last executing test programs:

1m56.523571331s ago: executing program 0 (id=248):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000180)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0x67d, 0x3}, &(0x7f00000003c0)=0x8)

1m56.361120813s ago: executing program 0 (id=251):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000480)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES8=0x0], 0x1, 0x6f7, &(0x7f0000001f80)="$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")
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)

1m55.732244353s ago: executing program 0 (id=256):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1)

1m55.480810906s ago: executing program 0 (id=257):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c6d6f64653d61646170746976652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d656e61626c652c6163746976655f6c6f67733d362c6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6e6f61636c2c6d6f64653d61646170746976652c6e6f696e6c696e655f78617474722c6e6f657874656e745f63616368652c6e6f757365725f78617474722c6a71666d743d7666736f6c642c66617374626f6f742c67727071756f74613d2f6465762f75686964002c61636c2c0032f4ee2f6560cdca2b9483944e9645733866c506b49c56b50344a658491dfe1afc3bb0de511c48132c86a775315723c53de2957513b9e639dfab8b7e4f4097c16f12b630a63e3ee7aa89cfa87acb9e9436e3d4feae3c1c3fedb8759e622019ece82c31d9fe60c2e3300afffbbda9aa8515e815ffc77756449aee7d4dc8354a136775201fe90e0663c422eb5a7e10e72601606e640c6714946801fccf68f802ff1c466e968c229e988c70dbe2c74169c0e96f9117a800ef78cef7bea512401010266195fc419fabbb4304582cd727de0f01694c0e22f6bca0650e3f3e4c4aefef27a417b89a0ce12bce1898cc08bbacc339f2655241746a085213fe4d6edc276928e230d4663583ccad22e450718285ed6a84bad0c7d117de297a02d83173a5a3d62192e8b6882f1a34b2200fdb7de25a9c0657778fdf670dfbd28483194c7b288bd257fa84f4a9564651ee61761f4a364803b5aea822e4c5b52b5676bdba4d9bdcbf1b7ddda716f223a1bc6d1c5a150fa64e72f580f7bf672ce6c6d30f8bcf091186a89ff219d2272ff5f2c0b4f63cb92f4708d6d81bc1935a791bd1c3670ba93b4a4db772e29f150122528cbe24284f0d1064ba237debaa65d481756e427ad570171d1e9445fe5c06dd6335167686a2cf8f226eb57ebe530d4e72"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdir(&(0x7f0000000280)='./file0\x00', 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

1m53.274723197s ago: executing program 0 (id=278):
r0 = syz_io_uring_setup(0x2aac, &(0x7f0000000e40)={0x0, 0x247e}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x36})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x45})
io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0)

1m51.74453495s ago: executing program 0 (id=281):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0)

1m51.03163297s ago: executing program 32 (id=281):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0)

14.491277303s ago: executing program 1 (id=1060):
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x6)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000000)='#\x00', 0x0, r1)

14.192215517s ago: executing program 1 (id=1064):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x101}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x11}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)

13.825787262s ago: executing program 1 (id=1068):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d96700e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b030000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddbf418ac1b3d4a13839e4b273c4f914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a402ec56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf6b60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f5035d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e03c400"/2303], 0xff, 0x5e0a, &(0x7f000000c740)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='user.{'], 0x0, 0x0, 0x0)

12.822512287s ago: executing program 1 (id=1080):
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$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")
mkdir(&(0x7f0000000280)='./file0\x00', 0x100)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

11.133361681s ago: executing program 1 (id=1087):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r1, 0x9}, &(0x7f0000000140)=0x8)

9.653445692s ago: executing program 1 (id=1100):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

9.172301418s ago: executing program 33 (id=1100):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000007"], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

5.672954779s ago: executing program 4 (id=1128):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x50)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x42)

5.408214073s ago: executing program 4 (id=1130):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0)
mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)

4.338117378s ago: executing program 4 (id=1138):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x6)
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x66bd, 0x2100)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000100)={0x1, 0x0, {0x20000003, 0x400080, 0x2022, 0x7, 0x5, 0x6}})

4.028782062s ago: executing program 4 (id=1141):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x44040)

1.933383622s ago: executing program 4 (id=1148):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}}, 0x0)

1.746026005s ago: executing program 2 (id=1149):
r0 = fanotify_init(0x4, 0x1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x61, 0x40001002, r1, 0x0)
fanotify_mark(r0, 0x2, 0x40000028, r1, 0x0)

1.679134386s ago: executing program 5 (id=1150):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000004800330020a80300ffffffffffff080211000000505050505050"], 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

1.678559876s ago: executing program 4 (id=1151):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000800)={[{@filestreams}, {@noquota}, {@discard}, {@quota}, {@dax}, {@dax}, {@gqnoenforce}, {@swalloc}, {@largeio}]}, 0x1, 0x979d, &(0x7f000000d680)="$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")
lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01)
lchown(&(0x7f00000001c0)='./file0/../file0\x00', 0xee00, 0x0)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0xee01, 0x0)

1.583644177s ago: executing program 3 (id=1152):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20})

1.40319882s ago: executing program 3 (id=1153):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000140)='./file0/../file0\x00', 0x1900, &(0x7f0000001dc0)={0x80, 0x2, 0x0, {r0}}, 0x20)

1.4022071s ago: executing program 2 (id=1164):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$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")
mount$nfs(&(0x7f0000000100)='.5.', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

1.354232771s ago: executing program 5 (id=1154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0xf9, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0xfffffffe}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0)

1.136526884s ago: executing program 5 (id=1155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x20, r1, 0x1, 0x70bd24, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512)

1.129682124s ago: executing program 3 (id=1157):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28, 0x7ffffff7}}], 0x1, 0x0)

900.376507ms ago: executing program 3 (id=1159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xff02, &(0x7f0000000480)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1, 0x1, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0)

899.487057ms ago: executing program 2 (id=1169):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@bridge_dellink={0x24, 0x11, 0x5, 0x70bd26, 0x0, {0x7, 0x0, 0x0, r2, 0x80900, 0x4200}, [@IFLA_AF_SPEC={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x800)

774.716679ms ago: executing program 5 (id=1160):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)

713.4176ms ago: executing program 2 (id=1161):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x8, 0x2, {0xf, "0000000000000000000100000e00"}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x80000001}]}, 0x50}}, 0x0)

591.183841ms ago: executing program 3 (id=1162):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x52a, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
sendfile(r0, r1, 0x0, 0xfffe82)

467.305463ms ago: executing program 5 (id=1163):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c00000400fc800c0001"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d20100fe72f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b000100627269646765"], 0x6c}}, 0x840)

409.287974ms ago: executing program 2 (id=1165):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @private0={0xfc, 0x0, '\x00', 0x9}}, 0x1c)

260.771326ms ago: executing program 5 (id=1166):
syz_emit_ethernet(0xae, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000021000783afdfe8000000000000000000000000000bbff020000000000000000b4c70000000000009078000000000000000000000000180b00d414ce8ad4000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23"], 0x0)
r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

50.94129ms ago: executing program 3 (id=1167):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xfffffffe}, &(0x7f00000000c0)=0x8)

0s ago: executing program 2 (id=1168):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.clone_children\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x9)

kernel console output (not intermixed with test programs):

ecomes ready
[  125.968594][   T26] audit: type=1800 audit(1748870056.449:1298): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.352" name="file2" dev="loop1" ino=16 res=0 errno=0
[  126.009200][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  126.015598][ T5355] NILFS (loop1): error -2 truncating bmap (ino=16)
[  126.038778][   T26] audit: type=1804 audit(1748870056.449:1299): pid=5355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.352" name="/newroot/63/file0/file2" dev="loop1" ino=16 res=1 errno=0
[  126.071960][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.079108][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.118234][ T5341] loop4: detected capacity change from 0 to 32768
[  126.145072][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  126.183536][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  126.213974][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  126.240241][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.247497][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.269297][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  126.302366][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  126.379056][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  126.445408][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  126.474878][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  126.513477][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  126.571938][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  126.583431][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  126.628352][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  126.671045][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  126.701806][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  126.724554][ T5136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  126.777855][ T5375] loop4: detected capacity change from 0 to 256
[  127.255400][ T5386] loop1: detected capacity change from 0 to 2048
[  127.356257][ T5386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  127.792178][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  127.832430][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  127.846824][ T5136] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.344253][ T5420] loop4: detected capacity change from 0 to 512
[  128.375048][ T5422] loop1: detected capacity change from 0 to 1024
[  128.446896][ T5422] hfsplus: bad catalog entry type
[  128.480833][   T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  128.502271][ T5420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  128.528485][ T5428] loop3: detected capacity change from 0 to 512
[  128.541384][ T5420] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.624372][   T11] hfsplus: b-tree write err: -5, ino 4
[  128.661784][ T5428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  128.672855][ T5428] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.682029][   T22] usb 3-1: Using ep0 maxpacket: 32
[  128.721896][   T22] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  128.770944][   T22] usb 3-1: config 0 has no interface number 0
[  128.782847][   T22] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  128.823928][   T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.853797][   T22] usb 3-1: Product: syz
[  128.863943][   T22] usb 3-1: Manufacturer: syz
[  128.871600][   T22] usb 3-1: SerialNumber: syz
[  128.899907][   T22] usb 3-1: config 0 descriptor??
[  128.926846][   T22] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  128.928046][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  128.958942][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  129.122381][   T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  129.174036][   T22] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  129.215950][ T5440] netlink: 'syz.1.384': attribute type 11 has an invalid length.
[  129.246310][ T5442] loop3: detected capacity change from 0 to 256
[  129.264780][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.323602][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.338561][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.363195][ T5442] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  129.379459][ T5444] loop4: detected capacity change from 0 to 1024
[  129.386041][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.456032][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.477343][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.517647][ T5136] device veth0_vlan entered promiscuous mode
[  129.526126][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.537340][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.580331][ T5136] device veth1_vlan entered promiscuous mode
[  129.589465][ T5444] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  129.622726][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  129.622994][  T951] usb 3-1: USB disconnect, device number 3
[  129.634729][ T5444] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  129.692480][  T951] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  129.703904][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.724099][ T5444] EXT4-fs error (device loop4): ext4_get_journal_inode:5723: comm syz.4.385: inode #63: comm syz.4.385: iget: illegal inode #
[  129.739903][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  129.767869][  T951] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  129.771610][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.789036][ T5448] Invalid ELF header magic: != ELF
[  129.801918][ T5444] EXT4-fs (loop4): no journal found
[  129.807172][ T5444] EXT4-fs (loop4): can't get journal size
[  129.827490][  T951] quatech2 3-1:0.51: device disconnected
[  129.829065][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.859520][ T5444] EXT4-fs (loop4): failed to initialize system zone (-22)
[  129.880792][ T5444] EXT4-fs (loop4): mount failed
[  129.890044][ T5136] device veth0_macvtap entered promiscuous mode
[  129.925572][ T5136] device veth1_macvtap entered promiscuous mode
[  129.986840][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.020862][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.062730][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.082430][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.098841][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.109846][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.127337][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.200308][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.277296][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.305432][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.333900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.373922][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.387961][ T5458] tmpfs: Bad value for 'uid'
[  130.404306][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.436226][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.491333][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.532412][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.555318][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.599934][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.631150][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.647247][ T5136] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.658919][ T5136] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.671013][ T5136] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.681769][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'.
[  130.703603][ T5462] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'.
[  130.734392][ T5462] bridge0: port 3(vlan2) entered blocking state
[  130.750820][ T5462] bridge0: port 3(vlan2) entered disabled state
[  130.819268][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.865114][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.890431][ T5136] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.947938][ T5136] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.981951][ T5136] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.021676][ T5136] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.297826][ T5176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.329001][ T5176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.421865][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.424136][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.542284][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.593842][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  132.225041][ T5500] PKCS8: Unsupported PKCS#8 version
[  132.716428][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  132.722857][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  132.919859][ T5517] loop1: detected capacity change from 0 to 64
[  133.505537][ T5509] loop2: detected capacity change from 0 to 32768
[  133.659919][ T5509] XFS (loop2): Mounting V5 Filesystem
[  133.713823][ T5541] loop5: detected capacity change from 0 to 512
[  133.730396][ T5541] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  133.818211][ T5509] XFS (loop2): Ending clean mount
[  133.828050][ T5541] EXT4-fs (loop5): 1 truncate cleaned up
[  133.830406][ T5509] XFS (loop2): Quotacheck needed: Please wait.
[  133.845311][ T5541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  133.905868][   T26] audit: type=1800 audit(1748870064.399:1300): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.421" name="file1" dev="loop5" ino=15 res=0 errno=0
[  133.999542][ T5509] XFS (loop2): Quotacheck: Done.
[  134.184913][ T4260] XFS (loop2): Unmounting Filesystem
[  134.289564][ T5136] EXT4-fs (loop5): unmounting filesystem.
[  134.299916][ T5545] loop3: detected capacity change from 0 to 8192
[  134.364697][ T5545] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  134.437274][ T5545] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  134.447332][ T5545] REISERFS (device loop3): using ordered data mode
[  134.454518][ T5545] reiserfs: using flush barriers
[  134.488806][ T5545] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  134.571183][ T5545] REISERFS (device loop3): checking transaction log (loop3)
[  134.697788][ T5559] Bluetooth: MGMT ver 1.22
[  134.767321][ T5561] Bluetooth: MGMT ver 1.22
[  134.783717][ T5545] REISERFS (device loop3): Using tea hash to sort names
[  134.821004][ T5545] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  135.213409][  T951] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  135.357997][ T5557] loop4: detected capacity change from 0 to 32768
[  135.410957][  T951] usb 2-1: Using ep0 maxpacket: 16
[  135.416684][ T5557] XFS: ikeep mount option is deprecated.
[  135.432405][  T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.455762][  T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.496294][  T951] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  135.509958][  T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.547136][ T5557] XFS (loop4): Mounting V5 Filesystem
[  135.625562][  T951] usb 2-1: config 0 descriptor??
[  135.732621][ T5557] XFS (loop4): Ending clean mount
[  135.754136][ T5557] XFS (loop4): Quotacheck needed: Please wait.
[  135.862969][ T5557] XFS (loop4): Quotacheck: Done.
[  136.059631][  T951] corsair 0003:1B1C:1B02.0004: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  136.105620][ T4259] XFS (loop4): Unmounting Filesystem
[  136.248462][ T5589] syz.3.441 (5589) used greatest stack depth: 18176 bytes left
[  136.256308][  T951] corsair 0003:1B1C:1B02.0004: Read invalid backlight brightness: 56.
[  136.360360][ T5594] trusted_key: encrypted_key: keyword 'upd' not recognized
[  136.466981][  T951] usb 2-1: USB disconnect, device number 3
[  136.600467][ T5593] fido_id[5593]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  136.867710][ T5602] netlink: 'syz.5.447': attribute type 11 has an invalid length.
[  136.877743][ T5608] netlink: 104 bytes leftover after parsing attributes in process `syz.4.442'.
[  136.878643][ T5602] netlink: 36 bytes leftover after parsing attributes in process `syz.5.447'.
[  137.049208][ T5610] netlink: 'syz.4.450': attribute type 4 has an invalid length.
[  137.175794][ T5614] loop3: detected capacity change from 0 to 2048
[  137.228614][   T26] audit: type=1326 audit(1748870067.719:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.286683][ T5614] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.288491][   T26] audit: type=1326 audit(1748870067.749:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.424197][   T26] audit: type=1326 audit(1748870067.759:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.446655][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.501958][ T5618] loop1: detected capacity change from 0 to 4096
[  137.572377][   T26] audit: type=1326 audit(1748870067.759:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.594856][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.618554][ T5618] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  137.642587][ T5626] loop2: detected capacity change from 0 to 256
[  137.684200][ T5618] ntfs3: loop1: Failed to load $Extend.
[  137.726176][ T5626] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  137.760614][   T26] audit: type=1326 audit(1748870067.759:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.773652][ T5626] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  137.782974][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.900743][   T26] audit: type=1326 audit(1748870067.759:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  137.906149][ T5631] process 'syz.3.459' launched '/dev/fd/3' with NULL argv: empty string added
[  137.941189][ T5626] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[  138.027020][   T26] audit: type=1326 audit(1748870067.759:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5615 comm="syz.5.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b7998e969 code=0x7ffc0000
[  138.538679][ T5642] loop2: detected capacity change from 0 to 1024
[  138.645563][ T5642] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.464: Invalid block bitmap block 0 in block_group 0
[  138.768824][ T5642] Quota error (device loop2): write_blk: dquota write failed
[  138.806079][ T5642] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  138.827072][ T5624] loop4: detected capacity change from 0 to 32768
[  138.852729][ T5642] EXT4-fs error (device loop2): ext4_acquire_dquot:6802: comm syz.2.464: Failed to acquire dquot type 0
[  138.901010][ T5642] EXT4-fs error (device loop2): ext4_free_blocks:6210: comm syz.2.464: Freeing blocks not in datazone - block = 0, count = 4096
[  138.922083][ T5642] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.464: Invalid inode bitmap blk 0 in block_group 0
[  138.929533][ T5655] loop3: detected capacity change from 0 to 512
[  138.944883][ T5642] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  138.957809][ T4313] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  138.985750][ T5624] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  139.006845][ T4313] EXT4-fs error (device loop2): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 0
[  139.032746][ T5662] netlink: 'syz.5.471': attribute type 8 has an invalid length.
[  139.041508][ T5642] EXT4-fs (loop2): 1 orphan inode deleted
[  139.047302][ T5642] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  139.061947][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.072991][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.085197][ T5655] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  139.250601][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  139.333155][ T4259] (syz-executor,4259,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  139.348518][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  139.378692][ T4259] ocfs2: Unmounting device (7,4) on (node local)
[  139.462098][ T5665] ceph: No source
[  140.057411][ T5686] loop2: detected capacity change from 0 to 1024
[  140.074371][ T5686] EXT4-fs: Ignoring removed i_version option
[  140.100957][ T5686] EXT4-fs: inline encryption not supported
[  140.129318][ T5686] EXT4-fs (loop2): Test dummy encryption mode enabled
[  140.210865][ T5686] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  140.270083][ T5697] netlink: 'syz.4.486': attribute type 30 has an invalid length.
[  140.278489][ T5697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'.
[  140.300797][  T951] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  140.334882][ T5695] binder: 5694:5695 ioctl 400c620e 2000000001c0 returned -22
[  140.492951][  T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.528783][  T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  140.559498][  T951] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[  140.601628][  T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.637560][  T951] usb 4-1: config 0 descriptor??
[  140.653465][ T5709] loop1: detected capacity change from 0 to 64
[  140.696522][ T5710] block nbd5: NBD_DISCONNECT
[  140.717212][ T5710] block nbd5: Send disconnect failed -22
[  140.754227][ T5707] block nbd5: Disconnected due to user request.
[  140.779297][ T5707] block nbd5: shutting down sockets
[  140.839390][ T5686] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  140.981563][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  141.073225][  T951] uclogic 0003:28BD:0075.0005: interface is invalid, ignoring
[  141.280087][  T951] usb 4-1: USB disconnect, device number 4
[  141.668301][ T5729] loop1: detected capacity change from 0 to 2048
[  141.729619][ T5729] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.356520][ T5749] loop2: detected capacity change from 0 to 1024
[  142.452466][ T5752] tap0: tun_chr_ioctl cmd 1074025677
[  142.458835][ T5749] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  142.477565][ T5752] tap0: linktype set to 805
[  142.517141][ T5756] loop3: detected capacity change from 0 to 256
[  142.614958][ T5756] FAT-fs (loop3): Directory bread(block 64) failed
[  142.677843][ T5761] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  142.681756][ T5756] FAT-fs (loop3): Directory bread(block 65) failed
[  142.748853][ T5756] FAT-fs (loop3): Directory bread(block 66) failed
[  142.775378][ T5756] FAT-fs (loop3): Directory bread(block 67) failed
[  142.780891][ T5760] serio: Serial port ptm0
[  142.791469][ T5756] FAT-fs (loop3): Directory bread(block 68) failed
[  142.803352][ T5756] FAT-fs (loop3): Directory bread(block 69) failed
[  142.810146][ T5756] FAT-fs (loop3): Directory bread(block 70) failed
[  142.837141][ T5756] FAT-fs (loop3): Directory bread(block 71) failed
[  142.858243][ T5756] FAT-fs (loop3): Directory bread(block 72) failed
[  142.882087][ T5756] FAT-fs (loop3): Directory bread(block 73) failed
[  142.898410][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  142.965298][   T26] audit: type=1800 audit(1748870073.459:1308): pid=5756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.510" name="file0" dev="loop3" ino=1048612 res=0 errno=0
[  143.001863][ T5756] syz.3.510: attempt to access beyond end of device
[  143.001863][ T5756] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[  143.021102][  T951] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  143.044335][ T5770] loop2: detected capacity change from 0 to 512
[  143.097298][ T5756] syz.3.510: attempt to access beyond end of device
[  143.097298][ T5756] loop3: rw=0, sector=1160, nr_sectors = 4 limit=256
[  143.099381][ T5770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  143.187007][ T5770] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.515: bad orphan inode 131083
[  143.240802][  T951] usb 6-1: Using ep0 maxpacket: 32
[  143.259156][  T951] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  143.319139][  T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.336769][ T5770] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  143.375505][  T951] usb 6-1: config 0 descriptor??
[  143.565370][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  143.614422][  T951] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  143.659079][  T951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  143.708941][  T951] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  143.728679][ T5783] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  143.740449][  T951] usb 6-1: media controller created
[  143.773827][  T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  143.845969][  T951] az6027: usb out operation failed. (-71)
[  143.863951][  T951] az6027: usb out operation failed. (-71)
[  143.870663][   T33] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  143.884362][  T951] stb0899_attach: Driver disabled by Kconfig
[  143.905332][  T951] az6027: no front-end attached
[  143.905332][  T951] 
[  143.945570][  T951] az6027: usb out operation failed. (-71)
[  143.951843][  T951] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  143.960451][  T951] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input7
[  143.981308][ T5117] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  144.021478][  T951] dvb-usb: schedule remote query interval to 400 msecs.
[  144.028489][  T951] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  144.047738][  T951] usb 6-1: USB disconnect, device number 2
[  144.092537][   T33] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.102958][   T33] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.136985][   T33] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  144.157281][   T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.170653][   T33] usb 2-1: Product: syz
[  144.170708][ T5117] usb 4-1: Using ep0 maxpacket: 8
[  144.175434][   T33] usb 2-1: Manufacturer: syz
[  144.175455][   T33] usb 2-1: SerialNumber: syz
[  144.211585][ T5117] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  144.237881][  T951] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  144.247453][ T5117] usb 4-1: config 179 has no interface number 0
[  144.259305][ T5117] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  144.273402][ T5117] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  144.287781][ T5117] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  144.299603][ T5117] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  144.311953][ T5117] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  144.325846][ T5117] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  144.336082][ T5117] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.388927][ T5780] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  144.434375][ T5781] loop4: detected capacity change from 0 to 32768
[  144.458299][   T33] usb 2-1: 0:2 : does not exist
[  144.482604][ T5781] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.520 (5781)
[  144.578343][   T33] usb 2-1: USB disconnect, device number 4
[  144.603583][ T5781] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  144.648513][ T5781] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  144.671937][ T5781] BTRFS info (device loop4): using free space tree
[  144.751650][  T951] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input8
[  144.845774][ T5117] usb 4-1: USB disconnect, device number 5
[  144.851766][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  144.851816][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  144.880470][ T5117] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  144.915083][ T5799] loop5: detected capacity change from 0 to 2048
[  144.931809][ T5171] udevd[5171]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.034547][ T5799] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  145.077606][ T5781] BTRFS info (device loop4): enabling ssd optimizations
[  145.230345][ T5136] EXT4-fs (loop5): unmounting filesystem.
[  145.442939][ T4259] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  145.501814][ T5826] loop1: detected capacity change from 0 to 256
[  146.119762][ T5833] loop3: detected capacity change from 0 to 32768
[  146.127801][ T5833] XFS: ikeep mount option is deprecated.
[  146.307695][ T5833] XFS (loop3): Mounting V5 Filesystem
[  146.435932][ T5833] XFS (loop3): Ending clean mount
[  146.445757][ T5833] XFS (loop3): Quotacheck needed: Please wait.
[  146.477662][ T5851] loop2: detected capacity change from 0 to 128
[  146.550786][ T5851] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  146.577283][ T5833] XFS (loop3): Quotacheck: Done.
[  146.634824][ T5851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.649388][ T5856] loop5: detected capacity change from 0 to 64
[  146.753933][ T5851] overlayfs: upper fs needs to support d_type.
[  146.810213][ T5851] overlayfs: upper fs does not support tmpfile.
[  146.829390][ T4264] XFS (loop3): Unmounting Filesystem
[  147.416020][ T5870] loop5: detected capacity change from 0 to 512
[  147.579184][ T5870] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  147.676519][ T5881] netlink: 87 bytes leftover after parsing attributes in process `syz.3.544'.
[  147.680876][ T5870] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  147.786052][ T5870] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.549: corrupted inode contents
[  147.805889][ T5883] loop2: detected capacity change from 0 to 1024
[  147.861255][ T5887] loop1: detected capacity change from 0 to 1024
[  147.870687][ T5870] EXT4-fs (loop5): Remounting filesystem read-only
[  147.883027][ T5883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  147.922234][ T5870] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #2: comm syz.5.549: mark_inode_dirty error
[  147.960307][ T5870] EXT4-fs (loop5): Remounting filesystem read-only
[  147.971211][ T5870] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.549: corrupted inode contents
[  147.990842][ T5870] EXT4-fs (loop5): Remounting filesystem read-only
[  147.999742][ T5870] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.549: mark_inode_dirty error
[  148.013520][ T5870] EXT4-fs (loop5): Remounting filesystem read-only
[  148.024806][ T5890] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.549: corrupted inode contents
[  148.060855][ T5890] EXT4-fs (loop5): Remounting filesystem read-only
[  148.068258][ T5890] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #2: comm syz.5.549: mark_inode_dirty error
[  148.105148][ T5890] EXT4-fs (loop5): Remounting filesystem read-only
[  148.135344][ T5890] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.549: corrupted inode contents
[  148.137640][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  148.189088][ T5890] EXT4-fs (loop5): Remounting filesystem read-only
[  148.213809][ T5893] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #2: comm syz.5.549: corrupted inode contents
[  148.290647][ T5893] EXT4-fs (loop5): Remounting filesystem read-only
[  148.297391][ T5893] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.549: mark_inode_dirty error
[  148.380635][ T5893] EXT4-fs (loop5): Remounting filesystem read-only
[  148.387241][ T5893] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem
[  148.623892][ T5909] bridge0: port 1(bridge_slave_0) entered listening state
[  149.025212][ T5913] device wlan0 entered promiscuous mode
[  149.075636][ T5913] device macsec1 entered promiscuous mode
[  149.416993][ T5921] loop4: detected capacity change from 0 to 256
[  149.420546][    C1] sched: RT throttling activated
[  149.472889][ T5903] loop1: detected capacity change from 0 to 131072
[  149.485509][ T5903] F2FS-fs (loop1): Test dummy encryption mode enabled
[  149.517805][ T5903] F2FS-fs (loop1): invalid crc value
[  149.556937][ T5903] F2FS-fs (loop1): Found nat_bits in checkpoint
[  149.611151][ T5921] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  149.673461][ T5903] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  149.925594][ T5937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.573'.
[  150.206633][ T5943] loop5: detected capacity change from 0 to 512
[  150.257832][ T5943] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  150.352895][ T5943] EXT4-fs (loop5): 1 truncate cleaned up
[  150.420701][ T5943] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  150.558806][   T26] audit: type=1800 audit(1748870081.049:1309): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.576" name="file1" dev="loop5" ino=16 res=0 errno=0
[  150.759330][ T5136] EXT4-fs (loop5): unmounting filesystem.
[  150.803899][   T33] kernel write not supported for file /dsp (pid: 33 comm: kworker/1:1)
[  150.840275][   T22] kernel write not supported for file /dsp (pid: 22 comm: kworker/1:0)
[  151.194875][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.587'.
[  151.236917][ T5966] loop1: detected capacity change from 0 to 4096
[  151.280009][ T5974] device netdevsim0 entered promiscuous mode
[  151.316700][ T5974] device macvtap1 entered promiscuous mode
[  151.346359][ T5974] team0: Device macvtap1 is up. Set it down before adding it as a team port
[  151.347177][ T5976] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  151.466812][ T5974] device netdevsim0 left promiscuous mode
[  151.972285][ T5989] netlink: 56 bytes leftover after parsing attributes in process `syz.3.595'.
[  152.315141][ T5969] loop2: detected capacity change from 0 to 32768
[  152.367546][ T5969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.588 (5969)
[  152.428653][ T5969] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  152.470849][ T5969] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  152.479749][ T5969] BTRFS info (device loop2): use zlib compression, level 3
[  152.501387][ T5969] BTRFS info (device loop2): using free space tree
[  152.840792][ T5969] BTRFS info (device loop2): enabling ssd optimizations
[  153.079628][ T5999] loop1: detected capacity change from 0 to 32768
[  153.129731][ T5999] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.601 (5999)
[  153.229478][ T5999] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  153.239181][ T4260] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  153.320701][ T5999] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  153.332563][ T5999] BTRFS info (device loop1): using free space tree
[  153.679817][ T6001] loop4: detected capacity change from 0 to 32768
[  153.770275][ T6001] 
[  153.770275][ T6001]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  153.770275][ T6001] 
[  153.793684][ T4332] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (4332)
[  153.839798][ T5999] BTRFS info (device loop1): enabling ssd optimizations
[  153.854220][ T6039] loop5: detected capacity change from 0 to 32768
[  153.963644][   T26] audit: type=1800 audit(1748870084.459:1310): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.611" name="file3" dev="loop5" ino=5 res=0 errno=0
[  154.044964][   T46] read_mapping_page failed!
[  154.049551][   T46] ERROR: (device loop4): txCommit: 
[  154.049551][   T46] 
[  154.123247][   T46] jfs_write_inode: jfs_commit_inode failed!
[  154.141452][ T4259] 
[  154.141452][ T4259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.141452][ T4259] 
[  154.181437][ T4259] 
[  154.181437][ T4259]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  154.181437][ T4259] 
[  154.268837][ T4251] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.003214][ T5171] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop1 scanned by udevd (5171)
[  155.560433][ T6064] loop2: detected capacity change from 0 to 32768
[  155.678214][ T6064] XFS (loop2): Mounting V5 Filesystem
[  155.868717][ T6064] XFS (loop2): Ending clean mount
[  155.914242][ T6064] XFS (loop2): Quotacheck needed: Please wait.
[  156.025651][ T6064] XFS (loop2): Quotacheck: Done.
[  156.208604][ T4260] XFS (loop2): Unmounting Filesystem
[  157.132737][ T6116] loop4: detected capacity change from 0 to 40427
[  157.254245][ T6116] F2FS-fs (loop4): Found nat_bits in checkpoint
[  157.458591][ T6116] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  157.602738][ T6125] loop5: detected capacity change from 0 to 40427
[  157.674621][ T6125] F2FS-fs (loop5): invalid crc value
[  157.686699][ T6129] loop2: detected capacity change from 0 to 32768
[  157.729802][ T6125] F2FS-fs (loop5): Found nat_bits in checkpoint
[  157.758053][ T4259] syz-executor: attempt to access beyond end of device
[  157.758053][ T4259] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  157.867780][ T6129] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  157.892982][ T6129] XFS (loop2): Mounting V5 Filesystem
[  157.917157][ T6125] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  158.051029][ T6129] XFS (loop2): Ending clean mount
[  158.092574][ T6129] XFS (loop2): Quotacheck needed: Please wait.
[  158.160083][ T5136] syz-executor: attempt to access beyond end of device
[  158.160083][ T5136] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  158.232782][ T6129] XFS (loop2): Quotacheck: Done.
[  158.382705][ T4260] XFS (loop2): Unmounting Filesystem
[  158.593228][ T6135] loop3: detected capacity change from 0 to 32768
[  159.348642][ T6172] loop2: detected capacity change from 0 to 256
[  159.427011][ T6172] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.462775][ T6172] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  159.500683][ T5117] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  159.553904][ T6172] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  159.700782][ T5117] usb 6-1: Using ep0 maxpacket: 32
[  159.707929][ T5117] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  159.724612][ T5117] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.792210][ T5117] usb 6-1: config 0 descriptor??
[  160.012512][ T5117] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  160.030624][ T5117] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.069415][ T5117] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  160.089193][ T5117] usb 6-1: media controller created
[  160.137246][ T5117] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.221637][ T5117] az6027: usb out operation failed. (-71)
[  160.228914][ T5117] az6027: usb out operation failed. (-71)
[  160.259558][ T5117] stb0899_attach: Driver disabled by Kconfig
[  160.267966][ T5117] az6027: no front-end attached
[  160.267966][ T5117] 
[  160.284704][ T5117] az6027: usb out operation failed. (-71)
[  160.299416][ T5117] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  160.307998][ T5117] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9
[  160.330416][ T5117] dvb-usb: schedule remote query interval to 400 msecs.
[  160.350819][ T6196] ipt_CLUSTERIP: Please specify destination IP
[  160.362650][ T5117] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  160.384769][ T5117] usb 6-1: USB disconnect, device number 3
[  160.432422][ T4297] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  160.518022][ T5117] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  160.642385][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.664254][ T4297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.693253][ T4297] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  160.710982][ T4255] Bluetooth: hci2: command 0x0406 tx timeout
[  160.717237][ T4297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.752045][ T4297] usb 2-1: config 0 descriptor??
[  160.961303][ T6211] input: syz1 as /devices/virtual/input/input10
[  161.189372][ T4297] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0
[  161.212671][ T4297] pyra 0003:1E7D:2CF6.0006: item fetching failed at offset 6/7
[  161.233630][ T4297] pyra 0003:1E7D:2CF6.0006: parse failed
[  161.239440][ T4297] pyra: probe of 0003:1E7D:2CF6.0006 failed with error -22
[  161.267107][ T6218] loop4: detected capacity change from 0 to 256
[  161.357328][ T6218] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  161.405549][   T14] usb 2-1: USB disconnect, device number 5
[  161.453601][ T6218] exFAT-fs (loop4): hint_cluster is invalid (17)
[  161.658653][ T6205] loop2: detected capacity change from 0 to 32768
[  161.780146][ T6205] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  161.796367][ T6205] XFS (loop2): Mounting V5 Filesystem
[  162.009916][ T6205] XFS (loop2): Ending clean mount
[  162.067019][ T6205] XFS (loop2): Quotacheck needed: Please wait.
[  162.171331][ T6205] XFS (loop2): Quotacheck: Done.
[  162.211878][ T6205] XFS (loop2): User initiated shutdown received.
[  162.252087][ T6205] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  162.293081][ T6205] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  162.479869][ T4260] XFS (loop2): Unmounting Filesystem
[  163.159536][ T6260] loop4: detected capacity change from 0 to 512
[  163.229935][ T6260] EXT4-fs: Ignoring removed i_version option
[  163.335909][ T6260] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  163.477633][ T6269] loop2: detected capacity change from 0 to 512
[  163.588160][ T6269] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.681: invalid indirect mapped block 256 (level 2)
[  163.681803][ T6269] EXT4-fs (loop2): 2 truncates cleaned up
[  163.687620][ T6269] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  163.719427][   T26] audit: type=1800 audit(1748870094.209:1311): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.681" name="file1" dev="loop2" ino=15 res=0 errno=0
[  163.815298][ T6265] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.681: bg 0: block 5: invalid block bitmap
[  163.846061][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  163.857058][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748160 > max in inode 15
[  163.918646][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748164 > max in inode 15
[  163.981281][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748168 > max in inode 15
[  164.044688][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748172 > max in inode 15
[  164.086015][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748176 > max in inode 15
[  164.124980][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748180 > max in inode 15
[  164.161099][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748184 > max in inode 15
[  164.195787][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748188 > max in inode 15
[  164.251842][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748192 > max in inode 15
[  164.290614][ T6269] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 209748196 > max in inode 15
[  164.386269][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  164.455309][ T6271] loop1: detected capacity change from 0 to 32768
[  164.494024][ T6284] loop4: detected capacity change from 0 to 4096
[  164.532172][ T6284] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  164.570978][ T6284] ntfs: (device loop4): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  164.624531][ T6284] ntfs: (device loop4): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  164.662735][ T6284] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  164.761028][ T6284] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  164.784156][ T6284] ntfs: volume version 3.1.
[  164.802784][ T6284] ntfs: (device loop4): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  164.828676][ T6284] ntfs: (device loop4): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  164.833607][ T6290] loop3: detected capacity change from 0 to 256
[  164.881875][ T6290] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d)
[  164.900337][ T6284] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  164.983727][ T6284] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  165.656961][ T6310] loop3: detected capacity change from 0 to 736
[  165.679172][ T6312] loop4: detected capacity change from 0 to 64
[  165.971345][ T6310] isofs: Unable to find the ".." directory for NFS.
[  166.007173][ T6314] loop1: detected capacity change from 0 to 8192
[  166.062481][ T6314] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  166.171440][ T6314] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  166.180911][ T6314] REISERFS (device loop1): using ordered data mode
[  166.187730][ T6314] reiserfs: using flush barriers
[  166.224212][ T6328] program syz.3.707 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  166.238814][ T6314] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  166.321174][ T6314] REISERFS (device loop1): checking transaction log (loop1)
[  166.518591][ T6333] netlink: 820 bytes leftover after parsing attributes in process `syz.5.710'.
[  166.569087][ T6314] REISERFS (device loop1): Using tea hash to sort names
[  166.584997][ T6314] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  166.602980][ T6336] netlink: 40 bytes leftover after parsing attributes in process `syz.3.711'.
[  166.669215][ T6072] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  166.837789][ T6339] raw_sendmsg: syz.4.712 forgot to set AF_INET. Fix it!
[  166.900780][ T6072] usb 3-1: Using ep0 maxpacket: 16
[  166.916021][ T6072] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  166.956679][ T6072] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  167.011695][ T6072] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  167.031381][ T6072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.046486][ T6072] usb 3-1: Product: syz
[  167.051365][ T6072] usb 3-1: Manufacturer: syz
[  167.066555][ T6072] usb 3-1: SerialNumber: syz
[  167.081680][ T6072] usb 3-1: config 0 descriptor??
[  167.117815][ T6072] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  167.126457][ T6347] loop4: detected capacity change from 0 to 512
[  167.156130][ T6350] loop3: detected capacity change from 0 to 1024
[  167.258388][ T6347] EXT4-fs: Ignoring removed bh option
[  167.316715][ T6347] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  167.328366][ T6071] usb 3-1: USB disconnect, device number 4
[  167.412346][ T6359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.715'.
[  167.433432][ T6347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002]
[  167.528318][ T6347] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2195: inode #15: comm syz.4.716: corrupted in-inode xattr
[  167.619246][ T6347] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.716: couldn't read orphan inode 15 (err -117)
[  167.645679][ T6347] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  167.649293][ T4297] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  167.814616][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  167.869170][ T4297] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  167.883641][ T4297] usb 4-1: config 179 has no interface number 0
[  167.920667][ T4297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  167.970919][ T4297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  168.028201][ T4297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  168.048034][ T4297] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  168.068855][ T4297] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  168.087700][ T4297] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  168.097274][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.166034][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  168.182847][ T6350] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  168.294348][ T6376] misc userio: Begin command sent, but we're already running
[  168.350616][ T6072] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  168.471436][ T5117] usb 4-1: USB disconnect, device number 6
[  168.477362][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  168.477417][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  168.571876][ T6072] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  168.580023][ T6072] usb 5-1: config 0 has no interface number 0
[  168.611582][ T6072] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  168.638239][ T6383] netlink: 27 bytes leftover after parsing attributes in process `syz.5.730'.
[  168.645145][ T6072] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.684332][ T6072] usb 5-1: config 0 descriptor??
[  168.705056][ T6072] usb 5-1: selecting invalid altsetting 1
[  168.715364][ T6072] dvb_ttusb_budget: ttusb_init_controller: error
[  168.761686][ T6072] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  168.909647][ T6072] DVB: Unable to find symbol cx22700_attach()
[  169.033212][ T6072] DVB: Unable to find symbol tda10046_attach()
[  169.039478][ T6072] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  169.075481][ T6072] usb 5-1: USB disconnect, device number 4
[  169.404984][ T6380] loop1: detected capacity change from 0 to 32768
[  169.530218][ T6380] XFS (loop1): Mounting V5 Filesystem
[  169.719889][ T6380] XFS (loop1): Ending clean mount
[  169.745899][ T6380] XFS (loop1): Quotacheck needed: Please wait.
[  169.899956][ T6380] XFS (loop1): Quotacheck: Done.
[  170.059234][ T4251] XFS (loop1): Unmounting Filesystem
[  170.175272][ T6403] loop2: detected capacity change from 0 to 32768
[  170.224751][ T6399] loop5: detected capacity change from 0 to 32768
[  170.261220][ T6403] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  170.302420][ T6399] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  170.335303][ T6403] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  170.351161][ T6399] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  170.470689][ T4257] Bluetooth: hci4: command 0x0406 tx timeout
[  170.494546][ T6399] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  170.556684][ T4260] ocfs2: Unmounting device (7,2) on (node local)
[  170.796521][ T4297] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  170.847294][ T5136] ocfs2: Unmounting device (7,5) on (node local)
[  170.998837][ T4297] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  171.031929][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.057091][ T4297] usb 4-1: config 0 descriptor??
[  171.323390][ T6451] loop5: detected capacity change from 0 to 64
[  171.342194][ T6071] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  171.479305][ T4297] elan 0003:04F3:0755.0007: item fetching failed at offset 3/5
[  171.506021][ T4297] elan 0003:04F3:0755.0007: Hid Parse failed
[  171.521356][ T4297] elan: probe of 0003:04F3:0755.0007 failed with error -22
[  171.542559][ T6455] kAFS: unparsable volume name
[  171.562689][ T6071] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[  171.591937][ T6071] usb 3-1: config 54 has no interface number 0
[  171.612583][ T6071] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[  171.633030][ T6071] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.648669][ T6071] usb 3-1: Product: syz
[  171.678586][ T4297] usb 4-1: USB disconnect, device number 7
[  171.681028][ T6071] usb 3-1: Manufacturer: syz
[  171.702019][ T6071] usb 3-1: SerialNumber: syz
[  171.796709][ T6459] loop4: detected capacity change from 0 to 512
[  171.859612][ T6459] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  171.928073][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.980993][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.989027][ T6459] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.068876][ T6071] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  172.080168][   T32] usb 3-1: Failed to submit usb control message: -71
[  172.092074][ T6071] usb 3-1: USB disconnect, device number 5
[  172.150317][   T32] usb 3-1: unable to send the bmi data to the device: -71
[  172.197496][   T32] usb 3-1: unable to get target info from device
[  172.224804][   T32] usb 3-1: could not get target info (-71)
[  172.285436][   T32] usb 3-1: could not probe fw (-71)
[  172.342136][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  172.642013][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  173.177418][ T6503] syz.2.775 sent an empty control message without MSG_MORE.
[  173.446693][ T6513] Failed to get privilege flags for destination (handle=0x2:0x0)
[  173.670473][ T6521] tap0: tun_chr_ioctl cmd 1074025678
[  173.690000][ T6521] tap0: group set to 0
[  173.746119][ T6523] loop4: detected capacity change from 0 to 2048
[  173.798840][ T6523] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  173.894124][ T6524] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.190381][ T6529] loop3: detected capacity change from 0 to 2048
[  174.190616][ T6532] input: syz1 as /devices/virtual/input/input12
[  174.351908][ T6529] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  174.536518][ T6539] sctp: [Deprecated]: syz.1.790 (pid 6539) Use of int in max_burst socket option deprecated.
[  174.536518][ T6539] Use struct sctp_assoc_value instead
[  174.610327][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  175.239750][ T6549] loop3: detected capacity change from 0 to 8192
[  175.251329][ T6553] loop1: detected capacity change from 0 to 2048
[  175.293479][ T6553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  175.318778][ T6553] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.390162][ T6549] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  175.476088][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  175.518037][ T6549] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  175.544995][ T6543] loop5: detected capacity change from 0 to 32768
[  175.596429][ T6549] REISERFS (device loop3): using ordered data mode
[  175.661216][ T6543] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  175.696191][ T6549] reiserfs: using flush barriers
[  175.719809][ T6543] (syz.5.792,6543,0):ocfs2_clear_journal_error:1114 ERROR: File system error -318767104 recorded in journal 0.
[  175.752230][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.799'.
[  175.821849][ T6543] (syz.5.792,6543,0):ocfs2_clear_journal_error:1116 ERROR: File system on device loop5 needs checking.
[  175.845993][ T6549] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.882425][ T6543] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  175.932957][ T6549] REISERFS (device loop3): checking transaction log (loop3)
[  175.944426][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  175.944442][   T26] audit: type=1800 audit(1748870106.439:1312): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.792" name="file2" dev="loop5" ino=17058 res=0 errno=0
[  176.001544][ T6549] REISERFS (device loop3): Using rupasov hash to sort names
[  176.017695][ T6549] REISERFS (device loop3): using 3.5.x disk format
[  176.029428][ T6549] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.056685][ T6549] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.104552][ T5136] ocfs2: Unmounting device (7,5) on (node local)
[  176.183431][ T6549] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.295960][ T6549] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  176.341193][ T6576] syzkaller0: tun_chr_ioctl cmd 1074025677
[  176.370842][ T6576] syzkaller0: linktype set to 823
[  176.454650][ T6549] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.563192][ T6549] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  176.884693][ T6584] loop2: detected capacity change from 0 to 2048
[  176.929786][ T6584] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  177.472794][ T6071] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  177.674605][ T6071] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  177.703851][ T6071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.738800][ T6071] usb 3-1: config 0 descriptor??
[  177.768650][ T6071] cp210x 3-1:0.0: cp210x converter detected
[  177.825552][ T6604] loop1: detected capacity change from 0 to 2048
[  177.835244][ T6586] loop4: detected capacity change from 0 to 32768
[  177.850253][ T6590] loop5: detected capacity change from 0 to 32768
[  177.876766][ T6586] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  177.906716][ T6590] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  177.952034][ T6602] loop3: detected capacity change from 0 to 4096
[  177.992096][ T6604] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  178.010782][ T6604] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.292895][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  178.350921][ T5117] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  178.382219][ T6071] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  178.391512][ T6071] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  178.430270][ T6071] usb 3-1: cp210x converter now attached to ttyUSB0
[  178.464849][ T5171] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  178.487709][ T6611] loop1: detected capacity change from 0 to 512
[  178.505657][ T6071] usb 3-1: USB disconnect, device number 6
[  178.534633][ T6071] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  178.574415][ T6071] cp210x 3-1:0.0: device disconnected
[  178.577347][ T5117] usb 5-1: config 0 has an invalid interface number: 120 but max is 0
[  178.620844][ T5117] usb 5-1: config 0 has no interface number 0
[  178.633032][ T6611] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  178.656381][ T5117] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  178.678824][ T6611] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.701492][ T5117] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid maxpacket 255, setting to 64
[  178.730926][ T6602] ntfs3: loop3: try to read out of volume at offset 0x3fffffc7000
[  178.745593][ T5117] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  178.786618][ T5117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.807977][   T26] audit: type=1800 audit(1748870109.299:1313): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.820" name="file1" dev="loop1" ino=15 res=0 errno=0
[  178.861719][ T5117] usb 5-1: config 0 descriptor??
[  178.867472][ T6609] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  178.900727][   T26] audit: type=1800 audit(1748870109.329:1314): pid=6618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.820" name="file2" dev="loop1" ino=16 res=0 errno=0
[  178.927432][ T5117] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input13
[  178.981798][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  179.023027][    C0] usbtouchscreen 5-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1
[  179.217633][ T5117] usb 5-1: USB disconnect, device number 5
[  179.704133][ T6072] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  179.718071][ T6073] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  179.910719][ T6072] usb 6-1: Using ep0 maxpacket: 32
[  179.918724][ T6073] usb 2-1: config 0 has an invalid interface number: 242 but max is 0
[  179.936755][ T6072] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  179.951855][ T6073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.968880][ T6072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.980809][ T6073] usb 2-1: config 0 has no interface number 0
[  179.993124][ T6072] usb 6-1: config 0 descriptor??
[  179.999415][ T6073] usb 2-1: config 0 interface 242 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7
[  180.023224][ T6073] usb 2-1: config 0 interface 242 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 15
[  180.060370][ T6073] usb 2-1: config 0 interface 242 has no altsetting 0
[  180.076546][ T6073] usb 2-1: New USB device found, idVendor=8b63, idProduct=6fac, bcdDevice=80.95
[  180.091808][ T6073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.105571][ T6073] usb 2-1: Product: syz
[  180.112091][ T6073] usb 2-1: Manufacturer: syz
[  180.127493][ T6073] usb 2-1: SerialNumber: syz
[  180.150366][ T6073] usb 2-1: config 0 descriptor??
[  180.221479][ T6072] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  180.234070][ T6072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  180.254353][ T6072] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  180.269824][ T6072] usb 6-1: media controller created
[  180.319233][ T6072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  180.387341][ T6071] usb 2-1: USB disconnect, device number 6
[  180.430464][ T6072] az6027: usb out operation failed. (-71)
[  180.440838][ T6072] az6027: usb out operation failed. (-71)
[  180.467115][ T6072] stb0899_attach: Driver disabled by Kconfig
[  180.477261][ T6072] az6027: no front-end attached
[  180.477261][ T6072] 
[  180.498832][ T6072] az6027: usb out operation failed. (-71)
[  180.528030][ T6072] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  180.546106][ T6072] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input14
[  180.582442][ T6072] dvb-usb: schedule remote query interval to 400 msecs.
[  180.620577][ T6072] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  180.636885][ T6072] usb 6-1: USB disconnect, device number 4
[  180.756429][ T6072] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  181.060868][ T6071] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  181.144477][ T6648] loop4: detected capacity change from 0 to 40427
[  181.177927][ T6648] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x3ffff
[  181.230899][ T6648] F2FS-fs (loop4): invalid crc value
[  181.260769][ T6071] usb 3-1: Using ep0 maxpacket: 16
[  181.273510][ T6071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.284710][ T6648] F2FS-fs (loop4): Found nat_bits in checkpoint
[  181.316867][ T6071] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.347157][ T6071] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  181.390618][ T6071] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  181.420454][ T6071] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.441039][ T6073] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  181.441133][ T6648] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  181.452759][ T6071] usb 3-1: config 0 descriptor??
[  181.640611][ T6073] usb 6-1: Using ep0 maxpacket: 8
[  181.667200][ T6658] netlink: 'syz.5.840': attribute type 4 has an invalid length.
[  181.712628][ T6073] usb 6-1: unable to get BOS descriptor or descriptor too short
[  181.738264][ T6073] usb 6-1: unable to read config index 0 descriptor/start: -71
[  181.770778][ T6073] usb 6-1: can't read configurations, error -71
[  181.904136][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  181.917373][ T6071] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  181.949481][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  181.962446][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  181.969918][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  181.995807][ T5117] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  182.000602][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.020631][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.028187][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.060902][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.068959][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.120896][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.128237][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.140595][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.171333][ T6071] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  182.191143][ T5117] usb 5-1: Using ep0 maxpacket: 32
[  182.208690][ T6652] loop3: detected capacity change from 0 to 32768
[  182.215784][ T6071] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0008/input/input16
[  182.219924][ T5117] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  182.266028][ T5117] usb 5-1: config 0 has no interface number 0
[  182.309160][ T5117] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  182.328974][ T5117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.330087][ T6071] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  182.349291][ T5117] usb 5-1: Product: syz
[  182.354358][ T5117] usb 5-1: Manufacturer: syz
[  182.359002][ T5117] usb 5-1: SerialNumber: syz
[  182.366184][ T5117] usb 5-1: config 0 descriptor??
[  182.382773][ T5117] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  182.409505][ T6071] usb 3-1: USB disconnect, device number 7
[  182.496672][ T6652] XFS (loop3): Mounting V5 Filesystem
[  182.595751][ T5117] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  182.718977][ T5117] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  182.809950][ T6652] XFS (loop3): Ending clean mount
[  182.866340][ T6652] XFS (loop3): Quotacheck needed: Please wait.
[  183.036296][ T6684] fido_id[6684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  183.041309][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  183.092442][ T5117] usb 5-1: USB disconnect, device number 6
[  183.112931][ T5117] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  183.136727][ T5117] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  183.148702][ T5117] quatech2 5-1:0.51: device disconnected
[  183.156783][ T6652] XFS (loop3): Quotacheck: Done.
[  183.298403][ T4264] XFS (loop3): Unmounting Filesystem
[  183.724674][ T6707] loop5: detected capacity change from 0 to 4096
[  183.748709][ T6709] loop1: detected capacity change from 0 to 8
[  183.789466][ T6707] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  183.867821][   T26] audit: type=1800 audit(1748870114.359:1315): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.859" name="file0" dev="loop5" ino=0 res=0 errno=0
[  183.898047][ T6713] loop2: detected capacity change from 0 to 128
[  183.918937][ T6707] ntfs3: loop5: no free space to extend mft
[  184.080290][ T6713] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  184.190840][ T6713] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  184.272789][ T6717] loop3: detected capacity change from 0 to 2048
[  184.376019][ T6717] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  184.442402][ T6717] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  184.560331][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  184.569314][ T6725] netlink: 36 bytes leftover after parsing attributes in process `syz.1.865'.
[  184.691087][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  184.889733][ T6711] loop4: detected capacity change from 0 to 32768
[  184.925756][ T6733] loop1: detected capacity change from 0 to 128
[  184.943274][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.868'.
[  184.997055][ T6733] FAT-fs (loop1): Directory bread(block 162) failed
[  185.006970][ T6733] FAT-fs (loop1): Directory bread(block 163) failed
[  185.029228][ T6733] FAT-fs (loop1): Directory bread(block 164) failed
[  185.075409][ T6733] FAT-fs (loop1): Directory bread(block 165) failed
[  185.095201][ T6738] loop5: detected capacity change from 0 to 128
[  185.111883][ T6733] FAT-fs (loop1): Directory bread(block 166) failed
[  185.118807][ T6733] FAT-fs (loop1): Directory bread(block 167) failed
[  185.125604][ T6733] FAT-fs (loop1): Directory bread(block 168) failed
[  185.127795][ T6711] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  185.137525][ T6733] FAT-fs (loop1): Directory bread(block 169) failed
[  185.186583][ T6741] loop3: detected capacity change from 0 to 512
[  185.205366][ T6741] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  185.244189][ T6733] FAT-fs (loop1): Directory bread(block 162) failed
[  185.254473][ T6738] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  185.294820][ T6733] FAT-fs (loop1): Directory bread(block 163) failed
[  185.303074][ T6738] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  185.364769][ T6741] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  185.455661][ T6741] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  185.508031][ T4259] ocfs2: Unmounting device (7,4) on (node local)
[  185.520747][ T6741] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  185.552975][ T6741] System zones: 0-2, 18-18, 34-34
[  185.615221][ T6741] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  185.617227][ T6747] loop1: detected capacity change from 0 to 4096
[  185.663904][ T6741] EXT4-fs (loop3): 1 truncate cleaned up
[  185.684583][ T6741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  185.734458][ T6747] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  185.815203][   T26] audit: type=1800 audit(1748870116.309:1316): pid=6741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.872" name="file1" dev="loop3" ino=15 res=0 errno=0
[  185.856647][ T6752] loop2: detected capacity change from 0 to 16
[  185.874999][ T6747] ntfs3: loop1: no free space to extend mft
[  185.922381][ T6752] erofs: (device loop2): mounted with root inode @ nid 36.
[  185.930761][   T26] audit: type=1800 audit(1748870116.309:1317): pid=6747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.875" name="file0" dev="loop1" ino=0 res=0 errno=0
[  186.005111][ T6752] syz.2.877: attempt to access beyond end of device
[  186.005111][ T6752] loop2: rw=0, sector=8, nr_sectors = 16 limit=16
[  186.098025][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  186.107581][ T6754] syz.2.877: attempt to access beyond end of device
[  186.107581][ T6754] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16
[  186.221122][ T6754] syz.2.877: attempt to access beyond end of device
[  186.221122][ T6754] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16
[  186.634814][ T6771] loop5: detected capacity change from 0 to 8
[  186.680790][ T6772] vcan0: tx drop: invalid da for name 0x00000000000000f5
[  186.890829][ T5117] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  187.075431][ T6776] loop2: detected capacity change from 0 to 8192
[  187.090783][ T5117] usb 2-1: Using ep0 maxpacket: 8
[  187.141372][ T6770] netlink: 'syz.1.884': attribute type 4 has an invalid length.
[  187.176113][ T5117] usb 2-1: unable to get BOS descriptor or descriptor too short
[  187.208337][ T5117] usb 2-1: unable to read config index 0 descriptor/start: -71
[  187.225167][ T5117] usb 2-1: can't read configurations, error -71
[  187.358233][ T6786] loop4: detected capacity change from 0 to 4096
[  187.410988][ T4297] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  187.605968][ T4259] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  187.613101][ T4297] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.616892][ T4297] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  187.648987][ T4259] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  187.667142][ T4297] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.675613][   T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  187.690652][ T4297] usb 6-1: Product: syz
[  187.705843][ T4297] usb 6-1: Manufacturer: syz
[  187.711122][ T4297] usb 6-1: SerialNumber: syz
[  187.870648][   T14] usb 4-1: Using ep0 maxpacket: 16
[  187.890317][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.906618][   T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.916849][   T14] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  187.930182][   T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  187.961775][ T4297] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  187.973183][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.002703][   T14] usb 4-1: config 0 descriptor??
[  188.181415][ T4298] usb 6-1: USB disconnect, device number 7
[  188.208648][ T4298] usblp0: removed
[  188.433810][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.447492][   T14] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[  188.458045][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.472614][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.479984][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.503087][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.504327][ T6796] loop4: detected capacity change from 0 to 32768
[  188.520803][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.538373][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.551955][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.568622][ T6796] XFS (loop4): Mounting V5 Filesystem
[  188.570056][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.583059][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.590363][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.599461][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.607342][   T14] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  188.669586][   T14] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input17
[  188.687845][ T6796] XFS (loop4): Ending clean mount
[  188.697496][ T6796] XFS (loop4): Quotacheck needed: Please wait.
[  188.758165][   T14] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  188.841062][   T14] usb 4-1: USB disconnect, device number 8
[  188.882446][ T6796] XFS (loop4): Quotacheck: Done.
[  189.157735][ T4259] XFS (loop4): Unmounting Filesystem
[  189.179577][ T6813] fido_id[6813]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  189.746376][ T6833] loop3: detected capacity change from 0 to 8
[  189.830888][ T6071] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  189.980654][ T6080] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  190.028300][ T6839] loop4: detected capacity change from 0 to 128
[  190.050917][ T6071] usb 6-1: Using ep0 maxpacket: 32
[  190.074461][ T6071] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  190.086253][ T6839] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  190.098490][ T6839] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  190.120573][ T6071] usb 6-1: config 0 has no interface number 0
[  190.180881][ T6080] usb 3-1: Using ep0 maxpacket: 8
[  190.193937][ T6830] netlink: 'syz.2.910': attribute type 4 has an invalid length.
[  190.282496][ T6071] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  190.300454][ T6080] usb 3-1: unable to get BOS descriptor or descriptor too short
[  190.319796][ T6080] usb 3-1: unable to read config index 0 descriptor/start: -71
[  190.341863][ T6071] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.349920][ T6071] usb 6-1: Product: syz
[  190.364737][ T6080] usb 3-1: can't read configurations, error -71
[  190.387073][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  190.390957][ T6071] usb 6-1: Manufacturer: syz
[  190.397473][ T6071] usb 6-1: SerialNumber: syz
[  190.413234][ T6071] usb 6-1: config 0 descriptor??
[  190.431697][ T6071] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  190.630074][ T6071] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  190.653507][ T6071] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  190.810731][ T4298] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  190.938141][ T6851] loop1: detected capacity change from 0 to 32768
[  190.974697][ T6851] XFS (loop1): Mounting V5 Filesystem
[  191.000893][ T4298] usb 5-1: Using ep0 maxpacket: 16
[  191.009760][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.015655][ T6851] XFS (loop1): Ending clean mount
[  191.028533][ T4298] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.029245][ T6851] XFS (loop1): Quotacheck needed: Please wait.
[  191.039559][ T4298] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.067349][ T4298] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.078386][ T4298] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.091572][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  191.114224][ T4298] usb 5-1: config 0 descriptor??
[  191.123091][ T4297] usb 6-1: USB disconnect, device number 8
[  191.142783][ T4297] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  191.183358][ T4297] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  191.200282][ T4297] quatech2 6-1:0.51: device disconnected
[  191.269980][ T6851] XFS (loop1): Quotacheck: Done.
[  191.385029][ T4251] XFS (loop1): Unmounting Filesystem
[  191.534329][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.550769][ T4298] microsoft 0003:045E:07DA.000A: ignoring exceeding usage max
[  191.561905][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.569371][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.577371][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.586877][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.596281][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.604433][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.620871][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.634162][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.650678][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.679751][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.705338][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.731788][ T4298] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  191.765680][ T4298] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000A/input/input18
[  191.795022][ T6867] loop1: detected capacity change from 0 to 128
[  191.846522][   T26] audit: type=1800 audit(1748870122.339:1318): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.922" name="file1" dev="loop1" ino=1048626 res=0 errno=0
[  191.877977][ T6867] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8)
[  191.878271][ T4298] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  191.893033][ T6867] FAT-fs (loop1): Filesystem has been set read-only
[  191.955267][ T4298] usb 5-1: USB disconnect, device number 7
[  191.960829][ T6867] FAT-fs (loop1): error, corrupted file size (i_pos 548, 522)
[  192.176584][ T6871] loop2: detected capacity change from 0 to 4096
[  192.270398][ T6871] ntfs: volume version 3.1.
[  192.422021][ T6872] fido_id[6872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  192.804501][ T6886] loop1: detected capacity change from 0 to 128
[  192.880036][ T6886] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  192.978504][ T6862] loop3: detected capacity change from 0 to 32768
[  193.040288][ T6891] loop4: detected capacity change from 0 to 1024
[  193.041633][ T6862] XFS: ikeep mount option is deprecated.
[  193.054844][ T6886] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  193.111689][ T6891] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  193.143904][ T6891] overlayfs: upper fs does not support tmpfile.
[  193.247373][ T6862] XFS (loop3): Mounting V5 Filesystem
[  193.311731][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  193.339396][ T4259] EXT4-fs (loop4): unmounting filesystem.
[  193.375501][ T6862] XFS (loop3): Ending clean mount
[  193.463314][ T6862] XFS (loop3): Quotacheck needed: Please wait.
[  193.642362][ T6862] XFS (loop3): Quotacheck: Done.
[  193.736618][ T6883] loop2: detected capacity change from 0 to 40427
[  193.785726][ T6883] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x3ffff
[  193.825744][ T6883] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x2
[  193.880039][ T6883] F2FS-fs (loop2): invalid crc value
[  193.884957][   T14] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  193.912600][ T4264] XFS (loop3): Unmounting Filesystem
[  193.922693][ T6883] F2FS-fs (loop2): Found nat_bits in checkpoint
[  194.090721][   T14] usb 2-1: Using ep0 maxpacket: 32
[  194.102163][   T14] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  194.110415][   T14] usb 2-1: config 0 has no interface number 0
[  194.111541][ T6912] loop4: detected capacity change from 0 to 128
[  194.138342][   T14] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  194.156235][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.162670][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.198743][ T6883] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  194.202840][   T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.223633][   T14] usb 2-1: Product: syz
[  194.227944][   T14] usb 2-1: Manufacturer: syz
[  194.233815][   T14] usb 2-1: SerialNumber: syz
[  194.240463][   T14] usb 2-1: config 0 descriptor??
[  194.255062][   T14] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  194.255713][   T26] audit: type=1800 audit(1748870124.749:1319): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.938" name="file1" dev="loop4" ino=1048627 res=0 errno=0
[  194.298963][ T6912] FAT-fs (loop4): error, invalid FAT chain (i_pos 548, last_block 8)
[  194.337327][ T6915] loop5: detected capacity change from 0 to 2048
[  194.370796][ T6912] FAT-fs (loop4): Filesystem has been set read-only
[  194.387992][ T6912] FAT-fs (loop4): error, corrupted file size (i_pos 548, 522)
[  194.463965][   T14] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  194.479547][ T6915] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  194.512929][   T14] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  194.515743][ T6915] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  194.639424][ T4260] syz-executor: attempt to access beyond end of device
[  194.639424][ T4260] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  194.782704][ T5136] EXT4-fs (loop5): unmounting filesystem.
[  194.931354][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  194.950991][   T14] usb 2-1: USB disconnect, device number 9
[  194.969942][ T6919] loop4: detected capacity change from 0 to 4096
[  194.990253][   T14] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  195.055392][ T6919] ntfs: volume version 3.1.
[  195.071459][   T14] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  195.120841][   T14] quatech2 2-1:0.51: device disconnected
[  195.240788][ T6072] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  195.433330][ T6072] usb 6-1: Using ep0 maxpacket: 16
[  195.442817][ T6072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.478612][ T6072] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.502379][ T6929] loop4: detected capacity change from 0 to 4096
[  195.506509][ T6072] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  195.553077][ T6072] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  195.600600][ T6072] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.650288][ T6072] usb 6-1: config 0 descriptor??
[  195.695679][ T6929] ntfs3: loop4: try to read out of volume at offset 0x3fffffc7000
[  195.713696][ T6937] tap0: tun_chr_ioctl cmd 1074025678
[  195.762710][ T6937] tap0: group set to 0
[  195.778758][ T6938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.945'.
[  195.798312][ T6938] device vlan2 entered promiscuous mode
[  195.810743][ T6938] device bridge0 entered promiscuous mode
[  196.063544][ T6942] loop4: detected capacity change from 0 to 2048
[  196.071305][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.950'.
[  196.085419][ T6944] loop2: detected capacity change from 0 to 1024
[  196.105908][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.118502][ T6942] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.141179][ T6072] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max
[  196.154811][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.203698][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.223856][ T6948] device team_slave_0 entered promiscuous mode
[  196.225681][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.230196][ T6948] device team_slave_1 entered promiscuous mode
[  196.244603][ T4262] Bluetooth: hci3: command 0x0406 tx timeout
[  196.244615][ T4257] Bluetooth: hci0: command 0x0406 tx timeout
[  196.262636][ T6948] device macsec1 entered promiscuous mode
[  196.281580][ T6948] device team0 entered promiscuous mode
[  196.290290][ T6944] hfsplus: request for non-existent node 2048 in B*Tree
[  196.298826][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.325677][ T6948] device team0 left promiscuous mode
[  196.332172][ T6948] device team_slave_0 left promiscuous mode
[  196.333346][ T6944] hfsplus: request for non-existent node 2048 in B*Tree
[  196.338173][ T6948] device team_slave_1 left promiscuous mode
[  196.353570][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.395417][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.437910][ T6951] hfsplus: request for non-existent node 2048 in B*Tree
[  196.448932][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.481161][ T6951] hfsplus: request for non-existent node 2048 in B*Tree
[  196.482591][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.539118][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.562564][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.569864][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.613859][ T6072] microsoft 0003:045E:07DA.000B: unknown main item tag 0x0
[  196.638167][ T6072] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.000B/input/input19
[  196.734144][ T6072] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  196.818447][ T6072] usb 6-1: USB disconnect, device number 9
[  196.945650][ T6965] loop4: detected capacity change from 0 to 1024
[  197.106598][ T6960] fido_id[6960]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  197.356727][ T6975] input: syz1 as /devices/virtual/input/input20
[  197.444212][ T6978] tap0: tun_chr_ioctl cmd 1074025678
[  197.449577][ T6978] tap0: group set to 0
[  197.694997][ T6986] loop1: detected capacity change from 0 to 2048
[  197.739324][ T6073] kernel read not supported for file /swradio0 (pid: 6073 comm: kworker/1:11)
[  197.741727][ T6986] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.788485][ T6982] xt_CT: No such helper "snmp"
[  198.028427][ T6994] loop5: detected capacity change from 0 to 1024
[  198.126338][ T6994] hfsplus: request for non-existent node 2048 in B*Tree
[  198.150950][ T6994] hfsplus: request for non-existent node 2048 in B*Tree
[  198.180412][ T6999] hfsplus: request for non-existent node 2048 in B*Tree
[  198.194769][ T6999] hfsplus: request for non-existent node 2048 in B*Tree
[  198.589063][ T7014] tipc: Started in network mode
[  198.594159][ T7014] tipc: Node identity ac14140f, cluster identity 4711
[  198.617384][ T7014] tipc: New replicast peer: 255.255.255.255
[  198.675424][ T7014] tipc: Enabled bearer <udp:syz2>, priority 10
[  198.729908][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'.
[  198.800727][ T7015] tipc: Disabling bearer <udp:syz2>
[  199.076093][ T7027] loop2: detected capacity change from 0 to 1024
[  199.097281][ T7027] hfsplus: unable to parse mount options
[  199.132266][ T7028] loop4: detected capacity change from 0 to 2048
[  199.255793][ T7029] loop5: detected capacity change from 0 to 4096
[  199.374834][ T7029] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  199.384144][ T6072] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  199.467566][ T7029] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.980: corrupted inode contents
[  199.501334][ T7029] EXT4-fs error (device loop5): ext4_dirty_inode:6118: inode #15: comm syz.5.980: mark_inode_dirty error
[  199.517787][ T7028] UDF-fs: iocharset maccenteuƒo not found
[  199.560462][ T7029] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.980: corrupted inode contents
[  199.584467][ T6072] usb 3-1: Using ep0 maxpacket: 32
[  199.594368][ T6072] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  199.638237][ T7029] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.980: mark_inode_dirty error
[  199.660696][ T6072] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  199.710389][ T6072] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  199.725760][ T7029] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.980: corrupted inode contents
[  199.728440][ T6072] usb 3-1: config 1 has no interface number 0
[  199.770587][ T6072] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  199.788146][ T7019] loop1: detected capacity change from 0 to 32768
[  199.830616][ T6072] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  199.865611][ T7019] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.977 (7019)
[  199.872140][ T7039] netlink: 'syz.4.985': attribute type 3 has an invalid length.
[  199.900695][ T6072] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  199.903573][ T7029] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.980: mark_inode_dirty error
[  199.909985][ T6072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.999330][ T7019] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  200.011970][ T6072] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  200.025806][ T7029] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.980: corrupted inode contents
[  200.048752][ T7019] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  200.078833][ T7019] BTRFS info (device loop1): using free space tree
[  200.131012][ T7029] EXT4-fs error (device loop5): ext4_truncate:4312: inode #15: comm syz.5.980: mark_inode_dirty error
[  200.148926][ T7029] EXT4-fs error (device loop5) in ext4_setattr:5657: Corrupt filesystem
[  200.201798][ T6072] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  200.210578][ T4298] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  200.306646][ T7019] BTRFS info (device loop1): enabling ssd optimizations
[  200.410169][ T4298] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  200.439101][ T4298] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.470900][ T4251] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  200.498024][ T4298] usb 4-1: config 0 has no interface number 0
[  200.515385][ T4298] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  200.572005][ T4298] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.640275][ T4298] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  200.686866][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.721583][ T4298] usb 4-1: Product: syz
[  200.738884][ T4298] usb 4-1: Manufacturer: syz
[  200.775958][ T4298] usb 4-1: SerialNumber: syz
[  200.811437][ T4298] usb 4-1: config 0 descriptor??
[  201.113957][ T7029] EXT4-fs error (device loop5): ext4_do_update_inode:5253: inode #15: comm syz.5.980: corrupted inode contents
[  201.132510][   T33] usb 3-1: USB disconnect, device number 10
[  201.148491][   T33] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  201.202155][ T7065] loop1: detected capacity change from 0 to 64
[  201.241302][ T5136] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  201.307351][ T5136] EXT4-fs (loop5): unmounting filesystem.
[  201.446907][ T7067] 8021q: adding VLAN 0 to HW filter on device bond1
[  201.483604][ T4298] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input21
[  201.493617][ T7067] bond0: (slave bond1): Enslaving as an active interface with an up link
[  201.740596][ T4298] usb 4-1: USB disconnect, device number 9
[  201.745906][ T5171] udevd[5171]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory
[  202.216087][ T7079] dummy0: default FDB implementation only supports local addresses
[  202.256177][ T7081] tap0: tun_chr_ioctl cmd 2147767507
[  202.595494][ T7087] loop5: detected capacity change from 0 to 4096
[  202.682622][ T7088] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  202.869384][ T7092] loop1: detected capacity change from 0 to 512
[  202.960313][ T7092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  203.025830][ T7092] EXT4-fs (loop1): 1 truncate cleaned up
[  203.062165][ T7092] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  203.213717][   T26] audit: type=1804 audit(1748870133.709:1320): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1001" name="/newroot/194/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  203.307697][ T7085] loop3: detected capacity change from 0 to 40427
[  203.348693][ T4251] EXT4-fs (loop1): unmounting filesystem.
[  203.380357][ T7085] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  203.406990][ T7100] loop2: detected capacity change from 0 to 8
[  203.428723][ T7085] F2FS-fs (loop3): invalid crc value
[  203.450097][ T7105] loop5: detected capacity change from 0 to 64
[  203.514327][ T7085] F2FS-fs (loop3): Found nat_bits in checkpoint
[  203.792131][ T7085] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  203.943322][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1011'.
[  204.057555][ T7121] __sock_release: fasync list not empty!
[  204.138457][ T7123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1014'.
[  204.217449][ T4264] syz-executor: attempt to access beyond end of device
[  204.217449][ T4264] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.231984][ T7127] autofs4:pid:7127:autofs_fill_super: could not open pipe file descriptor
[  204.710860][   T14] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  204.916966][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  204.955566][   T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  204.987494][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.041015][   T14] usb 2-1: config 0 descriptor??
[  205.046723][ T7131] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  205.486307][   T14] arvo 0003:1E7D:30D4.000C: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  205.515318][ T7135] loop5: detected capacity change from 0 to 32768
[  205.599886][ T7134] loop4: detected capacity change from 0 to 32768
[  205.657131][ T7135] XFS (loop5): Mounting V5 Filesystem
[  205.706155][   T14] usb 2-1: USB disconnect, device number 10
[  205.764929][ T7139] fido_id[7139]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  205.865138][ T7134] XFS (loop4): Mounting V5 Filesystem
[  205.922760][ T7135] XFS (loop5): Ending clean mount
[  205.954470][ T7135] XFS (loop5): Quotacheck needed: Please wait.
[  206.095174][ T7134] XFS (loop4): Ending clean mount
[  206.101427][ T7135] XFS (loop5): Quotacheck: Done.
[  206.109510][ T7134] XFS (loop4): Quotacheck needed: Please wait.
[  206.260284][ T7134] XFS (loop4): Quotacheck: Done.
[  206.347192][ T5136] XFS (loop5): Unmounting Filesystem
[  206.508982][ T4259] XFS (loop4): Unmounting Filesystem
[  206.628363][ T7166] loop1: detected capacity change from 0 to 8
[  207.305376][ T7169] loop1: detected capacity change from 0 to 32768
[  207.318254][ T7169] XFS: ikeep mount option is deprecated.
[  207.325993][ T7169] XFS: noikeep mount option is deprecated.
[  207.388047][ T7169] XFS (loop1): Mounting V5 Filesystem
[  207.465914][ T7169] XFS (loop1): Ending clean mount
[  207.483001][ T7169] XFS (loop1): Quotacheck needed: Please wait.
[  207.586898][ T7169] XFS (loop1): Quotacheck: Done.
[  207.607817][ T7178] loop2: detected capacity change from 0 to 32768
[  207.653323][ T7178] 
[  207.653323][ T7178]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.653323][ T7178] 
[  207.746924][ T4251] XFS (loop1): Unmounting Filesystem
[  207.869840][   T46] ERROR: (device loop2): diWrite: ixpxd invalid
[  207.869840][   T46] 
[  207.888924][   T46] ERROR: (device loop2): txCommit: 
[  207.888924][   T46] 
[  207.897786][   T46] jfs_write_inode: jfs_commit_inode failed!
[  207.911793][ T4260] 
[  207.911793][ T4260]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.911793][ T4260] 
[  207.969248][ T4260] 
[  207.969248][ T4260]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  207.969248][ T4260] 
[  208.260458][ T7193] loop5: detected capacity change from 0 to 256
[  208.271723][   T33] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  208.298246][ T7193] UDF-fs: bad mount option "00000000000000000000003" or missing value
[  208.671688][ T7194] fido_id[7194]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  208.914533][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'.
[  209.299606][ T7217] loop4: detected capacity change from 0 to 4096
[  209.369210][ T7217] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  209.478353][ T7217] ntfs: (device loop4): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  209.524761][ T7217] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  209.573754][ T7217] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  209.623309][ T7217] ntfs: volume version 3.1.
[  209.956966][   T32] ntfs: (device loop4): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  209.993471][ T4259] ntfs: (device loop4): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  210.167940][ T7238] loop3: detected capacity change from 0 to 512
[  210.203974][ T7238] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  210.364476][ T7238] EXT4-fs (loop3): 1 truncate cleaned up
[  210.370200][ T7238] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  210.392098][ T7248] netlink: 'syz.4.1061': attribute type 7 has an invalid length.
[  210.492375][ T7250] loop4: detected capacity change from 0 to 256
[  210.558934][ T7238] EXT4-fs (loop3): shut down requested (1)
[  210.609279][ T7256] loop2: detected capacity change from 0 to 1024
[  210.733205][   T46] hfsplus: b-tree write err: -5, ino 4
[  210.745555][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  210.830588][ T6071] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  210.859307][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1064'.
[  211.040625][ T6071] usb 6-1: Using ep0 maxpacket: 8
[  211.048243][ T6071] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  211.100732][ T6071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  211.115491][ T6071] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  211.150584][ T6071] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.164253][ T6071] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  211.174150][ T6071] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.356778][ T4298] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  211.416979][ T6071] usb 6-1: GET_CAPABILITIES returned 0
[  211.426030][ T6071] usbtmc 6-1:16.0: can't read capabilities
[  211.554082][ T4298] usb 3-1: Using ep0 maxpacket: 16
[  211.568435][ T4298] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[  211.592612][ T4298] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  211.628955][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.659861][ T4317] usb 6-1: USB disconnect, device number 10
[  211.667179][ T4298] usb 3-1: Product: syz
[  211.675795][ T4298] usb 3-1: Manufacturer: syz
[  211.697208][ T4298] usb 3-1: SerialNumber: syz
[  211.735588][ T4298] usb 3-1: config 0 descriptor??
[  211.756328][ T4298] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  211.774590][ T4298] usb 3-1: Detected FT232R
[  211.838343][ T7269] loop1: detected capacity change from 0 to 32768
[  211.902675][   T26] audit: type=1800 audit(1748870142.399:1321): pid=7269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1068" name="file1" dev="loop1" ino=7 res=0 errno=0
[  211.959386][ T4298] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  212.150309][ T7291] loop4: detected capacity change from 0 to 64
[  212.190978][ T4298] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  212.398933][ T4298] usb 3-1: USB disconnect, device number 11
[  212.444207][ T4298] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  212.489677][ T4298] ftdi_sio 3-1:0.0: device disconnected
[  212.817617][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'.
[  213.216284][ T7292] loop1: detected capacity change from 0 to 40427
[  213.266803][ T7292] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff
[  213.292732][ T7292] F2FS-fs (loop1): invalid crc value
[  213.320145][ T7292] F2FS-fs (loop1): Found nat_bits in checkpoint
[  213.384325][ T4298] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  213.431217][ T7292] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  213.527872][ T7292] F2FS-fs (loop1) : inject dquot initialize in f2fs_dquot_initialize of f2fs_evict_inode+0x505/0x17c0
[  213.531921][ T7300] loop3: detected capacity change from 0 to 32768
[  213.580974][ T4298] usb 3-1: Using ep0 maxpacket: 16
[  213.588046][ T4298] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  213.618064][ T7300] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  213.650752][ T4298] usb 3-1: config 0 has no interface number 0
[  213.658312][ T4298] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  213.732892][ T4251] syz-executor: attempt to access beyond end of device
[  213.732892][ T4251] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  213.748618][ T4298] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  213.772774][ T4298] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  213.790316][ T4251] syz-executor: attempt to access beyond end of device
[  213.790316][ T4251] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  213.834283][ T4298] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  213.850666][ T4298] usb 3-1: Product: syz
[  213.860844][ T4298] usb 3-1: SerialNumber: syz
[  213.868050][ T4298] usb 3-1: config 0 descriptor??
[  213.911957][ T4298] cm109 3-1:0.8: invalid payload size 0, expected 4
[  213.919846][ T4298] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input22
[  213.989660][ T5171] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  214.089097][ T7313] loop4: detected capacity change from 0 to 8192
[  214.168954][ T4309] kworker/u4:6: attempt to access beyond end of device
[  214.168954][ T4309] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  214.186299][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  214.196161][ T7313] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  214.267940][ T7313] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  214.278267][ T7313] REISERFS (device loop4): using ordered data mode
[  214.285999][ T7313] reiserfs: using flush barriers
[  214.314499][ T7313] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  214.394415][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  214.402346][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  214.416004][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  214.430580][ T4298] usb 3-1: USB disconnect, device number 12
[  214.443575][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  214.450599][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  214.465902][ T7313] REISERFS (device loop4): checking transaction log (loop4)
[  214.494693][ T4298] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  214.807772][ T7313] REISERFS (device loop4): Using tea hash to sort names
[  214.849943][ T7313] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  214.908561][   T32] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.954957][ T7328] netlink: 'syz.5.1094': attribute type 4 has an invalid length.
[  214.986460][ T7330] netlink: 'syz.3.1095': attribute type 11 has an invalid length.
[  215.035648][ T7330] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1095'.
[  215.174410][   T32] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.388809][   T32] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.598191][   T32] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.093142][   T32] tipc: Left network mode
[  216.366657][ T7336] loop3: detected capacity change from 0 to 32768
[  216.546105][ T7336] XFS (loop3): Mounting V5 Filesystem
[  216.605275][ T7359] tmpfs: Bad value for 'uid'
[  216.642227][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  216.655603][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  216.664809][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  216.681443][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  216.705364][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  216.721262][ T4257] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  216.846169][ T7336] XFS (loop3): Ending clean mount
[  216.863149][ T7336] XFS (loop3): Quotacheck needed: Please wait.
[  217.002526][ T7336] XFS (loop3): Quotacheck: Done.
[  217.078947][ T7373] loop2: detected capacity change from 0 to 1024
[  217.133211][ T4264] XFS (loop3): Unmounting Filesystem
[  217.181373][ T4317] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  217.226190][ T7373] hfsplus: bad catalog entry type
[  217.276394][   T75] hfsplus: b-tree write err: -5, ino 4
[  217.437776][ T4317] usb 5-1: Using ep0 maxpacket: 32
[  217.458569][ T4317] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  217.470444][ T4317] usb 5-1: config 0 has no interface number 0
[  217.485871][ T4317] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  217.505706][ T4317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.514030][ T4317] usb 5-1: Product: syz
[  217.518309][ T4317] usb 5-1: Manufacturer: syz
[  217.523227][ T4317] usb 5-1: SerialNumber: syz
[  217.531265][ T4317] usb 5-1: config 0 descriptor??
[  217.538739][ T4317] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  217.748854][ T4317] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  217.792650][ T7384] loop2: detected capacity change from 0 to 256
[  217.801231][ T4317] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  217.941061][   T32] IPVS: stopping master sync thread 5054 ...
[  217.979194][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.991654][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.211348][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  218.219400][ T4317] usb 5-1: USB disconnect, device number 8
[  218.248564][ T4317] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  218.299082][ T4317] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  218.341464][ T4317] quatech2 5-1:0.51: device disconnected
[  218.376015][ T7361] chnl_net:caif_netlink_parms(): no params data found
[  218.783731][ T7404] loop5: detected capacity change from 0 to 512
[  218.790926][ T4255] Bluetooth: hci0: command 0x0409 tx timeout
[  218.836505][ T7404] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  218.847941][ T7404] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)!
[  218.861735][ T7404] EXT4-fs (loop5): group descriptors corrupted!
[  218.883253][ T7402] device bond_slave_0 entered promiscuous mode
[  218.887393][ T7395] loop3: detected capacity change from 0 to 32768
[  218.889570][ T7402] device bond_slave_1 entered promiscuous mode
[  218.922207][ T7402] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  218.934126][ T7402] device bond_slave_0 left promiscuous mode
[  218.940255][ T7402] device bond_slave_1 left promiscuous mode
[  219.063553][ T7395] XFS (loop3): Mounting V5 Filesystem
[  219.258486][   T32] device hsr_slave_0 left promiscuous mode
[  219.293933][ T7395] XFS (loop3): Ending clean mount
[  219.307485][   T32] device hsr_slave_1 left promiscuous mode
[  219.324400][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  219.376907][   T32] batman_adv: batadv0: Removing interface: batadv_slave_0
[  219.402485][ T7395] XFS (loop3): User initiated shutdown received.
[  219.408927][ T7395] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499).  Shutting down filesystem.
[  219.423883][   T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  219.452359][ T7395] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  219.462840][   T32] batman_adv: batadv0: Removing interface: batadv_slave_1
[  219.498170][   T32] device bridge_slave_1 left promiscuous mode
[  219.530744][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.554436][   T32] device bridge_slave_0 left promiscuous mode
[  219.569119][ T4264] XFS (loop3): Unmounting Filesystem
[  219.571027][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.587375][ T7429] loop2: detected capacity change from 0 to 512
[  219.649671][ T7429] EXT4-fs (loop2): Test dummy encryption mode enabled
[  219.671286][ T7429] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  219.759731][ T7429] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002]
[  219.777065][   T32] device veth1_macvtap left promiscuous mode
[  219.787683][ T7429] System zones: 1-12
[  219.799182][   T32] device veth0_macvtap left promiscuous mode
[  219.848448][ T7429] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.1132: corrupted in-inode xattr
[  219.861127][   T32] device veth1_vlan left promiscuous mode
[  219.867095][   T32] device veth0_vlan left promiscuous mode
[  219.914891][ T7429] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1132: couldn't read orphan inode 15 (err -117)
[  219.937643][ T7429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  219.989055][ T7434] ceph: No source
[  220.046059][ T7429] EXT4-fs (loop2): shut down requested (2)
[  220.223389][ T4260] EXT4-fs (loop2): unmounting filesystem.
[  220.506769][ T7442] loop3: detected capacity change from 0 to 1024
[  220.634354][ T7442] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.1133: Invalid block bitmap block 0 in block_group 0
[  220.723823][ T7449] serio: Serial port ptm0
[  220.760764][ T7442] Quota error (device loop3): write_blk: dquota write failed
[  220.768387][ T7442] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  220.783518][ T7442] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.1133: Failed to acquire dquot type 0
[  220.795993][ T7442] EXT4-fs error (device loop3): ext4_free_blocks:6210: comm syz.3.1133: Freeing blocks not in datazone - block = 0, count = 4096
[  220.872714][ T4255] Bluetooth: hci0: command 0x041b tx timeout
[  220.909004][ T7442] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1133: Invalid inode bitmap blk 0 in block_group 0
[  220.923169][    T9] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-8
[  220.932437][ T7442] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  220.946600][    T9] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:0: Failed to release dquot type 0
[  220.949085][ T7442] EXT4-fs (loop3): 1 orphan inode deleted
[  220.971419][ T7442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  221.022772][ T7456] loop5: detected capacity change from 0 to 256
[  221.194667][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  221.806687][   T32] team0 (unregistering): Port device team_slave_1 removed
[  221.869473][   T32] team0 (unregistering): Port device team_slave_0 removed
[  221.930876][   T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.993555][   T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.664547][   T32] bond0 (unregistering): Released all slaves
[  222.818810][ T7361] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.836683][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.889750][ T7361] device bridge_slave_0 entered promiscuous mode
[  222.917845][ T7361] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.951032][ T4255] Bluetooth: hci0: command 0x040f tx timeout
[  222.959387][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.980791][ T7361] device bridge_slave_1 entered promiscuous mode
[  223.068367][ T7475] netlink: 820 bytes leftover after parsing attributes in process `syz.3.1158'.
[  223.149028][ T7361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.202412][ T7361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.396581][ T7361] team0: Port device team_slave_0 added
[  223.462462][ T7361] team0: Port device team_slave_1 added
[  223.562405][ T7485] loop2: detected capacity change from 0 to 256
[  223.619454][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.660695][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.740600][ T7361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.816383][ T7361] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.859120][ T7361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.921099][ T7361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.081222][ T7361] device hsr_slave_0 entered promiscuous mode
[  224.096665][ T7361] device hsr_slave_1 entered promiscuous mode
[  224.114235][ T7361] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.134169][ T7361] Cannot create hsr debugfs directory
[  224.313748][ T7501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1161'.
[  224.349916][ T7481] loop4: detected capacity change from 0 to 32768
[  224.375995][ T7503] loop3: detected capacity change from 0 to 512
[  224.453862][ T7509] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1163'.
[  224.471109][ T7509] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1163'.
[  224.479591][ T7481] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  224.497662][ T7503] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  224.532342][ T7503] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.554078][ T7481] XFS (loop4): Mounting V5 Filesystem
[  224.584148][   T26] audit: type=1800 audit(1748870155.079:1322): pid=7503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1162" name="file1" dev="loop3" ino=15 res=0 errno=0
[  224.719508][ T7361] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  224.768442][ T7481] XFS (loop4): Ending clean mount
[  224.768788][ T7361] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  224.803302][ T7481] XFS (loop4): Quotacheck needed: Please wait.
[  224.808466][ T7361] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  224.818967][ T4264] EXT4-fs (loop3): unmounting filesystem.
[  224.834136][ T7361] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  224.882178][ T4255] ------------[ cut here ]------------
[  224.888504][ T4255] WARNING: CPU: 1 PID: 4255 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x24f/0x450
[  224.898491][ T4255] Modules linked in:
[  224.902487][ T4255] CPU: 1 PID: 4255 Comm: kworker/u5:2 Not tainted 6.1.140-syzkaller #0
[  224.910792][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  224.920924][ T4255] Workqueue: hci4 hci_conn_timeout
[  224.926100][ T4255] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  224.931846][ T4255] Code: fe 8d e8 64 be b7 f8 48 8b 35 a5 f1 e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 80 38 f8 e8 41 48 66 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  224.951530][ T4255] RSP: 0018:ffffc90003d87c08 EFLAGS: 00010293
[  224.957642][ T4255] RAX: ffffffff891a8ecf RBX: ffff88807c0ea330 RCX: ffff888019ec8000
[  224.965706][ T4255] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  224.973750][ T4255] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f81d403
[  224.981809][ T4255] R10: ffffed100f81d403 R11: 1ffff1100f81d402 R12: dffffc0000000000
[  224.989835][ T4255] R13: dffffc0000000000 R14: ffff88807c0ea000 R15: ffff88807c0ea010
[  224.997907][ T4255] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  225.006930][ T4255] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  225.013683][ T4255] CR2: 00007efcb1ae56c0 CR3: 000000005bce4000 CR4: 00000000003506e0
[  225.021757][ T4255] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  225.029855][ T4255] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  225.038003][ T4255] Call Trace:
[  225.041347][ T4255]  <TASK>
[  225.044313][ T4255]  ? process_one_work+0x7a1/0x1160
[  225.049465][ T4255]  process_one_work+0x898/0x1160
[  225.054523][ T4255]  ? worker_detach_from_pool+0x240/0x240
[  225.057916][ T7481] XFS (loop4): Quotacheck: Done.
[  225.060183][ T4255]  ? _raw_spin_lock_irq+0xab/0xe0
[  225.070359][ T4255]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  225.075849][ T4255]  ? kthread_data+0x4b/0xc0
[  225.080410][ T4255]  worker_thread+0xaa2/0x1250
[  225.085227][ T4255]  ? __kthread_parkme+0x162/0x1c0
[  225.090308][ T4255]  kthread+0x29d/0x330
[  225.094481][ T4255]  ? worker_clr_flags+0x1a0/0x1a0
[  225.099548][ T4255]  ? kthread_blkcg+0xd0/0xd0
[  225.104249][ T4255]  ret_from_fork+0x1f/0x30
[  225.108749][ T4255]  </TASK>
[  225.111865][ T4255] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  225.119256][ T4255] CPU: 1 PID: 4255 Comm: kworker/u5:2 Not tainted 6.1.140-syzkaller #0
[  225.127617][ T4255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  225.137792][ T4255] Workqueue: hci4 hci_conn_timeout
[  225.142966][ T4255] Call Trace:
[  225.146267][ T4255]  <TASK>
[  225.149219][ T4255]  dump_stack_lvl+0x168/0x22e
[  225.153932][ T4255]  ? memcpy+0x3c/0x60
[  225.157931][ T4255]  ? show_regs_print_info+0x12/0x12
[  225.163141][ T4255]  ? load_image+0x3b0/0x3b0
[  225.167657][ T4255]  panic+0x2c9/0x710
[  225.171572][ T4255]  ? bpf_jit_dump+0xd0/0xd0
[  225.176107][ T4255]  ? ret_from_fork+0x1f/0x30
[  225.180729][ T4255]  __warn+0x2f8/0x4f0
[  225.184754][ T4255]  ? hci_conn_timeout+0x24f/0x450
[  225.189866][ T4255]  ? hci_conn_timeout+0x24f/0x450
[  225.194915][ T4255]  report_bug+0x2ba/0x4f0
[  225.199267][ T4255]  ? hci_conn_timeout+0x24f/0x450
[  225.204315][ T4255]  handle_bug+0x3a/0x70
[  225.208647][ T4255]  exc_invalid_op+0x16/0x40
[  225.213187][ T4255]  asm_exc_invalid_op+0x16/0x20
[  225.218062][ T4255] RIP: 0010:hci_conn_timeout+0x24f/0x450
[  225.223718][ T4255] Code: fe 8d e8 64 be b7 f8 48 8b 35 a5 f1 e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 80 38 f8 e8 41 48 66 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd
[  225.243429][ T4255] RSP: 0018:ffffc90003d87c08 EFLAGS: 00010293
[  225.249523][ T4255] RAX: ffffffff891a8ecf RBX: ffff88807c0ea330 RCX: ffff888019ec8000
[  225.257517][ T4255] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000
[  225.265494][ T4255] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f81d403
[  225.273557][ T4255] R10: ffffed100f81d403 R11: 1ffff1100f81d402 R12: dffffc0000000000
[  225.281532][ T4255] R13: dffffc0000000000 R14: ffff88807c0ea000 R15: ffff88807c0ea010
[  225.289513][ T4255]  ? hci_conn_timeout+0x24f/0x450
[  225.294558][ T4255]  ? hci_conn_timeout+0x24f/0x450
[  225.299594][ T4255]  ? process_one_work+0x7a1/0x1160
[  225.304728][ T4255]  process_one_work+0x898/0x1160
[  225.309687][ T4255]  ? worker_detach_from_pool+0x240/0x240
[  225.315335][ T4255]  ? _raw_spin_lock_irq+0xab/0xe0
[  225.320370][ T4255]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  225.325750][ T4255]  ? kthread_data+0x4b/0xc0
[  225.330269][ T4255]  worker_thread+0xaa2/0x1250
[  225.334969][ T4255]  ? __kthread_parkme+0x162/0x1c0
[  225.340011][ T4255]  kthread+0x29d/0x330
[  225.344089][ T4255]  ? worker_clr_flags+0x1a0/0x1a0
[  225.349118][ T4255]  ? kthread_blkcg+0xd0/0xd0
[  225.353833][ T4255]  ret_from_fork+0x1f/0x30
[  225.358299][ T4255]  </TASK>
[  225.361694][ T4255] Kernel Offset: disabled
[  225.366126][ T4255] Rebooting in 86400 seconds..