last executing test programs:

31.066922667s ago: executing program 0 (id=250):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xd, 0x0, &(0x7f0000000080)="0080000000000000e768f79c47", 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000680)=ANY=[], 0x1, 0xa13, &(0x7f0000006080)="$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")
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
preadv2(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/123, 0x7b}], 0x1, 0x8, 0xe, 0x10)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0xf000, 0x5}]})
getdents64(r1, 0x0, 0x8f8db2886a7918c7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300))
r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_setup(0x8, &(0x7f0000004200))
syz_open_procfs(0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x3d)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)}, 0x4048841)
recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001)
openat(r3, 0x0, 0x2, 0x0)
unshare(0x18060000)
r4 = semget(0x1, 0x4, 0x39c)
semop(r4, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1)
semop(r4, 0x0, 0x0)

30.177481972s ago: executing program 0 (id=259):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x27}, @in6=@mcast1, 0x4e63, 0x0, 0x0, 0x6, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0x1f}, 0x0, 0x200001, 0x1, 0x0, 0x3, 0x1}, {{@in6=@remote, 0x800, 0x32}, 0x2, @in6=@private0, 0x3501, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c)

30.12687461s ago: executing program 0 (id=261):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
rmdir(&(0x7f0000000040)='./bus\x00')
unshare(0x40400)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)

29.245909996s ago: executing program 0 (id=271):
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32], 0x48)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[], 0x0}, 0x94)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000080)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x3, 0x9e24, &(0x7f000000a040)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920e4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r1 = open(0x0, 0x100000, 0x0)
flock(r1, 0x2)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$I2C(0x0, 0x2, 0x41)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x2})

29.066921908s ago: executing program 0 (id=272):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980), 0xff, 0x551, &(0x7f0000000cc0)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3f)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r2 = fspick(r1, &(0x7f00000000c0)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

28.739538743s ago: executing program 0 (id=274):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@multicast1, 0x0, 0xfe01, 0xffff, 0x0, 0xa}, {0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0xfffffffffffffffe}, 0x2, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0xe7, 0x0, 0x2}}, 0xe4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

28.673274955s ago: executing program 32 (id=274):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in=@multicast1, 0x0, 0xfe01, 0xffff, 0x0, 0xa}, {0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe, 0x1, 0x3, 0xfffffffffffffffe}, 0x2, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x32}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0xe7, 0x0, 0x2}}, 0xe4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

26.086488276s ago: executing program 2 (id=309):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000008180)={&(0x7f0000005880)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000007f00)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x3}, {0x0}, &(0x7f0000007ac0)=[{&(0x7f0000007380)=""/195, 0xc3}, {0x0, 0x1a000}], 0x2, 0x43, 0x3}}], 0x48, 0x8000}, 0x0)

26.08631533s ago: executing program 2 (id=310):
socket$tipc(0x1e, 0x5, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000001040)='/proc/bus/input/devices\x00', 0x1800, 0x0)
unshare(0x20000400)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x100, 0x0, 0x1, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000280), 0x0)

25.967438545s ago: executing program 2 (id=312):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c80000002000000ffff000005"], 0x48)
unshare(0x8040480)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x80, r0}, 0x38)

25.891311879s ago: executing program 2 (id=313):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0)
open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)

25.826760563s ago: executing program 2 (id=316):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001b80), r0)
sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x58}}, 0x40)

25.675746955s ago: executing program 2 (id=318):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0xa00002, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

25.58846809s ago: executing program 33 (id=318):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x9a)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
pipe2$9p(&(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x800)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0xa00002, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

25.477101206s ago: executing program 1 (id=320):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4)
sendmmsg$inet(r0, &(0x7f0000008dc0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)

25.414395378s ago: executing program 1 (id=321):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

25.41415965s ago: executing program 1 (id=323):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x7d}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)

25.284463217s ago: executing program 1 (id=324):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file1\x00', 0x0, 0x1003, 0x0)
write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34)

25.155204939s ago: executing program 1 (id=325):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)

24.936510778s ago: executing program 1 (id=326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

24.899970192s ago: executing program 34 (id=326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x6, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0xfffffffb, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x6, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x400002, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x400004, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0xa89, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x180000, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9aa, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x8, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0)

2.167350713s ago: executing program 4 (id=646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x98}}, 0x20050800)

2.105901567s ago: executing program 4 (id=648):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCGSID(r0, 0x5429, 0x0)

2.105599344s ago: executing program 4 (id=649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2.10532823s ago: executing program 4 (id=650):
syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0x4, 0x209, &(0x7f0000001c00)="$eJzslkFr1EAUx/8zSZNUFD178VJQD6ZJquBFaC8exIOgUnoQGtpY6o4W2j3YglQ/gZ/AQw/e/QKCXv0KglRPgtSbFy8jk3lJJth0t5W4h74f7Ow/YV7ynzdv3ywYhjm1fPv6a18jKvVZzCCk+9+9Zo505n+Jfr74ePf24utHbz+F+/H0Yc/Uevz3+wA+LHgY1rHt6Bn6fgBZ64eQuEp6EQIx6WU0dgoILJF+4ugNMz+OH6+rIl7ZUKtGJGZIzZCZYc7OnK/9HbwSWHX8Ccff1vbOIFeq2OxRjMrfwYLELcefu18xrNvEyV8KiZT0HATuk76JsMqNTYmz/ot+83zvyPUH6DsjxsogV0vjRWl9rnOrAgBqHiewAYjqgVNvcPxVRJQ/pQq8pJLts4Ya8WPFuePZtdOO3umKirr31GxGPtU27/W/ilKYQh8xB/7/yaojqvZwwnDPCQ+qKhkR9d42q7oO9a69LuecN+pz9JcfvTumsYB+IOJYJdr0J70ncLnqT9CCWlJ51MgQmN3a3rm2/jRfK9aKZ1m2jOR6ktzIZstGZMcj+t902Z/ONP2vfSbtNTIQAZ7nw+Fmasf6OrPjYR1Xlv1P4gpti7EetF5wAZFzJejjwwctdPCu0z3DMMzkuATxWxN+JexpYtpa/V/33kRdMgzDMAzDMAzDMAzzL/wJAAD//8dZNhY=")
r0 = syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f000020c000/0x4000)=nil)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getresuid(0x0, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000180))
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {<r6=>0xee00}}, './file0\x00'})
r7 = getgid()
unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x200)
shmctl$IPC_SET(r4, 0x1, &(0x7f0000000180)={{0x3, r5, 0xffffffffffffffff, r6, r7, 0x1, 0x4}, 0x3553c609, 0x8, 0x1000000, 0x882, r1, r1, 0xb3e9})
socket$nl_generic(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
open(&(0x7f0000000100)='./file2\x00', 0x0, 0x0)

1.146557608s ago: executing program 4 (id=658):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0xffffff7f}, 0x2400c084)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e131d"], 0x16)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x1e)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94)
sendmsg(0xffffffffffffffff, 0x0, 0x40080)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
unshare(0x4a348e098370d5ff)

1.077163784s ago: executing program 5 (id=660):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000060059f9000000000300080018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe000085000000cb000000bf09000000000000550901000000008095000000000000001800000004000000000000007f000000bf91000000000000b7020000030000008500000084000000b70000000005000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0xff1, &(0x7f0000000780)=""/4081, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

1.075725766s ago: executing program 5 (id=666):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='utf8,utf8,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f636861727365743d69736f783835392de75e480bd831152c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,iocharset=cp866,discard,errors=remount-ro,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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")
utime(&(0x7f0000002300)='./file0\x00', &(0x7f0000002340)={0x8a74, 0xffffffffffff8000})

795.810375ms ago: executing program 3 (id=661):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0)
pwritev(r0, &(0x7f0000000a40)=[{&(0x7f0000000280)="f7", 0x1}, {0x0}], 0x2, 0x4, 0x3)

795.695932ms ago: executing program 5 (id=662):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='scalable', 0x8)
shutdown(r0, 0x1)

711.304004ms ago: executing program 5 (id=663):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000240), 0x7, 0x504, &(0x7f0000001180)="$eJzs3E9sVMcdAODfe15jA6a4lNLi0mJKq1qtaoOhhUOliqqVemilKOSQHC3bIOIFR7YjxRaCRYrIMULKNYpyzDWHXJMol4RTpFzJMRckFHEBctro7b5d767Xi/+tHezvk9aemZ19M7Pz5u28Ga8D2LOGsx9JxEBEPIiIwxGRtmYYrv56+vjm5LPHNyejVC5f/j7JXhZPsnguqfxM42AeGUkj0reT2hNN5heXZnqjOD2Xx8cWrr8xNr+49Ndr1yeuTl+dvjF+8eL5c2cv/H38b+tvVJvysnY9Gbo1e+L4f1+79//JQi29P//d2I6tMhzD7apS8cetLmyHHWoIJ4VOOf/Z/cqwZtn5n3VXb2X8H46e6Nh5wC5SLpfLfas/XSq3urMiBXhhJdHp2XT7KgJss9oHfXb/W3u0mwjs6870Y8c9ulS9Acra/TR/RJysJKYRMZLfwB/qUvnDUYhXSz98kD2yeKEL6xAAAI0+u1SbCbbM/wYjjjXk+1m+hzIYET+PiCMR8YuIOBoRv4xq3l9FxK9bjt8TEeUO5Q+3xFfOP9OHm2thZ9n87x/53tby/C8ad8EGe/LYoYjahHn6TP6ejERv35VrxemzHcr4/N/fvLsyNSlF3v7a/C97ZOXX5oJ5PR4WWhbopiYWJjbX6mWP7kQMFVrbnxQikvpOQDYFPh4RQ1+8v+bjDjaEr/35oxP1SG9zvue3v+Krk+0K2YKtivKHEX+q9n8pmvp/eecu6bw/OdYfxekzY9lZcKZtGfe/vvtSS1L94M9t/yfftR7uPxc+vZyPrM3L+v9Aw/mfpR1sruJgEpHMLy7NTBSL03Pzqxzo9upl3P32nVXvaTZ6/u9LXqmEa/elb00sLMydjdiX/G9l+vjya2vx7HeUqu0fOd1+/B/JX5O9E7+JiOwk/m1E/C6qd4jDUb59KiJ+HxGnV29+fPmvP7y+8fZ3V9b+qbbXv6b+j+X+X1yayVLnmlImitXLWcRySj3QM3PqwbOh9uWvrf/PV0IjeUr761/StNW+shbtA5t8+wAAAOCFkEbEQMNa0kCk6ehodQ3oaBxIi7PzC39JZt+8MVX9jsBgQ97qenBvUlv/HGyIj7fEz+Xrxu/17K/ERydni1M71Gag6mBlzCfpaP1akKajtS/FbM0SM/BT5is/sHc9b/wfu7dNFQG2nc9/2KvmbjVESqtkKvlLGdid1vL5by0Qdqd247/D33O7YYBdomw4w562nvFfaPr3jvcPd6M+wPYpxMv1cLqjNQG2m/k/7Elr+pL8hgPlvvZP9cfKzNHf+YA9sbFq7G9T1o4EspnVjpS+fyOvqv03hVXzRLq+A/ZFPVA/8kb69Mqm35a0Cyd/Od8fW0PmvvUc+eNtGaftAp2vG+MD3bgaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbL0fAwAA//+1kNRC")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file1\x00', 0x0, 0x1003, 0x0)
write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34)

709.507398ms ago: executing program 5 (id=664):
r0 = fsopen(&(0x7f0000000040)='bpf\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x1, 0x3)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

626.266833ms ago: executing program 3 (id=665):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0)
r0 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c)
syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00')
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
fadvise64(0xffffffffffffffff, 0x4, 0x5, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0)

545.992974ms ago: executing program 4 (id=667):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000240)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x1}}, {@flushoncommit}, {}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

356.332124ms ago: executing program 3 (id=668):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0x4112, 0x0)

356.004261ms ago: executing program 3 (id=669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000027c0000040042801c00018006000600"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

285.372409ms ago: executing program 3 (id=670):
r0 = mq_open(0x0, 0x42, 0x1f0, 0x0)
mq_unlink(0x0)
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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")
creat(0x0, 0x8)
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80c000, 0x0, 0x1, 0x0, &(0x7f0000000180))
mq_unlink(&(0x7f0000000440)='cpuacct.stat\x00')
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
getdents64(r2, 0x0, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0)
lseek(r2, 0x3, 0x1)
getdents(r2, 0x0, 0x0)

225.566565ms ago: executing program 3 (id=671):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x140, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x108, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40010}, 0x10)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000006c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

137.173764ms ago: executing program 5 (id=672):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

0s ago: executing program 35 (id=672):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

kernel console output (not intermixed with test programs):

Using ep0 maxpacket: 32
[   51.778487][ T5649] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   51.782785][ T5649] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   51.789878][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   51.792950][ T5649] usb 3-1: Product: syz
[   51.794375][ T5649] usb 3-1: Manufacturer: syz
[   51.795913][ T5649] usb 3-1: SerialNumber: syz
[   51.799673][ T5649] usb 3-1: config 0 descriptor??
[   51.806138][ T5649] gs_usb 3-1:0.0: Required endpoints not found
[   51.873619][    T9] ti_usb_3410_5052 2-1:0.70: required endpoints missing
[   51.877469][    T9] usb 2-1: USB disconnect, device number 2
[   52.012600][   T25] usb 3-1: USB disconnect, device number 2
[   52.039718][ T5806] loop0: detected capacity change from 0 to 4096
[   52.044275][ T5806] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   52.055182][ T5806] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   52.082480][   T34] audit: type=1800 audit(1788504589.001:2): pid=5806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.38" name="file1" dev="loop0" ino=30 res=0 errno=0
[   52.146042][ T5808] loop0: detected capacity change from 0 to 1024
[   52.163718][ T5808] hfsplus: invalid length 5008 has been corrected to 255
[   52.167307][ T5808] hfsplus: catalog record size mismatch (type 3, got 52, expected 12)
[   52.268599][ T5814] EXT4-fs: Ignoring removed bh option
[   52.279890][ T5814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   52.293333][   T34] audit: type=1800 audit(1788504589.211:3): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.42" name="file1" dev="loop0" ino=15 res=0 errno=0
[   52.304012][ T5814] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   52.368155][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.583787][ T5824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   52.593637][ T5824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   52.600358][ T5824] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   52.605238][ T5824] EXT4-fs (loop2): group descriptors corrupted!
[   52.666013][   T55] Bluetooth: hci0: command tx timeout
[   52.668964][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   52.796950][ T5832] rock: corrupted directory entry. extent=32, offset=131072, size=237
[   52.828320][   T10] usb 2-1: Using ep0 maxpacket: 16
[   52.830899][   T10] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   52.836522][   T10] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[   52.836558][   T10] usb 2-1: config 0 has no interface number 0
[   52.836605][   T10] usb 2-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB
[   52.836633][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[   52.836660][   T10] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[   52.855956][   T10] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   52.856026][   T10] usb 2-1: Product: syz
[   52.856106][   T10] usb 2-1: SerialNumber: syz
[   52.871656][   T10] usb 2-1: config 0 descriptor??
[   52.876890][   T10] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[   52.965739][ T5649] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   53.083657][   T10] usb 2-1: USB disconnect, device number 3
[   53.115753][ T2265] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   53.126403][ T5649] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[   53.131443][ T5649] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.136948][ T5649] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[   53.142444][ T5649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   53.268190][ T2265] usb 3-1: unable to get BOS descriptor or descriptor too short
[   53.268272][ T2265] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[   53.269851][ T2265] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   53.269866][ T2265] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   53.269903][ T2265] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   53.272215][ T2265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   53.272231][ T2265] usb 3-1: Product: syz
[   53.272239][ T2265] usb 3-1: Manufacturer: syz
[   53.272250][ T2265] usb 3-1: SerialNumber: syz
[   53.361917][ T5649] ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -2
[   53.487680][ T2265] usb 3-1: incorrect wMaxPacketSize 0x0 for BADD profile
[   53.511199][ T2265] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[   53.516954][ T2265] usb 3-1: USB disconnect, device number 3
[   53.527758][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   53.572088][   T25] usb 1-1: USB disconnect, device number 3
[   53.721786][   T34] audit: type=1326 audit(1788504590.641:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5840 comm="syz.1.54" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f389979e159 code=0x0
[   54.030262][ T5844] ALSA: mixer_oss: invalid OSS volume 'PHl6qӆONEOUT'
[   54.135423][ T5848] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   54.143840][ T5850] set_capacity_and_notify: 4 callbacks suppressed
[   54.152956][ T5850] loop0: detected capacity change from 0 to 512
[   54.207215][ T5850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.213052][ T5850] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   54.229523][ T5850] capability: warning: `syz.0.58' uses 32-bit capabilities (legacy support in use)
[   54.255409][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.298037][ T5858] loop0: detected capacity change from 0 to 2048
[   54.328669][ T5858]  loop0: p1 p2 p3
[   54.328669][ T5858]  p1: <netbsd:bad subpartition - ignored
[   54.328669][ T5858]  p5 (ignored 240 more) >
[   54.328714][ T5858] loop0: partition table partially beyond EOD, truncated
[   54.328828][ T5858] loop0: p1 size 16777216 extends beyond EOD, truncated
[   54.336332][ T5858] loop0: p2 size 458752 extends beyond EOD, truncated
[   54.337091][ T5858] loop0: p3 start 3036741376 is beyond EOD, truncated
[   54.425734][   T55] Bluetooth: hci2: command tx timeout
[   54.445929][ T2265] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   54.563912][ T5860] loop1: detected capacity change from 0 to 64
[   54.585735][   T25] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   54.597770][ T2265] usb 3-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[   54.600783][ T2265] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[   54.600800][ T2265] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[   54.602983][ T2265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.602992][ T2265] usb 3-1: Product: syz
[   54.602997][ T2265] usb 3-1: Manufacturer: syz
[   54.603002][ T2265] usb 3-1: SerialNumber: syz
[   54.608635][ T2265] ums-sddr09 3-1:1.0: USB Mass Storage device detected
[   54.694568][ T2265] ums-sddr09 3-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[   54.694568][ T2265]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[   54.747282][   T55] Bluetooth: hci0: command tx timeout
[   54.778974][   T25] usb 1-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23
[   54.784132][   T25] usb 1-1: config 0 has an invalid interface number: 134 but max is 0
[   54.784170][   T25] usb 1-1: config 0 has no interface number 0
[   54.784206][   T25] usb 1-1: config 0 interface 134 altsetting 69 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   54.784235][   T25] usb 1-1: config 0 interface 134 has no altsetting 0
[   54.799492][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   54.802089][   T25] usb 1-1: Product: syz
[   54.803493][   T25] usb 1-1: Manufacturer: syz
[   54.805004][   T25] usb 1-1: SerialNumber: syz
[   54.808512][   T25] usb 1-1: config 0 descriptor??
[   54.951258][ T2265] ums-sddr09 3-1:1.0: probe with driver ums-sddr09 failed with error -22
[   54.958581][ T2265] usb 3-1: USB disconnect, device number 4
[   55.065885][   T25] ftdi_sio 1-1:0.134: FTDI USB Serial Device converter detected
[   55.073373][   T25] ftdi_sio ttyUSB0: unknown device type: 0x223
[   55.077803][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   55.077835][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[   55.079927][ T5596] Bluetooth: hci1: hardware error 0x00
[   55.145288][   T25] usb 1-1: USB disconnect, device number 4
[   55.155409][   T25] ftdi_sio 1-1:0.134: device disconnected
[   55.806571][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   55.966782][   T25] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   55.971454][   T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   55.974926][   T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   55.974936][   T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   55.981255][   T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   55.981277][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.015997][   T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   56.186715][   T10] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   56.191325][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   56.195569][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   56.195580][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   56.195599][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   56.208188][   T10] usb 1-1: config 0 descriptor??
[   56.604641][ T5874] loop1: detected capacity change from 0 to 256
[   56.634065][ T5874] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[   56.644091][   T10] hid-multitouch 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0
[   56.829613][ T5704] usb 1-1: USB disconnect, device number 5
[   56.935761][ T5659] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   57.096872][ T5659] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   57.101540][ T5659] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[   57.101597][ T5659] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   57.101609][ T5659] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[   57.117071][ T5659] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   57.117118][ T5659] usb 2-1: SerialNumber: syz
[   57.145827][ T5596] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   57.236548][   T25] gud 3-1:1.0: USB-2: Failed to add properties (ret=-71)
[   57.236658][   T25] gud 3-1:1.0: Failed to get connectors (error=-71)
[   57.236670][   T25] gud 3-1:1.0: probe with driver gud failed with error -71
[   57.250986][   T25] usb 3-1: USB disconnect, device number 5
[   57.331367][ T5659] rndis_host 2-1:253.0: RNDIS init failed, -71
[   57.331639][ T5659] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71
[   57.334680][ T5659] usb 2-1: USB disconnect, device number 4
[   57.522494][ T5888] loop0: detected capacity change from 0 to 1024
[   57.528582][ T5888] EXT4-fs: Ignoring removed orlov option
[   57.533070][ T5888] EXT4-fs: Ignoring removed mblk_io_submit option
[   57.533138][ T5888] EXT4-fs: Ignoring removed nomblk_io_submit option
[   57.540585][ T5888] EXT4-fs: Mount option(s) incompatible with ext2
[   57.883699][   T34] audit: type=1400 audit(1788504594.801:5): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="p" pid=5894 comm="syz.1.75" name="p" offset=33
[   57.941143][ T5898] input: syz0 as /devices/virtual/input/input5
[   58.228276][ T5901] binder_alloc: 5900: pid 5900 spamming oneway? 1 buffers allocated for a total size of 4096
[   58.734205][ T5910] FAULT_INJECTION: forcing a failure.
[   58.734205][ T5910] name failslab, interval 1, probability 0, space 0, times 1
[   58.734271][ T5910] CPU: 0 UID: 0 PID: 5910 Comm: syz.1.81 Not tainted syzkaller #0 PREEMPT(full) 
[   58.734302][ T5910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   58.734310][ T5910] Call Trace:
[   58.734316][ T5910]  <TASK>
[   58.734321][ T5910]  dump_stack_lvl+0xe8/0x150
[   58.734344][ T5910]  should_fail_ex+0x410/0x560
[   58.734364][ T5910]  should_failslab+0xa8/0x100
[   58.734402][ T5910]  __kmalloc_cache_noprof+0xa3/0x600
[   58.734416][ T5910]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[   58.734431][ T5910]  ? __request_module+0x2d0/0x630
[   58.734445][ T5910]  ? __request_module+0x2d0/0x630
[   58.734483][ T5910]  __request_module+0x2d0/0x630
[   58.734498][ T5910]  ? do_raw_spin_lock+0x12b/0x2f0
[   58.734514][ T5910]  ? __pfx___request_module+0x10/0x10
[   58.734533][ T5910]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[   58.734549][ T5910]  netlink_create+0x1b2/0x590
[   58.734567][ T5910]  __sock_create+0x4b3/0x9d0
[   58.734586][ T5910]  __sys_socket+0xd6/0x1b0
[   58.734601][ T5910]  __x64_sys_socket+0x7a/0x90
[   58.734614][ T5910]  do_syscall_64+0x166/0x520
[   58.734629][ T5910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.734644][ T5910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.734656][ T5910] RIP: 0033:0x7f389979e159
[   58.734667][ T5910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   58.734677][ T5910] RSP: 002b:00007f389a705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029
[   58.734690][ T5910] RAX: ffffffffffffffda RBX: 00007f3899a25fa0 RCX: 00007f389979e159
[   58.734699][ T5910] RDX: 000000000000001f RSI: 0000000000000003 RDI: 0000000000000010
[   58.734706][ T5910] RBP: 00007f3899835024 R08: 0000000000000000 R09: 0000000000000000
[   58.734713][ T5910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   58.734720][ T5910] R13: 00007f3899a26038 R14: 00007f3899a25fa0 R15: 00007ffda268fc08
[   58.734738][ T5910]  </TASK>
[   59.207585][  T988] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   59.317272][ T5924] binder: 5923:5924 ioctl c0306201 200000000040 returned -14
[   59.367406][  T988] usb 2-1: Using ep0 maxpacket: 32
[   59.369785][  T988] usb 2-1: unable to get BOS descriptor or descriptor too short
[   59.369843][  T988] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[   59.370738][  T988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.370747][  T988] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[   59.372544][  T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.372553][  T988] usb 2-1: Product: syz
[   59.372559][  T988] usb 2-1: Manufacturer: syz
[   59.372565][  T988] usb 2-1: SerialNumber: syz
[   59.394855][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.89'.
[   59.408880][ T5927] bridge1: port 1(dummy0) entered blocking state
[   59.411057][ T5927] bridge1: port 1(dummy0) entered disabled state
[   59.413648][ T5927] dummy0: entered allmulticast mode
[   59.416756][ T5927] dummy0: entered promiscuous mode
[   59.419435][ T5927] bridge1: port 1(dummy0) entered blocking state
[   59.419511][ T5927] bridge1: port 1(dummy0) entered forwarding state
[   59.426283][ T5927] netlink: 'syz.2.89': attribute type 10 has an invalid length.
[   59.428832][ T5927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.89'.
[   59.432959][ T5927] dummy0: left allmulticast mode
[   59.434904][ T5927] bridge1: port 1(dummy0) entered disabled state
[   59.588162][  T988] usb 2-1: unit 37 not found!
[   59.588214][  T988] usb 2-1: unit 0 not found!
[   59.633133][  T988] usb 2-1: USB disconnect, device number 5
[   59.665010][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   59.790660][ T5940] binder: binder_mmap: 5939 0-1000 bad vm_flags failed -1
[   59.805809][ T5938] process 'syz.2.95' launched './file0' with NULL argv: empty string added
[   60.152732][ T5951] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in;
[   60.152732][ T5951]    program syz.1.99 not setting count and/or reply_len properly
[   60.445789][ T2265] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   60.522430][   T34] audit: type=1800 audit(1788504597.441:6): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.95" name="/" dev="fuse" ino=1 res=0 errno=0
[   60.598199][ T2265] usb 2-1: Using ep0 maxpacket: 32
[   60.598696][ T2265] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   60.599589][ T2265] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   60.599599][ T2265] usb 2-1: config 0 has no interface number 0
[   60.603837][ T2265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.603847][ T2265] usb 2-1: Product: syz
[   60.603853][ T2265] usb 2-1: Manufacturer: syz
[   60.603859][ T2265] usb 2-1: SerialNumber: syz
[   60.605162][ T2265] usb 2-1: config 0 descriptor??
[   60.633765][ T5959] loop2: detected capacity change from 0 to 16
[   60.641237][ T5959] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[   60.641464][ T5959] erofs (device loop2): mounted with root inode @ nid 36.
[   61.006697][   T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   61.013160][ T5973] loop2: detected capacity change from 0 to 64
[   61.020158][ T2265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   61.020207][ T2265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   61.028297][ T5973] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   61.070505][ T5975] capability: warning: `syz.2.110' uses deprecated v2 capabilities in a way that may be insecure
[   61.156508][   T25] usb 1-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00
[   61.157709][   T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.157728][   T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   61.159106][   T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[   61.159116][   T25] usb 1-1: Product: syz
[   61.159121][   T25] usb 1-1: Manufacturer: syz
[   61.162978][   T25] hso 1-1:1.0: Can't find BULK endpoints
[   61.335728][ T5658] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   61.368817][ T5649] usb 1-1: USB disconnect, device number 6
[   61.422272][ T2265] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[   61.422468][ T2265] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   61.428637][ T2265] usb 2-1: USB disconnect, device number 6
[   61.486172][ T5658] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e
[   61.487173][ T5658] usb 3-1: config 100 has an invalid interface number: 124 but max is 0
[   61.487189][ T5658] usb 3-1: config 100 has no interface number 0
[   61.487207][ T5658] usb 3-1: config 100 interface 124 has no altsetting 0
[   61.489146][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.489156][ T5658] usb 3-1: Product: syz
[   61.489161][ T5658] usb 3-1: Manufacturer: syz
[   61.489166][ T5658] usb 3-1: SerialNumber: syz
[   61.700702][ T5658] usb 3-1: USB disconnect, device number 6
[   62.463246][ T5658] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[   62.480553][ T5658] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   62.664872][ T5996] loop2: detected capacity change from 0 to 164
[   62.956101][ T5658] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   63.164452][ T6006] loop1: detected capacity change from 0 to 32768
[   63.213060][ T6006] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   63.236383][ T5658] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.240177][ T5658] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.247000][ T6006] XFS (loop1): Ending clean mount
[   63.249974][ T6006] XFS (loop1): Quotacheck needed: Please wait.
[   63.252390][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.252401][ T5658] usb 3-1: Product: syz
[   63.252407][ T5658] usb 3-1: Manufacturer: syz
[   63.252412][ T5658] usb 3-1: SerialNumber: syz
[   63.255100][   T28] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   63.255121][   T28] XFS (loop1): Unmount and run xfs_repair
[   63.255126][   T28] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   63.255132][   T28] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   63.255189][   T28] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   63.255196][   T28] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   63.255200][   T28] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   63.255205][   T28] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   63.255210][   T28] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.255214][   T28] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.255218][   T28] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.255271][   T28] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[   63.255392][   T28] loop1: lost filesystem error report for type 5 error -117
[   63.258546][ T6006] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   63.259158][ T6006] loop1: lost filesystem error report for type 5 error -117
[   63.299284][ T5649] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   63.330821][ T6006] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x4 
[   63.330900][ T6006] XFS (loop1): Unmount and run xfs_repair
[   63.330930][ T6006] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   63.330938][ T6006] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   63.330944][ T6006] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   63.330950][ T6006] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   63.330954][ T6006] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   63.330959][ T6006] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   63.330964][ T6006] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.330969][ T6006] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.330974][ T6006] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   63.330979][ T6006] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x4 len 4 error 74
[   63.335119][ T6006] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[   63.335150][ T6006] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   63.367716][ T5591] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   63.466363][ T5649] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00
[   63.470287][ T5649] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.473477][ T5649] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   63.476860][ T5649] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.490747][ T5649] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached
[   63.800331][ T6039] syz.1.135 uses obsolete (PF_INET,SOCK_PACKET)
[   63.879281][ T6041] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[   64.000021][ T6046] loop1: detected capacity change from 0 to 1024
[   64.025482][ T6046] hfsplus: xattr search failed
[   64.247700][ T6060] ntfs3(nullb0): Primary boot signature is not NTFS.
[   64.247907][ T6060] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[   64.282523][ T5658] cdc_ncm 3-1:1.0: failed to get mac address
[   64.283863][ T5658] cdc_ncm 3-1:1.0: bind() failure
[   64.296504][ T5658] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[   64.296928][ T5658] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[   64.297489][ T5658] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[   64.300919][ T5658] usb 3-1: USB disconnect, device number 7
[   64.432781][   T34] audit: type=1326 audit(1788504601.351:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.434423][   T34] audit: type=1326 audit(1788504601.351:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.434521][   T34] audit: type=1326 audit(1788504601.351:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.456960][   T34] audit: type=1326 audit(1788504601.351:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.464234][   T34] audit: type=1326 audit(1788504601.381:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.465432][   T34] audit: type=1326 audit(1788504601.381:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.465472][   T34] audit: type=1326 audit(1788504601.381:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.466959][   T34] audit: type=1326 audit(1788504601.381:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.466985][   T34] audit: type=1326 audit(1788504601.391:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.497132][   T34] audit: type=1326 audit(1788504601.421:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6070 comm="syz.1.149" exe="/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   64.563332][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   64.566455][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'.
[   64.760493][ T6090] loop1: detected capacity change from 0 to 256
[   64.978942][ T6100] input: syz0 as /devices/virtual/input/input6
[   65.415727][ T5649] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   65.550760][   T10] usb 1-1: USB disconnect, device number 7
[   65.555186][   T10] idmouse 1-1:1.0: disconnected
[   65.566322][ T5649] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[   65.570552][ T5649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   65.574028][ T5649] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   65.578962][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.581587][ T5649] usb 3-1: Product: syz
[   65.582987][ T5649] usb 3-1: Manufacturer: syz
[   65.584657][ T5649] usb 3-1: SerialNumber: syz
[   65.794464][ T5649] usb 3-1: 0:1 : does not exist
[   65.796324][ T5649] usb 3-1: unit 6 not found!
[   65.797955][ T5649] usb 3-1: unit 2 not found!
[   65.813907][ T5649] usb 3-1: USB disconnect, device number 8
[   65.834077][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   66.103095][ T6110] netlink: 44 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.103924][ T6110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'.
[   66.148365][ T6112] loop0: detected capacity change from 0 to 256
[   66.189429][ T1381] ieee802154 phy0 wpan0: encryption failed: -22
[   66.191578][ T1381] ieee802154 phy1 wpan1: encryption failed: -22
[   66.485778][ T5658] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   66.647317][ T5658] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08
[   66.648385][ T5658] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   66.648419][ T5658] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   66.648433][ T5658] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   66.648447][ T5658] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8
[   66.650493][ T5658] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.650508][ T5658] usb 1-1: Product: syz
[   66.650517][ T5658] usb 1-1: Manufacturer: syz
[   66.650526][ T5658] usb 1-1: SerialNumber: syz
[   66.860865][ T5658] ath6kl: Failed to submit usb control message: -71
[   66.860926][ T5658] ath6kl: unable to send the bmi data to the device: -71
[   66.861168][ T5658] ath6kl: Unable to send get target info: -71
[   66.869018][ T5658] ath6kl: Failed to init ath6kl core: -71
[   66.869685][ T5658] ath6kl_usb 1-1:1.0: probe with driver ath6kl_usb failed with error -71
[   66.874626][ T5658] usb 1-1: USB disconnect, device number 8
[   67.441019][ T6132] binder: 6131:6132 ioctl 400c620e 2000000000c0 returned -22
[   67.548298][ T5658] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   67.573269][ T6138] loop0: detected capacity change from 0 to 4096
[   67.576345][ T6138] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   67.603376][ T6138] ntfs3(loop0): $Secure::$SII is corrupted.
[   67.603477][ T6138] ntfs3(loop0): Failed to initialize $Secure (-22).
[   67.706647][ T5658] usb 3-1: Using ep0 maxpacket: 16
[   67.707200][ T5658] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   67.708104][ T5658] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   67.708132][ T5658] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   67.710182][ T5658] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.710193][ T5658] usb 3-1: Product: syz
[   67.710198][ T5658] usb 3-1: Manufacturer: syz
[   67.710203][ T5658] usb 3-1: SerialNumber: syz
[   67.723795][ T5658] usb 3-1: 0:2 : does not exist
[   67.813033][ T6146] loop0: detected capacity change from 0 to 512
[   67.817272][ T6146] EXT4-fs: Ignoring removed i_version option
[   67.821627][ T6146] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[   67.843019][ T6146] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[   67.846623][ T6146] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.184: Failed to acquire dquot type 1
[   67.846637][ T6146] loop0: lost filesystem error report for type 5 error -28
[   67.847458][ T6146] EXT4-fs (loop0): 1 truncate cleaned up
[   67.848528][ T6146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.853894][ T6146] EXT4-fs (loop0): shut down requested (2)
[   67.887376][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.920225][ T5658] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[   67.959722][ T5658] usb 3-1: USB disconnect, device number 9
[   67.973969][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   68.185954][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   68.240951][ T6155] netlink: 252 bytes leftover after parsing attributes in process `syz.1.187'.
[   68.336373][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00
[   68.340317][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.343717][ T6161] input: syz1 as /devices/virtual/input/input7
[   68.346876][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.359356][   T10] usb 1-1: config 0 descriptor??
[   68.510269][ T6171] sd 0:0:0:0: PR command failed: 1026
[   68.510326][ T6171] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   68.510378][ T6171] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   68.515452][ T6173] loop2: detected capacity change from 0 to 128
[   68.636866][ T6182] raw_sendmsg: syz.1.200 forgot to set AF_INET. Fix it!
[   68.782630][   T10] wacom 0003:056A:00B4.0003: Unknown device_type for 'HID 056a:00b4'. Assuming pen.
[   68.794325][   T10] wacom 0003:056A:00B4.0003: hidraw0: USB HID v0.00 Joystick [HID 056a:00b4] on usb-dummy_hcd.0-1/input0
[   68.803912][   T10] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B4.0003/input/input8
[   68.870767][ T6193] Illegal XDP return value 4294967294 on prog  (id 7) dev N/A, expect packet loss!
[   68.902096][ T6195] faux_driver vgem: [drm] Unknown color mode 4099; guessing buffer size.
[   68.961078][ T6197] bond1: option ad_user_port_key: invalid value (26678)
[   68.961127][ T6197] bond1: option ad_user_port_key: allowed values 0 - 1023
[   68.967074][ T6197] bond1 (unregistering): Released all slaves
[   68.985909][ T2265] usb 1-1: USB disconnect, device number 9
[   69.201579][ T6206] syzkaller0: entered promiscuous mode
[   69.201639][ T6206] syzkaller0: entered allmulticast mode
[   69.534482][ T6214] loop1: detected capacity change from 0 to 32768
[   69.563029][ T6214] JBD2: Ignoring recovery information on journal
[   69.612746][ T6225] netlink: 80 bytes leftover after parsing attributes in process `syz.0.220'.
[   69.612852][ T6225] netlink: 80 bytes leftover after parsing attributes in process `syz.0.220'.
[   69.628154][ T6214] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   69.651775][ T6228] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   69.692021][ T6232] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.223'.
[   69.708451][ T6230] loop2: detected capacity change from 0 to 4096
[   69.709424][ T6230] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   69.717318][ T6214] syz.1.215 (6214) used greatest stack depth: 18976 bytes left
[   69.726429][ T6230] ntfs3(loop2): ino=19, mi_enum_attr
[   69.726482][ T6230] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   69.734618][ T6230] ntfs3(loop2): ino=1a, mi_enum_attr
[   69.734707][ T6230] ntfs3(loop2): ino=1a, mi_enum_attr
[   69.734738][ T6230] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[   69.774284][ T6230] ntfs3(loop2): ino=5, "/" ntfs_readdir
[   69.776585][ T6230] ntfs3(loop2): ino=1b, mi_enum_attr
[   69.776610][ T6230] ntfs3(loop2): ino=1b, mi_enum_attr
[   69.812856][ T5591] ocfs2: Unmounting device (7,1) on (node local)
[   69.938625][ T6249] loop2: detected capacity change from 0 to 256
[   69.947563][ T6248] loop1: detected capacity change from 0 to 256
[   69.948030][ T6248] exfat: Deprecated parameter 'utf8'
[   69.948050][ T6248] exfat: Deprecated parameter 'namecase'
[   69.948085][ T6248] exfat: Deprecated parameter 'namecase'
[   69.948093][ T6248] exfat: Deprecated parameter 'utf8'
[   69.964978][ T6249] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   69.970599][ T6248] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[   69.970774][ T6248] exFAT-fs (loop1): failed to test first cluster bit of root dir(5)
[   69.983443][ T6249] exFAT-fs (loop2): valid_size(150994954) is greater than size(10)
[   70.255748][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   70.405716][   T10] usb 3-1: Using ep0 maxpacket: 16
[   70.408034][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   70.412072][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   70.415828][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   70.421319][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.423950][   T10] usb 3-1: Product: syz
[   70.425365][   T10] usb 3-1: Manufacturer: syz
[   70.427999][   T10] usb 3-1: SerialNumber: syz
[   70.430866][   T10] usb 3-1: config 0 descriptor??
[   70.434391][   T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   70.438227][   T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[   70.761749][ T6261] loop0: detected capacity change from 0 to 512
[   70.777818][ T6261] EXT4-fs (loop0): Test dummy encryption mode enabled
[   70.782365][ T6261] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.237: inode has both inline data and extents flags
[   70.785722][ T6261] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   70.785894][ T6261] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.237: couldn't read orphan inode 15 (err -117)
[   70.785907][ T6261] loop0: lost filesystem error report for type 5 error -117
[   70.787217][ T6261] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.815216][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.898969][ T6268] loop0: detected capacity change from 0 to 512
[   70.901881][ T6268] EXT4-fs: Ignoring removed oldalloc option
[   70.911305][ T6268] EXT4-fs (loop0): Test dummy encryption mode enabled
[   70.943662][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.961773][ T6268] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   70.979803][ T5602] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.015853][  T988] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   71.048959][   T10] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[   71.051488][   T10] em28xx 3-1:0.0: Config register raw data: 0x41
[   71.056382][ T6276] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030
[   71.134938][ T6280] NILFS (loop0): invalid segment: Checksum error in segment payload
[   71.135850][ T6280] NILFS (loop0): trying rollback from an earlier position
[   71.146155][ T6280] NILFS (loop0): recovery complete
[   71.149545][ T6281] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.178568][  T988] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   71.188598][  T988] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.188648][  T988] usb 2-1: Product: syz
[   71.188693][  T988] usb 2-1: Manufacturer: syz
[   71.188700][  T988] usb 2-1: SerialNumber: syz
[   71.195534][  T988] usb 2-1: config 0 descriptor??
[   71.258465][   T10] usb 3-1: USB disconnect, device number 10
[   71.266985][   T10] em28xx 3-1:0.0: Disconnecting em28xx
[   71.277060][   T10] em28xx: Freeing device
[   71.403199][  T988] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   71.431054][ T6294] set_capacity_and_notify: 1 callbacks suppressed
[   71.433424][ T6294] loop0: detected capacity change from 0 to 1764
[   72.005766][ T6307] loop2: detected capacity change from 0 to 1024
[   72.009559][ T6307] EXT4-fs: Ignoring removed orlov option
[   72.014520][ T6307] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (4096), stripe is disabled
[   72.020362][ T6307] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   72.023803][ T6307] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.029887][ T6307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.255: Invalid inode table block 0 in block_group 0
[   72.030034][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.032079][ T6307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   72.032090][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.032271][ T6307] EXT4-fs error (device loop2): ext4_quota_write:7458: inode #3: comm syz.2.255: mark_inode_dirty error
[   72.032283][ T6307] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[   72.032441][ T6307] __quota_error: 18 callbacks suppressed
[   72.032448][ T6307] Quota error (device loop2): write_blk: dquota write failed
[   72.032536][ T6307] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   72.032552][ T6307] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.255: Failed to acquire dquot type 0
[   72.032564][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.032806][ T6307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.255: Invalid inode table block 0 in block_group 0
[   72.032817][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.034809][ T6307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   72.034908][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.036462][ T6307] EXT4-fs error (device loop2): ext4_ext_truncate:4565: inode #15: comm syz.2.255: mark_inode_dirty error
[   72.036474][ T6307] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.036644][ T6307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.255: Invalid inode table block 0 in block_group 0
[   72.036656][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.038027][ T6307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   72.038038][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.038251][ T6307] EXT4-fs error (device loop2) in ext4_orphan_del:304: Corrupt filesystem
[   72.038259][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.038344][ T6307] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz.2.255: Invalid inode table block 0 in block_group 0
[   72.038420][ T6307] loop2: lost filesystem error report for type 5 error -117
[   72.038503][ T6307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem
[   72.038660][ T6307] EXT4-fs error (device loop2): ext4_truncate:4721: inode #15: comm syz.2.255: mark_inode_dirty error
[   72.038671][ T6307] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.041031][ T6307] EXT4-fs error (device loop2) in ext4_process_orphan:346: Corrupt filesystem
[   72.041265][ T6307] EXT4-fs (loop2): 1 truncate cleaned up
[   72.045644][    C1] EXT4-fs (loop2): error count since last fsck: 14
[   72.045653][    C1] EXT4-fs (loop2): initial error at time 1788504608: __ext4_get_inode_loc:4916
[   72.046134][    C1] EXT4-fs (loop2): last error at time 1788504608: ext4_process_orphan:346
[   72.058487][ T6307] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.061472][ T6307] EXT4-fs (loop2): shut down requested (2)
[   72.083795][ T5595] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.224454][ T6312] loop2: detected capacity change from 0 to 4096
[   72.241361][ T6312] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   72.252391][ T6312] ntfs3(loop2): Failed to load $Extend (-22).
[   72.255082][ T6312] ntfs3(loop2): Failed to initialize $Extend.
[   72.390812][ T6320] loop0: detected capacity change from 0 to 2048
[   72.401998][ T6320] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.064196][  T988] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   73.071582][  T988] usb 2-1: USB disconnect, device number 7
[   73.322980][ T6343] loop0: detected capacity change from 0 to 128
[   73.332744][ T6343] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   73.332819][ T6343] hpfs: filesystem error: improperly stopped
[   73.332860][ T6343] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   73.332901][ T6343] hpfs: You really don't want any checks? You are crazy...
[   73.336501][ T6343] hpfs: Code page index out of array
[   73.336510][ T6343] hpfs: code page support is disabled
[   73.337312][ T6343] hpfs: hpfs_map_4sectors(): unaligned read
[   73.337446][ T6343] hpfs: hpfs_map_4sectors(): unaligned read
[   73.337450][ T6343] hpfs: filesystem error: unable to find root dir
[   73.394647][ T5602] hpfs: hpfs_map_4sectors(): unaligned read
[   73.400693][ T5602] hpfs: hpfs_map_sector(): read error
[   73.612089][ T6347] loop1: detected capacity change from 0 to 256
[   73.760699][ T5707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.817714][ T5707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.958391][ T5707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   73.986738][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   73.992345][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   73.995958][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.000834][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.006659][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   74.097242][ T6354] loop1: detected capacity change from 0 to 65536
[   74.126463][ T6354] XFS (loop1): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.137126][ T6354] XFS (loop1): Ending clean mount
[   74.171616][ T5591] XFS (loop1): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   74.178351][ T5707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.194386][ T6374] loop2: detected capacity change from 0 to 8
[   74.489689][ T5707] bridge_slave_1: left allmulticast mode
[   74.489771][ T5707] bridge_slave_1: left promiscuous mode
[   74.494010][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.523935][ T5707] bridge_slave_0: left allmulticast mode
[   74.524000][ T5707] bridge_slave_0: left promiscuous mode
[   74.527211][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.572320][   T34] audit: type=1326 audit(1788504611.491:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.572399][   T34] audit: type=1326 audit(1788504611.491:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591153][   T34] audit: type=1326 audit(1788504611.511:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591232][   T34] audit: type=1326 audit(1788504611.511:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591260][   T34] audit: type=1326 audit(1788504611.511:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591284][   T34] audit: type=1326 audit(1788504611.511:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591309][   T34] audit: type=1326 audit(1788504611.511:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.591333][   T34] audit: type=1326 audit(1788504611.511:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f389979e159 code=0x7ffc0000
[   74.697646][ T6394] loop1: detected capacity change from 0 to 4096
[   74.704291][ T6394] ntfs3(loop1): try to read out of volume at offset 0x200800
[   74.704376][ T6394] ntfs3(loop1): Failed to load $Volume (-5).
[   74.748591][ T5596] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   74.748675][ T5596] Bluetooth: hci0: Injecting HCI hardware error event
[   74.749289][ T5596] Bluetooth: hci0: hardware error 0x00
[   74.803381][ T6398] program syz.1.289 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   74.863159][ T6400] loop1: detected capacity change from 0 to 512
[   74.885447][ T6400] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.290: inode has both inline data and extents flags
[   74.885488][ T6400] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   74.890591][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   74.890606][    C0] EXT4-fs (loop1): initial error at time 1788504611: ext4_orphan_get:1403: inode 15
[   74.890624][    C0] EXT4-fs (loop1): last error at time 1788504611: ext4_orphan_get:1403: inode 15
[   74.902240][ T6400] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.290: couldn't read orphan inode 15 (err -117)
[   74.912216][ T6400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.981265][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.062868][ T5707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   75.079324][ T5707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.095263][ T5707] bond0 (unregistering): Released all slaves
[   75.402219][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.404427][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.404550][ T6355] bridge_slave_0: entered allmulticast mode
[   75.405323][ T6355] bridge_slave_0: entered promiscuous mode
[   75.415054][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.415093][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.415195][ T6355] bridge_slave_1: entered allmulticast mode
[   75.416192][ T6355] bridge_slave_1: entered promiscuous mode
[   75.455231][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   75.471086][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   75.544204][ T5339] 8021q: adding VLAN 0 to HW filter on device eth1
[   75.546385][ T6355] team0: Port device team_slave_0 added
[   75.548862][ T6355] team0: Port device team_slave_1 added
[   75.555879][   T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   75.599144][ T5707] hsr_slave_0: left promiscuous mode
[   75.601613][ T5707] hsr_slave_1: left promiscuous mode
[   75.606775][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   75.606816][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_0
[   75.612312][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   75.612345][ T5707] batman_adv: batadv0: Removing interface: batadv_slave_1
[   75.636227][ T5707] veth1_macvtap: left promiscuous mode
[   75.640683][ T5707] veth0_macvtap: left promiscuous mode
[   75.640765][ T5707] veth1_vlan: left promiscuous mode
[   75.640852][ T5707] veth0_vlan: left promiscuous mode
[   75.641286][ T6431] cgroup: name respecified
[   75.706730][   T10] usb 2-1: Using ep0 maxpacket: 32
[   75.711672][   T10] usb 2-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64
[   75.717045][   T10] usb 2-1: config 2 has an invalid interface number: 1 but max is 0
[   75.717077][   T10] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[   75.717128][   T10] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[   75.733256][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.733291][   T10] usb 2-1: Product: syz
[   75.733320][   T10] usb 2-1: Manufacturer: syz
[   75.733343][   T10] usb 2-1: SerialNumber: syz
[   75.747544][   T10] cdc_acm 2-1:2.1: probe with driver cdc_acm failed with error -22
[   75.756148][   T10] cdc_acm 2-1:2.0: probe with driver cdc_acm failed with error -22
[   75.824397][ T6437] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   75.871830][ T5595] ocfs2: Unmounting device (7,2) on (node local)
[   75.910782][ T5707] team0 (unregistering): Port device team_slave_1 removed
[   75.928375][ T5707] team0 (unregistering): Port device team_slave_0 removed
[   75.957167][  T988] usb 2-1: USB disconnect, device number 8
[   76.071356][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.073768][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.081882][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.083014][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.083046][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.099388][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.105795][   T55] Bluetooth: hci2: command tx timeout
[   76.167178][ T6355] hsr_slave_0: entered promiscuous mode
[   76.167635][ T6355] hsr_slave_1: entered promiscuous mode
[   76.167913][ T6355] debugfs: 'hsr0' already exists in 'hsr'
[   76.167921][ T6355] Cannot create hsr debugfs directory
[   76.269723][ T5339] 8021q: adding VLAN 0 to HW filter on device eth2
[   76.414996][ T6355] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   76.427928][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   76.430617][ T6355] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   76.431559][   T33] cfg80211: failed to load regulatory.db
[   76.442191][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   76.445266][ T6355] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   76.452079][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   76.458689][ T6355] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   76.465080][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   76.511542][ T5339] 8021q: adding VLAN 0 to HW filter on device eth3
[   76.593494][ T6355] 8021q: adding VLAN 0 to HW filter on device bond0
[   76.605326][ T6355] 8021q: adding VLAN 0 to HW filter on device team0
[   76.611256][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.611363][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[   76.625323][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.626217][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[   76.793895][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   76.824512][ T5339] 8021q: adding VLAN 0 to HW filter on device eth4
[   76.837106][ T5596] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   76.900548][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.007495][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.041408][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   77.063299][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   77.067047][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   77.069855][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   77.073568][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   77.076804][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   77.107514][ T6355] 8021q: adding VLAN 0 to HW filter on device batadv0
[   77.180280][ T6355] veth0_vlan: entered promiscuous mode
[   77.196678][ T6523] set_capacity_and_notify: 5 callbacks suppressed
[   77.199895][ T6523] loop1: detected capacity change from 0 to 512
[   77.219172][ T6523] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.324: bg 0: block 5: invalid block bitmap
[   77.221828][ T6355] veth1_vlan: entered promiscuous mode
[   77.233228][ T6523] fserror_report: 3 callbacks suppressed
[   77.245205][ T6355] veth0_macvtap: entered promiscuous mode
[   77.256519][ T6523] loop1: lost filesystem error report for type 5 error -117
[   77.263444][ T6355] veth1_macvtap: entered promiscuous mode
[   77.266102][    C0] EXT4-fs (loop1): error count since last fsck: 1
[   77.266112][    C0] EXT4-fs (loop1): initial error at time 1788504614: ext4_validate_block_bitmap:436
[   77.266121][    C0] EXT4-fs (loop1): last error at time 1788504614: ext4_validate_block_bitmap:436
[   77.271227][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_0
[   77.273321][ T6355] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.287055][ T6523] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem
[   77.287119][ T6523] loop1: lost filesystem error report for type 5 error -117
[   77.287720][ T6523] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.324: invalid indirect mapped block 3 (level 2)
[   77.287735][ T6523] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[   77.288047][ T6523] EXT4-fs (loop1): 1 orphan inode deleted
[   77.288055][ T6523] EXT4-fs (loop1): 1 truncate cleaned up
[   77.290161][ T6523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.293379][ T6523] binfmt_misc: register: failed to install interpreter ./file1
[   77.304603][ T5591] EXT4-fs error (device loop1): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[   77.309331][ T5591] EXT4-fs error (device loop1): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[   77.326983][ T5629] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.327102][ T5629] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.327198][ T5629] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.327271][ T5629] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.437065][   T13] bridge_slave_1: left allmulticast mode
[   77.437126][   T13] bridge_slave_1: left promiscuous mode
[   77.437250][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.447043][   T13] bridge_slave_0: left allmulticast mode
[   77.447101][   T13] bridge_slave_0: left promiscuous mode
[   77.447219][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.473014][ T6054] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.591807][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.597308][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.601098][   T13] bond0 (unregistering): Released all slaves
[   77.622413][ T5339] 8021q: adding VLAN 0 to HW filter on device eth5
[   77.701873][   T28] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.701936][   T28] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.711391][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   77.723470][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   77.730136][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   77.734299][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   77.737835][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   77.806986][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   77.807032][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.876136][   T13] hsr_slave_0: left promiscuous mode
[   77.878408][   T13] hsr_slave_1: left promiscuous mode
[   77.878879][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.878905][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.886904][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.886942][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   77.908325][   T13] veth1_macvtap: left promiscuous mode
[   77.910174][   T13] veth0_macvtap: left promiscuous mode
[   77.912275][   T13] veth1_vlan: left promiscuous mode
[   77.913986][   T13] veth0_vlan: left promiscuous mode
[   78.045396][   T13] team0 (unregistering): Port device team_slave_1 removed
[   78.057513][   T13] team0 (unregistering): Port device team_slave_0 removed
[   78.139585][ T5339] 8021q: adding VLAN 0 to HW filter on device eth6
[   78.186473][ T5596] Bluetooth: hci2: command tx timeout
[   78.431944][ T6511] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.432079][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.432169][ T6511] bridge_slave_0: entered allmulticast mode
[   78.433423][ T6511] bridge_slave_0: entered promiscuous mode
[   78.437048][ T6511] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.437150][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.437203][ T6511] bridge_slave_1: entered allmulticast mode
[   78.437872][ T6511] bridge_slave_1: entered promiscuous mode
[   78.451258][ T6511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.453178][ T6511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.482535][ T6511] team0: Port device team_slave_0 added
[   78.525134][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.545386][ T6511] team0: Port device team_slave_1 added
[   78.549240][ T5339] 8021q: adding VLAN 0 to HW filter on device eth7
[   78.601389][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.601418][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.601447][ T6511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.602365][ T6511] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.602371][ T6511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.602380][ T6511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.644047][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.704895][ T6511] hsr_slave_0: entered promiscuous mode
[   78.705479][ T6511] hsr_slave_1: entered promiscuous mode
[   78.798274][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.939900][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.960580][ T5339] 8021q: adding VLAN 0 to HW filter on device eth8
[   78.965198][ T6539] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.968431][ T6539] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.971537][ T6539] bridge_slave_0: entered allmulticast mode
[   78.975960][ T6539] bridge_slave_0: entered promiscuous mode
[   79.001720][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.001786][ T6539] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.001874][ T6539] bridge_slave_1: entered allmulticast mode
[   79.002675][ T6539] bridge_slave_1: entered promiscuous mode
[   79.078424][ T6539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.093560][ T6539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.146519][ T5596] Bluetooth: hci1: command tx timeout
[   79.155251][ T6539] team0: Port device team_slave_0 added
[   79.188636][ T6539] team0: Port device team_slave_1 added
[   79.230011][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.230083][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.230269][ T6539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.257937][ T6539] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.257982][ T6539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.258016][ T6539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.309019][   T12] bridge_slave_1: left allmulticast mode
[   79.309115][   T12] bridge_slave_1: left promiscuous mode
[   79.309274][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.313102][   T12] bridge_slave_0: left allmulticast mode
[   79.313113][   T12] bridge_slave_0: left promiscuous mode
[   79.313195][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.474246][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   79.482595][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   79.486577][   T12] bond0 (unregistering): Released all slaves
[   79.529549][ T6511] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.539113][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   79.552298][ T6539] hsr_slave_0: entered promiscuous mode
[   79.554411][ T6539] hsr_slave_1: entered promiscuous mode
[   79.554733][ T6539] debugfs: 'hsr0' already exists in 'hsr'
[   79.554742][ T6539] Cannot create hsr debugfs directory
[   79.572026][ T6511] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.578380][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   79.615796][ T6511] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.621262][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   79.642168][ T6511] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.648249][ T6511] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   79.685490][ T5339] 8021q: adding VLAN 0 to HW filter on device eth9
[   79.734203][   T12] hsr_slave_0: left promiscuous mode
[   79.736597][   T12] hsr_slave_1: left promiscuous mode
[   79.737453][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   79.737463][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   79.744496][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.744556][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.752855][   T12] veth1_macvtap: left promiscuous mode
[   79.752929][   T12] veth0_macvtap: left promiscuous mode
[   79.753118][   T12] veth1_vlan: left promiscuous mode
[   79.753172][   T12] veth0_vlan: left promiscuous mode
[   79.795900][ T5596] Bluetooth: hci0: command tx timeout
[   79.929287][   T12] team0 (unregistering): Port device team_slave_1 removed
[   79.938361][   T12] team0 (unregistering): Port device team_slave_0 removed
[   80.070273][ T6511] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.142660][ T6511] 8021q: adding VLAN 0 to HW filter on device team0
[   80.157807][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.157887][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.164114][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.164155][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.180555][ T6539] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   80.193128][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   80.217077][ T6539] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   80.223609][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   80.227392][ T6539] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   80.233588][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   80.239720][ T6539] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   80.247777][ T6539] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   80.265964][ T5596] Bluetooth: hci2: command tx timeout
[   80.286087][ T5339] 8021q: adding VLAN 0 to HW filter on device eth10
[   80.347722][ T6539] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.358563][ T6539] 8021q: adding VLAN 0 to HW filter on device team0
[   80.361517][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.361598][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.370928][ T1112] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.371886][ T1112] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.543680][ T5339] 8021q: adding VLAN 0 to HW filter on device eth11
[   80.618791][ T6539] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.652155][ T6511] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.794571][ T6539] veth0_vlan: entered promiscuous mode
[   80.801894][ T6539] veth1_vlan: entered promiscuous mode
[   80.831353][ T5339] 8021q: adding VLAN 0 to HW filter on device eth12
[   80.852744][ T6539] veth0_macvtap: entered promiscuous mode
[   80.864507][ T6539] veth1_macvtap: entered promiscuous mode
[   80.881008][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.883745][ T6539] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.899735][ T6511] veth0_vlan: entered promiscuous mode
[   80.916126][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.916183][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.916223][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.916255][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.957581][ T6511] veth1_vlan: entered promiscuous mode
[   81.008554][  T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.008602][  T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.015867][ T6511] veth0_macvtap: entered promiscuous mode
[   81.020274][ T6511] veth1_macvtap: entered promiscuous mode
[   81.037323][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.037355][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.062534][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.067818][ T6511] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.107415][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.112419][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.125859][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.164701][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.191234][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.191294][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.213886][  T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.213933][  T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.226080][ T5596] Bluetooth: hci1: command tx timeout
[   81.297328][ T6697] loop4: detected capacity change from 0 to 1024
[   81.398395][ T6700] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 6700 comm: syz.5.334)
[   81.407145][ T6702] loop4: detected capacity change from 0 to 2048
[   81.411237][ T6702] EXT4-fs (loop4): bad geometry: bigalloc file system with non-zero first_data_block
[   81.411237][ T6702] 
[   81.412711][ T6702] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[   81.505582][ T6710] Bluetooth: MGMT ver 1.23
[   81.507230][ T6710] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[   81.508036][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz.4.338'.
[   81.511691][ T6710] input: syz1 as /devices/virtual/input/input12
[   81.580546][ T6713] loop4: detected capacity change from 0 to 2048
[   81.604984][ T6713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.643243][ T5609] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   81.656137][ T5609] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   81.656202][ T5609] EXT4-fs (loop4): This should not happen!! Data will be lost
[   81.656202][ T5609] 
[   81.656255][ T5609] EXT4-fs (loop4): Total free blocks count 0
[   81.656265][ T5609] EXT4-fs (loop4): Free/Dirty block details
[   81.656287][ T5609] EXT4-fs (loop4): free_blocks=2415919504
[   81.656307][ T5609] EXT4-fs (loop4): dirty_blocks=32
[   81.656315][ T5609] EXT4-fs (loop4): Block reservation details
[   81.656322][ T5609] EXT4-fs (loop4): i_reserved_data_blocks=2
[   81.657592][ T5609] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28
[   81.658892][ T6511] EXT4-fs warning (device loop4): ext4_evict_inode:196: inode #15: comm syz-executor: data will be lost
[   81.866168][ T5596] Bluetooth: hci0: command tx timeout
[   82.336887][ T6724] loop5: detected capacity change from 0 to 128
[   82.348658][ T5596] Bluetooth: hci2: command tx timeout
[   82.362362][ T6724] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   82.362942][ T6724] hpfs: filesystem error: improperly stopped
[   82.362984][ T6724] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   82.363034][ T6724] hpfs: You really don't want any checks? You are crazy...
[   82.363057][ T6724] hpfs: Code page index out of array
[   82.363078][ T6724] hpfs: code page support is disabled
[   82.363140][ T6724] hpfs: hpfs_map_4sectors(): unaligned read
[   82.380615][ T6724] hpfs: hpfs_map_4sectors(): unaligned read
[   82.384224][ T6724] hpfs: filesystem error: unable to find root dir
[   82.567547][ T6726] loop5: detected capacity change from 0 to 32768
[   82.649492][ T6726] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[   82.652504][ T6726] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.689723][ T6726] XFS (loop5): Ending clean mount
[   82.694577][ T6726] XFS (loop5): Quotacheck needed: Please wait.
[   82.742682][ T6726] XFS (loop5): Quotacheck: Done.
[   82.790635][ T6539] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   82.953543][ T6749] comedi comedi0: 8255: I/O base address not correctly aligned
[   82.986159][ T6754] trusted_key: encrypted_key: insufficient parameters specified
[   83.053388][ T6759] loop4: detected capacity change from 0 to 1024
[   83.055964][ T6760] loop3: detected capacity change from 0 to 4096
[   83.062343][ T6759] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   83.073894][ T6760] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   83.093112][ T6760] ntfs3(loop3): Failed to load $Extend (-22).
[   83.093159][ T6760] ntfs3(loop3): Failed to initialize $Extend.
[   83.318643][ T6768] usb usb7: check_ctrlrecip: process 6768 (syz.3.353) requesting ep 01 but needs 81
[   83.506192][ T6765] loop5: detected capacity change from 0 to 32768
[   83.511181][ T6765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.356 (6765)
[   83.548638][ T6765] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.548696][ T6765] BTRFS info (device loop5): using crc32c checksum algorithm
[   83.614825][ T6765] BTRFS info (device loop5): enabling ssd optimizations
[   83.614891][ T6765] BTRFS info (device loop5): turning on async discard
[   83.616886][ T6765] BTRFS info (device loop5): enabling free space tree
[   83.629227][ T6765] BTRFS info (device loop5 state M): use zstd compression, level 15
[   83.640304][ T6539] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.829136][  T805] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   83.878546][ T6803] random: crng reseeded on system resumption
[   83.900705][ T6803] Restarting kernel threads ...
[   83.901019][ T6803] Done restarting kernel threads.
[   83.946030][ T5596] Bluetooth: hci0: command tx timeout
[   83.975883][  T805] usb 5-1: Using ep0 maxpacket: 8
[   83.977339][  T805] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   83.980109][  T805] usb 5-1: config index 0 descriptor too short (expected 74, got 45)
[   83.980144][  T805] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[   83.980162][  T805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   83.980177][  T805] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[   83.980194][  T805] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   83.980208][  T805] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   83.980235][  T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.007363][ T6805] netlink: 68 bytes leftover after parsing attributes in process `syz.3.366'.
[   84.196905][  T805] usb 5-1: GET_CAPABILITIES returned 0
[   84.196962][  T805] usbtmc 5-1:16.0: can't read capabilities
[   84.410733][  T805] usb 5-1: USB disconnect, device number 2
[   85.064817][ T6828] loop5: detected capacity change from 0 to 4096
[   85.071252][ T6828] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[   85.092290][ T6828] ntfs3(loop5): ino=19, mi_enum_attr
[   85.102467][ T6828] ntfs3(loop5): failed to convert "c46c" to iso8859-14
[   85.102686][ T6828] ntfs3(loop5): ino=20, mi_enum_attr
[   85.226190][ T5651] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   85.377043][ T5651] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   85.378262][ T5651] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1536, setting to 64
[   85.380621][ T5651] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.380638][ T5651] usb 5-1: Product: syz
[   85.380647][ T5651] usb 5-1: Manufacturer: syz
[   85.380657][ T5651] usb 5-1: SerialNumber: syz
[   85.556325][ T5596] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[   85.556834][ T5596] Bluetooth: hci1: Injecting HCI hardware error event
[   85.559075][   T55] Bluetooth: hci1: hardware error 0x00
[   85.593147][  T805] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.606575][ T5651] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   85.606638][ T5651] usb 5-1: MIDIStreaming interface descriptor not found
[   85.649419][ T5651] usb 5-1: USB disconnect, device number 3
[   85.748607][  T805] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   85.754090][  T805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   85.754142][  T805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.754169][  T805] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   85.754195][  T805] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   85.774736][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   85.781502][  T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.781537][  T805] usb 4-1: Product: syz
[   85.781565][  T805] usb 4-1: Manufacturer: syz
[   85.781588][  T805] usb 4-1: SerialNumber: syz
[   85.961083][ T6854] loop5: detected capacity change from 0 to 131072
[   85.962774][ T6854] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[   85.962785][ T6854] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   85.963148][ T6854] F2FS-fs (loop5): invalid crc value
[   86.019499][  T805] usb 4-1: Not enough endpoints found in device, aborting!
[   86.026232][ T5596] Bluetooth: hci0: command tx timeout
[   86.027914][ T6854] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   86.048554][ T6854] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   86.048617][ T6854] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[   86.198618][ T6866] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   86.207687][ T6686] usb 4-1: USB disconnect, device number 2
[   87.406991][ T6881] loop3: detected capacity change from 0 to 32768
[   87.636389][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[   87.932994][ T6900] loop4: detected capacity change from 0 to 2048
[   87.957775][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.957855][ T6900] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.963304][ T6900] EXT4-fs (loop4): Online resizing not supported with bigalloc
[   88.260314][ T6917] loop5: detected capacity change from 0 to 1024
[   88.280566][ T6917] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.292811][ T6511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.382744][ T6917] overlayfs: invalid origin (000000790066696c6531000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[   88.460598][ T6928] loop4: detected capacity change from 0 to 2048
[   88.473055][ T6928] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.486309][ T6928] UDF-fs: error (device loop4): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 1000
[   88.645205][ T6938] loop4: detected capacity change from 0 to 256
[   88.654020][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.713872][ T6942] loop5: detected capacity change from 0 to 512
[   88.720050][ T6942] EXT4-fs: Ignoring removed nobh option
[   88.728765][ T6942] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory
[   88.728818][ T6942] loop5: lost filesystem error report for type 5 error -12
[   88.735660][    C1] EXT4-fs (loop5): error count since last fsck: 1
[   88.735716][    C1] EXT4-fs (loop5): initial error at time 1788504625: ext4_process_orphan:346
[   88.735773][    C1] EXT4-fs (loop5): last error at time 1788504625: ext4_process_orphan:346
[   88.743883][ T6942] EXT4-fs (loop5): 2 truncates cleaned up
[   88.748598][ T6942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.779162][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.847510][  T988] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   88.995723][  T988] usb 4-1: Using ep0 maxpacket: 16
[   88.996229][  T988] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[   88.997134][  T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.997146][  T988] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.997160][  T988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.006536][  T988] usb 4-1: config 0 descriptor??
[   89.505780][ T5978] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   89.622720][  T988] usb 4-1: string descriptor 0 read error: -71
[   89.650754][  T988] usb 4-1: Max retries (5) exceeded reading string descriptor 200
[   89.650827][  T988] letsketch 0003:6161:4D15.0004: probe with driver letsketch failed with error -32
[   89.654563][  T988] usb 4-1: USB disconnect, device number 3
[   89.656706][ T5978] usb 5-1: Using ep0 maxpacket: 16
[   89.659606][ T5978] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.662919][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.662930][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.667907][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.667918][ T5978] usb 5-1: Product: syz
[   89.667924][ T5978] usb 5-1: Manufacturer: syz
[   89.667929][ T5978] usb 5-1: SerialNumber: syz
[   89.682771][ T5978] usb 5-1: 0:2 : does not exist
[   89.882929][ T5978] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[   89.914925][ T5978] usb 5-1: USB disconnect, device number 4
[   89.936245][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   90.250020][ T6992] loop5: detected capacity change from 0 to 40427
[   90.258015][ T6992] F2FS-fs (loop5): Invalid segment/section count (31, 8323096 x 1)
[   90.260593][ T6992] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[   90.264981][ T6992] F2FS-fs (loop5): invalid crc value
[   90.268970][ T6992] F2FS-fs (loop5): Mismatch valid blocks 5 vs. 7
[   90.275786][ T6992] loop5: lost filesystem error report for type 5 error -117
[   90.275844][ T6992] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117)
[   90.472913][ T7009] syzkaller1: entered promiscuous mode
[   90.475465][ T7011] jffs2: notice: (7011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   90.476105][ T7009] syzkaller1: entered allmulticast mode
[   90.527107][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.441'.
[   90.527159][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.5.441'.
[   90.527197][ T7016] netlink: 'syz.5.441': attribute type 12 has an invalid length.
[   90.527204][ T7016] netlink: 'syz.5.441': attribute type 11 has an invalid length.
[   90.801588][ T7030] loop5: detected capacity change from 0 to 32768
[   90.857069][ T5978] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   91.006892][ T5978] usb 5-1: Using ep0 maxpacket: 32
[   91.008917][ T5978] usb 5-1: unable to get BOS descriptor or descriptor too short
[   91.008964][ T5978] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[   91.010372][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.010387][ T5978] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.010408][ T5978] usb 5-1: config 1 interface 0 has no altsetting 0
[   91.012592][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.012606][ T5978] usb 5-1: Product: syz
[   91.012614][ T5978] usb 5-1: Manufacturer: syz
[   91.012622][ T5978] usb 5-1: SerialNumber: syz
[   91.019240][ T7040] loop5: detected capacity change from 0 to 1024
[   91.019716][ T7040] EXT4-fs: Ignoring removed nomblk_io_submit option
[   91.059813][ T7040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.102884][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.134787][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.453'.
[   91.139063][ T7048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.453'.
[   91.195450][ T7050] loop5: detected capacity change from 0 to 4096
[   91.206253][ T7050] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[   91.264895][ T7050] ntfs3(loop5): Failed to initialize $Extend/$ObjId.
[   91.390535][ T5978] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[   91.391480][ T5978] usb 5-1: USB disconnect, device number 5
[   91.430926][ T5599] udevd[5599]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.470626][ T7073] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1)
[   91.470682][ T7073] FAT-fs (loop3): Filesystem has been set read-only
[   91.765715][  T988] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   91.915734][  T988] usb 4-1: Using ep0 maxpacket: 32
[   91.916271][  T988] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[   91.960461][  T988] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[   91.960556][  T988] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[   91.960567][  T988] usb 4-1: config 0 interface 0 has no altsetting 0
[   92.045905][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.045965][  T988] usb 4-1: Product: syz
[   92.046012][  T988] usb 4-1: Manufacturer: syz
[   92.046022][  T988] usb 4-1: SerialNumber: syz
[   92.347038][ T7139] FAULT_INJECTION: forcing a failure.
[   92.347038][ T7139] name fail_futex, interval 1, probability 0, space 0, times 1
[   92.347080][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.5.475 Not tainted syzkaller #0 PREEMPT(full) 
[   92.347104][ T7139] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   92.347112][ T7139] Call Trace:
[   92.347116][ T7139]  <TASK>
[   92.347119][ T7139]  dump_stack_lvl+0xe8/0x150
[   92.347134][ T7139]  should_fail_ex+0x410/0x560
[   92.347146][ T7139]  get_futex_key+0x1b4/0x1580
[   92.347160][ T7139]  ? __pfx_get_futex_key+0x10/0x10
[   92.347170][ T7139]  ? update_se+0x90/0x1020
[   92.347184][ T7139]  futex_wait_setup+0x4a/0x590
[   92.347197][ T7139]  ? __futex_wait+0xdf/0x400
[   92.347210][ T7139]  __futex_wait+0x15f/0x400
[   92.347222][ T7139]  ? __pfx___futex_wait+0x10/0x10
[   92.347235][ T7139]  ? __pfx_futex_wake_mark+0x10/0x10
[   92.347253][ T7139]  ? try_to_wake_up+0x8c5/0x14d0
[   92.347268][ T7139]  futex_wait+0x121/0x390
[   92.347280][ T7139]  ? __pfx_futex_wait+0x10/0x10
[   92.347295][ T7139]  ? __pfx_do_io_getevents+0x10/0x10
[   92.347308][ T7139]  do_futex+0x3e7/0x4e0
[   92.347320][ T7139]  ? __pfx_do_futex+0x10/0x10
[   92.347328][ T7139]  ? set_user_sigmask+0x160/0x1c0
[   92.347339][ T7139]  ? __pfx_set_user_sigmask+0x10/0x10
[   92.347352][ T7139]  __se_sys_futex+0x3a8/0x450
[   92.347363][ T7139]  ? __pfx___se_sys_futex+0x10/0x10
[   92.347377][ T7139]  ? __x64_sys_futex+0x21/0xf0
[   92.347387][ T7139]  do_syscall_64+0x166/0x520
[   92.347397][ T7139]  ? trace_irq_disable+0x3b/0x140
[   92.347404][ T7139]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.347413][ T7139]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   92.347420][ T7139] RIP: 0033:0x7fe5c459e159
[   92.347428][ T7139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   92.347436][ T7139] RSP: 002b:00007fe5c541a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   92.347446][ T7139] RAX: ffffffffffffffda RBX: 00007fe5c4825fa8 RCX: 00007fe5c459e159
[   92.347451][ T7139] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5c4825fa8
[   92.347456][ T7139] RBP: 00007fe5c4825fa0 R08: 0000000000000000 R09: 0000000000000000
[   92.347461][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   92.347466][ T7139] R13: 00007fe5c4826038 R14: 00007ffcc61c8da0 R15: 00007ffcc61c8e88
[   92.347478][ T7139]  </TASK>
[   92.366454][  T988] usb 4-1: config 0 descriptor??
[   92.619588][ T7146] set_capacity_and_notify: 2 callbacks suppressed
[   92.623757][ T7146] loop5: detected capacity change from 0 to 32768
[   92.638282][ T7146] (syz.5.478,7146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.657151][ T7146] (syz.5.478,7146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.681626][ T7146] (syz.5.478,7146,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdde57c9f, computed 0x5b96c28. Applying ECC.
[   92.681674][ T7146] (syz.5.478,7146,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdde57c9f, computed 0x5b96c28
[   92.681709][ T7146] (syz.5.478,7146,0):ocfs2_validate_inode_block:1475 ERROR: Checksum failed for dinode 25
[   92.681735][ T7146] (syz.5.478,7146,0):ocfs2_read_locked_inode:633 ERROR: status = -5
[   92.681958][ T7146] (syz.5.478,7146,0):_ocfs2_get_system_file_inode:141 ERROR: status = -5
[   92.682873][ T7146] (syz.5.478,7146,0):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[   92.682902][ T7146] (syz.5.478,7146,0):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 6, possibly corrupt fs?
[   92.682929][ T7146] (syz.5.478,7146,0):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[   92.682955][ T7146] (syz.5.478,7146,0):ocfs2_initialize_super:2194 ERROR: status = -22
[   92.683021][ T7146] (syz.5.478,7146,0):ocfs2_fill_super:1177 ERROR: status = -22
[   92.865467][ T7154] loop4: detected capacity change from 0 to 16
[   92.867491][ T7154] erofs (device loop4): unidentified incompatible feature 70000, please upgrade kernel
[   92.902385][  T988] gs_usb 4-1:0.0: Configuring for 1 interfaces
[   92.977555][ T7162] loop5: detected capacity change from 0 to 512
[   92.990138][ T7162] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[   92.998008][ T7162] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.486: attempt to clear invalid blocks 2 len 1
[   92.998057][ T7162] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   93.000997][ T7162] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   93.002051][ T7162] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.486: invalid indirect mapped block 1819239214 (level 0)
[   93.002066][ T7162] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   93.005128][ T7162] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.486: invalid indirect mapped block 1819239214 (level 1)
[   93.005143][ T7162] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   93.005652][    C1] EXT4-fs (loop5): error count since last fsck: 4
[   93.005661][    C1] EXT4-fs (loop5): initial error at time 1788504629: ext4_clear_blocks:876: inode 13
[   93.005672][    C1] EXT4-fs (loop5): last error at time 1788504629: ext4_free_branches:1023: inode 13
[   93.009149][ T7162] EXT4-fs (loop5): 1 truncate cleaned up
[   93.011990][ T7162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   93.018056][ T7162] CacheFiles: mkdir cache failed with error -105
[   93.018084][ T7162] CacheFiles: Failed to register: -105
[   93.040790][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.107060][  T988] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO)
[   93.107758][  T988] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[   93.128324][  T988] usb 4-1: USB disconnect, device number 4
[   93.152398][ T7171] input: syz1 as /devices/virtual/input/input13
[   93.517919][ T7201] loop4: detected capacity change from 0 to 512
[   93.518674][ T7201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   93.521435][ T7201] EXT4-fs error (device loop4): ext4_quota_enable:7260: comm syz.4.502: inode #262144: comm syz.4.502: iget: illegal inode #
[   93.521449][ T7201] loop4: lost filesystem error report for type 5 error -117
[   93.521581][ T7201] EXT4-fs (loop4): Remounting filesystem read-only
[   93.521589][ T7201] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix.
[   93.521793][ T7201] EXT4-fs (loop4): mount failed
[   93.525681][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   93.525691][    C1] EXT4-fs (loop4): initial error at time 1788504630: ext4_quota_enable:7260
[   93.525699][    C1] EXT4-fs (loop4): last error at time 1788504630: ext4_quota_enable:7260
[   93.650109][ T7208] loop3: detected capacity change from 0 to 256
[   93.660620][ T7208] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d)
[   93.682745][ T7212] Zero length message leads to an empty skb
[   93.685592][ T7208] exFAT-fs (loop3): start_clu is invalid cluster(0x0)
[   93.725203][ T7214] loop4: detected capacity change from 0 to 128
[   93.729205][ T7214] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   93.754272][ T7214] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   93.770056][ T7216] loop3: detected capacity change from 0 to 1024
[   93.808353][ T1108] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   93.992155][ T7226] syzkaller0: entered promiscuous mode
[   93.992206][ T7226] syzkaller0: entered allmulticast mode
[   94.089853][ T7230] loop5: detected capacity change from 0 to 2048
[   94.094187][ T7230] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   94.176001][  T988] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   94.225974][ T7237] loop4: detected capacity change from 0 to 8
[   94.235339][ T7237] unable to read id index table
[   94.325775][  T988] usb 4-1: Using ep0 maxpacket: 32
[   94.340189][  T988] usb 4-1: unable to get BOS descriptor or descriptor too short
[   94.340526][  T988] usb 4-1: New USB device found, idVendor=4971, idProduct=8024, bcdDevice=4b.e6
[   94.349974][  T988] usb 4-1: config 10 has an invalid interface number: 179 but max is 0
[   94.351353][  T988] usb 4-1: config 10 has no interface number 0
[   94.351591][  T988] usb 4-1: config 10 interface 179 has no altsetting 0
[   94.366849][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.367156][  T988] usb 4-1: Product: syz
[   94.367228][  T988] usb 4-1: Manufacturer: syz
[   94.367366][  T988] usb 4-1: SerialNumber: syz
[   94.606912][  T988] usb-storage 4-1:10.179: USB Mass Storage device detected
[   94.619120][  T988] usb-storage 4-1:10.179: Quirks match for vid 4971 pid 8024: 20000000
[   94.682837][  T988] usb 4-1: USB disconnect, device number 5
[   94.687706][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'.
[   94.687755][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.523'.
[   94.742999][ T7250] netlink: 'syz.4.524': attribute type 49 has an invalid length.
[   94.794614][ T7254] loop4: detected capacity change from 0 to 256
[   94.797880][ T7254] exfat: Deprecated parameter 'namecase'
[   94.800089][ T7254] exfat: Deprecated parameter 'namecase'
[   94.807696][ T7254] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   95.007752][ T7260] EXT4-fs: Ignoring removed mblk_io_submit option
[   95.012446][ T7260] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[   95.016741][ T7260] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.529: attempt to clear invalid blocks 2 len 1
[   95.022088][ T7260] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   95.023224][ T7258] EXT4-fs: Ignoring removed oldalloc option
[   95.026113][    C1] EXT4-fs (loop4): error count since last fsck: 1
[   95.026122][    C1] EXT4-fs (loop4): initial error at time 1788504631: ext4_clear_blocks:876: inode 13
[   95.026133][    C1] EXT4-fs (loop4): last error at time 1788504631: ext4_clear_blocks:876: inode 13
[   95.026468][ T7260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   95.026526][ T7260] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.529: invalid indirect mapped block 1819239214 (level 0)
[   95.026539][ T7260] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   95.052744][ T7258] EXT4-fs: Ignoring removed nobh option
[   95.056077][ T7260] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.529: invalid indirect mapped block 1819239214 (level 1)
[   95.056094][ T7260] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[   95.060170][ T7260] EXT4-fs (loop4): 1 truncate cleaned up
[   95.060876][ T7260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.068081][ T7258] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[   95.113083][ T6511] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.261661][ T7280] input input14: cannot allocate more than FF_MAX_EFFECTS effects
[   95.401045][ T7296] CUSE: unknown device info ""
[   95.401080][ T7296] CUSE: unknown device info ""
[   95.401163][ T7296] CUSE: unknown device info ""
[   95.401183][ T7296] CUSE: unknown device info ""
[   95.401209][ T7296] CUSE: unknown device info ""
[   95.401230][ T7296] CUSE: unknown device info ""
[   95.401250][ T7296] CUSE: unknown device info ""
[   95.401272][ T7296] CUSE: unknown device info ""
[   95.401292][ T7296] CUSE: DEVNAME unspecified
[   95.453390][ T7301] 9pnet_fd: p9_fd_create_unix (7301): problem connecting socket: ./file0: -5
[   95.590460][ T7318] Cannot find add_set index 0 as target
[   95.745029][ T7322] ERROR: (device loop4): dbAllocNext: Corrupt dmap page
[   95.745029][ T7322] 
[   95.749927][ T7322] ERROR: (device loop4): remounting filesystem as read-only
[   95.752572][ T7322] ialloc: diAlloc returned -5!
[   95.906256][ T7336] exfat: Deprecated parameter 'namecase'
[   95.913267][ T7336] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x84f53455, utbl_chksum : 0xe619d30d)
[   95.954584][ T7337] input: syz0 as /devices/virtual/input/input15
[   96.138914][ T7354] input: syz0 as /devices/virtual/input/input16
[   96.284958][ T7352] F2FS-fs (loop3): Image doesn't support compression
[   96.285009][ T7352] F2FS-fs (loop3): build fault injection type: 0x400004
[   96.290347][ T7352] F2FS-fs (loop3): invalid crc value
[   96.337361][ T7352] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   96.353066][ T7352] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   96.360609][ T7352] syz.3.572: attempt to access beyond end of device
[   96.360609][ T7352] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.368141][ T7352] CPU: 1 UID: 0 PID: 7352 Comm: syz.3.572 Not tainted syzkaller #0 PREEMPT(full) 
[   96.368172][ T7352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.368178][ T7352] Call Trace:
[   96.368182][ T7352]  <TASK>
[   96.368186][ T7352]  dump_stack_lvl+0xe8/0x150
[   96.368203][ T7352]  f2fs_stop_checkpoint+0x3f6/0x5d0
[   96.368218][ T7352]  f2fs_write_end_bio+0x1211/0x16e0
[   96.368230][ T7352]  ? blkg_put+0x22/0x240
[   96.368246][ T7352]  __submit_merged_bio+0x258/0x6a0
[   96.368258][ T7352]  ? rcu_is_watching+0x16/0xb0
[   96.368274][ T7352]  __submit_merged_write_cond+0x3c9/0x4e0
[   96.368289][ T7352]  ? __pfx___submit_merged_write_cond+0x10/0x10
[   96.368310][ T7352]  f2fs_write_data_pages+0x2a27/0x36f0
[   96.368319][ T7352]  ? __lock_acquire+0x6df/0x2e50
[   96.368340][ T7352]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.368366][ T7352]  ? rcu_is_watching+0x16/0xb0
[   96.368374][ T7352]  ? __pfx_hlock_conflict+0x10/0x10
[   96.368382][ T7352]  ? __bfs+0x153/0x290
[   96.368390][ T7352]  ? __pfx_hlock_conflict+0x10/0x10
[   96.368407][ T7352]  ? lockdep_unlock+0x5c/0xd0
[   96.368417][ T7352]  ? __lock_acquire+0x14b9/0x2e50
[   96.368435][ T7352]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   96.368445][ T7352]  do_writepages+0x338/0x560
[   96.368461][ T7352]  ? do_raw_spin_unlock+0x4d/0x200
[   96.368472][ T7352]  filemap_fdatawrite+0x1e9/0x2f0
[   96.368481][ T7352]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   96.368505][ T7352]  ? do_raw_spin_unlock+0x4d/0x200
[   96.368517][ T7352]  f2fs_sync_dirty_inodes+0x30e/0x830
[   96.368531][ T7352]  f2fs_write_checkpoint+0xa3d/0x2710
[   96.368551][ T7352]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   96.368573][ T7352]  ? __pfx_down_write+0x10/0x10
[   96.368586][ T7352]  ? rcu_is_watching+0x16/0xb0
[   96.368596][ T7352]  f2fs_issue_checkpoint+0x424/0x6f0
[   96.368606][ T7352]  ? __lock_acquire+0x6df/0x2e50
[   96.368615][ T7352]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[   96.368623][ T7352]  ? kasan_save_free_info+0x40/0x50
[   96.368632][ T7352]  ? __kasan_slab_free+0x5c/0x80
[   96.368640][ T7352]  ? kmem_cache_free+0x182/0x650
[   96.368647][ T7352]  ? f2fs_create+0x460/0x6c0
[   96.368657][ T7352]  ? lookup_open+0xc0d/0x1a40
[   96.368665][ T7352]  ? path_openat+0x677/0x1d60
[   96.368674][ T7352]  ? do_file_open+0x23e/0x4a0
[   96.368682][ T7352]  ? do_sys_openat2+0x115/0x200
[   96.368694][ T7352]  ? __x64_sys_openat+0x138/0x170
[   96.368704][ T7352]  ? do_syscall_64+0x166/0x520
[   96.368712][ T7352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.368722][ T7352]  ? __lock_acquire+0x6df/0x2e50
[   96.368746][ T7352]  ? f2fs_sync_fs+0x1f2/0x3c0
[   96.368757][ T7352]  f2fs_create+0x520/0x6c0
[   96.368797][ T7352]  ? __pfx_f2fs_create+0x10/0x10
[   96.368811][ T7352]  ? inode_permission+0x2bc/0x5f0
[   96.368820][ T7352]  ? bpf_lsm_inode_create+0x9/0x20
[   96.368831][ T7352]  lookup_open+0xc0d/0x1a40
[   96.368851][ T7352]  path_openat+0x677/0x1d60
[   96.368868][ T7352]  do_file_open+0x23e/0x4a0
[   96.368880][ T7352]  ? __pfx_do_file_open+0x10/0x10
[   96.368898][ T7352]  ? _raw_spin_unlock+0x28/0x50
[   96.368905][ T7352]  ? alloc_fd+0x651/0x6c0
[   96.368918][ T7352]  do_sys_openat2+0x115/0x200
[   96.368929][ T7352]  ? __se_sys_futex+0x3a8/0x450
[   96.368939][ T7352]  ? __pfx_do_sys_openat2+0x10/0x10
[   96.368951][ T7352]  ? __pfx___se_sys_futex+0x10/0x10
[   96.368960][ T7352]  ? __se_sys_chdir+0x1ce/0x2a0
[   96.368969][ T7352]  ? __pfx___se_sys_chdir+0x10/0x10
[   96.368980][ T7352]  __x64_sys_openat+0x138/0x170
[   96.368993][ T7352]  do_syscall_64+0x166/0x520
[   96.369001][ T7352]  ? trace_irq_disable+0x3b/0x140
[   96.369008][ T7352]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.369017][ T7352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.369025][ T7352] RIP: 0033:0x7f3dfa39e159
[   96.369033][ T7352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.369040][ T7352] RSP: 002b:00007f3dfb315028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   96.369049][ T7352] RAX: ffffffffffffffda RBX: 00007f3dfa625fa0 RCX: 00007f3dfa39e159
[   96.369055][ T7352] RDX: 0000000000000040 RSI: 0000200000000180 RDI: ffffffffffffff9c
[   96.369060][ T7352] RBP: 00007f3dfa435024 R08: 0000000000000000 R09: 0000000000000000
[   96.369064][ T7352] R10: 00000000000001c1 R11: 0000000000000246 R12: 0000000000000000
[   96.369088][ T7352] R13: 00007f3dfa626038 R14: 00007f3dfa625fa0 R15: 00007fffce78b398
[   96.369101][ T7352]  </TASK>
[   96.401952][ T7352] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   96.447011][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   96.541829][ T7368] EXT4-fs: Ignoring removed oldalloc option
[   96.541891][ T7368] EXT4-fs: Ignoring removed bh option
[   96.562394][ T7368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   96.562490][ T7368] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.578987][ T7368] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.580: bg 0: block 112: padding at end of block bitmap is not set
[   96.580827][ T7368] EXT4-fs (loop5): Remounting filesystem read-only
[   96.591969][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   96.627377][    T9] usb 5-1: Using ep0 maxpacket: 8
[   96.629288][    T9] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[   96.630204][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[   96.630233][    T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.630243][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   96.630254][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   96.632318][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.632328][    T9] usb 5-1: Product: syz
[   96.632334][    T9] usb 5-1: Manufacturer: syz
[   96.632339][    T9] usb 5-1: SerialNumber: syz
[   96.654416][    T9] usb 5-1: config 0 descriptor??
[   96.657816][ T7356] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   96.769141][ T7386] FAULT_INJECTION: forcing a failure.
[   96.769141][ T7386] name fail_futex, interval 1, probability 0, space 0, times 0
[   96.769191][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.5.586 Not tainted syzkaller #0 PREEMPT(full) 
[   96.769234][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   96.769241][ T7386] Call Trace:
[   96.769245][ T7386]  <TASK>
[   96.769249][ T7386]  dump_stack_lvl+0xe8/0x150
[   96.769265][ T7386]  should_fail_ex+0x410/0x560
[   96.769278][ T7386]  get_futex_key+0x1b4/0x1580
[   96.769292][ T7386]  ? __pfx_get_futex_key+0x10/0x10
[   96.769301][ T7386]  ? kfree+0x1c5/0x650
[   96.769315][ T7386]  futex_wake+0x119/0x5f0
[   96.769328][ T7386]  ? __pfx_futex_wake+0x10/0x10
[   96.769337][ T7386]  ? __sys_bpf+0xd2e/0xd90
[   96.769348][ T7386]  ? __pfx___sys_bpf+0x10/0x10
[   96.769357][ T7386]  do_futex+0x458/0x4e0
[   96.769368][ T7386]  ? __pfx_do_futex+0x10/0x10
[   96.769380][ T7386]  __se_sys_futex+0x3a8/0x450
[   96.769392][ T7386]  ? __pfx___se_sys_futex+0x10/0x10
[   96.769402][ T7386]  ? rcu_is_watching+0x16/0xb0
[   96.769415][ T7386]  ? __x64_sys_futex+0x21/0xf0
[   96.769424][ T7386]  do_syscall_64+0x166/0x520
[   96.769434][ T7386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.769443][ T7386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   96.769451][ T7386] RIP: 0033:0x7fe5c459e159
[   96.769458][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   96.769465][ T7386] RSP: 002b:00007fe5c541a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   96.769474][ T7386] RAX: ffffffffffffffda RBX: 00007fe5c4825fa8 RCX: 00007fe5c459e159
[   96.769479][ T7386] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe5c4825fac
[   96.769484][ T7386] RBP: 00007fe5c4825fa0 R08: 3fffffffffffffff R09: 0000000000000000
[   96.769489][ T7386] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[   96.769493][ T7386] R13: 00007fe5c4826038 R14: 00007ffcc61c8da0 R15: 00007ffcc61c8e88
[   96.769504][ T7386]  </TASK>
[   96.871935][    T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[   96.883444][    T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17
[   97.068897][ T7400] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.068939][ T7400] NILFS (loop3): mounting unchecked fs
[   97.078539][ T5599] udevd[5599]: incorrect nilfs2 checksum on /dev/loop3
[   97.089620][ T5599] udevd[5599]: incorrect nilfs2 checksum on /dev/loop3
[   97.102357][ T7400] NILFS (loop3): recovery complete
[   97.105478][ T7401] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.175892][ T6686] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   97.326196][ T6686] usb 6-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[   97.330838][ T6686] usb 6-1: config 0 interface 0 has no altsetting 0
[   97.333577][ T6686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.338294][ T6686] usb 6-1: config 0 descriptor??
[   97.425855][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   97.546919][ T6686] usbhid 6-1:0.0: can't add hid device: -71
[   97.546993][ T6686] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[   97.555171][ T6686] usb 6-1: USB disconnect, device number 2
[   97.577779][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[   97.577909][    T9] usb 4-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[   97.579518][    T9] usb 4-1: config 63 has an invalid interface number: 66 but max is 0
[   97.579529][    T9] usb 4-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[   97.579537][    T9] usb 4-1: config 63 has no interface number 0
[   97.579548][    T9] usb 4-1: config 63 interface 66 has no altsetting 0
[   97.581713][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.581818][    T9] usb 4-1: Product: syz
[   97.581824][    T9] usb 4-1: Manufacturer: syz
[   97.581829][    T9] usb 4-1: SerialNumber: syz
[   97.787572][    C0] powermate: config urb returned -71
[   97.787902][    C0] powermate: config urb returned -71
[   97.789253][    C0] powermate: config urb returned -71
[   97.789321][   T10] usb 5-1: USB disconnect, device number 6
[   97.789458][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[   97.807038][    T9] uvcvideo 4-1:63.66: probe with driver uvcvideo failed with error -22
[   97.822979][    T9] usb 4-1: USB disconnect, device number 6
[   97.983425][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.599'.
[   97.988778][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.989961][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.990688][ T7415] bridge0: entered allmulticast mode
[   98.028581][ T7417] autofs4:pid:7417:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1000000), cmd(0xc0189375)
[   98.028631][ T7417] autofs4:pid:7417:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[   98.227865][ T7423] set_capacity_and_notify: 12 callbacks suppressed
[   98.227928][ T7423] loop4: detected capacity change from 0 to 32768
[   98.242462][ T7423] ERROR: (device loop4): diAllocAG: nfreeinos = 0, but iag on freelist
[   98.242462][ T7423] 
[   98.252892][ T7423] ERROR: (device loop4): remounting filesystem as read-only
[   98.252933][ T7423] ialloc: diAlloc returned -5!
[   98.561458][ T7435] loop4: detected capacity change from 0 to 24
[   98.571972][ T7435] MTD: Attempt to mount non-MTD device "/dev/loop4"
[   98.584573][ T7435] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   98.798974][ T7448] netlink: 'syz.4.614': attribute type 2 has an invalid length.
[   99.081102][ T7456] loop4: detected capacity change from 0 to 64
[   99.425267][ T7467] kernel read not supported for file events/kvm/kvm_hv_stimer_cleanup/trigger (pid: 7467 comm: syz.4.623)
[   99.488343][ T7469] netlink: 'syz.5.629': attribute type 1 has an invalid length.
[   99.492021][ T7469] netlink: 148 bytes leftover after parsing attributes in process `syz.5.629'.
[   99.495441][ T7469] netlink: 'syz.5.629': attribute type 1 has an invalid length.
[   99.723633][ T7477] tmpfs: Bad value for 'mpol'
[  100.109779][ T7499] loop3: detected capacity change from 0 to 128
[  100.111082][ T7499] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  100.111097][ T7499] hpfs: filesystem error: improperly stopped
[  100.111103][ T7499] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  100.111108][ T7499] hpfs: You really don't want any checks? You are crazy...
[  100.111113][ T7499] hpfs: Code page index out of array
[  100.111116][ T7499] hpfs: code page support is disabled
[  100.111425][ T7499] hpfs: hpfs_map_4sectors(): unaligned read
[  100.111454][ T7499] hpfs: hpfs_map_4sectors(): unaligned read
[  100.111458][ T7499] hpfs: filesystem error: unable to find root dir
[  100.279347][ T7516] loop5: detected capacity change from 0 to 1024
[  100.415016][ T7527] loop4: detected capacity change from 0 to 16
[  100.423754][ T7527] erofs (device loop4): mounted with root inode @ nid 36.
[  100.445759][  T988] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  100.480023][ T7529] netlink: 'syz.5.651': attribute type 1 has an invalid length.
[  100.482613][ T7529] netlink: 84 bytes leftover after parsing attributes in process `syz.5.651'.
[  100.485591][ T7529] netlink: 'syz.5.651': attribute type 2 has an invalid length.
[  100.488178][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.5.651'.
[  100.516683][ T7532] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  100.601127][  T988] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  100.621740][ T7536] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  100.624186][ T7536] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 2904 size 16 => 808
[  100.624402][ T7536] erofs (device loop4): read error -117 @ 0 of nid 89
[  100.628247][   T34] kauditd_printk_skb: 6 callbacks suppressed
[  100.628415][   T34] audit: type=1800 audit(1788504637.551:45): pid=7536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.650" name="file2" dev="loop4" ino=89 res=0 errno=0
[  100.675805][  T988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.678747][  T988] usb 4-1: Product: syz
[  100.680506][  T988] usb 4-1: Manufacturer: syz
[  100.682314][  T988] usb 4-1: SerialNumber: syz
[  100.755962][  T988] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  101.175721][ T6686] usb 4-1: USB disconnect, device number 7
[  101.367035][ T7548] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  101.367321][ T7548] overlayfs: conflicting lowerdir path
[  101.443585][ T7552] loop5: detected capacity change from 0 to 256
[  101.444418][ T7552] exfat: Deprecated parameter 'utf8'
[  101.444432][ T7552] exfat: Deprecated parameter 'utf8'
[  101.444485][ T7552] exfat: Deprecated parameter 'namecase'
[  101.449033][ T7552] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  101.742025][ T7556] loop5: detected capacity change from 0 to 512
[  101.758829][ T7556] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.663: bg 0: block 5: invalid block bitmap
[  101.759836][ T7556] loop5: lost filesystem error report for type 5 error -117
[  101.761782][ T7556] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6680: Corrupt filesystem
[  101.761794][ T7556] loop5: lost filesystem error report for type 5 error -117
[  101.761970][ T7556] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.663: invalid indirect mapped block 3 (level 2)
[  101.761990][ T7556] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  101.762239][ T7556] EXT4-fs (loop5): 1 orphan inode deleted
[  101.762247][ T7556] EXT4-fs (loop5): 1 truncate cleaned up
[  101.762955][ T7556] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.770549][ T7556] binfmt_misc: register: failed to install interpreter ./file1
[  101.779283][ T6539] EXT4-fs error (device loop5): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  101.782593][ T6539] EXT4-fs error (device loop5): ext4_lookup:1787: inode #17: comm syz-executor: iget: bad extended attribute block 6904
[  101.814898][  T988] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  101.822161][  T988] ath9k_htc: Failed to initialize the device
[  101.830717][ T6686] usb 4-1: ath9k_htc: USB layer deinitialized
[  102.063277][ T7566] jffs2: notice: (7566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  102.086429][ T5609] IPVS: starting estimator thread 0...
[  102.153143][ T7565] loop4: detected capacity change from 0 to 32768
[  102.160425][ T7571] netlink: 'syz.3.669': attribute type 1 has an invalid length.
[  102.160469][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'.
[  102.173576][ T7565] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.667 (7565)
[  102.186557][ T7563] IPVS: using max 86 ests per chain, 206400 per kthread
[  102.195547][ T7573] loop3: detected capacity change from 0 to 512
[  102.203001][ T7573] EXT4-fs (loop3): Test dummy encryption mode enabled
[  102.205102][ T7574] udevd[7574]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  102.206203][ T7565] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  102.206217][ T7565] BTRFS info (device loop4): using crc32c checksum algorithm
[  102.229226][ T7577] udevd[7577]: failed to execute '/usr/bin/udevadm' '/usr/bin/udevadm trigger -s block -p ID_BTRFS_READY=0': No such file or directory
[  102.242460][ T7573] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.670: inode has both inline data and extents flags
[  102.242514][ T7573] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  102.242644][ T7573] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.670: couldn't read orphan inode 15 (err -117)
[  102.242685][ T7573] loop3: lost filesystem error report for type 5 error -117
[  102.243477][ T7573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.271808][ T6539] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.283767][ T6355] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.311523][ T5629] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.407638][ T7565] BTRFS info (device loop4): allowing degraded mounts
[  102.420182][ T7565] BTRFS info (device loop4): enabling ssd optimizations
[  102.420241][ T7565] BTRFS info (device loop4): turning on flush-on-commit
[  102.420266][ T7565] BTRFS info (device loop4): enabling free space tree
[  102.420292][ T7565] BTRFS info (device loop4): force zlib compression, level 3
[  102.450213][ T5629] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.465124][ T6511] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
SYZFAIL: posix_spawnp failed
 (errno 2: No such file or directory)
[  102.620046][ T5629] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.816908][ T5629] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.928322][ T5629] bridge_slave_1: left allmulticast mode
[  102.930208][ T5629] bridge_slave_1: left promiscuous mode
[  102.934689][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.939370][ T5629] bridge_slave_0: left allmulticast mode
[  102.941276][ T5629] bridge_slave_0: left promiscuous mode
[  102.943467][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.045324][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  103.053599][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.057606][ T5629] bond0 (unregistering): Released all slaves
[  103.063072][ T5339] 8021q: adding VLAN 0 to HW filter on device eth13
[  103.145351][ T5339] 8021q: adding VLAN 0 to HW filter on device eth14
[  103.165075][ T5339] 8021q: adding VLAN 0 to HW filter on device eth15
[  103.213052][ T5339] 8021q: adding VLAN 0 to HW filter on device eth16
[  103.258201][ T5629] hsr_slave_0: left promiscuous mode
[  103.260739][ T5629] hsr_slave_1: left promiscuous mode
[  103.262905][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.265331][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.269231][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.271590][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.278428][ T5629] veth1_macvtap: left promiscuous mode
[  103.280289][ T5629] veth0_macvtap: left promiscuous mode
[  103.282168][ T5629] veth1_vlan: left promiscuous mode
[  103.283931][ T5629] veth0_vlan: left promiscuous mode
[  103.423389][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  103.433255][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  103.781710][ T5629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.848953][ T5629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.914442][ T5629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.990753][ T5629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.105949][ T5339] 8021q: adding VLAN 0 to HW filter on device eth17
[  104.122221][ T5339] 8021q: adding VLAN 0 to HW filter on device eth18
[  104.165028][ T5629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.177341][ T5339] 8021q: adding VLAN 0 to HW filter on device eth19
[  104.204760][ T5339] 8021q: adding VLAN 0 to HW filter on device eth20
[  104.239366][ T5629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.280596][ T5629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.311293][ T5629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.431199][ T5629] bridge_slave_1: left allmulticast mode
[  104.431268][ T5629] bridge_slave_1: left promiscuous mode
[  104.431449][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.436144][ T5629] bridge_slave_0: left allmulticast mode
[  104.436163][ T5629] bridge_slave_0: left promiscuous mode
[  104.436304][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.449130][ T5629] bridge_slave_1: left allmulticast mode
[  104.449195][ T5629] bridge_slave_1: left promiscuous mode
[  104.449422][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.461866][ T5629] bridge_slave_0: left allmulticast mode
[  104.463161][ T5629] bridge_slave_0: left promiscuous mode
[  104.463373][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.640897][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.656083][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.660952][ T5629] bond0 (unregistering): Released all slaves
[  104.755280][ T5629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.764700][ T5629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  104.771981][ T5629] bond0 (unregistering): Released all slaves
[  104.793979][ T5339] 8021q: adding VLAN 0 to HW filter on device eth21
[  104.854999][ T5339] 8021q: adding VLAN 0 to HW filter on device eth22
[  104.928376][ T5339] 8021q: adding VLAN 0 to HW filter on device eth23
[  104.997742][ T5339] 8021q: adding VLAN 0 to HW filter on device eth24
[  105.208377][ T5629] hsr_slave_0: left promiscuous mode
[  105.210712][ T5629] hsr_slave_1: left promiscuous mode
[  105.211172][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.211182][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.213526][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.213538][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.229846][ T5629] hsr_slave_0: left promiscuous mode
[  105.232390][ T5629] hsr_slave_1: left promiscuous mode
[  105.233135][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  105.233145][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_0
[  105.234982][ T5629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  105.234990][ T5629] batman_adv: batadv0: Removing interface: batadv_slave_1
[  105.247453][ T5629] veth1_macvtap: left promiscuous mode
[  105.247530][ T5629] veth0_macvtap: left promiscuous mode
[  105.247589][ T5629] veth1_vlan: left promiscuous mode
[  105.247650][ T5629] veth0_vlan: left promiscuous mode
[  105.256926][ T5629] veth1_macvtap: left promiscuous mode
[  105.256993][ T5629] veth0_macvtap: left promiscuous mode
[  105.257081][ T5629] veth1_vlan: left promiscuous mode
[  105.257138][ T5629] veth0_vlan: left promiscuous mode
[  105.429590][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  105.441053][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  105.614741][ T5629] team0 (unregistering): Port device team_slave_1 removed
[  105.620831][ T5629] team0 (unregistering): Port device team_slave_0 removed
[  106.172524][ T5629] IPVS: stop unused estimator thread 0...
