last executing test programs:

8m3.984872809s ago: executing program 0 (id=729):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x100, 0x5, 0x2, 0x800, 0x1, "000000000000e300", '\x00', "03000006", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8c2bad98567717e16ff385", "000000ff0000000000000020", "0000000000000000001000"]})

8m2.939618609s ago: executing program 0 (id=737):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$EBT_SO_GET_ENTRIES(r0, 0x84, 0x81, 0x0, &(0x7f0000000080))

8m2.869300994s ago: executing program 0 (id=739):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x20, 0x18, &(0x7f0000000200), 0x1}, 0x6d)

8m2.469748128s ago: executing program 0 (id=743):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000500)={[{@noquota}, {@gid}, {@errors_continue}, {@errors_continue}, {@gid={'gid', 0x3d, 0xee00}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@quota}, {@errors_continue}, {@discard_size}]}, 0x1, 0x61c0, &(0x7f0000006740)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})

8m0.619787369s ago: executing program 0 (id=765):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x21401}, [@IFLA_NET_NS_PID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048044}, 0x0)

7m56.535377994s ago: executing program 0 (id=790):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x143400)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0)

7m55.973358334s ago: executing program 32 (id=790):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x143400)
ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, 0x0)

5m34.463749941s ago: executing program 5 (id=2289):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setresuid(0xee01, 0xee00, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

5m34.30769186s ago: executing program 5 (id=2293):
r0 = socket(0x1e, 0x1, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000040), 0x200000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

5m34.184288521s ago: executing program 5 (id=2295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x0)

5m33.846356773s ago: executing program 5 (id=2299):
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0xa0202, 0x0, 0x11}, 0x18)

5m33.605045087s ago: executing program 5 (id=2305):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000078000100000000000000000007"], 0x24}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0)

5m32.846925256s ago: executing program 5 (id=2315):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)

5m32.582543386s ago: executing program 33 (id=2315):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={<r1=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20)

2m16.468986265s ago: executing program 4 (id=3948):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xb0)
unshare(0x400)
sync_file_range(r0, 0x800000000976, 0x80, 0x3)

2m16.201019291s ago: executing program 4 (id=3949):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

2m16.110648554s ago: executing program 4 (id=3951):
r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x8086e1, 0x0, 0x1, 0xfffffffd}, &(0x7f0000000500), &(0x7f0000000180), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340)}], 0x0, 0x2}, 0x20)

2m15.797662014s ago: executing program 4 (id=3954):
r0 = io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0xdb60, 0x40, 0x0, 0x12f})
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000480)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x11}], 0x1)

2m15.559677817s ago: executing program 4 (id=3958):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x24)

2m15.332961901s ago: executing program 4 (id=3961):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioperm(0x0, 0x2, 0x7e)

2m0.126658661s ago: executing program 34 (id=3961):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioperm(0x0, 0x2, 0x7e)

3.691888016s ago: executing program 7 (id=5258):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}]}, 0x34}}, 0x20000000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

3.431616511s ago: executing program 7 (id=5262):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x9, 0x47, 0xfffffffc, 0x40000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x52, 0x1, 0x100, 0x4, {0x2}}, 0x14}}, 0x0)

3.337826691s ago: executing program 1 (id=5263):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.155269833s ago: executing program 1 (id=5265):
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

3.086262289s ago: executing program 7 (id=5267):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107000000009b00000003"], 0x18}}, 0x0)

2.987671148s ago: executing program 1 (id=5269):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)="929885988d16b1348d771e21893ede0483e04ffac5b000f091e9176f3ce233d2589bb0848df59f3d2d1911e359a0df6d10f5d54496a6057b05f2f9b8169d32c84a019f0bb1654cee2c4991dc14929d120ceb71", 0x53)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b000300"], 0xfc}}, 0x4080800)

2.830269429s ago: executing program 1 (id=5270):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010002, &(0x7f0000000140)={[{@discard}, {}, {@iocharset={'iocharset', 0x3d, 'macromanian'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_remount}, {@quota}, {@usrquota}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@errors_continue}, {@usrquota}]}, 0x24, 0x628f, &(0x7f00000065c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

2.625079649s ago: executing program 7 (id=5274):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40)
setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0)

2.505331396s ago: executing program 6 (id=5276):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100"], 0x1c}}, 0x0)

2.319939532s ago: executing program 7 (id=5279):
r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29c, &(0x7f0000000880)="$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")
syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000100)='.\x00', 0x19624bc, &(0x7f00000037c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRES64, @ANYBLOB="67b492c11f8bc8985216c4cb38d9a93a392abd659f72c8ddd8f58c9d9d05d41f1bb4e21e5dbbe0dedcbed6ef4959285fb758eb158538fc238492f1d7f2845ff901fd53796e415c579db2d5cc4e9316589a2f7cdb164d4cbc166904ede9898e0b4e4966456c91c5e7ccb625b13a132380983fe05c119e74e90a1cb51b8b7b085ec526494bd0a67c4b0245110daea7b6b8968469e4c24b962f94bbaf36f5d0b8b61b22cc392bc11dc7844950a09b9538f30786074bb2c23878fc62a080be83c41c367e2d3ee816c769a99093b7517b617ae2c048b3abdeb7b7fdef17b37a6afe05adf138da4098688af7525db73fc082dd6254afc2bf1a00a6e1c583b0cea95c6f97ef23f2e321c182f24a061f7024ef710b90c3807cf15e2407dfba4233aab1d69c3f13949f7cdf92ac459802ae50d724ea690938f56ce56a25e1f72ef23fdc033eece09a2ec288401d977213a128746c17e5da8dc6aa0c7e26a2df8a11de556e4a60eac1b02d1720e236bb44959a2dfa8777f9945c1acee99c7cd3d10f4d1cf7241069c49d1a67830fa6f09a1457c0caa4981e2b8c2148c808fa71", @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)

2.267738203s ago: executing program 6 (id=5280):
r0 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = getpid()
kcmp$KCMP_EPOLL_TFD(r1, r0, 0x7, 0xffffffffffffffff, 0x0)

2.226853033s ago: executing program 3 (id=5281):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181041, 0x0)
r1 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0))

2.028714525s ago: executing program 6 (id=5282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)

1.719402757s ago: executing program 3 (id=5284):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96}, 0x28)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94)

1.66463537s ago: executing program 6 (id=5285):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00')
read$FUSE(r0, &(0x7f0000000780)={0x2020}, 0x2020)

1.582198291s ago: executing program 3 (id=5286):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050841)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60)

1.40407101s ago: executing program 3 (id=5287):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

1.267851858s ago: executing program 7 (id=5288):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x1, "86c2f5bb"}]}}, 0x0}, 0x0)

1.258431339s ago: executing program 2 (id=5289):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@bridge_newneigh={0x2c, 0x1c, 0x114236db3b607435, 0x70bd28, 0x25dfd3fe, {0x2, 0x0, 0x0, r1, 0x40, 0x80, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @remote}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x80c0)

1.108551332s ago: executing program 1 (id=5290):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2d}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2404804c}, 0x8000)

1.025369676s ago: executing program 2 (id=5291):
setfsuid(0xee00)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1, &(0x7f0000000a00)=[{&(0x7f00000005c0)=""/135, 0x87}], 0x1, 0x0)

940.022285ms ago: executing program 1 (id=5292):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21)
read$FUSE(r0, 0x0, 0x0)

939.248907ms ago: executing program 3 (id=5293):
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
recvfrom$inet(r0, &(0x7f0000000300)=""/120, 0x78, 0x10000, 0x0, 0x0)

844.985393ms ago: executing program 6 (id=5294):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0xfeff, 0x10000002000003, 0x0, 0x0, 0x300})

790.062583ms ago: executing program 3 (id=5295):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2c, 0x25dfdc02, {0x0, 0x0, 0x0, 0x0, {0xb, 0x4}, {0x6, 0xe}, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4080)
syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf00020106500008ffffffe7020d0000052406000108247c2a6ad07be4aefb0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042404"], 0x0)
syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0)

683.471559ms ago: executing program 2 (id=5296):
set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7)
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0)

567.466134ms ago: executing program 6 (id=5297):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpjquota}, {@quota}, {@discard}, {@noload}, {@resuid}]}, 0x3, 0x513, &(0x7f0000000780)="$eJzs3E9sFNUfAPDvbLu0/PvRHyIKolbR2EhsoaBwMFGMJh40MWKiHpu2EKRQQ0siBHW54NGQeDcevXrwql6I4WTiFY8mhoQYLoAJcc3szrTb7e6WLdsthc8nafe9mZ157+2bmX1/diaAh9Zg+i+phq9GxJaIKNS/YbD6cuvG+fHbN86PR6lcPvJ3UtnsZhrPZLuJjVlkqBDxehpIFqc7c/bcibGpqcnTWXxk9uSnIzNnz710vD9bcujQgf37Dr4y+nL7hWqQXlqumzu/mN614+2PL7073psvz1OrLUcr69rIxmAMNspKxfNt7Gct2FwTTnpXMSO0JT3+0+oqVs7/LdETrSqv1MWcASutXC6X+5qvLpXrXVi0BFizon+1cwCsjvyLPu3/5n+NGgLt9HvXkuuHqx2gtNy3sr+IpysL83GQYl3/tpMGI+Kj0j/fpn/RbByiZ4USBwAeSj8fzluCde2/gerMyJ0zl19LX/+XzaEMRMT/I2JrRDwSEdsi4tGI2B4Rj0XE43X7T5su5RbpD9bF59Kfm4QqXOtQURtK23+vZnNb8+2/BRkY6MlimyPyBvPk3uwzGYpi39HjU5P7WqTxy5u/f91sXaX9l+48awOm6WdtwazJXbjWWzdANzE2O3ZPha5x/ULEzt768ie9EcncTEASETsiYmcb+x2oCR9/8ftdc5HiwvfVtn/ryl+r3HAerQPzTOXvIl6I5M6tG+dLsaD+51NMFsxPnhw7Nnls8tTo3PzkSH9MTe4dSY+CvQ3TuPLbxfeapb9k+X/8s36Ttw7+dKRjnYK0/jfUHP+Rz9/Ol38giUjm5mtn2k/j4h9fNZ1bXbr+Gx//65IPKuG8X/rZ2Ozs6X0R65J3Fi8fnd82j6evUaqWf2h34/N/a7ZN+kk8ERHpQfxkRDwV1R5imvdnIuLZiNjdovy/vvHcJ22Xv9Bihx2Uln+i7vpXrfkF9T8/X98skGRzgw1W9ZwoXr3d5OLRuv6LWf0fqMSGsm0aX/+SBZeIZjnNv+3SJf925BMEAACA+18hIjbVjCVtikJheLg6BrQtNhSmpmdm9xydPnNqIl0XMRDFQj7SVR0PLib5+OdATXy0Lr4/Gzf+pmd9JT48Pj01saolBzZWzvmkMBzxYU/N+Z/6y+9O4MG3xDzag/rbP2CJ8z9txG+/1MXMAF1197+jufz5imYE6Lqa87/ZHf6lZfzuC1gDPK8FmLf0g35cM2DtKy86l8um/eAh0tZ3+R4PAYQHSW+8Pxfu0n2HwH1iuX35LzucD6Crlrivv6/pjfR3FSj3NV7VH4vfHP2td9gTy8vG+gZprUogbVmtSurrl7NV/jSFpu+JQns77Itl1mn+xJhsydF7/DRKp2eObb+rg7+dQD5o1uka/KH5eXqlr0Xt3Hug65ciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFfFfAAAA//9PmNtI")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})

543.579558ms ago: executing program 2 (id=5298):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x1f)

282.431189ms ago: executing program 2 (id=5299):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
setsockopt$sock_int(r0, 0x1, 0x54, &(0x7f0000000080)=0x1, 0x4)

0s ago: executing program 2 (id=5300):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0xa, "08a382b5"}, @global=@item_4={0x3, 0x1, 0x4, "3f94afb6"}, @main=@item_4={0x3, 0x0, 0x8, "00fbff00"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @local=@item_4={0x3, 0x2, 0x3, "b0ba191f"}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0)

kernel console output (not intermixed with test programs):

ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  498.724487][T15460] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  498.724915][T15460] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  498.754311][T15460] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  498.758769][T15460] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  498.758929][T15460] [U] ¹EC�
[  498.761302][T15460] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  498.902134][T15459] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  498.940155][T15452] loop4: detected capacity change from 0 to 32768
[  498.956099][T15452] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3818 (15452)
[  499.104216][T15452] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  499.104252][T15452] BTRFS info (device loop4): using sha256 checksum algorithm
[  499.536965][T15476] loop3: detected capacity change from 0 to 4096
[  499.560620][T15476] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  499.657075][T15452] BTRFS info (device loop4): enabling ssd optimizations
[  499.657100][T15452] BTRFS info (device loop4): turning on async discard
[  499.657116][T15452] BTRFS info (device loop4): enabling free space tree
[  499.827944][T15476] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  500.053919][T15500] [U] zÍwó,€Îlé¹MLï}¨•ó|¡²®
%†þþë«p®,HÐð±Ò?)ñô
[  500.053951][T15500] [U] £QÎ�ÄÑZ!¾v¨vrŽ"Y
[  500.053969][T15500] [U] 2eO
[  500.053980][T15500] [U] سèéšñÎÕ׿•œµªG³ªÏä²V�¾×èã÷–u”$F‚V9cª~SΦ»�«�m“HÅ;5kgzYYTRþt‘èÐÓ°ý;[°€Ú’‹‰
[  500.053993][T15500] [U] ÿUIñîE(H»¥yñGP¼b”©ËÅÏ KÏÙSÌœÂm•jt/Y�Ï
[  500.054004][T15500] [U] ­Ýé1i�Öæ-f>C…ªV¾=ôȯ!^øŽ&9r+�LÿŠ…ÞõMGYñBÉ."
[  500.054033][T15500] [U] !šTí·¥ú(²æ˜ãTK§tø@Îâ¢q¼|ùº"}~ªýÒ˜ÜoÄ
R”¤x
�ï¨åÙË
‰ù8«©oôû±º¶Ô�û¦MxÀf+Ÿv,$Í=stÆÀœÀ¥®
EåÕ\g&5Þ ÛˇE�Q¢AÞoÕ9òõ­¤Ô„z`M*þüowg=ú¦ÀHÀ‰Á;í—j|HGÞp´•@6livï”TÓ4ò^a¥‘å{wf2éÄ,ÒE�Miô`á›g¥UÍõIáøº-Aú7þ:š^WPl�ºó^vžq•…cƒ}2ÿ8R „H’‘U?V¢è¨kÜ;¼7ÏÉ¿ß8§±•5¿±NŠØ!ŸŠ4 C~þ¼<wCz=–iiþ–/ráû(?]‚—7ß —�íÎiü9ÑŒ1þ„xãˆq–ø(w#47tpØ?£h÷t‘¨iG}0þ�aé
[  500.054062][T15500] [U] $:k!=­)»'6`'.Ko#)
[  500.054103][T15500] [U] uN™k,І”)÷æ—RAÒÀÈäY×y33¹å@+x¶­?(Eo«�Ê+3þ¿ÞT}GuëÒtA¤˜|–.ZÇ�>#¬çÚGü–_U¼:ÍÜL�nûà*4QÀv¹¢O¼9ÅŒ¾u
°f{]á}Žž-ýí-IË	[c¬M
[  500.054136][T15500] [U] ‚]‡ÐžÁÓ¤8rËïsôˆ©ŠÚyp²ÛÛå�~�Qâ¹ù_ê´‡YøàT|vðPáùYË:ì!"®þ¥p…•´âRJéZÀ4¤Xd§¼Às–w³„]1ÍÏŸå÷Ó¦•�å1‡'à<˜ÚJ¥?¦iw1U#½-´ýzjê;‡Á¼{
ä›OakÚr{§âÓ¤­ûÅ÷6ëƒLÉv¯S4÷xì—1büŸ¿x¨2ùéŒi‡Ìþ¥dwÝܶ—mr,h«%j`¹o7Q¾­£Î…Ó8î$¦ª2Hbý£U¶–85f™ ¨é¢%Šœ‘&Ã	�ß,è_†g¸�ãWñÆ”�Dç“vš@ù9ĨM¹ô–%þánfÕoýMéoPsÏ�HÓµ¢#»^\ÊíVòj;
[  500.078299][T15498] [U] ˜À5]©åi#ÚR-yÚ›YW.ôöîíÔ±(*ÔSøÏë%ÕîðíübŽ™}ÆJý3k]‹ìè–‚FóÉ¿˜¦l­›Nm‡Ç·_EÂ’Š—’E¡=@f¨%_‰DØ=K¬ž¥qžmç'ŠrRP1¬¹´MtÐÁpˆ'~æ/¼þ]îör}£ÆT&=›á½ñSÎ7ÆØûàƒ7
[  500.356725][   T69] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  500.356954][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  500.356977][ T5823] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  500.385406][ T5823] ntfs3(loop3): ino=3, ntfs_set_state failed, -22.
[  500.398314][   T69] ntfs3(loop3): ino=3, ntfs3_write_inode failed, -22.
[  500.573370][ T1009] kernel read not supported for file /1720/net/snmp6 (pid: 1009 comm: kworker/0:3)
[  500.772536][T15512] [U] 
[  500.772580][T15512] [U] K{‘
[  500.773077][T15512] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  500.775106][T15512] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  500.805381][T15512] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  500.810027][T15512] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  500.817251][T15512] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  500.938599][ T5824] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  500.951701][T15512] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[  500.979855][T15512] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  500.981234][T15512] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  500.982763][T15512] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[  501.042791][T15512] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[  501.072811][T15512] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[  501.102446][T15512] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[  501.102637][T15512] [U] 22½“Æ©ÐÛ©X?0;3U±
[  501.133380][T15512] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  501.134194][T15512] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  501.143570][T15512] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  501.155168][T15512] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  501.188259][T15512] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  501.188327][T15512] [U] ¹EC�
[  501.189364][T15512] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  501.238442][T15511] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  501.278212][T15514] loop6: detected capacity change from 0 to 256
[  501.284330][   T38] audit: type=1326 audit(2000000240.420:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.284382][   T38] audit: type=1326 audit(2000000240.420:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.284427][   T38] audit: type=1326 audit(2000000240.420:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.284481][   T38] audit: type=1326 audit(2000000240.420:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.284528][   T38] audit: type=1326 audit(2000000240.420:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcafbcfc582 code=0x7ffc0000
[  501.284583][   T38] audit: type=1326 audit(2000000240.420:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.284628][   T38] audit: type=1326 audit(2000000240.420:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcafbcbd04e code=0x7ffc0000
[  501.284673][   T38] audit: type=1326 audit(2000000240.420:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcafbcfc647 code=0x7ffc0000
[  501.284719][   T38] audit: type=1326 audit(2000000240.430:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcafbcbd04e code=0x7ffc0000
[  501.560714][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  501.560806][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  501.736350][T15514] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  501.736374][T15514] FAT-fs (loop6): Filesystem has been set read-only
[  501.840725][   T38] kauditd_printk_skb: 23 callbacks suppressed
[  501.840743][   T38] audit: type=1326 audit(2000000240.980:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.840787][   T38] audit: type=1326 audit(2000000240.980:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.840828][   T38] audit: type=1326 audit(2000000240.990:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.840869][   T38] audit: type=1326 audit(2000000240.990:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15513 comm="syz.6.3840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  501.863112][   T37] IPVS: starting estimator thread 0...
[  501.989006][T15518] IPVS: using max 11 ests per chain, 26400 per kthread
[  502.490253][T15531] nftables ruleset with unbound set
[  502.873183][T15542] xt_l2tp: invalid flags combination: 0
[  503.243589][T15552] loop6: detected capacity change from 0 to 512
[  503.245052][T15552] EXT4-fs: Ignoring removed nomblk_io_submit option
[  503.270883][T15552] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8843c198, mo2=0002]
[  503.294986][T15552] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.3857: corrupted in-inode xattr: e_value size too large
[  503.295015][T15552] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  503.295300][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  503.295318][    C0] EXT4-fs (loop6): initial error at time 2000000242: ext4_iget_extra_inode:5128: inode 15
[  503.295344][    C0] EXT4-fs (loop6): last error at time 2000000242: ext4_iget_extra_inode:5128: inode 15
[  503.380162][T15552] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.3857: couldn't read orphan inode 15 (err -117)
[  503.380193][T15552] loop6: lost filesystem error report for type 5 error -117
[  503.417296][T15552] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  503.720767][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.993088][T15569] loop2: detected capacity change from 0 to 128
[  504.008606][T15569] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  504.058953][T15569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  504.310642][T15550] loop4: detected capacity change from 0 to 32768
[  504.390592][T15550] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  504.442738][T15550] XFS (loop4): Ending clean mount
[  504.509485][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  504.671184][    T9] usb 3-1: Using ep0 maxpacket: 32
[  504.673548][    T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  504.673576][    T9] usb 3-1: config 0 has no interface number 0
[  504.673626][    T9] usb 3-1: config 0 interface 184 has no altsetting 0
[  504.706881][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  504.706908][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.706927][    T9] usb 3-1: Product: syz
[  504.706940][    T9] usb 3-1: Manufacturer: syz
[  504.706955][    T9] usb 3-1: SerialNumber: syz
[  504.760839][    T9] usb 3-1: config 0 descriptor??
[  504.961016][T15597] loop3: detected capacity change from 0 to 256
[  505.516077][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  505.516108][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  505.516128][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  505.516399][    T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  505.580385][    T9] usb 3-1: USB disconnect, device number 26
[  505.677180][ T5824] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  506.038919][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  506.205408][   T10] usb 4-1: Using ep0 maxpacket: 8
[  506.226723][   T10] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  506.234203][   T10] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  506.234233][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.234255][   T10] usb 4-1: Product: syz
[  506.234272][   T10] usb 4-1: Manufacturer: syz
[  506.234287][   T10] usb 4-1: SerialNumber: syz
[  506.284259][   T10] usb 4-1: config 0 descriptor??
[  506.298535][   T10] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  506.298596][   T10] usb 4-1: setting power ON
[  506.360233][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  506.385695][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  506.386431][   T10] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  506.386479][   T10] usb 4-1: media controller created
[  506.429862][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  506.465953][   T10] usb 4-1: selecting invalid altsetting 6
[  506.465974][   T10] usb 4-1: digital interface selection failed (-22)
[  506.465988][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  506.471131][   T10] usb 4-1: setting power OFF
[  506.471303][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  506.471322][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  506.471335][   T10] (NULL device *): no alternate interface
[  506.567140][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  506.590494][   T10] usb 4-1: USB disconnect, device number 28
[  506.722250][T15620] [U] 
[  506.722291][T15620] [U] K{‘
[  506.724494][T15620] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ
[  506.739456][T15620] [U] TžØ–/,�~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1�Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ¾ª(È5ˆOBܤ‡ÍƒJÖ
[  506.740205][T15620] [U] ±K\&—}6£6œXÎHX�¥Ôµ„ÌÞ.`¸A“$Û40|϶¿�9°ØÞ¨„¯ÀÏU‚Ò4�ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’4”ß
[  506.785174][T15620] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØI�N¨™[Z(•„C|TË]Z{�Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØ�SH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž�÷ÉWUH„FN—Ž�ÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<Ã	¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿C�Õ³žV¦=�‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI
˜¢œAÏÌ6-ÚD�ÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯
OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ
[  506.840085][T15620] [U] 	+�W‰G?]£Ó'A:	»Ú)Õ
ÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:�^0À�TÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ×;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼�Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿Bĵٜ NÓY"VI2ÛÌ
[  506.840736][T15620] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ�°¶ºQÎÙ
 ŸÇ3‹ÆQ¯ÔN^HP*½Ü$	µ.Î7YÓ±œ2³
[  506.841372][T15620] [U] ½?�©ßHÜÄ*ÙÁ”Î3Í�7ÜÉ�¾^#Q�"0~‡‚Ð(ÉOÏXLŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ
[  506.842798][T15620] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“�®ŸŸÑ�2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ�„RTÔ¶ŒBÚ[+/<<R�B�ÊÄÕ|ФEŽžÑÛ –V96#ÛÚÑͤʦJºUº%
S851ƒ�ÞÒ©S�P±¨\£ƒ?Qª|L�´QXµ0ÂKÔ1ORÉ´2¡½|ÖÜDÖFÌ¿»Ù�ÚË2Þ”–¨×0ÌÅH•}C[/¤»“ŸPX^¼ÈO
[  506.844393][T15620] [U] ÖØ›·Ü—(JÅЛ•§MÛÜXZ˜;œ½±ÓßØ�_¹»µÔ*3÷3…¿5¸\ƒXM³ÚU�‰AK!AQ`¿Ë;FЕ�I+ÖÐVUHÅÐÂMÑJ³´Æ·ÙÛZÄCØÃZ‹¼Â)_ÇŸ¡	Ô‘¡&ßÖ¡ßÁAÇXTOÈÝÊ_½ Ú¼¦:¨Â×%À²PÒ×ÈCÖ²‚YÖ+_ÞÜ›ÝÛ}UÏM˜ƒÆ«CÅ!KJÒ7пG¯Ë=BÈ
[  506.945962][T15620] [U] Ù½¥Fœ%ŽXAÙÂLŸ2R*GŒÒVW¬Ñ$ƒÜJ	ÃA˜›F¶¿�·+ؾ9Í„VIºÖ—¼KÙ¾Å1}_©Â
Á¥%ÃR6„•(]“¦/Ÿ¶Ø�Å™YܺÇÞHä¾ÜÑR GªÄRN/Ü«Î#!ÊDÙÛÚ«%ÞÛËDªÏ-{Ð$ÞVU‘ÝT²¼ª$:MTRÔEŽC1V‰D~ÎÈ];[˜ËÚÐ÷SQ¾¯œÙ(ÌËE,X¦8Â"Ù
ÆÐG¥DŸÚµ2@T8ž¾´ÒƒÀÐßÀT8.RC+Ä@Ëʦ‡P‡UÁ
P”‰¼¶C±‡Ë'Å„YLÓ-SS1E?Å7ÓO‡§Ì^]¦†ÂÓC”½H]§JKR]RKQ܆�ØÝ£Þ´OTCÔÆX¶¨¾4™NË	³Ï&�Á­ÐÚ‹ŠÓ@¶:M7¿~�+”W*ÛÁ–XMÜÓ>>—¡{Q¢Ú×
_²Õ�LX8ÊU„ÇØÎ{ÐZ³ÍØ�)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ�„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q	ÌDWŸÒظ=ؽ|Q¬	ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE�`ƦM¢XÎÂ"Ä\
[  506.946701][T15620] [U] {;ŽÕ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_  HPϱœSªD­�¦Ø:]‚{Ë©ÔÝÆȽ
[  506.947473][T15620] [U] I,Ç>ÇÓ¤	ÎÙ5�1Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼Š�Vˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ
[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í	Ø¿
[  506.947585][T15620] [U] 22½“Æ©ÐÛ©X?0;3U±
[  506.949002][T15620] [U] ÞœÕ
Æ�ÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_
•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË,	‘Ä	ÞD~×D©£¡+ÃW;A\˜F
PÉÞȘ|$ºØ)�
KØ�I³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ	ÝÍ¿ËAE©�TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMƲÇ
[  506.949458][T15620] [U] [ª['XN€'²÷Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙ
WÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘LØ›§Ëœ»×B~ÅMÒÔÖ
[  506.949886][T15620] [U] ™LÖ>�Ñ�D+ˆD¯§—®Ì"5ŽÊ��H3<ª¨ÅIR=F^”F�NÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖYÂ
[  506.950107][T15620] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW��]ÔÊÄÌ©�
[  506.950787][T15620] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSK�YÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ
[  506.950825][T15620] [U] ¹EC�
[  506.951423][T15620] [U] �—”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·�Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µŽÇIÛRIÓ�PMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ
[  507.115131][T15619] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß@BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUD
Ç©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX�™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ
[  507.367395][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'.
[  507.367468][T15632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3887'.
[  507.482853][T15638] netlink: 'syz.6.3888': attribute type 12 has an invalid length.
[  507.482875][T15638] netlink: 'syz.6.3888': attribute type 29 has an invalid length.
[  507.482889][T15638] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3888'.
[  507.482931][T15638] netlink: 59 bytes leftover after parsing attributes in process `syz.6.3888'.
[  507.550464][T15641] netlink: 'syz.3.3890': attribute type 16 has an invalid length.
[  507.671491][ T1185] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  507.731066][ T1185] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  507.731105][ T1185] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  507.731130][ T1185] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  507.909653][T15653] loop3: detected capacity change from 0 to 512
[  507.926199][T15653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  507.962226][T15653] EXT4-fs (loop3): 1 truncate cleaned up
[  508.016588][T15653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  508.182820][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  508.278289][T15665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3902'.
[  508.278347][T15665] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3902'.
[  509.117270][T15689] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3913'.
[  509.117307][T15689] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3913'.
[  509.117320][T15689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3913'.
[  509.258396][T15693] loop6: detected capacity change from 0 to 512
[  509.315300][T15693] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended
[  509.533775][T15693] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  509.598986][    C0] EXT4-fs (loop6): initial error at time 2000000248: ext4_mb_generate_buddy:1317
[  509.599021][    C0] EXT4-fs (loop6): last error at time 2000000248: ext4_mb_generate_buddy:1317
[  509.624290][T15693] Quota error (device loop6): write_blk: dquota write failed
[  509.624313][T15693] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5
[  509.624436][T15693] Quota error (device loop6): write_blk: dquota write failed
[  509.624566][T15693] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  509.624631][T15693] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.3914: Failed to acquire dquot type 1
[  509.624654][T15693] loop6: lost filesystem error report for type 5 error -28
[  509.679562][T15693] EXT4-fs (loop6): 1 truncate cleaned up
[  509.709844][T15693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  509.773678][T15693] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  509.942036][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  510.318237][T15685] loop3: detected capacity change from 0 to 32768
[  510.486148][T15685] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  510.541632][T15685] XFS (loop3): Ending clean mount
[  510.997033][T15739] loop4: detected capacity change from 0 to 128
[  511.040897][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  511.294249][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  511.485734][   T10] usb 7-1: Using ep0 maxpacket: 16
[  511.496295][   T10] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  511.496324][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.496345][   T10] usb 7-1: Product: syz
[  511.496359][   T10] usb 7-1: Manufacturer: syz
[  511.496373][   T10] usb 7-1: SerialNumber: syz
[  511.533971][   T10] usb 7-1: config 0 descriptor??
[  511.538092][   T10] visor 7-1:0.0: Sony Clie 3.5 converter detected
[  511.997494][   T10] usb 7-1: clie_3_5_startup: get interface number bad return length: 0
[  511.997664][   T10] visor 7-1:0.0: probe with driver visor failed with error -5
[  512.220075][   T32] usb 7-1: USB disconnect, device number 7
[  512.378120][T15766] loop2: detected capacity change from 0 to 512
[  512.421210][T15766] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  512.421592][T15766] EXT4-fs (loop2): orphan cleanup on readonly fs
[  512.422168][T15766] Quota error (device loop2): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6).
[  512.422389][T15766] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  512.498881][T15766] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  512.556619][T15766] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3947: bg 0: block 15: invalid block bitmap
[  512.556655][T15766] loop2: lost filesystem error report for type 5 error -117
[  512.557553][T15766] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  512.557577][T15766] loop2: lost filesystem error report for type 5 error -117
[  512.558165][T15766] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #16: comm syz.2.3947: data will be lost
[  512.565354][    C0] EXT4-fs (loop2): error count since last fsck: 2
[  512.565389][    C0] EXT4-fs (loop2): initial error at time 2000000251: ext4_validate_block_bitmap:432
[  512.565410][    C0] EXT4-fs (loop2): last error at time 2000000251: ext4_mb_clear_bb:6679
[  512.638293][T15766] EXT4-fs (loop2): 1 truncate cleaned up
[  512.653179][T15766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  512.788282][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.810118][T15802] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  513.861859][T15779] loop6: detected capacity change from 0 to 32768
[  513.881551][T15779] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3952 (15779)
[  514.027921][T15810] loop3: detected capacity change from 0 to 256
[  514.186032][T15779] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.186065][T15779] BTRFS info (device loop6): using crc32c checksum algorithm
[  514.281262][T15810] FAT-fs (loop3): Directory bread(block 64) failed
[  514.281295][T15810] FAT-fs (loop3): Directory bread(block 65) failed
[  514.281404][T15810] FAT-fs (loop3): Directory bread(block 66) failed
[  514.281431][T15810] FAT-fs (loop3): Directory bread(block 67) failed
[  514.281549][T15810] FAT-fs (loop3): Directory bread(block 68) failed
[  514.281573][T15810] FAT-fs (loop3): Directory bread(block 69) failed
[  514.281667][T15810] FAT-fs (loop3): Directory bread(block 70) failed
[  514.281689][T15810] FAT-fs (loop3): Directory bread(block 71) failed
[  514.281782][T15810] FAT-fs (loop3): Directory bread(block 72) failed
[  514.281805][T15810] FAT-fs (loop3): Directory bread(block 73) failed
[  514.669714][T15779] BTRFS info (device loop6): enabling ssd optimizations
[  514.669752][T15779] BTRFS info (device loop6): turning on flush-on-commit
[  514.669769][T15779] BTRFS info (device loop6): enabling free space tree
[  514.669785][T15779] BTRFS info (device loop6): enabling auto defrag
[  514.669802][T15779] BTRFS info (device loop6): use lzo compression, level 1
[  514.669820][T15779] BTRFS info (device loop6): max_inline set to 4096
[  514.874830][T11537] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.950274][T15798] loop2: detected capacity change from 0 to 32768
[  515.219324][T15798] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  515.311084][T15798] XFS (loop2): Ending clean mount
[  515.381023][T15798] XFS (loop2): Quotacheck needed: Please wait.
[  515.693936][T15859] macsec0: entered allmulticast mode
[  515.715196][T15859] veth1_macvtap: entered allmulticast mode
[  515.723478][T15859] macsec0: left allmulticast mode
[  515.723497][T15859] veth1_macvtap: left allmulticast mode
[  516.332801][T15873] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3986'.
[  516.929434][T15798] XFS (loop2): Quotacheck: Done.
[  517.220041][ T5821] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  518.920714][T15919] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  519.329176][T15935] netlink: 'syz.2.4015': attribute type 1 has an invalid length.
[  519.368806][T15933] loop6: detected capacity change from 0 to 128
[  519.460773][T15933] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  519.460837][T15933] hpfs: filesystem error: improperly stopped
[  519.460854][T15933] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  519.460869][T15933] hpfs: You really don't want any checks? You are crazy...
[  519.461194][T15933] hpfs: hpfs_map_sector(): read error
[  519.461201][T15933] hpfs: code page support is disabled
[  519.461285][T15933] hpfs: hpfs_map_4sectors(): unaligned read
[  519.461335][T15933] hpfs: hpfs_map_4sectors(): unaligned read
[  519.461341][T15933] hpfs: filesystem error: unable to find root dir
[  519.836723][T15949] loop3: detected capacity change from 0 to 128
[  519.868703][T15949] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  519.868751][T15949] hpfs: filesystem error: improperly stopped
[  519.868765][T15949] hpfs: You really don't want any checks? You are crazy...
[  519.869180][T15949] hpfs: hpfs_map_sector(): read error
[  519.869190][T15949] hpfs: code page support is disabled
[  519.885394][T15949] hpfs: hpfs_map_4sectors(): unaligned read
[  519.885499][T15949] hpfs: hpfs_map_4sectors(): unaligned read
[  519.885509][T15949] hpfs: filesystem error: unable to find root dir
[  519.973631][T15951] Bluetooth: MGMT ver 1.23
[  521.170480][T15985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4036'.
[  521.827677][T16003] ptrace attach of "./syz-executor exec"[11537] was attempted by ""[16003]
[  522.401732][T16019] loop2: detected capacity change from 0 to 128
[  522.417751][T16019] EXT4-fs (loop2): Test dummy encryption mode enabled
[  522.451676][T16019] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  522.452257][T16019] ext4 filesystem being mounted at /856/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  522.706742][T16027] loop3: detected capacity change from 0 to 512
[  522.728772][T16027] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  522.758977][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  522.785428][T16027] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  522.788477][T16027] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  522.788576][T16027] System zones: 0-2, 18-18, 34-35
[  522.852426][T16027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  522.874247][   T38] audit: type=1800 audit(2000000262.020:212): pid=16027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4054" name="file1" dev="loop3" ino=15 res=0 errno=0
[  523.069888][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.441850][T16040] netlink: 'syz.6.4061': attribute type 17 has an invalid length.
[  523.628291][T16046] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  523.917233][T16060] netlink: 'syz.6.4069': attribute type 13 has an invalid length.
[  524.025839][T16060] gretap0: refused to change device tx_queue_len
[  524.026344][T16060] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  524.287063][T16072] loop3: detected capacity change from 0 to 1024
[  524.651578][T16072] syz.3.4074: attempt to access beyond end of device
[  524.651578][T16072] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  524.651610][T16072] Buffer I/O error on dev loop3, logical block 2889, async page read
[  524.651778][T16072] syz.3.4074: attempt to access beyond end of device
[  524.651778][T16072] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  524.651801][T16072] Buffer I/O error on dev loop3, logical block 2889, async page read
[  524.790139][   T38] audit: type=1800 audit(2000000263.800:213): pid=16072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4074" name="file1" dev="loop3" ino=20 res=0 errno=0
[  525.064952][T16072] hfsplus: can't free extent: start 2889, count 1
[  525.436244][T16101] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4089'.
[  526.280845][T16128] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  526.382878][T16130] tipc: Started in network mode
[  526.382907][T16130] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711
[  526.382950][T16130] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  526.843751][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4113'.
[  526.929314][T16152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4114'.
[  527.904154][T16185] loop6: detected capacity change from 0 to 256
[  528.276443][T16197] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3)
[  528.276469][T16197] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  528.278077][T16197] vhci_hcd vhci_hcd.0: Device attached
[  528.516182][   T10] usb 45-1: new low-speed USB device number 2 using vhci_hcd
[  528.592873][   T32] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  528.751439][   T32] usb 7-1: config 0 has no interfaces?
[  528.752905][   T32] usb 7-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[  528.752934][   T32] usb 7-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[  528.752956][   T32] usb 7-1: Manufacturer: syz
[  528.792806][   T32] usb 7-1: config 0 descriptor??
[  529.044004][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  529.077675][    T9] usb 7-1: USB disconnect, device number 8
[  529.110073][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  529.129822][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  529.156592][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  529.159190][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  529.274703][T16198] vhci_hcd: connection closed
[  529.647779][   T69] vhci_hcd vhci_hcd.6: stop threads
[  529.647798][   T69] vhci_hcd vhci_hcd.6: release socket
[  529.647841][   T69] vhci_hcd vhci_hcd.6: disconnect device
[  529.655363][   T10] usb 45-1: device descriptor read/64, error -71
[  529.835466][   T10] vhci_hcd vhci_hcd.6: vhci_device speed not set
[  530.521563][T16248] loop6: detected capacity change from 0 to 4096
[  530.541540][T16248] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  530.695918][T16248] ntfs3(loop6): ino=19, mi_enum_attr
[  530.695950][T16248] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  530.801171][T16248] ntfs3(loop6): failed to convert "c46c" to macturkish
[  530.801647][T16248] ntfs3(loop6): ino=20, mi_enum_attr
[  531.631560][ T5141] Bluetooth: hci5: command tx timeout
[  532.110448][T15320] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  532.629670][T16317] fuse: Invalid rootmode
[  532.721785][T16227] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  532.898034][T16227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  532.898061][T16227] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  532.898084][T16227] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  532.898105][T16227] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  532.898140][T16227] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  532.898162][T16227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.969489][T16227] usb 3-1: config 0 descriptor??
[  533.031459][   T38] audit: type=1326 audit(2000000272.160:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.031501][   T38] audit: type=1326 audit(2000000272.160:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.118826][   T38] audit: type=1326 audit(2000000272.270:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.118984][   T38] audit: type=1326 audit(2000000272.270:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.119190][   T38] audit: type=1326 audit(2000000272.270:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.119669][   T38] audit: type=1326 audit(2000000272.270:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.123558][   T38] audit: type=1326 audit(2000000272.270:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.124430][   T38] audit: type=1326 audit(2000000272.270:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.124480][   T38] audit: type=1326 audit(2000000272.270:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.124541][   T38] audit: type=1326 audit(2000000272.270:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16325 comm="syz.6.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  533.315644][T16227] hdpvr 3-1:0.0: firmware version 0x8 dated 5
[  533.472097][T16227] hdpvr 3-1:0.0: device init failed
[  533.472217][T16227] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  533.520505][T16227] usb 3-1: USB disconnect, device number 27
[  533.592417][T15320] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.622878][T16339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4199'.
[  533.705490][ T5141] Bluetooth: hci5: command tx timeout
[  533.723306][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4197'.
[  534.079314][   T32] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  534.174839][T15320] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.235929][   T32] usb 4-1: Using ep0 maxpacket: 32
[  534.243227][   T32] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  534.243275][   T32] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  534.243307][   T32] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  534.243356][   T32] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  534.243385][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  534.332933][   T32] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  534.332965][   T32] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  534.332988][   T32] usb 4-1: Product: syz
[  534.333004][   T32] usb 4-1: Manufacturer: syz
[  534.333020][   T32] usb 4-1: SerialNumber: syz
[  534.371750][   T32] usb 4-1: config 0 descriptor??
[  534.394356][   T32] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  534.424930][T16360] loop2: detected capacity change from 0 to 64
[  534.444711][   T32] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  534.489253][T16347] macsec2: entered promiscuous mode
[  534.489278][T16347] macsec2: entered allmulticast mode
[  534.596291][   T32] usb 4-1: USB disconnect, device number 29
[  534.623839][   T32] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  534.886207][T16369] loop2: detected capacity change from 0 to 128
[  534.889030][T16367] loop6: detected capacity change from 0 to 2048
[  534.890467][T16369] EXT4-fs: Ignoring removed nobh option
[  534.894399][T16367] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  534.933787][T15320] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.956816][T16369] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  534.958242][T16369] ext4 filesystem being mounted at /898/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  535.010903][ T6407] udevd[6407]: incorrect nilfs2 checksum on /dev/loop6
[  535.014490][T16372] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  535.125084][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  535.146375][T16218] chnl_net:caif_netlink_parms(): no params data found
[  535.786932][ T5141] Bluetooth: hci5: command tx timeout
[  535.917774][T16218] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.917959][T16218] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.918111][T16218] bridge_slave_0: entered allmulticast mode
[  535.956422][T16218] bridge_slave_0: entered promiscuous mode
[  535.974262][T16218] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.974385][T16218] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.974589][T16218] bridge_slave_1: entered allmulticast mode
[  535.998697][T16218] bridge_slave_1: entered promiscuous mode
[  536.060645][T16393] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  536.466255][T16218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  536.481163][T16218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  536.565416][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  536.716102][   T10] usb 3-1: Using ep0 maxpacket: 16
[  536.724282][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  536.724319][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  536.724344][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  536.724389][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  536.724414][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.788643][   T10] usb 3-1: config 0 descriptor??
[  537.078893][T16218] team0: Port device team_slave_0 added
[  537.128213][T16218] team0: Port device team_slave_1 added
[  537.228093][   T10] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  537.228127][   T10] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max
[  537.270052][   T10] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0014/input/input25
[  537.444191][   T10] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  537.520268][   T10] usb 3-1: USB disconnect, device number 28
[  537.827223][T16421] fido_id[16421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  537.867830][ T5141] Bluetooth: hci5: command tx timeout
[  538.208902][T16431] netlink: 10 bytes leftover after parsing attributes in process `syz.6.4229'.
[  538.288770][T16218] batman_adv: batadv0: Adding interface: batadv_slave_0
[  538.288794][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.288820][T16218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  538.367458][T16218] batman_adv: batadv0: Adding interface: batadv_slave_1
[  538.367473][T16218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  538.367498][T16218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  538.771753][T15320] bridge_slave_1: left allmulticast mode
[  538.771779][T15320] bridge_slave_1: left promiscuous mode
[  538.771992][T15320] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.868214][T15320] bridge_slave_0: left allmulticast mode
[  538.868288][T15320] bridge_slave_0: left promiscuous mode
[  538.871860][T15320] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.937471][T16450] loop3: detected capacity change from 0 to 16
[  538.957947][T16452] loop6: detected capacity change from 0 to 512
[  538.960202][T16450] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  539.089920][T16452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4237: bg 0: block 393: padding at end of block bitmap is not set
[  539.089953][T16452] loop6: lost filesystem error report for type 5 error -117
[  539.090946][T16452] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem
[  539.090967][T16452] loop6: lost filesystem error report for type 5 error -117
[  539.091770][T16452] EXT4-fs (loop6): 2 truncates cleaned up
[  539.094747][T16452] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.411584][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.885457][T16475] netlink: 'syz.3.4245': attribute type 3 has an invalid length.
[  541.587372][T15320] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.625686][T15320] bond_slave_0: left allmulticast mode
[  541.666488][T15320] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.686662][T15320] bond_slave_1: left allmulticast mode
[  541.702587][T15320] bond0 (unregistering): Released all slaves
[  541.712033][T15320] bond1 (unregistering): Released all slaves
[  541.772116][T16218] hsr_slave_0: entered promiscuous mode
[  541.772957][T16218] hsr_slave_1: entered promiscuous mode
[  541.773680][T16218] debugfs: 'hsr0' already exists in 'hsr'
[  541.773698][T16218] Cannot create hsr debugfs directory
[  542.089425][T15320] tipc: Left network mode
[  542.625829][T16561] netlink: 'syz.2.4272': attribute type 21 has an invalid length.
[  542.625867][T16561] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4272'.
[  542.708706][T16561] netlink: 'syz.2.4272': attribute type 4 has an invalid length.
[  542.708727][T16561] netlink: 'syz.2.4272': attribute type 3 has an invalid length.
[  542.708739][T16561] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4272'.
[  543.031088][T16576] loop3: detected capacity change from 0 to 256
[  543.033762][T16576] exfat: Deprecated parameter 'utf8'
[  543.033917][T16576] exfat: Deprecated parameter 'namecase'
[  543.033981][T16576] exfat: Deprecated parameter 'namecase'
[  543.209046][T16576] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  543.319655][T16582] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4278'.
[  543.319730][T16582] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4278'.
[  543.319744][T16582] tipc: Invalid UDP bearer configuration
[  543.319778][T16582] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  543.688350][T15320] hsr_slave_0: left promiscuous mode
[  543.730049][T15320] hsr_slave_1: left promiscuous mode
[  543.970306][T16604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4284'.
[  543.970464][T16604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'.
[  543.970485][T16604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4284'.
[  544.135430][T15320] veth1_vlan: left promiscuous mode
[  544.213505][T16613] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4288'.
[  544.491032][T16620] loop6: detected capacity change from 0 to 64
[  545.592424][T16655] loop6: detected capacity change from 0 to 256
[  546.016509][T15320] team0 (unregistering): Port device team_slave_1 removed
[  546.096600][T15320] team0 (unregistering): Port device team_slave_0 removed
[  546.266752][T16668] loop6: detected capacity change from 0 to 4096
[  546.484758][T16653] loop2: detected capacity change from 0 to 32768
[  546.495840][T16669] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  546.608163][T16668] NILFS (loop6): error -2 preparing GC: cannot delete virtual blocks from DAT file
[  547.319984][T16681] netlink: 'syz.2.4316': attribute type 8 has an invalid length.
[  547.389890][T16685] ALSA: mixer_oss: invalid OSS volume ''
[  547.975409][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  548.150459][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  548.150484][   T10] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  548.150502][   T10] usb 4-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  548.150521][   T10] usb 4-1: config 220 has no interface number 2
[  548.150581][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  548.150607][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  548.150624][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  548.150641][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  548.152594][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  548.152620][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.152639][   T10] usb 4-1: Product: syz
[  548.152653][   T10] usb 4-1: Manufacturer: syz
[  548.152667][   T10] usb 4-1: SerialNumber: syz
[  548.568339][   T10] usb 4-1: selecting invalid altsetting 0
[  548.568837][   T10] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  548.568867][   T10] uvcvideo 4-1:220.0: No valid video chain found.
[  548.743532][   T10] usb 4-1: selecting invalid altsetting 0
[  548.743573][   T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  548.892752][   T10] usb 4-1: USB disconnect, device number 30
[  549.130916][T16218] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  549.197517][T15320] IPVS: stop unused estimator thread 0...
[  549.227119][T16218] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.231280][T16218] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  549.386183][T16218] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.396054][T16218] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  549.622903][T16743] loop3: detected capacity change from 0 to 164
[  549.657639][T16218] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.742457][T16743] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  549.766093][ T5487] 8021q: adding VLAN 0 to HW filter on device eth9
[  549.768141][T16218] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  549.915787][T16218] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  550.494964][T16218] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.664609][T16218] 8021q: adding VLAN 0 to HW filter on device team0
[  550.694990][  T173] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.706379][  T173] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.760384][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.760503][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  551.537663][T16218] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.552723][ T5487] 8021q: adding VLAN 0 to HW filter on device eth10
[  551.655954][T16788] loop3: detected capacity change from 0 to 32768
[  552.779911][T16218] veth0_vlan: entered promiscuous mode
[  552.829609][T16218] veth1_vlan: entered promiscuous mode
[  552.964444][T16218] veth0_macvtap: entered promiscuous mode
[  553.000085][T16218] veth1_macvtap: entered promiscuous mode
[  553.039320][T16218] batman_adv: batadv0: Interface activated: batadv_slave_0
[  553.086442][T16218] batman_adv: batadv0: Interface activated: batadv_slave_1
[  553.126660][   T69] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  553.132673][   T69] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  553.136517][   T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  553.138596][  T173] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  553.449083][T16825] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  553.835432][T16846] loop6: detected capacity change from 0 to 256
[  554.283868][ T5487] 8021q: adding VLAN 0 to HW filter on device eth11
[  554.351295][T16851] loop3: detected capacity change from 0 to 8
[  554.776893][T16851] SQUASHFS error: lzo decompression failed, data probably corrupt
[  554.776924][T16851] SQUASHFS error: Failed to read block 0x28d: -5
[  554.776940][T16851] SQUASHFS error: Unable to read metadata cache entry [28b]
[  554.776956][T16851] SQUASHFS error: Unable to read inode 0x11f
[  554.946868][T16846] FAT-fs (loop6): Directory bread(block 64) failed
[  554.946896][T16846] FAT-fs (loop6): Directory bread(block 65) failed
[  554.946972][T16846] FAT-fs (loop6): Directory bread(block 66) failed
[  554.946991][T16846] FAT-fs (loop6): Directory bread(block 67) failed
[  554.947066][T16846] FAT-fs (loop6): Directory bread(block 68) failed
[  554.947086][T16846] FAT-fs (loop6): Directory bread(block 69) failed
[  554.947160][T16846] FAT-fs (loop6): Directory bread(block 70) failed
[  554.947179][T16846] FAT-fs (loop6): Directory bread(block 71) failed
[  554.947253][T16846] FAT-fs (loop6): Directory bread(block 72) failed
[  554.947273][T16846] FAT-fs (loop6): Directory bread(block 73) failed
[  555.296063][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.296083][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  555.747668][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  555.747688][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  556.078771][T16852] comedi comedi3: 8255: I/O base address not correctly aligned
[  556.691419][T16888] netlink: 'syz.7.4382': attribute type 1 has an invalid length.
[  556.749307][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4378'.
[  556.749329][T16887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4378'.
[  557.144871][T16910] netlink: 'syz.1.4387': attribute type 3 has an invalid length.
[  557.431452][T16915] loop2: detected capacity change from 0 to 64
[  557.502293][ T5487] 8021q: adding VLAN 0 to HW filter on device eth12
[  558.462955][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.462955][T16847] loop2: rw=1, sector=65, nr_sectors = 1 limit=64
[  558.462989][T16847] Buffer I/O error on dev loop2, logical block 65, lost async page write
[  558.463182][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463182][T16847] loop2: rw=1, sector=66, nr_sectors = 1 limit=64
[  558.463207][T16847] Buffer I/O error on dev loop2, logical block 66, lost async page write
[  558.463287][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463287][T16847] loop2: rw=1, sector=67, nr_sectors = 1 limit=64
[  558.463310][T16847] Buffer I/O error on dev loop2, logical block 67, lost async page write
[  558.463390][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463390][T16847] loop2: rw=1, sector=68, nr_sectors = 1 limit=64
[  558.463414][T16847] Buffer I/O error on dev loop2, logical block 68, lost async page write
[  558.463491][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463491][T16847] loop2: rw=1, sector=72, nr_sectors = 1 limit=64
[  558.463514][T16847] Buffer I/O error on dev loop2, logical block 72, lost async page write
[  558.463614][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463614][T16847] loop2: rw=1, sector=73, nr_sectors = 1 limit=64
[  558.463638][T16847] Buffer I/O error on dev loop2, logical block 73, lost async page write
[  558.463716][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463716][T16847] loop2: rw=1, sector=76, nr_sectors = 1 limit=64
[  558.463739][T16847] Buffer I/O error on dev loop2, logical block 76, lost async page write
[  558.463817][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.463817][T16847] loop2: rw=1, sector=77, nr_sectors = 1 limit=64
[  558.463841][T16847] Buffer I/O error on dev loop2, logical block 77, lost async page write
[  558.634631][T16847] kworker/u8:7: attempt to access beyond end of device
[  558.634631][T16847] loop2: rw=1, sector=78, nr_sectors = 288 limit=64
[  558.768647][T16945] loop3: detected capacity change from 0 to 256
[  559.334012][T16963] loop2: detected capacity change from 0 to 1024
[  559.674173][T16963] syz.2.4403: attempt to access beyond end of device
[  559.674173][T16963] loop2: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  559.674212][T16963] Buffer I/O error on dev loop2, logical block 2889, async page read
[  559.674342][T16963] Buffer I/O error on dev loop2, logical block 2889, async page read
[  559.733394][   T38] kauditd_printk_skb: 3 callbacks suppressed
[  559.733429][   T38] audit: type=1800 audit(2000000298.820:227): pid=16963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4403" name="file1" dev="loop2" ino=20 res=0 errno=0
[  559.881569][T16979] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4417'.
[  559.934645][T16963] hfsplus: can't free extent: start 2889, count 1
[  560.638468][T16976] loop3: detected capacity change from 0 to 32768
[  560.850375][T17003] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  561.532209][T17023] loop2: detected capacity change from 0 to 1024
[  561.549398][T17023] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869)
[  561.691969][T17023] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  561.782039][T17023] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102
[  561.811172][T17023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  561.926188][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.916967][T17074] netlink: 'syz.7.4460': attribute type 1 has an invalid length.
[  562.997748][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  562.997820][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  563.046170][T17078] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4462'.
[  563.079454][T17078] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4462'.
[  563.382047][T17092] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  564.166051][T17125] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[  564.373032][T17131] loop6: detected capacity change from 0 to 164
[  564.398711][T17131] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  564.809769][T17144] netlink: 'syz.3.4492': attribute type 1 has an invalid length.
[  564.809793][T17144] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4492'.
[  565.560592][T17170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4505'.
[  567.022597][T17197] loop7: detected capacity change from 0 to 256
[  567.127471][T17183] loop3: detected capacity change from 0 to 131072
[  567.130552][T17183] F2FS-fs (loop3): Test dummy encryption mode enabled
[  567.179092][T17183] F2FS-fs (loop3): invalid crc value
[  567.340453][    C0] F2FS-fs (loop3): inconsistent node block, node_type:0, nid:3, node_footer[nid:0,ino:3,ofs:0,cpver:1219692001,blkaddr:15874]
[  567.340874][T17183] F2FS-fs (loop3): Failed to read root inode
[  568.159982][T17219] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  569.013095][T17243] loop6: detected capacity change from 0 to 256
[  569.153507][T17243] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  569.288774][T17236] : entered promiscuous mode
[  569.730383][T17229] loop7: detected capacity change from 0 to 32768
[  569.750735][T17229] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4530 (17229)
[  569.859883][T17266] ip6gretap0: entered promiscuous mode
[  569.860244][T17265] ip6gretap0: left promiscuous mode
[  570.100601][T17229] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  570.100633][T17229] BTRFS info (device loop7): using sha256 checksum algorithm
[  570.587718][ T5141] Bluetooth: hci5: command tx timeout
[  570.742167][T17229] BTRFS info (device loop7): enabling ssd optimizations
[  570.742190][T17229] BTRFS info (device loop7): turning on async discard
[  570.742205][T17229] BTRFS info (device loop7): enabling free space tree
[  570.742220][T17229] BTRFS info (device loop7): enabling auto defrag
[  570.742235][T17229] BTRFS info (device loop7): max_inline set to 4096
[  571.725938][T17348] loop2: detected capacity change from 0 to 2048
[  571.748351][T17348] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  571.748380][T17348] NILFS (loop2): mounting unchecked fs
[  571.748399][T17348] NILFS (loop2): recovery required for readonly filesystem
[  571.748411][T17348] NILFS (loop2): write access will be enabled during recovery
[  571.841810][ T5891] udevd[5891]: incorrect nilfs2 checksum on /dev/loop2
[  571.964105][T17348] NILFS (loop2): recovery complete
[  572.349024][T16218] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  573.117804][T17339] loop6: detected capacity change from 0 to 40427
[  573.130112][T17339] F2FS-fs (loop6): Invalid SB checksum offset: 0
[  573.130159][T17339] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  573.141422][T17339] F2FS-fs (loop6): invalid crc value
[  573.853203][T17339] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  573.874821][T17362] loop3: detected capacity change from 0 to 32768
[  573.922594][T17362] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  574.045482][T17362] XFS (loop3): Ending clean mount
[  574.202195][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  575.965976][T17435] : entered promiscuous mode
[  576.075939][   T32] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  576.254389][   T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8
[  576.254428][   T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  576.254474][   T32] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  576.254500][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.319549][   T32] usb 4-1: config 0 descriptor??
[  576.320690][T17434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  576.749865][   T32] acrux 0003:1A34:0802.0015: unknown main item tag 0x7
[  576.749896][   T32] acrux 0003:1A34:0802.0015: item fetching failed at offset 24/40
[  576.763957][   T32] acrux 0003:1A34:0802.0015: parse failed
[  576.778160][   T32] acrux 0003:1A34:0802.0015: probe with driver acrux failed with error -22
[  576.800694][T17456] loop6: detected capacity change from 0 to 512
[  576.882073][T17456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  576.882222][T17456] ext4 filesystem being mounted at /456/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  576.930736][T17456] EXT4-fs (loop6): resizing filesystem from 128 to 2 blocks
[  576.930762][T17456] EXT4-fs warning (device loop6): ext4_resize_fs:2041: can't shrink FS - resize aborted
[  577.044135][   T32] usb 4-1: USB disconnect, device number 31
[  577.120765][T17463] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  577.127067][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  577.380276][T17469] loop7: detected capacity change from 0 to 128
[  577.393562][T17469] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  577.671287][T17476] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.530024][T17500] vlan2: entered promiscuous mode
[  578.530051][T17500] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  578.587665][T17505] loop3: detected capacity change from 0 to 512
[  578.703717][T17505] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  578.742683][T17505] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters
[  578.744532][T17505] Quota error (device loop3): write_blk: dquota write failed
[  578.744565][T17505] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  578.744674][T17505] Quota error (device loop3): write_blk: dquota write failed
[  578.744769][T17505] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  578.744817][T17505] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.4614: Failed to acquire dquot type 1
[  578.744838][T17505] loop3: lost filesystem error report for type 5 error -28
[  578.745448][    C0] EXT4-fs (loop3): error count since last fsck: 2
[  578.745466][    C0] EXT4-fs (loop3): initial error at time 2000000317: ext4_mb_generate_buddy:1317
[  578.745486][    C0] EXT4-fs (loop3): last error at time 2000000317: ext4_acquire_dquot:7034
[  578.863906][T17505] EXT4-fs (loop3): 1 truncate cleaned up
[  578.891407][T17505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.140265][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.340190][T17519] macvlan2: entered promiscuous mode
[  579.842765][T17540] loop2: detected capacity change from 0 to 128
[  579.923551][T17540] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  579.928172][T17540] ext4 filesystem being mounted at /988/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  580.118596][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  580.556214][T17562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4639'.
[  580.730675][T17565] netlink: 'syz.6.4640': attribute type 1 has an invalid length.
[  580.730722][T17565] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.811300][T17569] netlink: 752 bytes leftover after parsing attributes in process `syz.2.4641'.
[  580.870081][T17546] loop3: detected capacity change from 0 to 32768
[  580.923860][T17546] 
[  580.923860][T17546]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  580.923860][T17546] 
[  581.192402][ T1541] ERROR: (device loop3): diWrite: ixpxd invalid
[  581.192402][ T1541] 
[  581.209772][ T1541] ERROR: (device loop3): txCommit: 
[  581.209772][ T1541] 
[  581.209886][ T1541] jfs_write_inode: jfs_commit_inode failed!
[  581.210620][ T5823] 
[  581.210620][ T5823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.210620][ T5823] 
[  581.210976][ T5823] 
[  581.210976][ T5823]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  581.210976][ T5823] 
[  581.897072][T17591] tipc: Started in network mode
[  581.897087][T17591] tipc: Node identity , cluster identity 4711
[  581.897099][T17591] tipc: Failed to obtain node identity
[  581.897118][T17591] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  582.088954][T17579] loop7: detected capacity change from 0 to 32768
[  582.689983][T17602] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  582.690010][T17602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  582.693446][T17602] vhci_hcd vhci_hcd.0: Device attached
[  582.764606][T17587] loop6: detected capacity change from 0 to 32768
[  582.784837][T17603] vlan2: entered promiscuous mode
[  582.784859][T17603] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  582.867595][T17587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4649 (17587)
[  582.935985][ T5833] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  583.024881][T17587] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.024926][T17587] BTRFS info (device loop6): using sha256 checksum algorithm
[  583.280550][T17587] BTRFS info (device loop6): enabling ssd optimizations
[  583.280575][T17587] BTRFS info (device loop6): turning on async discard
[  583.280591][T17587] BTRFS info (device loop6): enabling free space tree
[  583.487611][T11537] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  583.740296][T17639] loop3: detected capacity change from 0 to 2048
[  583.769079][T17639] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  583.769150][T17639] NILFS (loop3): mounting unchecked fs
[  583.769164][T17639] NILFS (loop3): recovery required for readonly filesystem
[  583.769177][T17639] NILFS (loop3): write access will be enabled during recovery
[  583.821818][T17644] loop2: detected capacity change from 0 to 256
[  583.846176][ T6407] udevd[6407]: incorrect nilfs2 checksum on /dev/loop3
[  583.962669][T17639] NILFS (loop3): recovery complete
[  584.132487][T17644] FAT-fs (loop2): Directory bread(block 64) failed
[  584.132519][T17644] FAT-fs (loop2): Directory bread(block 65) failed
[  584.132608][T17644] FAT-fs (loop2): Directory bread(block 66) failed
[  584.132630][T17644] FAT-fs (loop2): Directory bread(block 67) failed
[  584.132717][T17644] FAT-fs (loop2): Directory bread(block 68) failed
[  584.132738][T17644] FAT-fs (loop2): Directory bread(block 69) failed
[  584.132825][T17644] FAT-fs (loop2): Directory bread(block 70) failed
[  584.132846][T17644] FAT-fs (loop2): Directory bread(block 71) failed
[  584.132939][T17644] FAT-fs (loop2): Directory bread(block 72) failed
[  584.132961][T17644] FAT-fs (loop2): Directory bread(block 73) failed
[  585.149206][T17673] loop6: detected capacity change from 0 to 2048
[  585.209488][T17673] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  585.300308][T17681] loop7: detected capacity change from 0 to 128
[  585.344384][T17673] EXT4-fs: can't change dax mount option while remounting
[  585.429576][T17681] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  585.430655][T17681] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  585.567544][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  585.750862][T17604] vhci_hcd: connection reset by peer
[  585.755098][  T173] vhci_hcd vhci_hcd.1: stop threads
[  585.755122][  T173] vhci_hcd vhci_hcd.1: release socket
[  585.799467][  T173] vhci_hcd vhci_hcd.1: disconnect device
[  585.843762][T16218] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  586.458810][T17699] loop7: detected capacity change from 0 to 2048
[  587.363184][T17689] loop2: detected capacity change from 0 to 32768
[  587.454535][T17689] JBD2: Ignoring recovery information on journal
[  587.465462][T17703] loop3: detected capacity change from 0 to 131072
[  587.484029][T17689] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  587.510207][T17703] F2FS-fs (loop3): Test dummy encryption mode enabled
[  587.512770][T17703] F2FS-fs (loop3): invalid crc value
[  587.549613][T17703] F2FS-fs (loop3): Current segment's next free block offset is inconsistent with bitmap, logtype:1, segno:1, type:0, next_blkoff:0, blkofs:1
[  587.553490][T17703] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  587.669544][T17689] JBD2: bad block at offset 32
[  587.728832][T17689] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  588.026144][ T5833] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  588.359870][T17729] loop6: detected capacity change from 0 to 2048
[  588.379116][T17729] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  588.379145][T17729] NILFS (loop6): mounting unchecked fs
[  588.379157][T17729] NILFS (loop6): recovery required for readonly filesystem
[  588.379170][T17729] NILFS (loop6): write access will be enabled during recovery
[  588.478380][ T5821] ocfs2: Unmounting device (7,2) on (node local)
[  588.564909][ T5878] udevd[5878]: incorrect nilfs2 checksum on /dev/loop6
[  588.630731][T17729] NILFS (loop6): recovery complete
[  589.477486][T17758] loop3: detected capacity change from 0 to 2048
[  590.120461][T17773] loop3: detected capacity change from 0 to 256
[  590.213063][T17773] FAT-fs (loop3): Directory bread(block 64) failed
[  590.213094][T17773] FAT-fs (loop3): Directory bread(block 65) failed
[  590.213245][T17773] FAT-fs (loop3): Directory bread(block 66) failed
[  590.213268][T17773] FAT-fs (loop3): Directory bread(block 67) failed
[  590.213356][T17773] FAT-fs (loop3): Directory bread(block 68) failed
[  590.213383][T17773] FAT-fs (loop3): Directory bread(block 69) failed
[  590.213497][T17773] FAT-fs (loop3): Directory bread(block 70) failed
[  590.213523][T17773] FAT-fs (loop3): Directory bread(block 71) failed
[  590.213625][T17773] FAT-fs (loop3): Directory bread(block 72) failed
[  590.213650][T17773] FAT-fs (loop3): Directory bread(block 73) failed
[  590.542342][T17781] ALSA: mixer_oss: invalid OSS volume ''
[  591.709584][T17787] loop3: detected capacity change from 0 to 32768
[  591.838075][   T38] audit: type=1326 audit(2000000330.980:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.838133][   T38] audit: type=1326 audit(2000000330.980:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.877117][   T38] audit: type=1326 audit(2000000331.000:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f647260d04e code=0x7ffc0000
[  591.877273][   T38] audit: type=1326 audit(2000000331.020:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.882039][   T38] audit: type=1326 audit(2000000331.030:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.882154][   T38] audit: type=1326 audit(2000000331.030:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.882266][   T38] audit: type=1326 audit(2000000331.030:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  591.882389][   T38] audit: type=1326 audit(2000000331.030:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17815 comm="syz.2.4746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  592.843302][T17843] loop3: detected capacity change from 0 to 1024
[  593.031619][T17843] hfsplus: extend alloc file! (16384,256,150995124)
[  593.031655][T17843] hfsplus: failed to extend attributes file
[  593.051441][T17843] hfsplus: extend alloc file! (16384,256,150995124)
[  593.051460][T17843] hfsplus: failed to extend attributes file
[  593.275966][   T32] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  593.435967][   T32] usb 7-1: Using ep0 maxpacket: 8
[  593.481149][   T32] usb 7-1: unable to get BOS descriptor or descriptor too short
[  593.483409][   T32] usb 7-1: config 4 interface 0 has no altsetting 0
[  593.509917][   T32] usb 7-1: string descriptor 0 read error: -22
[  593.510007][   T32] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  593.510031][   T32] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  593.560568][   T32] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  593.580768][   T32] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  593.581136][   T32] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  593.581179][   T32] usb 7-1: media controller created
[  593.621280][   T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  593.737599][T17866] loop3: detected capacity change from 0 to 1024
[  593.817409][   T32] zl10353_read_register: readreg error (reg=127, ret==0)
[  593.872951][T17866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  593.873101][T17866] ext4 filesystem being mounted at /1022/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  593.989696][   T32] usb 7-1: USB disconnect, device number 9
[  594.084566][T17875] netlink: 'syz.1.4774': attribute type 29 has an invalid length.
[  594.102145][T17875] netlink: 'syz.1.4774': attribute type 29 has an invalid length.
[  594.344455][T17866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4770: bg 0: block 112: padding at end of block bitmap is not set
[  594.732886][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  594.900195][T17894] loop6: detected capacity change from 0 to 512
[  594.941322][T17894] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4782: corrupted inode contents
[  594.941353][T17894] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  594.941878][T17894] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem
[  594.941900][T17894] loop6: lost filesystem error report for type 5 error -117
[  594.945398][    C0] EXT4-fs (loop6): error count since last fsck: 2
[  594.945416][    C0] EXT4-fs (loop6): initial error at time 2000000334: ext4_do_update_inode:5690: inode 15
[  594.945442][    C0] EXT4-fs (loop6): last error at time 2000000334: ext4_orphan_del:303
[  595.038090][T17896] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4784'.
[  595.038111][T17896] netlink: 'syz.1.4784': attribute type 2 has an invalid length.
[  595.039187][T17894] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #15: comm syz.6.4782: corrupted inode contents
[  595.039215][T17894] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  595.040286][T17894] EXT4-fs error (device loop6): ext4_evict_inode:315: inode #15: comm syz.6.4782: mark_inode_dirty error
[  595.040312][T17894] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  595.040800][T17894] EXT4-fs (loop6): 1 orphan inode deleted
[  595.063690][T17894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  595.373739][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  595.496011][ T5210] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  595.530951][T17908] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4787'.
[  595.646094][ T5210] usb 3-1: Using ep0 maxpacket: 16
[  595.648480][ T5210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.648510][ T5210] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.648531][ T5210] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  595.648567][ T5210] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  595.648592][ T5210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.652572][ T5210] usb 3-1: config 0 descriptor??
[  595.795984][   T32] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  595.847985][T17908] bond1 (unregistering): Released all slaves
[  595.906364][T17886] loop7: detected capacity change from 0 to 32768
[  595.917608][T17886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4778 (17886)
[  595.956401][T17886] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  595.956434][T17886] BTRFS info (device loop7): using sha256 checksum algorithm
[  595.983200][   T32] usb 4-1: Using ep0 maxpacket: 16
[  595.992201][   T32] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  595.992234][   T32] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  595.992641][   T32] usb 4-1: config 0 interface 0 has no altsetting 0
[  595.992677][   T32] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  595.992701][   T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.066433][ T5210] hid (null): unknown global tag 0xe
[  596.072354][ T5210] hid-multitouch 0003:0457:07DA.0016: unknown main item tag 0x2
[  596.073776][ T5210] hid-multitouch 0003:0457:07DA.0016: reserved main item tag 0xe
[  596.073813][ T5210] hid-multitouch 0003:0457:07DA.0016: unknown main item tag 0x1
[  596.073843][ T5210] hid-multitouch 0003:0457:07DA.0016: unknown global tag 0xe
[  596.073873][ T5210] hid-multitouch 0003:0457:07DA.0016: item 0 0 1 14 parsing failed
[  596.074871][ T5210] hid-multitouch 0003:0457:07DA.0016: probe with driver hid-multitouch failed with error -22
[  596.133767][   T32] usb 4-1: config 0 descriptor??
[  596.269109][   T10] usb 3-1: USB disconnect, device number 29
[  596.555107][T17886] BTRFS info (device loop7): enabling ssd optimizations
[  596.555138][T17886] BTRFS info (device loop7): turning on async discard
[  596.555156][T17886] BTRFS info (device loop7): enabling free space tree
[  596.555173][T17886] BTRFS info (device loop7): enabling auto defrag
[  596.557779][T17886] BTRFS info (device loop7): max_inline set to 4096
[  596.584680][   T32] hid (null): bogus close delimiter
[  596.609479][   T32] mcp2221 0003:04D8:00DD.0017: bogus close delimiter
[  596.609501][   T32] mcp2221 0003:04D8:00DD.0017: item 0 1 2 10 parsing failed
[  596.610231][   T32] mcp2221 0003:04D8:00DD.0017: can't parse reports
[  596.610377][   T32] mcp2221 0003:04D8:00DD.0017: probe with driver mcp2221 failed with error -22
[  596.821942][ T1009] usb 4-1: USB disconnect, device number 32
[  597.037888][T17936] loop6: detected capacity change from 0 to 1024
[  597.154754][T17936] hfsplus: failed to load attributes file
[  597.638023][   T32] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  597.728648][T16218] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  597.808109][   T32] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  597.808137][   T32] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  597.808156][   T32] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  597.808176][   T32] usb 7-1: config 220 has no interface number 2
[  597.808255][   T32] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  597.808282][   T32] usb 7-1: config 220 interface 0 has no altsetting 0
[  597.808301][   T32] usb 7-1: config 220 interface 76 has no altsetting 0
[  597.808319][   T32] usb 7-1: config 220 interface 1 has no altsetting 0
[  597.812680][   T32] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  597.812706][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.812725][   T32] usb 7-1: Product: syz
[  597.812739][   T32] usb 7-1: Manufacturer: syz
[  597.812752][   T32] usb 7-1: SerialNumber: syz
[  598.281137][   T32] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  598.281171][   T32] uvcvideo 7-1:220.0: No valid video chain found.
[  598.281225][   T32] usb 7-1: selecting invalid altsetting 0
[  598.360126][   T32] usb 7-1: selecting invalid altsetting 0
[  598.360163][   T32] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  598.403548][   T32] usb 7-1: USB disconnect, device number 10
[  599.383615][T17952] loop2: detected capacity change from 0 to 32768
[  599.625470][T17952] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  599.776708][T17952] XFS (loop2): Ending clean mount
[  600.973068][T18016] loop6: detected capacity change from 0 to 512
[  600.981242][T18016] EXT4-fs: Ignoring removed nobh option
[  600.998332][T18016] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  601.114392][ T5821] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  601.224745][T18016] EXT4-fs (loop6): 1 truncate cleaned up
[  601.230278][T18016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  601.556122][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  602.077369][T18013] loop7: detected capacity change from 0 to 32768
[  602.203007][T18013] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  602.248702][T18013] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  602.276163][T18013] XFS (loop7): Starting recovery (logdev: internal)
[  602.439994][T18013] XFS (loop7): Ending recovery (logdev: internal)
[  602.918856][   T38] audit: type=1800 audit(2000000342.070:236): pid=18013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4826" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  603.049407][T18052] hub 9-0:1.0: USB hub found
[  603.049814][T18052] hub 9-0:1.0: 1 port detected
[  603.267308][T16218] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  603.755386][ T6030] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  603.925312][ T6030] usb 3-1: Using ep0 maxpacket: 32
[  603.929954][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  603.929982][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  603.930017][ T6030] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  603.930038][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.084362][ T6030] usb 3-1: config 0 descriptor??
[  604.554838][ T6030] ft260 0003:0403:6030.0018: unknown main item tag 0x0
[  604.554877][ T6030] ft260 0003:0403:6030.0018: unknown main item tag 0x0
[  604.841673][ T6030] ft260 0003:0403:6030.0018: failed to retrieve chip version
[  604.842038][ T6030] ft260 0003:0403:6030.0018: probe with driver ft260 failed with error -71
[  604.953206][ T6030] usb 3-1: USB disconnect, device number 30
[  605.041647][T18092] loop6: detected capacity change from 0 to 1024
[  605.120022][T18092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  605.120148][T18092] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  605.237572][T18092] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4856: bg 0: block 112: padding at end of block bitmap is not set
[  605.369316][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  605.594382][   T38] audit: type=1326 audit(2000000344.740:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18104 comm="syz.3.4861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f404fc7c819 code=0x0
[  606.056172][T18114] loop7: detected capacity change from 0 to 32768
[  606.059138][T18114] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.4864 (18114)
[  606.094988][T18114] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  606.095017][T18114] BTRFS info (device loop7): using crc32c checksum algorithm
[  606.251302][T18114] BTRFS info (device loop7): enabling ssd optimizations
[  606.251326][T18114] BTRFS info (device loop7): turning on flush-on-commit
[  606.251343][T18114] BTRFS info (device loop7): enabling free space tree
[  606.251358][T18114] BTRFS info (device loop7): enabling auto defrag
[  606.251375][T18114] BTRFS info (device loop7): use lzo compression, level 1
[  606.251394][T18114] BTRFS info (device loop7): max_inline set to 4096
[  606.406280][T16218] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  607.352851][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4873'.
[  607.631966][T18133] loop3: detected capacity change from 0 to 32768
[  607.807476][T18133] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  607.893871][T18137] loop6: detected capacity change from 0 to 32768
[  607.941713][T18133] XFS (loop3): Ending clean mount
[  608.210170][T18172] sctp: [Deprecated]: syz.2.4882 (pid 18172) Use of int in max_burst socket option.
[  608.210170][T18172] Use struct sctp_assoc_value instead
[  608.450064][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  609.294204][T18194] loop2: detected capacity change from 0 to 2048
[  609.303914][T18194] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362
[  609.320567][T18194] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  609.321068][T18194] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  609.333038][T18194] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  609.879895][T18210] netlink: 'syz.6.4900': attribute type 21 has an invalid length.
[  609.911696][T18211] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4899'.
[  610.516316][   T37] usb 4-1: new full-speed USB device number 33 using dummy_hcd
[  610.679162][   T37] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  610.679196][   T37] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  610.679235][   T37] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  610.679256][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.684442][   T37] usb 4-1: config 0 descriptor??
[  610.762519][T18215] loop6: detected capacity change from 0 to 32768
[  610.888005][T18231] loop7: detected capacity change from 0 to 4096
[  610.891861][T18231] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  611.102141][T18231] ntfs3(loop7): ino=1a, mi_enum_attr
[  611.102169][T18231] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  611.102610][T18231] ntfs3(loop7): ino=1a, mi_enum_attr
[  611.102628][T18231] ntfs3(loop7): Failed to initialize $Extend/$Reparse.
[  611.204670][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204705][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204728][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204768][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204794][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204819][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204843][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204867][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204891][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.204916][   T37] itetech 0003:06CB:73F4.0019: unknown main item tag 0x0
[  611.428695][   T37] itetech 0003:06CB:73F4.0019: hidraw0: USB HID v0.20 Device [HID 06cb:73f4] on usb-dummy_hcd.3-1/input0
[  611.551016][   T37] usb 4-1: USB disconnect, device number 33
[  611.658236][T18243] fido_id[18243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  612.116346][T18260] loop2: detected capacity change from 0 to 256
[  612.207116][T18260] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  612.600126][T18268] loop6: detected capacity change from 0 to 2048
[  612.754304][T18268] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  613.277281][T18262] loop3: detected capacity change from 0 to 32768
[  613.327599][T18262] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  613.377272][T18262] XFS (loop3): Ending clean mount
[  613.509394][T18288] loop7: detected capacity change from 0 to 64
[  613.515163][T18288] hfs: unable to locate alternate MDB
[  613.515175][T18288] hfs: continuing without an alternate MDB
[  613.628029][   T38] audit: type=1800 audit(2000000352.780:238): pid=18288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4932" name="file1" dev="loop7" ino=22 res=0 errno=0
[  614.259920][T18305] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0
[  614.445355][ T1009] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  614.499838][T18313] netlink: 'syz.7.4943': attribute type 1 has an invalid length.
[  614.499874][T18313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.594194][ T5823] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  614.606898][ T1009] usb 7-1: Using ep0 maxpacket: 32
[  614.609949][ T1009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  614.609982][ T1009] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  614.610008][ T1009] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  614.610024][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.670258][ T1009] usb 7-1: config 0 descriptor??
[  615.306297][ T1009] ft260 0003:0403:6030.001A: failed to retrieve chip version
[  615.306803][ T1009] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -71
[  615.313804][ T1009] usb 7-1: USB disconnect, device number 11
[  616.240020][T18348] loop2: detected capacity change from 0 to 136
[  616.244129][T18348] Attempt to read inode for relocated directory
[  616.304681][T18352] loop7: detected capacity change from 0 to 64
[  616.330431][T18352] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  616.825578][ T1009] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  616.977433][ T1009] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  616.977474][ T1009] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  616.977500][ T1009] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  616.977527][ T1009] usb 4-1: config 0 interface 0 has no altsetting 0
[  616.977558][ T1009] usb 4-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00
[  616.977580][ T1009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.984684][ T1009] usb 4-1: config 0 descriptor??
[  617.019801][T18360] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  617.300334][T18356] loop2: detected capacity change from 0 to 32768
[  617.316567][T18356] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4963 (18356)
[  617.349148][T18356] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  617.349177][T18356] BTRFS info (device loop2): using sha256 checksum algorithm
[  617.479771][ T1009] hid_parser_main: 29 callbacks suppressed
[  617.479794][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479821][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479847][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479871][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479894][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479918][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479941][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479965][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.479989][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.480013][ T1009] topre 0003:0853:0146.001B: unknown main item tag 0x0
[  617.693180][ T1009] topre 0003:0853:0146.001B: hidraw0: USB HID v0.08 Device [HID 0853:0146] on usb-dummy_hcd.3-1/input0
[  617.740950][ T1009] usb 4-1: USB disconnect, device number 34
[  617.809699][T18356] BTRFS info (device loop2): enabling ssd optimizations
[  617.809725][T18356] BTRFS info (device loop2): turning on async discard
[  617.809742][T18356] BTRFS info (device loop2): enabling free space tree
[  617.952445][T18392] fido_id[18392]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  618.059430][ T5821] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  618.241422][T18400] loop6: detected capacity change from 0 to 2048
[  618.263114][T18400] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  618.531584][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  618.728521][   T32] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  618.906710][   T32] usb 4-1: Using ep0 maxpacket: 16
[  618.908839][   T32] usb 4-1: unable to get BOS descriptor or descriptor too short
[  618.953216][   T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  618.963599][   T32] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  618.963685][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.963749][   T32] usb 4-1: Product: syz
[  618.963793][   T32] usb 4-1: Manufacturer: syz
[  618.963838][   T32] usb 4-1: SerialNumber: syz
[  619.267944][   T32] usb 4-1: Audio class v2/v3 interfaces need an interface association
[  619.268281][   T32] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  619.466638][   T32] usb 4-1: 2:1 : can't get High Capability descriptor
[  619.679464][ T6030] usb 4-1: USB disconnect, device number 35
[  620.459548][T18424] loop7: detected capacity change from 0 to 2048
[  620.509183][T18424] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  621.263538][T18447] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4998'.
[  621.268271][T18447] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4998'.
[  621.930139][T18472] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5010'.
[  621.930162][T18472] netlink: 'syz.3.5010': attribute type 2 has an invalid length.
[  622.074959][T18467] can0: slcan on ptm0.
[  622.301626][T18466] can0 (unregistered): slcan off ptm0.
[  622.529941][T18492] loop6: detected capacity change from 0 to 64
[  622.583952][T18495] netlink: 'syz.2.5018': attribute type 7 has an invalid length.
[  622.583974][T18495] netlink: 'syz.2.5018': attribute type 8 has an invalid length.
[  622.583990][T18495] netlink: 'syz.2.5018': attribute type 13 has an invalid length.
[  622.861445][T11537] hfs: node 4:3 still has 1 user(s)!
[  622.947936][T18501] loop2: detected capacity change from 0 to 1024
[  622.990845][T18501] hfsplus: extend alloc file! (16384,256,150995124)
[  622.990863][T18501] hfsplus: failed to extend attributes file
[  623.044541][T18501] hfsplus: extend alloc file! (16384,256,150995124)
[  623.044577][T18501] hfsplus: failed to extend attributes file
[  623.302309][T18513] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5023'.
[  623.302333][T18513] netlink: 'syz.6.5023': attribute type 2 has an invalid length.
[  623.358664][T18516] loop3: detected capacity change from 0 to 256
[  623.359624][T18516] exfat: Deprecated parameter 'utf8'
[  623.470498][T18516] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  624.316018][   T32] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  624.336157][ T5833] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  624.448482][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[  624.448545][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[  624.471824][   T32] usb 7-1: config 0 has an invalid interface number: 69 but max is 0
[  624.471850][   T32] usb 7-1: config 0 has no interface number 0
[  624.471897][   T32] usb 7-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  624.471922][   T32] usb 7-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  624.486648][   T32] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  624.486730][   T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.486803][   T32] usb 7-1: Product: syz
[  624.486850][   T32] usb 7-1: Manufacturer: syz
[  624.486882][   T32] usb 7-1: SerialNumber: syz
[  624.498350][ T5833] usb 3-1: Using ep0 maxpacket: 32
[  624.509113][ T5833] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  624.509177][ T5833] usb 3-1: config 0 has no interface number 0
[  624.551890][ T5833] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  624.551959][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.552008][ T5833] usb 3-1: Product: syz
[  624.552028][ T5833] usb 3-1: Manufacturer: syz
[  624.552066][ T5833] usb 3-1: SerialNumber: syz
[  624.619385][   T32] usb 7-1: config 0 descriptor??
[  624.633500][ T5833] usb 3-1: config 0 descriptor??
[  624.657034][ T5833] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  624.668937][T18541] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  624.733453][   T32] cyberjack 7-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  624.930801][   T32] usb 7-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  625.081740][ T5833] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  625.108720][   T32] usb 7-1: USB disconnect, device number 12
[  625.221272][ T5833] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  625.346716][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  625.399358][ T5833] usb 3-1: USB disconnect, device number 31
[  625.523627][T18570] loop3: detected capacity change from 0 to 128
[  625.528152][   T32] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  625.654011][   T32] cyberjack 7-1:0.69: device disconnected
[  625.686162][ T5833] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  625.767540][ T5833] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  625.914002][ T5833] quatech2 3-1:0.51: device disconnected
[  626.212181][T18579] loop7: detected capacity change from 0 to 2048
[  626.315328][T18579] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.416970][T18587] loop3: detected capacity change from 0 to 64
[  626.615913][ T5833] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  626.773462][ T5833] usb 3-1: Using ep0 maxpacket: 16
[  626.785417][ T5833] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  626.785444][ T5833] usb 3-1: config 0 has no interface number 0
[  626.785499][ T5833] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  626.785525][ T5833] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  626.848344][ T5833] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  626.848372][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  626.848401][ T5833] usb 3-1: Product: syz
[  626.848417][ T5833] usb 3-1: SerialNumber: syz
[  626.892269][ T5833] usb 3-1: config 0 descriptor??
[  626.929758][ T5833] cm109 3-1:0.8: invalid payload size 0, expected 4
[  626.966324][ T5833] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input26
[  627.123846][T18606] loop6: detected capacity change from 0 to 256
[  627.133410][T18606] exfat: Deprecated parameter 'utf8'
[  627.133434][T18606] exfat: Deprecated parameter 'utf8'
[  627.133464][T18606] exfat: Deprecated parameter 'namecase'
[  627.173291][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.178606][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.182225][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.182446][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.182666][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.182892][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.183116][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.183330][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.183565][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.183784][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  627.417026][T18606] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d)
[  627.736068][ T5833] usb 3-1: USB disconnect, device number 32
[  627.736165][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  627.797521][ T5833] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  628.408920][T18630] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5073'.
[  628.408942][T18630] netlink: 96 bytes leftover after parsing attributes in process `syz.7.5073'.
[  628.887793][T18650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5082'.
[  628.998884][T18650] bond1 (unregistering): Released all slaves
[  629.163619][T18659] loop6: detected capacity change from 0 to 1024
[  629.216159][T18659] EXT4-fs (loop6): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  629.276083][T18659] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.040984][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.484589][T18691] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5100'.
[  630.608979][T18696] MPI: mpi too large (113288 bits)
[  630.747695][T18691] bond1 (unregistering): Released all slaves
[  631.114829][T18682] loop3: detected capacity change from 0 to 32768
[  631.192303][T18682] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5097 (18682)
[  631.217604][T18682] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  631.217635][T18682] BTRFS info (device loop3): using blake2b checksum algorithm
[  631.262500][T18707] loop2: detected capacity change from 0 to 1024
[  631.314207][T18707] EXT4-fs (loop2): stripe (9) is not aligned with cluster size (16), stripe is disabled
[  631.389658][T18707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  631.491309][T18727] loop7: detected capacity change from 0 to 2048
[  631.532288][T18727] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  631.673676][T18734] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  631.741276][T18682] BTRFS info (device loop3): enabling ssd optimizations
[  631.741302][T18682] BTRFS info (device loop3): turning on async discard
[  631.741320][T18682] BTRFS info (device loop3): enabling free space tree
[  631.920560][   T38] audit: type=1800 audit(2000000371.050:239): pid=18682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5097" name="file1" dev="loop3" ino=260 res=0 errno=0
[  632.021942][T18727] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  632.022024][T18727] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=16)
[  632.083077][ T5821] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.270302][T18727] Remounting filesystem read-only
[  632.334566][ T5823] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  632.496896][T18727] NILFS (loop7): bad btree node (ino=16, blocknr=15): level = 1, flags = 0x0, nchildren = 157
[  632.497061][T18727] NILFS error (device loop7): nilfs_bmap_last_key: broken bmap (inode number=16)
[  632.497082][T18727] NILFS (loop7): error -5 truncating bmap (ino=16)
[  632.907861][T16218] NILFS (loop7): disposed unprocessed dirty file(s) when detaching log writer
[  633.833499][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5129'.
[  633.944755][T18784] comedi comedi3: mpc624: I/O base address or length out of range
[  634.535096][T18801] loop6: detected capacity change from 0 to 512
[  634.569690][T18801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  634.569785][T18801] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  634.755154][T18801] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.5137: corrupted xattr block 33: invalid header
[  634.869761][T18813] vivid-007: disconnect
[  634.871650][T18812] vivid-007: reconnect
[  635.112471][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  635.429169][T18831] loop7: detected capacity change from 0 to 64
[  635.555368][ T1009] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  635.592341][   T38] audit: type=1326 audit(2000000374.740:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.592399][   T38] audit: type=1326 audit(2000000374.740:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.593772][   T38] audit: type=1326 audit(2000000374.740:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.593825][   T38] audit: type=1326 audit(2000000374.740:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.593873][   T38] audit: type=1326 audit(2000000374.740:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.593922][   T38] audit: type=1326 audit(2000000374.740:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.593969][   T38] audit: type=1326 audit(2000000374.740:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.595351][   T38] audit: type=1326 audit(2000000374.740:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.595400][   T38] audit: type=1326 audit(2000000374.740:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18838 comm="syz.2.5155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f647264c819 code=0x7ffc0000
[  635.650349][T18831] hfs: node is corrupted: leaf_head 11, leaf_tail 5
[  635.958128][ T1009] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  635.958165][ T1009] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  635.958182][ T1009] usb 7-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  635.958202][ T1009] usb 7-1: config 0 interface 0 has no altsetting 0
[  635.958227][ T1009] usb 7-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[  635.958245][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.012086][ T1009] usb 7-1: config 0 descriptor??
[  636.503725][ T1009] hid_parser_main: 30 callbacks suppressed
[  636.503753][ T1009] holtek 0003:1241:5015.001C: unknown main item tag 0x4
[  636.503786][ T1009] holtek 0003:1241:5015.001C: unknown main item tag 0x3
[  636.503814][ T1009] holtek 0003:1241:5015.001C: item fetching failed at offset 4/5
[  636.504592][ T1009] holtek 0003:1241:5015.001C: parse failed
[  636.504675][ T1009] holtek 0003:1241:5015.001C: probe with driver holtek failed with error -22
[  636.667112][   T37] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  636.697340][ T1009] usb 7-1: USB disconnect, device number 13
[  636.889436][   T37] usb 3-1: Using ep0 maxpacket: 8
[  636.896931][   T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  636.896984][   T37] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  636.897009][   T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.988614][   T37] usb 3-1: config 0 descriptor??
[  636.994418][   T37] gspca_main: vc032x-2.14.0 probing 046d:0892
[  637.602659][   T37] gspca_vc032x: reg_r err -71
[  637.602759][   T37] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  637.621587][   T37] usb 3-1: USB disconnect, device number 33
[  637.893420][T18876] gfs2: path_lookup on �Rwÿj65¨gß Cêé7a returned error -2
[  637.905479][T18869] loop7: detected capacity change from 0 to 131072
[  637.947633][T18869] F2FS-fs (loop7): Test dummy encryption mode enabled
[  637.972469][T18869] F2FS-fs (loop7): invalid crc value
[  638.123029][T18869] F2FS-fs (loop7): sanity_check_inode: corrupted inode ino=3, wrong feature flag: 16, run fsck to fix.
[  638.123271][T18869] F2FS-fs (loop7): Failed to read root inode
[  638.878244][T18892] bridge_slave_0: invalid flags given to default FDB implementation
[  639.153367][T18911] loop3: detected capacity change from 0 to 512
[  639.193686][T18911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  639.275003][T18911] EXT4-fs (loop3): Couldn't remount RDWR because of unprocessed orphan inode list.  Please umount/remount instead
[  639.505522][ T5823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.723195][T18895] loop6: detected capacity change from 0 to 32768
[  639.734445][T18895] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5181 (18895)
[  639.829221][T18895] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  639.829253][T18895] BTRFS info (device loop6): using blake2b checksum algorithm
[  640.068402][T18942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5198'.
[  640.120483][T18942] ipvlan2: entered allmulticast mode
[  640.120502][T18942] syz_tun: entered allmulticast mode
[  640.332161][T18895] BTRFS info (device loop6): enabling ssd optimizations
[  640.332190][T18895] BTRFS info (device loop6): turning on async discard
[  640.332210][T18895] BTRFS info (device loop6): enabling free space tree
[  640.413403][   T38] kauditd_printk_skb: 1 callbacks suppressed
[  640.413426][   T38] audit: type=1800 audit(2000000379.560:250): pid=18895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5181" name="file1" dev="loop6" ino=260 res=0 errno=0
[  640.530787][T11537] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  641.085455][ T6030] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  641.251659][ T6030] usb 4-1: config 0 has an invalid interface number: 69 but max is 0
[  641.251689][ T6030] usb 4-1: config 0 has no interface number 0
[  641.251733][ T6030] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  641.251760][ T6030] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  641.256245][ T6030] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  641.256274][ T6030] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.256295][ T6030] usb 4-1: Product: syz
[  641.256310][ T6030] usb 4-1: Manufacturer: syz
[  641.256326][ T6030] usb 4-1: SerialNumber: syz
[  641.297176][ T6030] usb 4-1: config 0 descriptor??
[  641.348475][T18961] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  641.368971][ T6030] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  641.450601][ T6030] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  641.794101][   T32] usb 4-1: USB disconnect, device number 36
[  641.958705][T18984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5216'.
[  641.978323][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5215'.
[  642.082251][T18989] comedi comedi0: dt2815: I/O base address or length out of range
[  642.104438][   T32] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  642.118605][   T32] cyberjack 4-1:0.69: device disconnected
[  642.368196][T18998] loop2: detected capacity change from 0 to 128
[  642.509571][T18998] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  642.529212][T18998] ext4 filesystem being mounted at /1118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  642.722752][ T5821] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  642.874521][T19009] netlink: 552 bytes leftover after parsing attributes in process `syz.3.5228'.
[  643.531325][   T38] audit: type=1326 audit(2000000382.680:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.531536][   T38] audit: type=1326 audit(2000000382.680:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.591231][   T38] audit: type=1326 audit(2000000382.680:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.591553][   T38] audit: type=1326 audit(2000000382.740:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.592386][   T38] audit: type=1326 audit(2000000382.740:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.613597][   T38] audit: type=1326 audit(2000000382.750:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.636607][   T38] audit: type=1326 audit(2000000382.760:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.637050][   T38] audit: type=1326 audit(2000000382.780:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  643.649753][   T38] audit: type=1326 audit(2000000382.790:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19034 comm="syz.6.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcafbcfc819 code=0x7ffc0000
[  644.010839][T19044] loop7: detected capacity change from 0 to 64
[  644.236029][   T32] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  644.377695][T19054] siw: device registration error -23
[  644.401221][   T32] usb 7-1: Using ep0 maxpacket: 16
[  644.403889][   T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.403925][   T32] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  644.403966][   T32] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  644.403993][   T32] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  644.469298][   T32] usb 7-1: config 0 descriptor??
[  644.789898][T19065] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  644.979927][   T32] corsair 0003:1B1C:1B02.001D: report_id 1961031690 is invalid
[  644.979954][   T32] corsair 0003:1B1C:1B02.001D: item 0 4 1 8 parsing failed
[  644.984054][   T32] corsair 0003:1B1C:1B02.001D: parse failed
[  644.984168][   T32] corsair 0003:1B1C:1B02.001D: probe with driver corsair failed with error -22
[  645.109234][ T6030] usb 7-1: USB disconnect, device number 14
[  645.302292][T19079] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  645.378944][T19081] comedi comedi3: 8255: I/O base address not correctly aligned
[  645.935530][T19094] loop2: detected capacity change from 0 to 2048
[  646.047159][T19094] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  646.739145][T19122] loop7: detected capacity change from 0 to 128
[  648.061268][T19154] loop6: detected capacity change from 0 to 16
[  648.102457][T19154] erofs (device loop6): mounted with root inode @ nid 36.
[  648.401480][T19162] loop6: detected capacity change from 0 to 512
[  648.421318][T19162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  648.457083][   T32] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  648.503366][T19162] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5297: invalid indirect mapped block 4294967295 (level 1)
[  648.503406][T19162] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  648.506143][    C1] EXT4-fs (loop6): error count since last fsck: 1
[  648.506162][    C1] EXT4-fs (loop6): initial error at time 2000000387: ext4_free_branches:1023: inode 11
[  648.506192][    C1] EXT4-fs (loop6): last error at time 2000000387: ext4_free_branches:1023: inode 11
[  648.560949][T19162] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.5297: invalid indirect mapped block 4294967295 (level 1)
[  648.560981][T19162] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  648.577040][T19162] EXT4-fs (loop6): 2 truncates cleaned up
[  648.601978][T19162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  648.624316][   T32] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  648.624344][   T32] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  648.624365][   T32] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  648.624402][   T32] usb 4-1: config 220 has no interface number 2
[  648.624472][   T32] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  648.624503][   T32] usb 4-1: config 220 interface 0 has no altsetting 0
[  648.624523][   T32] usb 4-1: config 220 interface 76 has no altsetting 0
[  648.624543][   T32] usb 4-1: config 220 interface 1 has no altsetting 0
[  648.682325][   T32] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  648.682399][   T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.682448][   T32] usb 4-1: Product: syz
[  648.682469][   T32] usb 4-1: Manufacturer: syz
[  648.682507][   T32] usb 4-1: SerialNumber: syz
[  648.917322][T19162] 
[  648.917335][T19162] ======================================================
[  648.917344][T19162] WARNING: possible circular locking dependency detected
[  648.917363][T19162] syzkaller #0 Tainted: G             L     
[  648.917375][T19162] ------------------------------------------------------
[  648.917384][T19162] syz.6.5297/19162 is trying to acquire lock:
[  648.917395][T19162] ffff888021e8a770 (sb_internal){++++}-{0:0}, at: ext4_evict_inode+0x426/0x10e0
[  648.917456][T19162] 
[  648.917456][T19162] but task is already holding lock:
[  648.917463][T19162] ffff88805f358cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  648.917509][T19162] 
[  648.917509][T19162] which lock already depends on the new lock.
[  648.917509][T19162] 
[  648.917517][T19162] 
[  648.917517][T19162] the existing dependency chain (in reverse order) is:
[  648.917525][T19162] 
[  648.917525][T19162] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  648.917553][T19162]        percpu_down_read_internal+0x48/0x1d0
[  648.917577][T19162]        ext4_writepages+0x205/0x3b0
[  648.917599][T19162]        do_writepages+0x32e/0x550
[  648.917623][T19162]        __writeback_single_inode+0x133/0x10e0
[  648.917645][T19162]        writeback_single_inode+0x488/0xd60
[  648.917680][T19162]        write_inode_now+0x1c2/0x290
[  648.917698][T19162]        iput+0x8c1/0xe80
[  648.917721][T19162]        ext4_xattr_block_set+0x1fd4/0x2ad0
[  648.917743][T19162]        ext4_expand_extra_isize_ea+0x12cf/0x1ea0
[  648.917766][T19162]        __ext4_expand_extra_isize+0x30d/0x400
[  648.917787][T19162]        __ext4_mark_inode_dirty+0x45c/0x710
[  648.917815][T19162]        ext4_evict_inode+0x986/0x10e0
[  648.917842][T19162]        evict+0x61e/0xb10
[  648.917872][T19162]        ext4_orphan_cleanup+0xc38/0x1470
[  648.917901][T19162]        ext4_fill_super+0x59bb/0x62d0
[  648.917924][T19162]        get_tree_bdev_flags+0x431/0x4f0
[  648.917958][T19162]        vfs_get_tree+0x92/0x2a0
[  648.917988][T19162]        do_new_mount+0x341/0xd30
[  648.918010][T19162]        __se_sys_mount+0x31d/0x420
[  648.918034][T19162]        do_syscall_64+0x15f/0xf80
[  648.918066][T19162]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.918087][T19162] 
[  648.918087][T19162] -> #0 (sb_internal){++++}-{0:0}:
[  648.918117][T19162]        __lock_acquire+0x15a5/0x2cf0
[  648.918154][T19162]        lock_acquire+0x106/0x350
[  648.918180][T19162]        percpu_down_read_internal+0x48/0x1d0
[  648.918203][T19162]        ext4_evict_inode+0x426/0x10e0
[  648.918230][T19162]        evict+0x61e/0xb10
[  648.918260][T19162]        ext4_ext_migrate+0xe11/0x1130
[  648.918282][T19162]        ext4_fileattr_set+0xf33/0x16d0
[  648.918308][T19162]        vfs_fileattr_set+0x9f6/0xc90
[  648.918344][T19162]        ioctl_setflags+0x189/0x1f0
[  648.918368][T19162]        do_vfs_ioctl+0x9f4/0x1540
[  648.918397][T19162]        __se_sys_ioctl+0x82/0x170
[  648.918425][T19162]        do_syscall_64+0x15f/0xf80
[  648.918453][T19162]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.918473][T19162] 
[  648.918473][T19162] other info that might help us debug this:
[  648.918473][T19162] 
[  648.918480][T19162]  Possible unsafe locking scenario:
[  648.918480][T19162] 
[  648.918487][T19162]        CPU0                    CPU1
[  648.918494][T19162]        ----                    ----
[  648.918501][T19162]   lock(&sbi->s_writepages_rwsem);
[  648.918516][T19162]                                lock(sb_internal);
[  648.918531][T19162]                                lock(&sbi->s_writepages_rwsem);
[  648.918547][T19162]   rlock(sb_internal);
[  648.918560][T19162] 
[  648.918560][T19162]  *** DEADLOCK ***
[  648.918560][T19162] 
[  648.918565][T19162] 3 locks held by syz.6.5297/19162:
[  648.918577][T19162]  #0: ffff888021e8a480 (sb_writers#4){++++}-{0:0}, at: mnt_want_write_file+0x63/0x210
[  648.918638][T19162]  #1: ffff8880695756d0 (&type->i_mutex_dir_key#3){++++}-{4:4}, at: vfs_fileattr_set+0x161/0xc90
[  648.918696][T19162]  #2: ffff88805f358cd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_ext_migrate+0x308/0x1130
[  648.918746][T19162] 
[  648.918746][T19162] stack backtrace:
[  648.918771][T19162] CPU: 0 UID: 0 PID: 19162 Comm: syz.6.5297 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  648.918799][T19162] Tainted: [L]=SOFTLOCKUP
[  648.918808][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  648.918824][T19162] Call Trace:
[  648.918835][T19162]  <TASK>
[  648.918844][T19162]  dump_stack_lvl+0xe8/0x150
[  648.918869][T19162]  print_circular_bug+0x2e1/0x300
[  648.918902][T19162]  check_noncircular+0x12e/0x150
[  648.918938][T19162]  __lock_acquire+0x15a5/0x2cf0
[  648.918969][T19162]  ? __lock_acquire+0x6b5/0x2cf0
[  648.918996][T19162]  ? __asan_memset+0x22/0x50
[  648.919022][T19162]  ? ext4_evict_inode+0x426/0x10e0
[  648.919049][T19162]  lock_acquire+0x106/0x350
[  648.919074][T19162]  ? ext4_evict_inode+0x426/0x10e0
[  648.919108][T19162]  percpu_down_read_internal+0x48/0x1d0
[  648.919137][T19162]  ? ext4_evict_inode+0x426/0x10e0
[  648.919164][T19162]  ext4_evict_inode+0x426/0x10e0
[  648.919191][T19162]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  648.919224][T19162]  ? reacquire_held_locks+0x104/0x190
[  648.919255][T19162]  ? rt_spin_lock+0x1e0/0x400
[  648.919279][T19162]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  648.919305][T19162]  ? __pfx_ext4_evict_inode+0x10/0x10
[  648.919330][T19162]  ? rt_spin_unlock+0x14f/0x200
[  648.919357][T19162]  ? rt_spin_unlock+0x160/0x200
[  648.919380][T19162]  ? __pfx_ext4_evict_inode+0x10/0x10
[  648.919406][T19162]  evict+0x61e/0xb10
[  648.919439][T19162]  ? __pfx_evict+0x10/0x10
[  648.919468][T19162]  ? rt_spin_unlock+0x160/0x200
[  648.919493][T19162]  ? iput+0xb25/0xe80
[  648.919522][T19162]  ext4_ext_migrate+0xe11/0x1130
[  648.919551][T19162]  ? __pfx_ext4_ext_migrate+0x10/0x10
[  648.919577][T19162]  ? ext4_change_inode_journal_flag+0x213/0xa10
[  648.919601][T19162]  ? __ext4_journal_stop+0x34/0x1a0
[  648.919624][T19162]  ext4_fileattr_set+0xf33/0x16d0
[  648.919658][T19162]  ? __pfx_ext4_fileattr_set+0x10/0x10
[  648.919687][T19162]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  648.919717][T19162]  ? lockdep_hardirqs_on+0x7a/0x110
[  648.919747][T19162]  ? __asan_memset+0x22/0x50
[  648.919770][T19162]  ? fileattr_fill_flags+0x229/0x380
[  648.919797][T19162]  ? fscrypt_prepare_setflags+0x62/0x3c0
[  648.919832][T19162]  vfs_fileattr_set+0x9f6/0xc90
[  648.919858][T19162]  ? mnt_get_write_access+0x66/0x2d0
[  648.919890][T19162]  ? __pfx_vfs_fileattr_set+0x10/0x10
[  648.919918][T19162]  ? __asan_memset+0x22/0x50
[  648.919943][T19162]  ioctl_setflags+0x189/0x1f0
[  648.919971][T19162]  ? __pfx_ioctl_setflags+0x10/0x10
[  648.919999][T19162]  ? tomoyo_path_number_perm+0x219/0x630
[  648.920032][T19162]  ? tomoyo_path_number_perm+0x219/0x630
[  648.920065][T19162]  do_vfs_ioctl+0x9f4/0x1540
[  648.920098][T19162]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  648.920140][T19162]  ? do_futex+0x333/0x420
[  648.920178][T19162]  ? __fget_files+0x2a/0x420
[  648.920205][T19162]  ? __fget_files+0x2a/0x420
[  648.920228][T19162]  ? __fget_files+0x3a6/0x420
[  648.920251][T19162]  ? __fget_files+0x2a/0x420
[  648.920277][T19162]  ? bpf_lsm_file_ioctl+0x9/0x20
[  648.920301][T19162]  __se_sys_ioctl+0x82/0x170
[  648.920331][T19162]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.920352][T19162]  do_syscall_64+0x15f/0xf80
[  648.920382][T19162]  ? trace_irq_disable+0x3b/0x140
[  648.920406][T19162]  ? clear_bhb_loop+0x40/0x90
[  648.920429][T19162]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  648.920449][T19162] RIP: 0033:0x7fcafbcfc819
[  648.920474][T19162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  648.920492][T19162] RSP: 002b:00007fcaf9f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  648.920515][T19162] RAX: ffffffffffffffda RBX: 00007fcafbf75fa0 RCX: 00007fcafbcfc819
[  648.920531][T19162] RDX: 0000200000000080 RSI: 0000000040086602 RDI: 0000000000000004
[  648.920545][T19162] RBP: 00007fcafbd92c91 R08: 0000000000000000 R09: 0000000000000000
[  648.920560][T19162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  648.920572][T19162] R13: 00007fcafbf76038 R14: 00007fcafbf75fa0 R15: 00007ffc41ea5c48
[  648.920596][T19162]  </TASK>
[  649.160805][ T6030] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  649.221119][   T32] usb 4-1: selecting invalid altsetting 0
[  649.224334][   T32] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  649.224423][   T32] uvcvideo 4-1:220.0: No valid video chain found.
[  649.303200][   T32] usb 4-1: selecting invalid altsetting 0
[  649.303278][   T32] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  649.351325][   T32] usb 4-1: USB disconnect, device number 37
[  649.393836][ T6030] usb 3-1: Using ep0 maxpacket: 16
[  649.407201][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  649.407236][ T6030] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  649.407262][ T6030] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  649.407301][ T6030] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  649.407326][ T6030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.645521][ T6030] usb 3-1: config 0 descriptor??
[  649.841860][T11537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.088598][ T6030] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max
[  650.112077][ T6030] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  650.112129][ T6030] microsoft 0003:045E:07DA.001E: no inputs found
[  650.112158][ T6030] microsoft 0003:045E:07DA.001E: could not initialize ff, continuing anyway
[  650.292283][   T37] usb 3-1: USB disconnect, device number 34