last executing test programs:

17.794906725s ago: executing program 4 (id=828):
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff})
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r0, 0x0)
syz_mount_image$udf(&(0x7f00000018c0), &(0x7f0000001900)='./file0\x00', 0x0, &(0x7f0000001940), 0x1, 0x18a4, &(0x7f0000001980)="$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")
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xa)

16.085171056s ago: executing program 4 (id=843):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00'})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r8, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)={0x30, r8, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x30}}, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'wg1\x00', {0x2, 0x4e20, @local}})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)

15.703140257s ago: executing program 2 (id=845):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

14.771464614s ago: executing program 2 (id=847):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x3f}}]}, 0xfc, 0x564, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x829})

14.659487713s ago: executing program 4 (id=848):
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009ec0)='./file0\x00', 0x880b, &(0x7f0000009e80)=ANY=[], 0xfd, 0x9df0, &(0x7f0000000000)="$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")

14.530453204s ago: executing program 4 (id=849):
syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@dioread_nolock}, {@resuid}]}, 0xee, 0x442, &(0x7f0000000d00)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x105543, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)

14.279098014s ago: executing program 2 (id=850):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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")
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

14.167733034s ago: executing program 2 (id=852):
syz_mount_image$exfat(&(0x7f00000013c0), &(0x7f0000000040)='./file1\x00', 0xa10812, &(0x7f0000000500)=ANY=[], 0x21, 0x14f7, &(0x7f0000003f40)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60140, 0x0)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0xb5)

13.944158642s ago: executing program 4 (id=853):
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff})
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
syz_open_pts(r0, 0x0)
syz_mount_image$udf(&(0x7f00000018c0), &(0x7f0000001900)='./file0\x00', 0x0, &(0x7f0000001940), 0x1, 0x18a4, &(0x7f0000001980)="$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")
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xa)

13.868161778s ago: executing program 2 (id=856):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000580), 0x8)

13.4795977s ago: executing program 2 (id=859):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="37040000000000000000010000009400088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39223400008004000980080003000d00000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39222c00008004000980240001000000000000000000000000000000000000000000000000000000000000000000080001"], 0xb0}}, 0x0)

12.227804723s ago: executing program 4 (id=865):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x4}}]}]}, 0xc8}}, 0x0)

4.203480344s ago: executing program 1 (id=911):
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000))
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/resume', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
splice(r1, 0x0, r0, 0x0, 0x400000000020, 0x0)

3.244934943s ago: executing program 1 (id=915):
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)={@map, 0xffffffffffffffff, 0x6, 0x24, 0xffffffffffffffff, @prog_id}, 0x20)

3.218650954s ago: executing program 0 (id=916):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
creat(0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000300000000000014000700000000000000000000000000000000010800040001"], 0x38}}, 0x0)

2.999629012s ago: executing program 3 (id=917):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20)

2.943635037s ago: executing program 1 (id=918):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r2, 0x10d, 0x90, 0x0, &(0x7f0000000080))

2.941196987s ago: executing program 0 (id=919):
unshare(0x20000400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0)

2.813214217s ago: executing program 3 (id=920):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000003680), 0x0, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, 0x0)

2.639272872s ago: executing program 1 (id=921):
creat(0x0, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper}, @host, 0x0, 0x7ff})

2.168510471s ago: executing program 3 (id=922):
r0 = socket(0x10, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x0, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x10}}, 0x20}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000100)={0x0, 0x30000, 0x0, 0x0, 0x2, [], [0x5], [0x1000], [0xc, 0x9]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080))

2.168203411s ago: executing program 1 (id=923):
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000))
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/resume', 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10)
splice(r1, 0x0, r0, 0x0, 0x400000000020, 0x0)

2.167726071s ago: executing program 3 (id=924):
futex(0x0, 0x8, 0x0, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000003300)={'#! ', './bus'}, 0xff1d)
openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x15, 0x0, 0x0)
getsockopt(r3, 0x200000000114, 0x0, &(0x7f0000000600)=""/4, &(0x7f00000006c0)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, &(0x7f0000000100))
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB, @ANYBLOB=',g', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000000100)={0x2020}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000002200)={0x50}, 0x50)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0)
recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x5e, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/121, 0x79}], 0x1}}], 0x400000000000260, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})

1.963726158s ago: executing program 0 (id=925):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x400}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4)

1.81141271s ago: executing program 0 (id=926):
syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0)

1.479443098s ago: executing program 1 (id=927):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000840)="05030400010000000000008071ac", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

1.290070173s ago: executing program 3 (id=928):
add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff})
write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e)
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa)

365.550409ms ago: executing program 3 (id=929):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0)

66.088044ms ago: executing program 0 (id=930):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17)

0s ago: executing program 0 (id=931):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a30000000006c000000060a010400000000000000000100000008000b400000000044000480400001800e000100627974656f726465720000002c00028008000240000000000800054000000000080003400000e106080001400000000008000440000000000900010073797a30"], 0xe0}}, 0x0)

kernel console output (not intermixed with test programs):

[ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  168.921038][ T3683] usb 1-1: Invalid ep0 maxpacket: 32
[  168.928272][ T3683] usb usb1-port1: unable to enumerate USB device
[  168.928790][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  168.947547][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  168.961402][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  168.991059][ T3651] Bluetooth: hci2: command tx timeout
[  168.999247][ T5404] device hsr_slave_0 entered promiscuous mode
[  169.006398][ T5404] device hsr_slave_1 entered promiscuous mode
[  169.013805][ T5404] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.022067][ T5404] Cannot create hsr debugfs directory
[  169.028208][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  169.037675][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  169.072607][ T5356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.085673][ T5356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  169.098104][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  169.106306][ T4093] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  169.115009][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  169.153635][ T3656] Bluetooth: hci5: command tx timeout
[  169.301493][ T4093] usb 3-1: device descriptor read/64, error -71
[  169.336187][ T5404] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.431650][ T4093] usb usb3-port1: attempt power cycle
[  169.446584][ T5404] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.493132][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.550093][ T5404] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.575314][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  169.583820][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  169.636150][ T5404] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.653272][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  169.662176][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  169.703428][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  169.715119][ T5356] device veth0_vlan entered promiscuous mode
[  169.724404][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  169.732859][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  169.792262][ T5356] device veth1_vlan entered promiscuous mode
[  169.808504][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  169.816645][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  169.826405][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  169.871753][ T4093] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  169.888028][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  169.899956][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  169.902555][ T5421] loop0: detected capacity change from 0 to 2048
[  169.916962][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  169.925659][ T5421] EXT4-fs: quotafile must be on filesystem root
[  169.937279][ T5356] device veth0_macvtap entered promiscuous mode
[  169.979047][ T5356] device veth1_macvtap entered promiscuous mode
[  170.001091][ T4093] usb 3-1: device descriptor read/8, error -71
[  170.144688][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.159071][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.169272][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.180033][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.190014][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.201816][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.212444][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.223305][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.233168][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  170.243711][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.262026][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0
[  170.269411][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.277985][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  170.281400][ T4093] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  170.286949][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  170.320443][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  170.347579][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.359369][ T3642] usb 5-1: USB disconnect, device number 5
[  170.380151][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.390731][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.391134][ T4093] usb 3-1: device descriptor read/8, error -71
[  170.401666][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.419500][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.436238][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.446713][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.460974][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.472134][ T5356] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.482625][ T5356] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.494041][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.504270][ T5404] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  170.516764][ T3724] device hsr_slave_0 left promiscuous mode
[  170.523721][ T3724] device hsr_slave_1 left promiscuous mode
[  170.530659][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.541257][ T4093] usb usb3-port1: unable to enumerate USB device
[  170.549483][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.558180][ T3724] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.572493][ T3724] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.580284][ T3724] device bridge_slave_1 left promiscuous mode
[  170.598314][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.614940][ T3724] device bridge_slave_0 left promiscuous mode
[  170.625692][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.654552][ T3724] device veth1_macvtap left promiscuous mode
[  170.662151][ T3724] device veth0_macvtap left promiscuous mode
[  170.684810][ T3724] device veth1_vlan left promiscuous mode
[  170.692094][ T3724] device veth0_vlan left promiscuous mode
[  170.717399][ T5433] loop0: detected capacity change from 0 to 512
[  170.737993][ T5433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.792914][ T5433] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  170.811575][ T5433] EXT4-fs (loop0): Remounting filesystem read-only
[  170.818383][ T5433] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.259: invalid indirect mapped block 1 (level 1)
[  170.836642][ T5433] EXT4-fs (loop0): 1 truncate cleaned up
[  170.843058][ T5433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  170.914994][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  171.233678][ T3651] Bluetooth: hci5: command tx timeout
[  172.078495][ T5444] loop4: detected capacity change from 0 to 1024
[  172.106944][ T5444] EXT4-fs: Ignoring removed orlov option
[  172.137613][ T5444] EXT4-fs (loop4): Test dummy encryption mode enabled
[  172.158556][ T5444] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  172.475697][ T3724] team0 (unregistering): Port device team_slave_1 removed
[  172.488033][ T5460] FAULT_INJECTION: forcing a failure.
[  172.488033][ T5460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  172.509454][ T5444] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  172.518764][ T5460] CPU: 1 PID: 5460 Comm: syz.0.265 Not tainted 6.1.102-syzkaller #0
[  172.518787][ T5460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  172.518799][ T5460] Call Trace:
[  172.518806][ T5460]  <TASK>
[  172.518813][ T5460]  dump_stack_lvl+0x1e3/0x2cb
[  172.518845][ T5460]  ? nf_tcp_handle_invalid+0x642/0x642
[  172.518871][ T5460]  ? panic+0x764/0x764
[  172.518891][ T5460]  ? __lock_acquire+0x1f80/0x1f80
[  172.518923][ T5460]  should_fail_ex+0x3a6/0x4d0
[  172.518950][ T5460]  _copy_from_user+0x2b/0x170
[  172.518970][ T5460]  copy_msghdr_from_user+0xaa/0x670
[  172.519003][ T5460]  ? sendmsg_copy_msghdr+0x70/0x70
[  172.519043][ T5460]  __sys_sendmsg+0x236/0x390
[  172.519072][ T5460]  ? ____sys_sendmsg+0x8f0/0x8f0
[  172.519096][ T5460]  ? vfs_write+0x6cf/0xbc0
[  172.519140][ T5460]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  172.519179][ T5460]  ? syscall_enter_from_user_mode+0x2e/0x230
[  172.519199][ T5460]  ? lockdep_hardirqs_on+0x94/0x130
[  172.519219][ T5460]  ? syscall_enter_from_user_mode+0x2e/0x230
[  172.519241][ T5460]  do_syscall_64+0x3b/0xb0
[  172.623567][ T5460]  ? clear_bhb_loop+0x45/0xa0
[  172.628258][ T5460]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  172.634161][ T5460] RIP: 0033:0x7fad42b773b9
[  172.638574][ T5460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  172.658183][ T5460] RSP: 002b:00007fad438fb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.666592][ T5460] RAX: ffffffffffffffda RBX: 00007fad42d05f80 RCX: 00007fad42b773b9
[  172.674647][ T5460] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003
[  172.682613][ T5460] RBP: 00007fad438fb0a0 R08: 0000000000000000 R09: 0000000000000000
[  172.690589][ T5460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.698554][ T5460] R13: 000000000000000b R14: 00007fad42d05f80 R15: 00007ffface5a9a8
[  172.706531][ T5460]  </TASK>
[  172.779895][ T3724] team0 (unregistering): Port device team_slave_0 removed
[  172.854884][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  172.875603][ T3724] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.998482][ T3724] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.092250][ T5469] loop0: detected capacity change from 0 to 2048
[  173.107177][ T5469] EXT4-fs: quotafile must be on filesystem root
[  173.241150][ T3721] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  173.311040][ T3656] Bluetooth: hci5: command tx timeout
[  173.445555][ T3724] bond0 (unregistering): Released all slaves
[  173.490941][ T4491] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  173.509749][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  173.518367][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  173.527501][ T5404] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  173.543153][ T5356] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  173.552367][ T5356] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  173.563563][ T5356] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  173.572324][ T5356] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.588590][ T5404] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  173.614718][ T5404] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  173.661214][ T3721] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  173.681338][ T4491] usb 3-1: device descriptor read/64, error -71
[  173.687753][ T3721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  173.705339][ T3721] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.715478][ T3721] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  173.749101][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.766135][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.807270][ T4359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.808142][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.823578][ T4359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.831898][ T3721] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  173.850728][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.871677][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.879003][ T3721] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  173.903239][ T3721] usb 5-1: Manufacturer: syz
[  173.917329][ T5477] loop0: detected capacity change from 0 to 512
[  173.928763][ T3721] usb 5-1: config 0 descriptor??
[  173.934322][ T5404] 8021q: adding VLAN 0 to HW filter on device team0
[  173.952491][ T5477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  173.953365][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.970895][ T4491] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  173.973346][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.995165][ T5477] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  174.064506][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.074801][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.083516][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.088201][ T5477] EXT4-fs (loop0): Remounting filesystem read-only
[  174.090610][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.100973][ T5477] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.270: invalid indirect mapped block 1 (level 1)
[  174.105576][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.126727][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.135194][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.139636][ T5477] EXT4-fs (loop0): 1 truncate cleaned up
[  174.142324][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.142860][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.160439][ T5477] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  174.164384][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.180100][ T4491] usb 3-1: device descriptor read/64, error -71
[  174.188037][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.197733][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.206288][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.218686][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  174.233138][ T5404] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  174.248541][ T5404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.264060][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  174.269318][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.278063][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.286673][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.295252][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.303359][ T4491] usb usb3-port1: attempt power cycle
[  174.309338][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.318605][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.339064][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.406181][   T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  174.452696][ T3721] appleir 0003:05AC:8243.000F: unknown main item tag 0x0
[  174.460267][ T3721] appleir 0003:05AC:8243.000F: No inputs registered, leaving
[  174.495154][ T3721] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  174.659096][ T5467] netlink: 'syz.4.266': attribute type 27 has an invalid length.
[  174.670490][ T5467] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  174.711804][ T4491] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  174.821170][ T4491] usb 3-1: device descriptor read/8, error -71
[  174.841569][   T32] usb 4-1: Using ep0 maxpacket: 8
[  175.101367][ T4491] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  175.218690][ T4491] usb 3-1: device descriptor read/8, error -71
[  175.277492][ T5467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  175.392075][ T3656] Bluetooth: hci5: command tx timeout
[  175.422518][ T4491] usb usb3-port1: unable to enumerate USB device
[  175.671987][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  175.694321][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.705597][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  175.713941][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  175.737614][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  175.754357][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  175.796481][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  175.819048][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  175.835584][ T5404] device veth0_vlan entered promiscuous mode
[  175.845000][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  175.859359][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  175.872861][   T32] usb 4-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=83.d9
[  175.874770][ T5404] device veth1_vlan entered promiscuous mode
[  175.892423][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.900433][   T32] usb 4-1: Product: syz
[  175.920870][   T32] usb 4-1: Manufacturer: syz
[  175.925576][   T32] usb 4-1: SerialNumber: syz
[  175.931532][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  175.947229][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  175.949029][   T32] usb 4-1: config 0 descriptor??
[  175.972450][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  175.998343][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  176.013213][   T32] HFC-S_USB: probe of 4-1:0.0 failed with error -5
[  176.020300][ T5404] device veth0_macvtap entered promiscuous mode
[  176.040429][ T5404] device veth1_macvtap entered promiscuous mode
[  176.092486][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.103245][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.124357][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.145384][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.165784][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.180422][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.197293][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.216000][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.248673][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  176.310548][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.355215][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  176.390394][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  176.414886][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  176.454246][ T5508] loop2: detected capacity change from 0 to 256
[  176.466652][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  176.507847][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  176.538493][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.568844][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.610241][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.631820][ T4491] usb 5-1: USB disconnect, device number 6
[  176.687002][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.717361][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.751297][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.782062][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.818070][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.846303][ T5404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  176.897006][ T5404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  176.937241][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  176.969164][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.988815][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.023742][ T5404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.071009][ T5404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  177.100885][ T5404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  177.109597][ T5404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  177.138072][ T5481] loop3: detected capacity change from 0 to 32768
[  177.156302][ T5481] XFS: ikeep mount option is deprecated.
[  177.370864][ T3381] usb 4-1: USB disconnect, device number 12
[  177.431666][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.451053][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.537667][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.578748][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.607925][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.639398][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  177.846273][ T5528] loop2: detected capacity change from 0 to 512
[  177.895382][ T5528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.995251][ T5530] loop4: detected capacity change from 0 to 512
[  178.046681][ T5528] EXT4-fs error (device loop2): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  178.062387][ T5530] EXT4-fs warning (device loop4): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop4.
[  178.157213][ T5528] EXT4-fs (loop2): Remounting filesystem read-only
[  178.164695][ T5528] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.282: invalid indirect mapped block 1 (level 1)
[  178.181110][ T5528] EXT4-fs (loop2): 1 truncate cleaned up
[  178.186781][ T5528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  178.257639][ T5320] EXT4-fs error (device loop2): ext4_empty_dir:3087: inode #11: comm syz-executor: invalid size
[  178.277635][ T5320] EXT4-fs (loop2): Remounting filesystem read-only
[  178.306471][ T5320] EXT4-fs error (device loop2): __ext4_iget:5044: inode #13: block 7962: comm syz-executor: invalid block
[  178.335597][ T5320] EXT4-fs error (device loop2): __ext4_iget:5044: inode #13: block 7962: comm syz-executor: invalid block
[  178.431517][ T5545] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  178.452642][ T5545] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  178.656721][ T5537] loop3: detected capacity change from 0 to 40427
[  178.678104][ T5537] F2FS-fs (loop3): Found nat_bits in checkpoint
[  178.697219][ T5320] EXT4-fs (loop2): unmounting filesystem.
[  178.796908][ T3976] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.889500][ T5537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  179.019115][ T3976] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.185606][ T3976] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.295743][ T3976] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.414482][ T5561] loop4: detected capacity change from 0 to 8192
[  179.732333][ T5566] fuse: Unknown parameter 'ÿ0x0000000000000008'
[  179.918064][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  179.928291][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  179.939131][ T3651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  179.955099][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  179.971304][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  179.978856][ T3651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  180.410306][ T5587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.299'.
[  180.437104][ T5587] netlink: 84 bytes leftover after parsing attributes in process `syz.1.299'.
[  180.770938][   T32] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  180.789698][ T5599] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  180.810524][ T5568] chnl_net:caif_netlink_parms(): no params data found
[  181.038000][   T32] usb 5-1: Using ep0 maxpacket: 32
[  181.161061][   T32] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.180863][   T32] usb 5-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  181.230821][   T32] usb 5-1: config 1 interface 0 has no altsetting 0
[  181.321548][ T5568] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.337678][ T5568] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.350073][ T5568] device bridge_slave_0 entered promiscuous mode
[  181.421116][   T32] usb 5-1: New USB device found, idVendor=0eef, idProduct=480e, bcdDevice= 0.40
[  181.440998][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.449026][   T32] usb 5-1: Product: syz
[  181.449232][ T5568] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.463108][ T5568] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.470241][   T32] usb 5-1: Manufacturer: syz
[  181.476842][   T32] usb 5-1: SerialNumber: syz
[  181.487241][ T5568] device bridge_slave_1 entered promiscuous mode
[  181.501838][ T5356] syz-executor: attempt to access beyond end of device
[  181.501838][ T5356] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  181.602126][ T3976] device hsr_slave_0 left promiscuous mode
[  181.630314][ T3976] device hsr_slave_1 left promiscuous mode
[  181.670077][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.700939][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.740597][ T3976] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  181.886934][ T3976] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.051799][ T3651] Bluetooth: hci1: command tx timeout
[  182.191614][   T32] usbhid 5-1:1.0: can't add hid device: -71
[  182.198139][   T32] usbhid: probe of 5-1:1.0 failed with error -71
[  182.216246][   T32] usb 5-1: USB disconnect, device number 7
[  182.315829][ T3976] device bridge_slave_1 left promiscuous mode
[  182.338774][ T3976] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.512328][ T3976] device bridge_slave_0 left promiscuous mode
[  182.533614][ T3976] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.681458][ T3976] device veth1_macvtap left promiscuous mode
[  182.687531][ T3976] device veth0_macvtap left promiscuous mode
[  182.701694][ T3976] device veth1_vlan left promiscuous mode
[  182.707559][ T3976] device veth0_vlan left promiscuous mode
[  183.713643][ T5646] netlink: 16 bytes leftover after parsing attributes in process `syz.4.310'.
[  183.839851][ T5646] netlink: 84 bytes leftover after parsing attributes in process `syz.4.310'.
[  183.922714][ T5650] loop3: detected capacity change from 0 to 128
[  183.997788][   T26] audit: type=1800 audit(1722637742.025:69): pid=5650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.311" name="file0" dev="loop3" ino=1048654 res=0 errno=0
[  184.121136][ T3656] Bluetooth: hci1: command tx timeout
[  184.507737][ T5669] loop4: detected capacity change from 0 to 1024
[  184.749373][ T5674] loop4: detected capacity change from 0 to 512
[  184.812958][ T5674] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  184.869015][ T5674] EXT4-fs (loop4): 1 truncate cleaned up
[  184.881360][ T5674] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  185.185390][ T3976] team0 (unregistering): Port device team_slave_1 removed
[  185.243904][ T3976] team0 (unregistering): Port device team_slave_0 removed
[  185.279845][ T3976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.314028][ T3976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.364233][   T32] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  185.624167][   T32] usb 5-1: Using ep0 maxpacket: 32
[  185.640644][ T3976] bond0 (unregistering): Released all slaves
[  185.799158][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11
[  185.860279][ T5568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.883435][   T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024
[  185.907376][ T5568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.215318][ T3656] Bluetooth: hci1: command tx timeout
[  186.328133][ T5568] team0: Port device team_slave_0 added
[  186.471866][ T5568] team0: Port device team_slave_1 added
[  186.800973][   T32] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  186.810136][   T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.956418][ T5690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.323'.
[  186.962266][   T32] usb 5-1: Product: syz
[  186.999949][   T32] usb 5-1: Manufacturer: syz
[  187.008389][   T32] usb 5-1: SerialNumber: syz
[  187.013172][ T5690] netlink: 84 bytes leftover after parsing attributes in process `syz.3.323'.
[  187.036286][   T32] usb 5-1: config 0 descriptor??
[  187.071148][ T5674] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  187.106554][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.122091][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.235868][ T5699] overlayfs: missing 'lowerdir'
[  187.250546][ T5568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.305607][ T5568] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.340192][ T5568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.340747][   T32] usb 5-1: USB disconnect, device number 8
[  187.491563][ T5568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.713373][ T5568] device hsr_slave_0 entered promiscuous mode
[  187.756608][ T5568] device hsr_slave_1 entered promiscuous mode
[  187.789435][ T5568] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.835357][ T5568] Cannot create hsr debugfs directory
[  188.050478][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  188.271437][ T3651] Bluetooth: hci1: command tx timeout
[  189.144452][ T5738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.335'.
[  189.186518][ T5738] netlink: 84 bytes leftover after parsing attributes in process `syz.0.335'.
[  189.511228][ T5747] netlink: 'syz.1.338': attribute type 10 has an invalid length.
[  189.519175][ T5747] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  189.570570][ T5747] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address
[  189.642323][ T5747] bond0: (slave ipvlan1): Error -95 calling set_mac_address
[  190.957571][ T5781] Cannot find map_set index 0 as target
[  191.034267][ T5783] IPVS: Error connecting to the multicast addr
[  191.525350][ T5568] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  191.581671][ T5568] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  191.611874][ T5811] syz.4.356[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.611982][ T5811] syz.4.356[5811] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  191.672539][ T5568] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  191.773339][ T5568] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  192.073487][ T5824] loop0: detected capacity change from 0 to 512
[  192.214870][ T5824] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  192.259297][ T5568] 8021q: adding VLAN 0 to HW filter on device bond0
[  192.272862][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  192.280616][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  192.295673][ T5830] loop3: detected capacity change from 0 to 512
[  192.300969][ T5824] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff)
[  192.313818][ T5568] 8021q: adding VLAN 0 to HW filter on device team0
[  192.684950][ T5830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  192.966064][ T5830] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff)
[  193.030266][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.039822][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.048661][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.055796][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.074283][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.110460][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.151313][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.158412][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.182265][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  193.239643][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  193.316982][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.328171][ T5356] EXT4-fs (loop3): unmounting filesystem.
[  193.330045][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  193.368567][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  193.380667][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  193.415513][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  193.428497][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  193.447556][ T5568] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  193.472560][ T5568] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  193.489402][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  193.509657][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  193.550137][ T5845] binder: BINDER_SET_CONTEXT_MGR already set
[  193.556754][ T5845] binder: 5844:5845 ioctl 4018620d 200001c0 returned -16
[  193.571575][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  193.598625][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  193.631636][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  193.687460][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  193.725924][ T5850] loop0: detected capacity change from 0 to 512
[  193.812304][ T5850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  193.831033][ T5850] ext4 filesystem being mounted at /41/bus supports timestamps until 2038 (0x7fffffff)
[  193.872272][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  193.879193][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.227296][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  194.480266][ T5568] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.532539][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.551025][ T3721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.754975][ T5568] device veth0_vlan entered promiscuous mode
[  194.791198][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  194.800609][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  194.809466][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  194.821713][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  194.830291][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  194.838633][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  195.576488][ T5568] device veth1_vlan entered promiscuous mode
[  195.786988][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  195.830373][ T3381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  195.903404][ T5568] device veth0_macvtap entered promiscuous mode
[  195.967532][ T5568] device veth1_macvtap entered promiscuous mode
[  195.977563][ T5907] loop0: detected capacity change from 0 to 512
[  196.027576][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.067775][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.098157][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.146830][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.158893][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.208820][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.247413][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.277497][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.299151][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  196.330391][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.375559][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  196.394955][ T3629] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  196.474197][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.490331][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  196.538910][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  196.572930][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  196.644838][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.779303][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.789336][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.800129][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  196.810261][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  196.821733][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.561634][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.572495][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.582612][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.593199][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.623011][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.673710][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.714957][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.788081][ T5568] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.830909][ T5568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.839676][ T5568] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.880568][ T5568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.985753][ T3651] Bluetooth: hci2: unexpected cc 0x0c58 length: 4 > 2
[  198.139038][ T3976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.156588][ T3976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.218038][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  198.241354][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.249576][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.317640][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  199.595644][ T5972] input: syz0 as /devices/virtual/input/input11
[  199.849885][ T5978] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.402' sets config #3
[  200.180937][ T5993] input: syz1 as /devices/virtual/input/input12
[  200.190356][ T5991] bridge_slave_0: default FDB implementation only supports local addresses
[  201.838848][ T6024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.413'.
[  202.032349][ T3651] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  202.041005][ T3651] Bluetooth: hci2: Injecting HCI hardware error event
[  202.048889][ T3656] Bluetooth: hci2: hardware error 0x00
[  204.270904][ T3656] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  204.581802][ T6076] [U] 
[  204.584796][ T6076] [U] 
[  204.587494][ T6076] [U] 
[  204.590180][ T6076] [U] 
[  204.632551][ T6076] [U] 
[  204.635364][ T6076] [U] 
[  204.638072][ T6076] [U] 
[  204.640778][ T6076] [U] 
[  204.657727][ T6076] [U] 
[  204.660455][ T6076] [U] 
[  204.663169][ T6076] [U] 
[  204.665877][ T6076] [U] 
[  204.699304][ T6076] [U] 
[  204.702126][ T6076] [U] 
[  204.704834][ T6076] [U] 
[  204.707538][ T6076] [U] 
[  204.757053][ T6086] netlink: 32 bytes leftover after parsing attributes in process `syz.2.431'.
[  204.822134][ T6076] [U] 
[  204.824956][ T6076] [U] 
[  204.827672][ T6076] [U] 
[  204.830378][ T6076] [U] 
[  204.859353][ T3656] Bluetooth: hci5: unexpected event 0x2f length: 763 > 260
[  204.906809][ T6076] [U] 
[  204.916821][ T6076] [U] 
[  204.919535][ T6076] [U] 
[  204.922249][ T6076] [U] 
[  205.000957][ T6076] [U] 
[  205.003708][ T6076] [U] 
[  205.006425][ T6076] [U] 
[  205.009134][ T6076] [U] 
[  205.069394][ T6076] [U] 
[  205.072121][ T6076] [U] 
[  205.074833][ T6076] [U] 
[  205.077548][ T6076] [U] 
[  205.300931][ T6076] [U] 
[  205.303688][ T6076] [U] 
[  205.306409][ T6076] [U] 
[  205.309143][ T6076] [U] 
[  205.679965][ T6076] [U] 
[  206.198940][ T6103] ieee802154 phy0 wpan0: encryption failed: -22
[  206.528181][   T26] audit: type=1326 audit(1722637764.555:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.4.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a6fd773b9 code=0x0
[  207.059182][   T26] audit: type=1326 audit(1722637765.085:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6124 comm="syz.3.441" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed699773b9 code=0x0
[  208.950450][ T6173] netlink: 32 bytes leftover after parsing attributes in process `syz.2.451'.
[  209.109094][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.189554][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.232411][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.239596][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.944439][ T6202] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  211.704527][ T6235] loop2: detected capacity change from 0 to 512
[  212.520498][ T6235] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.473: iget: bad extended attribute block 128
[  212.533572][ T6235] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.473: couldn't read orphan inode 16 (err -117)
[  212.546040][ T6235] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  212.555042][ T6235] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[  212.646938][ T6241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'.
[  212.772325][ T5568] EXT4-fs (loop2): unmounting filesystem.
[  213.230950][   T32] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  213.496853][ T6229] loop4: detected capacity change from 0 to 40427
[  213.537420][ T6229] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  213.565031][ T6229] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  213.587815][ T6254] loop0: detected capacity change from 0 to 512
[  213.625262][ T6229] F2FS-fs (loop4): invalid crc value
[  213.665279][ T6229] F2FS-fs (loop4): Found nat_bits in checkpoint
[  213.746081][ T6254] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 47 vs 41 free clusters
[  213.749745][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.771853][   T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.781714][   T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  213.791245][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.823055][   T32] usb 3-1: config 0 descriptor??
[  213.828553][ T6254] EXT4-fs (loop0): 1 orphan inode deleted
[  213.854131][ T3856] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  213.981097][ T6254] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  214.032006][ T3856] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:9: Failed to release dquot type 1
[  214.068793][ T6254] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038 (0x7fffffff)
[  214.172311][ T6229] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  214.235955][ T6229] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  214.551071][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  214.707814][ T6268] syz.1.481[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  214.707917][ T6268] syz.1.481[6268] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  214.950423][ T6274] loop0: detected capacity change from 0 to 512
[  215.020247][ T6274] EXT4-fs (loop0): 1 truncate cleaned up
[  215.035791][ T6243] loop2: detected capacity change from 0 to 512
[  215.047792][ T6274] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  215.081847][ T6279] loop4: detected capacity change from 0 to 256
[  215.099820][ T6243] EXT4-fs (loop2): 1 truncate cleaned up
[  215.108037][ T6243] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  215.304497][ T4491] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  215.478302][ T6285] overlayfs: failed to resolve './file0': -2
[  215.974495][ T6286] Illegal XDP return value 4294967274 on prog  (id 85) dev N/A, expect packet loss!
[  216.291016][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.310413][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.328586][ T4491] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  216.350887][ T4491] usb 4-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[  216.360270][ T4491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.380593][ T4491] usb 4-1: config 0 descriptor??
[  216.863483][ T4491] betop 0003:11C2:2208.0010: unknown main item tag 0x0
[  216.870581][ T4491] betop 0003:11C2:2208.0010: item fetching failed at offset 4/5
[  216.881463][ T4491] betop 0003:11C2:2208.0010: parse failed
[  216.888529][ T4491] betop: probe of 0003:11C2:2208.0010 failed with error -22
[  217.069963][ T4491] usb 4-1: USB disconnect, device number 13
[  217.081163][   T32] usbhid 3-1:0.0: can't add hid device: -71
[  217.093205][ T5568] EXT4-fs (loop2): unmounting filesystem.
[  217.108260][   T32] usbhid: probe of 3-1:0.0 failed with error -71
[  217.174364][   T32] usb 3-1: USB disconnect, device number 15
[  219.101325][ T6319] loop4: detected capacity change from 0 to 256
[  220.220772][    C0] sched: RT throttling activated
[  220.448895][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  220.452743][ T6307] loop2: detected capacity change from 0 to 40427
[  220.503611][ T6307] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  220.531677][ T6307] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  220.697217][ T6332] syz.1.496[6332] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  220.697312][ T6332] syz.1.496[6332] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  220.721516][ T6335] loop3: detected capacity change from 0 to 128
[  220.721633][ T6307] F2FS-fs (loop2): invalid crc value
[  220.741425][ T6335] EXT4-fs (loop3): Test dummy encryption mode enabled
[  220.828265][ T6337] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  221.090812][ T6335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  221.188651][ T6307] F2FS-fs (loop2): Found nat_bits in checkpoint
[  221.234673][ T6335] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038 (0x7fffffff)
[  221.600968][ T4491] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  221.800986][ T4491] usb 5-1: device descriptor read/64, error -71
[  222.110433][ T5356] EXT4-fs (loop3): unmounting filesystem.
[  222.183991][ T6358] loop2: detected capacity change from 0 to 512
[  222.200987][ T4491] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  222.250724][ T6358] EXT4-fs (loop2): 1 truncate cleaned up
[  222.257322][ T6358] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  222.333212][ T6365] loop0: detected capacity change from 0 to 512
[  222.446251][ T6365] EXT4-fs (loop0): 1 truncate cleaned up
[  222.458590][ T6365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  222.511070][ T4491] usb 5-1: device descriptor read/64, error -71
[  222.641057][ T4491] usb usb5-port1: attempt power cycle
[  223.352395][ T5568] EXT4-fs (loop2): unmounting filesystem.
[  223.498319][ T4491] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  223.514340][ T6383] syz.2.509[6383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.514441][ T6383] syz.2.509[6383] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.611352][ T4491] usb 5-1: device descriptor read/8, error -71
[  223.640010][ T6385] loop3: detected capacity change from 0 to 256
[  223.672103][ T6385] exfat: Bad value for 'uid'
[  223.679350][ T6389] syz.2.512[6389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.679438][ T6389] syz.2.512[6389] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  223.843763][ T3629] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  224.065006][ T6394] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  224.780045][ T4491] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  226.265834][ T4491] usb 5-1: device not accepting address 12, error -71
[  226.387649][ T4491] usb usb5-port1: unable to enumerate USB device
[  227.444715][ T3702] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  227.872531][ T3702] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  227.966743][ T3702] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  228.156694][ T3702] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  228.196404][ T3702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.311205][ T6416] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  228.621848][ T6438] syz.4.526[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.621967][ T6438] syz.4.526[6438] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  228.703108][ T6441] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  228.861495][ T3702] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[  229.018220][ T3702] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15
[  229.403379][ T3702] usb 4-1: USB disconnect, device number 14
[  229.411331][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  229.510462][ T6444] syz.4.529[6444] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  229.510553][ T6444] syz.4.529[6444] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  229.620975][ T4494] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  229.814605][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  230.335324][ T4494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.362603][ T4494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.374708][ T4494] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  230.384923][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.779599][ T4494] usb 3-1: config 0 descriptor??
[  230.783302][ T6460] loop0: detected capacity change from 0 to 128
[  230.805414][ T6460] EXT4-fs (loop0): Test dummy encryption mode enabled
[  230.851644][ T6460] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  230.874498][ T6460] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038 (0x7fffffff)
[  231.231043][ T3721] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  231.774519][ T6440] loop2: detected capacity change from 0 to 512
[  231.858075][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  231.884751][ T6479] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  231.993450][ T3721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.078066][ T6440] EXT4-fs (loop2): 1 truncate cleaned up
[  232.117166][ T6440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  232.165189][ T3721] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  232.410034][ T3721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.419969][ T3721] usb 4-1: config 0 descriptor??
[  232.564517][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  232.571250][ T5568] EXT4-fs (loop2): unmounting filesystem.
[  232.605125][ T4494] usbhid 3-1:0.0: can't add hid device: -71
[  232.612991][ T4494] usbhid: probe of 3-1:0.0 failed with error -71
[  232.642145][ T4494] usb 3-1: USB disconnect, device number 16
[  232.657209][ T6484] syz.2.541[6484] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.657306][ T6484] syz.2.541[6484] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  232.860978][ T4491] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  232.928672][ T3721] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  232.940845][ T3721] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  232.957267][ T3721] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  232.972619][ T3721] sony 0003:054C:024B.0011: unknown main item tag 0x0
[  232.979598][ T3721] sony 0003:054C:024B.0011: item fetching failed at offset 4/5
[  232.995126][ T3721] sony 0003:054C:024B.0011: parse failed
[  233.003671][ T3721] sony: probe of 0003:054C:024B.0011 failed with error -22
[  233.111001][ T3684] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  233.128891][ T4491] usb 5-1: Using ep0 maxpacket: 32
[  233.166007][   T32] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  233.177939][ T6467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  233.209111][ T6467] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.271372][ T4491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  233.282894][ T4491] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  233.294131][ T4491] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  233.304082][ T4491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.318093][ T4491] usb 5-1: config 0 descriptor??
[  233.341099][ T6482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  233.361906][ T4491] hub 5-1:0.0: USB hub found
[  233.401807][ T3684] usb 2-1: Using ep0 maxpacket: 16
[  233.521058][ T3684] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.581162][ T4491] hub 5-1:0.0: 2 ports detected
[  233.600889][   T32] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  233.634883][   T32] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  233.660932][   T32] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  233.669971][   T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.691093][ T3684] usb 2-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  233.700443][ T3684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.709714][ T6488] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  233.725752][ T3684] usb 2-1: Product: syz
[  233.730148][ T3684] usb 2-1: Manufacturer: syz
[  233.736305][ T3684] usb 2-1: SerialNumber: syz
[  233.751787][ T3684] usb 2-1: config 0 descriptor??
[  234.007979][ T6502] syz.2.548[6502] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  234.008079][ T6502] syz.2.548[6502] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  234.207901][   T32] aiptek 1-1:17.0: Aiptek using 400 ms programming speed
[  234.234541][ T4491] hub 5-1:0.0: set hub depth failed
[  234.242979][   T32] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input16
[  234.251048][ T3684] usb 2-1: Found UVC 0.00 device syz (045e:0721)
[  234.258519][ T3684] usb 2-1: No valid video chain found.
[  234.273981][ T3684] usb 2-1: USB disconnect, device number 11
[  234.287500][ T4491] usb 5-1: USB disconnect, device number 13
[  234.296511][   T32] usb 1-1: USB disconnect, device number 18
[  234.302543][    C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  234.644164][   T32] usb 4-1: USB disconnect, device number 15
[  234.679282][ T6511] loop3: detected capacity change from 0 to 128
[  234.695086][ T6511] EXT4-fs (loop3): Test dummy encryption mode enabled
[  234.705874][ T6511] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  234.715508][ T6511] ext4 filesystem being mounted at /58/mnt supports timestamps until 2038 (0x7fffffff)
[  234.960703][ T6517] loop4: detected capacity change from 0 to 128
[  235.229577][ T6517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  235.367567][ T6517] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  235.734819][ T5356] EXT4-fs (loop3): unmounting filesystem.
[  235.872948][ T4491] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  235.888990][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  236.444859][ T6543] loop3: detected capacity change from 0 to 256
[  236.466870][ T4491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.495408][ T4491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.502012][ T6543] exfat: Bad value for 'uid'
[  236.513713][ T4491] usb 1-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  236.612930][ T4491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.987568][ T4491] usb 1-1: config 0 descriptor??
[  237.180835][ T3688] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  237.410993][   T32] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  237.660015][ T6516] loop0: detected capacity change from 0 to 512
[  237.821633][   T32] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  237.940705][ T6516] EXT4-fs (loop0): 1 truncate cleaned up
[  237.946427][ T6516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  237.970782][   T32] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  238.016757][   T32] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  238.250878][   T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.342381][ T6547] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  238.438666][ T6556] overlayfs: failed to resolve './file0': -2
[  239.001619][   T32] aiptek 5-1:17.0: Aiptek using 400 ms programming speed
[  239.101837][   T32] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input18
[  239.270882][   T32] usb 5-1: USB disconnect, device number 14
[  239.280812][    C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  239.292091][ T3688] usb 3-1: Using ep0 maxpacket: 32
[  239.421581][ T3688] usb 3-1: device descriptor read/all, error -71
[  240.630998][ T4491] usbhid 1-1:0.0: can't add hid device: -71
[  240.637002][ T4491] usbhid: probe of 1-1:0.0 failed with error -71
[  240.715603][ T4491] usb 1-1: USB disconnect, device number 19
[  240.765491][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  241.313287][ T6591] loop0: detected capacity change from 0 to 256
[  241.522526][ T4491] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  241.841968][ T6594] loop2: detected capacity change from 0 to 128
[  241.890382][ T6594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  241.908917][ T6594] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  242.111109][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.156639][ T4491] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  242.169972][ T6598] loop0: detected capacity change from 0 to 512
[  242.214748][ T6598] EXT4-fs: Ignoring removed mblk_io_submit option
[  242.223652][ T4491] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  242.239403][ T6598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  242.254999][ T4491] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.288194][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  242.321699][ T4491] usb 4-1: config 0 descriptor??
[  242.360140][ T6598] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.577: corrupted in-inode xattr
[  242.381716][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  242.382007][ T6598] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.577: couldn't read orphan inode 15 (err -117)
[  242.425425][ T5568] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  242.441550][ T6598] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  242.512305][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  242.596345][ T6612] loop4: detected capacity change from 0 to 512
[  242.614838][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  242.713534][ T6612] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.583: iget: bad extended attribute block 128
[  242.731093][ T6612] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.583: couldn't read orphan inode 16 (err -117)
[  242.748885][ T6612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  242.757946][ T6612] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038 (0x7fffffff)
[  242.776126][ T5568] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  242.858656][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  242.875389][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  242.944525][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  243.003526][ T5568] EXT4-fs error (device loop2): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  243.042653][ T4491] sony 0003:054C:024B.0012: unknown main item tag 0x0
[  243.052585][ T4491] sony 0003:054C:024B.0012: unknown main item tag 0x0
[  243.059423][ T4491] sony 0003:054C:024B.0012: unknown main item tag 0x0
[  243.066384][ T4491] sony 0003:054C:024B.0012: unknown main item tag 0x0
[  243.073274][ T4491] sony 0003:054C:024B.0012: item fetching failed at offset 4/5
[  243.081420][ T4491] sony 0003:054C:024B.0012: parse failed
[  243.087147][ T4491] sony: probe of 0003:054C:024B.0012 failed with error -22
[  243.107549][ T5568] EXT4-fs error (device loop2): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  243.213840][ T6617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.253056][ T6617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.062186][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  244.291750][ T6630] loop4: detected capacity change from 0 to 512
[  244.322222][ T6630] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  244.388435][ T6630] EXT4-fs (loop4): 1 truncate cleaned up
[  244.403802][ T6630] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  244.580631][ T6633] loop0: detected capacity change from 0 to 256
[  245.424046][ T3683] usb 4-1: USB disconnect, device number 16
[  245.567051][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.4.588'.
[  245.733345][ T3855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.799441][ T5568] EXT4-fs (loop2): unmounting filesystem.
[  246.191764][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  246.274128][ T3855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.370840][ T3683] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  246.396780][ T3855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.612079][ T3855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.650843][ T3683] usb 4-1: Using ep0 maxpacket: 32
[  246.671192][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  246.673074][ T3657] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  246.674062][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  246.675998][ T3657] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  246.676542][ T3657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  246.676875][ T3657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  246.781025][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  246.795527][ T3683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  246.807223][ T3683] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  246.817391][ T3683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.860001][ T3683] usb 4-1: config 0 descriptor??
[  246.911066][ T6639] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  246.965165][ T3683] hub 4-1:0.0: USB hub found
[  247.181113][ T3683] hub 4-1:0.0: 2 ports detected
[  247.232140][ T6666] netlink: 44 bytes leftover after parsing attributes in process `syz.1.600'.
[  247.320983][ T3656] Bluetooth: hci4: command 0x0406 tx timeout
[  247.501968][ T6655] chnl_net:caif_netlink_parms(): no params data found
[  247.531445][ T1183] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  247.631220][ T3688] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  247.730932][ T3683] hub 4-1:0.0: set hub depth failed
[  247.793260][ T3683] usb 4-1: USB disconnect, device number 17
[  247.899786][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.911003][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.926259][ T6655] device bridge_slave_0 entered promiscuous mode
[  247.941386][ T1183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.943266][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.959709][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.968162][ T6655] device bridge_slave_1 entered promiscuous mode
[  247.975191][ T1183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.999542][ T1183] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  248.001046][ T3688] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11
[  248.020176][ T1183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.057146][ T1183] usb 5-1: config 0 descriptor??
[  248.077426][ T3688] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024
[  248.112715][ T3688] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  248.137995][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.201132][ T6672] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  248.263146][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.360506][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.563413][ T1183] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  248.571937][ T1183] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  248.586068][ T6655] team0: Port device team_slave_0 added
[  248.588155][ T1183] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  248.609164][ T1183] sony 0003:054C:024B.0013: unknown main item tag 0x0
[  248.625840][ T6655] team0: Port device team_slave_1 added
[  248.626818][ T1183] sony 0003:054C:024B.0013: item fetching failed at offset 4/5
[  248.649714][ T1183] sony 0003:054C:024B.0013: parse failed
[  248.661191][ T3688] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  248.666809][ T1183] sony: probe of 0003:054C:024B.0013 failed with error -22
[  248.669299][ T3688] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input19
[  248.751258][ T3656] Bluetooth: hci1: command tx timeout
[  248.757141][ T3688] usb 2-1: USB disconnect, device number 12
[  248.763141][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  248.866190][ T6668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.898358][ T6668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.951256][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.958236][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.025338][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.285610][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.309189][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.336371][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.354296][ T3855] device hsr_slave_0 left promiscuous mode
[  249.361096][ T3855] device hsr_slave_1 left promiscuous mode
[  249.367539][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.379347][ T3855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  249.387682][ T3855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  249.395456][ T3855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  249.410950][ T3855] device bridge_slave_1 left promiscuous mode
[  249.417472][ T3855] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.428549][ T3855] device bridge_slave_0 left promiscuous mode
[  249.435246][ T3855] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.468230][ T3855] device veth1_macvtap left promiscuous mode
[  249.474659][ T3855] device veth0_macvtap left promiscuous mode
[  249.492546][ T3855] device veth1_vlan left promiscuous mode
[  249.505115][ T3855] device veth0_vlan left promiscuous mode
[  249.944712][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.610'.
[  250.439174][ T3855] team0 (unregistering): Port device team_slave_1 removed
[  250.477470][ T4494] usb 5-1: USB disconnect, device number 15
[  250.587773][ T3855] team0 (unregistering): Port device team_slave_0 removed
[  250.730419][ T3855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  250.788789][ T3855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  250.845932][ T3656] Bluetooth: hci1: command tx timeout
[  250.862053][ T6732] use of bytesused == 0 is deprecated and will be removed in the future,
[  250.871670][ T6732] use the actual size instead.
[  251.584918][ T3855] bond0 (unregistering): Released all slaves
[  251.813970][ T6655] device hsr_slave_0 entered promiscuous mode
[  251.893413][ T6655] device hsr_slave_1 entered promiscuous mode
[  251.910998][ T6655] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.918572][ T6655] Cannot create hsr debugfs directory
[  252.320843][ T4093] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  252.761124][ T4093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.801080][ T4093] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.843720][ T4093] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  252.870866][ T4093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.911002][ T3656] Bluetooth: hci1: command tx timeout
[  252.918825][ T4093] usb 5-1: config 0 descriptor??
[  252.969407][ T6655] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  252.982652][ T6655] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  253.006457][ T6655] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  253.027323][ T6655] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  253.231524][ T6655] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.390714][ T6655] 8021q: adding VLAN 0 to HW filter on device team0
[  253.403377][ T4093] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  253.410251][ T4093] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  253.417281][ T4093] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  253.426232][ T4093] sony 0003:054C:024B.0014: unknown main item tag 0x0
[  253.433274][ T4093] sony 0003:054C:024B.0014: item fetching failed at offset 4/5
[  253.441443][ T4093] sony 0003:054C:024B.0014: parse failed
[  253.445917][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.447357][ T4093] sony: probe of 0003:054C:024B.0014 failed with error -22
[  253.548450][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.592329][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  253.639963][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  253.657720][ T6755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.679052][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.686224][ T4494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.699987][ T6755] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.724466][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  253.752401][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  253.779059][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.786222][ T4494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.855797][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.641490][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.687869][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.707077][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.756448][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.785771][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.846191][ T4093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.883097][ T6655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  254.918090][ T6655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.960687][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.970578][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.990685][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.998770][ T3656] Bluetooth: hci1: command tx timeout
[  255.011821][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  255.030400][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  255.060989][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  255.312253][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  255.318582][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  255.650703][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  255.671595][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  255.688518][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv0
[  255.752373][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  255.781244][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  255.804498][ T3688] usb 5-1: USB disconnect, device number 16
[  255.833222][ T6655] device veth0_vlan entered promiscuous mode
[  255.862510][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  255.878962][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  255.905727][ T6655] device veth1_vlan entered promiscuous mode
[  255.928955][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  255.937332][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  255.971888][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  256.014824][ T6655] device veth0_macvtap entered promiscuous mode
[  256.054835][ T6655] device veth1_macvtap entered promiscuous mode
[  256.116762][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.163966][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.203920][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.257006][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.290662][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.311446][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.338079][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.367605][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.379805][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  256.390647][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.406011][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.437284][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  256.456730][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  256.477394][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  256.495899][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  256.556795][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  256.572086][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  256.602569][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.688373][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.757301][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.767965][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.777956][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.789094][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.799042][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.815497][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  256.825426][ T6655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  256.841009][ T6655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.240942][ T6655] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.276520][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  257.304205][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  257.340945][ T3702] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  257.369397][ T1183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  257.529559][ T6655] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.558741][ T6655] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  257.580840][ T6655] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  257.620078][ T6655] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  257.842712][ T6874] device wlan1 entered promiscuous mode
[  257.849104][ T6874] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  257.924629][ T6266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  257.957025][ T6266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.001092][ T3702] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  258.007313][ T3684] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  258.011982][ T3702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.046029][ T3702] usb 1-1: Product: syz
[  258.050210][ T3702] usb 1-1: Manufacturer: syz
[  258.076830][ T3702] usb 1-1: SerialNumber: syz
[  258.121205][ T3702] usb 1-1: config 0 descriptor??
[  258.204396][ T6266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.229153][ T6266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.268400][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  258.297820][ T3688] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  258.376581][ T6890] loop4: detected capacity change from 0 to 512
[  258.432518][ T6890] EXT4-fs: Ignoring removed bh option
[  258.476512][ T6890] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0).
[  258.498810][ T6890] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  258.528544][ T6890] EXT4-fs (loop4): mount failed
[  258.671084][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.671097][ T3702] usb 1-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  258.710649][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.730152][ T3688] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00
[  258.740358][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.752866][ T3688] usb 4-1: config 0 descriptor??
[  258.926647][ T3702] usb 1-1: Read permanent extended address 00:00:00:00:00:00:00:1a from device
[  258.981035][ T1183] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  259.211106][ T3702] usb 1-1: USB disconnect, device number 20
[  259.233440][ T3688] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  259.240951][ T1183] usb 5-1: Using ep0 maxpacket: 32
[  259.250720][ T3688] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  259.265462][ T3688] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  259.280995][ T3688] sony 0003:054C:024B.0015: unknown main item tag 0x0
[  259.294504][ T3688] sony 0003:054C:024B.0015: item fetching failed at offset 4/5
[  259.311420][ T3688] sony 0003:054C:024B.0015: parse failed
[  259.324925][ T3688] sony: probe of 0003:054C:024B.0015 failed with error -22
[  259.381126][ T1183] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 134, changing to 11
[  259.406536][ T1183] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 57586, setting to 1024
[  259.419552][ T6907] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  259.429852][ T1183] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  259.470779][ T1183] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.532294][ T1183] hub 5-1:4.0: USB hub found
[  259.622268][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.666687][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  259.740949][ T1183] hub 5-1:4.0: 2 ports detected
[  259.760887][ T1183] hub 5-1:4.0: insufficient power available to use all downstream ports
[  260.871416][ T6917] netlink: 256 bytes leftover after parsing attributes in process `syz.1.664'.
[  260.881008][ T6917] unsupported nlmsg_type 40
[  261.670981][ T1183] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  261.677747][ T1183] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  261.689198][ T6925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'.
[  261.735417][ T4496] usb 4-1: USB disconnect, device number 18
[  261.741526][ T1183] usb 5-1: USB disconnect, device number 17
[  261.860416][ T6929] loop4: detected capacity change from 0 to 1024
[  261.954299][ T6936] loop0: detected capacity change from 0 to 128
[  262.004335][ T6936] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  262.186400][ T6936] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  262.405603][ T6929] loop4: detected capacity change from 0 to 1024
[  262.886376][ T6947] loop3: detected capacity change from 0 to 8192
[  262.939554][ T6950] loop4: detected capacity change from 0 to 1764
[  262.983499][ T6947] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  263.107034][ T6947] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  263.149705][ T6947] REISERFS (device loop3): using ordered data mode
[  263.182990][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  263.200853][ T6947] reiserfs: using flush barriers
[  263.246394][ T6947] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  263.368324][ T6947] REISERFS (device loop3): checking transaction log (loop3)
[  263.403646][ T6947] REISERFS (device loop3): Using r5 hash to sort names
[  263.450032][ T6947] reiserfs: enabling write barrier flush mode
[  263.489181][ T6962] loop4: detected capacity change from 0 to 512
[  263.536617][ T6962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  263.563522][ T6947] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  263.674356][   T26] audit: type=1804 audit(1722637821.702:72): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.672" name="/newroot/82/file0/file1" dev="loop3" ino=2 res=1 errno=0
[  263.775766][ T6962] EXT4-fs (loop4): 1 truncate cleaned up
[  263.783821][ T6962] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  265.136301][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  265.816347][ T7003] loop0: detected capacity change from 0 to 8192
[  265.888083][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  265.900846][ T7003] UDF-fs: Scanning with blocksize 512 failed
[  265.950049][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  265.980131][ T7003] UDF-fs: Scanning with blocksize 1024 failed
[  266.013742][ T7003] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  266.024513][ T7012] loop4: detected capacity change from 0 to 8
[  266.035686][ T7003] UDF-fs: Scanning with blocksize 2048 failed
[  266.085005][ T7012] process 'syz.4.695' launched './file2' with NULL argv: empty string added
[  266.090271][ T7003] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.212988][ T7007] infiniband syz1: set down
[  266.233736][ T7007] infiniband syz1: added ipvlan1
[  266.375394][ T7007] RDS/IB: syz1: added
[  266.380274][ T7007] smc: adding ib device syz1 with port count 1
[  266.459283][ T7018] loop4: detected capacity change from 0 to 128
[  266.511017][ T7018] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  266.526898][ T7007] smc:    ib device syz1 port 1 has pnetid 
[  266.629102][ T3629] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  266.651881][ T7020] loop0: detected capacity change from 0 to 128
[  266.841388][ T7015] loop2: detected capacity change from 0 to 32768
[  266.869270][ T7006] loop3: detected capacity change from 0 to 40427
[  266.891188][ T7006] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  266.909235][ T7006] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  266.953394][ T7015] XFS (loop2): Mounting V5 Filesystem
[  266.961195][ T7006] F2FS-fs (loop3): invalid crc value
[  267.001274][ T7006] F2FS-fs (loop3): Found nat_bits in checkpoint
[  267.048548][ T7015] XFS (loop2): Ending clean mount
[  267.065350][ T7015] XFS (loop2): Quotacheck needed: Please wait.
[  267.079948][ T7006] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  267.087471][ T7006] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  267.145279][ T7015] XFS (loop2): Quotacheck: Done.
[  267.258772][ T6655] XFS (loop2): Unmounting Filesystem
[  267.640973][ T3657] Bluetooth: hci0: command 0x0406 tx timeout
[  267.925666][ T7046] loop0: detected capacity change from 0 to 128
[  267.971205][ T7046] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  268.035914][ T3629] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  268.541860][ T7042] loop3: detected capacity change from 0 to 32768
[  268.587675][ T7042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.701 (7042)
[  268.642498][ T7042] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  268.679738][ T7042] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  268.717111][ T7042] BTRFS info (device loop3): using free space tree
[  268.893650][ T7042] BTRFS info (device loop3): enabling ssd optimizations
[  269.067683][ T5356] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  269.515151][ T7078] loop2: detected capacity change from 0 to 8192
[  269.618270][ T7078] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  269.635103][ T7078] UDF-fs: Scanning with blocksize 512 failed
[  269.672117][ T7078] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  269.696303][ T7078] UDF-fs: Scanning with blocksize 1024 failed
[  269.737968][ T7078] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  269.774373][ T7078] UDF-fs: Scanning with blocksize 2048 failed
[  269.826815][ T7078] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  270.281290][ T7093] loop3: detected capacity change from 0 to 512
[  270.348963][ T7093] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  270.436545][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  270.454207][ T7093] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038 (0x7fffffff)
[  270.648036][ T5356] EXT4-fs (loop3): unmounting filesystem.
[  270.755024][ T7102] loop2: detected capacity change from 0 to 128
[  270.828097][ T7102] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  272.278118][ T7111] loop0: detected capacity change from 0 to 32768
[  272.334347][ T7111] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.720 (7111)
[  272.353233][ T7122] loop4: detected capacity change from 0 to 8192
[  272.386163][ T7122] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  272.394162][ T7111] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  272.410918][ T7111] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  272.434411][ T7129] loop2: detected capacity change from 0 to 512
[  272.440994][ T7122] UDF-fs: Scanning with blocksize 512 failed
[  272.451061][ T7111] BTRFS info (device loop0): using free space tree
[  272.473207][ T7122] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  272.487162][ T7122] UDF-fs: Scanning with blocksize 1024 failed
[  272.497054][ T7129] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  272.531141][ T7122] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  272.559649][ T7122] UDF-fs: Scanning with blocksize 2048 failed
[  272.586232][ T7122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.657708][ T7129] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.727: casefold flag without casefold feature
[  272.737254][ T7129] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.727: missing EA_INODE flag
[  272.789563][ T7129] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.727: error while reading EA inode 12 err=-117
[  272.808979][ T7129] EXT4-fs (loop2): 1 orphan inode deleted
[  272.826281][ T7129] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  272.841858][ T7111] BTRFS info (device loop0): enabling ssd optimizations
[  272.894163][   T26] audit: type=1804 audit(1722637830.922:73): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.727" name="/newroot/17/file0/file1" dev="loop2" ino=15 res=1 errno=0
[  273.138418][ T6655] EXT4-fs (loop2): unmounting filesystem.
[  273.264920][ T5259] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  273.398729][ T7166] loop4: detected capacity change from 0 to 256
[  273.495972][ T7166] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0x702bb370, utbl_chksum : 0xe619d30d)
[  273.816814][ T7179] loop4: detected capacity change from 0 to 512
[  273.842245][ T7179] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  273.898337][ T7179] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.738: casefold flag without casefold feature
[  273.961004][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.738: missing EA_INODE flag
[  274.000708][ T7179] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.738: error while reading EA inode 12 err=-117
[  274.021476][ T7179] EXT4-fs (loop4): 1 orphan inode deleted
[  274.037740][ T7179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  274.081750][   T26] audit: type=1804 audit(1722637832.112:74): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.738" name="/newroot/113/file0/file1" dev="loop4" ino=15 res=1 errno=0
[  274.269526][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  274.496316][ T7196] loop0: detected capacity change from 0 to 512
[  274.566213][ T7196] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  274.623684][ T7196] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.745: casefold flag without casefold feature
[  274.806361][ T7196] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.745: missing EA_INODE flag
[  274.827842][ T7194] loop4: detected capacity change from 0 to 8192
[  274.846955][ T7196] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.745: error while reading EA inode 12 err=-117
[  274.869800][ T7196] EXT4-fs (loop0): 1 orphan inode deleted
[  274.883423][ T7194] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  274.912730][ T7194] UDF-fs: Scanning with blocksize 512 failed
[  274.932830][ T7196] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  274.943825][ T7194] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  274.977665][ T7194] UDF-fs: Scanning with blocksize 1024 failed
[  275.006561][   T26] audit: type=1804 audit(1722637833.032:75): pid=7196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.745" name="/newroot/117/file0/file1" dev="loop0" ino=18 res=1 errno=0
[  275.054884][ T7194] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  275.079766][ T7194] UDF-fs: Scanning with blocksize 2048 failed
[  275.098042][ T7194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.207657][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  275.371415][ T7189] loop2: detected capacity change from 0 to 32768
[  275.416264][ T7189] XFS (loop2): Mounting V5 Filesystem
[  275.481088][ T7189] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  275.534685][ T7189] XFS (loop2): Starting recovery (logdev: internal)
[  275.566530][ T7189] XFS (loop2): Ending recovery (logdev: internal)
[  275.664249][ T6655] XFS (loop2): Unmounting Filesystem
[  276.549650][ T7248] loop4: detected capacity change from 0 to 8192
[  276.582429][ T7248] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  276.593239][ T7248] UDF-fs: Scanning with blocksize 512 failed
[  276.620926][ T7248] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  276.641728][ T7248] UDF-fs: Scanning with blocksize 1024 failed
[  276.659316][ T7248] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  276.676057][ T7248] UDF-fs: Scanning with blocksize 2048 failed
[  276.694672][ T7248] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.497806][ T7272] netlink: 'syz.4.770': attribute type 4 has an invalid length.
[  277.529491][ T7272] netlink: 'syz.4.770': attribute type 4 has an invalid length.
[  277.870974][ T3657] Bluetooth: hci3: command 0x0406 tx timeout
[  278.434551][ T7297] loop3: detected capacity change from 0 to 8192
[  278.490362][ T7297] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  278.519903][ T7297] UDF-fs: Scanning with blocksize 512 failed
[  278.549242][ T7297] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  278.587844][ T7297] UDF-fs: Scanning with blocksize 1024 failed
[  278.620946][ T7297] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  278.647019][ T7297] UDF-fs: Scanning with blocksize 2048 failed
[  278.684727][ T7297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  279.211371][ T7322] Bluetooth: MGMT ver 1.22
[  279.217248][ T7322] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes
[  279.519410][ T7339] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'.
[  279.603458][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  279.650906][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  279.663919][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'.
[  280.058545][ T7351] Bluetooth: MGMT ver 1.22
[  280.072129][ T7351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.807'.
[  280.412132][ T7335] loop0: detected capacity change from 0 to 32768
[  280.480663][ T7335] XFS (loop0): Mounting V5 Filesystem
[  280.572164][ T7335] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  280.654224][ T7335] XFS (loop0): Starting recovery (logdev: internal)
[  280.696774][ T7335] XFS (loop0): Ending recovery (logdev: internal)
[  280.849290][ T5259] XFS (loop0): Unmounting Filesystem
[  280.931273][ T7378] sctp: [Deprecated]: syz.4.811 (pid 7378) Use of int in max_burst socket option deprecated.
[  280.931273][ T7378] Use struct sctp_assoc_value instead
[  281.141378][ T7400] netlink: 64 bytes leftover after parsing attributes in process `syz.1.823'.
[  281.757581][ T7417] loop4: detected capacity change from 0 to 8192
[  281.805824][ T7417] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  281.847085][ T7417] UDF-fs: Scanning with blocksize 512 failed
[  281.874848][ T7417] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  281.907830][ T7417] UDF-fs: Scanning with blocksize 1024 failed
[  281.924657][ T7417] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  281.949275][ T7417] UDF-fs: Scanning with blocksize 2048 failed
[  281.983996][ T7417] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  282.018774][ T7433] loop2: detected capacity change from 0 to 2048
[  282.203139][ T7433]  loop2: p3 < > p4 < >
[  282.207922][ T7433] loop2: partition table partially beyond EOD, truncated
[  282.215703][ T7433] loop2: p3 start 4284289 is beyond EOD, truncated
[  282.240973][ T3091]  loop2: p3 < > p4 < >
[  282.250806][ T7171] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  282.287689][ T3091] loop2: partition table partially beyond EOD, truncated
[  282.330441][ T7440] fuse: Unknown parameter 'rootmodm'
[  282.589612][ T3091] loop2: p3 start 4284289 is beyond EOD, truncated
[  282.771556][ T7171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.940958][ T7171] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.963256][ T7171] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  283.000787][ T7171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.047426][ T6655] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
[  283.050922][ T3629] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  283.059733][ T7171] usb 4-1: config 0 descriptor??
[  283.090914][ T3629] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  283.102669][ T3629] Buffer I/O error on dev loop2p4, logical block 0, async page read
[  283.170258][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  283.313637][ T3629] udevd[3629]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  283.496204][ T7455] loop2: detected capacity change from 0 to 8
[  284.352907][ T7457] tipc: Started in network mode
[  284.358011][ T7457] tipc: Node identity 101, cluster identity 4711
[  284.364412][ T7457] tipc: Node number set to 257
[  284.486488][ T7469] loop4: detected capacity change from 0 to 128
[  284.501386][ T7469] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  284.531056][ T7471] loop2: detected capacity change from 0 to 1024
[  284.566891][ T7471] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.621852][ T7475] loop4: detected capacity change from 0 to 512
[  284.637547][ T7471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  284.652239][ T7475] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  284.681237][ T7171] usbhid 4-1:0.0: can't add hid device: -71
[  284.691767][ T7171] usbhid: probe of 4-1:0.0 failed with error -71
[  284.694251][ T7471] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  284.713850][ T7171] usb 4-1: USB disconnect, device number 19
[  284.752160][ T7475] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.849: casefold flag without casefold feature
[  284.778902][ T7475] EXT4-fs (loop4): Remounting filesystem read-only
[  284.801055][ T6655] EXT4-fs (loop2): unmounting filesystem.
[  284.808708][ T7475] EXT4-fs (loop4): 1 orphan inode deleted
[  284.816699][ T7471] syz.2.847 (7471) used greatest stack depth: 18200 bytes left
[  284.824739][ T7475] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  284.877008][   T26] audit: type=1800 audit(1722637842.902:76): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.849" name="bus" dev="loop4" ino=18 res=0 errno=0
[  284.886496][ T7481] loop2: detected capacity change from 0 to 8
[  284.926877][ T7475] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz.4.849: Invalid inode table block 5 in block_group 0
[  284.969068][ T7475] EXT4-fs (loop4): Remounting filesystem read-only
[  284.979831][ T7475] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  284.994222][ T7475] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #19: comm syz.4.849: mark_inode_dirty error
[  285.006562][ T7475] EXT4-fs error (device loop4): __ext4_get_inode_loc:4495: comm syz.4.849: Invalid inode table block 5 in block_group 0
[  285.018825][ T7484] loop2: detected capacity change from 0 to 256
[  285.027323][ T7485] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  285.027323][ T7485] The task syz.0.851 (7485) triggered the difference, watch for misbehavior.
[  285.045627][ T7475] EXT4-fs error (device loop4): ext4_get_max_inline_size:116: inode #19: comm syz.4.849: can't get inode location 19
[  285.066227][ T7484] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012118, chksum : 0xd0e0409c, utbl_chksum : 0xe619d30d)
[  285.161811][ T5159] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 36: comm syz-executor: lblock 0 mapped to illegal pblock 36 (length 1)
[  285.298303][ T5159] EXT4-fs (loop4): unmounting filesystem.
[  286.697780][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.739535][ T7501] tipc: Started in network mode
[  286.744507][ T7501] tipc: Node identity 101, cluster identity 4711
[  286.751822][ T7501] tipc: Node number set to 257
[  286.965359][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.157412][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.202555][ T7518] loop0: detected capacity change from 0 to 8
[  287.312523][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.575161][ T3656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  287.584752][ T3656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  287.592676][ T3656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  287.601041][ T3656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  287.630263][ T3656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  287.637630][ T3656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  288.401322][ T7533] tipc: Started in network mode
[  288.406227][ T7533] tipc: Node identity 101, cluster identity 4711
[  288.412948][ T7533] tipc: Node number set to 257
[  288.461531][ T3657] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  288.471685][ T3651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  288.479717][ T3657] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  288.488556][ T3651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  288.497959][ T3657] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  288.505486][ T3657] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  288.617326][ T7540] netlink: 'syz.1.877': attribute type 12 has an invalid length.
[  288.664300][ T7540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.877'.
[  288.720252][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'.
[  289.000928][ T4093] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  289.307046][ T4093] usb 4-1: no configurations
[  289.312661][ T4093] usb 4-1: can't read configurations, error -22
[  289.480989][ T4093] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  289.681559][ T7525] chnl_net:caif_netlink_parms(): no params data found
[  289.718836][ T3656] Bluetooth: hci0: command tx timeout
[  289.739275][ T7577] loop0: detected capacity change from 0 to 2048
[  289.791271][ T4093] usb 4-1: no configurations
[  289.795897][ T4093] usb 4-1: can't read configurations, error -22
[  289.802972][ T4093] usb usb4-port1: attempt power cycle
[  289.818993][ T7577] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  290.001726][ T7537] chnl_net:caif_netlink_parms(): no params data found
[  290.240954][ T4093] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  290.250961][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.278203][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.296353][ T7525] device bridge_slave_0 entered promiscuous mode
[  290.410956][ T4093] usb 4-1: no configurations
[  290.415590][ T4093] usb 4-1: can't read configurations, error -22
[  290.498870][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state
[  290.506848][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.516456][ T7525] device bridge_slave_1 entered promiscuous mode
[  290.600815][ T3656] Bluetooth: hci1: command tx timeout
[  290.611026][ T4093] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  290.805128][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state
[  290.814478][ T7537] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.832657][ T7537] device bridge_slave_0 entered promiscuous mode
[  290.921845][ T4093] usb 4-1: no configurations
[  290.926905][ T4093] usb 4-1: can't read configurations, error -22
[  290.958479][ T4093] usb usb4-port1: unable to enumerate USB device
[  291.529251][ T7525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.566502][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.584592][ T7537] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.646991][ T7537] device bridge_slave_1 entered promiscuous mode
[  291.713426][ T7611] loop0: detected capacity change from 0 to 512
[  291.720298][ T7611] EXT4-fs: Ignoring removed nobh option
[  291.728455][ T7525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  291.754953][ T7611] EXT4-fs: Ignoring removed orlov option
[  291.793781][ T3657] Bluetooth: hci0: command tx timeout
[  291.843450][ T7611] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  291.858498][ T7611] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff)
[  291.925946][ T7525] team0: Port device team_slave_0 added
[  291.947004][ T7611] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  291.979882][   T11] device hsr_slave_0 left promiscuous mode
[  291.999229][   T11] device hsr_slave_1 left promiscuous mode
[  292.031326][ T7611] Quota error (device loop0): write_blk: dquota write failed
[  292.047810][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  292.068254][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  292.068769][ T7611] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  292.086569][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  292.108361][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  292.114491][ T7611] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.891: Failed to acquire dquot type 1
[  292.156901][   T11] device bridge_slave_1 left promiscuous mode
[  292.176006][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.206006][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'.
[  292.246298][   T11] device bridge_slave_0 left promiscuous mode
[  292.256202][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.338965][ T5259] EXT4-fs (loop0): unmounting filesystem.
[  292.396121][   T11] device veth1_macvtap left promiscuous mode
[  292.439283][   T11] device veth0_macvtap left promiscuous mode
[  292.462632][   T11] device veth1_vlan left promiscuous mode
[  292.474793][   T11] device veth0_vlan left promiscuous mode
[  292.674261][ T3657] Bluetooth: hci1: command tx timeout
[  292.741242][ T7171] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  293.163693][ T7171] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  293.176375][ T7171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.197377][ T7171] usb 1-1: config 0 descriptor??
[  293.409601][   T11] team0 (unregistering): Port device team_slave_1 removed
[  293.474527][   T11] team0 (unregistering): Port device team_slave_0 removed
[  293.516858][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.551042][ T3657] Bluetooth: hci5: command 0x0406 tx timeout
[  293.561337][ T7171] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  293.569863][ T7171] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  293.601696][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.643523][ T7171] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2
[  293.651315][ T7171] [drm] Initialized udl on minor 2
[  293.841066][ T7171] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err 0
[  293.865381][ T7171] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  293.874755][ T3657] Bluetooth: hci0: command tx timeout
[  294.099746][ T3688] usb 1-1: USB disconnect, device number 21
[  294.111292][ T7171] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  294.148740][ T7171] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  294.163582][ T7171] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  294.508351][   T11] bond0 (unregistering): Released all slaves
[  294.581161][ T7537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  294.640269][ T7537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.684854][ T7525] team0: Port device team_slave_1 added
[  294.775292][ T3657] Bluetooth: hci1: command tx timeout
[  294.956794][ T7537] team0: Port device team_slave_0 added
[  294.983716][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.010020][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.089853][ T7525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.118698][ T7537] team0: Port device team_slave_1 added
[  295.130633][ T7525] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.164345][ T7525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.307137][ T7525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.501727][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.513430][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.628885][ T7537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.673852][ T7525] device hsr_slave_0 entered promiscuous mode
[  295.707719][ T7525] device hsr_slave_1 entered promiscuous mode
[  295.730072][ T7525] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.752479][ T7525] Cannot create hsr debugfs directory
[  295.765359][ T7537] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.779188][ T7537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.843224][ T7537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.887882][ T7689] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.902687][ T7689] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.909794][ T7689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.950965][ T3656] Bluetooth: hci0: command tx timeout
[  296.058197][ T7696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  296.066136][ T7696] IPv6: NLM_F_CREATE should be set when creating new route
[  296.323835][ T7537] device hsr_slave_0 entered promiscuous mode
[  296.364544][ T7537] device hsr_slave_1 entered promiscuous mode
[  296.400947][ T7537] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  296.409049][ T7537] Cannot create hsr debugfs directory
[  296.830972][ T3656] Bluetooth: hci1: command tx timeout
[  297.660924][ T4496] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  298.031046][ T4496] usb 1-1: config 0 has no interfaces?
[  298.036921][ T4496] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  298.066324][ T4496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.089289][ T4496] usb 1-1: config 0 descriptor??
[  298.398927][ T7751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.417833][ T7751] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.458539][ T7171] usb 1-1: USB disconnect, device number 22
[  308.212598][ T3657] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  308.222752][ T3657] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  308.230589][ T3657] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  308.240348][ T3657] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  308.248324][ T3657] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  308.256272][ T3657] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  308.555327][ T7820] chnl_net:caif_netlink_parms(): no params data found
[  309.329027][ T3656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  309.339690][ T3656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  309.348255][ T3656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  309.355917][ T3656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  309.364339][ T3656] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  309.374008][ T3656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  309.751567][ T3656] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  309.761639][ T3656] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  309.770560][ T3656] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  309.778258][ T3656] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  309.785865][ T3656] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  309.794188][ T3656] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  310.281007][ T3657] Bluetooth: hci6: command tx timeout
[  311.391091][ T3657] Bluetooth: hci7: command tx timeout
[  311.870964][ T3657] Bluetooth: hci8: command tx timeout
[  312.350852][ T3657] Bluetooth: hci6: command tx timeout
[  313.470934][ T3657] Bluetooth: hci7: command tx timeout
[  313.950828][ T3656] Bluetooth: hci8: command tx timeout
[  314.431038][ T3656] Bluetooth: hci6: command tx timeout
[  315.550898][ T3656] Bluetooth: hci7: command tx timeout
[  316.030851][ T3656] Bluetooth: hci8: command tx timeout
[  316.510896][ T3656] Bluetooth: hci6: command tx timeout
[  316.754070][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  316.760392][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  317.641000][ T3656] Bluetooth: hci7: command tx timeout
[  318.110842][ T3656] Bluetooth: hci8: command tx timeout
[  319.321058][   T27] INFO: task syz.1.240:5319 blocked for more than 143 seconds.
[  319.328654][   T27]       Not tainted 6.1.102-syzkaller #0
[  319.348998][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  319.367876][   T27] task:syz.1.240       state:D stack:23464 pid:5319  ppid:4777   flags:0x00004004
[  319.399475][   T27] Call Trace:
[  319.403020][   T27]  <TASK>
[  319.405983][   T27]  __schedule+0x143f/0x4570
[  319.439563][   T27]  ? release_firmware_map_entry+0x186/0x186
[  319.470150][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  319.489169][   T27]  ? print_irqtrace_events+0x210/0x210
[  319.496005][   T27]  ? _raw_spin_lock_irq+0xdb/0x110
[  319.501460][   T27]  schedule+0xbf/0x180
[  319.505554][   T27]  io_schedule+0x88/0x100
[  319.509903][   T27]  folio_wait_bit_common+0x878/0x1290
[  319.515706][   T27]  ? folio_wait_bit+0x20/0x20
[  319.528870][   T27]  ? migration_entry_wait_on_locked+0x1160/0x1160
[  319.535553][   T27]  ? jfs_error+0x219/0x2e0
[  319.539992][   T27]  ? __get_metapage+0x551/0x1040
[  319.557314][   T27]  release_metapage+0x88/0x9b0
[  319.569024][   T27]  ? PageHeadHuge+0x8e/0x1c0
[  319.574034][   T27]  __get_metapage+0xb15/0x1040
[  319.578839][   T27]  jfs_readdir+0x2907/0x4620
[  319.592118][   T27]  ? dtInitRoot+0x690/0x690
[  319.596682][   T27]  ? end_current_label_crit_section+0x147/0x170
[  319.609496][   T27]  ? common_file_perm+0x17d/0x1d0
[  319.616887][   T27]  ? iterate_dir+0x131/0x560
[  319.629354][   T27]  iterate_dir+0x224/0x560
[  319.637025][   T27]  __se_sys_getdents64+0x209/0x4f0
[  319.648789][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  319.657763][   T27]  ? __x64_sys_getdents64+0x80/0x80
[  319.669118][   T27]  ? filldir+0x6f0/0x6f0
[  319.675597][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  319.687891][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  319.695330][   T27]  ? syscall_enter_from_user_mode+0x2e/0x230
[  319.707667][   T27]  do_syscall_64+0x3b/0xb0
[  319.714653][   T27]  ? clear_bhb_loop+0x45/0xa0
[  319.719355][   T27]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  319.732718][   T27] RIP: 0033:0x7fdf26f773b9
[  319.737155][   T27] RSP: 002b:00007fdf27cd6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  319.751666][   T27] RAX: ffffffffffffffda RBX: 00007fdf27105f80 RCX: 00007fdf26f773b9
[  319.759740][   T27] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 000000000000000a
[  319.771411][   T27] RBP: 00007fdf26fe48e6 R08: 0000000000000000 R09: 0000000000000000
[  319.779405][   T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  319.787732][   T27] R13: 000000000000000b R14: 00007fdf27105f80 R15: 00007ffd72711668
[  319.795948][   T27]  </TASK>
[  319.798999][   T27] 
[  319.798999][   T27] Showing all locks held in the system:
[  319.807113][   T27] 4 locks held by kworker/u4:1/11:
[  319.816346][   T27]  #0: ffff888012a1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  319.828532][   T27]  #1: ffffc90000107d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  319.838848][   T27]  #2: ffffffff8e4eb310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60
[  319.848471][   T27]  #3: ffffffff8d330338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930
[  319.859642][   T27] 1 lock held by rcu_tasks_kthre/12:
[  319.865137][   T27]  #0: ffffffff8d32af10 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  319.876171][   T27] 1 lock held by rcu_tasks_trace/13:
[  319.882248][   T27]  #0: ffffffff8d32b710 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  319.893650][   T27] 1 lock held by khungtaskd/27:
[  319.898512][   T27]  #0: ffffffff8d32ad40 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  319.908675][   T27] 2 locks held by getty/3397:
[  319.913695][   T27]  #0: ffff888028cbe098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  319.923752][   T27]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  319.934864][   T27] 3 locks held by kworker/1:4/3683:
[  319.940074][   T27]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  319.950959][   T27]  #1: ffffc900044cfd20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  319.970289][   T27]  #2: ffffffff8e4f7668 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50
[  319.979969][   T27] 2 locks held by kworker/0:11/4494:
[  319.985578][   T27]  #0: ffff888012872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  319.996847][   T27]  #1: ffffc90004847d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  320.009140][   T27] 3 locks held by kworker/0:13/4496:
[  320.014649][   T27]  #0: ffff888012870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  320.025403][   T27]  #1: ffffc900030cfd20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  320.036078][   T27]  #2: ffffffff8d330200 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0
[  320.048958][   T27] 2 locks held by syz.1.240/5319:
[  320.058863][   T27]  #0: ffff88807e05e368 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ba/0x360
[  320.076402][   T27]  #1: ffff88805de0f480 (&type->i_mutex_dir_key#14){++++}-{3:3}, at: iterate_dir+0x131/0x560
[  320.087228][   T27] 3 locks held by kworker/u4:18/6523:
[  320.093167][   T27] 3 locks held by syz-executor/7525:
[  320.098467][   T27] 5 locks held by syz-executor/7537:
[  320.106458][   T27]  #0: ffff88807ec34460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  320.115755][   T27]  #1: ffff888057ae2888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  320.126479][   T27]  #2: ffff8881457c4748 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  320.137983][   T27]  #3: ffffffff8de20fc8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  320.148593][   T27]  #4: ffff888047b260e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  320.159515][   T27] 2 locks held by syz.1.927/7739:
[  320.164767][   T27]  #0: ffff8880248e6810 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  320.175309][   T27]  #1: ffffffff8d330338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  320.186513][   T27] 1 lock held by syz.3.929/7763:
[  320.192105][   T27]  #0: ffff88807f5de0b8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x2e/0x100
[  320.203149][   T27] 1 lock held by syz.0.931/7777:
[  320.208098][   T27]  #0: ffff888073948eb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x2e/0x100
[  320.219860][   T27] 1 lock held by syz-executor/7820:
[  320.225360][   T27]  #0: ffffffff8e4f7668 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  320.236391][   T27] 1 lock held by syz-executor/7827:
[  320.241823][   T27]  #0: ffffffff8e4f7668 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  320.251537][   T27] 1 lock held by syz-executor/7830:
[  320.256738][   T27]  #0: ffffffff8e4f7668 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0
[  320.266463][   T27] 
[  320.268794][   T27] =============================================
[  320.268794][   T27] 
[  320.277608][   T27] NMI backtrace for cpu 1
[  320.281964][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.102-syzkaller #0
[  320.289872][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  320.299934][   T27] Call Trace:
[  320.303224][   T27]  <TASK>
[  320.306165][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  320.310877][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  320.316354][   T27]  ? panic+0x764/0x764
[  320.320427][   T27]  ? vprintk_emit+0x622/0x740
[  320.325123][   T27]  ? printk_sprint+0x490/0x490
[  320.329902][   T27]  ? nmi_cpu_backtrace+0x252/0x560
[  320.335030][   T27]  nmi_cpu_backtrace+0x4e1/0x560
[  320.339996][   T27]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  320.346171][   T27]  ? _printk+0xd1/0x111
[  320.350330][   T27]  ? panic+0x764/0x764
[  320.354401][   T27]  ? __wake_up_klogd+0xcc/0x100
[  320.359259][   T27]  ? panic+0x764/0x764
[  320.363339][   T27]  ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0
[  320.369432][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  320.375513][   T27]  nmi_trigger_cpumask_backtrace+0x1b0/0x3f0
[  320.381516][   T27]  watchdog+0xf88/0xfd0
[  320.385693][   T27]  ? watchdog+0x1f8/0xfd0
[  320.390037][   T27]  kthread+0x28d/0x320
[  320.394112][   T27]  ? hungtask_pm_notify+0x50/0x50
[  320.399154][   T27]  ? kthread_blkcg+0xd0/0xd0
[  320.403758][   T27]  ret_from_fork+0x1f/0x30
[  320.408207][   T27]  </TASK>
[  320.411792][   T27] Sending NMI from CPU 1 to CPUs 0:
[  320.417146][    C0] NMI backtrace for cpu 0
[  320.417156][    C0] CPU: 0 PID: 7525 Comm: syz-executor Not tainted 6.1.102-syzkaller #0
[  320.417171][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  320.417180][    C0] RIP: 0010:__lock_acquire+0x17/0x1f80
[  320.417205][    C0] Code: 94 48 8b 3c 24 e8 19 b1 77 00 eb 89 0f 1f 80 00 00 00 00 55 41 57 41 56 41 55 41 54 53 48 81 ec 88 00 00 00 44 89 cb 45 89 c7 <41> 89 cc 89 54 24 50 89 f5 49 89 fe 65 4c 8b 2d 45 fc 97 7e 48 c7
[  320.417217][    C0] RSP: 0018:ffffc90003c1f000 EFLAGS: 00000086
[  320.417230][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  320.417240][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8d32ad40
[  320.417249][    C0] RBP: ffffc90003c1f228 R08: 0000000000000000 R09: 0000000000000000
[  320.417265][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000783e24
[  320.417275][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[  320.417289][    C0] FS:  0000555556a47500(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  320.417303][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  320.417313][    C0] CR2: 00007fd739637d60 CR3: 0000000068bda000 CR4: 00000000003506f0
[  320.417326][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  320.417335][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  320.417344][    C0] Call Trace:
[  320.417349][    C0]  <NMI>
[  320.417353][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  320.417374][    C0]  ? read_lock_is_recursive+0x10/0x10
[  320.417397][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  320.417425][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  320.417448][    C0]  ? nmi_handle+0x12e/0x440
[  320.417487][    C0]  ? nmi_handle+0x25/0x440
[  320.417510][    C0]  ? __lock_acquire+0x17/0x1f80
[  320.417533][    C0]  ? default_do_nmi+0x62/0x150
[  320.417556][    C0]  ? exc_nmi+0xa8/0x100
[  320.417578][    C0]  ? end_repeat_nmi+0x16/0x31
[  320.417603][    C0]  ? __lock_acquire+0x17/0x1f80
[  320.417626][    C0]  ? __lock_acquire+0x17/0x1f80
[  320.417648][    C0]  ? __lock_acquire+0x17/0x1f80
[  320.417671][    C0]  </NMI>
[  320.417675][    C0]  <TASK>
[  320.417686][    C0]  lock_acquire+0x1f8/0x5a0
[  320.417708][    C0]  ? xa_find+0x17b/0x420
[  320.417730][    C0]  ? read_lock_is_recursive+0x10/0x10
[  320.417753][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  320.417798][    C0]  ? xa_get_mark+0x175/0x680
[  320.417821][    C0]  xa_find+0x19c/0x420
[  320.417840][    C0]  ? xa_find+0x17b/0x420
[  320.417859][    C0]  ? xa_get_mark+0x175/0x680
[  320.417881][    C0]  ? xa_find+0x17b/0x420
[  320.417900][    C0]  ? xa_clear_mark+0x2c0/0x2c0
[  320.417927][    C0]  ? xa_clear_mark+0x2c0/0x2c0
[  320.417948][    C0]  ? devlinks_xa_find_get+0x29/0x2d0
[  320.417964][    C0]  devlinks_xa_find_get+0xf2/0x2d0
[  320.417980][    C0]  ? devlinks_xa_find_get+0x29/0x2d0
[  320.417998][    C0]  devlink_nl_cmd_port_get_dumpit+0x130/0x560
[  320.418017][    C0]  ? __kmem_cache_alloc_node+0x137/0x260
[  320.418038][    C0]  ? netlink_dump+0x1ed/0xc50
[  320.418062][    C0]  ? netlink_dump+0x1ed/0xc50
[  320.418102][    C0]  ? devlink_nl_cmd_port_get_doit+0x1f0/0x1f0
[  320.418122][    C0]  ? __alloc_skb+0x419/0x670
[  320.418147][    C0]  netlink_dump+0x603/0xc50
[  320.418176][    C0]  ? netlink_lookup+0x200/0x200
[  320.418201][    C0]  ? genl_start+0x2e1/0x490
[  320.418230][    C0]  __netlink_dump_start+0x541/0x6e0
[  320.418259][    C0]  genl_rcv_msg+0x9f3/0xf70
[  320.418292][    C0]  ? devlink_nl_cmd_port_get_doit+0x1f0/0x1f0
[  320.418313][    C0]  ? genl_bind+0x400/0x400
[  320.418344][    C0]  ? genl_rcv_msg+0xf70/0xf70
[  320.418369][    C0]  ? devlink_nl_cmd_port_get_doit+0x1f0/0x1f0
[  320.418386][    C0]  ? genl_lock_done+0xd0/0xd0
[  320.418413][    C0]  ? read_lock_is_recursive+0x10/0x10
[  320.418439][    C0]  ? __might_sleep+0xb0/0xb0
[  320.418459][    C0]  ? devlink_nl_cmd_get_dumpit+0x4b0/0x4b0
[  320.418477][    C0]  ? devlink_nl_cmd_port_get_doit+0x1f0/0x1f0
[  320.418501][    C0]  netlink_rcv_skb+0x1cd/0x410
[  320.418525][    C0]  ? genl_bind+0x400/0x400
[  320.418551][    C0]  ? netlink_ack+0x1290/0x1290
[  320.418583][    C0]  genl_rcv+0x24/0x40
[  320.418607][    C0]  netlink_unicast+0x7d8/0x970
[  320.418633][    C0]  ? netlink_detachskb+0x90/0x90
[  320.418655][    C0]  ? __virt_addr_valid+0x45b/0x530
[  320.418678][    C0]  ? __phys_addr_symbol+0x2b/0x70
[  320.418700][    C0]  ? __check_object_size+0x4dd/0xa30
[  320.418722][    C0]  ? bpf_lsm_netlink_send+0x5/0x10
[  320.418746][    C0]  netlink_sendmsg+0xa26/0xd60
[  320.418775][    C0]  ? netlink_getsockopt+0x580/0x580
[  320.418799][    C0]  ? __might_fault+0xa1/0x110
[  320.418821][    C0]  ? aa_sock_msg_perm+0x91/0x150
[  320.418844][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  320.418866][    C0]  ? security_socket_sendmsg+0x7d/0xa0
[  320.418888][    C0]  ? netlink_getsockopt+0x580/0x580
[  320.418912][    C0]  __sys_sendto+0x480/0x600
[  320.418939][    C0]  ? __ia32_sys_getpeername+0x80/0x80
[  320.418979][    C0]  ? alloc_fd+0x5a0/0x640
[  320.419002][    C0]  ? print_irqtrace_events+0x210/0x210
[  320.419047][    C0]  __x64_sys_sendto+0xda/0xf0
[  320.419071][    C0]  do_syscall_64+0x3b/0xb0
[  320.419093][    C0]  ? clear_bhb_loop+0x45/0xa0
[  320.419116][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  320.419161][    C0] RIP: 0033:0x7f83db17914c
[  320.419174][    C0] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b
[  320.419188][    C0] RSP: 002b:00007fffe97d68c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  320.419205][    C0] RAX: ffffffffffffffda RBX: 00007f83dbe34620 RCX: 00007f83db17914c
[  320.419217][    C0] RDX: 0000000000000034 RSI: 00007f83dbe34670 RDI: 0000000000000005
[  320.419228][    C0] RBP: 0000000000000000 R08: 00007fffe97d6914 R09: 000000000000000c
[  320.419239][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005
[  320.419249][    C0] R13: 00007fffe97d6988 R14: 00007f83dbe34670 R15: 0000000000000000
[  320.419267][    C0]  </TASK>
[  321.055157][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  321.062032][   T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.102-syzkaller #0
[  321.069922][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  321.079980][   T27] Call Trace:
[  321.083268][   T27]  <TASK>
[  321.086207][   T27]  dump_stack_lvl+0x1e3/0x2cb
[  321.090901][   T27]  ? nf_tcp_handle_invalid+0x642/0x642
[  321.096374][   T27]  ? panic+0x764/0x764
[  321.100442][   T27]  ? llist_add_batch+0x160/0x1d0
[  321.105397][   T27]  ? vscnprintf+0x59/0x80
[  321.109734][   T27]  panic+0x318/0x764
[  321.113635][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  321.119809][   T27]  ? memcpy_page_flushcache+0xfc/0xfc
[  321.125186][   T27]  ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0
[  321.131350][   T27]  ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0
[  321.137519][   T27]  ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0
[  321.143690][   T27]  watchdog+0xfc7/0xfd0
[  321.147869][   T27]  ? watchdog+0x1f8/0xfd0
[  321.152211][   T27]  kthread+0x28d/0x320
[  321.156291][   T27]  ? hungtask_pm_notify+0x50/0x50
[  321.161334][   T27]  ? kthread_blkcg+0xd0/0xd0
[  321.165936][   T27]  ret_from_fork+0x1f/0x30
[  321.170371][   T27]  </TASK>
[  321.173522][   T27] Kernel Offset: disabled
[  321.177850][   T27] Rebooting in 86400 seconds..