last executing test programs:

3m35.924823594s ago: executing program 2 (id=174):
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa4, 0x800)
ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000000))

3m35.924319394s ago: executing program 2 (id=176):
syz_emit_ethernet(0x0, 0x0, 0x0)
pipe(&(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x10)
r3 = syz_io_uring_setup(0x1248, &(0x7f0000000200)={0x0, 0xd5a1, 0x1, 0x40000002, 0xb8}, &(0x7f0000000400)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1)
socket$netlink(0x10, 0x3, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, &(0x7f0000000340)=[0xffffffffffffffff], 0x1, 0x0, 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000300)={0x9, [[0x5, 0x5, 0x51ea9978, 0xe9, 0x3, 0x641f, 0x9b48, 0x8001], [0x6, 0x101, 0x4, 0xf35, 0xfdff, 0x7, 0xfffff801, 0x7], [0x80000000, 0x7, 0x2, 0x9, 0x7, 0x8, 0x800, 0x5]], '\x00', [{0x8000, 0x5, 0x1, 0x0, 0x1, 0x1}, {0x100, 0x0, 0x1, 0x1, 0x1}, {0xf, 0x8008, 0x1, 0x1, 0x1}, {0x9, 0x200, 0x1, 0x1, 0x1}, {0x9, 0x8, 0x1, 0x0, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x1, 0x1}, {0x7, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x80, 0x8f, 0x0, 0x1, 0x1}, {0x3, 0x8, 0x1, 0x1, 0x0, 0x1}, {0xe6, 0x3, 0x0, 0x1}], '\x00', 0x2})
socket(0x10, 0x3, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000000), 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0xffffffffffff8000, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)

3m35.034962687s ago: executing program 2 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x101, 0x1)
getdents64(r0, 0xfffffffffffffffe, 0x29)

3m34.938360557s ago: executing program 2 (id=195):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]})
fdatasync(r0)

3m34.592881036s ago: executing program 2 (id=196):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1)
sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd357}, 0x1c)
sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0)

3m34.21000644s ago: executing program 2 (id=197):
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94)

3m34.118337024s ago: executing program 32 (id=197):
socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94)

1m52.446948699s ago: executing program 3 (id=1234):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xff000000], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010011641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e220064"], 0x0)

1m52.379802104s ago: executing program 3 (id=1236):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc)

1m52.31093683s ago: executing program 3 (id=1238):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0xc7c)

1m52.257812682s ago: executing program 3 (id=1240):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nouid32}, {@mblk_io_submit}, {@i_version}]}, 0x1, 0x746, &(0x7f0000000f40)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x14927e, 0x0)
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9567, 0x3, 0x0, 0x0, 0x1f, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4, 0x100]})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58)

1m50.348434645s ago: executing program 3 (id=1247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@ipv4_newroute={0xb4, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x90, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x8c, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x88, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x84, 0x3, "8fd498249133df36da6ee26a0cb5e066cc93ceb97a0a6b2de0bd82ffa9cbedc9120835e49ed02221ad4f0227c6a5891da80000000000000000afb3733aca71f72d9a5a1ba439e355a0a184e3cb8256125a995964771b66f17cf2284697e095dbc322d0df13e673132e2542a4f9b34c29123004ea8acc955eacde969eb114a603"}}}}]}, 0xb4}}, 0xa890)

1m49.9234874s ago: executing program 3 (id=1250):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}})
readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1)

1m49.77575605s ago: executing program 33 (id=1250):
r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82882, 0xf)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffe, 0x0, 0x0, 0xc, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}})
readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1)

1m48.967525742s ago: executing program 0 (id=1259):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = syz_io_uring_setup(0x10f, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x20199}, &(0x7f00000001c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r2, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r3, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

1m47.818653245s ago: executing program 0 (id=1261):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054)
setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote, r2}, 0x14)

1m47.128483412s ago: executing program 0 (id=1262):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64], 0x1, 0x5e7, &(0x7f0000000680)="$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")
listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)

1m46.994758549s ago: executing program 0 (id=1264):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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")
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x8800, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

1m46.709372751s ago: executing program 0 (id=1268):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0)

1m46.029061121s ago: executing program 0 (id=1270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0)

1m45.830855855s ago: executing program 34 (id=1270):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6}]}}}}}}}, 0x0)

36.990920345s ago: executing program 4 (id=1977):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x1, 0x10, 0x9, 0x20, 0x5}, 0x20)

36.916461465s ago: executing program 4 (id=1978):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="2015a1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

34.172140634s ago: executing program 4 (id=1993):
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516)
setxattr$incfs_metadata(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000100), 0x0, 0x0, 0x0)

34.071472643s ago: executing program 4 (id=1994):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

33.943738424s ago: executing program 4 (id=1996):
r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2)
close(r0)

33.650040349s ago: executing program 4 (id=1999):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x48801)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffc, 0x6, 0x8d, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="2aacbea9ce01", 0x0, 0x7, 0x1, 0x1, 0x0})

33.515749586s ago: executing program 35 (id=1999):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x48801)
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
ioctl$SG_IO(r0, 0x2285, &(0x7f00000004c0)={0x53, 0xfffffffffffffffc, 0x6, 0x8d, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="2aacbea9ce01", 0x0, 0x7, 0x1, 0x1, 0x0})

1.377578047s ago: executing program 5 (id=2301):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e657665"], 0x74}}, 0x24005000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.291275566s ago: executing program 6 (id=2302):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000000)=0x100000b2, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x11, 0x0, @multicast1, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

1.291017872s ago: executing program 5 (id=2303):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000003000/0x3000)=nil, 0x2000})

1.183971713s ago: executing program 6 (id=2304):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000)

1.112062348s ago: executing program 6 (id=2305):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0x6, 0x4)

1.111860224s ago: executing program 6 (id=2306):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x48, 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x74)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7003f00)

1.111535558s ago: executing program 5 (id=2307):
r0 = userfaultfd(0x80801)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0xffff, r0, 0x0, 0x0, 0x6}])

598.785819ms ago: executing program 5 (id=2314):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140))

544.40749ms ago: executing program 5 (id=2316):
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x97}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)

481.312746ms ago: executing program 5 (id=2318):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d77e17208680630b326a01020301090224000100041000090456100289f0b40809050602ff0309000009058206"], 0x0)

288.479161ms ago: executing program 1 (id=2326):
syz_open_dev$cec(0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000800)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
syz_open_dev$vim2m(0x0, 0x7, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

288.115309ms ago: executing program 1 (id=2327):
set_mempolicy(0x6006, 0x0, 0x5)

223.795071ms ago: executing program 1 (id=2328):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

223.609837ms ago: executing program 1 (id=2329):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00')
pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008)

160.74884ms ago: executing program 1 (id=2330):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x1, 0xfffffffb, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

84.19892ms ago: executing program 6 (id=2331):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0x1, 0x4)

83.855933ms ago: executing program 1 (id=2332):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
userfaultfd(0x801)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="cf0425bd7000fcdbdf251300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600080211000000000006001000800500000600120001000000060012013d0000000500190001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40080c3}, 0x24000000)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
r6 = gettid()
ptrace$ARCH_GET_FS(0x1e, r6, &(0x7f0000000080), 0x1003)
setuid(0xee00)
r7 = semget$private(0x0, 0x6, 0x80)
semctl$IPC_SET(r7, 0x0, 0x1, &(0x7f0000000900)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x98, 0x8}, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3})
semop(r7, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)
ioctl$sock_inet_SIOCGIFPFLAGS(r5, 0x8935, &(0x7f0000000040)={'veth0_to_bridge\x00'})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x3)

0s ago: executing program 6 (id=2333):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x98}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, 0x0, 0x24000804)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000012, &(0x7f0000000380), 0x1, 0x9827, &(0x7f0000004e00)="$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")

kernel console output (not intermixed with test programs):

oop1: detected capacity change from 0 to 256
[  196.343658][ T5932] Bluetooth: hci1: command tx timeout
[  196.505448][ T9396] loop5: detected capacity change from 0 to 1024
[  196.543188][ T9396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.583168][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.609140][  T783] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  196.641605][ T5956] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  196.786952][  T783] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  196.790774][  T783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.793999][  T783] usb 5-1: Product: syz
[  196.795768][  T783] usb 5-1: Manufacturer: syz
[  196.797674][  T783] usb 5-1: SerialNumber: syz
[  196.801166][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  196.805128][ T5956] usb 2-1: config 253 has an invalid interface number: 184 but max is 0
[  196.808558][ T5956] usb 2-1: config 253 has no interface number 0
[  196.811165][ T5956] usb 2-1: config 253 interface 184 has no altsetting 0
[  196.819626][ T5956] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00
[  196.824731][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.828020][ T5956] usb 2-1: Product: syz
[  196.829767][ T5956] usb 2-1: Manufacturer: syz
[  196.831784][ T5956] usb 2-1: SerialNumber: syz
[  196.849870][ T5956] go7007 2-1:253.184: probe with driver go7007 failed with error -12
[  196.855807][ T5932] Bluetooth: hci0: command tx timeout
[  196.982838][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  197.034288][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1340'.
[  197.068627][ T5956] usb 2-1: USB disconnect, device number 19
[  197.164627][    T9] usb 6-1: Using ep0 maxpacket: 8
[  197.169050][    T9] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  197.172040][    T9] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  197.176295][    T9] usb 6-1: config 8 has no interface number 0
[  197.179005][    T9] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  197.182364][    T9] usb 6-1: config 8 interface 188 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  197.186153][    T9] usb 6-1: config 8 interface 188 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  197.192586][    T9] usb 6-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67
[  197.195346][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.198411][    T9] usb 6-1: Product: syz
[  197.200001][    T9] usb 6-1: Manufacturer: syz
[  197.201667][    T9] usb 6-1: SerialNumber: syz
[  197.428832][    T9] vmk80xx 6-1:8.188: driver 'vmk80xx' failed to auto-configure device.
[  197.436118][    T9] usb 6-1: USB disconnect, device number 3
[  197.737512][ T9415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'.
[  198.017797][ T9423] loop5: detected capacity change from 0 to 4096
[  198.052833][ T9426] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.064259][   T33] audit: type=1800 audit(1774128706.385:523): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1357" name="file1" dev="loop5" ino=15 res=0 errno=0
[  198.440478][ T9441] loop5: detected capacity change from 0 to 1024
[  198.457068][ T9441] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1363'.
[  198.501428][  T109] hfsplus: b-tree write err: -5, ino 25
[  198.505009][  T109] hfsplus: b-tree write err: -5, ino 4
[  198.508596][  T109] hfsplus: b-tree write err: -5, ino 2
[  198.567821][ T5932] Bluetooth: hci1: command tx timeout
[  199.248331][ T5932] Bluetooth: hci0: command tx timeout
[  199.523248][  T783] usb 5-1: unit 8 not found!
[  199.526202][  T783] usb 5-1: unit 6 not found!
[  199.531768][  T783] usb 5-1: unit 0 not found!
[  199.566959][  T783] usb 5-1: USB disconnect, device number 2
[  199.594563][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  199.862013][ T9467] bond1 (unregistering): Released all slaves
[  200.948934][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1386'.
[  200.954681][ T9495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  201.025743][ T9501] loop5: detected capacity change from 0 to 512
[  201.056541][ T9501] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  201.063482][ T9501] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  201.092979][ T9501] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  201.096477][ T9501] System zones: 0-2, 18-18, 34-34
[  201.102785][ T9501] EXT4-fs error (device loop5): ext4_orphan_get:1391: comm syz.5.1388: inode #15: comm syz.5.1388: iget: illegal inode #
[  201.108189][ T9501] loop5: lost filesystem error report for type 5 error -117
[  201.110226][ T9501] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1388: couldn't read orphan inode 15 (err -117)
[  201.118173][ T9501] loop5: lost filesystem error report for type 5 error -117
[  201.121096][ T9501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.183802][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.227039][ T9497] loop1: detected capacity change from 0 to 32768
[  201.274987][ T9497] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.293623][ T9497] XFS (loop1): Ending clean mount
[  201.298402][ T9511] loop5: detected capacity change from 0 to 2048
[  201.303867][ T9497] XFS (loop1): Quotacheck needed: Please wait.
[  201.329644][ T9511] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  201.334204][ T9511] NILFS (loop5): mounting unchecked fs
[  201.335200][ T5810] udevd[5810]: incorrect nilfs2 checksum on /dev/loop5
[  201.343855][ T9511] NILFS (loop5): recovery complete
[  201.351375][ T9515] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.360718][ T9497] XFS (loop1): Quotacheck: Done.
[  201.439544][ T5935] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.959013][ T9546] loop4: detected capacity change from 0 to 512
[  201.973006][ T9546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  201.999355][ T9546] EXT4-fs (loop4): 1 orphan inode deleted
[  202.001753][ T9546] EXT4-fs (loop4): 1 truncate cleaned up
[  202.005326][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  202.007481][ T9546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.022257][ T9546] EXT4-fs (loop4): shut down requested (1)
[  202.057527][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.166173][    T9] usb 2-1: Using ep0 maxpacket: 8
[  202.179375][    T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  202.183998][    T9] usb 2-1: config 0 has no interface number 0
[  202.192320][    T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  202.196631][    T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  202.211784][    T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  202.222652][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'.
[  202.226353][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1411'.
[  202.233367][    T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  202.237727][    T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  202.246229][ T9562] netlink: 'syz.4.1411': attribute type 14 has an invalid length.
[  202.253812][    T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  202.256360][ T9564] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1412'.
[  202.257048][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.259656][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1412'.
[  202.263286][    T9] usb 2-1: Product: syz
[  202.269093][    T9] usb 2-1: Manufacturer: syz
[  202.270936][    T9] usb 2-1: SerialNumber: syz
[  202.280301][    T9] usb 2-1: config 0 descriptor??
[  202.429811][ T9578] tipc: Started in network mode
[  202.431854][ T9578] tipc: Node identity ac14140f, cluster identity 4711
[  202.436561][ T9578] tipc: New replicast peer: 255.255.255.255
[  202.439421][ T9578] tipc: Enabled bearer <udp:syz2>, priority 10
[  202.501786][    T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  202.748149][    T9] usb 2-1: USB disconnect, device number 20
[  203.365166][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  203.504829][    T9] tipc: Node number set to 2886997007
[  204.580834][ T9651] mmap: syz.4.1443 (9651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  204.588180][ T9651] block nbd4: NBD_DISCONNECT
[  205.214291][ T9639] block nbd4: Disconnected due to user request.
[  205.217438][ T9639] block nbd4: shutting down sockets
[  205.473351][ T9669] loop5: detected capacity change from 0 to 1024
[  205.524189][ T9669] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[  205.566198][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  205.627909][ T6000] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  205.680217][ T9682] loop1: detected capacity change from 0 to 512
[  205.686271][ T9682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.706389][ T9682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.711276][ T9682] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.735710][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.788856][ T6000] usb 5-1: Using ep0 maxpacket: 32
[  205.796268][ T6000] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.809480][ T6000] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.817001][ T6000] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  205.821726][ T6000] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  205.825288][ T6000] usb 5-1: Product: syz
[  205.832190][ T6000] usb 5-1: Manufacturer: syz
[  205.838855][ T6000] hub 5-1:4.0: USB hub found
[  205.889593][ T9691] loop1: detected capacity change from 0 to 8192
[  205.927139][   T24] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  205.928589][ T6100]  loop1: p4 < >
[  205.940033][ T9691]  loop1: p4 < >
[  206.030075][ T6100] udevd[6100]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  206.058545][ T6000] hub 5-1:4.0: 5 ports detected
[  206.063371][ T6000] hub 5-1:4.0: insufficient power available to use all downstream ports
[  206.069589][ T6100] udevd[6100]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  206.091862][   T24] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  206.095291][   T24] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 1
[  206.113576][   T24] usb 6-1: string descriptor 0 read error: -22
[  206.116376][   T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=1601, bcdDevice=10.1c
[  206.127228][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.160751][ T9693] loop1: detected capacity change from 0 to 32768
[  206.181872][ T9693] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.197135][ T9693] XFS (loop1): Ending clean mount
[  206.307057][ T5935] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  206.363809][ T5918] usb 6-1: USB disconnect, device number 4
[  206.541470][ T9703] loop1: detected capacity change from 0 to 4096
[  206.572099][ T9703] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  206.597539][ T9703] ntfs3(loop1): Failed to load $Extend (-22).
[  206.600118][ T9703] ntfs3(loop1): Failed to initialize $Extend.
[  206.614984][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  206.617006][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  206.721718][ T9707] usb usb8: usbfs: process 9707 (syz.1.1461) did not claim interface 0 before use
[  206.991590][ T9717] loop5: detected capacity change from 0 to 8192
[  207.043105][ T6100] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  207.050465][ T6100] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  207.053496][ T6100]  loop5: p4
[  207.055239][ T6100] loop5: p4 start 131072 is beyond EOD, truncated
[  207.064270][ T9717] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  207.069980][ T9717] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  207.080243][ T9717]  loop5: p4
[  207.083353][ T9717] loop5: p4 start 131072 is beyond EOD, truncated
[  207.204422][ T6000] hub 5-1:4.0: hub_hub_status failed (err = -32)
[  207.207312][ T6000] hub 5-1:4.0: config failed, can't get hub status (err -32)
[  207.245227][ T6000] usb 5-1: USB disconnect, device number 3
[  207.433832][ T5918] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  207.494688][ T9731] loop1: detected capacity change from 0 to 32768
[  207.499089][ T9731] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1473 (9731)
[  207.509373][ T9731] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.512938][ T9731] BTRFS info (device loop1): using crc32c checksum algorithm
[  207.561147][ T9731] BTRFS info (device loop1): enabling ssd optimizations
[  207.563952][ T9731] BTRFS info (device loop1): turning on flush-on-commit
[  207.566455][ T9731] BTRFS info (device loop1): enabling free space tree
[  207.568724][ T9731] BTRFS info (device loop1): enabling auto defrag
[  207.570795][ T9731] BTRFS info (device loop1): use lzo compression, level 1
[  207.573314][ T9731] BTRFS info (device loop1): max_inline set to 4096
[  207.596160][ T5918] usb 6-1: config 0 has an invalid interface number: 99 but max is 0
[  207.598905][ T5918] usb 6-1: config 0 has no interface number 0
[  207.603195][ T5918] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96
[  207.607819][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.610926][ T5918] usb 6-1: Product: syz
[  207.612528][ T5918] usb 6-1: Manufacturer: syz
[  207.614278][ T5918] usb 6-1: SerialNumber: syz
[  207.633176][ T5918] usb 6-1: config 0 descriptor??
[  207.643380][ T5918] peak_usb 6-1:0.99: probe with driver peak_usb failed with error 99
[  207.677856][ T5935] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.863051][ T5918] usb 6-1: USB disconnect, device number 5
[  207.866132][ T9749] loop1: detected capacity change from 0 to 4096
[  207.967463][ T9749] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  208.024959][  T109] ntfs3(loop1): ino=5, mi_enum_attr
[  208.027522][  T109] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  209.845016][ T9786] x_tables: duplicate entry at hook 2
[  209.974356][ T9788] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1491'.
[  210.289871][ T9794] loop4: detected capacity change from 0 to 512
[  210.295447][ T9794] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  210.301126][ T9794] EXT4-fs (loop4): invalid journal inode
[  210.303825][ T9794] EXT4-fs (loop4): can't get journal size
[  210.333064][ T9794] EXT4-fs (loop4): 1 truncate cleaned up
[  210.337061][ T9794] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.380798][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.643329][ T9817] loop5: detected capacity change from 0 to 164
[  210.651447][ T9817] grow_buffers: requested out-of-range block 18446744071562068008 for device loop5
[  210.661396][ T9817] isofs_fill_super: bread failed, dev=loop5, iso_blknum=1073741844, block=-2147483608
[  210.729273][ T9822] loop1: detected capacity change from 0 to 512
[  210.753431][ T9822] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1506: invalid indirect mapped block 4294967295 (level 1)
[  210.768542][ T9822] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  210.778455][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  210.783410][    C1] EXT4-fs (loop1): initial error at time 1774128718: ext4_free_branches:1023: inode 11
[  210.786346][    C1] EXT4-fs (loop1): last error at time 1774128718: ext4_free_branches:1023: inode 11
[  210.789264][ T9822] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1506: invalid indirect mapped block 4294967295 (level 1)
[  210.789317][ T9822] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  210.790136][ T9822] EXT4-fs (loop1): 2 truncates cleaned up
[  210.806294][ T9822] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  210.822301][ T9822] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #12: block 7: comm syz.1.1506: bad entry in directory: directory entry overrun - offset=0, inode=4278190093, rec_len=196860, size=56 fake=0
[  210.871871][ T9813] loop4: detected capacity change from 0 to 32768
[  210.873842][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.885092][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1509'.
[  210.903861][ T9813] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.941501][ T9813] XFS (loop4): Ending clean mount
[  210.951353][ T9813] XFS (loop4): Quotacheck needed: Please wait.
[  211.004836][ T9813] XFS (loop4): Quotacheck: Done.
[  211.043906][ T9091] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  211.280191][ T9846] loop5: detected capacity change from 0 to 32768
[  211.293628][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.293628][ T9846] 
[  211.303245][ T9846] xtLookup: xtSearch returned -5
[  211.305336][ T9846] add_index: get/read_metapage failed!
[  211.307408][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.307408][ T9846] 
[  211.311089][ T9846] xtLookup: xtSearch returned -5
[  211.314928][ T9846] free_index: error reading directory table
[  211.316918][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.316918][ T9846] 
[  211.320115][ T9846] xtLookup: xtSearch returned -5
[  211.321724][ T9846] free_index: error reading directory table
[  211.324483][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.324483][ T9846] 
[  211.328000][ T9846] xtLookup: xtSearch returned -5
[  211.329661][ T9846] free_index: error reading directory table
[  211.331637][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.331637][ T9846] 
[  211.335564][ T9846] xtLookup: xtSearch returned -5
[  211.337183][ T9846] free_index: error reading directory table
[  211.339205][ T9846] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  211.339205][ T9846] 
[  211.342625][ T9846] xtLookup: xtSearch returned -5
[  211.344371][ T9846] free_index: error reading directory table
[  211.483819][ T6000] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  211.646703][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.651153][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.655933][ T6000] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  211.661545][ T6000] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  211.665815][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.678948][ T6000] usb 5-1: config 0 descriptor??
[  211.998626][ T5932] Bluetooth: unknown link type 253
[  212.000597][ T5932] Bluetooth: hci2: connection err: -111
[  212.130455][ T6000] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  212.406642][ T6000] usb 5-1: USB disconnect, device number 4
[  212.493739][ T9876] loop5: detected capacity change from 0 to 64
[  212.920509][ T9885] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping
[  213.745155][ T9899] x_tables: ip_tables: icmp match: only valid for protocol 1
[  214.364654][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1538'.
[  215.044991][ T6000] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  215.224185][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.231951][ T6000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  215.237065][ T6000] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  215.240753][ T6000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.269011][ T6000] usb 5-1: config 0 descriptor??
[  215.294893][ T9919] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  215.560012][ T9932] x_tables: duplicate entry at hook 1
[  216.635615][ T6000] usbhid 5-1:0.0: can't add hid device: -71
[  216.637882][ T6000] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  216.657946][ T6000] usb 5-1: USB disconnect, device number 5
[  217.325963][ T9972] loop4: detected capacity change from 0 to 64
[  217.818365][ T9989] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1568'.
[  218.227762][T10007] loop5: detected capacity change from 0 to 2048
[  218.275323][T10007] CIFS: iocharset name too long
[  218.400935][T10009] loop5: detected capacity change from 0 to 128
[  218.438873][T10009] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  218.473264][T10009] ext4 filesystem being mounted at /107/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  218.526152][T10005] loop1: detected capacity change from 0 to 131072
[  218.531882][T10005] F2FS-fs (loop1): invalid crc value
[  218.569016][T10005] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  218.574678][T10005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  218.641036][ T9166] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  218.821883][T10027] loop5: detected capacity change from 0 to 256
[  218.850248][T10027] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x52c1951d, utbl_chksum : 0xe619d30d)
[  219.061964][T10037] evm: overlay not supported
[  219.992428][  T839] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  220.181774][T10109] IPVS: Error connecting to the multicast addr
[  220.194264][  T839] usb 2-1: Using ep0 maxpacket: 16
[  220.216256][  T839] usb 2-1: unable to get BOS descriptor or descriptor too short
[  220.233815][  T839] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[  220.255837][  T839] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[  220.271977][  T839] usb 2-1: config 13 has no interface number 0
[  220.277827][  T839] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  220.288303][  T839] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  220.300653][  T839] usb 2-1: config 13 interface 50 has no altsetting 0
[  220.307226][  T839] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  220.310789][  T839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.314041][  T839] usb 2-1: Product: syz
[  220.315650][  T839] usb 2-1: Manufacturer: syz
[  220.317327][  T839] usb 2-1: SerialNumber: syz
[  220.331513][T10089] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  220.542554][T10111] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1035195774/1035195776
[  220.549047][T10111] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1035195774/1035195776
[  220.555995][T10111] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1035195774/1035195776
[  220.600463][  T839] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  220.603428][  T839] usb 2-1: MIDIStreaming interface descriptor not found
[  220.731637][  T839] usb 2-1: USB disconnect, device number 21
[  220.860981][ T5818] udevd[5818]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  221.683060][T10132] loop5: detected capacity change from 0 to 32768
[  221.767606][T10144] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  221.767606][T10144] 
[  221.778344][T10144] ERROR: (device loop5): remounting filesystem as read-only
[  222.712216][T10155] openvswitch: netlink: IP tunnel dst address not specified
[  223.046661][    T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  223.222828][    T9] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  223.226637][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.230072][    T9] usb 5-1: Product: syz
[  223.231823][    T9] usb 5-1: Manufacturer: syz
[  223.233704][    T9] usb 5-1: SerialNumber: syz
[  223.237650][    T9] usb 5-1: config 0 descriptor??
[  223.243661][    T9] usb 5-1: selecting invalid altsetting 1
[  223.246030][    T9] technisat-usb2: could not set alternate setting to 0
[  223.461913][    T9] technisat-usb2: firmware version: 0.0
[  223.471375][    T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  224.297681][T10181] loop5: detected capacity change from 0 to 131072
[  224.302218][T10181] F2FS-fs (loop5): invalid crc value
[  224.312371][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  224.349494][T10181] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  224.355950][    T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  224.359517][T10181] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  224.364611][    T9] usb 5-1: USB disconnect, device number 6
[  224.984628][T10223] loop5: detected capacity change from 0 to 512
[  225.011936][T10223] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7
[  225.016881][T10223] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  225.020958][T10223] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1629: Failed to acquire dquot type 1
[  225.027976][T10223] loop5: lost filesystem error report for type 5 error -117
[  225.029494][T10223] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1629: corrupted inode contents
[  225.037278][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  225.037297][    C0] EXT4-fs (loop5): initial error at time 1774128731: ext4_acquire_dquot:7001
[  225.037313][    C0] EXT4-fs (loop5): last error at time 1774128731: ext4_acquire_dquot:7001
[  225.048416][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.048745][T10223] EXT4-fs error (device loop5): ext4_dirty_inode:6450: inode #16: comm syz.5.1629: mark_inode_dirty error
[  225.058217][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.058599][T10223] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1629: corrupted inode contents
[  225.068229][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.068465][T10223] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1629: mark_inode_dirty error
[  225.074787][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.077284][T10223] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1629: corrupted inode contents
[  225.084031][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.084234][T10223] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem
[  225.089772][T10223] loop5: lost filesystem error report for type 5 error -117
[  225.090062][T10223] EXT4-fs error (device loop5): ext4_do_update_inode:5569: inode #16: comm syz.5.1629: corrupted inode contents
[  225.097525][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.098187][T10223] EXT4-fs error (device loop5): ext4_truncate:4587: inode #16: comm syz.5.1629: mark_inode_dirty error
[  225.110134][T10223] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  225.110500][T10223] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem
[  225.118208][T10223] loop5: lost filesystem error report for type 5 error -117
[  225.119673][T10223] EXT4-fs (loop5): 1 truncate cleaned up
[  225.126619][T10223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.129884][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  225.132267][T10223] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  225.162768][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.290177][    T9] usb 5-1: Using ep0 maxpacket: 8
[  225.294309][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.298627][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  225.303471][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  225.307844][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[  225.314148][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  225.322318][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  225.335820][    T9] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  225.339558][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.343022][    T9] usb 5-1: Product: syz
[  225.344758][    T9] usb 5-1: Manufacturer: syz
[  225.346694][    T9] usb 5-1: SerialNumber: syz
[  225.352742][    T9] usb 5-1: config 0 descriptor??
[  225.355455][T10217] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  226.139149][T10233] loop5: detected capacity change from 0 to 512
[  226.152529][T10233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.200318][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.336134][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1650'.
[  226.350874][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1650'.
[  226.365691][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1650'.
[  226.373554][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1650'.
[  226.903722][    T9] rc_core: IR keymap rc-snapstream-firefly not found
[  226.906462][    T9] Registered IR keymap rc-empty
[  226.910063][    T9] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  226.916939][    T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10
[  226.930155][    T9] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  226.960283][    T9] usb 5-1: USB disconnect, device number 7
[  226.962731][    C0] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  227.034657][ T5932] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  227.038300][ T5932] Bluetooth: hci0: Injecting HCI hardware error event
[  227.044079][   T54] Bluetooth: hci0: hardware error 0x00
[  228.126816][T10278] loop1: detected capacity change from 0 to 4096
[  228.144600][T10278] ntfs3(loop1): Failed to load $MFTMirr (-2).
[  229.162837][T10320] loop1: detected capacity change from 0 to 32768
[  229.168267][T10320] (syz.1.1685,10320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  229.172982][T10320] (syz.1.1685,10320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  229.178110][T10320] (syz.1.1685,10320,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0xcca5a7f0. Applying ECC.
[  229.183430][T10320] (syz.1.1685,10320,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0x8304edbd
[  229.187524][T10320] (syz.1.1685,10320,1):ocfs2_validate_dir_block:465 ERROR: Checksum failed for dinode 288
[  229.191122][T10320] (syz.1.1685,10320,1):ocfs2_read_virt_blocks:1037 ERROR: status = -5
[  229.194331][T10320] (syz.1.1685,10320,1):ocfs2_read_dir_block:524 ERROR: status = -5
[  229.197230][T10320] (syz.1.1685,10320,1):ocfs2_find_entry_el:741 ERROR: reading directory 18, offset 0
[  229.200897][T10320] (syz.1.1685,10320,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  229.204030][T10320] (syz.1.1685,10320,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  229.204045][T10320] (syz.1.1685,10320,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  229.211771][T10320] (syz.1.1685,10320,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  229.214728][T10320] (syz.1.1685,10320,1):ocfs2_fill_super:1177 ERROR: status = -22
[  229.265372][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  229.554234][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  229.596002][T10333] loop4: detected capacity change from 0 to 1024
[  229.715907][    T9] usb 2-1: config 0 has no interfaces?
[  229.720049][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  229.725743][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.731882][    T9] usb 2-1: config 0 descriptor??
[  230.012540][ T5956] usb 2-1: USB disconnect, device number 22
[  230.045644][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  230.207551][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  230.211563][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  230.215943][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  230.220922][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  230.228505][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.232271][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.235705][    T9] usb 5-1: Product: syz
[  230.237417][    T9] usb 5-1: Manufacturer: syz
[  230.239015][    T9] usb 5-1: SerialNumber: syz
[  230.242902][T10343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  230.247708][    T9] cdc_mbim 5-1:1.0: skipping garbage
[  230.366114][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  230.461992][T10343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  230.464543][T10343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  230.798128][T10347] loop1: detected capacity change from 0 to 512
[  230.807612][T10347] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  230.812970][T10347] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  230.816284][T10347] EXT4-fs (loop1): mount failed
[  231.032569][T10352] loop1: detected capacity change from 0 to 32768
[  231.052172][T10352] ERROR: (device loop1): dbAlloc: the hint is outside the map
[  231.052172][T10352] 
[  231.060839][T10352] ERROR: (device loop1): remounting filesystem as read-only
[  231.120059][T10343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  231.122838][T10343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  231.129191][    T9] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  231.132039][    T9] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  231.348721][    T9] cdc_mbim 5-1:1.0: setting tx_max = 184
[  231.360316][    T9] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  231.369679][    T9] wwan wwan0: port wwan0mbim0 attached
[  231.378662][    T9] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, be:f0:50:59:11:88
[  231.388135][    T9] usb 5-1: USB disconnect, device number 8
[  231.390660][    T9] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  231.423023][T10360] netlink: 'syz.1.1704': attribute type 1 has an invalid length.
[  231.427848][    T9] wwan wwan0: port wwan0mbim0 disconnected
[  231.503442][T10364] loop1: detected capacity change from 0 to 164
[  231.823474][T10386] loop1: detected capacity change from 0 to 256
[  231.825825][T10386] exfat: Deprecated parameter 'utf8'
[  231.836715][T10386] exfat: Deprecated parameter 'namecase'
[  231.839023][T10386] exfat: Deprecated parameter 'namecase'
[  231.843270][T10386] exfat: Deprecated parameter 'utf8'
[  231.852100][T10386] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x6a70c931, utbl_chksum : 0xe619d30d)
[  231.856399][T10386] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[  233.022816][T10402] loop5: detected capacity change from 0 to 256
[  233.046107][T10402] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[  233.814516][T10410] loop5: detected capacity change from 0 to 32768
[  233.821384][T10410] BTRFS: device fsid 395ef67a-297e-0400-0000-000000003e5d devid 0 transid 8 /dev/loop5 (7:5) scanned by syz.5.1727 (10410)
[  234.215510][T10426] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1731'.
[  234.516497][T10432] macvtap1: entered promiscuous mode
[  234.518573][T10432] batadv0: entered promiscuous mode
[  234.520858][T10432] macvtap1: entered allmulticast mode
[  234.523226][T10432] batadv0: entered allmulticast mode
[  234.526410][T10432] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  234.530269][T10432] batadv0: left allmulticast mode
[  234.532228][T10432] batadv0: left promiscuous mode
[  234.640720][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  234.712697][T10443] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  234.814577][ T5956] usb 2-1: Using ep0 maxpacket: 16
[  234.828248][ T5956] usb 2-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  234.828492][T10450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1741'.
[  234.831327][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.834796][T10450] team0: entered allmulticast mode
[  234.839675][T10450] team_slave_0: entered allmulticast mode
[  234.841960][T10450] team_slave_1: entered allmulticast mode
[  234.847171][ T5956] usb 2-1: Product: syz
[  234.848924][ T5956] usb 2-1: Manufacturer: syz
[  234.850858][ T5956] usb 2-1: SerialNumber: syz
[  234.861566][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1741'.
[  234.867236][ T5956] usb 2-1: config 0 descriptor??
[  234.877524][ T5956] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  234.992015][T10460] loop5: detected capacity change from 0 to 512
[  235.025268][T10460] EXT4-fs (loop5): Test dummy encryption mode enabled
[  235.035177][T10460] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended
[  235.040292][T10460] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[  235.045084][T10460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.063287][T10460] EXT4-fs error (device loop5): ext4_search_dir:1474: inode #11: block 14: comm syz.5.1745: bad entry in directory: inode out of bounds - offset=12, inode=520093698, rec_len=12, size=1024 fake=1
[  235.087657][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.096159][ T5956] pwc: Warning: more than 1 configuration available.
[  235.106257][ T5956] pwc: Failed to set LED on/off time (-71)
[  235.108696][ T5956] pwc: send_video_command error -71
[  235.133374][ T5956] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  235.136517][ T5956] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  235.158148][ T5956] usb 2-1: USB disconnect, device number 23
[  235.290858][T10468] loop4: detected capacity change from 0 to 32768
[  236.211300][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'.
[  236.405169][T10525] loop1: detected capacity change from 0 to 128
[  236.427790][T10525] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  236.441545][T10525] ext4 filesystem being mounted at /634/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.462859][T10525] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  236.547356][ T5935] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.652642][T10540] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0
[  236.657432][T10539] IPVS: stopping master sync thread 10540 ...
[  236.860756][T10554] loop5: detected capacity change from 0 to 4096
[  236.878839][T10557] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  238.035016][T10565] loop1: detected capacity change from 0 to 131072
[  238.043946][T10565] F2FS-fs (loop1): invalid crc value
[  238.097256][T10570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  238.116399][T10570] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  238.193344][T10565] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.208999][T10565] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  238.230387][T10570] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  238.241733][T10570] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  238.265287][T10570] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  238.546717][T10586] netlink: 'syz.4.1799': attribute type 10 has an invalid length.
[  238.557948][T10586] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  238.578420][T10588] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1800'.
[  239.513544][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  240.368453][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  240.721196][ T6000] IPVS: starting estimator thread 0...
[  240.745582][T10631] loop4: detected capacity change from 0 to 136
[  240.828636][T10628] IPVS: using max 54 ests per chain, 129600 per kthread
[  241.105525][    T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  241.157181][T10648] loop1: detected capacity change from 0 to 256
[  241.160480][T10648] exfat: Deprecated parameter 'utf8'
[  241.182799][T10648] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  241.306893][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  241.314811][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  241.318465][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  241.321974][    T9] usb 6-1: SerialNumber: syz
[  241.557753][T10638] kAFS: unable to lookup cell ''
[  241.565499][    T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  241.586859][    T9] usb 6-1: USB disconnect, device number 6
[  241.736036][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  242.594770][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  242.952098][T10700] netlink: 'syz.4.1836': attribute type 10 has an invalid length.
[  242.979323][T10700] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  242.995581][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1836'.
[  243.001561][ T8536] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  243.005781][T10700] bridge_slave_1: left allmulticast mode
[  243.012718][T10700] bridge_slave_1: left promiscuous mode
[  243.015205][T10700] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.022572][T10700] bridge_slave_0: left allmulticast mode
[  243.025506][T10700] bridge_slave_0: left promiscuous mode
[  243.028049][T10700] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.042690][T10700] bond0: (slave bridge0): Releasing backup interface
[  243.172570][ T8536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  243.176907][ T8536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  243.184710][ T8536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  243.189033][ T8536] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  243.234014][ T8536] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  243.237671][ T8536] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.240885][ T8536] usb 2-1: Product: syz
[  243.303799][ T8536] usb 2-1: Manufacturer: syz
[  243.309077][ T8536] usb 2-1: SerialNumber: syz
[  243.357064][ T8536] usb 2-1: config 0 descriptor??
[  243.590772][ T8536] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  243.642645][T10749] netlink: 'syz.5.1845': attribute type 11 has an invalid length.
[  243.760142][T10756] loop5: detected capacity change from 0 to 512
[  243.789049][T10756] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.792931][T10756] ext4 filesystem being mounted at /214/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  243.808642][T10685] usb 2-1: Couldn't submit interrupt_out_urb -90
[  243.821501][    T9] usb 2-1: USB disconnect, device number 24
[  243.866431][T10756] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  243.894613][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.023593][T10775] loop4: detected capacity change from 0 to 2048
[  244.037927][T10777] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1857'.
[  244.046304][T10775] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.048582][T10775] EXT4-fs: Ignoring removed i_version option
[  244.069453][T10775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.069800][T10777] vlan2: entered allmulticast mode
[  244.078855][T10777] bridge3: entered allmulticast mode
[  244.081186][T10775] xt_nat: multiple ranges no longer supported
[  244.084975][   T33] audit: type=1800 audit(1774128749.442:524): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1856" name="file1" dev="loop4" ino=15 res=0 errno=0
[  244.088512][T10777] bridge3: port 1(erspan0) entered blocking state
[  244.095511][T10777] bridge3: port 1(erspan0) entered disabled state
[  244.098038][T10777] erspan0: entered allmulticast mode
[  244.100937][T10777] erspan0: entered promiscuous mode
[  244.106955][T10777] bridge3: port 1(erspan0) entered blocking state
[  244.109523][T10777] bridge3: port 1(erspan0) entered forwarding state
[  244.116665][T10775] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  244.429035][ T5918] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  244.693443][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.697190][ T5918] usb 6-1: Using ep0 maxpacket: 16
[  244.716565][ T5918] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  244.720587][ T5918] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.724371][ T5918] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.745737][ T5918] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  244.749942][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.753359][ T5918] usb 6-1: Product: syz
[  244.755110][ T5918] usb 6-1: Manufacturer: syz
[  244.756962][ T5918] usb 6-1: SerialNumber: syz
[  244.890356][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  245.030459][   T33] audit: type=1326 audit(1774128750.340:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.1867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfef9c799 code=0x7ffc0000
[  245.040092][   T33] audit: type=1326 audit(1774128750.340:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.1867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfef9c799 code=0x7ffc0000
[  245.049663][   T33] audit: type=1326 audit(1774128750.340:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.1867" exe="/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7f0cfef9c799 code=0x7ffc0000
[  245.058122][   T33] audit: type=1326 audit(1774128750.340:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.1867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfef9c799 code=0x7ffc0000
[  245.067851][   T33] audit: type=1326 audit(1774128750.340:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10800 comm="syz.4.1867" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cfef9c799 code=0x7ffc0000
[  245.443469][ T5918] usb 6-1: 0:2 : does not exist
[  245.703300][T10810] loop1: detected capacity change from 0 to 4096
[  245.714401][T10810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.720852][T10810] misc userio: Invalid payload size
[  246.534453][ T5918] usb 6-1: 1:0: failed to get current value for ch 0 (-22)
[  246.572551][ T5918] usb 6-1: USB disconnect, device number 7
[  246.737049][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.942655][T10820] Set syz0 is full, maxelem 0 reached
[  247.264496][T10823] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1876'.
[  248.260351][T10837] loop5: detected capacity change from 0 to 1024
[  248.292658][T10837] hfsplus: bad catalog entry type
[  248.421229][   T36] hfsplus: b-tree write err: -5, ino 25
[  248.423077][   T36] hfsplus: b-tree write err: -5, ino 4
[  248.424910][   T36] hfsplus: b-tree write err: -5, ino 2
[  248.677657][T10841] loop5: detected capacity change from 0 to 2048
[  248.709967][T10841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.714084][T10841] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.777465][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.777243][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1886'.
[  250.813023][T10859] loop5: detected capacity change from 0 to 512
[  250.816466][T10859] EXT4-fs: Ignoring removed orlov option
[  250.847856][T10859] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  250.925631][T10859] EXT4-fs error (device loop5): ext4_iget_extra_inode:5025: inode #15: comm syz.5.1888: corrupted in-inode xattr: e_value size too large
[  250.946051][T10865] netlink: 'syz.4.1890': attribute type 2 has an invalid length.
[  250.962431][T10859] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  250.968664][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  250.974725][    C1] EXT4-fs (loop5): initial error at time 1774128755: ext4_iget_extra_inode:5025: inode 15
[  250.978476][    C1] EXT4-fs (loop5): last error at time 1774128755: ext4_iget_extra_inode:5025: inode 15
[  250.983274][T10859] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1888: couldn't read orphan inode 15 (err -117)
[  251.008914][T10859] loop5: lost filesystem error report for type 5 error -117
[  251.012561][T10859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  251.096385][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.155862][T10873] loop4: detected capacity change from 0 to 512
[  251.162552][T10873] EXT4-fs: Ignoring removed orlov option
[  251.197418][T10873] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.201104][T10873] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.207541][T10879] loop5: detected capacity change from 0 to 512
[  251.210604][T10879] EXT4-fs: Ignoring removed nobh option
[  251.244233][T10879] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.256484][T10879] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  251.259847][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.289769][T10879] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #2: block 3: comm syz.5.1895: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0
[  251.419209][ T9166] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.700530][T10913] Invalid ELF header magic: != ELF
[  251.802474][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  251.973960][    T9] usb 6-1: Using ep0 maxpacket: 32
[  251.981606][    T9] usb 6-1: config 0 has an invalid interface number: 14 but max is 0
[  251.985947][    T9] usb 6-1: config 0 has no interface number 0
[  251.987977][    T9] usb 6-1: config 0 interface 14 has no altsetting 0
[  251.992275][    T9] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[  251.997375][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.999910][    T9] usb 6-1: Product: syz
[  252.001254][    T9] usb 6-1: Manufacturer: syz
[  252.002859][    T9] usb 6-1: SerialNumber: syz
[  252.013300][    T9] usb 6-1: config 0 descriptor??
[  252.046129][T10922] loop4: detected capacity change from 0 to 32768
[  252.069774][T10922] *** Log Is Dirty ! ***
[  252.077719][T10922] lmLogInit: exit(-22)
[  252.087757][T10922] lmLogOpen: exit(-22)
[  252.089514][T10922] jfs_mount_rw failed, return code = -22
[  252.240873][    T9] usb-storage 6-1:0.14: USB Mass Storage device detected
[  252.270712][    T9] usb-storage 6-1:0.14: Quirks match for vid 04b3 pid 4001: 2000
[  252.342742][    T9] usb 6-1: USB disconnect, device number 8
[  252.382307][T10931] loop1: detected capacity change from 0 to 32768
[  252.392493][T10931] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.404547][T10931] XFS (loop1): Ending clean mount
[  252.409034][T10931] XFS (loop1): Quotacheck needed: Please wait.
[  252.446414][T10931] XFS (loop1): Quotacheck: Done.
[  252.482878][ T5935] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  252.582433][ T5956] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  252.753351][ T5956] usb 5-1: Using ep0 maxpacket: 16
[  252.758713][ T5956] usb 5-1: config 251 has an invalid interface number: 202 but max is 0
[  252.762407][ T5956] usb 5-1: config 251 has no interface number 0
[  252.765679][ T5956] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  252.769874][ T5956] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0
[  252.774018][ T5956] usb 5-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  252.779984][ T5956] usb 5-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  252.796274][ T5956] usb 5-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81
[  252.800848][ T5956] usb 5-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 120
[  252.804445][ T5956] usb 5-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  252.810382][ T5956] usb 5-1: config 251 interface 202 has no altsetting 0
[  252.819611][ T5956] usb 5-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9
[  252.823936][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  252.826689][ T5956] usb 5-1: Product: syz
[  252.834734][ T5956] usb 5-1: SerialNumber: syz
[  252.843820][T10937] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  252.878716][T10952] lo: entered allmulticast mode
[  252.880546][T10952] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  252.899194][T10952] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  253.089355][ T5956] cxacru 5-1:251.202: submit of write urb for cm 0x90 failed (-90)
[  253.092993][ T5956] cxacru 5-1:251.202: usbatm_usb_probe: invalid endpoint 02!
[  253.108040][ T5956] cxacru 5-1:251.202: probe with driver cxacru failed with error -22
[  253.120239][ T5956] usb 5-1: USB disconnect, device number 9
[  253.953339][T10986] loop1: detected capacity change from 0 to 4096
[  254.039808][   T33] audit: type=1800 audit(1774128758.753:530): pid=10986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1934" name="file1" dev="loop1" ino=33 res=0 errno=0
[  254.434174][ T5956] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  254.591317][ T5956] usb 5-1: Using ep0 maxpacket: 16
[  254.595146][ T5956] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.600583][ T5956] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.619409][ T5956] usb 5-1: config 1 has no interface number 0
[  254.800749][ T5956] usb 5-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40
[  254.804559][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.808799][ T5956] usb 5-1: Product: syz
[  254.810677][ T5956] usb 5-1: Manufacturer: syz
[  254.812694][ T5956] usb 5-1: SerialNumber: syz
[  254.980746][T11016] option changes via remount are deprecated (pid=11015 comm=syz.5.1944)
[  254.985279][T11016] cgroup: option or name mismatch, new: 0x0 "pim6reg0", old: 0x0 ""
[  255.083855][T11020] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1946'.
[  255.092856][ T5956] usb 5-1: USB disconnect, device number 10
[  255.110293][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  255.505672][T11030] loop5: detected capacity change from 0 to 32768
[  255.526830][T11030] ERROR: (device loop5): diAllocAG: nfreeinos = 0, but iag on freelist
[  255.526830][T11030] 
[  255.536138][T11030] ERROR: (device loop5): remounting filesystem as read-only
[  255.538739][T11030] ialloc: diAlloc returned -5!
[  255.776075][T11037] loop4: detected capacity change from 0 to 512
[  255.784720][T11037] EXT4-fs: Ignoring removed nobh option
[  255.821066][T11037] EXT4-fs (loop4): orphan cleanup on readonly fs
[  255.823919][T11037] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.1955: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  255.832038][T11037] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  255.837009][T11037] EXT4-fs (loop4): Remounting filesystem read-only
[  255.844036][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  255.844054][    C0] EXT4-fs (loop4): initial error at time 1774128760: ext4_xattr_inode_update_ref:1037: inode 11
[  255.844076][    C0] EXT4-fs (loop4): last error at time 1774128760: ext4_xattr_inode_update_ref:1037: inode 11
[  255.858106][T11037] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.4.1955: ea_inode dec ref err=-117
[  255.865331][T11037] EXT4-fs (loop4): 1 orphan inode deleted
[  255.869361][T11037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  255.911218][ T9091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.055329][ T5956] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  256.166391][T11047] loop4: detected capacity change from 0 to 64
[  256.218623][ T5956] usb 6-1: Using ep0 maxpacket: 16
[  256.228534][ T5956] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.232717][ T5956] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.236343][ T5956] usb 6-1: config 0 interface 0 has no altsetting 0
[  256.241676][ T5956] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  256.246011][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.272015][ T5956] usb 6-1: config 0 descriptor??
[  256.755859][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  256.759805][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'.
[  256.782173][T11050] netlink: 'syz.1.1959': attribute type 19 has an invalid length.
[  256.786673][T11050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1959'.
[  257.004699][ T5956] usb 6-1: USB disconnect, device number 9
[  258.060460][T11063] devtmpfs: Too few inodes for current use
[  258.084572][T11066] loop1: detected capacity change from 0 to 256
[  258.097166][T11066] exfat: Bad value for 'uid'
[  258.100063][T11066] exfat: Bad value for 'uid'
[  258.153981][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1967'.
[  258.323569][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'.
[  258.442579][T11095] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.1980'.
[  258.446112][T11095] netlink: 8192 bytes leftover after parsing attributes in process `syz.1.1980'.
[  258.480992][ T5956] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  258.648434][ T5956] usb 6-1: Using ep0 maxpacket: 8
[  258.651738][ T5956] usb 6-1: unable to get BOS descriptor or descriptor too short
[  258.659207][ T5956] usb 6-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40
[  258.662833][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  258.666659][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.669830][ T5956] usb 6-1: Product: syz
[  258.671956][ T5956] usb 6-1: Manufacturer: syz
[  258.674348][ T5956] usb 6-1: SerialNumber: syz
[  258.833987][    T9] usb 5-1: Using ep0 maxpacket: 32
[  258.842723][    T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  258.846420][    T9] usb 5-1: config 0 has no interface number 0
[  258.848892][    T9] usb 5-1: config 0 interface 184 has no altsetting 0
[  258.855321][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  258.859230][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.862463][    T9] usb 5-1: Product: syz
[  258.866312][    T9] usb 5-1: Manufacturer: syz
[  258.867961][    T9] usb 5-1: SerialNumber: syz
[  258.876993][    T9] usb 5-1: config 0 descriptor??
[  258.911744][ T5956] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[  258.918626][ T5956] usb 6-1: USB disconnect, device number 10
[  260.171766][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  260.175825][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  260.180590][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  260.185013][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  260.188997][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  260.194504][    T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  260.198669][    T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  260.207570][    T9] usb 5-1: USB disconnect, device number 11
[  260.849639][T11116] loop1: detected capacity change from 0 to 262144
[  260.931181][T11116] F2FS-fs (loop1): invalid crc value
[  261.202664][T11116] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  261.207980][T11116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  261.281420][T11133] loop4: detected capacity change from 0 to 2048
[  261.305305][T11133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.359006][T11133] overlayfs: upper fs needs to support d_type.
[  261.363679][T11133] overlayfs: cleanup of 'work/#29' failed (-2)
[  261.366798][T11133] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  261.369512][T11133] overlayfs: failed to set xattr on upper
[  261.371777][T11133] overlayfs: ...falling back to redirect_dir=nofollow.
[  261.374490][T11133] overlayfs: ...falling back to index=off.
[  261.377001][T11133] overlayfs: ...falling back to uuid=null.
[  261.505625][ T9091] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  261.521708][ T9091] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  261.985578][ T5932] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  261.990396][ T5932] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  261.993899][ T5932] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  262.009382][ T5932] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  262.015325][ T5932] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  263.035981][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.042326][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.055605][   T13] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  263.064603][   T13] bond0 (unregistering): Released all slaves
[  263.100967][T11143] chnl_net:caif_netlink_parms(): no params data found
[  263.561919][   T13] hsr_slave_0: left promiscuous mode
[  263.594164][   T13] hsr_slave_1: left promiscuous mode
[  263.602194][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.607420][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.828433][   T13] team0 (unregistering): Port device team_slave_1 removed
[  263.836644][   T13] team0 (unregistering): Port device team_slave_0 removed
[  264.073940][T11143] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.076463][T11143] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.079008][T11143] bridge_slave_0: entered allmulticast mode
[  264.089883][T11143] bridge_slave_0: entered promiscuous mode
[  264.099120][T11143] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.101948][T11143] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.104478][T11143] bridge_slave_1: entered allmulticast mode
[  264.107591][T11143] bridge_slave_1: entered promiscuous mode
[  264.149201][T11143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.158669][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  264.174858][T11143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.236290][ T5932] Bluetooth: hci0: command tx timeout
[  264.236848][T11143] team0: Port device team_slave_0 added
[  264.278556][T11143] team0: Port device team_slave_1 added
[  264.304539][T11143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.310664][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.321582][T11143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.327989][T11143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.330545][T11143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.340964][    T9] usb 2-1: Using ep0 maxpacket: 16
[  264.344533][T11143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.349189][    T9] usb 2-1: config 5 has an invalid interface number: 201 but max is 0
[  264.351883][    T9] usb 2-1: config 5 has no interface number 0
[  264.353891][    T9] usb 2-1: config 5 interface 201 altsetting 38 bulk endpoint 0xF has invalid maxpacket 16
[  264.357204][    T9] usb 2-1: config 5 interface 201 has no altsetting 0
[  264.374961][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=3f.a7
[  264.377665][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.383359][    T9] usb 2-1: Product: syz
[  264.384851][    T9] usb 2-1: Manufacturer: syz
[  264.386570][    T9] usb 2-1: SerialNumber: syz
[  264.397647][T11175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  264.402937][   T13] IPVS: stop unused estimator thread 0...
[  264.411455][T11143] hsr_slave_0: entered promiscuous mode
[  264.416345][T11143] hsr_slave_1: entered promiscuous mode
[  264.419549][T11143] debugfs: 'hsr0' already exists in 'hsr'
[  264.421726][T11143] Cannot create hsr debugfs directory
[  264.706938][    T9] ldusb 2-1:5.201: Interrupt in endpoint not found
[  264.719739][    T9] usb 2-1: USB disconnect, device number 25
[  264.780361][T11143] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  264.797926][T11143] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  264.820519][T11143] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  264.838389][T11143] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  264.928769][T11143] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.942874][T11143] 8021q: adding VLAN 0 to HW filter on device team0
[  264.951390][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.954204][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.969094][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.971967][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.105108][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.304182][T11143] veth0_vlan: entered promiscuous mode
[  265.311059][T11143] veth1_vlan: entered promiscuous mode
[  265.330078][T11143] veth0_macvtap: entered promiscuous mode
[  265.335710][T11143] veth1_macvtap: entered promiscuous mode
[  265.344081][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  265.351104][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.358440][ T5682] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.362102][ T5682] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.367693][ T5682] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.371346][ T5682] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.424660][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.436925][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.450181][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.453061][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.442358][ T5932] Bluetooth: hci0: command tx timeout
[  267.597887][T11271] netlink: 'syz.6.2030': attribute type 10 has an invalid length.
[  267.615252][T11271] team0: Port device geneve1 added
[  268.005245][T11291] netlink: 'syz.6.2040': attribute type 4 has an invalid length.
[  268.149060][T11297] loop1: detected capacity change from 0 to 32768
[  268.665115][ T5932] Bluetooth: hci0: command tx timeout
[  268.999506][T11326] loop6: detected capacity change from 0 to 256
[  269.059781][T11326] FAT-fs (loop6): Directory bread(block 64) failed
[  269.069387][T11326] FAT-fs (loop6): Directory bread(block 65) failed
[  269.073854][T11326] FAT-fs (loop6): Directory bread(block 66) failed
[  269.076460][T11326] FAT-fs (loop6): Directory bread(block 67) failed
[  269.079009][T11326] FAT-fs (loop6): Directory bread(block 68) failed
[  269.086417][T11326] FAT-fs (loop6): Directory bread(block 69) failed
[  269.092449][T11326] FAT-fs (loop6): Directory bread(block 70) failed
[  269.094602][T11326] FAT-fs (loop6): Directory bread(block 71) failed
[  269.101576][T11326] FAT-fs (loop6): Directory bread(block 72) failed
[  269.108712][T11326] FAT-fs (loop6): Directory bread(block 73) failed
[  269.414731][T11332] netlink: 'syz.6.2056': attribute type 1 has an invalid length.
[  269.480605][T11334] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  269.496620][T11335] macvlan2: entered promiscuous mode
[  269.511403][T11335] macvlan2: entered allmulticast mode
[  270.542533][T11366] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.2069'.
[  270.546943][T11366] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.2069'.
[  270.888872][ T5932] Bluetooth: hci0: command tx timeout
[  271.525924][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2088'.
[  271.804571][T11427] SET target dimension over the limit!
[  271.887477][T11407] loop1: detected capacity change from 0 to 32768
[  271.907683][T11407] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.003854][T11407] XFS (loop1): Ending clean mount
[  272.202894][ T5935] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.261599][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  272.264210][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  272.625234][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  272.632148][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  272.636822][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  272.654856][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  272.660337][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  272.690129][T11472] netlink: 'syz.6.2114': attribute type 8 has an invalid length.
[  272.833751][T11481] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2117'.
[  272.838330][T11481] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2117'.
[  272.858877][T11468] chnl_net:caif_netlink_parms(): no params data found
[  273.000337][T11468] bridge0: port 1(bridge_slave_0) entered blocking state
[  273.004765][T11468] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.007756][T11468] bridge_slave_0: entered allmulticast mode
[  273.011507][T11468] bridge_slave_0: entered promiscuous mode
[  273.017485][T11468] bridge0: port 2(bridge_slave_1) entered blocking state
[  273.020348][T11468] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.023334][T11468] bridge_slave_1: entered allmulticast mode
[  273.033365][T11468] bridge_slave_1: entered promiscuous mode
[  273.061733][T11492] sch_fq: defrate 53322 ignored.
[  273.080732][T11468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.087255][T11468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.125288][T11494] loop6: detected capacity change from 0 to 8
[  273.130832][T11468] team0: Port device team_slave_0 added
[  273.139973][T11468] team0: Port device team_slave_1 added
[  273.149535][T11494] SQUASHFS error: zlib decompression failed, data probably corrupt
[  273.153605][T11494] SQUASHFS error: Failed to read block 0x9b: -5
[  273.156283][T11494] SQUASHFS error: Unable to read metadata cache entry [99]
[  273.159191][T11494] SQUASHFS error: Unable to read inode 0x127
[  273.192495][T11468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.195517][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.211813][T11468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.232954][T11468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.235702][T11468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.252399][T11468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.269716][T11496] loop6: detected capacity change from 0 to 4096
[  273.276382][T11496] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  273.285190][T11496] ntfs3(loop6): ino=3, mi_enum_attr
[  273.334412][T11468] hsr_slave_0: entered promiscuous mode
[  273.342451][T11468] hsr_slave_1: entered promiscuous mode
[  273.344778][T11468] debugfs: 'hsr0' already exists in 'hsr'
[  273.347135][T11468] Cannot create hsr debugfs directory
[  273.545950][T11468] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.553383][   T33] audit: type=1326 audit(1774128777.020:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.6.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0399c799 code=0x7ffc0000
[  273.563002][   T33] audit: type=1326 audit(1774128777.020:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.6.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ffa0399c799 code=0x7ffc0000
[  273.579018][   T33] audit: type=1326 audit(1774128777.020:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.6.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0399c799 code=0x7ffc0000
[  273.590597][   T33] audit: type=1326 audit(1774128777.020:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11504 comm="syz.6.2127" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0399c799 code=0x7ffc0000
[  273.659659][T11468] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.735246][T11468] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.807310][T11468] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.890400][ T5918] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  273.945129][T11468] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  273.952392][T11468] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  273.958463][T11468] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  273.967065][T11468] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  274.039346][T11468] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.052411][ T5918] usb 7-1: Using ep0 maxpacket: 8
[  274.056457][ T5918] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  274.057614][T11468] 8021q: adding VLAN 0 to HW filter on device team0
[  274.059251][ T5918] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  274.065059][ T5918] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  274.067429][T10081] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.068306][ T5918] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  274.071041][T10081] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.075412][ T5918] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  274.082314][ T5918] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  274.088585][ T5918] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.089582][T10081] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.094128][T10081] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.240690][T11468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.320968][ T5918] usb 7-1: GET_CAPABILITIES returned 0
[  274.322710][ T5918] usbtmc 7-1:16.0: can't read capabilities
[  274.492201][T11468] veth0_vlan: entered promiscuous mode
[  274.506065][T11468] veth1_vlan: entered promiscuous mode
[  274.537847][T11468] veth0_macvtap: entered promiscuous mode
[  274.543165][T11468] veth1_macvtap: entered promiscuous mode
[  274.555986][T11468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.572226][T11468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  274.573272][T11509] usb 7-1: usbtmc_ioctl_clear_in_halt returned -32
[  274.581675][   T24] usb 7-1: USB disconnect, device number 2
[  274.598821][ T5916] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.605465][ T5916] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.616790][ T5916] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.634261][ T5916] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.675290][T11537] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  274.683282][T11537] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  274.712418][T10081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.717215][T10081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.752496][T10081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.758114][T10081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.820221][   T54] Bluetooth: hci1: command tx timeout
[  274.914135][T11543] macvtap1: entered promiscuous mode
[  274.917400][T11543] macvtap1: entered allmulticast mode
[  274.919143][T11543] veth1_vlan: entered allmulticast mode
[  275.053330][T11549] 9p: Could not find request transport: f
[  275.065859][ T8536] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  275.262581][ T8536] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  275.265939][ T8536] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.273936][ T8536] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  275.292081][ T8536] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  275.295291][ T8536] usb 6-1: Manufacturer: syz
[  275.303145][ T8536] usb 6-1: config 0 descriptor??
[  275.356310][ T8536] rc_core: IR keymap rc-hauppauge not found
[  275.358845][ T8536] Registered IR keymap rc-empty
[  275.362651][ T8536] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  275.377735][ T8536] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14
[  275.664152][ T5918] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  275.743558][    C0] igorplugusb 6-1:0.0: receive overflow invalid: 250
[  275.848052][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  275.851242][ T5918] usb 2-1: config 1 has an invalid interface number: 19 but max is 0
[  275.854377][ T5918] usb 2-1: config 1 has no interface number 0
[  275.856368][ T5918] usb 2-1: config 1 interface 19 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.861662][ T5918] usb 2-1: config 1 interface 19 has no altsetting 0
[  275.865461][ T5918] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9
[  275.868578][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.871033][ T5918] usb 2-1: Product: syz
[  275.872336][ T5918] usb 2-1: Manufacturer: syz
[  275.873756][ T5918] usb 2-1: SerialNumber: syz
[  275.892030][ T5918] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  275.967717][   T24] usb 6-1: USB disconnect, device number 11
[  276.106450][ T5682] usb 2-1: Failed to submit usb control message: -71
[  276.109019][ T5682] usb 2-1: unable to send the bmi data to the device: -71
[  276.111206][ T5682] usb 2-1: unable to get target info from device
[  276.114105][ T5987] usb 2-1: USB disconnect, device number 26
[  276.117211][ T5682] usb 2-1: could not get target info (-71)
[  276.119227][ T5682] usb 2-1: could not probe fw (-71)
[  276.563526][T11593] loop6: detected capacity change from 0 to 40427
[  276.566155][T11593] F2FS-fs: inline encryption not supported
[  276.568523][T11593] F2FS-fs (loop6): Image doesn't support compression
[  276.571930][T11593] F2FS-fs (loop6): build fault injection rate: 690
[  276.594959][T11593] F2FS-fs (loop6): invalid crc value
[  276.599215][T11595] loop5: detected capacity change from 0 to 256
[  276.620038][T11595] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  276.624053][T11595] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 1)
[  276.642071][T11595] exFAT-fs (loop5): failed to load alloc-bitmap
[  276.644050][T11595] exFAT-fs (loop5): failed to recognize exfat type
[  276.653537][T11593] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  276.657089][T11593] F2FS-fs (loop6): Start checkpoint disabled!
[  276.682521][T11593] F2FS-fs (loop6): f2fs_disable_checkpoint() finish, err:0
[  276.684939][T11593] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  276.723780][ T1100] kworker/u10:7: attempt to access beyond end of device
[  276.723780][ T1100] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  276.734088][T11599] macvtap1: entered promiscuous mode
[  276.735812][T11599] macvtap1: entered allmulticast mode
[  276.736238][ T1100] CPU: 1 UID: 0 PID: 1100 Comm: kworker/u10:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  276.736259][ T1100] Tainted: [L]=SOFTLOCKUP
[  276.736262][ T1100] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  276.736266][ T1100] Workqueue: writeback wb_workfn (flush-7:6)
[  276.736283][ T1100] Call Trace:
[  276.736286][ T1100]  <TASK>
[  276.736290][ T1100]  dump_stack_lvl+0xe8/0x150
[  276.736302][ T1100]  f2fs_handle_critical_error+0x37c/0x540
[  276.736314][ T1100]  f2fs_write_end_io+0x1273/0x1740
[  276.736328][ T1100]  __submit_merged_bio+0x256/0x700
[  276.736344][ T1100]  __submit_merged_write_cond+0x3c9/0x4e0
[  276.736362][ T1100]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  276.736388][ T1100]  f2fs_write_data_pages+0x287e/0x34f0
[  276.736424][ T1100]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.736448][ T1100]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  276.736486][ T1100]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  276.736517][ T1100]  ? __lock_acquire+0x6b5/0x2cf0
[  276.736541][ T1100]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  276.736553][ T1100]  do_writepages+0x32e/0x550
[  276.736565][ T1100]  ? reacquire_held_locks+0x104/0x190
[  276.736574][ T1100]  ? writeback_sb_inodes+0x477/0x1a20
[  276.736587][ T1100]  __writeback_single_inode+0x133/0x11a0
[  276.736594][ T1100]  ? do_raw_spin_unlock+0x4d/0x210
[  276.736602][ T1100]  writeback_sb_inodes+0x992/0x1a20
[  276.736621][ T1100]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  276.736631][ T1100]  ? do_raw_spin_lock+0x12b/0x2f0
[  276.736650][ T1100]  ? rcu_is_watching+0x15/0xb0
[  276.736669][ T1100]  wb_writeback+0x456/0xb70
[  276.736687][ T1100]  ? queue_io+0x291/0x4a0
[  276.736708][ T1100]  ? __pfx_wb_writeback+0x10/0x10
[  276.736721][ T1100]  ? do_raw_spin_lock+0x12b/0x2f0
[  276.736743][ T1100]  wb_workfn+0x414/0xf50
[  276.736759][ T1100]  ? look_up_lock_class+0x57/0x110
[  276.736782][ T1100]  ? __pfx_wb_workfn+0x10/0x10
[  276.736799][ T1100]  ? do_raw_spin_lock+0x12b/0x2f0
[  276.736811][ T1100]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  276.736832][ T1100]  ? process_scheduled_works+0xa8d/0x18c0
[  276.736841][ T1100]  ? process_scheduled_works+0xa8d/0x18c0
[  276.736850][ T1100]  process_scheduled_works+0xb6e/0x18c0
[  276.736869][ T1100]  ? __pfx_process_scheduled_works+0x10/0x10
[  276.736879][ T1100]  ? assign_work+0x3d5/0x5e0
[  276.736919][ T1100]  worker_thread+0xa53/0xfc0
[  276.736953][ T1100]  kthread+0x388/0x470
[  276.736963][ T1100]  ? __pfx_worker_thread+0x10/0x10
[  276.736971][ T1100]  ? __pfx_kthread+0x10/0x10
[  276.736978][ T1100]  ret_from_fork+0x51e/0xb90
[  276.736988][ T1100]  ? __pfx_ret_from_fork+0x10/0x10
[  276.736997][ T1100]  ? __switch_to+0xc7d/0x1450
[  276.737005][ T1100]  ? __pfx_kthread+0x10/0x10
[  276.737013][ T1100]  ret_from_fork_asm+0x1a/0x30
[  276.737028][ T1100]  </TASK>
[  276.737032][ T1100] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  276.738096][T11599] dummy0: entered promiscuous mode
[  276.836731][T11599] dummy0: entered allmulticast mode
[  276.844829][T11599] team0: Device macvtap1 failed to register rx_handler
[  276.857102][T11599] dummy0: left allmulticast mode
[  276.859092][T11599] dummy0: left promiscuous mode
[  276.932702][T11602] loop6: detected capacity change from 0 to 16
[  276.948478][T11602] erofs (device loop6): mounted with root inode @ nid 36.
[  277.042873][   T54] Bluetooth: hci1: command tx timeout
[  277.236574][T11603] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  277.238997][T11603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  277.279334][T11603] vhci_hcd vhci_hcd.0: Device attached
[  277.291361][T11609] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(11)
[  277.293579][T11609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  277.316008][T11609] vhci_hcd vhci_hcd.0: Device attached
[  277.375069][T11603] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(10)
[  277.377339][T11603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  277.392360][T11603] vhci_hcd vhci_hcd.0: Device attached
[  277.534330][ T6457] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  277.707052][T11617] loop6: detected capacity change from 0 to 32768
[  277.709596][T11612] vhci_hcd: connection reset by peer
[  277.709682][T11615] vhci_hcd: connection closed
[  277.712968][T11619] vhci_hcd: connection closed
[  277.720854][T11617] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2160 (11617)
[  277.726389][ T5682] vhci_hcd vhci_hcd.1: stop threads
[  277.740480][ T5682] vhci_hcd vhci_hcd.1: release socket
[  277.750145][ T5682] vhci_hcd vhci_hcd.1: disconnect device
[  277.752602][ T5682] vhci_hcd vhci_hcd.1: stop threads
[  277.753983][T11617] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  277.754846][ T5682] vhci_hcd vhci_hcd.1: release socket
[  277.757278][T11617] BTRFS info (device loop6): using sha256 checksum algorithm
[  277.760852][ T5682] vhci_hcd vhci_hcd.1: disconnect device
[  277.763832][ T5682] vhci_hcd vhci_hcd.1: stop threads
[  277.765740][ T5682] vhci_hcd vhci_hcd.1: release socket
[  277.767515][ T5682] vhci_hcd vhci_hcd.1: disconnect device
[  277.874364][T11617] BTRFS info (device loop6): enabling ssd optimizations
[  277.894032][T11617] BTRFS info (device loop6): turning on async discard
[  277.898540][T11617] BTRFS info (device loop6): enabling free space tree
[  278.172065][T11143] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  278.701928][ T6467] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  278.882536][ T6467] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  278.886343][ T6467] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.896549][ T6467] usb 7-1: config 0 descriptor??
[  279.265490][   T54] Bluetooth: hci1: command tx timeout
[  279.382316][ T6467] usb 7-1: Cannot set MAC address
[  279.391070][ T6467] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  279.399520][ T6467] usb 7-1: USB disconnect, device number 3
[  280.238041][    T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  280.400285][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  280.404783][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  280.409126][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 129, changing to 4
[  280.415391][    T9] usb 7-1: New USB device found, idVendor=0499, idProduct=104e, bcdDevice= 0.40
[  280.419034][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.426291][    T9] usb 7-1: Product: syz
[  280.427966][    T9] usb 7-1: Manufacturer: syz
[  280.429949][    T9] usb 7-1: SerialNumber: syz
[  280.663417][    T9] usb 7-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  280.695019][T11682] loop1: detected capacity change from 0 to 40427
[  280.698597][T11682] F2FS-fs: heap/no_heap options were deprecated
[  280.708688][    T9] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22
[  280.709678][T11682] F2FS-fs (loop1): build fault injection rate: 19
[  280.721326][    T9] usb 7-1: USB disconnect, device number 4
[  280.727401][T11682] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  280.742922][T11682] F2FS-fs (loop1): invalid crc value
[  280.761001][T11682] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  280.769996][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  280.827636][T11682] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  280.835319][T11682] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  280.840193][T11682] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  280.866069][T11682] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060
[  280.873338][T11682] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  280.879378][T11682] F2FS-fs (loop1): inject truncate fail in f2fs_truncate of f2fs_setattr+0xf44/0x1c30
[  280.896632][ T5935] syz-executor: attempt to access beyond end of device
[  280.896632][ T5935] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  280.906506][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  280.906523][ T5935] Tainted: [L]=SOFTLOCKUP
[  280.906526][ T5935] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.906530][ T5935] Call Trace:
[  280.906534][ T5935]  <TASK>
[  280.906537][ T5935]  dump_stack_lvl+0xe8/0x150
[  280.906552][ T5935]  f2fs_handle_critical_error+0x37c/0x540
[  280.906565][ T5935]  f2fs_write_end_io+0x1273/0x1740
[  280.906580][ T5935]  __submit_merged_bio+0x256/0x700
[  280.906592][ T5935]  __submit_merged_write_cond+0x3c9/0x4e0
[  280.906605][ T5935]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  280.906623][ T5935]  f2fs_write_data_pages+0x287e/0x34f0
[  280.906647][ T5935]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  280.906672][ T5935]  ? arch_stack_walk+0xfb/0x150
[  280.906719][ T5935]  ? __lock_acquire+0x6b5/0x2cf0
[  280.906744][ T5935]  ? __lock_acquire+0x6b5/0x2cf0
[  280.906761][ T5935]  ? do_raw_spin_lock+0x12b/0x2f0
[  280.906781][ T5935]  ? do_raw_spin_unlock+0x4d/0x210
[  280.906793][ T5935]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  280.906810][ T5935]  do_writepages+0x32e/0x550
[  280.906831][ T5935]  ? do_raw_spin_unlock+0x4d/0x210
[  280.906874][ T5935]  filemap_fdatawrite+0x1e9/0x2f0
[  280.906891][ T5935]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  280.906920][ T5935]  ? do_raw_spin_unlock+0x4d/0x210
[  280.906929][ T5935]  f2fs_sync_dirty_inodes+0x30e/0x860
[  280.906942][ T5935]  f2fs_write_checkpoint+0x9df/0x26a0
[  280.906964][ T5935]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  280.906992][ T5935]  kill_f2fs_super+0x314/0x720
[  280.907006][ T5935]  ? __pfx_kill_f2fs_super+0x10/0x10
[  280.907021][ T5935]  ? lockdep_hardirqs_on+0x7a/0x110
[  280.907037][ T5935]  deactivate_locked_super+0xbc/0x130
[  280.907047][ T5935]  cleanup_mnt+0x437/0x4d0
[  280.907057][ T5935]  ? _raw_spin_unlock_irq+0x23/0x50
[  280.907068][ T5935]  task_work_run+0x1d9/0x270
[  280.907077][ T5935]  ? __pfx_task_work_run+0x10/0x10
[  280.907089][ T5935]  exit_to_user_mode_loop+0xed/0x480
[  280.907097][ T5935]  ? rcu_is_watching+0x15/0xb0
[  280.907108][ T5935]  do_syscall_64+0x32d/0xf80
[  280.907123][ T5935]  ? trace_irq_disable+0x3b/0x150
[  280.907129][ T5935]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.907139][ T5935]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.907146][ T5935] RIP: 0033:0x7fd0a739d9d7
[  280.907154][ T5935] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  280.907160][ T5935] RSP: 002b:00007ffed6abdcb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  280.907168][ T5935] RAX: 0000000000000000 RBX: 00007fd0a7432050 RCX: 00007fd0a739d9d7
[  280.907173][ T5935] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffed6abdd70
[  280.907178][ T5935] RBP: 00007ffed6abdd70 R08: 00007ffed6abed70 R09: 00000000ffffffff
[  280.907182][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffed6abee00
[  280.907187][ T5935] R13: 00007fd0a7432050 R14: 0000000000041baa R15: 00007ffed6abee40
[  280.907199][ T5935]  </TASK>
[  280.908399][ T5935] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  281.196552][T11693] loop5: detected capacity change from 0 to 1024
[  281.228667][T11693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  281.233655][T11693] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.256675][T11693] EXT4-fs error (device loop5): ext4_map_blocks:818: inode #15: comm syz.5.2177: lblock 0 mapped to illegal pblock 0 (length 1)
[  281.268154][T11693] EXT4-fs (loop5): Remounting filesystem read-only
[  281.321994][T11468] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  281.385097][T11704] loop5: detected capacity change from 0 to 512
[  281.390608][T11702] loop1: detected capacity change from 0 to 2048
[  281.433640][T11702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  281.455524][T11702] ext4 filesystem being mounted at /749/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.488908][   T54] Bluetooth: hci1: command tx timeout
[  281.495161][   T33] audit: type=1800 audit(1774128784.459:535): pid=11704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2180" name=3D77696E6E742C73686F72746E616D653D7769EE39352C6E6F6E756D7461696C3D302C6E6F6E756D7461696C3D302C646973636172642C6E6E6F6E756D7461696274665F686561646572206E6F7420666F756E64 dev="loop5" ino=1048731 res=0 errno=0
[  281.559758][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.772171][T11720] loop6: detected capacity change from 0 to 128
[  281.780246][T11720] EXT4-fs (loop6): Test dummy encryption mode enabled
[  281.789947][T11720] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  281.815099][T11720] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  281.855322][T11720] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  281.892137][T11143] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  281.943476][T11732] loop6: detected capacity change from 0 to 128
[  282.381497][T11741] loop5: detected capacity change from 0 to 4096
[  282.399894][T11742] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  282.613585][T11748] loop5: detected capacity change from 0 to 32768
[  282.617578][T11748] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2199 (11748)
[  282.632723][T11748] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.640656][T11748] BTRFS info (device loop5): using sha256 checksum algorithm
[  282.689047][T11748] BTRFS info (device loop5): rebuilding free space tree
[  282.697951][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'.
[  282.708083][T11748] BTRFS info (device loop5): disabling free space tree
[  282.714406][T11748] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  282.727503][T11748] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  282.736797][T11748] BTRFS info (device loop5): disabling tree log
[  282.742654][T11748] BTRFS info (device loop5): turning on flush-on-commit
[  282.745353][T11748] BTRFS info (device loop5): turning on async discard
[  282.753629][T11748] BTRFS info (device loop5): force clearing of disk cache
[  282.771360][   T33] audit: type=1800 audit(1774128786.648:536): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2199" name="file1" dev="loop5" ino=260 res=0 errno=0
[  282.903663][T11468] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  283.039620][ T6457] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  283.076196][T11779] loop1: detected capacity change from 0 to 32768
[  283.079371][T11779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2207 (11779)
[  283.140137][T11779] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  283.143575][T11779] BTRFS info (device loop1): using crc32c checksum algorithm
[  283.463160][T11800] loop5: detected capacity change from 0 to 1024
[  283.482795][T11800] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  283.506730][T11800] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.2208: lblock 2 mapped to illegal pblock 2 (length 1)
[  283.511262][T11800] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  283.513057][T11800] Quota error (device loop5): qtree_write_dquot: dquota write failed
[  283.518587][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  283.518599][    C1] EXT4-fs (loop5): initial error at time 1774128787: ext4_map_blocks:776: inode 3: block 2
[  283.518615][    C1] EXT4-fs (loop5): last error at time 1774128787: ext4_map_blocks:776: inode 3: block 2
[  283.528437][T11800] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.2208: lblock 0 mapped to illegal pblock 48 (length 1)
[  283.533294][T11800] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  283.533588][T11800] Quota error (device loop5): v2_write_file_info: Can't write info structure
[  283.540987][T11800] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2208: Failed to acquire dquot type 0
[  283.545578][T11800] loop5: lost filesystem error report for type 5 error -117
[  283.545935][T11800] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  283.552501][T11800] loop5: lost filesystem error report for type 5 error -117
[  283.555707][T11800] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.2208: mark_inode_dirty error
[  283.563717][T11800] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  283.564155][T11800] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117)
[  283.570862][T11800] EXT4-fs (loop5): 1 orphan inode deleted
[  283.574018][T11800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.629313][ T1143] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u10:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  283.660550][ T1143] Quota error (device loop5): remove_tree: Can't read quota data block 1
[  283.663366][ T1143] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u10:9: Failed to release dquot type 0
[  283.681526][T11779] BTRFS info (device loop1): enabling ssd optimizations
[  283.694886][T11779] BTRFS info (device loop1): turning on flush-on-commit
[  283.697160][T11779] BTRFS info (device loop1): enabling free space tree
[  283.699346][T11779] BTRFS info (device loop1): enabling auto defrag
[  283.729659][T11809] loop6: detected capacity change from 0 to 256
[  283.732318][T11779] BTRFS info (device loop1): use lzo compression, level 1
[  283.734879][T11779] BTRFS info (device loop1): max_inline set to 4096
[  283.842764][ T5935] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  284.047431][T11468] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.060657][T11468] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0
[  284.071691][T11468] loop5: lost filesystem error report for type 5 error -117
[  284.077499][T11468] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem
[  284.083468][T11468] loop5: lost filesystem error report for type 5 error -117
[  284.083638][T11468] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error
[  284.090672][T11468] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  284.489468][T11840] netlink: 'syz.5.2222': attribute type 6 has an invalid length.
[  284.510761][T11840] netlink: 'syz.5.2222': attribute type 7 has an invalid length.
[  284.514868][T11840] netlink: 'syz.5.2222': attribute type 8 has an invalid length.
[  284.899188][T11863] lo speed is unknown, defaulting to 1000
[  284.901510][T11863] lo speed is unknown, defaulting to 1000
[  284.917648][T11863] lo speed is unknown, defaulting to 1000
[  284.937948][T11863] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  284.968392][T11863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  285.006534][T11863] lo speed is unknown, defaulting to 1000
[  285.009725][T11863] lo speed is unknown, defaulting to 1000
[  285.012403][T11863] lo speed is unknown, defaulting to 1000
[  285.020997][ T5918] IPVS: starting estimator thread 0...
[  285.023362][T11863] lo speed is unknown, defaulting to 1000
[  285.027267][T11863] lo speed is unknown, defaulting to 1000
[  285.132029][T11862] IPVS: using max 89 ests per chain, 213600 per kthread
[  285.204899][T11864] ALSA: mixer_oss: invalid OSS volume 'C'
[  286.129495][T11869] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.132936][T11869] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.165567][T11873] loop1: detected capacity change from 0 to 512
[  286.268116][T11875] loop1: detected capacity change from 0 to 136
[  286.320942][T11875] iso9660: Corrupted directory entry in block 2 of inode 1472
[  286.369004][T11869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  286.387601][T11869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  286.434307][T11879] loop1: detected capacity change from 0 to 128
[  286.449814][T11879] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  286.460848][T11879] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  286.507152][ T6467] lo speed is unknown, defaulting to 1000
[  286.507466][ T5682] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.509364][ T6467] syz0: Port: 1 Link DOWN
[  286.513571][ T5682] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.518014][ T5682] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.522846][ T5682] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  286.568569][T11883] loop1: detected capacity change from 0 to 8
[  286.571697][T11883] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  286.619655][T11883] cramfs: Error -5 while decompressing!
[  286.622112][T11883] cramfs: ffffffff9a3a7d08(26)->ffff8881a0883000(4096)
[  286.626532][T11883] cramfs: Error -3 while decompressing!
[  286.634447][T11883] cramfs: ffffffff9a3a7d22(26)->ffff8881a0245000(4096)
[  286.637114][T11883] cramfs: Error -3 while decompressing!
[  286.641408][T11883] cramfs: ffffffff9a3a7d3c(16)->ffff8881a81b0000(4096)
[  286.644021][T11883] cramfs: Error -5 while decompressing!
[  286.646205][T11883] cramfs: ffffffff9a3a7d08(26)->ffff8881a0883000(4096)
[  286.661483][T11887] netlink: 'syz.6.2242': attribute type 83 has an invalid length.
[  286.745803][ T6467] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  287.089464][ T6467] usb 6-1: config 0 has an invalid interface number: 133 but max is 0
[  287.092454][ T6467] usb 6-1: config 0 has no interface number 0
[  287.097511][ T6467] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  287.100459][ T6467] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.103025][ T6467] usb 6-1: Product: syz
[  287.104404][ T6467] usb 6-1: Manufacturer: syz
[  287.105979][ T6467] usb 6-1: SerialNumber: syz
[  287.108994][ T6467] usb 6-1: config 0 descriptor??
[  287.184131][ T5987] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  287.329554][ T6467] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected
[  287.334721][ T6467] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81
[  287.337478][ T6467] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1
[  287.340035][ T6467] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2
[  287.343418][ T6467] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  287.347278][ T5987] usb 2-1: unable to get BOS descriptor or descriptor too short
[  287.348911][ T6467] usb 6-1: USB disconnect, device number 12
[  287.354537][ T5987] usb 2-1: config 242 has an invalid interface number: 40 but max is 0
[  287.356622][ T6467] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  287.361748][ T6467] keyspan 6-1:0.133: device disconnected
[  287.361770][ T5987] usb 2-1: config 242 has no interface number 0
[  287.370703][ T5987] usb 2-1: config 242 interface 40 altsetting 4 endpoint 0xD is Bulk; changing to Interrupt
[  287.378468][ T5987] usb 2-1: config 242 interface 40 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 8
[  287.382860][ T5987] usb 2-1: config 242 interface 40 has no altsetting 0
[  287.389904][ T5987] usb 2-1: string descriptor 0 read error: -22
[  287.392207][ T5987] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=44.11
[  287.395138][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.404639][T11898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  287.414338][ T5987] hdpvr 2-1:242.40: Could not find bulk-in endpoint
[  287.416574][ T5987] hdpvr 2-1:242.40: probe with driver hdpvr failed with error -12
[  287.645449][ T5987] usb 2-1: USB disconnect, device number 27
[  288.025438][T11906] trusted_key: encrypted_key: insufficient parameters specified
[  288.531753][T11912] loop1: detected capacity change from 0 to 32768
[  288.539421][T11912] 
[  288.539421][T11912]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  288.539421][T11912] 
[  288.548418][T11912] ERROR: (device loop1): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  288.548418][T11912] 
[  288.556026][T11912] ERROR: (device loop1): jfs_unlink: 
[  288.556026][T11912] 
[  288.566262][ T5935] ERROR: (device loop1): xtTruncate: xt_getpage: xtree page corrupt
[  288.566262][ T5935] 
[  288.575306][T10088] ERROR: (device loop1): diWrite: ixpxd invalid
[  288.575306][T10088] 
[  288.579189][T10088] ERROR: (device loop1): txCommit: 
[  288.579189][T10088] 
[  288.582465][T10088] jfs_write_inode: jfs_commit_inode failed!
[  288.592818][ T5935] 
[  288.592818][ T5935]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  288.592818][ T5935] 
[  288.599355][ T5935] 
[  288.599355][ T5935]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  288.599355][ T5935] 
[  288.676187][T11914] loop6: detected capacity change from 0 to 512
[  288.700892][   T54] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  288.727370][T11914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.733315][T11914] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  288.759067][T11914] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2254: corrupted inode contents
[  288.763841][T11914] EXT4-fs error (device loop6): ext4_dirty_inode:6450: inode #2: comm syz.6.2254: mark_inode_dirty error
[  288.768926][T11914] EXT4-fs error (device loop6): ext4_do_update_inode:5569: inode #2: comm syz.6.2254: corrupted inode contents
[  288.773573][T11914] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.2254: mark_inode_dirty error
[  288.783070][T11914] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.2254: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18]
[  288.783070][T11914] 
[  288.809890][T11914] EXT4-fs error (device loop6): ext4_lookup:1782: inode #19: comm syz.6.2254: 'file0' linked to parent dir
[  288.872965][T11143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.988954][T11930] loop6: detected capacity change from 0 to 512
[  288.993499][T11930] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  289.003516][T11930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.019374][T11930] EXT4-fs error (device loop6): ext4_map_blocks:776: inode #2: block 18: comm syz.6.2259: lblock 23 mapped to illegal pblock 18 (length 1)
[  289.044574][T11143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.714926][T11943] loop6: detected capacity change from 0 to 32768
[  289.727590][T11943] 
[  289.727590][T11943]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  289.727590][T11943] 
[  289.740545][T11943] 
[  289.740545][T11943]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  289.740545][T11943] 
[  289.745340][T11943] 
[  289.745340][T11943]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  289.745340][T11943] 
[  289.764439][T11943] kAFS: unable to lookup cell '('
[  290.189795][T11955] SET target dimension over the limit!
[  290.242715][T11957] loop1: detected capacity change from 0 to 1024
[  290.265021][T11957] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.290861][T11957] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.2270: inode #779706732: comm syz.1.2270: iget: illegal inode #
[  290.302173][T11957] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.2270: error while reading EA inode 779706732 err=-117
[  290.325179][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.699464][ T6457] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  290.870406][ T6457] usb 7-1: Using ep0 maxpacket: 32
[  290.874316][ T6457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.878795][ T6457] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.882898][ T6457] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  290.886498][ T6457] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.891921][ T6457] usb 7-1: config 0 descriptor??
[  290.895374][ T6457] hub 7-1:0.0: USB hub found
[  291.115670][ T6457] hub 7-1:0.0: 1 port detected
[  292.444172][ T6457] hub 7-1:0.0: hub_hub_status failed (err = -32)
[  292.449708][ T6457] hub 7-1:0.0: config failed, can't get hub status (err -32)
[  292.465649][ T6457] usbhid 7-1:0.0: can't add hid device: -32
[  292.468115][ T6457] usbhid 7-1:0.0: probe with driver usbhid failed with error -32
[  292.527085][T11983] syz_tun: entered promiscuous mode
[  292.529673][T11983] batadv0: entered promiscuous mode
[  292.599804][T11986] loop1: detected capacity change from 0 to 512
[  292.634206][ T6457] usb 7-1: USB disconnect, device number 5
[  292.911059][T11986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.916864][T11986] ext4 filesystem being mounted at /797/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.938222][ T5935] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.205203][T12002] loop6: detected capacity change from 0 to 512
[  293.215835][T12002] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.2288: bad orphan inode 15
[  293.218881][T12002] loop6: lost filesystem error report for type 5 error -117
[  293.219095][T12002] ext4_test_bit(bit=14, block=5) = 0
[  293.221553][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  293.221564][    C1] EXT4-fs (loop6): initial error at time 1774128796: ext4_orphan_get:1417
[  293.221574][    C1] EXT4-fs (loop6): last error at time 1774128796: ext4_orphan_get:1417
[  293.236180][T12002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.251914][T12002] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.2288: reserved inode found cleared - inode=1
[  293.255070][T11998] loop1: detected capacity change from 0 to 32768
[  293.281324][T11998] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  293.284994][T11998] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.300865][T11998] XFS (loop1): Ending clean mount
[  293.312334][T11143] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.312896][T11998] XFS (loop1): Quotacheck needed: Please wait.
[  293.361466][T11998] XFS (loop1): Quotacheck: Done.
[  293.384083][T11987] Process accounting resumed
[  293.403312][ T5935] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  293.468228][   T33] audit: type=1800 audit(1774128796.567:537): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2286" name="file2" dev="loop1" ino=4423 res=0 errno=0
[  293.565914][T12013] overlayfs: orphan index entry (index/00fb2100010a7601acaf7f410c90eb040d0ff19eede60ee046d700000000000000, ftype=2000, nlink=1)
[  293.664374][ T5932] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3
[  293.811480][T12029] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2297'.
[  293.819844][T12029] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2297'.
[  293.823486][T12029] netlink: 'syz.5.2297': attribute type 3 has an invalid length.
[  293.826695][T12029] netlink: 'syz.5.2297': attribute type 2 has an invalid length.
[  293.829924][T12029] netlink: 31 bytes leftover after parsing attributes in process `syz.5.2297'.
[  293.888441][T12031] loop5: detected capacity change from 0 to 2048
[  293.892367][T12031] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  293.899576][T12031] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  293.991832][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'.
[  293.995306][T12037] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2301'.
[  294.307845][T12052] loop1: detected capacity change from 0 to 128
[  294.791219][T12069] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2315'.
[  294.993550][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2324'.
[  295.112801][ T5918] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  295.275138][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  295.280425][ T5918] usb 6-1: config 0 has an invalid interface number: 86 but max is 0
[  295.283595][ T5918] usb 6-1: config 0 has no interface number 0
[  295.287165][ T5918] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  295.291166][ T5918] usb 6-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[  295.297997][ T5918] usb 6-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[  295.301986][ T5918] usb 6-1: config 0 interface 86 has no altsetting 0
[  295.324293][ T5918] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32
[  295.351579][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.361609][ T5918] usb 6-1: Product: syz
[  295.366084][ T5918] usb 6-1: Manufacturer: syz
[  295.372503][ T5918] usb 6-1: SerialNumber: syz
[  295.406802][ T5918] usb 6-1: config 0 descriptor??
[  295.409839][T12075] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  295.530200][T12105] loop6: detected capacity change from 0 to 32768
[  295.596360][T12105] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  295.627740][T12105] XFS (loop6): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  295.636354][T12105] CPU: 0 UID: 0 PID: 12105 Comm: syz.6.2333 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.636378][T12105] Tainted: [L]=SOFTLOCKUP
[  295.636403][T12105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.636411][T12105] Call Trace:
[  295.636417][T12105]  <TASK>
[  295.636423][T12105]  dump_stack_lvl+0xe8/0x150
[  295.636449][T12105]  xfs_corruption_error+0x122/0x170
[  295.636468][T12105]  ? xlog_header_check_mount+0x93/0xe0
[  295.636485][T12105]  xlog_header_check_mount+0xc6/0xe0
[  295.636498][T12105]  ? xlog_header_check_mount+0x93/0xe0
[  295.636511][T12105]  xlog_find_verify_log_record+0x32e/0x500
[  295.636529][T12105]  xlog_find_zeroed+0x327/0x410
[  295.636545][T12105]  xlog_find_head+0x5f/0x700
[  295.636571][T12105]  xlog_find_tail+0x3d/0x840
[  295.636589][T12105]  ? lockdep_hardirqs_on+0x7a/0x110
[  295.636607][T12105]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  295.636625][T12105]  ? try_to_wake_up+0x7fc/0x1390
[  295.636642][T12105]  xlog_recover+0x4b/0x3e0
[  295.636664][T12105]  xfs_log_mount+0x253/0x3e0
[  295.636682][T12105]  xfs_mountfs+0xe70/0x22e0
[  295.636742][T12105]  ? __pfx_xfs_mountfs+0x10/0x10
[  295.636766][T12105]  ? trace_xfs_inode_timestamp_range+0x84/0x230
[  295.636788][T12105]  xfs_fs_fill_super+0x11b5/0x1600
[  295.636809][T12105]  get_tree_bdev_flags+0x431/0x4f0
[  295.636829][T12105]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  295.636847][T12105]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  295.636872][T12105]  vfs_get_tree+0x92/0x2a0
[  295.636891][T12105]  do_new_mount+0x341/0xd30
[  295.636904][T12105]  ? apparmor_capable+0x126/0x170
[  295.636922][T12105]  ? __pfx_do_new_mount+0x10/0x10
[  295.636934][T12105]  ? ns_capable+0x89/0xe0
[  295.636957][T12105]  ? user_path_at+0xd4/0x160
[  295.636974][T12105]  __se_sys_mount+0x31d/0x420
[  295.636991][T12105]  ? __pfx___se_sys_mount+0x10/0x10
[  295.637007][T12105]  ? __x64_sys_mount+0x20/0xc0
[  295.637022][T12105]  do_syscall_64+0x14d/0xf80
[  295.637041][T12105]  ? trace_irq_disable+0x3b/0x150
[  295.637052][T12105]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.637067][T12105]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.637079][T12105] RIP: 0033:0x7ffa0399da0a
[  295.637092][T12105] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  295.637103][T12105] RSP: 002b:00007ffa047dce58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  295.637116][T12105] RAX: ffffffffffffffda RBX: 00007ffa047dcee0 RCX: 00007ffa0399da0a
[  295.637124][T12105] RDX: 00002000000002c0 RSI: 0000200000000300 RDI: 00007ffa047dcea0
[  295.637133][T12105] RBP: 00002000000002c0 R08: 00007ffa047dcee0 R09: 0000000004000012
[  295.637141][T12105] R10: 0000000004000012 R11: 0000000000000246 R12: 0000200000000300
[  295.637149][T12105] R13: 00007ffa047dcea0 R14: 0000000000009827 R15: 0000200000000380
[  295.637169][T12105]  </TASK>
[  295.638475][T12105] XFS (loop6): Corruption detected. Unmount and run xfs_repair
[  295.726066][ T5918] ljca 6-1:0.86: submit rx urb failed: -90
[  295.726979][T12105] XFS (loop6): log has mismatched uuid - can't recover
[  295.727062][T12105] XFS (loop6): empty log check failed
[  295.730321][ T5918] ljca 6-1:0.86: probe with driver ljca failed with error -90
[  295.737172][T12105] XFS (loop6): log mount/recovery failed: error -117
[  295.738376][T12105] XFS (loop6): log mount failed
[  295.763524][ T5918] usb 6-1: USB disconnect, device number 13
[  295.862143][   T54] ------------[ cut here ]------------
[  295.864160][   T54] refcnt < 0
[  295.864168][   T54] WARNING: net/bluetooth/hci_conn.c:567 at hci_conn_timeout+0xff/0x2c0, CPU#1: kworker/u11:0/54
[  295.868497][   T54] Modules linked in:
[  295.870100][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.873613][   T54] Tainted: [L]=SOFTLOCKUP
[  295.875436][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.879505][   T54] Workqueue: hci2 hci_conn_timeout
[  295.881644][   T54] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  295.884011][   T54] Code: 48 89 df e8 83 99 09 00 eb 07 e8 dc 4b 26 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 c2 4b 26 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  295.891842][   T54] RSP: 0018:ffffc90000be7ab0 EFLAGS: 00010293
[  295.894468][   T54] RAX: ffffffff8a9f481e RBX: ffff888173e50000 RCX: ffff888167c71d40
[  295.897721][   T54] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  295.900929][   T54] RBP: 00000000ffffffff R08: ffff888173e50013 R09: 1ffff1102e7ca002
[  295.904347][   T54] R10: dffffc0000000000 R11: ffffed102e7ca003 R12: dffffc0000000000
[  295.907513][   T54] R13: ffff8881072b5918 R14: ffff888173e50a40 R15: ffff888173e50010
[  295.910678][   T54] FS:  0000000000000000(0000) GS:ffff8882a9465000(0000) knlGS:0000000000000000
[  295.914728][   T54] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  295.917516][   T54] CR2: 0000001b3181bff8 CR3: 000000017499a000 CR4: 00000000000006f0
[  295.920891][   T54] Call Trace:
[  295.922264][   T54]  <TASK>
[  295.923481][   T54]  ? process_scheduled_works+0xa8d/0x18c0
[  295.925963][   T54]  process_scheduled_works+0xb6e/0x18c0
[  295.928158][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  295.930545][   T54]  ? assign_work+0x3d5/0x5e0
[  295.932423][   T54]  worker_thread+0xa53/0xfc0
[  295.934340][   T54]  kthread+0x388/0x470
[  295.936281][   T54]  ? __pfx_worker_thread+0x10/0x10
[  295.938365][   T54]  ? __pfx_kthread+0x10/0x10
[  295.940281][   T54]  ret_from_fork+0x51e/0xb90
[  295.942314][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  295.944440][   T54]  ? __switch_to+0xc7d/0x1450
[  295.946595][   T54]  ? __pfx_kthread+0x10/0x10
[  295.948498][   T54]  ret_from_fork_asm+0x1a/0x30
[  295.950482][   T54]  </TASK>
[  295.951822][   T54] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  295.954776][   T54] CPU: 1 UID: 0 PID: 54 Comm: kworker/u11:0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  295.958946][   T54] Tainted: [L]=SOFTLOCKUP
[  295.960740][   T54] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  295.964809][   T54] Workqueue: hci2 hci_conn_timeout
[  295.966909][   T54] Call Trace:
[  295.968296][   T54]  <TASK>
[  295.969514][   T54]  vpanic+0x56c/0xa60
[  295.971145][   T54]  ? __pfx__printk+0x10/0x10
[  295.972994][   T54]  ? __pfx_vpanic+0x10/0x10
[  295.974867][   T54]  ? is_bpf_text_address+0x292/0x2b0
[  295.976967][   T54]  ? is_bpf_text_address+0x26/0x2b0
[  295.979088][   T54]  panic+0xc5/0xd0
[  295.980638][   T54]  ? __pfx_panic+0x10/0x10
[  295.982508][   T54]  ? ret_from_fork_asm+0x1a/0x30
[  295.984538][   T54]  __warn+0x315/0x4f0
[  295.986186][   T54]  ? hci_conn_timeout+0xff/0x2c0
[  295.988202][   T54]  ? hci_conn_timeout+0xff/0x2c0
[  295.990199][   T54]  __report_bug+0x29a/0x540
[  295.992022][   T54]  ? hci_conn_timeout+0xff/0x2c0
[  295.994072][   T54]  ? __pfx___report_bug+0x10/0x10
[  295.996146][   T54]  ? register_lock_class+0x31/0x2e0
[  295.998295][   T54]  ? __lock_acquire+0x6b5/0x2cf0
[  296.000274][   T54]  ? hci_conn_timeout+0xff/0x2c0
[  296.002301][   T54]  report_bug+0x16a/0x220
[  296.004005][   T54]  ? hci_conn_timeout+0xff/0x2c0
[  296.005904][   T54]  ? hci_conn_timeout+0x101/0x2c0
[  296.007950][   T54]  handle_bug+0x9c/0x200
[  296.009641][   T54]  exc_invalid_op+0x1a/0x50
[  296.011442][   T54]  asm_exc_invalid_op+0x1a/0x20
[  296.013411][   T54] RIP: 0010:hci_conn_timeout+0xff/0x2c0
[  296.015637][   T54] Code: 48 89 df e8 83 99 09 00 eb 07 e8 dc 4b 26 f7 b0 13 0f b6 f0 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 87 a8 fe ff e8 c2 4b 26 f7 90 <0f> 0b 90 eb 8c 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 31 ff ff ff
[  296.023369][   T54] RSP: 0018:ffffc90000be7ab0 EFLAGS: 00010293
[  296.025863][   T54] RAX: ffffffff8a9f481e RBX: ffff888173e50000 RCX: ffff888167c71d40
[  296.029064][   T54] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  296.032095][   T54] RBP: 00000000ffffffff R08: ffff888173e50013 R09: 1ffff1102e7ca002
[  296.035273][   T54] R10: dffffc0000000000 R11: ffffed102e7ca003 R12: dffffc0000000000
[  296.038435][   T54] R13: ffff8881072b5918 R14: ffff888173e50a40 R15: ffff888173e50010
[  296.041607][   T54]  ? hci_conn_timeout+0xfe/0x2c0
[  296.043621][   T54]  ? process_scheduled_works+0xa8d/0x18c0
[  296.045924][   T54]  process_scheduled_works+0xb6e/0x18c0
[  296.048166][   T54]  ? __pfx_process_scheduled_works+0x10/0x10
[  296.050507][   T54]  ? assign_work+0x3d5/0x5e0
[  296.052374][   T54]  worker_thread+0xa53/0xfc0
[  296.054181][   T54]  kthread+0x388/0x470
[  296.055824][   T54]  ? __pfx_worker_thread+0x10/0x10
[  296.057920][   T54]  ? __pfx_kthread+0x10/0x10
[  296.059850][   T54]  ret_from_fork+0x51e/0xb90
[  296.061765][   T54]  ? __pfx_ret_from_fork+0x10/0x10
[  296.063816][   T54]  ? __switch_to+0xc7d/0x1450
[  296.065748][   T54]  ? __pfx_kthread+0x10/0x10
[  296.067596][   T54]  ret_from_fork_asm+0x1a/0x30
[  296.069542][   T54]  </TASK>
[  296.071551][   T54] Kernel Offset: disabled
[  296.073244][   T54] Rebooting in 86400 seconds..
