[   77.410755][    C1] EXT4-fs (loop1): last error at time 1785562770: ext4_map_blocks:776: inode 2: block 3
[   77.410894][ T5600] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.416448][ T6348] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117
[   77.441071][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.512347][ T6352] xt_nat: multiple ranges no longer supported
[   77.530555][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.645062][ T6363] netlink: 92 bytes leftover after parsing attributes in process `syz.0.261'.
[   77.648402][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.261'.
[   77.651354][ T6363] netlink: 20 bytes leftover after parsing attributes in process `syz.0.261'.
[   77.952004][ T6365] loop1: detected capacity change from 0 to 32768
[   77.958872][ T6365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.262 (6365)
[   77.972386][ T6365] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   77.976436][ T6365] BTRFS info (device loop1): using sha256 checksum algorithm
[   78.021199][ T6365] BTRFS info (device loop1): enabling ssd optimizations
[   78.023390][ T6365] BTRFS info (device loop1): turning on sync discard
[   78.025457][ T6365] BTRFS info (device loop1): enabling free space tree
[   78.539556][ T6398] capability: warning: `syz.0.269' uses deprecated v2 capabilities in a way that may be insecure
[   78.574112][ T5591] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   78.657777][ T6405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'.
[   78.934449][ T6420] netlink: 'syz.1.275': attribute type 12 has an invalid length.
[   78.942776][ T6420] netlink: 'syz.1.275': attribute type 29 has an invalid length.
[   78.951904][ T6420] netlink: 'syz.1.275': attribute type 7 has an invalid length.
[   78.955249][ T6420] netlink: 'syz.1.275': attribute type 37 has an invalid length.
[   78.959195][ T6420] netlink: 80 bytes leftover after parsing attributes in process `syz.1.275'.
[   78.994154][ T6423] loop1: detected capacity change from 0 to 8
[   79.151390][ T6427] loop2: detected capacity change from 0 to 512
[   79.154374][ T6427] EXT4-fs: Ignoring removed nomblk_io_submit option
[   79.165902][ T6427] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   79.173075][ T6427] EXT4-fs (loop2): 1 truncate cleaned up
[   79.175734][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.182093][ T6425] loop1: detected capacity change from 0 to 32768
[   79.192686][ T6425] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.277 (6425)
[   79.204440][ T6425] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   79.212398][ T6425] BTRFS info (device loop1): using blake2b checksum algorithm
[   79.245267][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.373351][ T6425] BTRFS info (device loop1 state E): enabling ssd optimizations
[   79.376449][ T6425] BTRFS info (device loop1 state E): disabling log replay at mount time
[   79.410339][ T6425] BTRFS info (device loop1 state E): turning on async discard
[   79.413074][ T6425] BTRFS info (device loop1 state E): enabling free space tree
[   79.530366][ T5591] BTRFS info (device loop1 state E): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   79.923397][ T6478] netlink: 'syz.2.293': attribute type 1 has an invalid length.
[   79.925801][ T6478] netlink: 'syz.2.293': attribute type 2 has an invalid length.
[   80.128026][  T782] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   80.282881][  T782] usb 1-1: Using ep0 maxpacket: 32
[   80.296476][  T782] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[   80.305805][  T782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.311989][  T782] usb 1-1: config 0 descriptor??
[   80.332719][  T782] gspca_main: sunplus-2.14.0 probing 041e:400b
[   80.391025][ T6493] smpboot: CPU 1 is now offline
[   80.735912][  T782] gspca_sunplus: reg_w_riv err -71
[   80.746423][  T782] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[   80.780272][  T782] usb 1-1: USB disconnect, device number 4
[   80.807084][ T6501] loop2: detected capacity change from 0 to 512
[   80.836581][ T6501] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[   80.858098][ T6501] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   80.874519][ T6501] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[   80.887447][ T6501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[   80.899207][ T6501] System zones: 0-2, 18-18, 34-34
[   80.910874][ T6501] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.302: bad orphan inode 15
[   80.929008][ T6501] loop2: lost filesystem error report for type 5 error -117
[   80.929959][ T6501] ext4_test_bit(bit=14, block=18) = 1
[   80.933901][ T6501] is_bad_inode(inode)=0
[   80.937898][    C0] EXT4-fs (loop2): error count since last fsck: 1
[   80.939999][    C0] EXT4-fs (loop2): initial error at time 1785562773: ext4_orphan_get:1417
[   80.942542][    C0] EXT4-fs (loop2): last error at time 1785562773: ext4_orphan_get:1417
[   80.962575][ T6501] NEXT_ORPHAN(inode)=2264924160
[   80.964594][ T6501] max_ino=32
[   80.965924][ T6501] i_nlink=0
[   80.985019][ T6501] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.302: corrupted inode contents
[   80.999485][ T6501] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   80.999917][ T6501] EXT4-fs error (device loop2): ext4_dirty_inode:6450: inode #15: comm syz.2.302: mark_inode_dirty error
[   81.040746][ T6501] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   81.044343][ T6501] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.302: corrupted inode contents
[   81.078054][ T6501] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   81.078452][ T6501] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.302: mark_inode_dirty error
[   81.085411][ T6501] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   81.111208][ T6501] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3002: inode #15: comm syz.2.302: mark inode dirty (error -117)
[   81.142571][ T6501] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   81.142949][ T6501] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117)
[   81.160129][ T6501] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.185644][ T6501] EXT4-fs (loop2): shut down requested (1)
[   81.212772][ T5600] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.495046][ T6516] loop1: detected capacity change from 0 to 32768
[   81.531983][ T6516] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   81.546319][ T6516] XFS (loop1): Ending clean mount
[   81.568018][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   81.589774][   T33] audit: type=1800 audit(1785562774.577:10): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.306" name="file3" dev="loop1" ino=6151 res=0 errno=0
[   81.661774][ T5591] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   81.729619][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.732885][    T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   81.739637][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[   81.743685][    T9] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   81.746396][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.031268][    T9] cxacru 1-1:1.0: receive of cm 0x90 failed (-71)
[   82.033608][    T9] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[   82.036415][    T9] cxacru 1-1:1.0: probe with driver cxacru failed with error -22
[   82.088548][    T9] usb 1-1: USB disconnect, device number 5
[   82.367687][ T6540] loop2: detected capacity change from 0 to 40427
[   82.386851][ T6540] F2FS-fs: Quota file already specified
[   82.658061][ T5661] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   82.692963][ T6560] vlan0: entered promiscuous mode
[   82.726380][ T6562] sctp: [Deprecated]: syz.0.323 (pid 6562) Use of int in max_burst socket option deprecated.
[   82.726380][ T6562] Use struct sctp_assoc_value instead
[   82.808971][ T5661] usb 2-1: Using ep0 maxpacket: 32
[   82.812667][ T5661] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[   82.816085][ T5661] usb 2-1: config 0 interface 0 has no altsetting 0
[   82.818832][ T5661] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   82.822166][ T5661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.831946][ T5661] usb 2-1: config 0 descriptor??
[   83.042042][ T5661] usbhid 2-1:0.0: can't add hid device: -71
[   83.046382][ T5661] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   83.053553][ T5661] usb 2-1: USB disconnect, device number 7
[   83.488376][ T5661] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   83.635569][ T6565] loop2: detected capacity change from 0 to 32768
[   83.639020][ T5661] usb 2-1: Using ep0 maxpacket: 32
[   83.649251][ T5661] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[   83.652303][ T5661] usb 2-1: config 0 interface 0 has no altsetting 0
[   83.654465][ T5661] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[   83.657821][ T5661] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.692486][ T5661] usb 2-1: config 0 descriptor??
[   83.704990][   T33] audit: type=1800 audit(1785562776.687:11): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.324" name="file1" dev="loop2" ino=4 res=0 errno=0
[   83.732927][ T6565] read_mapping_page failed!
[   83.745547][ T6565] ERROR: (device loop2): txCommit: 
[   83.745547][ T6565] 
[   84.103334][ T5661] hid_parser_main: 7 callbacks suppressed
[   84.103345][ T5661] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0
[   84.117670][ T5661] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0
[   84.125544][ T5661] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0
[   84.135252][ T5661] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0
[   84.137735][ T5661] corsair-cpro 0003:1B1C:0C10.0003: unknown main item tag 0x0
[   84.144133][ T5661] corsair-cpro 0003:1B1C:0C10.0003: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0
[   84.208540][  T782] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   84.215862][ T5661] corsair-cpro 0003:1B1C:0C10.0003: probe with driver corsair-cpro failed with error -38
[   84.306088][    T9] usb 2-1: USB disconnect, device number 8
[   84.368143][ T5661] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   84.370989][  T782] usb 1-1: Using ep0 maxpacket: 32
[   84.374807][  T782] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   84.379775][  T782] usb 1-1: config 0 interface 0 has no altsetting 0
[   84.382100][  T782] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[   84.385291][  T782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.393138][  T782] usb 1-1: config 0 descriptor??
[   84.523067][ T5661] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   84.525932][ T5661] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.528970][ T5661] usb 3-1: Product: syz
[   84.531136][ T5661] usb 3-1: Manufacturer: syz
[   84.532648][ T5661] usb 3-1: SerialNumber: syz
[   84.542506][ T5661] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   84.569828][  T920] cfg80211: failed to load regulatory.db
[   84.603645][ T5661] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   84.823177][  T782] dragonrise 0003:0079:0011.0004: unknown main item tag 0x2
[   84.826023][  T782] dragonrise 0003:0079:0011.0004: unknown main item tag 0x7
[   84.857555][  T782] dragonrise 0003:0079:0011.0004: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.0-1/input0
[   85.020260][  T782] usb 1-1: USB disconnect, device number 6
[   88.148275][ T5661] usb 3-1: Service connection timeout for: 256
[   88.150735][ T5661] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[   89.615847][    C0] sched: DL replenish lagged too much
[  113.438131][  T782] usb 3-1: USB disconnect, device number 6
[  113.456305][ T5661] ath9k_htc: Failed to initialize the device
[  113.617940][  T782] usb 3-1: ath9k_htc: USB layer deinitialized
[  115.202658][ T4982] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  115.206527][ T4982] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  115.211717][ T4982] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  115.218369][ T4982] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  115.221553][ T4982] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  115.262133][   T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.268673][   T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.278110][   T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.281679][   T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.288731][   T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.412264][ T4982] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  115.415684][ T4982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  115.418526][ T4982] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  115.421035][ T4982] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  115.423375][ T4982] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  115.674922][ T5599] bond0: (slave syz_tun): Releasing backup interface
[  115.881233][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.960214][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.017096][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.050503][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  116.281916][   T13] bridge_slave_1: left allmulticast mode
[  116.283924][   T13] bridge_slave_1: left promiscuous mode
[  116.286960][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.312003][   T13] bridge_slave_0: left allmulticast mode
[  116.313741][   T13] bridge_slave_0: left promiscuous mode
[  116.315587][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.495527][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.499817][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.503589][   T13] bond0 (unregistering): Released all slaves
[  116.879640][ T6603] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.881905][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.884147][ T6603] bridge_slave_0: entered allmulticast mode
[  116.890298][ T6603] bridge_slave_0: entered promiscuous mode
[  116.900444][ T6603] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.902739][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.905142][ T6603] bridge_slave_1: entered allmulticast mode
[  116.909115][ T6603] bridge_slave_1: entered promiscuous mode
[  116.928876][   T13] hsr_slave_0: left promiscuous mode
[  116.931761][   T13] hsr_slave_1: left promiscuous mode
[  116.934250][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  116.937129][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  116.940890][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  116.943729][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  116.952113][   T13] veth1_macvtap: left promiscuous mode
[  116.953986][   T13] veth0_macvtap: left promiscuous mode
[  116.955810][   T13] veth1_vlan: left promiscuous mode
[  116.957575][   T13] veth0_vlan: left promiscuous mode
[  117.088617][   T13] team0 (unregistering): Port device team_slave_1 removed
[  117.102042][   T13] team0 (unregistering): Port device team_slave_0 removed
[  117.197620][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.201289][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.203528][ T6604] bridge_slave_0: entered allmulticast mode
[  117.206122][ T6604] bridge_slave_0: entered promiscuous mode
[  117.240570][ T6603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.244730][ T6603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.260841][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.263504][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.265776][ T6604] bridge_slave_1: entered allmulticast mode
[  117.269320][ T6604] bridge_slave_1: entered promiscuous mode
[  117.282035][   T56] Bluetooth: hci3: command tx timeout
[  117.295845][ T6611] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.307056][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.310991][ T6611] bridge_slave_0: entered allmulticast mode
[  117.314097][ T6611] bridge_slave_0: entered promiscuous mode
[  117.329717][ T6603] team0: Port device team_slave_0 added
[  117.359695][   T56] Bluetooth: hci4: command tx timeout
[  117.362557][ T6611] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.364753][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.366985][ T6611] bridge_slave_1: entered allmulticast mode
[  117.388787][ T6611] bridge_slave_1: entered promiscuous mode
[  117.392301][ T6603] team0: Port device team_slave_1 added
[  117.399149][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.410428][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.439825][   T56] Bluetooth: hci5: command tx timeout
[  117.481390][ T6611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  117.485550][ T6611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  117.531327][ T6604] team0: Port device team_slave_0 added
[  117.583384][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.594955][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.597158][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.611885][ T6603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.618933][ T6604] team0: Port device team_slave_1 added
[  117.622391][ T6611] team0: Port device team_slave_0 added
[  117.636749][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.655099][ T6603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.657426][ T6603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.668571][ T6603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.672900][ T6611] team0: Port device team_slave_1 added
[  117.691636][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.750060][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.752239][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.767971][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.790362][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.816708][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.819144][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.827082][ T6611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.850134][ T6611] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.852321][ T6611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.870117][ T6611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.894117][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.896396][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  117.909297][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.915990][ T6603] hsr_slave_0: entered promiscuous mode
[  117.919511][ T6603] hsr_slave_1: entered promiscuous mode
[  118.046479][ T6604] hsr_slave_0: entered promiscuous mode
[  118.052428][ T6604] hsr_slave_1: entered promiscuous mode
[  118.054570][ T6604] debugfs: 'hsr0' already exists in 'hsr'
[  118.056329][ T6604] Cannot create hsr debugfs directory
[  118.062555][ T6611] hsr_slave_0: entered promiscuous mode
[  118.064742][ T6611] hsr_slave_1: entered promiscuous mode
[  118.066755][ T6611] debugfs: 'hsr0' already exists in 'hsr'
[  118.069603][ T6611] Cannot create hsr debugfs directory
[  118.191706][   T13] bridge_slave_1: left allmulticast mode
[  118.193495][   T13] bridge_slave_1: left promiscuous mode
[  118.195602][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  118.208574][   T13] bridge_slave_0: left allmulticast mode
[  118.210374][   T13] bridge_slave_0: left promiscuous mode
[  118.213355][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  118.402991][   T13] IPVS: stopping master sync thread 5906 ...
[  118.602879][   T13] hsr_slave_0: left promiscuous mode
[  118.604767][   T13] hsr_slave_1: left promiscuous mode
[  118.608763][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.611340][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.628569][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.631595][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.642126][   T13] veth1_macvtap: left promiscuous mode
[  118.643951][   T13] veth0_macvtap: left promiscuous mode
[  118.645900][   T13] veth0_vlan: left promiscuous mode
[  118.872740][   T13] team0 (unregistering): Port device team_slave_1 removed
[  118.881130][   T13] team0 (unregistering): Port device team_slave_0 removed
[  119.002570][ T6603] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  119.024020][ T6603] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  119.060162][ T6603] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  119.072488][ T6603] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  119.181182][ T6604] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  119.231308][ T6604] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  119.241179][ T6604] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  119.270973][ T6604] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  119.330209][ T6611] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  119.358684][   T56] Bluetooth: hci3: command tx timeout
[  119.362824][ T6611] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  119.380218][ T6611] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  119.433244][ T6611] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  119.438158][   T56] Bluetooth: hci4: command tx timeout
[  119.467813][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.519217][   T56] Bluetooth: hci5: command tx timeout
[  119.530077][ T6604] 8021q: adding VLAN 0 to HW filter on device team0
[  119.536632][ T6603] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.551422][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.554006][ T6078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.594951][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.597172][ T6078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.603112][ T6603] 8021q: adding VLAN 0 to HW filter on device team0
[  119.646588][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.648900][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.666077][ T6611] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.687041][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.689361][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.706313][ T6611] 8021q: adding VLAN 0 to HW filter on device team0
[  119.764656][  T163] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.766856][  T163] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.804596][  T163] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.806866][  T163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.834146][ T6603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.939121][ T6611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.410641][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.486792][ T6603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.577373][ T6611] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.600552][ T6603] veth0_vlan: entered promiscuous mode
[  120.613805][ T6603] veth1_vlan: entered promiscuous mode
[  120.702784][ T6603] veth0_macvtap: entered promiscuous mode
[  120.706839][ T6603] veth1_macvtap: entered promiscuous mode
[  120.773230][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.791788][ T6604] veth0_vlan: entered promiscuous mode
[  120.803338][ T6603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.821414][ T6604] veth1_vlan: entered promiscuous mode
[  120.838752][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.841563][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.845016][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.945512][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.024969][ T6604] veth0_macvtap: entered promiscuous mode
[  121.050450][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.052910][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.063412][ T6604] veth1_macvtap: entered promiscuous mode
[  121.141386][ T6611] veth0_vlan: entered promiscuous mode
[  121.150423][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.155558][ T6078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.161694][ T6611] veth1_vlan: entered promiscuous mode
[  121.177431][ T6078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.195152][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.231569][ T5624] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.234373][ T5624] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.237041][ T5624] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.270185][ T6611] veth0_macvtap: entered promiscuous mode
[  121.274030][ T6611] veth1_macvtap: entered promiscuous mode
[  121.308809][ T5624] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.352749][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.383442][ T6611] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.442014][   T56] Bluetooth: hci3: command tx timeout
[  121.472859][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  121.475827][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  121.496725][ T6078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.509637][ T6078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.513034][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  121.521804][   T56] Bluetooth: hci4: command tx timeout
[  121.568842][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.601683][   T56] Bluetooth: hci5: command tx timeout
[  121.639363][ T6076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.644213][ T6076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.716168][ T6076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.724780][ T6076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.836811][ T6078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.849476][ T6078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.014552][ T6819] loop5: detected capacity change from 0 to 16
[  122.027572][ T6819] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  122.691739][ T6839] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  122.693856][ T6839] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  122.734646][ T6839] vhci_hcd vhci_hcd.0: Device attached
[  122.751387][ T6840] vhci_hcd: connection closed
[  122.752841][   T13] vhci_hcd vhci_hcd.4: stop threads
[  122.761007][   T13] vhci_hcd vhci_hcd.4: release socket
[  122.764746][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  122.853723][ T6850] loop3: detected capacity change from 0 to 16
[  122.870994][ T6850] erofs (device loop3): invalid lz4 cfgs, size=6
[  123.519032][   T56] Bluetooth: hci3: command tx timeout
[  123.599396][   T56] Bluetooth: hci4: command tx timeout
[  123.678473][   T56] Bluetooth: hci5: command tx timeout
[  123.772626][ T6870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.361'.
[  124.079012][ T5661] usb 5-1: new low-speed USB device number 2 using dummy_hcd
[  124.299817][ T5661] usb 5-1: unable to get BOS descriptor or descriptor too short
[  124.303167][ T5661] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.306288][ T5661] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.311702][ T5661] usb 5-1: string descriptor 0 read error: -22
[  124.313592][ T5661] usb 5-1: New USB device found, idVendor=1235, idProduct=8208, bcdDevice= 0.40
[  124.316251][ T5661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.328940][ T5661] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  125.185839][ T5661] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  125.311889][   T10] usb 5-1: USB disconnect, device number 2
[  126.269017][ T6894] lo speed is unknown, defaulting to 1000
[  126.271361][ T6894] lo speed is unknown, defaulting to 1000
[  126.274315][ T6894] lo speed is unknown, defaulting to 1000
[  126.278244][ T6894] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  126.284206][ T6894] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  126.371620][ T6894] lo speed is unknown, defaulting to 1000
[  126.374345][ T6894] lo speed is unknown, defaulting to 1000
[  126.377524][ T6894] lo speed is unknown, defaulting to 1000
[  126.380296][ T6894] lo speed is unknown, defaulting to 1000
[  126.690924][ T6900] loop3: detected capacity change from 0 to 256
[  126.712384][ T6900] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.716236][ T6900] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  126.753017][ T6900] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  126.775076][ T6900] exFAT-fs (loop3): failed to load alloc-bitmap
[  126.777137][ T6900] exFAT-fs (loop3): failed to recognize exfat type
[  127.907405][ T6916] loop5: detected capacity change from 0 to 128
[  127.912772][ T6917] loop4: detected capacity change from 0 to 128
[  127.933182][ T6916] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  127.935739][ T6916] System zones: 1-3, 19-19, 35-36
[  127.939218][ T6917] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  127.964437][ T6916] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  128.002611][ T6916] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  128.076015][ T6916] EXT4-fs warning (device loop5): verify_group_input:156: Last group not full
[  128.150599][ T6611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.895440][ T6920] syz.3.378 (6920): drop_caches: 2
[  129.062005][ T6951] Zero length message leads to an empty skb
[  129.498660][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.391'.
[  129.506591][ T6959] vlan2: entered allmulticast mode
[  129.509327][ T6959] dummy0: entered allmulticast mode
[  129.511824][ T6959] bridge0: port 3(vlan2) entered blocking state
[  129.514220][ T6959] bridge0: port 3(vlan2) entered disabled state
[  129.518305][ T6959] vlan2: entered promiscuous mode
[  129.520290][ T6959] dummy0: entered promiscuous mode
[  129.915304][ T6968] bond1: option lp_interval: invalid value (0)
[  129.919709][ T6968] bond1: option lp_interval: allowed values 1 - 2147483647
[  129.927038][ T6968] bond1 (unregistering): Released all slaves
[  130.046565][ T6964] loop5: detected capacity change from 0 to 32768
[  130.114451][ T6964] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  130.117767][ T6977] tipc: Started in network mode
[  130.143445][ T6977] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  130.146297][ T6977] tipc: Enabled bearer <eth:geneve1>, priority 10
[  130.148555][ T6964] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.193243][ T6964] XFS (loop5): Ending clean mount
[  130.226286][ T6964] XFS (loop5): Quotacheck needed: Please wait.
[  130.292931][ T6964] XFS (loop5): Quotacheck: Done.
[  130.309382][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'.
[  130.335599][ T6988] netlink: 'syz.3.400': attribute type 1 has an invalid length.
[  130.429708][ T6611] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  130.782620][ T7008] loop5: detected capacity change from 0 to 256
[  130.861605][ T7010] loop4: detected capacity change from 0 to 2048
[  130.908791][ T7010] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.955729][ T7013] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.156317][ T7017] loop5: detected capacity change from 0 to 4096
[  131.259642][ T5661] tipc: Node number set to 15444650
[  131.638460][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  131.642947][ T7025] loop5: detected capacity change from 0 to 32768
[  131.647982][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'.
[  131.682829][ T7025] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  131.697705][   T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.701332][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'.
[  131.704076][ T7036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.419'.
[  131.714326][   T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.717694][ T7025] JBD2: Ignoring recovery information on journal
[  131.732579][   T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.735224][   T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.792471][ T7025] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  132.814215][ T7047] loop4: detected capacity change from 0 to 1024
[  132.818130][ T7025] (syz.5.415,7025,0):ocfs2_check_dir_entry:314 ERROR: directory entry (#65: offset=512) too close to end or out-of-bounds
[  132.818156][ T7025] (syz.5.415,7025,0):ocfs2_link:843 ERROR: status = -2
[  133.037334][ T6611] ocfs2: Unmounting device (7,5) on (node local)
[  133.110812][ T7043] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  133.129950][ T7043] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  133.217255][ T7043] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  133.267930][ T7043] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  133.279545][ T7043] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  133.310683][ T7043] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  133.313320][ T7043] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  133.325104][ T7043] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  133.331328][ T7043] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  134.798659][   T56] Bluetooth: hci3: command 0x0c1a tx timeout
[  134.952916][ T7096] loop4: detected capacity change from 0 to 128
[  135.009224][ T7096] ADFS-fs (loop4): error: can't find an ADFS filesystem on dev loop4.
[  135.111062][ T5970] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  135.149187][ T7106] loop3: detected capacity change from 0 to 256
[  135.198025][ T7106] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  135.278087][   T56] Bluetooth: hci4: command 0x0c1a tx timeout
[  135.296335][ T5970] usb 6-1: unable to get BOS descriptor or descriptor too short
[  135.309195][ T5970] usb 6-1: config 1 has an invalid interface number: 16 but max is 0
[  135.311734][ T5970] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  135.337793][ T5970] usb 6-1: config 1 has no interface number 0
[  135.345261][ T5970] usb 6-1: config 1 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  135.360523][   T56] Bluetooth: hci5: command 0x0c1a tx timeout
[  135.376719][ T5970] usb 6-1: New USB device found, idVendor=0441, idProduct=4248, bcdDevice= 0.40
[  135.393918][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.396495][ T5970] usb 6-1: Product: syz
[  135.422942][ T5970] usb 6-1: Manufacturer: syz
[  135.424579][ T5970] usb 6-1: SerialNumber: syz
[  135.690095][ T5970] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  135.705200][ T5970] usb 6-1: MIDIStreaming interface descriptor not found
[  135.902014][ T5970] usb 6-1: USB disconnect, device number 2
[  136.882537][ T4982] Bluetooth: hci3: command 0x0c1a tx timeout
[  137.358110][   T56] Bluetooth: hci4: command 0x0c1a tx timeout
[  137.438442][   T56] Bluetooth: hci5: command 0x0c1a tx timeout
[  137.608095][ T6593] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  137.759243][ T6593] usb 6-1: Using ep0 maxpacket: 16
[  137.766822][ T6593] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.773281][ T6593] usb 6-1: config 0 interface 0 has no altsetting 0
[  137.779420][ T6593] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  137.787188][ T6593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.800408][ T6593] usb 6-1: config 0 descriptor??
[  137.920996][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  137.923216][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  138.010821][ T6593] usbhid 6-1:0.0: can't add hid device: -71
[  138.018379][ T6593] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  138.031092][ T6593] usb 6-1: USB disconnect, device number 3
[  138.219276][ T7194] syzkaller1: entered promiscuous mode
[  138.221113][ T7194] syzkaller1: entered allmulticast mode
[  138.513739][ T7205] siw: device registration error -23
[  138.958166][   T56] Bluetooth: hci3: command 0x0c1a tx timeout
[  139.358408][ T4982] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  139.438830][   T56] Bluetooth: hci4: command 0x0c1a tx timeout
[  139.523602][   T56] Bluetooth: hci5: command 0x0c1a tx timeout
[  140.428047][ T7236] loop5: detected capacity change from 0 to 131072
[  140.433816][ T5970] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  140.448907][ T7236] F2FS-fs (loop5): Invalid log sectorsize (16253193)
[  140.451263][ T7236] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  140.458064][ T7236] F2FS-fs (loop5): Skip to start discard thread for readonly image
[  140.600421][ T5970] usb 4-1: Using ep0 maxpacket: 16
[  140.615602][ T5970] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00
[  140.624995][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.640271][ T5970] usb 4-1: Product: syz
[  140.647711][ T5970] usb 4-1: Manufacturer: syz
[  140.656540][ T5970] usb 4-1: SerialNumber: syz
[  140.681270][ T5970] usb 4-1: config 0 descriptor??
[  140.694482][ T5970] usb-storage 4-1:0.0: USB Mass Storage device detected
[  140.729453][ T5970] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1
[  140.731667][ T5970] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 24) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  140.731667][ T5970]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  140.814037][ T7245] netlink: 120 bytes leftover after parsing attributes in process `syz.5.491'.
[  140.816913][ T7245] netlink: 88 bytes leftover after parsing attributes in process `syz.5.491'.
[  140.945807][ T5970] usb 4-1: USB disconnect, device number 2
[  141.096664][ T7251] loop4: detected capacity change from 0 to 4096
[  141.173696][ T7255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.898840][ T7264] loop3: detected capacity change from 0 to 4096
[  141.993494][ T7266] loop9: detected capacity change from 0 to 524287936
[  142.238465][   T33] audit: type=1800 audit(1785562835.217:12): pid=7268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.499" name="file2" dev="tmpfs" ino=287 res=0 errno=0
[  142.421647][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.451900][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.458051][ T7276] bridge_slave_0: default FDB implementation only supports local addresses
[  142.471072][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.483654][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.508144][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.519202][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.531052][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.543824][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.553427][ T7278] loop5: detected capacity change from 0 to 8
[  142.559673][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.577502][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.602441][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.610332][ T7278] evm: overlay not supported
[  142.614211][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.626981][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.646746][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.676761][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.694439][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.942855][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.950915][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.968746][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.987118][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  142.999084][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.019986][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.053091][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.069317][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.100267][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.115232][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.155830][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.173232][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.199087][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.229108][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.232826][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.236267][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.352756][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.356222][ T7274] 9pnet_fd: p9_fd_create_tcp (7274): problem connecting socket to 127.0.0.1
[  143.542444][ T7297] loop3: detected capacity change from 0 to 1024
[  143.619929][ T7297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.704945][ T7297] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.513: missing EA_INODE flag
[  143.747983][ T7297] EXT4-fs (loop3): Remounting filesystem read-only
[  143.761131][ T7297] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  143.892187][ T6603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.103875][ T7314] libceph: resolve '0' (ret=-3): failed
[  144.273014][ T7317] loop5: detected capacity change from 0 to 4096
[  144.359559][ T7322] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.375854][ T7321] loop4: detected capacity change from 0 to 256
[  144.391556][ T7321] vfat: Deprecated parameter 'posix'
[  144.405986][ T7321] FAT-fs: "posix" option is obsolete, not supported now
[  144.417040][ T7317] NILFS (loop5): nilfs_palloc_freev (ino=3): entry number 2307 already freed
[  144.432887][ T7317] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean
[  145.152156][ T7349] netlink: 64 bytes leftover after parsing attributes in process `syz.3.536'.
[  145.193137][ T7352] loop3: detected capacity change from 0 to 164
[  145.204086][ T7352] isofs_fill_super: root inode is not a directory. Corrupted media?
[  145.357371][ T7360] loop3: detected capacity change from 0 to 128
[  145.371501][ T7360] vxfs: block size(-1114885765) > page size(4096) not supported by filesystem
[  145.374694][ T7360] vxfs: unable to set final block size
[  145.644560][ T7366] loop3: detected capacity change from 0 to 32768
[  145.657303][ T7366] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.544 (7366)
[  145.666116][ T7366] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  145.669271][ T7366] BTRFS info (device loop3): using blake2b checksum algorithm
[  145.810562][ T7366] BTRFS info (device loop3): enabling ssd optimizations
[  145.813333][ T7366] BTRFS info (device loop3): turning on async discard
[  145.815829][ T7366] BTRFS info (device loop3): enabling free space tree
[  145.986594][ T7366] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  146.350210][ T7397] sctp: [Deprecated]: syz.5.551 (pid 7397) Use of int in max_burst socket option deprecated.
[  146.350210][ T7397] Use struct sctp_assoc_value instead
[  146.398276][ T5970] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.434186][ T7399] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  146.547917][ T5970] usb 4-1: Using ep0 maxpacket: 32
[  146.552797][ T5970] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  146.557803][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.569735][ T5970] usb 4-1: config 0 descriptor??
[  146.792734][ T5970] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  146.811895][ T5970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  146.827015][ T5970] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  146.834719][ T5970] usb 4-1: media controller created
[  146.859236][ T5970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  146.998391][ T5970] az6027: usb out operation failed. (-71)
[  147.007044][ T5970] az6027: usb out operation failed. (-71)
[  147.013734][ T5970] stb0899_attach: Driver disabled by Kconfig
[  147.019787][ T5970] az6027: no front-end attached
[  147.019787][ T5970] 
[  147.027190][ T5970] az6027: usb out operation failed. (-71)
[  147.034555][ T5970] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  147.048564][ T5970] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  147.104774][ T5970] dvb-usb: schedule remote query interval to 400 msecs.
[  147.120127][ T5970] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  147.148291][ T5970] usb 4-1: USB disconnect, device number 3
[  147.445347][ T5970] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  147.701508][ T7414] loop5: detected capacity change from 0 to 128
[  147.716475][ T7414] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.722822][ T7414] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  147.742806][ T6611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.758453][ T6593] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  147.918093][ T6593] usb 5-1: Using ep0 maxpacket: 32
[  147.923844][ T6593] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  147.926648][ T6593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.936919][ T6593] usb 5-1: Product: syz
[  147.953712][ T6593] usb 5-1: Manufacturer: syz
[  147.955402][ T6593] usb 5-1: SerialNumber: syz
[  147.967204][ T6593] usb 5-1: config 0 descriptor??
[  147.979112][ T6593] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  148.074894][   T33] audit: type=1326 audit(1785562841.057:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.102402][   T33] audit: type=1326 audit(1785562841.067:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.148079][   T33] audit: type=1326 audit(1785562841.067:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.183110][ T6593] gspca_topro: reg_w err -71
[  148.193692][   T33] audit: type=1326 audit(1785562841.077:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.212133][ T6593] gspca_topro: Sensor soi763a
[  148.220846][   T33] audit: type=1326 audit(1785562841.077:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.248077][ T6593] usb 5-1: USB disconnect, device number 3
[  148.266718][   T33] audit: type=1326 audit(1785562841.077:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.307816][   T33] audit: type=1326 audit(1785562841.077:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.352546][   T33] audit: type=1326 audit(1785562841.077:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7431 comm="syz.3.567" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6963b9e019 code=0x7ffc0000
[  148.465680][ T7447] Driver unsupported XDP return value 0 on prog  (id 37) dev N/A, expect packet loss!
[  148.750739][ T7450] loop3: detected capacity change from 0 to 32768
[  148.789833][ T7450] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.874432][ T7450] XFS (loop3): Ending clean mount
[  148.890303][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'.
[  149.313546][ T6603] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  149.443022][ T7467] loop4: detected capacity change from 0 to 128
[  149.467918][ T7467] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  149.505257][ T7467] hpfs: filesystem error: improperly stopped
[  149.507160][ T7467] hpfs: You really don't want any checks? You are crazy...
[  149.545114][ T7467] hpfs: hpfs_map_sector(): read error
[  149.546813][ T7467] hpfs: code page support is disabled
[  149.560312][ T7467] hpfs: hpfs_map_4sectors(): unaligned read
[  149.562347][ T7467] hpfs: hpfs_map_4sectors(): unaligned read
[  149.564207][ T7467] hpfs: filesystem error: unable to find root dir
[  149.675491][ T7473] loop5: detected capacity change from 0 to 1024
[  149.694518][ T7473] EXT4-fs: inline encryption not supported
[  149.722714][ T7473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.781532][   T56] Bluetooth: hci4: unexpected cc 0x2002 length: 1 < 4
[  149.783653][   T56] Bluetooth: hci4: unexpected event for opcode 0x2002
[  149.788864][ T7481] loop4: detected capacity change from 0 to 8
[  149.801172][ T7481] squashfs: Unknown parameter '18446744073709551615N+eZ%n`<ĺ*K1.?7MյzӶ~"w/ čirH(3
[  149.801172][ T7481] |'ǀLAsB~7j?o'
[  149.825262][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.128649][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.592'.
[  150.198933][ T5970] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  150.347926][ T5970] usb 4-1: Using ep0 maxpacket: 16
[  150.354633][ T5970] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  150.363648][ T5970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  150.375158][ T5970] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  150.389302][ T5970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.391826][ T5970] usb 4-1: Product: syz
[  150.393132][ T5970] usb 4-1: Manufacturer: syz
[  150.405050][ T5970] usb 4-1: SerialNumber: syz
[  150.413216][ T5970] usb 4-1: config 0 descriptor??
[  150.420927][ T5970] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  150.423790][ T5970] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  150.538559][ T5661] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  150.690944][ T5661] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  150.694235][ T5661] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3
[  150.710296][ T5661] usb 5-1: config 220 interface 0 has no altsetting 0
[  150.722469][ T5661] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  150.725309][ T5661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.738410][ T5661] usb 5-1: Product: syz
[  150.739959][ T5661] usb 5-1: Manufacturer: syz
[  150.741465][ T5661] usb 5-1: SerialNumber: syz
[  151.142835][ T5970] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  151.150064][ T5970] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  151.159551][ T5661] uvcvideo 5-1:220.0: probe with driver uvcvideo failed with error -22
[  151.165557][ T5661] usb 5-1: USB disconnect, device number 4
[  151.378172][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  151.530437][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  151.533654][   T10] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  151.538849][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  151.541715][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  151.544660][   T10] usb 6-1: SerialNumber: syz
[  151.555240][   T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  151.559570][   T10] usb-storage 6-1:1.0: USB Mass Storage device detected
[  151.565491][   T10] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  151.744761][ T7516] loop4: detected capacity change from 0 to 8192
[  152.161335][ T5970] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe
[  152.364783][ T5970] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  152.373788][ T5970] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  152.379443][ T5970] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  152.383883][ T5970] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  152.391548][ T5970] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  152.396108][ T5970] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  152.414865][ T5970] usb 4-1: USB disconnect, device number 4
[  152.847948][ T6593] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  152.999056][ T6593] usb 5-1: Using ep0 maxpacket: 8
[  153.017501][ T6593] usb 5-1: unable to get BOS descriptor or descriptor too short
[  153.039742][ T6593] usb 5-1: config 7 has an invalid interface number: 59 but max is 0
[  153.047476][ T6593] usb 5-1: config 7 has no interface number 0
[  153.053082][ T6593] usb 5-1: config 7 interface 59 has no altsetting 0
[  153.061699][ T6593] usb 5-1: New USB device found, idVendor=045e, idProduct=00f4, bcdDevice=c1.7d
[  153.069736][ T6593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.076742][ T6593] usb 5-1: Product: syz
[  153.082168][ T6593] usb 5-1: Manufacturer: syz
[  153.089183][ T6593] usb 5-1: SerialNumber: syz
[  153.326049][ T6593] gspca_main: gspca_sn9c20x-2.14.0 probing 045e:00f4
[  153.336227][ T6593] gspca_sn9c20x: Write register 1000 failed -71
[  153.345210][ T6593] gspca_sn9c20x: Device initialization failed
[  153.349641][ T6593] gspca_sn9c20x 5-1:7.59: probe with driver gspca_sn9c20x failed with error -71
[  153.363685][ T6593] usb 5-1: USB disconnect, device number 5
[  153.486037][ T7545] loop3: detected capacity change from 0 to 32768
[  153.507619][ T7545] JBD2: Can't enable checksumming v2 and v3 at the same time!
[  153.512364][ T7545] (syz.3.612,7545,0):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  153.515173][ T7545] (syz.3.612,7545,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  153.518598][ T7545] (syz.3.612,7545,0):ocfs2_check_volume:2432 ERROR: status = -22
[  153.521177][ T7545] (syz.3.612,7545,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  153.533609][ T7545] (syz.3.612,7545,0):ocfs2_fill_super:1177 ERROR: status = -22
[  153.782972][ T6593] usb 6-1: USB disconnect, device number 4
[  154.063936][ T7550] loop3: detected capacity change from 0 to 32768
[  154.070023][ T7552] Invalid ELF header magic: != ELF
[  154.079834][ T7550] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.614 (7550)
[  154.129161][ T7550] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.132188][ T7550] BTRFS info (device loop3): using sha256 checksum algorithm
[  154.228809][ T7550] BTRFS info (device loop3): rebuilding free space tree
[  154.279462][ T7550] BTRFS info (device loop3): enabling ssd optimizations
[  154.295065][ T7550] BTRFS info (device loop3): using spread ssd allocation scheme
[  154.307068][ T7550] BTRFS info (device loop3): turning on async discard
[  154.323120][ T7550] BTRFS info (device loop3): enabling free space tree
[  154.325666][ T7550] BTRFS info (device loop3): force clearing of disk cache
[  154.655962][ T7591] loop4: detected capacity change from 0 to 512
[  154.710281][ T7591] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.626: inode has both inline data and extents flags
[  154.749833][ T7591] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  154.750977][ T7591] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.626: couldn't read orphan inode 15 (err -117)
[  154.759406][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  154.759416][    C0] EXT4-fs (loop4): initial error at time 1785562847: ext4_orphan_get:1391: inode 15
[  154.759428][    C0] EXT4-fs (loop4): last error at time 1785562847: ext4_orphan_get:1391: inode 15
[  154.814980][ T7591] loop4: lost filesystem error report for type 5 error -117
[  154.820625][ T7591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.924855][   T13] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[  154.930625][ T7598] EXT4-fs (loop4): shut down requested (1)
[  154.934374][ T6603] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.055212][ T6604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.091692][ T7600] nfs: Unknown parameter 'fscontext'
[  155.299753][ T7602] loop4: detected capacity change from 0 to 4096
[  155.347290][ T7602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.401344][ T7607] loop3: detected capacity change from 0 to 16
[  155.427489][ T7607] erofs (device loop3): mounted with root inode @ nid 36.
[  155.449230][ T6604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.777968][ T6593] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  155.817954][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  155.917990][   T56] Bluetooth: hci4: command 0x0c1a tx timeout
[  155.929905][ T6593] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  155.936616][ T6593] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  155.940729][ T6593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.944134][ T6593] usb 5-1: Product: syz
[  155.946085][ T6593] usb 5-1: Manufacturer: syz
[  155.953348][ T6593] usb 5-1: SerialNumber: syz
[  155.964621][ T6593] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  155.968469][   T10] usb 4-1: Using ep0 maxpacket: 32
[  155.972750][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  155.982933][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  155.987566][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  155.991721][   T10] usb 4-1: Product: syz
[  155.994198][   T10] usb 4-1: Manufacturer: syz
[  155.996272][   T10] usb 4-1: SerialNumber: syz
[  156.002772][   T10] usb 4-1: config 0 descriptor??
[  156.011814][ T7616] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  156.020275][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  156.023813][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  156.394229][ T6593] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  156.412751][ T6593] usb 5-1: USB disconnect, device number 6
[  157.146260][ T7620] overlayfs: missing 'lowerdir'
[  157.653723][ T7624] loop4: detected capacity change from 0 to 128
[  157.664021][ T7624] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  157.677210][ T7624] hpfs: filesystem error: improperly stopped
[  157.683066][ T7624] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  157.685569][ T7624] hpfs: You really don't want any checks? You are crazy...
[  157.688270][ T7624] hpfs: hpfs_map_sector(): read error
[  157.690126][ T7624] hpfs: code page support is disabled
[  157.692050][ T7624] hpfs: hpfs_map_4sectors(): unaligned read
[  157.693989][ T7624] hpfs: hpfs_map_4sectors(): unaligned read
[  157.695918][ T7624] hpfs: filesystem error: unable to find root dir
[  157.771490][   T33] audit: type=1800 audit(1785562850.757:21): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="idVendor" dev="configfs" ino=15810 res=0 errno=0
[  157.784505][   T33] audit: type=1800 audit(1785562850.767:22): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="serialnumber" dev="configfs" ino=15812 res=0 errno=0
[  157.798595][   T33] audit: type=1800 audit(1785562850.767:23): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="manufacturer" dev="configfs" ino=15813 res=0 errno=0
[  157.831513][   T33] audit: type=1800 audit(1785562850.767:24): pid=7626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="product" dev="configfs" ino=15814 res=0 errno=0
[  157.860638][ T7628] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0)
[  157.990508][ T7634] loop4: detected capacity change from 0 to 1024
[  158.006632][ T6593] usb 4-1: USB disconnect, device number 5
[  158.159775][ T6593] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  158.319495][ T6593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64
[  158.330331][ T6593] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  158.339119][ T6593] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  158.348290][ T6593] usb 4-1: Product: syz
[  158.354036][ T6593] usb 4-1: Manufacturer: syz
[  158.356679][ T6593] usb 4-1: SerialNumber: syz
[  158.367335][ T6593] usb 4-1: config 0 descriptor??
[  158.372221][ T7619] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  158.376485][ T6593] hub 4-1:0.0: bad descriptor, ignoring hub
[  158.381913][ T6593] hub 4-1:0.0: probe with driver hub failed with error -5
[  158.820514][ T6593] usb 4-1: USB disconnect, device number 6
[  158.914560][ T7663] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP)
[  158.957795][ T7665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.655'.
[  159.488535][ T7671] loop3: detected capacity change from 0 to 64
[  159.629734][ T7679] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.663'.
[  159.644603][ T7679] veth0_to_bond: default FDB implementation only supports local addresses
[  160.147746][ T7712] netlink: 428 bytes leftover after parsing attributes in process `syz.3.676'.
[  160.300433][ T7720] loop5: detected capacity change from 0 to 256
[  160.325866][ T7720] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  160.543936][ T7731] netlink: 'syz.5.686': attribute type 21 has an invalid length.
[  160.550366][ T7731] netlink: 132 bytes leftover after parsing attributes in process `syz.5.686'.
[  160.553807][ T7731] netlink: 'syz.5.686': attribute type 1 has an invalid length.
[  160.703286][ T7722] loop4: detected capacity change from 0 to 32768
[  160.738760][ T7722] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.757541][ T7722] XFS (loop4): Ending clean mount
[  160.797616][   T33] audit: type=1800 audit(1785562853.777:25): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.682" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=6156 res=0 errno=0
[  160.853039][ T6604] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.879364][ T6593] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  161.029281][ T7747] loop4: detected capacity change from 0 to 4096
[  161.035775][ T7747] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  161.039089][ T6593] usb 6-1: Using ep0 maxpacket: 8
[  161.049074][ T6593] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  161.052632][ T6593] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  161.064301][ T6593] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  161.074491][ T6593] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  161.080974][ T6593] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  161.092105][ T6593] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  161.099105][ T6593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.192266][ T7749] netlink: 104 bytes leftover after parsing attributes in process `syz.4.691'.
[  161.893373][ T7767] usbtmc 6-1:16.0: simple usb_control_msg returned 0
[  162.358026][ T6593] usb 6-1: USB disconnect, device number 5
[  162.868298][ T7789] bad cache= option: f
[  162.868298][ T7789] EqiO%ƍb)d&Vb'0{^k#pa>x9 8Lޭ1Ko$VXwa8ZU	UZ>/7sXjwi_#BMy'ϟ9iː<L	a9a߂nnYς%m^cm&'%uUgpU#
[  162.868298][ T7789] 
[  162.899762][ T7789] CIFS: VFS: bad cache= option: f
[  162.899762][ T7789] EqiO%ƍb)d&Vb'0{^k#pa>x9 8Lޭ1Ko$VXwa8ZU	UZ>/7sXjwi_#BMy'ϟ9iː<L	a9a߂nnYς%m^cm&'%uUgpU#
[  163.220976][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.716'.
[  163.323748][ T7817] netlink: 56 bytes leftover after parsing attributes in process `syz.3.719'.
[  163.494083][ T7827] syzkaller1: tun_chr_ioctl cmd 1074025672
[  163.496276][ T7827] syzkaller1: ignored: set checksum enabled
[  163.539177][ T7828] binder: 7825:7828 unknown command 0
[  163.546975][ T7828] binder: 7825:7828 ioctl c0306201 2000000001c0 returned -22
[  163.597059][ T7832] loop5: detected capacity change from 0 to 256
[  163.650017][ T7834] loop5: detected capacity change from 0 to 64
[  163.782820][ T7840] loop5: detected capacity change from 0 to 512
[  163.802887][ T7840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.841140][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.030119][ T7847] loop5: detected capacity change from 0 to 40427
[  165.051719][ T7847] F2FS-fs (loop5): Invalid SB checksum offset: 0
[  165.053714][ T7847] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  165.068611][ T7847] F2FS-fs (loop5): invalid crc value
[  165.098995][ T7860] loop3: detected capacity change from 0 to 16
[  165.104994][ T7860] erofs (device loop3): mounted with root inode @ nid 36.
[  165.124167][ T7860] syz.3.737: attempt to access beyond end of device
[  165.124167][ T7860] loop3: rw=524288, sector=8, nr_sectors = 24 limit=16
[  165.133365][ T7860] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  165.139302][ T7847] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  165.142149][ T7860] erofs (device loop3): read error -117 @ 0 of nid 89
[  165.144303][   T33] audit: type=1800 audit(1785562858.127:26): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.737" name="file2" dev="loop3" ino=89 res=0 errno=0
[  165.158368][ T7860] erofs (device loop3): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096
[  165.163078][ T7847] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0
[  165.165291][ T7847] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  165.167820][ T7860] erofs (device loop3): read error -117 @ 0 of nid 89
[  165.208133][ T5970] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  165.370949][ T5970] usb 5-1: Using ep0 maxpacket: 8
[  165.377654][ T5970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  165.381560][ T5970] usb 5-1: config 0 has no interface number 0
[  165.383379][ T5970] usb 5-1: config 0 interface 1 has no altsetting 0
[  165.406308][ T5970] usb 5-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  165.410175][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.433163][ T5970] usb 5-1: Product: syz
[  165.434487][ T5970] usb 5-1: Manufacturer: syz
[  165.435954][ T5970] usb 5-1: SerialNumber: syz
[  165.452329][ T5970] usb 5-1: config 0 descriptor??
[  165.662417][ T5970] i2c-cp2615 5-1:0.1: probe with driver i2c-cp2615 failed with error -71
[  165.684660][ T5970] usb 5-1: USB disconnect, device number 7
[  165.786180][ T7881] loop3: detected capacity change from 0 to 4096
[  165.853940][ T7881] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  165.858087][ T7884] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  165.873420][ T7881] NILFS (loop3): mounting fs with errors
[  166.112944][ T7899] netlink: 'syz.3.752': attribute type 6 has an invalid length.
[  166.218440][   T33] audit: type=1326 audit(1785562859.197:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7901 comm="syz.3.754" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6963b9e019 code=0x0
[  167.066640][ T7923] loop4: detected capacity change from 0 to 8192
[  167.089864][ T7923] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  167.148652][ T7923] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  167.170903][ T7923] ntfs3(loop4): Failed to load $Extend (-2).
[  167.172814][ T7923] ntfs3(loop4): Failed to initialize $Extend.
[  167.835944][ T7958] loop3: detected capacity change from 0 to 16
[  167.848899][ T7958] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  167.940967][ T7963] autofs4:pid:7963:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(0.0), cmd(0xc0189372)
[  167.953663][ T7963] autofs4:pid:7963:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189372)
[  168.179974][ T7977] netlink: 52 bytes leftover after parsing attributes in process `syz.3.788'.
[  169.243408][ T7990] loop3: detected capacity change from 0 to 2048
[  169.289459][ T7990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.338901][   T33] audit: type=1800 audit(1785562862.317:28): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.794" name="file1" dev="loop3" ino=1346 res=0 errno=0
[  169.397742][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.797'.
[  169.417646][ T7994] xt_CT: No such helper "netbios-ns"
[  169.509364][ T8001] libceph: Failed to parse secret: -22
[  169.593139][ T8003] vfio-pci 0000:00:00.0: probe with driver vfio-pci failed with error -22
[  169.601326][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.5.801'.
[  169.662682][ T7990] syz.3.794: attempt to access beyond end of device
[  169.662682][ T7990] loop3: rw=8390657, sector=2048, nr_sectors = 1 limit=2048
[  169.674205][ T7990] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  169.682885][ T7990] syz.3.794: attempt to access beyond end of device
[  169.682885][ T7990] loop3: rw=8390657, sector=2048, nr_sectors = 1 limit=2048
[  169.693059][ T7990] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  169.705123][ T7990] syz.3.794: attempt to access beyond end of device
[  169.705123][ T7990] loop3: rw=8390657, sector=2048, nr_sectors = 1 limit=2048
[  169.719770][ T7990] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  169.726820][ T7990] syz.3.794: attempt to access beyond end of device
[  169.726820][ T7990] loop3: rw=8390657, sector=2048, nr_sectors = 1 limit=2048
[  169.740094][ T7990] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  169.746275][ T7990] syz.3.794: attempt to access beyond end of device
[  169.746275][ T7990] loop3: rw=8390657, sector=2048, nr_sectors = 1 limit=2048
[  169.758738][ T7990] Buffer I/O error on dev loop3, logical block 2048, lost async page write
[  169.769267][ T7990] syz.3.794: attempt to access beyond end of device
[  169.769267][ T7990] loop3: rw=8390657, sector=2049, nr_sectors = 1 limit=2048
[  169.781271][ T7990] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  169.787448][ T7990] syz.3.794: attempt to access beyond end of device
[  169.787448][ T7990] loop3: rw=8390657, sector=2049, nr_sectors = 1 limit=2048
[  169.799464][ T7990] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  169.806829][ T7990] syz.3.794: attempt to access beyond end of device
[  169.806829][ T7990] loop3: rw=8390657, sector=2049, nr_sectors = 1 limit=2048
[  169.821472][ T7990] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  169.832101][ T7990] syz.3.794: attempt to access beyond end of device
[  169.832101][ T7990] loop3: rw=8390657, sector=2049, nr_sectors = 1 limit=2048
[  169.844949][ T7990] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  169.852637][ T7990] Buffer I/O error on dev loop3, logical block 2049, lost async page write
[  169.908094][ T8016] loop5: detected capacity change from 0 to 128
[  169.923053][ T8016] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  169.936795][ T8016] System zones: 1-3, 19-19, 35-36
[  169.946161][ T8016] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  169.963578][ T8016] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  170.023556][ T6611] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  170.468591][ T8031] netlink: 'syz.4.812': attribute type 39 has an invalid length.
[  170.479343][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  170.634016][   T10] usb 6-1: Using ep0 maxpacket: 16
[  170.639538][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.644367][   T10] usb 6-1: config 0 has no interfaces?
[  170.656937][   T10] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  170.664453][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.673660][   T10] usb 6-1: config 0 descriptor??
[  170.834813][ T8047] loop4: detected capacity change from 0 to 512
[  170.853311][ T8047] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.881797][ T6604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.171780][ T8050] loop4: detected capacity change from 0 to 40427
[  171.187386][ T8050] F2FS-fs (loop4): Image doesn't support compression
[  171.195813][ T8050] F2FS-fs (loop4): journaled quota format not specified
[  171.200435][ T8052] loop3: detected capacity change from 0 to 32768
[  171.216989][ T8052] BTRFS error: device /dev/loop3 has incomplete metadata_uuid change, please use btrfstune to complete
[  171.245686][ T5814] BTRFS error: device /dev/loop3 has incomplete metadata_uuid change, please use btrfstune to complete
[  172.049553][ T8071] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[  172.196288][ T8077] loop3: detected capacity change from 0 to 4096
[  172.225483][ T8078] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.240289][ T8077] NILFS (loop3): bad btree node (ino=18446744073709551615, blocknr=6): level = 0, flags = 0x2, nchildren = 0
[  172.243937][ T8077] NILFS (loop3): error -5 preparing GC: cannot read source blocks
[  172.306973][ T8080] loop3: detected capacity change from 0 to 256
[  172.310645][ T8080] exfat: Deprecated parameter 'utf8'
[  172.314861][ T8080] exfat: Deprecated parameter 'utf8'
[  172.317229][ T8080] exfat: Deprecated parameter 'utf8'
[  172.324402][ T8080] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  172.429877][ T8084] netlink: 36 bytes leftover after parsing attributes in process `syz.4.835'.
[  172.627747][ T8094] lo speed is unknown, defaulting to 1000
[  173.036955][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'.
[  173.065647][ T8110] ne,sim0: renamed from batadv0 (while UP)
[  173.078597][ T8110] ne,sim0: entered allmulticast mode
[  173.099840][ T8110] A link change request failed with some changes committed already. Interface ne,sim0 may have been left with an inconsistent configuration, please check.
[  173.149142][ T6593] usb 6-1: USB disconnect, device number 6
[  173.352891][ T8122] loop3: detected capacity change from 0 to 512
[  173.372162][ T8122] EXT4-fs: Ignoring removed oldalloc option
[  173.375792][ T8122] EXT4-fs (loop3): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  173.569891][   T33] audit: type=1326 audit(1785562866.557:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.597692][   T33] audit: type=1326 audit(1785562866.557:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.630398][ T6593] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  173.646987][   T33] audit: type=1326 audit(1785562866.567:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.673891][   T33] audit: type=1326 audit(1785562866.567:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.703553][   T33] audit: type=1326 audit(1785562866.567:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.735180][   T33] audit: type=1326 audit(1785562866.567:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.755326][ T8140] 0: reclassify loop, rule prio 0, protocol 03
[  173.757649][   T33] audit: type=1326 audit(1785562866.567:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.794054][   T33] audit: type=1326 audit(1785562866.567:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8133 comm="syz.4.856" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f60e1b9e019 code=0x7ffc0000
[  173.816925][ T6593] usb 6-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[  173.822266][ T6593] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[  173.826622][ T6593] usb 6-1: Product: syz
[  173.842367][ T6593] usb 6-1: Manufacturer: syz
[  173.843836][ T6593] usb 6-1: SerialNumber: syz
[  173.860072][ T6593] usb 6-1: config 0 descriptor??
[  174.073693][ T6593] peak_usb 6-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[  174.278223][ T6593] peak_usb 6-1:0.0 can0: sending command failure: -22
[  174.280344][ T6593] peak_usb 6-1:0.0 can0: sending command failure: -22
[  174.282467][ T6593] peak_usb 6-1:0.0 can0: sending command failure: -22
[  174.359195][ T6593] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22
[  174.395004][ T6593] IPVS: starting estimator thread 0...
[  174.488239][ T8167] IPVS: using max 86 ests per chain, 206400 per kthread
[  174.513444][   T10] usb 6-1: USB disconnect, device number 7
[  174.973310][ T8197] loop4: detected capacity change from 0 to 512
[  174.996624][ T8197] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  175.005244][ T8197] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  175.010093][ T8197] EXT4-fs (loop4): orphan cleanup on readonly fs
[  175.016834][ T8197] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.887: iget: bad i_size value: 12154761577498
[  175.029014][ T8197] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  175.030096][ T8197] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.887: couldn't read orphan inode 13 (err -117)
[  175.039316][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  175.041716][    C0] EXT4-fs (loop4): initial error at time 1785562868: ext4_orphan_get:1391: inode 13
[  175.045109][    C0] EXT4-fs (loop4): last error at time 1785562868: ext4_orphan_get:1391: inode 13
[  175.082850][ T8197] loop4: lost filesystem error report for type 5 error -117
[  175.083710][ T8197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  175.118981][ T8197] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.887: dx entry: limit 65535 != root limit 120
[  175.122835][ T8197] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.887: Corrupt directory, running e2fsck is recommended
[  175.206657][ T6604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.417473][ T8208] netlink: 'syz.5.892': attribute type 3 has an invalid length.
[  176.175262][ T8229] bond1 (unregistering): Released all slaves
[  176.648432][ T8248] loop4: detected capacity change from 0 to 4096
[  176.656433][ T8248] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  176.685703][ T8248] ntfs3(loop4): mft corrupted
[  176.693931][ T8248] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  176.708691][ T8248] ntfs3(loop4): Failed to load $Bitmap (-22).
[  177.062967][ T8265] loop3: detected capacity change from 0 to 8192
[  177.088897][ T8265] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  177.098477][ T8265] process 'syz.3.919' launched './file1' with NULL argv: empty string added
[  177.107950][ T6593] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  177.259774][ T6593] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.266483][ T6593] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  177.270909][ T6593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.273565][ T6593] usb 5-1: Product: syz
[  177.282557][ T6593] usb 5-1: Manufacturer: syz
[  177.284008][ T6593] usb 5-1: SerialNumber: syz
[  177.295294][ T6593] usb 5-1: config 0 descriptor??
[  177.507947][ T6593] usb 5-1: USB disconnect, device number 8
[  177.892531][ T8270] loop3: detected capacity change from 0 to 4096
[  178.173680][ T8285] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  178.269895][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'.
[  178.342180][ T5970] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  178.483621][ T8303] loop3: detected capacity change from 0 to 256
[  178.486400][ T8303] exfat: Deprecated parameter 'namecase'
[  178.506507][ T5970] usb 5-1: unable to get BOS descriptor or descriptor too short
[  178.511949][ T8303] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[  178.517452][ T5970] usb 5-1: config 3 has an invalid interface number: 151 but max is 0
[  178.521667][ T5970] usb 5-1: config 3 has no interface number 0
[  178.523487][ T5970] usb 5-1: config 3 interface 151 has no altsetting 0
[  178.534001][ T5970] usb 5-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice=1d.cd
[  178.536784][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.541861][ T5970] usb 5-1: Product: syz
[  178.543232][ T5970] usb 5-1: Manufacturer: syz
[  178.544661][ T5970] usb 5-1: SerialNumber: syz
[  178.600550][ T6593] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  178.749910][ T6593] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  178.753771][ T6593] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.771458][ T5970] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.151/input/input6
[  178.776515][ T6593] usb 6-1: config 0 descriptor??
[  178.781908][ T5027] bcm5974 5-1:3.151: could not read from device
[  178.793743][ T6593] cp210x 6-1:0.0: cp210x converter detected
[  178.806191][ T5027] bcm5974 5-1:3.151: could not read from device
[  178.823931][ T5970] usb 5-1: USB disconnect, device number 9
[  178.830066][ T5027] bcm5974 5-1:3.151: could not read from device
[  179.202674][ T6593] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  179.366789][ T8323] loop3: detected capacity change from 0 to 128
[  179.393781][ T8323] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  179.413764][ T8323] hpfs: filesystem error: improperly stopped
[  179.415683][ T8323] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  179.429654][ T6593] usb 6-1: cp210x converter now attached to ttyUSB0
[  179.438369][ T8323] hpfs: You really don't want any checks? You are crazy...
[  179.450283][ T8323] hpfs: Code page index out of array
[  179.460230][ T8323] hpfs: code page support is disabled
[  179.464551][ T8323] hpfs: hpfs_map_4sectors(): unaligned read
[  179.466414][ T8323] hpfs: hpfs_map_4sectors(): unaligned read
[  179.481442][ T8323] hpfs: filesystem error: unable to find root dir
[  179.609981][ T6593] usb 6-1: USB disconnect, device number 8
[  179.621740][ T6593] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  179.659766][ T6593] cp210x 6-1:0.0: device disconnected
[  180.217525][ T8351] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  180.247541][ T8353] loop3: detected capacity change from 0 to 2048
[  180.284920][ T8353] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  180.313061][ T8353] NILFS (loop3): too large checkpoint size: 1741 bytes
[  180.316688][ T8353] NILFS (loop3): error -22 while loading super root
[  180.319871][ T5814] udevd[5814]: incorrect nilfs2 checksum on /dev/loop3
[  180.335824][ T5814] udevd[5814]: incorrect nilfs2 checksum on /dev/loop3
[  180.451782][ T8364] fuse: Bad value for 'fd'
[  180.605579][ T8370] xt_connbytes: Forcing CT accounting to be enabled
[  180.607740][ T8370] xt_CT: You must specify a L4 protocol and not use inversions on it
[  180.759631][ T8372] loop3: detected capacity change from 0 to 32768
[  180.766185][ T8372] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.966 (8372)
[  180.771413][ T8372] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.774525][ T8372] BTRFS info (device loop3): using sha256 checksum algorithm
[  180.970688][ T8372] BTRFS info (device loop3): enabling ssd optimizations
[  180.972793][ T8372] BTRFS info (device loop3): turning on sync discard
[  180.974774][ T8372] BTRFS info (device loop3): enabling free space tree
[  180.976858][ T8372] BTRFS info (device loop3): use zlib compression, level 3
[  181.137920][    C0] ata1: illegal qc_active transition (00000000->00080000)
[  181.942886][   T33] audit: type=1800 audit(1785562874.767:37): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.966" name="file1" dev="loop3" ino=260 res=0 errno=0
[  182.052626][ T1064] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300)
[  182.066782][ T1064] ata1.00: configured for UDMA/100
[  182.383451][ T6603] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  182.863819][ T8431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.985'.
[  182.896108][ T8431] vlan3: entered allmulticast mode
[  182.897736][ T8431] bridge1: entered allmulticast mode
[  183.026538][ T8428] loop5: detected capacity change from 0 to 32768
[  183.060656][ T8428] (syz.5.984,8428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xfaa975d8, computed 0x2fb79aed. Applying ECC.
[  183.077172][ T8428] (syz.5.984,8428,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x26878021. Applying ECC.
[  183.093015][ T8428] (syz.5.984,8428,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xb3775c19, computed 0x8956647
[  183.096639][ T8428] (syz.5.984,8428,0):ocfs2_validate_inode_block:1441 ERROR: Checksum failed for dinode 18
[  183.111274][ T8428] (syz.5.984,8428,0):ocfs2_read_locked_inode:599 ERROR: status = -5
[  183.117668][ T8428] (syz.5.984,8428,0):ocfs2_init_global_system_inodes:452 ERROR: status = -5
[  183.129415][ T8428] (syz.5.984,8428,0):ocfs2_init_global_system_inodes:476 ERROR: status = -5
[  183.132118][ T8428] (syz.5.984,8428,0):ocfs2_initialize_super:2198 ERROR: status = -5
[  183.134564][ T8428] (syz.5.984,8428,0):ocfs2_fill_super:1177 ERROR: status = -5
[  183.709018][ T8461] loop5: detected capacity change from 0 to 512
[  183.750841][ T8461] 
[  183.751618][ T8461] ======================================================
[  183.753789][ T8461] WARNING: possible circular locking dependency detected
[  183.756171][ T8461] syzkaller #0 Tainted: G             L     
[  183.758160][ T8461] ------------------------------------------------------
[  183.760294][ T8461] syz.5.998/8461 is trying to acquire lock:
[  183.762065][ T8461] ffff88801e586b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0
[  183.764978][ T8461] 
[  183.764978][ T8461] but task is already holding lock:
[  183.767284][ T8461] ffff888118aee9f8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x730
[  183.770363][ T8461] 
[  183.770363][ T8461] which lock already depends on the new lock.
[  183.770363][ T8461] 
[  183.773754][ T8461] 
[  183.773754][ T8461] the existing dependency chain (in reverse order) is:
[  183.776780][ T8461] 
[  183.776780][ T8461] -> #1 (&ei->xattr_sem){++++}-{4:4}:
[  183.779027][ T8461]        down_write+0x96/0x200
[  183.780467][ T8461]        ext4_destroy_inline_data+0x28/0xe0
[  183.782200][ T8461]        ext4_do_writepages+0x586/0x4820
[  183.783829][ T8461]        ext4_writepages+0x241/0x3b0
[  183.785423][ T8461]        do_writepages+0x338/0x560
[  183.786998][ T8461]        __writeback_single_inode+0x12e/0x1050
[  183.788962][ T8461]        writeback_sb_inodes+0x9eb/0x1b30
[  183.790756][ T8461]        wb_writeback+0x426/0xb40
[  183.792283][ T8461]        wb_workfn+0x414/0xf50
[  183.793751][ T8461]        process_scheduled_works+0xa2f/0x1470
[  183.795628][ T8461]        worker_thread+0xa44/0xfb0
[  183.797126][ T8461]        kthread+0x388/0x470
[  183.798529][ T8461]        ret_from_fork+0x51e/0xb90
[  183.800095][ T8461]        ret_from_fork_asm+0x1a/0x30
[  183.801692][ T8461] 
[  183.801692][ T8461] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  183.804214][ T8461]        __lock_acquire+0x1520/0x2cd0
[  183.805832][ T8461]        lock_acquire+0xf0/0x2e0
[  183.807312][ T8461]        percpu_down_read_internal+0x48/0x1c0
[  183.809166][ T8461]        ext4_writepages+0x205/0x3b0
[  183.810788][ T8461]        do_writepages+0x338/0x560
[  183.812325][ T8461]        __writeback_single_inode+0x12e/0x1050
[  183.814478][ T8461]        writeback_single_inode+0x495/0xde0
[  183.816430][ T8461]        write_inode_now+0x1c2/0x290
[  183.818423][ T8461]        iput+0x864/0xe00
[  183.819844][ T8461]        ext4_xattr_block_set+0x22e4/0x2a80
[  183.821799][ T8461]        ext4_expand_extra_isize_ea+0x1342/0x1e70
[  183.824094][ T8461]        __ext4_expand_extra_isize+0x30d/0x400
[  183.825987][ T8461]        __ext4_mark_inode_dirty+0x455/0x730
[  183.828020][ T8461]        ext4_evict_inode+0x78b/0xe80
[  183.829827][ T8461]        evict+0x624/0xb50
[  183.831205][ T8461]        ext4_orphan_cleanup+0xc7a/0x14c0
[  183.833023][ T8461]        ext4_fill_super+0x5c9d/0x65b0
[  183.834783][ T8461]        get_tree_bdev_flags+0x430/0x4f0
[  183.836528][ T8461]        vfs_get_tree+0x92/0x2a0
[  183.838063][ T8461]        do_new_mount+0x319/0xdc0
[  183.839748][ T8461]        __se_sys_mount+0x31d/0x420
[  183.841289][ T8461]        do_syscall_64+0x170/0xf80
[  183.842884][ T8461]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.845124][ T8461] 
[  183.845124][ T8461] other info that might help us debug this:
[  183.845124][ T8461] 
[  183.848904][ T8461]  Possible unsafe locking scenario:
[  183.848904][ T8461] 
[  183.851473][ T8461]        CPU0                    CPU1
[  183.853160][ T8461]        ----                    ----
[  183.854916][ T8461]   lock(&ei->xattr_sem);
[  183.856196][ T8461]                                lock(&sbi->s_writepages_rwsem);
[  183.858566][ T8461]                                lock(&ei->xattr_sem);
[  183.860557][ T8461]   rlock(&sbi->s_writepages_rwsem);
[  183.862128][ T8461] 
[  183.862128][ T8461]  *** DEADLOCK ***
[  183.862128][ T8461] 
[  183.864498][ T8461] 3 locks held by syz.5.998/8461:
[  183.865990][ T8461]  #0: ffff88801e5840e0 (&type->s_umount_key#28/1){+.+.}-{4:4}, at: alloc_super+0x283/0xa60
[  183.869020][ T8461]  #1: ffff88801e584610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x269/0xe80
[  183.871769][ T8461]  #2: ffff888118aee9f8 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x3d0/0x730
[  183.874776][ T8461] 
[  183.874776][ T8461] stack backtrace:
[  183.876509][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.5.998 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  183.876521][ T8461] Tainted: [L]=SOFTLOCKUP
[  183.876523][ T8461] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.876528][ T8461] Call Trace:
[  183.876533][ T8461]  <TASK>
[  183.876537][ T8461]  dump_stack_lvl+0xe8/0x150
[  183.876547][ T8461]  print_circular_bug+0x2e1/0x300
[  183.876557][ T8461]  check_noncircular+0x12e/0x150
[  183.876567][ T8461]  __lock_acquire+0x1520/0x2cd0
[  183.876575][ T8461]  ? lock_release+0x4b/0x3d0
[  183.876582][ T8461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.876590][ T8461]  ? rcu_is_watching+0x15/0xb0
[  183.876600][ T8461]  ? lock_release+0x4b/0x3d0
[  183.876606][ T8461]  ? lock_release+0x4b/0x3d0
[  183.876613][ T8461]  lock_acquire+0xf0/0x2e0
[  183.876620][ T8461]  ? ext4_writepages+0x205/0x3b0
[  183.876630][ T8461]  percpu_down_read_internal+0x48/0x1c0
[  183.876638][ T8461]  ? ext4_writepages+0x205/0x3b0
[  183.876645][ T8461]  ext4_writepages+0x205/0x3b0
[  183.876654][ T8461]  ? __pfx_ext4_writepages+0x10/0x10
[  183.876664][ T8461]  ? do_raw_spin_unlock+0x4d/0x210
[  183.876672][ T8461]  ? __pfx_ext4_writepages+0x10/0x10
[  183.876680][ T8461]  do_writepages+0x338/0x560
[  183.876690][ T8461]  ? do_raw_spin_lock+0x12b/0x2f0
[  183.876699][ T8461]  __writeback_single_inode+0x12e/0x1050
[  183.876709][ T8461]  writeback_single_inode+0x495/0xde0
[  183.876715][ T8461]  write_inode_now+0x1c2/0x290
[  183.876742][ T8461]  ? __pfx_write_inode_now+0x10/0x10
[  183.876755][ T8461]  ? do_raw_spin_unlock+0x4d/0x210
[  183.876764][ T8461]  iput+0x864/0xe00
[  183.876774][ T8461]  ext4_xattr_block_set+0x22e4/0x2a80
[  183.876786][ T8461]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  183.876793][ T8461]  ? xattr_find_entry+0x236/0x280
[  183.876801][ T8461]  ? ext4_xattr_block_find+0xce/0x320
[  183.876808][ T8461]  ext4_expand_extra_isize_ea+0x1342/0x1e70
[  183.876821][ T8461]  __ext4_expand_extra_isize+0x30d/0x400
[  183.876830][ T8461]  __ext4_mark_inode_dirty+0x455/0x730
[  183.876841][ T8461]  ext4_evict_inode+0x78b/0xe80
[  183.876851][ T8461]  ? __pfx_ext4_evict_inode+0x10/0x10
[  183.876859][ T8461]  ? do_raw_spin_unlock+0x4d/0x210
[  183.876868][ T8461]  ? __pfx_ext4_evict_inode+0x10/0x10
[  183.876876][ T8461]  evict+0x624/0xb50
[  183.876883][ T8461]  ? __pfx_evict+0x10/0x10
[  183.876889][ T8461]  ? _raw_spin_unlock+0x28/0x50
[  183.876896][ T8461]  ? iput+0xaa7/0xe00
[  183.876905][ T8461]  ext4_orphan_cleanup+0xc7a/0x14c0
[  183.876914][ T8461]  ? try_to_wake_up+0x7ee/0x1360
[  183.876925][ T8461]  ? __pfx_ext4_orphan_cleanup+0x10/0x10
[  183.876933][ T8461]  ? ext4_register_li_request+0x640/0x720
[  183.876942][ T8461]  ? errseq_check_and_advance+0x66/0x120
[  183.876950][ T8461]  ext4_fill_super+0x5c9d/0x65b0
[  183.876962][ T8461]  ? __pfx_ext4_fill_super+0x10/0x10
[  183.876969][ T8461]  ? snprintf+0xe8/0x140
[  183.876977][ T8461]  ? __pfx_snprintf+0x10/0x10
[  183.876983][ T8461]  ? set_blocksize+0x1c9/0x440
[  183.876991][ T8461]  ? sb_set_blocksize+0x155/0x240
[  183.876998][ T8461]  ? setup_bdev_super+0x4c1/0x5b0
[  183.877008][ T8461]  get_tree_bdev_flags+0x430/0x4f0
[  183.877017][ T8461]  ? __pfx_ext4_fill_super+0x10/0x10
[  183.877025][ T8461]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  183.877035][ T8461]  vfs_get_tree+0x92/0x2a0
[  183.877045][ T8461]  do_new_mount+0x319/0xdc0
[  183.877053][ T8461]  ? __pfx_do_new_mount+0x10/0x10
[  183.877061][ T8461]  ? ns_capable+0x89/0xe0
[  183.877068][ T8461]  ? path_mount+0x647/0x1040
[  183.877075][ T8461]  ? user_path_at+0xd4/0x160
[  183.877084][ T8461]  __se_sys_mount+0x31d/0x420
[  183.877093][ T8461]  ? __pfx___se_sys_mount+0x10/0x10
[  183.877101][ T8461]  ? __x64_sys_mount+0x20/0xc0
[  183.877108][ T8461]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.877115][ T8461]  do_syscall_64+0x170/0xf80
[  183.877124][ T8461]  ? trace_irq_disable+0x3b/0x150
[  183.877133][ T8461]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.877140][ T8461] RIP: 0033:0x7f645539f28a
[  183.877149][ T8461] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.877155][ T8461] RSP: 002b:00007f64535f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  183.877162][ T8461] RAX: ffffffffffffffda RBX: 00007f64535f5ee0 RCX: 00007f645539f28a
[  183.877167][ T8461] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f64535f5ea0
[  183.877172][ T8461] RBP: 0000200000000180 R08: 00007f64535f5ee0 R09: 0000000000000000
[  183.877176][ T8461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000
[  183.877180][ T8461] R13: 00007f64535f5ea0 R14: 000000000000047a R15: 0000200000000b40
[  183.877187][ T8461]  </TASK>
[  184.030854][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.998: iget: bad extra_isize 58 (inode size 256)
[  184.035104][ T8461] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  184.035343][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.998: error while reading EA inode 11 err=-117
[  184.038231][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  184.038240][    C0] EXT4-fs (loop5): initial error at time 1785562877: ext4_xattr_inode_iget:441: inode 11
[  184.038251][    C0] EXT4-fs (loop5): last error at time 1785562877: ext4_xattr_inode_iget:441: inode 11
[  184.051833][ T8461] loop5: lost filesystem error report for type 5 error -117
[  184.052041][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.998: iget: bad extra_isize 58 (inode size 256)
[  184.059048][ T8461] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  184.059269][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.998: error while reading EA inode 11 err=-117
[  184.067307][ T8461] loop5: lost filesystem error report for type 5 error -117
[  184.067511][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.998: iget: bad extra_isize 58 (inode size 256)
[  184.074917][ T8461] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  184.075136][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.998: error while reading EA inode 18 err=-117
[  184.161002][ T8461] loop5: lost filesystem error report for type 5 error -117
[  184.161262][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.998: iget: bad extra_isize 58 (inode size 256)
[  184.170394][ T8461] loop5: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117
[  184.170636][ T8461] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.998: error while reading EA inode 18 err=-117
[  184.179734][ T8461] loop5: lost filesystem error report for type 5 error -117
[  184.180005][ T8461] EXT4-fs (loop5): 1 orphan inode deleted
[  184.185838][ T8461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.206161][ T6611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
