last executing test programs:

6.762262441s ago: executing program 1 (id=998):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x10010, &(0x7f0000000100)={[{@sysvgroups}, {@gqnoenforce}, {@swalloc}, {@lazytime}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)

6.724148809s ago: executing program 3 (id=999):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x43d6b990c9433eb3, {0x41}}, 0x10)

6.226261957s ago: executing program 3 (id=1003):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000001c0)="348b0d151f8218e3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100677470001c00028008000600", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000300"], 0x48}}, 0x0)

5.841102734s ago: executing program 3 (id=1005):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x84)

5.483803334s ago: executing program 3 (id=1008):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xb, {[@main=@item_4={0x3, 0x0, 0x8, "0000beff"}, @global=@item_012={0x2, 0x1, 0x1, "4695"}, @global=@item_012={0x2, 0x1, 0x2, "ff9c"}]}}, 0x0}, 0x0)

5.041647563s ago: executing program 2 (id=1009):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'virt_wifi0\x00', 0x0})
ioctl$sock_proto_private(r0, 0x8b20, &(0x7f0000000080))

4.031965084s ago: executing program 2 (id=1011):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a", 0xd3}], 0x1}, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x3a})

3.8842041s ago: executing program 4 (id=1012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x14, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@ld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="2b5a000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.476984643s ago: executing program 2 (id=1013):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x6d]}}]})

3.121258266s ago: executing program 2 (id=1014):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.919312887s ago: executing program 0 (id=1015):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)={0x110, r1, 0xfe12482fe0801d67, 0x0, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc}, {0xfdd5, 0x90, 0x17c0000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x7fffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x7}}, {@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x800}, {0xc, 0x90, 0x6}}]}, 0x110}, 0x1, 0x0, 0x0, 0x8011}, 0x4000)

2.79273899s ago: executing program 1 (id=1016):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10)

2.567988982s ago: executing program 4 (id=1017):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x8042, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000140))
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000340)=0x1)

2.560920433s ago: executing program 3 (id=1018):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e')

2.280977187s ago: executing program 1 (id=1019):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="80", 0x1}], 0x1}, 0x0)

2.277379525s ago: executing program 3 (id=1020):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1, 0x551d, &(0x7f0000005c80)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x3, 0x9, 0x3})

2.220979562s ago: executing program 4 (id=1021):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

1.82614206s ago: executing program 0 (id=1022):
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0x40186f40, 0x20000502)

1.499644252s ago: executing program 1 (id=1023):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0)
sysfs$2(0x2, 0x0, 0x0)

1.341942925s ago: executing program 4 (id=1024):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000700)=@req={0x10000, 0x5, 0x80, 0xa00}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000740), 0x4)

1.225577989s ago: executing program 0 (id=1025):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

951.52304ms ago: executing program 1 (id=1026):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_adj\x00')
writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)

925.849892ms ago: executing program 4 (id=1027):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)

913.228ms ago: executing program 0 (id=1028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)

567.102927ms ago: executing program 0 (id=1029):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)="27030200590200000000002f1eafbcf706e1050000004305000f1103ee162bd4b8bf4a82f6184b8a34f90186cee84400000008000000001900000000", 0x3c}, {&(0x7f0000001380)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b88a84465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b58144028420f6590138", 0x14}, {&(0x7f0000000440)="465c3135ec4b593d474a85bd3ed97d342253d12b5a3dacf52cd03633a6abadfb762cb3613fa20a42c1811f40a9ac6fc608a43b6d54cd01caf48c54b9c70b693c8ca2dcde13a64880d26b8e75397f377fac94f1698e46e781c5d95973fa50910997e4a1be1de7bcadc44fa26df6e2df26a1718a9f9e68087cc960d5778dda80", 0x7f}, {&(0x7f0000000600)="3260fc80ea2b8080d293d1c78e569b228cb871058715628b6b735735c7d074e6f01af06ea1ba7c14ea4c58472cd5ec2837a6d920d1d876c5be18ca5a8b421cf8e4a6cc6eb35ab96afcbdd97d53804d121a42eedf3221a19e3ac3d0ae1e1295c278cefe3cf8879e11688ab3ee1655de5621530001c54bf3e83e2fca31972d03d492205322d7d45b5dd2bf4a1c54e37173e8f952c00341929ae0c4145a", 0x9c}, {&(0x7f0000000740)="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", 0xbc7}], 0x7}, 0x0)

466.226278ms ago: executing program 2 (id=1030):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x48}}, 0x0)

326.54329ms ago: executing program 1 (id=1031):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1010082, &(0x7f0000001980)={[{@gid}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@discard}, {@umask={'umask', 0x3d, 0x2bf}}, {@utf8}, {@errors_continue}, {@gid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}]}, 0x3, 0x1507, &(0x7f0000000440)="$eJzs3Au8TtXWMPAx5pyLTdKT5D7HHIsnuUySJJeEXJIkOZIkJCRJkhwkt9ySkITcQ+4hucVO7vf7PUmOJElCQpL5/VTndc7Xe7763nO+z3vePf6/39p7jr3WGM9ca+z9rMtv7/11+0FV6lWtWIeZ4Z+Cv3zqBgApANAXAK4DgAgASmQpkeXy+gwau/1zLyL+tR6adrVnIK4m6X/aJv1P26T/aZv0P22T/qdt0v+0Tfqftkn/hUjLtk7Peb0saXf548//3f95tTz//zck5///sf7QT5r0P22T/qdt0v+0Tfqftkn/0zbpf9om/U/bpP9CpGVX+/nzv8Hy10P1u9te3eMZ/Zfyruo3nxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKINON8uMIAwF/HV3teQgghhBBCCCGE+NcJ6a/2DIQQQgghhBBCCPH/HgIYDQYiSAfpIQUyQEa4BjLBtZAZroMEXA9Z4AbICjdCNsgOOSAn5ILckAcsEDhgiCEv5IMk3AT54WYoAAWhEBQGD0WgKNwCxeBWKA63QQmYswjgDigFpaEMlIU7oRzcBeWhAlSEu6ESVIYqUBXugWpwL1SH+6AG3A814QGoBQ9CbfgT1IGHoC48DPXgEagPj0IDeAwaQiNo/F/KfxE6w0vQBbpCN+gOPeBl6Am9oDf0gb7wCvSDV6E/vAYDYCAMgtdhMLwBQ+BNGArDYDi8BSNgJIyC0TAGxsI4eBvGwwSYCO/AJJgMU2AqTIPpMAPehZkwC2bDezAH3oe5MA/mwwJYCB/AIlgMqfAhLIGPYCksg+WwAlbCKlgNa2AtrIP1sAE2wibYDFtgK2yD7bADdsIu2A17KuyFj2EffAL74VM4AJ/9X+afg7/P74CAgAoVGjSYDtNhCqZgRsyImTATZsbMmMAEZsEsmBWzYjbMhjkwB+bCXJgH8yAhISNjXsyLSUxifsyPBbAAFsJC6NFjUSyKxfBWLI7FsQSWwJJYEkthaSyNZbEslsNyWB7LY8U75gFgJayCVfAevAfvxepYHWtgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xibYBJtiU2yOzbEFtsCW2BJbYStsja2xDbbBttgW22E7bI/tsQN2xI74Ir6IL+FL2BUrqe7YA3tgT+yJvbEP9sFXsB++iq/iazgAB+IgfB1fxzdwCJ7FoTgMh+NwLKdG4igcjazG4jgch+NxPE7EiTgJJ+NknIrTcDrOwBk4E2fhLHwP5+D7+D7Ow3m4ABfiQlyEizEVU3EJnsOluAyX4wpciatwJa7BtbgG1+MGXI+bcBNuwS24DbfhDtyBu3AX7sE9+DF+jJ/gJzgAD+ABPIgH8RAewsN4GI/gETyKR7ddA4DH8TiewBN4Ek/haTyFZ/AMnsVzeB7P4wW8gBfxhVxf1t1TcN0AUJcZZVQ6lU6lqBSVUWVUmVQmlVllVgmVUFlUFpVVZVXZVDaVQ+VQuVQulUflUaRIsYpVXpVXJVVS5Vf5VQFVQBVShZRXXhVVRVUxVUwVV8VVCXW7KqnuUKVUadXMl1VlVTnV3JdXFVRFVVFVUpVVFVVVVVXVVDVVXVVXNVQNVVPVVLXUg6q26o698SF1uTP11ECsrwZhA/WYaqgaqTfwcdVEDcGmqplqrp5Uw3AotlRNfCv1jGqtRmEb9Zwajc+rdmostld/Vh1UR9VJvag6q6a+i+qqJmF31UNNxZ6ql+qt+qiZWFld7lgV9ZoaoAaqQep1tQDfUEPUm2qoGqaGq7fUCDVSjVKj1Rg1Vo1Tb6vxaoKaqN5Rk9RkNUVNVdPUdDVDvatmqllqtnpPzVHvq7lqnpqvFqiF6gO1SC1WqepDtUR9pJaqZWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm1qu9qhdqpdarfao/aqj9U+9Ynarz5VB9Rn6qD6izqkPleH1RfqiPpSHVVfqWPqa3VcfaNOqK7qpDqlTqvv1Bn1vTqrzqnz6gd1Qf2oLqqf1CUVFGjUSmttdKTT6fQ6RWfQGfU1OpO+VmfW1+mEvl5n0TforPpGnU1n1zl0Tp1L59Z5tNWknWYd67w6n07qm3R+fbMuoAvqQrqw9rqILqpv0cX0rbq4vk2X0LfrkvoOXUqX1mV0WX2nLqfv0uV1BV1R360r6cq6iq6q79HV9L26ur5P19D365r6AV1LP6hr6z/pOvohXVc/rOvpR3R9/ahuoKNfz1+P6yb6Cd1UN9PN9ZO6hX5Kt9RP61b6Gd1aP6vb6Od0W/28bqdf0O31n3UH3VF30j/pSzroLrqr7qa76x76Zd1T99K9dR/dV7+i++lXdX/9mh6gB+pB+nU9WL+hh+g39VA9TA/Xb+kReqQepUfrMXqsHqff1uP1BD1Rv6Mn6cl6ip6qp+npuvevlWb/gfwJ/0l+/59ffYveqrfp7XqH3ql36d16j96r9+p9ep/er/frA/qAPqgP6kP6kD6sD+sj+og+qo/qY/qYPq6P6xP6hD6pT+kf9Hf6jP5en9Xn9Dn9g76gL+iLvx4DMGiU0caYyKQz6U2KyWAymmtMJnOtyWyuMwlzvclibjBZzY0mm8lucpicJpfJbfIYa8g4wyY2eU0+kzQ3mfzmZlPAFDSFTGHjTRFT1NzyT+f/g/mtmPJL801j09g0MU1MU9PUNDfNTQvTwrQ0LU0r08q0Nq1NG9PGtDVtTTvTzrQ37U0H08F0Mp1MZ9PZdEEw3Uw308O8bHqaXqa36WP6mldMP9PP9Df9zQAzwAwyg8xgM9gMMUPMUDPUGAAYYUaYUWaUGWPGmHFmnBlvxpuJZqKZZCaZKWaKmWammRlmhplpZprZZraZY+aYuWaumW/mm4VmoVlkFplUk2qWmCVmqVlmlpkVZoVZZVaZNWaNWWfWmQ1mg9lkNpmlZqvZarab7Wan2Wl2m91mr9lr9pl9Zr/Zbw6YA+agOWgOmUPmsDlsjpgj5qg5ao6ZY+a4OW5OmBPmpDlpTpvT5ow5Y86as+a8OW8umAvmorloLplLly/7IhWpyEQmSheli1KilChjlDHKFGWKMkeZo0SUiLJEWaKs0Y1Rtih7lCPKGeWKckd5IhtR5CKO4ihvlC9KRjdF+aObowJRwahQVDjyUZGoaHRLVCy6NSoe3RaViG6PSkZ3RKWi0lGZqGx0Z1QuuisqH1WIKkZ3R5WiylGVqGp0T1QtujeqHt0X1Yjuj2pGD0S1ogej2tGfojrRQ1Hd6OGoXvRIVD96NGoQPRY1jBpFjf+l9UM4m/0J38V2temhu+1hX7Y9bS/b2/axfe0rtp991fa3r9kBdqAdZF+3g+0bdoh90w61w+xw+5YdYUfaUXa0HWPH2nH2bTveTrAT7Tt2kp1sp9ipdpqdbmfYd+1MO8vOtu/ZOfZ9O9fOs/PtArvQfmAX2cU21X5ol9iP7FK7zC63K+xKu8qutmvsWrvOrrcb7Ea7yW62W+xWu81utzvsTrvL7rZ77F77sd1nP7H77af2gP3MHrQpv74/fmGP2C/tUfuVPWa/tsftN/aE/daetKfsafudPWO/t2ftOXve/mAv2B/tRfuTvWTD5Yv7y6d3MmQoHaWjFEqhjJSRMlEmykyZKUEJykJZKCtlpWyUjXJQDspFuSgP5aHLmJjyUl5KUpLyU34qQAWoEBUiT56KUlEqRsWoOBWnElSCSlJJKkWlqAyVoTvpTrqL7qIKVIHuprupMlWmqlSVqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATU49+uvMFMTakJNqSk1p+bUglpQS2pJragVtabW1IbaUFtqS+2oHbWn9tSBOlAn6kSdqTN1oS7UjbpRD+pBPakn9abe1Jf6Uj/qR/2pPw2gATSIBtFgGkxDaAgNpWE0nN6iETSSRtFoGkNjaRyNo/E0nibSRJpEk2gKTaFpNI1m0AyaSTNpNs2mOTSH5tJcmk/zaSEtpEW0iFIplZbQElpKS2k5LaeVtJJW02paS2tpPa2njbSRNtNm2kpbaTttp520k3bTbtpLe2kf7aP9tJ8O0AE6SAfpEB2iw3SYjtAROkpH6Rgdo+N0nE7QCTpJJ+k0naYzdIbO0lk6T+fpAv1IF+knukSBUlwGl9Fd4zK5a11md5373+McLqfL5XK7PM66bC7738XknCvgCrpCrrDzrogr6m75TVzKlXZlXFl3pyvn7nLlfxNXW7vzly66+11Vd4+r5u511d19roa739V0D7ha7hFX2z3q6rjHXF3XyNVzj7j67lHXwD3mGrpGroV7yrV0T7tW7hnX2j37m3iRW+zWunVuvdvg9rlP3Hn3gzvmvnYX3I+ui+vq+rpXXD/3quvvXnMD3MDfxMPdW26EG+lGudFujBv7m3iKm+oyuOluhnvXzXSzfo6n/U280H3g5rhUN9fNc/Pdgp/jy3NKdR+6Je4jt9Qtc8vdCrfSrXKr3Zr/mOsKt8ltdlvcXvex2+52uJ1ul9vt9vwcX96P/e5Td8B95o66r9wh97k77I67I+7Ln+PL+3fcfeNOuG/dSXfKnXbfuTPue3fWnft5/y/v+3fuJ3fJBQeMrFiz4YjTcXpO4Qycka/hTHwtZ+brOMHXcxa+gbPyjZyNs3MOzsm5ODfnYcvEjpljzsv5OMk3cX6+mQtwQS7EhdlzES7Kt3AxvpWL821cgm/nknwHl+LSXIbL8p1cju/i8lyBK/LdXIkrcxWuyvdwNb6Xq/N9XIPv55r8ANfiB7k2/4nr8ENclx/mevwI1+dHuQE/xg25ETfmx7kJP8FNuRk35ye5BT/FLflpbsXPcGt+ltvwc9yWn+d2/AK35/IA0JE78YvcmV/iLtyVu3F37sEvc0/uxb25D/flV7gfv8r9+TUewAN5EL/Og/kNHsJv8lAexsP5LR7BI3kUj+YxPJbH8ds8nifwRH6HJ/FknsJTeRpP5xn8Ls/kWTyb3+M5/D7P5Xk8nxfwQv6AF/FiTuUPeQl/xEt5GS/nFbySV/FqXsNreR2v5w28kTfxZt7CW3kbb+cdjLyLd/Me3ssf8z7+hPfzp3yAP+OD/Bc+xJ/zYf6Cj/CXfJS/4mP8NR/nb/gEf8sn+RSf5u/4DH/PZ/kcn+cf+AL/yBf5J77EgSHGWMU6NnEUp4vTxylxhjhjfE2cKb42zhxfFyfi6+Ms8Q1x1vjGOFucPc4R54xzxbnjPLGNKXYxx3GcN84XJ+Ob4vzxzXGBuGBcKC4c+7hIXDS+JS4W3xoXj2+LS8S3xyXjO+JScen4kfvLxnfG5eK74vJxhbhifHdcKa4cV4mrxvfE1eJ74+rxfXGN+P64ePxAXCt+MK4d/ymuEz8U140fjuvFj8T140fjBvFjccO4Udw4fjxuEj8RN42bxc3jJ+MW8VNxy/jpuFX8TNw6fvZ313eLu8c94pfjl+MQ7tPzkwuSC5MfJBclFydTkx8mlyQ/Si5NLksuT65IrkyuSq5OrkmuTa5Lrk9uSG5MbkpuTm5JhlA1PXj0ymtvfOTT+fQ+xWfwGf01PpO/1mf21/mEv95n8Tf4rP5Gn81n9zl8Tp/L5/Z5vPXknWcf+7w+n0/6m3x+f7Mv4Av6Qr6w976IL+ob+ca+sW/in/BNfTPf3D/pn/RP+af80/5p/4xv7Z/1bfxzvq1/3rfzL/gX/J99B9/Rd/Iv+s7+pRB8V9/Nd/M9fA/f0/f0vX1v39f39f18P9/f9/cD/AA/yA/yg/1gP8QP8UP9UD/cD/cj/Ag/yo/yY/wYP86P8+P9eD/RT/ST/CQ/xU/x0/w0P8PP8DP9TD/bz/ZzCszxc/1cP9/P9wv9Qr/IL/KpPtUv8Uv8Ur/UL/fL/Uq/0q/2q/1av9av9+v9Rr/Rb/ab/Va/1W/32/1Ov9Pv9rv9Xr/X7/P7/H6/3x/wB/xBf/B88If8Yf+FP+K/9Ef9V/6Y/9of99/4E/5bf9Kf8qf9d/6M/96f9ef8ef+Dv+B/9Bf9T/6SD35c4u3E+MSExMTEO4lJicmJKYmpiWmJ6YkZiXcTMxOzErMT7yXmJN5PzE3MS8xPLEgsTHyQWJRYnEhNfJhYkvgosTSxLLE8sSKxMrEqEULu7XHIG/KFZLgp5A83hwKhYCgUCgcfioSi4ZZQLNwaiofbQolweygZ7gilQulQJjwaGoTHQsPQKDQOj4cm4YnQNDQLzcOToUV4KrQMT4dW4ZnQOjwb2oTnQtvwfGgXXgjtw59Dh9AxdAovhs7hpdAl6NAtdA89wsuhZ+gVeoc+oW94JfQLr4b+4bUwIAwMg8LrYXB4IwwJb4ahYVgYHt4KI8LIMCqMDmPC2DAuvB3GhwlhYngnTAqTw5QwNUwL08OM8G6YGWaF2eG9MCe8H+aGeWF+WBAWhg/CorA4pIYPw5LwUVgaloXlYUWAlFVhdVgT1oZ1YX3YEDaGTWFz2BK2hm1he9gRdoZdYXfYE/aGj8O+8EnYHz4NB8Jn4WD4SzgUPg+HwxfhSPgyHA1fhWPh63A8fBNOhG/DyXAqnA7fhTPh+3A2nAvnww/hQvgxXAw/hUvyN2tCCCGEEH/IhN9Z3/3vIvUfH9WvX+kBANfuyHnkb7fSALAx2y/jXipXiwQAPNO1/UN/XSpV6tat26/bLtUQ5ZsHAIkr+engSrwMmsNT0AqaQbH/dH69VMcL/Dv1k7cDZPybnBS4El+pf+s/qD9yzu/WnwdQIN+VnAxwJb5Sv/hvakc/18/e5HfqZ/h8HEDTv8nLBFfiK/WLwhPwLLT6uy2FEEIIIYQQQohf9FJl2v7e/e3l+/Nc5kpOergS/979uRBCCCGEEEIIIa6+5zt2evrxVq2atf0Hgwr/eJUM0sog3X+PafzbDwD+W0zjjw2u9juTEEIIIYQQ4l/tykX/1Z6JEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRdv3/+HdiV3sfhRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiKvtfwUAAP//JJI07Q==")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)

203.700882ms ago: executing program 0 (id=1032):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@generic={0xfe, 0x2}, @mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0)

70.227595ms ago: executing program 4 (id=1033):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r1}, 0xc)

0s ago: executing program 2 (id=1034):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014"], 0xdc}}, 0x0)

kernel console output (not intermixed with test programs):

26 audit(1728983943.095:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbf4b7e033 code=0x7ffc0000
[   80.325916][   T29] audit: type=1326 audit(1728983943.135:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdbf4b7cadf code=0x7ffc0000
[   80.343179][ T5763] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   80.353063][   T29] audit: type=1326 audit(1728983943.155:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fdbf4b7e087 code=0x7ffc0000
[   80.378765][   T29] audit: type=1326 audit(1728983943.155:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdbf4b7c990 code=0x7ffc0000
[   80.431780][ T5772]  loop3: p2 p3 p7
[   80.481882][ T5763] XFS (loop4): Ending clean mount
[   80.490897][ T5286] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   80.510416][ T5763] XFS (loop4): Quotacheck needed: Please wait.
[   80.552554][   T51] tipc: Node number set to 112590664
[   80.604224][ T5330] nzxt-kraken2 0003:1E71:170E.0006: item fetching failed at offset 4/5
[   80.613150][ T5330] nzxt-kraken2 0003:1E71:170E.0006: hid parse failed with -22
[   80.620784][ T5330] nzxt-kraken2 0003:1E71:170E.0006: probe with driver nzxt-kraken2 failed with error -22
[   80.686682][ T5286] usb 3-1: Using ep0 maxpacket: 16
[   80.705042][ T5286] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[   80.731610][ T5763] XFS (loop4): Quotacheck: Done.
[   80.738096][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.747798][ T5286] usb 3-1: Product: syz
[   80.794766][ T5255] udevd[5255]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[   80.809688][ T5253] udevd[5253]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory
[   80.827645][ T5544] udevd[5544]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   80.848861][ T5784] loop3: detected capacity change from 0 to 4096
[   80.871349][ T5286] usb 3-1: Manufacturer: syz
[   80.874041][ T5784] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[   80.885361][ T5286] usb 3-1: SerialNumber: syz
[   80.913126][ T5286] usb 3-1: config 0 descriptor??
[   80.948523][ T5330] usb 2-1: USB disconnect, device number 3
[   80.976868][ T5784] ntfs3(loop3): Failed to load $Extend (-22).
[   80.988569][ T5784] ntfs3(loop3): Failed to initialize $Extend.
[   81.002464][ T5234] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   81.143299][ T5286] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[   81.253669][ T5790] loop4: detected capacity change from 0 to 512
[   81.305158][ T5790] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   81.316092][ T5790] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   81.335267][ T5790] EXT4-fs (loop4): 1 truncate cleaned up
[   81.345347][ T5790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.346094][ T5286] peak_usb 3-1:0.0 can0: sending command failure: -22
[   81.364923][ T5286] peak_usb 3-1:0.0 can0: sending command failure: -22
[   81.372967][ T5286] peak_usb 3-1:0.0 can0: sending command failure: -22
[   81.433649][ T5286] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22
[   81.441232][ T5790] EXT4-fs: Ignoring removed nobh option
[   81.455748][ T5790] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[   81.547374][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.641104][ T5286] usb 3-1: USB disconnect, device number 5
[   81.835987][ T5796] loop3: detected capacity change from 0 to 32768
[   81.868976][ T5796] JBD2: Ignoring recovery information on journal
[   81.966553][ T5796] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   82.178123][ T5233] ocfs2: Unmounting device (7,3) on (node local)
[   82.569089][ T5810] loop4: detected capacity change from 0 to 32768
[   82.589089][ T5810] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.186 (5810)
[   82.616992][ T5810] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   82.635412][ T5827] sp0: Synchronizing with TNC
[   82.648757][ T5810] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   82.774720][ T5810] BTRFS info (device loop4): rebuilding free space tree
[   82.888650][ T5810] BTRFS info (device loop4): disabling free space tree
[   82.896753][ T5810] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   82.904957][ T5851] loop2: detected capacity change from 0 to 256
[   82.908258][ T5810] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   83.056367][ T5810] BTRFS error (device loop4): balance: invalid convert metadata profile raid0
[   83.129221][ T5851] syz.2.197: attempt to access beyond end of device
[   83.129221][ T5851] loop2: rw=2049, sector=256, nr_sectors = 4 limit=256
[   83.251175][ T5286] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   83.259887][ T5234] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.430829][ T5286] usb 2-1: Using ep0 maxpacket: 32
[   83.445661][ T5286] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[   83.455109][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.477201][ T5286] usb 2-1: config 0 descriptor??
[   83.499530][ T5286] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[   83.539395][ T5286] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   83.593203][ T5286] dvbdev: DVB: registering new adapter (HCW 126xxx)
[   83.600068][ T5286] usb 2-1: media controller created
[   83.675935][ T5286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   83.732602][ T5286] usb 2-1: selecting invalid altsetting 1
[   83.749683][ T5286] set interface failed
[   83.750185][ T5286] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   83.776193][ T5286] error writing reg: 0xff, val: 0x00
[   83.848781][ T5286] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[   83.931059][ T5286] usb 2-1: USB disconnect, device number 4
[   84.235073][ T5881] loop3: detected capacity change from 0 to 512
[   84.267946][ T5881] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback.
[   84.358160][ T5861] loop2: detected capacity change from 0 to 40427
[   84.401329][ T5861] F2FS-fs (loop2): invalid crc value
[   84.410308][ T5881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   84.429272][ T5881] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.210: Abort forced by user
[   84.463001][ T5881] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[   84.479830][ T5861] F2FS-fs (loop2): Found nat_bits in checkpoint
[   84.536891][ T5890] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   84.550906][ T5861] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.571385][ T5881] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[   84.594739][ T5881] ext4 filesystem being remounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.650425][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   84.733174][ T5247] syz-executor: attempt to access beyond end of device
[   84.733174][ T5247] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   84.763926][ T5247] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   84.813279][ T5905] sp0: Synchronizing with TNC
[   84.984115][ T5909] mkiss: ax0: crc mode is auto.
[   85.149473][ T5913] netlink: 6 bytes leftover after parsing attributes in process `syz.0.224'.
[   85.349731][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'.
[   85.417782][ T5917] xt_CT: You must specify a L4 protocol and not use inversions on it
[   85.552139][ T5921] loop0: detected capacity change from 0 to 512
[   85.585656][ T5921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 ro without journal. Quota mode: writeback.
[   85.651284][ T5902] syz.4.218 (5902): drop_caches: 2
[   85.745063][ T5921] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   85.760184][ T5921] EXT4-fs error (device loop0): __ext4_remount:6522: comm syz.0.228: Abort forced by user
[   85.777030][ T5921] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended
[   85.811545][ T5921] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 r/w. Quota mode: writeback.
[   85.822864][ T5921] ext4 filesystem being remounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   85.992001][ T5936] loop4: detected capacity change from 0 to 4096
[   86.006378][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   86.018853][ T5936] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[   86.064241][ T5940] sp0: Synchronizing with TNC
[   86.138550][ T5936] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[   86.311685][   T52] ntfs3(loop4): ino=5, ntfs3_write_inode failed, -22.
[   86.407479][ T5947] loop1: detected capacity change from 0 to 2048
[   86.416599][   T29] kauditd_printk_skb: 24 callbacks suppressed
[   86.416615][   T29] audit: type=1326 audit(1728983949.325:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.0.241" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0aad77dff9 code=0x0
[   86.444775][    C1] vkms_vblank_simulate: vblank timer overrun
[   86.518970][ T5947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.994332][ T5964] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[   87.104119][ T5942] loop2: detected capacity change from 0 to 40427
[   87.113810][ T5942] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1fffff
[   87.125756][ T5942] F2FS-fs (loop2): invalid crc value
[   87.128188][ T5942] F2FS-fs (loop2): Found nat_bits in checkpoint
[   87.212624][ T5942] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   87.348731][ T5974] loop0: detected capacity change from 0 to 512
[   87.381010][ T5974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   87.396121][ T5247] syz-executor: attempt to access beyond end of device
[   87.396121][ T5247] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.419256][ T5247] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   87.455084][ T5954] loop3: detected capacity change from 0 to 40427
[   87.467505][ T5954] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   87.477041][ T5954] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   87.508123][ T5954] F2FS-fs (loop3): Found nat_bits in checkpoint
[   87.514893][ T5974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   87.557325][ T5974] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   87.594322][ T5954] F2FS-fs (loop3): Try to recover 1th superblock, ret: -30
[   87.603118][ T5974] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   87.620830][ T5954] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   87.628998][ T5974] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28
[   87.656919][ T5974] EXT4-fs (loop0): This should not happen!! Data will be lost
[   87.656919][ T5974] 
[   87.669490][ T5974] EXT4-fs (loop0): Total free blocks count 0
[   87.681772][ T5974] EXT4-fs (loop0): Free/Dirty block details
[   87.688050][ T5974] EXT4-fs (loop0): free_blocks=39626
[   87.698775][ T5974] EXT4-fs (loop0): dirty_blocks=1
[   87.711156][ T5974] EXT4-fs (loop0): Block reservation details
[   87.717312][ T5974] EXT4-fs (loop0): i_reserved_data_blocks=1
[   87.817124][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.119441][ T5969] loop4: detected capacity change from 0 to 32768
[   88.179752][ T5987] loop3: detected capacity change from 0 to 64
[   88.191131][   T29] audit: type=1800 audit(1728983951.085:57): pid=5969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.249" name="file2" dev="loop4" ino=5 res=0 errno=0
[   88.283365][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   88.446327][ T5996] process 'syz.4.258' launched '/dev/fd/3' with NULL argv: empty string added
[   88.455493][    T9] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[   88.483529][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.525722][    T9] usb 3-1: config 0 has no interface number 0
[   88.553586][    T9] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   88.556955][ T5998] loop3: detected capacity change from 0 to 4096
[   88.584455][    T9] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   88.604370][ T5998] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   88.613200][    T9] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[   88.636791][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.665871][    T9] usb 3-1: Product: syz
[   88.676307][    T9] usb 3-1: Manufacturer: syz
[   88.684270][   T25] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[   88.690800][    T9] usb 3-1: SerialNumber: syz
[   88.715352][    T9] usb 3-1: config 0 descriptor??
[   88.835595][ T6006] loop0: detected capacity change from 0 to 256
[   88.853317][   T25] usb 2-1: config 4 has an invalid interface number: 231 but max is 0
[   88.862236][   T25] usb 2-1: config 4 has no interface number 0
[   88.899434][   T25] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[   88.904020][ T6006] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[   88.920832][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.920861][   T25] usb 2-1: Product: syz
[   88.920876][   T25] usb 2-1: Manufacturer: syz
[   88.920891][   T25] usb 2-1: SerialNumber: syz
[   88.958036][   T25] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[   89.053972][ T6012] loop4: detected capacity change from 0 to 64
[   89.338141][ T6020] sp0: Synchronizing with TNC
[   89.342432][   T25] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[   89.385973][   T25] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[   89.456603][   T25] usb 3-1: USB disconnect, device number 6
[   89.557667][ T5329] usb 2-1: USB disconnect, device number 5
[   89.575050][ T6024] netlink: 'syz.4.273': attribute type 29 has an invalid length.
[   89.609472][ T6024] netlink: 'syz.4.273': attribute type 29 has an invalid length.
[   89.773638][ T6030] hugetlbfs: Bad value for 'size'
[   89.800121][ T6010] loop3: detected capacity change from 0 to 40427
[   89.818141][ T6010] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[   89.827288][ T6010] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[   89.863954][ T6010] F2FS-fs (loop3): invalid crc_offset: 5705724
[   89.878292][ T6010] F2FS-fs (loop3): Found nat_bits in checkpoint
[   89.991154][ T6010] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30
[   89.998717][ T6010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   90.546748][ T6054] loop3: detected capacity change from 0 to 1024
[   90.630680][ T6039] loop4: detected capacity change from 0 to 32768
[   90.697955][ T6039] find_entry called with index >= next_index
[   90.729040][ T6039] find_entry called with index >= next_index
[   90.739173][ T6039] find_entry called with index >= next_index
[   90.757858][ T6055] loop1: detected capacity change from 0 to 4096
[   90.770187][ T6059] netlink: 'syz.2.289': attribute type 1 has an invalid length.
[   90.792431][ T6055] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   91.330992][ T5329] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   91.346644][ T6080] loop1: detected capacity change from 0 to 512
[   91.359573][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   91.407586][ T6080] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   91.427369][ T6080] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.458304][ T6080] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[   91.478632][ T6080] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28
[   91.491898][ T6080] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.491898][ T6080] 
[   91.502605][ T6080] EXT4-fs (loop1): Total free blocks count 0
[   91.509045][ T6080] EXT4-fs (loop1): Free/Dirty block details
[   91.516959][ T5329] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[   91.531047][ T6080] EXT4-fs (loop1): free_blocks=39626
[   91.531353][ T5329] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[   91.539288][ T6080] EXT4-fs (loop1): dirty_blocks=1
[   91.550925][   T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   91.570948][ T6080] EXT4-fs (loop1): Block reservation details
[   91.577077][ T6080] EXT4-fs (loop1): i_reserved_data_blocks=1
[   91.585756][ T5329] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   91.596142][ T5329] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   91.631519][ T5329] usb 3-1: config 0 has no interface number 0
[   91.637663][ T5329] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[   91.649177][ T5329] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   91.655061][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.669941][ T5329] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   91.680189][ T5329] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   91.693999][ T5329] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   91.703254][ T5329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.719659][ T5329] usb 3-1: config 0 descriptor??
[   91.743671][ T5329] gspca_main: spca561-2.14.0 probing abcd:cdee
[   91.751829][   T25] usb 4-1: Using ep0 maxpacket: 32
[   91.759625][   T25] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[   91.781697][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.804475][   T25] usb 4-1: config 0 descriptor??
[   91.818534][   T25] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[   91.842298][   T25] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   91.857642][   T25] dvbdev: DVB: registering new adapter (HCW 126xxx)
[   91.869796][   T25] usb 4-1: media controller created
[   91.881000][ T5286] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   91.892553][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   91.929345][   T25] usb 4-1: selecting invalid altsetting 1
[   91.936257][   T25] set interface failed
[   91.936320][   T25] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   91.959994][   T25] error writing reg: 0xff, val: 0x00
[   91.960483][ T5329] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[   91.991811][ T5329] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   91.998883][ T5329] usb 3-1: MIDIStreaming interface descriptor not found
[   92.009860][   T25] dvb_usb_mxl111sf 4-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[   92.033889][   T25] usb 4-1: USB disconnect, device number 6
[   92.074939][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[   92.108245][ T5329] usb 3-1: USB disconnect, device number 7
[   92.116869][ T5286] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[   92.140233][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.165580][ T5286] usb 5-1: Product: syz
[   92.169801][ T5286] usb 5-1: Manufacturer: syz
[   92.201078][ T5286] usb 5-1: SerialNumber: syz
[   92.225266][ T5286] usb 5-1: config 0 descriptor??
[   92.249074][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[   92.328283][ T6091] loop1: detected capacity change from 0 to 32768
[   92.366614][ T6091] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.424169][ T6091] XFS (loop1): Ending clean mount
[   92.442565][ T6091] XFS (loop1): Quotacheck needed: Please wait.
[   92.486314][ T6091] XFS (loop1): Quotacheck: Done.
[   92.493939][ T5286] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2
[   92.527462][ T5255] udevd[5255]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.554716][ T5235] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   92.670088][    T9] usb 5-1: USB disconnect, device number 4
[   92.862108][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[   92.929680][ T6119] loop3: detected capacity change from 0 to 256
[   92.981891][ T6119] FAT-fs (loop3): Directory bread(block 64) failed
[   92.989015][ T6119] FAT-fs (loop3): Directory bread(block 65) failed
[   93.000488][ T6119] FAT-fs (loop3): Directory bread(block 66) failed
[   93.008386][ T6119] FAT-fs (loop3): Directory bread(block 67) failed
[   93.020956][ T6119] FAT-fs (loop3): Directory bread(block 68) failed
[   93.028595][ T6119] FAT-fs (loop3): Directory bread(block 69) failed
[   93.044361][ T6119] FAT-fs (loop3): Directory bread(block 70) failed
[   93.055171][ T6119] FAT-fs (loop3): Directory bread(block 71) failed
[   93.065692][ T6119] FAT-fs (loop3): Directory bread(block 72) failed
[   93.072779][ T6119] FAT-fs (loop3): Directory bread(block 73) failed
[   93.457132][ T6121] loop2: detected capacity change from 0 to 32768
[   93.754983][ T6139] syz.2.317 (6139): drop_caches: 2
[   93.772751][ T6139] syz.2.317 (6139): drop_caches: 2
[   93.821259][ T5329] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   93.826346][ T6141] loop2: detected capacity change from 0 to 64
[   93.843568][ T6137] loop3: detected capacity change from 0 to 2048
[   93.870521][ T6141] Trying to free block not in datazone
[   93.878627][ T6141] Trying to free block not in datazone
[   93.884395][ T6141] Trying to free block not in datazone
[   93.895088][ T6141] Trying to free block not in datazone
[   93.976567][ T6137] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.981923][ T6143] capability: warning: `syz.2.321' uses 32-bit capabilities (legacy support in use)
[   94.001207][ T5329] usb 5-1: Using ep0 maxpacket: 32
[   94.008091][ T5329] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[   94.033783][ T5329] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.089582][ T5329] usb 5-1: config 0 descriptor??
[   94.112437][ T5329] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[   94.140826][ T5329] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   94.161405][ T5329] dvbdev: DVB: registering new adapter (HCW 126xxx)
[   94.168690][ T5329] usb 5-1: media controller created
[   94.178643][ T6148] qrtr: Invalid version 0
[   94.207241][ T6149] loop1: detected capacity change from 0 to 256
[   94.220402][ T5329] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   94.241456][ T6149] exfat: Deprecated parameter 'utf8'
[   94.266228][ T5329] usb 5-1: selecting invalid altsetting 1
[   94.281267][ T5329] set interface failed
[   94.281301][ T5329] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[   94.289584][ T6149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   94.326244][ T5329] error writing reg: 0xff, val: 0x00
[   94.387457][ T5329] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[   94.422907][ T5329] usb 5-1: USB disconnect, device number 5
[   94.531893][ T6151] loop2: detected capacity change from 0 to 4096
[   94.562500][ T6151] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   94.642791][ T6151] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   94.916140][ T6173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.337'.
[   94.926076][ T5286] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   95.051236][ T5329] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   95.117415][ T5286] usb 4-1: Using ep0 maxpacket: 16
[   95.132254][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.144707][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.155673][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   95.179067][ T5286] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   95.191441][   T51] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   95.198064][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.209912][ T5329] usb 2-1: Using ep0 maxpacket: 16
[   95.215368][ T5286] usb 4-1: config 0 descriptor??
[   95.233233][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.248608][ T5329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.259991][ T5329] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[   95.275902][ T5329] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.309585][ T5329] usb 2-1: config 0 descriptor??
[   95.381893][   T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   95.395472][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.409570][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.426171][   T51] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   95.450905][   T51] usb 5-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[   95.460016][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.504143][   T51] usb 5-1: config 0 descriptor??
[   95.564400][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   95.576359][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   95.600884][   T25] usb 3-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.00
[   95.624098][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.638387][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.648845][   T25] usb 3-1: config 0 descriptor??
[   95.666742][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.679729][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.688029][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.700849][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.715248][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.725268][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.736321][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.747752][ T5329] corsair 0003:1B1C:1B09.0008: item fetching failed at offset 2/5
[   95.750945][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.772010][ T5329] corsair 0003:1B1C:1B09.0008: parse failed
[   95.778059][ T5329] corsair 0003:1B1C:1B09.0008: probe with driver corsair failed with error -22
[   95.782547][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.843501][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.870930][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.886727][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.903053][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.918822][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.930458][ T5286] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   95.947357][ T5329] usb 2-1: USB disconnect, device number 6
[   95.955887][ T5286] microsoft 0003:045E:07DA.0007: No inputs registered, leaving
[   95.962232][   T51] kye 0003:0458:0087.0009: item fetching failed at offset 0/2
[   95.991990][   T51] kye 0003:0458:0087.0009: parse failed
[   95.997632][   T51] kye 0003:0458:0087.0009: probe with driver kye failed with error -22
[   96.028647][ T5286] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[   96.073278][ T5286] microsoft 0003:045E:07DA.0007: no inputs found
[   96.080125][   T25] aquacomputer_d5next 0003:0C70:F011.000A: unknown main item tag 0x0
[   96.096792][ T5286] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway
[   96.099626][   T25] aquacomputer_d5next 0003:0C70:F011.000A: unknown main item tag 0x0
[   96.130942][   T25] aquacomputer_d5next 0003:0C70:F011.000A: unknown main item tag 0x0
[   96.132812][ T5286] usb 4-1: USB disconnect, device number 7
[   96.149369][   T25] aquacomputer_d5next 0003:0C70:F011.000A: unknown main item tag 0x0
[   96.170940][   T25] aquacomputer_d5next 0003:0C70:F011.000A: unknown main item tag 0x0
[   96.224162][    T9] usb 5-1: USB disconnect, device number 6
[   96.232396][   T25] aquacomputer_d5next 0003:0C70:F011.000A: hidraw0: USB HID v0.00 Device [HID 0c70:f011] on usb-dummy_hcd.2-1/input0
[   96.369275][   T25] usb 3-1: USB disconnect, device number 8
[   96.959862][ T6236] loop1: detected capacity change from 0 to 1024
[   97.005379][ T6236] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.096770][ T6236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.252807][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.400626][ T6260] loop2: detected capacity change from 0 to 512
[   97.480107][ T6260] EXT4-fs (loop2): 1 truncate cleaned up
[   97.497135][ T6260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.575916][ T6269] loop0: detected capacity change from 0 to 256
[   97.643606][ T6229] loop3: detected capacity change from 0 to 32768
[   97.651343][ T6229] XFS: ikeep mount option is deprecated.
[   97.658491][ T6229] XFS: noikeep mount option is deprecated.
[   97.664738][   T29] audit: type=1326 audit(1728983960.565:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aad77dff9 code=0x7ffc0000
[   97.667442][ T6269] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[   97.709438][ T6271] loop4: detected capacity change from 0 to 1024
[   97.715291][   T29] audit: type=1326 audit(1728983960.565:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aad77dff9 code=0x7ffc0000
[   97.740471][   T29] audit: type=1326 audit(1728983960.565:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f0aad77dff9 code=0x7ffc0000
[   97.748267][ T5247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.765709][ T6269] FAT-fs (loop0): Filesystem has been set read-only
[   97.783715][   T29] audit: type=1326 audit(1728983960.695:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aad77dff9 code=0x7ffc0000
[   97.857635][ T6271] hfsplus: bad catalog entry type
[   97.869826][ T6229] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   97.976469][   T29] audit: type=1326 audit(1728983960.695:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6266 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aad77dff9 code=0x7ffc0000
[   98.027839][ T1068] hfsplus: b-tree write err: -5, ino 4
[   98.110110][ T6229] XFS (loop3): Ending clean mount
[   98.153849][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.370'.
[   98.175412][ T6229] XFS (loop3): Quotacheck needed: Please wait.
[   98.330270][ T6229] XFS (loop3): Quotacheck: Done.
[   98.363716][ T6305] loop2: detected capacity change from 0 to 2048
[   98.401915][ T6305] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   98.495821][ T5233] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   98.539289][ T6316] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.937336][ T6336] loop4: detected capacity change from 0 to 512
[   99.074774][ T6336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.107508][ T6336] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.351372][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.519278][ T6367] warning: `syz.4.391' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.587318][ T6363] loop0: detected capacity change from 0 to 4096
[   99.626355][ T6363] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   99.732303][ T6363] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  100.174284][ T6397] loop3: detected capacity change from 0 to 512
[  100.207238][ T6397] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  100.259629][ T6397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.274507][ T6397] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.286215][ T6404] loop1: detected capacity change from 0 to 1024
[  100.328713][ T6397] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  100.347337][ T6397] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28
[  100.361019][ T6397] EXT4-fs (loop3): This should not happen!! Data will be lost
[  100.361019][ T6397] 
[  100.372440][ T6397] EXT4-fs (loop3): Total free blocks count 0
[  100.372906][   T52] hfsplus: b-tree write err: -5, ino 4
[  100.378446][ T6397] EXT4-fs (loop3): Free/Dirty block details
[  100.378466][ T6397] EXT4-fs (loop3): free_blocks=39626
[  100.378483][ T6397] EXT4-fs (loop3): dirty_blocks=1
[  100.403115][ T6397] EXT4-fs (loop3): Block reservation details
[  100.409166][ T6397] EXT4-fs (loop3): i_reserved_data_blocks=1
[  100.473566][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.000936][ T5330] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  101.184336][ T6406] loop1: detected capacity change from 0 to 32768
[  101.208278][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.218950][ T6411] loop3: detected capacity change from 0 to 32768
[  101.229838][ T6411] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.403 (6411)
[  101.260865][ T5330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.271707][ T6411] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.290995][ T6411] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  101.296210][ T5330] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  101.310230][ T5330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.316228][ T6411] BTRFS info (device loop3): using free-space-tree
[  101.334236][ T6408] loop2: detected capacity change from 0 to 32768
[  101.351047][ T5330] usb 5-1: config 0 descriptor??
[  101.418959][ T6408] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  101.525792][ T6408] XFS (loop2): Ending clean mount
[  101.547257][ T5233] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.602036][ T5247] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  101.976341][ T5330] hid-led 0003:0FC5:B080.000B: probe with driver hid-led failed with error -71
[  102.021192][ T5330] usb 5-1: USB disconnect, device number 7
[  102.159610][ T6444] loop3: detected capacity change from 0 to 512
[  102.179823][ T6444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.204385][ T6444] EXT4-fs (loop3): 1 orphan inode deleted
[  102.210173][ T6444] EXT4-fs (loop3): 1 truncate cleaned up
[  102.220663][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  102.310339][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.428161][ T6454] loop3: detected capacity change from 0 to 256
[  102.450978][ T6454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  102.487710][ T6454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  102.517192][ T6454] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  102.532814][ T6454] UDF-fs: Scanning with blocksize 512 failed
[  102.544538][ T6454] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  102.559848][ T6454] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.722995][ T6463] loop3: detected capacity change from 0 to 1024
[  102.758010][ T6465] loop4: detected capacity change from 0 to 128
[  102.768175][ T6463] hfsplus: bad catalog entry type
[  102.797498][ T6465] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  102.820033][   T52] hfsplus: b-tree write err: -5, ino 4
[  102.842890][ T6440] loop2: detected capacity change from 0 to 40427
[  102.920292][ T6465] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.948489][ T6440] F2FS-fs (loop2): Found nat_bits in checkpoint
[  103.019114][ T6465] ./file0: Can't lookup blockdev
[  103.044570][ T6440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  103.111938][ T5234] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  103.170003][ T6473] loop1: detected capacity change from 0 to 4096
[  103.216278][ T6473] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  103.248799][ T6482] loop4: detected capacity change from 0 to 512
[  103.278005][ T6481] loop0: detected capacity change from 0 to 1024
[  103.320320][ T6482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=846c118, mo2=0002]
[  103.335513][ T6482] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  103.412339][ T6482] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  103.442089][ T6482] EXT4-fs error (device loop4): __ext4_iget:4952: inode #13: block 524288: comm syz.4.422: invalid block
[  103.497271][ T6482] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.422: couldn't read orphan inode 13 (err -117)
[  103.569035][ T6482] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  103.687252][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  103.795721][ T6498] loop4: detected capacity change from 0 to 128
[  103.845975][ T6498] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  103.867773][ T6498] FAT-fs (loop4): Filesystem has been set read-only
[  103.901639][ T6499] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  104.178910][ T6505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.432'.
[  104.183472][ T6488] loop3: detected capacity change from 0 to 32768
[  104.342257][ T6488] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  104.479436][ T6503] loop2: detected capacity change from 0 to 32768
[  104.578884][ T6488] XFS (loop3): Ending clean mount
[  104.651069][ T6503] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.730691][ T6503] XFS (loop2): Ending clean mount
[  104.754268][ T6503] XFS (loop2): Quotacheck needed: Please wait.
[  104.781863][ T6528] mkiss: ax0: crc mode is auto.
[  104.798157][ T5233] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  104.879554][ T6503] XFS (loop2): Quotacheck: Done.
[  105.146805][ T5247] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  106.431832][ T6544] loop2: detected capacity change from 0 to 4096
[  106.494515][ T6544] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  107.014653][ T6552] Bluetooth: MGMT ver 1.23
[  107.342548][ T6533] loop0: detected capacity change from 0 to 40427
[  107.370472][ T6533] F2FS-fs (loop0): Wrong segment_count / block_count (64 > 16384)
[  107.409658][ T6533] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  107.576653][ T6545] loop3: detected capacity change from 0 to 32768
[  107.694824][ T6545] 
[  107.694824][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.694824][ T6545] 
[  107.771642][ T6545] 
[  107.771642][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.771642][ T6545] 
[  107.812996][ T6560] loop2: detected capacity change from 0 to 1024
[  107.840229][ T6545] 
[  107.840229][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.840229][ T6545] 
[  107.851931][ T6560] EXT4-fs: Ignoring removed nomblk_io_submit option
[  107.890314][ T6545] 
[  107.890314][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.890314][ T6545] 
[  107.938466][ T6562] loop4: detected capacity change from 0 to 1024
[  107.945667][ T6545] 
[  107.945667][ T6545]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  107.945667][ T6545] 
[  107.972184][ T6562] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  108.060537][ T5233] 
[  108.060537][ T5233]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.060537][ T5233] 
[  108.085451][  T112] 
[  108.085451][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.085451][  T112] 
[  108.106536][ T5233] 
[  108.106536][ T5233]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  108.106536][ T5233] 
[  108.166811][ T6533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  108.178611][ T6560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.203496][ T6562] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.451: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  108.326532][ T6562] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.451: couldn't read orphan inode 11 (err -117)
[  108.381428][ T6562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.428619][ T5247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.504453][ T6562] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.451: Invalid block bitmap block 0 in block_group 0
[  108.568825][ T6562] Quota error (device loop4): write_blk: dquota write failed
[  108.612745][ T6562] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  108.709054][ T6562] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.451: Failed to acquire dquot type 0
[  108.794075][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4
[  108.829831][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2
[  108.864836][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  108.882763][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.903238][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  108.912613][   T35] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-8
[  108.938063][   T35] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:2: Failed to release dquot type 0
[  108.954105][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  108.976981][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.020890][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.045733][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.068271][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.094163][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.115260][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.147032][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.163337][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.187902][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.218335][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.218394][ T5286] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x0
[  109.250191][ T5286] hid-generic 0000:3000000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [sy

] on syz0
[  109.906114][ T6587] netlink: 'syz.0.460': attribute type 3 has an invalid length.
[  109.986654][ T6581] loop4: detected capacity change from 0 to 4096
[  110.015183][ T6581] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  110.247558][ T6591] loop0: detected capacity change from 0 to 64
[  110.380911][   T29] audit: type=1800 audit(1728983973.215:63): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.462" name="file2" dev="loop0" ino=19 res=0 errno=0
[  111.207147][ T6584] loop2: detected capacity change from 0 to 40427
[  111.446801][ T6584] F2FS-fs (loop2): Found nat_bits in checkpoint
[  111.587998][ T6606] loop4: detected capacity change from 0 to 4096
[  111.615115][ T6614] loop0: detected capacity change from 0 to 64
[  111.645847][ T6606] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  111.700642][ T6584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  111.750468][ T6614] Trying to free block not in datazone
[  111.765859][ T6606] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 4096)
[  111.797043][ T5255] udevd[5255]: incorrect nilfs2 checksum on /dev/loop4
[  111.842635][ T6614] Trying to free block not in datazone
[  111.895538][ T6614] Trying to free block not in datazone
[  111.934271][ T6606] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  111.945841][ T6619] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  111.968874][ T6614] Trying to free block not in datazone
[  112.021756][ T5247] syz-executor: attempt to access beyond end of device
[  112.021756][ T5247] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  112.041955][ T6612] minix_free_inode: bit 8 already cleared
[  112.054352][ T6606] Remounting filesystem read-only
[  112.091264][ T5247] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  113.743572][ T6652] netlink: 87 bytes leftover after parsing attributes in process `syz.0.486'.
[  114.057718][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  114.070295][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  114.091478][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  114.118956][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  114.127020][   T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  114.134749][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  114.281475][ T6668] netlink: 100 bytes leftover after parsing attributes in process `syz.0.493'.
[  114.543771][ T6659] chnl_net:caif_netlink_parms(): no params data found
[  114.977718][ T6694] loop3: detected capacity change from 0 to 24
[  115.009419][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.027101][ T5240] Bluetooth: hci0: command tx timeout
[  115.038585][ T6659] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.055593][ T6694] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  115.078142][ T6694] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  115.171262][ T6659] bridge_slave_0: entered allmulticast mode
[  115.178270][ T6659] bridge_slave_0: entered promiscuous mode
[  115.187296][ T6659] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.208952][ T6659] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.238994][ T6659] bridge_slave_1: entered allmulticast mode
[  115.246182][ T6659] bridge_slave_1: entered promiscuous mode
[  115.377464][ T6659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  115.469423][ T6659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  115.682218][ T6659] team0: Port device team_slave_0 added
[  115.715611][ T6659] team0: Port device team_slave_1 added
[  115.763122][ T6698] syz.0.504 (6698): drop_caches: 2
[  115.820585][ T6700] netlink: 'syz.2.506': attribute type 10 has an invalid length.
[  115.850523][ T6700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.506'.
[  115.883260][ T6698] syz.0.504 (6698): drop_caches: 2
[  115.902212][ T6700] ipvlan1: entered promiscuous mode
[  115.932678][ T6700] ipvlan1: entered allmulticast mode
[  115.945618][ T6700] veth0_vlan: entered allmulticast mode
[  115.985583][ T6700] bridge0: port 3(ipvlan1) entered blocking state
[  116.016565][ T6700] bridge0: port 3(ipvlan1) entered disabled state
[  116.052359][ T6700] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  116.183165][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_0
[  116.191485][ T5240] Bluetooth: hci5: command tx timeout
[  116.427108][ T6704] loop3: detected capacity change from 0 to 512
[  116.550835][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.589525][ T6704] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  116.597897][ T6704] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  116.606343][ T6659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  116.619367][ T6659] batman_adv: batadv0: Adding interface: batadv_slave_1
[  116.626371][ T6659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  116.652496][ T6659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  116.711884][ T6690] loop4: detected capacity change from 0 to 32768
[  116.724042][ T6690] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.501 (6690)
[  116.737957][ T6704] EXT4-fs (loop3): 1 truncate cleaned up
[  116.744929][ T6704] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.764517][ T6704] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.508: Logical block already allocated
[  116.811205][ T6690] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.998053][ T6690] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  117.007096][ T6710] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[  117.143809][ T6690] BTRFS info (device loop4): using free-space-tree
[  117.203797][ T6659] hsr_slave_0: entered promiscuous mode
[  117.211649][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.296166][ T6726] loop0: detected capacity change from 0 to 256
[  117.324364][ T6659] hsr_slave_1: entered promiscuous mode
[  117.337281][ T6659] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  117.349083][ T6659] Cannot create hsr debugfs directory
[  117.896206][ T6690] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  118.133638][ T6743] loop0: detected capacity change from 0 to 128
[  118.250311][ T6743] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  118.276487][ T5240] Bluetooth: hci5: command tx timeout
[  118.392517][ T6743] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.446484][ T5234] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.489943][ T6743] ext2 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.615768][ T6659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.863766][ T5236] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  118.943289][ T6659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.200622][ T6659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.360564][ T6659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.554329][ T6659] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  119.574957][ T6659] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  119.590627][ T6659] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  119.618553][ T6659] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  119.753201][ T6659] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.770442][ T6659] 8021q: adding VLAN 0 to HW filter on device team0
[  119.792646][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.799816][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.812975][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.820088][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.888415][ T6659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  119.907451][ T6659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  120.120142][ T6659] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.188152][ T6659] veth0_vlan: entered promiscuous mode
[  120.201844][ T6659] veth1_vlan: entered promiscuous mode
[  120.237566][ T6659] veth0_macvtap: entered promiscuous mode
[  120.248501][ T6659] veth1_macvtap: entered promiscuous mode
[  120.263802][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.276702][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.287478][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.298328][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.308618][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.319343][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.329339][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.339834][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.349889][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.360643][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.372740][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.381716][ T5240] Bluetooth: hci5: command tx timeout
[  120.382412][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.398090][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.408675][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.419390][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.429296][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.439831][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.449775][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.460259][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.470176][ T6659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.480886][ T6659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.494746][ T6659] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.519945][ T6659] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.529035][ T6659] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.537951][ T6659] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.546777][ T6659] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.625110][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.638187][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.668832][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  120.677392][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  120.875112][ T6767] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.532'.
[  120.888948][ T6762] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.532'.
[  121.397386][ T6766] loop1: detected capacity change from 0 to 40427
[  121.416603][ T6766] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  121.448878][ T6766] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  121.465126][ T6766] F2FS-fs (loop1): invalid crc value
[  121.493491][ T6766] F2FS-fs (loop1): Found nat_bits in checkpoint
[  121.574992][ T6766] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  121.589003][ T6766] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  121.672999][ T6659] syz-executor: attempt to access beyond end of device
[  121.672999][ T6659] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  121.690313][ T6776] loop4: detected capacity change from 0 to 64
[  121.761812][ T6659] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  121.944529][ T6784] loop3: detected capacity change from 0 to 64
[  122.431959][ T5240] Bluetooth: hci5: command tx timeout
[  122.547689][ T6799] loop4: detected capacity change from 0 to 1024
[  122.648618][ T6801] syz.1.521 (6801): drop_caches: 2
[  122.683447][ T6801] syz.1.521 (6801): drop_caches: 2
[  122.818300][   T66] hfsplus: b-tree write err: -5, ino 4
[  123.277332][ T6779] loop0: detected capacity change from 0 to 32768
[  123.433274][ T6820] Bluetooth: MGMT ver 1.23
[  123.751792][ T5329] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  123.874761][ T6834] loop0: detected capacity change from 0 to 22
[  123.882304][ T6834] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  123.920954][ T6834] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  124.010821][ T5329] usb 4-1: Using ep0 maxpacket: 16
[  124.190891][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.220864][ T5329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.230668][ T5329] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  124.239873][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.561191][ T6840] loop0: detected capacity change from 0 to 32768
[  124.581808][ T6840] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.558 (6840)
[  124.610873][ T5329] usb 4-1: config 0 descriptor??
[  124.696489][ T6840] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.720910][ T6840] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  124.729672][ T6840] BTRFS info (device loop0): using free-space-tree
[  124.990341][ T6828] loop2: detected capacity change from 0 to 32768
[  125.009746][ T6825] loop1: detected capacity change from 0 to 32768
[  125.131711][ T6839] loop4: detected capacity change from 0 to 32768
[  125.138854][ T6839] XFS: ikeep mount option is deprecated.
[  125.144678][ T6839] XFS: ikeep mount option is deprecated.
[  125.330459][ T5329] hid-led 0003:1294:1320.000D: unbalanced delimiter at end of report description
[  125.340257][ T5329] hid-led 0003:1294:1320.000D: probe with driver hid-led failed with error -22
[  125.386056][ T6839] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.410614][ T6828] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.432087][ T6825] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.487348][ T6840] BTRFS info (device loop0): checking UUID tree
[  125.525372][    T9] usb 4-1: USB disconnect, device number 8
[  125.554927][ T6839] XFS (loop4): Ending clean mount
[  125.628233][ T6839] XFS (loop4): Quotacheck needed: Please wait.
[  125.679032][ T6828] XFS (loop2): Ending clean mount
[  125.689810][ T6839] XFS (loop4): Quotacheck: Done.
[  125.692450][ T6828] XFS (loop2): Quotacheck needed: Please wait.
[  125.784156][ T6840] BTRFS warning (device loop0): failed to trim 1 device(s), last error -512
[  125.842274][ T5234] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  125.863969][ T6825] XFS (loop1): Ending clean mount
[  125.869992][ T6828] XFS (loop2): Quotacheck: Done.
[  125.887980][ T5236] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  126.064451][   T29] audit: type=1800 audit(1728983988.975:64): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.554" name="file1" dev="loop2" ino=9286 res=0 errno=0
[  126.165262][ T6659] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  126.229376][ T5247] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  126.255469][ T6888] loop4: detected capacity change from 0 to 256
[  127.120873][    T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  127.151180][ T5286] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  127.282519][    T8] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  127.303993][    T8] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  127.361458][ T5286] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  127.370553][ T5286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.387205][    T8] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.397590][ T5286] usb 3-1: Product: syz
[  127.402344][ T5286] usb 3-1: Manufacturer: syz
[  127.406972][ T5286] usb 3-1: SerialNumber: syz
[  127.420967][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.435649][ T5286] usb 3-1: config 0 descriptor??
[  127.462982][ T5286] ch341 3-1:0.0: ch341-uart converter detected
[  127.482849][ T6906] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  127.508756][    T8] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  127.521521][ T6917] loop0: detected capacity change from 0 to 256
[  127.799484][ T6902] loop3: detected capacity change from 0 to 32768
[  127.824667][ T6902] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.571 (6902)
[  127.859425][ T5287] usb 5-1: USB disconnect, device number 8
[  127.899554][ T6902] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.917882][ T6902] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  127.982170][ T6922] loop0: detected capacity change from 0 to 512
[  128.105244][ T5286] usb 3-1: failed to send control message: -71
[  128.114327][ T5286] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  128.124053][ T6922] EXT4-fs (loop0): Invalid default hash set in the superblock
[  128.172886][ T5286] usb 3-1: USB disconnect, device number 9
[  128.180410][ T5286] ch341 3-1:0.0: device disconnected
[  128.263484][ T6902] BTRFS info (device loop3): rebuilding free space tree
[  128.324071][ T6902] BTRFS info (device loop3): disabling free space tree
[  128.333605][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.369303][ T6902] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.662014][ T5233] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  129.183243][ T6952] loop4: detected capacity change from 0 to 32768
[  129.962412][ T6977] loop1: detected capacity change from 0 to 8
[  130.246539][ T6986] loop4: detected capacity change from 0 to 1024
[  130.362263][ T6993] loop2: detected capacity change from 0 to 512
[  130.390717][ T6993] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  130.435796][ T6993] EXT4-fs (loop2): 1 orphan inode deleted
[  130.448196][ T6993] EXT4-fs (loop2): 1 truncate cleaned up
[  130.462452][ T6993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.611867][ T5247] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.957529][ T7011] loop4: detected capacity change from 0 to 256
[  131.074614][ T7011] FAT-fs (loop4): Directory bread(block 64) failed
[  131.114730][ T7011] FAT-fs (loop4): Directory bread(block 65) failed
[  131.134231][ T7011] FAT-fs (loop4): Directory bread(block 66) failed
[  131.157980][ T7011] FAT-fs (loop4): Directory bread(block 67) failed
[  131.164723][ T7011] FAT-fs (loop4): Directory bread(block 68) failed
[  131.180709][ T7011] FAT-fs (loop4): Directory bread(block 69) failed
[  131.188259][ T7011] FAT-fs (loop4): Directory bread(block 70) failed
[  131.210467][ T7011] FAT-fs (loop4): Directory bread(block 71) failed
[  131.221027][ T7011] FAT-fs (loop4): Directory bread(block 72) failed
[  131.232571][ T7011] FAT-fs (loop4): Directory bread(block 73) failed
[  131.263603][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.616'.
[  131.300415][ T7021] loop2: detected capacity change from 0 to 64
[  131.751280][ T5287] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  131.804595][ T7041] loop3: detected capacity change from 0 to 164
[  131.815616][ T7043] netlink: 'syz.4.628': attribute type 1 has an invalid length.
[  131.831553][ T7043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'.
[  131.932445][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.950196][ T5287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.999741][ T5287] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  132.025885][ T7045] netlink: 256 bytes leftover after parsing attributes in process `syz.4.630'.
[  132.037944][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.046860][ T7045] netlink: 56 bytes leftover after parsing attributes in process `syz.4.630'.
[  132.059846][ T5287] usb 3-1: config 0 descriptor??
[  132.171309][ T7051] CUSE: unknown device info ""
[  132.181259][ T7051] CUSE: zero length info key specified
[  132.256001][ T7053] loop4: detected capacity change from 0 to 256
[  132.483720][ T5287] elo 0003:04E7:0030.000E: item fetching failed at offset 2/5
[  132.501490][ T5287] elo 0003:04E7:0030.000E: parse failed
[  132.510950][ T5287] elo 0003:04E7:0030.000E: probe with driver elo failed with error -22
[  132.642851][ T7063] loop4: detected capacity change from 0 to 1024
[  132.680998][ T5286] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  132.698897][   T51] usb 3-1: USB disconnect, device number 10
[  132.860860][ T5286] usb 2-1: Using ep0 maxpacket: 16
[  132.867996][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.899438][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.919832][ T5286] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  132.951065][ T5286] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  132.970313][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.992405][ T5286] usb 2-1: config 0 descriptor??
[  133.080827][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  133.087932][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  133.088709][ T7057] loop3: detected capacity change from 0 to 32768
[  133.138229][ T7057] XFS: attr2 mount option is deprecated.
[  133.148937][ T7057] XFS: ikeep mount option is deprecated.
[  133.190352][ T7057] XFS: noikeep mount option is deprecated.
[  133.371130][ T7057] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  133.464106][ T5286] nti 0003:0757:0A00.000F: item fetching failed at offset 2/5
[  133.481661][ T5286] nti 0003:0757:0A00.000F: probe with driver nti failed with error -22
[  133.676930][ T7057] XFS (loop3): Ending clean mount
[  133.683920][ T7057] XFS (loop3): Quotacheck needed: Please wait.
[  133.707392][ T7057] XFS (loop3): Quotacheck: Done.
[  133.817395][ T7077] PM: Enabling pm_trace changes system date and time during resume.
[  133.817395][ T7077] PM: Correct system time has to be restored manually after resume.
[  133.896829][ T7065] loop4: detected capacity change from 0 to 32768
[  134.131326][ T5233] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  134.545465][ T5287] usb 2-1: USB disconnect, device number 7
[  134.656924][ T7091] loop0: detected capacity change from 0 to 512
[  134.664877][ T7087] usb usb5: usbfs: process 7087 (syz.2.646) did not claim interface 0 before use
[  134.695628][ T7091] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  134.771455][ T7091] EXT4-fs (loop0): 1 orphan inode deleted
[  134.777294][ T7091] EXT4-fs (loop0): 1 truncate cleaned up
[  134.784266][ T7091] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.865842][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.880913][ T5330] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  135.061751][ T7106] loop4: detected capacity change from 0 to 1024
[  135.114826][ T7106] hfsplus: request for non-existent node 134217728 in B*Tree
[  135.129663][ T5330] usb 4-1: Using ep0 maxpacket: 16
[  135.176562][ T5330] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  135.191623][ T5330] usb 4-1: config 0 descriptor has 1 excess byte, ignoring
[  135.209145][ T7106] hfsplus: request for non-existent node 134217728 in B*Tree
[  135.230841][ T5330] usb 4-1: config 0 has no interface number 0
[  135.261123][ T5330] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  135.280442][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.291811][ T7110] loop2: detected capacity change from 0 to 256
[  135.296000][ T5330] usb 4-1: Product: syz
[  135.307836][ T5330] usb 4-1: Manufacturer: syz
[  135.318389][ T5330] usb 4-1: SerialNumber: syz
[  135.351782][ T5330] usb 4-1: config 0 descriptor??
[  135.414803][ T5330] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  135.424707][ T5330] usb 4-1: No valid video chain found.
[  135.631599][ T5330] usb 4-1: USB disconnect, device number 9
[  135.657310][ T7125] cgroup: name respecified
[  135.959032][ T7135] erspan0: entered promiscuous mode
[  135.996001][ T7135] erspan0: left promiscuous mode
[  136.038331][ T5330] IPVS: starting estimator thread 0...
[  136.061468][ T7137] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  136.150870][ T7140] IPVS: using max 18 ests per chain, 43200 per kthread
[  136.579191][ T7156] loop0: detected capacity change from 0 to 1024
[  137.112548][ T7144] loop2: detected capacity change from 0 to 32768
[  137.168413][ T7148] loop3: detected capacity change from 0 to 32768
[  137.230258][ T7144] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.351295][ T7154] loop4: detected capacity change from 0 to 40427
[  137.366096][ T7154] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  137.374022][ T7154] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  137.401759][ T7154] F2FS-fs (loop4): invalid crc_offset: 33558524
[  137.402491][ T7148] JBD2: Ignoring recovery information on journal
[  137.427477][ T7154] F2FS-fs (loop4): Found nat_bits in checkpoint
[  137.483568][ T7154] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  137.492110][ T7154] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  137.539634][ T7148] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  137.582004][ T7144] XFS (loop2): Ending clean mount
[  137.582415][ T7154] F2FS-fs (loop4): invalid namelen(0), ino:0, run fsck to fix.
[  137.602397][ T7144] XFS (loop2): Quotacheck needed: Please wait.
[  137.673351][ T7144] XFS (loop2): Quotacheck: Done.
[  137.838641][ T5247] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.865345][ T5233] ocfs2: Unmounting device (7,3) on (node local)
[  138.115085][ T7181] netlink: 'syz.0.683': attribute type 4 has an invalid length.
[  138.130508][ T7181] netlink: 17 bytes leftover after parsing attributes in process `syz.0.683'.
[  138.408167][ T7197] loop3: detected capacity change from 0 to 256
[  138.888231][ T7218] nbd: must specify at least one socket
[  138.909493][ T7220] loop2: detected capacity change from 0 to 256
[  138.936704][ T7220] exfat: Deprecated parameter 'utf8'
[  138.974309][ T7220] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  139.337690][ T7231] loop4: detected capacity change from 0 to 512
[  139.344976][ T7231] EXT4-fs: Ignoring removed nobh option
[  139.376758][ T7232] loop0: detected capacity change from 0 to 164
[  139.442983][ T7232] rock: corrupted directory entry. extent=41, offset=65536, size=8
[  139.591567][   T25] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  139.680638][ T7231] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.717390][ T7208] loop1: detected capacity change from 0 to 32768
[  139.749536][   T25] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  139.766892][ T7231] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.784265][   T25] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.843011][   T25] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  139.859713][   T25] usb 4-1: config 0 interface 0 has no altsetting 0
[  139.866723][   T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c537, bcdDevice= 0.00
[  139.884987][ T7230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.706: bg 0: block 224: padding at end of block bitmap is not set
[  139.910887][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.962236][ T7230] EXT4-fs (loop4): Remounting filesystem read-only
[  140.053577][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.091916][   T25] usb 4-1: config 0 descriptor??
[  140.283338][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  140.297459][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  140.306878][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  140.339657][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  140.363253][   T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  140.378391][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  140.422597][ T7242] loop0: detected capacity change from 0 to 4096
[  140.436225][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  140.852730][ T5287] usb 4-1: USB disconnect, device number 10
[  141.047586][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.183267][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.510554][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.860626][ T7283] loop1: detected capacity change from 0 to 256
[  141.887754][   T29] audit: type=1326 audit(1728984004.795:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.726" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc08777dff9 code=0x0
[  141.969816][   T12] bridge_slave_1: left allmulticast mode
[  141.975930][   T12] bridge_slave_1: left promiscuous mode
[  141.982888][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.025097][ T7283] MINIX-fs: mounting file system with errors, running fsck is recommended
[  142.026948][   T12] bridge_slave_0: left allmulticast mode
[  142.052591][   T12] bridge_slave_0: left promiscuous mode
[  142.058343][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.151237][ T5330] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  142.301017][ T5330] usb 4-1: Using ep0 maxpacket: 16
[  142.312477][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.330716][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.358881][ T5330] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[  142.368348][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.378782][ T5330] usb 4-1: config 0 descriptor??
[  142.430870][ T5240] Bluetooth: hci4: command tx timeout
[  142.509423][ T7289] Driver unsupported XDP return value 0 on prog  (id 32) dev N/A, expect packet loss!
[  142.802235][ T7293] netlink: 56 bytes leftover after parsing attributes in process `syz.4.731'.
[  142.825606][ T5330] hid-rmi 0003:17EF:6085.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0
[  142.906681][ T7295] loop4: detected capacity change from 0 to 512
[  142.990252][ T7295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.030983][ T7295] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.055832][ T5330] usb 4-1: USB disconnect, device number 11
[  143.241082][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.285025][ T7291] loop1: detected capacity change from 0 to 32768
[  143.320187][ T7291] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  143.333460][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.365556][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.377850][   T12] bond0 (unregistering): Released all slaves
[  143.415626][ T7243] chnl_net:caif_netlink_parms(): no params data found
[  143.708613][ T7291] XFS (loop1): Ending clean mount
[  143.841132][ T7291] syz.1.730 (7291) used greatest stack depth: 16952 bytes left
[  143.884495][ T6659] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  143.908482][ T7324] loop3: detected capacity change from 0 to 1024
[  144.096649][ T7324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.127144][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.171040][ T7324] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.192734][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.200418][ T7243] bridge_slave_0: entered allmulticast mode
[  144.243464][ T7243] bridge_slave_0: entered promiscuous mode
[  144.379990][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.409314][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.419749][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.422218][ T7243] bridge_slave_1: entered allmulticast mode
[  144.474449][ T7243] bridge_slave_1: entered promiscuous mode
[  144.570880][ T5240] Bluetooth: hci4: command tx timeout
[  144.728251][    T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  144.751654][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.913005][    T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  144.921281][    T8] usb 5-1: config 0 has no interface number 0
[  144.927403][    T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.010477][    T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.013427][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.038411][    T8] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  145.066568][    T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.101865][    T8] usb 5-1: config 0 descriptor??
[  145.162589][   T12] hsr_slave_0: left promiscuous mode
[  145.179163][   T12] hsr_slave_1: left promiscuous mode
[  145.201430][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  145.237484][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  145.302537][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  145.340966][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  145.395403][ T7344] loop3: detected capacity change from 0 to 32768
[  145.429040][   T12] veth1_macvtap: left promiscuous mode
[  145.444380][ T7344] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.741 (7344)
[  145.455845][   T12] veth0_macvtap: left promiscuous mode
[  145.481310][   T12] veth1_vlan: left promiscuous mode
[  145.501179][   T12] veth0_vlan: left promiscuous mode
[  145.522674][    T8] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  145.540985][    T8] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  145.568690][ T7344] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.577488][    T8] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  145.586290][ T7344] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  145.586353][ T7344] BTRFS info (device loop3): using free-space-tree
[  145.640842][    T8] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  145.648117][    T8] prodikeys 0003:041E:2801.0012: unknown main item tag 0x0
[  145.684539][    T8] prodikeys 0003:041E:2801.0012: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1
[  145.699121][    T8] hid_prodikeys: hid-prodikeys: failed to find output report
[  145.699121][    T8] 
[  145.817101][ T7344] BTRFS info (device loop3): rebuilding free space tree
[  145.851627][ T5287] usb 5-1: USB disconnect, device number 9
[  145.972063][ T7346] loop0: detected capacity change from 0 to 32768
[  146.110487][ T7346] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.149931][ T5233] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.300854][ T7346] XFS (loop0): Ending clean mount
[  146.324513][ T7346] XFS (loop0): Quotacheck needed: Please wait.
[  146.441072][ T7346] XFS (loop0): Quotacheck: Done.
[  146.565088][ T5236] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.591082][ T5240] Bluetooth: hci4: command tx timeout
[  146.845548][ T7348] loop1: detected capacity change from 0 to 32768
[  146.899927][ T7396] loop3: detected capacity change from 0 to 1024
[  146.947167][ T7348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.743 (7348)
[  147.037653][ T7348] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  147.079907][ T7396] syz.3.744: attempt to access beyond end of device
[  147.079907][ T7396] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  147.130596][ T7348] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  147.190213][ T7348] BTRFS info (device loop1): using free-space-tree
[  147.538902][ T7413] Invalid logical block size (65532)
[  147.599349][ T7401] loop4: detected capacity change from 0 to 32768
[  147.626874][ T7401] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.751 (7401)
[  147.709012][ T7401] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  147.724201][ T7401] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  147.743696][ T7401] BTRFS info (device loop4): using free-space-tree
[  148.111711][   T12] team0 (unregistering): Port device team_slave_1 removed
[  148.147543][ T7401] BTRFS info (device loop4): setting incompat feature flag for DEFAULT_SUBVOL (0x2)
[  148.153940][ T7348] BTRFS error (device loop1): open_ctree failed
[  148.413723][ T5234] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  148.495704][   T12] team0 (unregistering): Port device team_slave_0 removed
[  148.680848][ T5240] Bluetooth: hci4: command tx timeout
[  148.886373][ T7443] usb usb8: usbfs: process 7443 (syz.1.756) did not claim interface 0 before use
[  148.908656][ T7423] loop0: detected capacity change from 0 to 40427
[  148.923461][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'.
[  148.953720][ T7423] F2FS-fs (loop0): heap/no_heap options were deprecated
[  148.989340][ T7423] F2FS-fs (loop0): invalid crc value
[  149.041732][ T7423] F2FS-fs (loop0): Found nat_bits in checkpoint
[  149.199334][ T7423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  149.807858][ T7466] loop0: detected capacity change from 0 to 512
[  149.898675][ T7466] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  149.917614][ T7466] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  149.931233][ T7466] EXT4-fs (loop0): 1 truncate cleaned up
[  149.938175][ T7466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.961658][ T7466] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.761: Logical block already allocated
[  150.100620][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.139399][ T7478] loop4: detected capacity change from 0 to 8
[  150.532007][ T7486] loop1: detected capacity change from 0 to 2048
[  150.705064][ T7243] team0: Port device team_slave_0 added
[  150.716683][ T7486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.807005][ T7486] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  150.854689][ T7243] team0: Port device team_slave_1 added
[  150.967024][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.976265][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.009055][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.012399][ T7499] loop4: detected capacity change from 0 to 64
[  151.021544][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.032803][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.058676][    C1] vkms_vblank_simulate: vblank timer overrun
[  151.065143][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  151.121228][ T6659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.456410][ T7243] hsr_slave_0: entered promiscuous mode
[  151.475804][ T7243] hsr_slave_1: entered promiscuous mode
[  151.560976][ T7243] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  151.569939][ T7243] Cannot create hsr debugfs directory
[  151.710256][ T7515] loop4: detected capacity change from 0 to 512
[  151.722412][   T29] audit: type=1326 audit(1728984014.635:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  151.803587][ T7515] EXT4-fs: Ignoring removed mblk_io_submit option
[  151.821866][   T29] audit: type=1326 audit(1728984014.635:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  151.991740][   T29] audit: type=1326 audit(1728984014.635:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.014102][   T29] audit: type=1326 audit(1728984014.635:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.036171][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.043263][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'.
[  152.061028][   T29] audit: type=1326 audit(1728984014.635:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.083492][   T29] audit: type=1326 audit(1728984014.635:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.084009][ T7515] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 1: comm syz.4.784: invalid block
[  152.110947][   T29] audit: type=1326 audit(1728984014.635:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.139689][   T29] audit: type=1326 audit(1728984014.635:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7513 comm="syz.1.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f390af7dff9 code=0x7ffc0000
[  152.264060][ T7515] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.784: couldn't read orphan inode 11 (err -117)
[  152.358756][ T7515] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.587778][ T7519] loop0: detected capacity change from 0 to 32768
[  152.607902][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.658383][ T7519] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  152.761830][   T12] IPVS: stop unused estimator thread 0...
[  152.828517][ T7519] XFS (loop0): Ending clean mount
[  152.961982][ T7551] loop4: detected capacity change from 0 to 512
[  152.969021][ T7551] EXT4-fs: Ignoring removed bh option
[  153.026113][ T5236] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  153.045126][ T7508] loop3: detected capacity change from 0 to 40427
[  153.080698][ T7551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  153.101223][ T7508] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  153.111360][ T7508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  153.146647][ T7508] F2FS-fs (loop3): invalid crc value
[  153.154855][ T7551] EXT4-fs error (device loop4): ext4_orphan_get:1414: comm syz.4.792: bad orphan inode 17
[  153.222146][ T7508] F2FS-fs (loop3): Found nat_bits in checkpoint
[  153.260927][ T7551] EXT4-fs (loop4): Remounting filesystem read-only
[  153.267491][ T7551] ext4_test_bit(bit=16, block=4) = 1
[  153.280858][ T7551] is_bad_inode(inode)=0
[  153.285063][ T7551] NEXT_ORPHAN(inode)=1048336
[  153.289997][ T7551] max_ino=32
[  153.300520][ T7551] i_nlink=0
[  153.320569][ T7551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.409916][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.528726][ T7508] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  153.564097][ T7508] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  153.781635][ T5233] syz-executor: attempt to access beyond end of device
[  153.781635][ T5233] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.827811][ T5233] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  154.694658][ T7599] loop3: detected capacity change from 0 to 128
[  154.923294][ T7243] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  154.961855][ T7243] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  154.973892][ T7596] loop0: detected capacity change from 0 to 40427
[  154.993302][ T7599] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  154.997590][ T7553] loop1: detected capacity change from 0 to 32768
[  155.029600][ T7243] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  155.066026][ T7243] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  155.127501][ T7596] F2FS-fs (loop0): inline encryption not supported
[  155.249471][ T7599] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. Quota mode: none.
[  155.275215][ T7596] F2FS-fs (loop0): Found nat_bits in checkpoint
[  155.407607][ T5233] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  155.432734][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.448755][ T7243] 8021q: adding VLAN 0 to HW filter on device team0
[  155.477757][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.484948][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.586635][ T7596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  155.603607][   T66] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.610803][   T66] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.656065][ T7615] loop3: detected capacity change from 0 to 512
[  155.679023][ T7615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  155.695349][ T7243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.726735][ T7243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.816023][ T7615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  155.831659][ T7615] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.906344][ T7615] EXT4-fs warning (device loop3): __ext4_unlink:3285: inode #16: comm syz.3.809: Deleting file 'file2' with no links
[  155.995794][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.075484][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.275455][ T7243] veth0_vlan: entered promiscuous mode
[  156.304820][ T7637] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  156.331516][ T7637] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  156.388362][ T7243] veth1_vlan: entered promiscuous mode
[  156.543868][ T7243] veth0_macvtap: entered promiscuous mode
[  156.592031][ T7243] veth1_macvtap: entered promiscuous mode
[  156.659304][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.702587][ T7650] loop4: detected capacity change from 0 to 512
[  156.705465][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.709538][ T7650] EXT4-fs: Ignoring removed mblk_io_submit option
[  156.774698][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.805624][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.826049][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.838154][ T7650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.846995][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.863140][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.874091][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.884460][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.896094][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.921185][ T7650] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.956685][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.008817][ T7663] loop3: detected capacity change from 0 to 2048
[  157.020433][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.054764][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.064850][ T7663] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.089564][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.104970][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.125291][ T7664] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.126028][ T7663] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  157.151797][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.171254][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.193021][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.200888][    T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  157.204528][ T7663] Remounting filesystem read-only
[  157.230931][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.251968][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.284167][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.312677][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.323807][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.371793][    T8] usb 2-1: Using ep0 maxpacket: 16
[  157.445711][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.491593][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.512216][    T8] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  157.548925][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.629187][ T7655] loop0: detected capacity change from 0 to 32768
[  157.634407][    T8] usb 2-1: config 0 descriptor??
[  157.636451][ T7655] XFS: noikeep mount option is deprecated.
[  157.648346][ T7668] mkiss: ax0: crc mode is auto.
[  157.662705][ T7243] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.714039][ T7655] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  157.714845][ T7243] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.757496][ T7243] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.787572][ T7655] XFS (loop0): Ending clean mount
[  157.795471][ T7655] XFS (loop0): Quotacheck needed: Please wait.
[  157.850670][ T7243] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.923461][ T7655] XFS (loop0): Quotacheck: Done.
[  158.132060][ T5236] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  158.148433][ T7687] loop4: detected capacity change from 0 to 256
[  158.239878][ T7687] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  158.368400][    T8] savu 0003:1E7D:2D5A.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  158.414235][ T3991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.438768][ T3991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.441476][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  158.465883][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  158.578811][ T5329] usb 2-1: USB disconnect, device number 8
[  158.593035][ T7698] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 4, id = 0
[  158.766526][ T7702] loop3: detected capacity change from 0 to 1024
[  159.034769][ T3991] hfsplus: b-tree write err: -5, ino 4
[  159.200649][ T7718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.837'.
[  159.441909][ T7726] loop3: detected capacity change from 0 to 512
[  159.614502][ T7726] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  159.622309][ T7726] UDF-fs: Scanning with blocksize 512 failed
[  159.642332][ T7726] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  159.676977][ T7726] UDF-fs: Scanning with blocksize 1024 failed
[  159.721655][ T7726] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  159.750859][ T7726] UDF-fs: Scanning with blocksize 2048 failed
[  159.778155][ T7726] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  159.816572][ T7726] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.886080][   T29] audit: type=1800 audit(1728984022.795:74): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.840" name="file1" dev="loop3" ino=26 res=0 errno=0
[  160.230984][ T7763] program syz.2.854 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  160.585194][ T7781] tipc: Started in network mode
[  160.595252][ T7781] tipc: Node identity , cluster identity 4711
[  160.605365][ T7781] tipc: Failed to set node id, please configure manually
[  160.618122][ T7781] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  161.370960][    T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  161.390848][ T5240] Bluetooth: hci4: command tx timeout
[  161.542697][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.574145][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.616734][    T8] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  161.626166][ T7821] loop3: detected capacity change from 0 to 1024
[  161.670074][ T7774] loop4: detected capacity change from 0 to 40427
[  161.690806][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.719893][ T7774] F2FS-fs (loop4): invalid crc value
[  161.743812][    T8] usb 3-1: config 0 descriptor??
[  161.773784][ T7774] F2FS-fs (loop4): Found nat_bits in checkpoint
[  161.784972][ T7821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.953617][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.993639][ T7774] F2FS-fs (loop4): Start checkpoint disabled!
[  162.042158][ T7774] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  162.144325][   T29] audit: type=1800 audit(1728984025.055:75): pid=7774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.857" name="bus" dev="loop4" ino=10 res=0 errno=0
[  162.185535][ T7832] loop3: detected capacity change from 0 to 1024
[  162.185568][    T8] wacom 0003:056A:032C.0014: unknown main item tag 0x0
[  162.215202][ T7774] syz.4.857: attempt to access beyond end of device
[  162.215202][ T7774] loop4: rw=2049, sector=77824, nr_sectors = 976 limit=40427
[  162.221513][    T8] wacom 0003:056A:032C.0014: hidraw0: USB HID vf4.0d Device [HID 056a:032c] on usb-dummy_hcd.2-1/input0
[  162.231820][ T7832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  162.296550][ T7788] loop1: detected capacity change from 0 to 32768
[  162.306338][ T7832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.425679][ T7788] JBD2: Ignoring recovery information on journal
[  162.491584][ T5329] usb 3-1: USB disconnect, device number 11
[  162.572944][   T66] kworker/u8:4: attempt to access beyond end of device
[  162.572944][   T66] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  162.594436][ T5233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.626677][   T66] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  162.640466][   T66] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  162.665628][ T7788] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  163.367224][ T6659] ocfs2: Unmounting device (7,1) on (node local)
[  164.279477][ T7858] tipc: Started in network mode
[  164.279515][ T7858] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711
[  164.279554][ T7858] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  165.340132][ T7864] loop0: detected capacity change from 0 to 128
[  165.598982][ T7864] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/158/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  165.826928][ T7867] loop4: detected capacity change from 0 to 256
[  165.918057][    C0] vkms_vblank_simulate: vblank timer overrun
[  166.033254][ T7850] loop2: detected capacity change from 0 to 32768
[  166.073605][ T7850] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.879 (7850)
[  166.204972][ T7869] loop1: detected capacity change from 0 to 1024
[  166.331627][ T7848] loop3: detected capacity change from 0 to 40427
[  166.489299][ T7848] F2FS-fs (loop3): Found nat_bits in checkpoint
[  166.587954][ T7877] loop0: detected capacity change from 0 to 512
[  166.659315][ T7867] FAT-fs (loop4): Directory bread(block 64) failed
[  166.695703][ T7877] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  166.716665][ T7867] FAT-fs (loop4): Directory bread(block 65) failed
[  166.755639][ T7867] FAT-fs (loop4): Directory bread(block 66) failed
[  166.765966][ T7877] EXT4-fs (loop0): orphan cleanup on readonly fs
[  166.840256][ T7867] FAT-fs (loop4): Directory bread(block 67) failed
[  166.875446][ T7877] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  166.921035][ T7867] FAT-fs (loop4): Directory bread(block 68) failed
[  166.966910][ T7867] FAT-fs (loop4): Directory bread(block 69) failed
[  166.975015][ T7877] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  166.992391][ T7869] EXT4-fs (loop1): Test dummy encryption mode enabled
[  167.012752][ T7867] FAT-fs (loop4): Directory bread(block 70) failed
[  167.054723][ T7867] FAT-fs (loop4): Directory bread(block 71) failed
[  167.070345][ T7869] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  167.088730][ T7877] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  167.099967][ T7867] FAT-fs (loop4): Directory bread(block 72) failed
[  167.135808][ T7877] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #16: comm syz.0.888: casefold flag without casefold feature
[  167.150454][ T7867] FAT-fs (loop4): Directory bread(block 73) failed
[  167.257896][ T7877] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.888: couldn't read orphan inode 16 (err -117)
[  167.340677][ T7877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  167.531898][ T7869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.676883][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.895968][   T24] sched: DL replenish lagged too much
[  168.057521][ T7894] loop0: detected capacity change from 0 to 1024
[  168.204794][ T7894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.248689][ T7892] loop4: detected capacity change from 0 to 4096
[  168.396729][ T7892] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  168.411586][ T7894] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #12: block 7: comm syz.0.893: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0
[  168.434505][ T7869] fscrypt (loop1): Error allocating 'cts(cbc(aes))' transform: -4
[  168.491039][ T7892] UDF-fs: Scanning with blocksize 512 failed
[  168.572830][ T7892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.669965][ T7894] EXT4-fs error (device loop0) in ext4_delete_inline_entry:1777: Corrupt filesystem
[  168.855555][ T6659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.939079][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.334202][ T7905] program syz.4.898 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  169.940901][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  170.140890][    T9] usb 2-1: Using ep0 maxpacket: 16
[  170.216070][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31551, setting to 1024
[  170.313603][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  170.557602][    T9] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a
[  170.637941][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.698659][    T9] usb 2-1: Product: syz
[  170.734743][    T9] usb 2-1: Manufacturer: syz
[  170.739400][    T9] usb 2-1: SerialNumber: syz
[  170.769441][ T7897] loop2: detected capacity change from 0 to 32768
[  170.821235][    T9] usb 2-1: config 0 descriptor??
[  170.848510][ T7914] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  170.925721][ T7897] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  171.029830][ T7936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.907'.
[  171.140090][ T5330] IPVS: starting estimator thread 0...
[  171.236237][ T7897] XFS (loop2): Ending clean mount
[  171.271038][ T7943] IPVS: using max 19 ests per chain, 45600 per kthread
[  171.295130][    T9] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  171.475025][ T7243] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  171.601849][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  171.629336][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  171.750564][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  171.783999][ T7950] loop4: detected capacity change from 0 to 128
[  171.793617][ T7948] loop0: detected capacity change from 0 to 1024
[  171.865413][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  171.907097][ T7948] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  171.991058][ T7950] FAT-fs (loop4): FAT read failed (blocknr 234)
[  171.998196][    T9] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3
[  172.021666][ T7948] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  172.084491][ T7950] FAT-fs (loop4): FAT read failed (blocknr 234)
[  172.128514][ T7948] EXT4-fs (loop0): invalid journal inode
[  172.158768][    T9] usb 2-1: USB disconnect, device number 9
[  172.201041][ T7948] EXT4-fs (loop0): can't get journal size
[  172.257825][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  172.294704][ T7948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  172.419949][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  172.558595][    T9] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  172.675082][    T9] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3
[  172.725372][ T5236] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.753730][    T9] quatech2 2-1:0.0: device disconnected
[  173.427331][ T7964] loop0: detected capacity change from 0 to 1024
[  173.552454][ T7966] loop2: detected capacity change from 0 to 1024
[  173.712866][ T7966] hfsplus: bad catalog entry type
[  173.868744][   T52] hfsplus: b-tree write err: -5, ino 4
[  174.135559][ T7947] loop3: detected capacity change from 0 to 32768
[  174.156369][ T7972] loop2: detected capacity change from 0 to 512
[  174.215278][ T7972] EXT4-fs: Ignoring removed orlov option
[  174.240954][ T7947] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  174.340850][ T7972] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  174.401061][ T7972] System zones: 0-2, 18-18, 34-34
[  174.457666][ T7947] (syz.3.910,7947,0):ocfs2_read_blocks:239 ERROR: status = -12
[  174.468770][ T7972] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  174.516787][ T7947] (syz.3.910,7947,0):ocfs2_xattr_block_find:2832 ERROR: status = -12
[  174.571035][ T7972] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  174.641158][ T7972] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.921: Failed to acquire dquot type 1
[  174.774050][ T7972] EXT4-fs (loop2): 1 truncate cleaned up
[  174.801162][ T5233] ocfs2: Unmounting device (7,3) on (node local)
[  174.828702][ T7972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.892688][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  174.930597][ T7972] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.153112][ T7972] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  175.153313][ T7972] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  175.153349][ T7972] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.921: Failed to acquire dquot type 1
[  175.174322][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.174403][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.174438][    T9] usb 2-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  175.174463][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.176494][    T9] usb 2-1: config 0 descriptor??
[  175.397916][ T7243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.735867][ T7993] loop2: detected capacity change from 0 to 256
[  175.762454][    T9] holtek 0003:1241:5015.0015: item fetching failed at offset 3/5
[  175.762927][    T9] holtek 0003:1241:5015.0015: parse failed
[  175.762977][    T9] holtek 0003:1241:5015.0015: probe with driver holtek failed with error -22
[  176.131399][ T5330] usb 2-1: USB disconnect, device number 10
[  176.871667][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.937'.
[  177.342501][ T8022] devtmpfs: Too few inodes for current use
[  178.469318][ T8042] loop2: detected capacity change from 0 to 4096
[  178.523299][ T8042] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  178.592327][ T8048] program syz.4.956 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  178.680152][ T8042] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  178.728700][ T8042] ntfs3(loop2): Failed to load $Extend (-22).
[  178.768335][ T8042] ntfs3(loop2): Failed to initialize $Extend.
[  179.622757][ T8067] loop0: detected capacity change from 0 to 1024
[  179.701936][ T8067] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  179.849581][ T8072] loop4: detected capacity change from 0 to 1024
[  179.951142][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.968'.
[  179.999173][ T8072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.111484][ T8072] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  180.433664][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.972'.
[  180.504389][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.517136][ T8086] netlink: 176 bytes leftover after parsing attributes in process `syz.2.972'.
[  180.984772][ T8094] loop4: detected capacity change from 0 to 1024
[  181.237349][ T5248] Bluetooth: hci1: command 0x0406 tx timeout
[  181.243691][ T5249] Bluetooth: hci2: command 0x0406 tx timeout
[  181.249749][ T5249] Bluetooth: hci0: command 0x0406 tx timeout
[  181.256499][ T5249] Bluetooth: hci3: command 0x0406 tx timeout
[  183.716417][ T8104] loop0: detected capacity change from 0 to 32768
[  183.907427][ T8104] find_entry called with index = 0
[  184.008366][ T8110] loop4: detected capacity change from 0 to 32768
[  184.021545][ T8104] find_entry called with index = 0
[  184.060687][ T8104] read_mapping_page failed!
[  184.107356][ T8104] ERROR: (device loop0): txCommit: 
[  184.107356][ T8104] 
[  184.207514][ T8104] ERROR: (device loop0): remounting filesystem as read-only
[  185.032957][ T8143] loop3: detected capacity change from 0 to 4096
[  185.127250][ T8143] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  185.291232][ T8143] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  185.353266][ T8147] loop4: detected capacity change from 0 to 1024
[  185.496920][ T8147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  186.168601][ T8159] loop0: detected capacity change from 0 to 256
[  186.238769][ T8161] netlink: 'syz.3.1003': attribute type 6 has an invalid length.
[  187.020193][ T8139] loop2: detected capacity change from 0 to 40427
[  187.282680][ T8169] loop4: detected capacity change from 0 to 4096
[  187.321738][ T5330] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  187.534892][ T5330] usb 4-1: Using ep0 maxpacket: 16
[  187.571895][ T8169] ntfs3(loop4): failed to convert "0000" to iso8859-14
[  187.592825][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.604522][ T8169] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  187.640914][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.699116][ T8169] ntfs3(loop4): failed to convert name for inode 1e.
[  187.717317][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  187.811498][ T5330] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[  187.856718][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.908286][ T5330] usb 4-1: config 0 descriptor??
[  188.459132][ T5330] ryos 0003:1E7D:31CE.0016: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0
[  188.550456][ T8177] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  188.729513][ T5330] usb 4-1: USB disconnect, device number 12
[  188.998826][ T8181] hugetlbfs: Bad value 'm' for mount option 'size'
[  188.998826][ T8181] 
[  189.127051][ T8168] loop0: detected capacity change from 0 to 32768
[  189.813779][ T5330] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  190.025274][ T5330] usb 3-1: Using ep0 maxpacket: 8
[  190.101121][ T5330] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  190.109362][ T5330] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  190.200953][ T5330] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  190.231654][ T8191] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1015'.
[  190.279728][ T5330] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  190.350309][ T5330] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  190.480935][ T5330] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  190.580983][ T5330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.125614][ T5330] usb 3-1: USB disconnect, device number 12
[  191.530624][ T8209] loop4: detected capacity change from 0 to 512
[  191.722149][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.857562][ T8209] ext4 filesystem being mounted at /255/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.253833][ T5234] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.937562][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  218.951725][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  258.650559][ T4628] Bluetooth: hci5: command 0x0405 tx timeout
[  279.802832][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  279.817115][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  325.227343][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  325.572655][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  325.579027][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  349.197712][   T30] INFO: task kmmpd-loop4:8214 blocked for more than 149 seconds.
[  349.340878][   T30]       Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  349.348040][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  349.561177][   T30] task:kmmpd-loop4     state:R  running task     stack:24880 pid:8214  tgid:8214  ppid:2      flags:0x00004000
[  349.740870][   T30] Call Trace:
[  349.744210][   T30]  <TASK>
[  349.747159][   T30]  __schedule+0x18af/0x4bd0
[  349.890857][   T30]  ? __pfx___schedule+0x10/0x10
[  349.895786][   T30]  ? __pfx_lock_release+0x10/0x10
[  349.986109][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  350.060831][   T30]  ? schedule+0x90/0x320
[  350.065147][   T30]  schedule+0x14b/0x320
[  350.069333][   T30]  io_schedule+0x8d/0x110
[  350.131436][   T30]  bit_wait_io+0x12/0xd0
[  350.135761][   T30]  __wait_on_bit+0xb0/0x2f0
[  350.140299][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  350.290849][   T30]  out_of_line_wait_on_bit+0x1d5/0x260
[  350.296375][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  350.390836][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  350.396881][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  350.460806][   T30]  write_mmp_block_thawed+0x422/0x5b0
[  350.466237][   T30]  ? __pfx_write_mmp_block_thawed+0x10/0x10
[  350.549916][   T30]  ? __pfx_process_timeout+0x10/0x10
[  350.580825][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  350.587729][   T30]  ? kmmpd+0x26d/0xaa0
[  350.650821][   T30]  do_exit+0x1f7f/0x28e0
[  350.655138][   T30]  ? __pfx_do_exit+0x10/0x10
[  350.659758][   T30]  ? __kthread_parkme+0x169/0x1d0
[  350.750817][   T30]  ? kthread_exit+0x47/0x60
[  350.755384][   T30]  ? __pfx_kmmpd+0x10/0x10
[  350.759826][   T30]  ? kthread+0x310/0x390
[  350.810785][   T30]  ? __pfx_kmmpd+0x10/0x10
[  350.815264][   T30]  ? __pfx_kthread+0x10/0x10
[  350.819879][   T30]  ? ret_from_fork+0x4b/0x80
[  350.880814][   T30]  ? __pfx_kthread+0x10/0x10
[  350.885464][   T30]  ? ret_from_fork_asm+0x1a/0x30
[  350.890447][   T30]  </TASK>
[  350.950874][   T30] 
[  350.950874][   T30] Showing all locks held in the system:
[  350.958651][   T30] 3 locks held by kworker/0:0/8:
[  351.012657][   T30] 2 locks held by kworker/u8:0/11:
[  351.017946][   T30] 1 lock held by khungtaskd/30:
[  351.069523][   T30]  #0: ffffffff8e939e20 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  351.120819][   T30] 1 lock held by kswapd1/89:
[  351.125471][   T30] 3 locks held by kworker/u8:6/1068:
[  351.160863][   T30]  #0: ffff8880b873e698 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  351.200778][   T30]  #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0
[  351.250798][   T30]  #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240
[  351.260228][   T30] 3 locks held by kworker/R-ipv6_/2730:
[  351.311084][   T30]  #0: ffff88802dea2948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  351.360781][   T30]  #1: ffffc900094e7c80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  351.401004][   T30]  #2: ffffffff8fcdc488 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30
[  351.411783][   T30] 1 lock held by syslogd/4673:
[  351.416581][   T30] 1 lock held by klogd/4680:
[  351.453014][   T30] 4 locks held by udevd/4691:
[  351.457748][   T30] 5 locks held by dhcpcd/4905:
[  351.650930][   T30] 2 locks held by getty/4987:
[  351.655667][   T30]  #0: ffff88814bf030a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  351.730935][   T30]  #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00
[  351.800858][   T30] 2 locks held by syz-executor/5223:
[  351.806210][   T30] 4 locks held by syz-executor/5233:
[  352.090853][   T30] 2 locks held by syz-executor/5234:
[  352.096235][   T30] 3 locks held by syz-executor/5236:
[  352.140904][   T30]  #0: ffff888029890d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510
[  352.246876][   T30]  #1: ffff888029890078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0
[  352.368818][   T30]  #2: ffffffff8fe492e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240
[  352.468599][   T30] 5 locks held by kworker/u9:2/5240:
[  352.533596][   T30]  #0: ffff88807d02e948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850
[  352.620779][   T30]  #1: ffffc90003d57d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850
[  352.700781][   T30]  #2: ffff88807c7e8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400
[  352.710707][   T30]  #3: ffff88807c7e8078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0
[  352.780576][   T30]  #4: ffffffff8e93f3b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830
[  352.910847][   T30] 1 lock held by syz.1.429/6492:
[  352.915850][   T30] 1 lock held by syz-executor/7243:
[  352.980790][   T30] 4 locks held by syz-executor/8226:
[  352.986139][   T30] 3 locks held by syz-executor/8228:
[  353.070916][   T30] 2 locks held by udevd/8230:
[  353.110885][   T30] 
[  353.113260][   T30] =============================================
[  353.113260][   T30] 
[  353.180831][   T30] NMI backtrace for cpu 1
[  353.185233][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  353.195242][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  353.205330][   T30] Call Trace:
[  353.208627][   T30]  <TASK>
[  353.211587][   T30]  dump_stack_lvl+0x241/0x360
[  353.216299][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.221522][   T30]  ? __pfx__printk+0x10/0x10
[  353.226155][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  353.231131][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  353.236614][   T30]  ? _printk+0xd5/0x120
[  353.240795][   T30]  ? __pfx__printk+0x10/0x10
[  353.245411][   T30]  ? __wake_up_klogd+0xcc/0x110
[  353.250287][   T30]  ? __pfx__printk+0x10/0x10
[  353.254904][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  353.259957][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  353.265961][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  353.271965][   T30]  watchdog+0xff4/0x1040
[  353.276232][   T30]  ? watchdog+0x1ea/0x1040
[  353.280683][   T30]  ? __pfx_watchdog+0x10/0x10
[  353.285393][   T30]  kthread+0x2f0/0x390
[  353.289482][   T30]  ? __pfx_watchdog+0x10/0x10
[  353.294176][   T30]  ? __pfx_kthread+0x10/0x10
[  353.298784][   T30]  ret_from_fork+0x4b/0x80
[  353.303216][   T30]  ? __pfx_kthread+0x10/0x10
[  353.307821][   T30]  ret_from_fork_asm+0x1a/0x30
[  353.312620][   T30]  </TASK>
[  353.316943][   T30] Sending NMI from CPU 1 to CPUs 0:
[  353.322895][    C0] NMI backtrace for cpu 0
[  353.322912][    C0] CPU: 0 UID: 0 PID: 8226 Comm: syz-executor Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  353.322938][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  353.322948][    C0] RIP: 0010:trace_hardirqs_off+0x19/0x40
[  353.322974][    C0] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 48 8b 5c 24 08 48 89 df e8 ee 43 2f 0a 65 8b 05 ff b6 66 7e <85> c0 74 06 5b c3 cc cc cc cc 65 c7 05 ea b6 66 7e 01 00 00 00 48
[  353.322989][    C0] RSP: 0018:ffffc900032afa70 EFLAGS: 00000082
[  353.323004][    C0] RAX: 0000000000000000 RBX: ffffffff8bd59dd0 RCX: ffff8881412e3780
[  353.323016][    C0] RDX: ffff8881b8e22dc0 RSI: ffffffff8c0acf60 RDI: ffffffff8c611980
[  353.323028][    C0] RBP: ffffc900032afb08 R08: 0000000000000001 R09: ffffffff81fec61f
[  353.323040][    C0] R10: dffffc0000000000 R11: ffffed10170c8939 R12: 0000000000000246
[  353.323051][    C0] R13: 1ffff92000655f50 R14: ffff8881412e4480 R15: dffffc0000000000
[  353.323064][    C0] FS:  0000555573dff500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  353.323078][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  353.323089][    C0] CR2: 00005606497137f0 CR3: 0000000068c68000 CR4: 00000000003526f0
[  353.323109][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  353.323119][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  353.323129][    C0] Call Trace:
[  353.323135][    C0]  <NMI>
[  353.323141][    C0]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  353.323166][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  353.323184][    C0]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  353.323202][    C0]  ? nmi_handle+0x2a/0x5a0
[  353.323226][    C0]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  353.323247][    C0]  ? nmi_handle+0x14f/0x5a0
[  353.323263][    C0]  ? nmi_handle+0x2a/0x5a0
[  353.323280][    C0]  ? trace_hardirqs_off+0x19/0x40
[  353.323300][    C0]  ? default_do_nmi+0x63/0x160
[  353.323319][    C0]  ? exc_nmi+0x123/0x1f0
[  353.323337][    C0]  ? end_repeat_nmi+0xf/0x53
[  353.323355][    C0]  ? _raw_spin_lock_irqsave+0xb0/0x120
[  353.323378][    C0]  ? qlist_free_all+0x8f/0x140
[  353.323398][    C0]  ? trace_hardirqs_off+0x19/0x40
[  353.323418][    C0]  ? trace_hardirqs_off+0x19/0x40
[  353.323438][    C0]  ? trace_hardirqs_off+0x19/0x40
[  353.323458][    C0]  </NMI>
[  353.323464][    C0]  <TASK>
[  353.323469][    C0]  _raw_spin_lock_irqsave+0xb0/0x120
[  353.323492][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  353.323514][    C0]  ? put_cpu_partial+0x17c/0x250
[  353.323534][    C0]  __slab_free+0xec/0x3d0
[  353.323552][    C0]  ? __phys_addr+0xba/0x170
[  353.323570][    C0]  qlist_free_all+0x9a/0x140
[  353.323588][    C0]  kasan_quarantine_reduce+0x14f/0x170
[  353.323607][    C0]  __kasan_kmalloc+0x23/0xb0
[  353.323626][    C0]  __kmalloc_node_track_caller_noprof+0x28b/0x4c0
[  353.323649][    C0]  ? shmem_symlink+0x22b/0x6c0
[  353.323667][    C0]  kmemdup_noprof+0x2a/0x60
[  353.323682][    C0]  shmem_symlink+0x22b/0x6c0
[  353.323699][    C0]  ? __pfx_shmem_symlink+0x10/0x10
[  353.323716][    C0]  ? inode_permission+0xff/0x460
[  353.323737][    C0]  ? bpf_lsm_inode_symlink+0x9/0x10
[  353.323759][    C0]  ? security_inode_symlink+0xbe/0x330
[  353.323780][    C0]  vfs_symlink+0x137/0x2e0
[  353.323800][    C0]  do_symlinkat+0x222/0x3a0
[  353.323822][    C0]  ? __pfx_do_symlinkat+0x10/0x10
[  353.323842][    C0]  ? getname_flags+0x1e3/0x540
[  353.323865][    C0]  __x64_sys_symlinkat+0x95/0xb0
[  353.323884][    C0]  do_syscall_64+0xf3/0x230
[  353.323899][    C0]  ? clear_bhb_loop+0x35/0x90
[  353.323917][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  353.323933][    C0] RIP: 0033:0x7f7756f7d577
[  353.323955][    C0] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  353.323968][    C0] RSP: 002b:00007ffd6d635a38 EFLAGS: 00000202 ORIG_RAX: 000000000000010a
[  353.323984][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7756f7d577
[  353.323996][    C0] RDX: 00007f7756ff19bd RSI: 00000000ffffff9c RDI: 00007ffd6d635ac0
[  353.324007][    C0] RBP: 00007ffd6d635a6c R08: 0000000000000013 R09: 00007ffd6d635787
[  353.324018][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032
[  353.324028][    C0] R13: 000000000002ee64 R14: 000000000002edf7 R15: 00007ffd6d635ac0
[  353.324046][    C0]  </TASK>
[  355.071023][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  355.077926][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc3-next-20241015-syzkaller #0
[  355.087932][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  355.098004][   T30] Call Trace:
[  355.101299][   T30]  <TASK>
[  355.104242][   T30]  dump_stack_lvl+0x241/0x360
[  355.108940][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  355.114155][   T30]  ? __pfx__printk+0x10/0x10
[  355.118764][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  355.124767][   T30]  ? vscnprintf+0x5d/0x90
[  355.129116][   T30]  panic+0x349/0x880
[  355.133037][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  355.139214][   T30]  ? __pfx_panic+0x10/0x10
[  355.143647][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  355.149045][   T30]  ? __irq_work_queue_local+0x137/0x410
[  355.154620][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  355.160008][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  355.166179][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  355.172354][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  355.178530][   T30]  watchdog+0x1033/0x1040
[  355.182896][   T30]  ? watchdog+0x1ea/0x1040
[  355.187355][   T30]  ? __pfx_watchdog+0x10/0x10
[  355.192053][   T30]  kthread+0x2f0/0x390
[  355.196147][   T30]  ? __pfx_watchdog+0x10/0x10
[  355.200855][   T30]  ? __pfx_kthread+0x10/0x10
[  355.205468][   T30]  ret_from_fork+0x4b/0x80
[  355.209901][   T30]  ? __pfx_kthread+0x10/0x10
[  355.214506][   T30]  ret_from_fork_asm+0x1a/0x30
[  355.219302][   T30]  </TASK>
[  355.222475][   T30] Kernel Offset: disabled
[  355.226791][   T30] Rebooting in 86400 seconds..