last executing test programs:

5.380507204s ago: executing program 1 (id=1083):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x400455c8, 0x1)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0x0)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100))

4.199673802s ago: executing program 2 (id=1094):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[])
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/74, 0x4a)

3.810924037s ago: executing program 3 (id=1102):
r0 = socket(0x0, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r1 = socket$igmp6(0xa, 0x3, 0x2)
dup(r1)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="8000"}, 0x2, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})

3.698298271s ago: executing program 4 (id=1104):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0)

3.577027756s ago: executing program 3 (id=1105):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

3.531738348s ago: executing program 4 (id=1106):
syz_emit_vhci(&(0x7f0000000340)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0x0, 0x8}, {0xffd9, 0x9, 0x8, 0x2}}}}, 0x15)
syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x2, 0xc8, 0x2}}}, 0x7)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0x39}, {0x4, [{@none, 0x0, 0x6, 0x7, "360a8e", 0x8}, {@fixed, 0x7, 0x70, 0x0, "00691e", 0x3}, {@none, 0x5, 0xcf, 0x5, "e77791", 0x7ff}, {@any, 0xfc, 0x5, 0xf2, "5e1308", 0x7ff}]}}}, 0x3c)
syz_emit_vhci(&(0x7f0000000100)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2)
syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x2d, 0x8}, {0x9, 0xff81, 0x1, 0x6}}]}}, 0x15)
syz_open_dev$usbmon(&(0x7f0000000280), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
timerfd_create(0x9, 0x800)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r2, 0x89f0, &(0x7f0000000040)={'bond0\x00', @ifru_names='erspan0\x00'})

3.258150119s ago: executing program 3 (id=1109):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)={0x0, 0x2904c, 0x2, 0x10003, '\x00', [{}, {0xffffffff}]})

3.067920247s ago: executing program 1 (id=1111):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040))
creat(&(0x7f0000001180)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x70d, &(0x7f0000000480), &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r0, &(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x18})
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3.061152867s ago: executing program 3 (id=1112):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0xe0ffffff, 0x0, 0x0, 0x0, 0x5}, 0x9c)

2.875733795s ago: executing program 3 (id=1114):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.785376148s ago: executing program 1 (id=1115):
r0 = socket(0x0, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r1 = socket$igmp6(0xa, 0x3, 0x2)
dup(r1)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="8000"}, 0x2, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})

2.047898728s ago: executing program 0 (id=1117):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)

1.931691072s ago: executing program 0 (id=1118):
syz_emit_vhci(&(0x7f0000000500)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x0, 0xc9, 0xff}}}, 0x9)

1.809425717s ago: executing program 1 (id=1119):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
close(r0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000700)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

1.683319442s ago: executing program 0 (id=1120):
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket(0x200000100000011, 0x803, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000100)="4dcdc7d96a760000001100050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)

1.587245286s ago: executing program 2 (id=1121):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1.565247707s ago: executing program 0 (id=1122):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000040a0103"], 0x2c}}, 0x0)

1.327841427s ago: executing program 2 (id=1123):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@sb={'sb', 0x3d, 0xfffffffffffffff8}, 0x41}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@dioread_nolock}, {@usrjquota}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfc, 0x569, &(0x7f0000000c40)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRdBlNOtY62PbgXnyRIYg4EP8A330c/gP+FQMdDBlFH3yJ3PSmzdakP7K4xubzgbudc89Nzj0593t6Tm5CAhhYY9k/hYhXI+KbJOJoS9lw5IVjq8etPLk5nW1J1Ouf/ZlEku9rHp/k/x/OM69ExK9fRZwubKy3urQ8VyqX04U8P16bvzZeXVo+c2W+NJvOplcnp6bOvTM1+f577/asrW9e/Pv7Tx98dO7rkyvf/fzo2L0kzseRvKy1Hc/hdmtmLMby12Qkzj9z4EQPKusnyW6fAF0ZyuN8JLIx4GgM5VEP7H23IqIODKhE/MOAas4Dmmv7TdbBe3KJ9/jD1QXQxvYPr743Egcaa6NDK8lTK6PsxRjtQf1ZHb/8cf9etkXv3ocA2NLtOxFxdnh44/iX5ONf985u45hn6zD+wYvzIJv/vNVu/lNYm/9Em/nP4Tax242t47/wqAfVdJTN/z5oO/9du2k1OpTnXmrM+UaSy1fKaTa2vRwRp2Jkf5bf7H7OuZWH9U5lrfO/bMvqb84F8/N4NLz/6cfMlGql52lzq8d3Il5rO/9N1vo/adP/2etxcZt1nEjvv96pbOv2t3Vwm1Vvqf5TxBtt+399uZNsfn9yvHE9jDevio3+unvit071d9n+nsn6/9Dm7R9NWu/XVndex48H/kk7lXV7/e9LPm+k9+X7bpRqtYWJiH3JJxv3T64/tplvHp+1/9TJzce/dtd/dgF+sc323z1+t+Oh/dD/Mzvq//VEsmFP+8TDj7/8oflk9Xr91s7an/X/243UqXzPdsa/7ZxXd1czAAAAAAAA9K9CRByJpFBcSxcKxeLq5zuOx6FCuVKtnb5cWbw6E43vyo7GSKF5p/toy+chJvLPwzbzk8/kpyLiWER8O3SwkS9OV8ozu914AAAAAAAAAAAAAAAAAAAA6BOHIw60+/5/5veh3T474D/nJ79hcHWO/7ykF7/0BPQlf/9hcIl/GFziHwaX+IfBJf5hcIl/GFziHwaX+AcAAAAAAAAAAAAAAAAAAAAAAAAAAICeunjhQrbVV57cnM7yM9eXFucq18/MpNW54vzidHG6snCtOFupzJbT4nRlfqvnK1cq1yYmY/HGeC2t1sarS8uX5iuLV2uXrsyXZtNL6cgLaRUAAAAAAAAAAAAAAAAAAAD8v1SXzkepXE4XqkvLcxISO04M98dp7KFEPbe7p7HbIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPs3AAD//9d1P64=")

1.300435398s ago: executing program 0 (id=1124):
mlockall(0x6)
prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100))
brk(0x200100006e61)

1.184972742s ago: executing program 0 (id=1125):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@largeio}, {@usrquota}]}, 0x5, 0xb8e1, &(0x7f0000013cc0)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

1.031797869s ago: executing program 3 (id=1126):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo")
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)

917.252603ms ago: executing program 4 (id=1127):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000200), 0x84, 0x4ab, &(0x7f00000004c0)="$eJzs3MtvVNUfAPDvnT6gP+DX+fHzxUOporHx0dLyXLjRaMLGxERjcDm2hSAFDK0JkMZWY3Bp+AvUpYl/gSvdGHWlcatxa0yI6QZ0Ya65M3fKlJlpO+20A8znkwycc++595wz5572PHIbQNcayv5JInZGxC8RMViJLk8wVPnv1uLcxF+LcxNJpOnrfybldDcX5yaqSavX7cgjw4WIwkdJ7GuQ78yVq+dK09NTl/L46Oz5d0dnrlx9/uz50pmpM1MXxk+cOHJ44Pix8aNtqWdWppt737+4f8/Jt66/OnHq+tvff5mVN83P19ajothiDj11R4ZiaPl3WeOpFu9+t9tVE056O1gQWpI9tVlz9ZX7/2D0xO3GG4xXPuxo4YBNlaZpuq3u6NLvsoW0VpJULgDuE4kuDV2q+ov+5mI2U52bqJ8H399uvBjlGVBW71v5p3KmNwrZHL5YmRv1bVL+D0TEqYW/P80+0XAdAgCgvb7Oxj/PVcYd1U/lTCEeqkn333xvqBgR/4uI3RHx/3z88mBEOe3DEfHIsrvPr5r/0B3x+vHPTwPrrtwaZOO/F/K9reXjv0I1SbEnj+0q178vOX12eupQ/p0MR9+2LD5Wf+ulZbVvXv75k2b5D9WM/7JPln91LJiX44/eOxboJkuzpY3Wu+rGB+Ulvfn6+idLOwHZzGBPROxdx/2z7+zsM1/sb3Z+9fqvoA37TOnnEU9X2n8h7qh/pj8PNd6fHDt+bPzo6PaYnjo0Wn0q6v3w47XX8mDdNGJD9W+DrP3/0/D5X9q5LCa1+7Uzredx7dePm85p1vv89ydvlMP9+bHLpdnZS2MR/clC/fHx29deLg0sS5/Vf/hg4/6/O+Kfz/Lr9kVE9hA/GhGPRcSBvOyPR8QTEXFwhfp/99KT7zSbQt4N7T/ZUvu3Hug59+1XzfJfW/sfKYeG8yOTpdntq9VrrQXcyHcHAAAA94oDEbEzksJIvsa5MwqFkZGIHUsrKDOzz56++N6Fyco7AsXoK1RXugZr1kPH8rXhLJ5dNV4Tz84fLq8bp2maDpTjIxMXp3d1turQ9XY06f+Z3+tfaQHuNy3tozV7ow24J61/Hz1tazmAred9behe+j90rzX3/816Cw7omEb9fz7iVgeKAmyxRv3/zQ6UA9h65v/QvfR/6F76P3SljbzXv1Jg98kV0iS9m5Np80AhVv4rAMWI1m74WyGiPSXsaWtNB9bQptujHXlFYdU0vS38IYatDRTujmJUAtsiYpWnd+lhm68Grm52wTr9kwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/g0AAP//i9nZ9w==")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x12c, r1, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x10e, 0x2a, [@perr={0x84, 0x4, {0x0, 0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}}]}]}, 0x12c}}, 0x0)

807.606377ms ago: executing program 1 (id=1128):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004980)='/proc/zoneinfo\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000000000)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
setreuid(0x0, r2)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000100)={0x54, 0x12, 0x703, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "01cc0400"}]}, 0x54}}, 0x0)

755.75884ms ago: executing program 2 (id=1129):
r0 = socket(0x0, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r1 = socket$igmp6(0xa, 0x3, 0x2)
dup(r1)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @random="8000"}, 0x2, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})

529.832529ms ago: executing program 1 (id=1130):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r2, 0x2000009)
write$cgroup_int(r1, &(0x7f00000000c0), 0x12)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x544, &(0x7f0000000580)="$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")
ioctl$FS_IOC_SETFLAGS(r3, 0x4c02, &(0x7f0000000140))
write$binfmt_script(r2, &(0x7f0000000140), 0xfcb8)

381.141585ms ago: executing program 4 (id=1131):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

266.317129ms ago: executing program 2 (id=1132):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))

111.715375ms ago: executing program 4 (id=1133):
r0 = syz_open_dev$vim2m(&(0x7f0000000a00), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000002c0)={0x0, 0x59565955, 0x0, @stepwise})

53.819328ms ago: executing program 2 (id=1134):
unshare(0x2000400)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = fcntl$dupfd(r0, 0x0, r2)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000080))

0s ago: executing program 4 (id=1135):
unshare(0x20400)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x3, 0x86)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

kernel console output (not intermixed with test programs):

[ T4398] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.081630][ T4759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.117109][ T4398] usb 1-1: config 0 descriptor??
[  142.122899][ T4759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.153038][ T4759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.154494][ T4398] cp210x 1-1:0.0: cp210x converter detected
[  142.206064][ T4759] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.236145][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.256916][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.303929][ T4759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.321991][ T4759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.336645][ T4759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.354184][ T4759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.373567][ T4398] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71
[  142.403444][ T4398] cp210x 1-1:0.0: querying part number failed
[  142.439774][ T4398] usb 1-1: cp210x converter now attached to ttyUSB0
[  142.486437][ T4398] usb 1-1: USB disconnect, device number 9
[  142.539829][ T4398] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  142.585320][ T4398] cp210x 1-1:0.0: device disconnected
[  142.691865][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.721756][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.731540][ T3554] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  142.760764][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.771460][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.791115][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.809860][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.891583][ T5001] loop4: detected capacity change from 0 to 16
[  142.984083][ T5001] erofs: (device loop4): mounted with root inode @ nid 36.
[  143.123359][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.160998][ T3554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.180647][   T26] audit: type=1800 audit(1719870352.467:32): pid=5001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.345" name="file1" dev="overlay" ino=86 res=0 errno=0
[  143.239932][ T3554] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00
[  144.232957][    C1] sched: RT throttling activated
[  144.235782][ T3554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.251448][ T3554] usb 3-1: config 0 descriptor??
[  144.751361][ T5005] loop3: detected capacity change from 0 to 32768
[  144.840081][ T5005] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  144.857917][ T5005] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  144.918897][ T5005] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  144.947029][ T4398] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  144.964418][ T4398] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  145.084401][ T4398] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms
[  145.106096][ T4398] gfs2: fsid=syz:syz.0: jid=0: Done
[  145.113654][ T5005] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  145.530748][ T5026] loop4: detected capacity change from 0 to 256
[  145.686752][ T5008] loop0: detected capacity change from 0 to 262144
[  145.699492][ T5008] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.347 (5008)
[  145.724674][ T5008] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  145.735555][ T5008] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  145.746248][ T5008] BTRFS info (device loop0): using free space tree
[  145.755742][ T3554] microsoft 0003:045E:00F9.0006: item fetching failed at offset 4/5
[  145.764787][ T3554] microsoft 0003:045E:00F9.0006: parse failed
[  145.770987][ T3554] microsoft: probe of 0003:045E:00F9.0006 failed with error -22
[  145.970227][ T3554] usb 3-1: USB disconnect, device number 9
[  145.990322][ T5008] BTRFS info (device loop0): enabling ssd optimizations
[  146.360450][ T3766] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  146.775757][   T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  147.023068][ T4404] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  147.038945][   T14] usb 5-1: Using ep0 maxpacket: 16
[  147.165174][ T5048] loop1: detected capacity change from 0 to 32768
[  147.176293][   T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  147.373463][   T14] usb 5-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  147.385223][ T4404] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  147.399795][ T4404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.409946][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.428025][   T14] usb 5-1: Product: syz
[  147.434612][ T4404] usb 3-1: config 0 descriptor??
[  147.444375][   T14] usb 5-1: Manufacturer: syz
[  147.450598][   T14] usb 5-1: SerialNumber: syz
[  147.474607][ T4404] cp210x 3-1:0.0: cp210x converter detected
[  147.483490][   T14] usb 5-1: config 0 descriptor??
[  147.693304][ T4404] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71
[  147.705337][ T4404] cp210x 3-1:0.0: querying part number failed
[  147.727330][ T4404] usb 3-1: cp210x converter now attached to ttyUSB0
[  147.751584][ T4404] usb 3-1: USB disconnect, device number 10
[  147.776450][   T14] kaweth 5-1:0.0: Firmware present in device.
[  147.811159][ T4404] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  147.826328][ T4404] cp210x 3-1:0.0: device disconnected
[  147.974902][   T14] kaweth 5-1:0.0: Error reading configuration (-71), no net device created
[  147.993476][   T14] kaweth: probe of 5-1:0.0 failed with error -5
[  148.053742][   T14] usb 5-1: USB disconnect, device number 15
[  148.665461][ T3557] Bluetooth: hci1: unexpected cc 0x2007 length: 1 < 2
[  149.823584][ T5119] loop2: detected capacity change from 0 to 8192
[  149.991501][ T5127] sock: sock_timestamping_bind_phc: sock not bind to device
[  150.093191][ T4752] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  150.483280][ T4752] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  150.499600][ T4752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.565372][ T4752] usb 5-1: config 0 descriptor??
[  150.614940][ T4752] cp210x 5-1:0.0: cp210x converter detected
[  150.823361][ T4752] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  150.834764][ T4752] cp210x 5-1:0.0: querying part number failed
[  150.850028][ T4752] usb 5-1: cp210x converter now attached to ttyUSB0
[  150.870512][ T4752] usb 5-1: USB disconnect, device number 16
[  150.884584][ T4752] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  150.901027][ T4752] cp210x 5-1:0.0: device disconnected
[  151.391223][ T5109] loop0: detected capacity change from 0 to 262144
[  151.401947][ T5109] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.364 (5109)
[  151.433610][ T5109] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  151.446907][ T5109] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  151.459165][ T5109] BTRFS info (device loop0): using free space tree
[  151.573068][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  151.693146][ T5109] BTRFS info (device loop0): enabling ssd optimizations
[  151.918412][ T5169] netlink: 'syz.4.375': attribute type 2 has an invalid length.
[  151.974910][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'.
[  152.010233][ T3766] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  152.025786][   T27] usb 4-1: Using ep0 maxpacket: 16
[  152.233606][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  152.763290][   T27] usb 4-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  152.807470][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.827568][ T3557] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  152.838814][ T3557] Bluetooth: hci1: Injecting HCI hardware error event
[  152.854840][ T3553] Bluetooth: hci1: hardware error 0x00
[  152.875415][   T27] usb 4-1: Product: syz
[  152.881458][   T27] usb 4-1: Manufacturer: syz
[  152.887408][   T27] usb 4-1: SerialNumber: syz
[  152.985530][   T27] usb 4-1: config 0 descriptor??
[  153.163186][ T5062] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  153.299204][   T27] kaweth 4-1:0.0: Firmware present in device.
[  153.663514][ T5062] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  153.717596][ T5062] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  153.889768][   T27] kaweth 4-1:0.0: Error reading configuration (-71), no net device created
[  153.920792][   T27] kaweth: probe of 4-1:0.0 failed with error -5
[  153.939040][ T5062] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  153.994148][   T27] usb 4-1: USB disconnect, device number 6
[  154.029587][ T5062] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  154.105025][ T5062] usb 5-1: SerialNumber: syz
[  154.375829][ T5192] loop2: detected capacity change from 0 to 256
[  154.523365][ T4396] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  154.626429][ T5062] usb 5-1: 0:2 : does not exist
[  154.643501][ T5062] usb 5-1: unit 55 not found!
[  154.704109][ T5062] usb 5-1: USB disconnect, device number 17
[  154.773538][ T4396] usb 1-1: Using ep0 maxpacket: 32
[  154.813377][ T4396] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  154.984956][ T3726] udevd[3726]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  155.003135][ T3553] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  155.223192][ T3115] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  155.338515][ T5210] loop4: detected capacity change from 0 to 64
[  155.453449][ T4396] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[  155.483347][ T4396] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.523299][ T4396] usb 1-1: config 0 descriptor??
[  155.565278][ T4396] gspca_main: 08ca:0111 too many config
[  155.634615][ T3115] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  155.655041][ T3115] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.696672][ T3115] usb 2-1: config 0 descriptor??
[  155.735337][ T3115] cp210x 2-1:0.0: cp210x converter detected
[  155.770820][ T4396] usb 1-1: USB disconnect, device number 10
[  155.948934][ T3115] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  155.973258][ T3115] cp210x 2-1:0.0: querying part number failed
[  155.993104][ T4395] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  156.032799][ T3115] usb 2-1: cp210x converter now attached to ttyUSB0
[  156.081860][ T3115] usb 2-1: USB disconnect, device number 9
[  156.092411][ T3115] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  156.151588][ T3115] cp210x 2-1:0.0: device disconnected
[  156.373387][ T4395] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  156.410010][ T4395] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.451970][ T4395] usb 4-1: config 0 descriptor??
[  156.496024][ T4395] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  156.613049][   T27] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  156.793258][ T3115] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  156.983228][ T4395] gspca_sn9c2028: read1 error -71
[  157.003130][ T4395] gspca_sn9c2028: read1 error -71
[  157.019551][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  157.023169][ T4395] gspca_sn9c2028: read1 error -71
[  157.043110][ T3115] usb 1-1: Using ep0 maxpacket: 16
[  157.052990][   T27] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.062160][ T4395] sn9c2028: probe of 4-1:0.0 failed with error -71
[  157.076095][   T27] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  157.101520][ T4395] usb 4-1: USB disconnect, device number 7
[  157.118177][   T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.159999][   T27] usb 5-1: config 0 descriptor??
[  157.163622][ T3115] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  157.363350][ T3115] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=56.88
[  157.383461][ T3115] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.392538][ T3115] usb 1-1: Product: syz
[  157.399222][ T3115] usb 1-1: Manufacturer: syz
[  157.407454][ T3115] usb 1-1: SerialNumber: syz
[  157.431135][ T5227] loop1: detected capacity change from 0 to 40427
[  157.456130][ T5227] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  157.463493][ T3115] usb 1-1: config 0 descriptor??
[  157.483685][ T5227] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  157.529238][ T5227] F2FS-fs (loop1): invalid crc value
[  157.572803][ T5227] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.661579][ T5227] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  157.670467][ T5227] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  157.695165][   T27] cm6533_jd 0003:0D8C:0022.0007: item fetching failed at offset 3/5
[  157.717963][   T27] cm6533_jd 0003:0D8C:0022.0007: parse failed
[  157.739556][   T27] cm6533_jd: probe of 0003:0D8C:0022.0007 failed with error -22
[  157.760426][ T3115] kaweth 1-1:0.0: Firmware present in device.
[  157.910227][   T27] usb 5-1: USB disconnect, device number 18
[  157.949800][ T3115] kaweth 1-1:0.0: Error reading configuration (-71), no net device created
[  157.969711][ T3115] kaweth: probe of 1-1:0.0 failed with error -5
[  157.991698][ T3115] usb 1-1: USB disconnect, device number 11
[  158.143225][ T4396] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  158.304481][ T5245] loop1: detected capacity change from 0 to 64
[  158.386931][ T4396] usb 4-1: Using ep0 maxpacket: 8
[  158.503334][ T4396] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  158.527673][ T4396] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  158.527712][ T4396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.532011][ T4396] usb 4-1: config 0 descriptor??
[  158.761600][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'.
[  158.794788][   T27] kernel write not supported for file /snd/seq (pid: 27 comm: kworker/1:1)
[  158.805778][ T4396] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  159.028349][ T5263] loop4: detected capacity change from 0 to 256
[  159.046383][ T4396] usb 4-1: USB disconnect, device number 8
[  159.068672][ T4396] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected
[  159.184700][ T5269] loop0: detected capacity change from 0 to 256
[  159.240312][ T5269] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  159.344860][ T5269] UBIFS error (pid: 5269): cannot open "./file1", error -22
[  159.356144][ T5247] loop1: detected capacity change from 0 to 32768
[  159.994626][ T5292] loop1: detected capacity change from 0 to 64
[  160.001716][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'.
[  160.173127][ T4396] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  160.413043][ T4396] usb 3-1: Using ep0 maxpacket: 8
[  160.493725][ T4396] usb 3-1: unable to get BOS descriptor or descriptor too short
[  160.573147][ T4396] usb 3-1: config index 0 descriptor too short (expected 16914, got 18)
[  160.585394][ T4396] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.595643][ T5309] loop1: detected capacity change from 0 to 256
[  160.605151][ T4396] usb 3-1: config 0 has no interfaces?
[  160.656062][ T5309] FAT-fs (loop1): Directory bread(block 64) failed
[  160.662765][ T5309] FAT-fs (loop1): Directory bread(block 65) failed
[  160.671317][ T5309] FAT-fs (loop1): Directory bread(block 66) failed
[  160.673090][ T3115] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  160.678390][ T5309] FAT-fs (loop1): Directory bread(block 67) failed
[  160.715118][ T5309] FAT-fs (loop1): Directory bread(block 68) failed
[  160.729265][ T5309] FAT-fs (loop1): Directory bread(block 69) failed
[  160.736759][ T5309] FAT-fs (loop1): Directory bread(block 70) failed
[  160.763398][ T4396] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a9b, bcdDevice=30.9b
[  160.782889][ T4396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.788663][ T5309] FAT-fs (loop1): Directory bread(block 71) failed
[  160.810259][ T4396] usb 3-1: Product: syz
[  160.815527][ T5309] FAT-fs (loop1): Directory bread(block 72) failed
[  160.824911][ T4396] usb 3-1: Manufacturer: syz
[  160.830524][ T5309] FAT-fs (loop1): Directory bread(block 73) failed
[  160.850159][ T4396] usb 3-1: SerialNumber: syz
[  160.865249][ T4396] usb 3-1: config 0 descriptor??
[  160.936973][ T5313] loop3: detected capacity change from 0 to 2048
[  160.943709][ T3115] usb 5-1: Using ep0 maxpacket: 8
[  160.968837][ T5315] loop0: detected capacity change from 0 to 256
[  161.011730][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  161.060704][ T5313] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  161.063529][ T3115] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  161.080035][ T5313] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  161.104221][ T5313] EXT4-fs (loop3): This should not happen!! Data will be lost
[  161.104221][ T5313] 
[  161.115677][ T5313] EXT4-fs (loop3): Total free blocks count 0
[  161.121723][ T5313] EXT4-fs (loop3): Free/Dirty block details
[  161.128105][ T5313] EXT4-fs (loop3): free_blocks=2415919104
[  161.135514][ T5313] EXT4-fs (loop3): dirty_blocks=32
[  161.140880][ T5313] EXT4-fs (loop3): Block reservation details
[  161.153441][ T5313] EXT4-fs (loop3): i_reserved_data_blocks=2
[  161.167909][ T3115] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  161.206051][ T3115] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.231950][ T4398] usb 3-1: USB disconnect, device number 11
[  161.246868][ T3115] usb 5-1: config 0 descriptor??
[  161.304590][ T4759] EXT4-fs (loop3): unmounting filesystem.
[  161.505654][ T3115] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  161.933992][ T5062] usb 5-1: USB disconnect, device number 19
[  161.956682][ T5062] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  162.152998][ T5351] loop3: detected capacity change from 0 to 16
[  162.186129][ T5351] erofs: (device loop3): mounted with root inode @ nid 36.
[  162.238357][ T5351] erofs: (device loop3): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 36
[  162.252623][ T5351] syz.3.442: attempt to access beyond end of device
[  162.252623][ T5351] loop3: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  162.298219][ T5355] usb usb8: usbfs: process 5355 (syz.1.443) did not claim interface 0 before use
[  162.353278][ T3115] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  162.593280][ T3115] usb 3-1: Using ep0 maxpacket: 8
[  162.714044][ T3115] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  162.745104][ T3115] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  162.886521][ T3115] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.000434][ T3115] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  163.283476][ T3115] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  163.304441][ T3115] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.328646][ T3115] usb 3-1: Product: syz
[  163.332916][ T3115] usb 3-1: Manufacturer: syz
[  163.370427][ T3115] usb 3-1: SerialNumber: syz
[  163.403591][ T4395] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  163.429295][ T3115] usb 3-1: config 0 descriptor??
[  163.463209][ T5062] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  163.480733][ T3115] hub 3-1:0.0: bad descriptor, ignoring hub
[  163.495466][ T3115] hub: probe of 3-1:0.0 failed with error -5
[  163.687437][ T4395] usb 1-1: Using ep0 maxpacket: 32
[  163.813245][ T4395] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.848506][ T4395] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  163.858247][ T4395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[  163.873308][ T5062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  163.883168][ T4395] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  163.901142][ T5062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  163.903044][ T4395] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  163.948897][ T5062] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  163.949597][ T3115] usb 3-1: USB disconnect, device number 12
[  163.971883][ T5062] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  164.088732][ T5062] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  164.102774][ T5062] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  164.103338][ T4395] usb 1-1: New USB device found, idVendor=1784, idProduct=0008, bcdDevice=96.92
[  164.117159][ T5062] usb 2-1: SerialNumber: syz
[  164.128428][ T5377] loop4: detected capacity change from 0 to 32768
[  164.137873][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.146427][ T4395] usb 1-1: Product: syz
[  164.150844][ T4395] usb 1-1: Manufacturer: syz
[  164.155886][ T5377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.451 (5377)
[  164.161012][ T4395] usb 1-1: SerialNumber: syz
[  164.174517][ T5359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  164.182183][ T5359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  164.204030][ T5062] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  164.224375][ T4395] usb 1-1: config 0 descriptor??
[  164.232013][ T5377] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.248231][ T5377] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  164.259092][ T5377] BTRFS info (device loop4): setting nodatacow, compression disabled
[  164.273866][ T5377] BTRFS info (device loop4): enabling auto defrag
[  164.282438][ T5377] BTRFS info (device loop4): max_inline at 0
[  164.295742][ T5377] BTRFS info (device loop4): using free space tree
[  164.434861][ T5062] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  164.479367][ T5062] usb 2-1: USB disconnect, device number 10
[  164.488757][ T3115] usb 1-1: USB disconnect, device number 12
[  164.642644][ T5405] loop2: detected capacity change from 0 to 1024
[  164.885139][   T33] hfsplus: b-tree write err: -5, ino 4
[  164.988332][ T3561] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.513067][ T5410] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  165.788691][ T5410] usb 2-1: Using ep0 maxpacket: 8
[  165.829877][ T5424] loop0: detected capacity change from 0 to 256
[  165.948524][ T5410] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.972341][ T5410] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  165.994346][ T5410] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.015041][ T5410] usb 2-1: config 0 descriptor??
[  166.067697][ T5408] loop2: detected capacity change from 0 to 32768
[  166.086471][ T5408] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  166.100887][ T5408] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  166.115235][ T5408] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms
[  166.131724][ T4748] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  166.139321][ T4748] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  166.217260][ T4748] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 77ms
[  166.227083][ T4748] gfs2: fsid=syz:syz.0: jid=0: Done
[  166.233898][ T5408] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  166.309558][ T5410] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  166.635045][ T4395] usb 2-1: USB disconnect, device number 11
[  166.658867][ T4395] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[  166.936554][ T5427] loop3: detected capacity change from 0 to 32768
[  166.959335][ T5427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.463 (5427)
[  167.007633][ T5427] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.038088][ T5427] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  167.072023][ T5427] BTRFS info (device loop3): using free space tree
[  167.766721][ T5432] loop4: detected capacity change from 0 to 32768
[  167.809539][ T5427] BTRFS info (device loop3): enabling ssd optimizations
[  167.981429][ T5432] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.466 (5432)
[  168.085390][ T5432] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  168.101496][ T5432] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  168.112791][   T26] audit: type=1800 audit(1719870377.397:33): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.463" name="bus" dev="loop3" ino=263 res=0 errno=0
[  168.117460][ T5432] BTRFS info (device loop4): setting nodatacow, compression disabled
[  168.164227][ T5432] BTRFS info (device loop4): enabling auto defrag
[  168.200953][ T5432] BTRFS info (device loop4): max_inline at 0
[  168.207306][   T26] audit: type=1800 audit(1719870377.447:34): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.463" name="bus" dev="loop3" ino=263 res=0 errno=0
[  168.235681][ T5432] BTRFS info (device loop4): using free space tree
[  168.280799][   T26] audit: type=1804 audit(1719870377.547:35): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.463" name="/root/syzkaller.KVxB4H/26/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  168.614720][   T26] audit: type=1800 audit(1719870377.907:36): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.463" name="bus" dev="loop3" ino=263 res=0 errno=0
[  168.614892][ T5468] syz.3.463 (5468) used greatest stack depth: 19224 bytes left
[  168.668283][ T5495] loop1: detected capacity change from 0 to 512
[  168.746354][ T5495] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.475: bg 0: block 393: padding at end of block bitmap is not set
[  168.783703][ T5495] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  168.827631][ T5498] input: syz0 as /devices/virtual/input/input6
[  168.852091][ T5495] EXT4-fs (loop1): 2 truncates cleaned up
[  168.882341][ T4759] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.885099][ T5495] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  168.924873][ T3561] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.442060][ T3714] EXT4-fs (loop1): unmounting filesystem.
[  170.163328][ T5063] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  170.400855][ T5527] loop2: detected capacity change from 0 to 4096
[  170.472591][ T5527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  170.576334][ T5063] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  170.589099][ T5063] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  170.602836][ T5063] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  170.614532][ T5063] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  170.718941][ T5063] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  170.735048][ T3776] EXT4-fs (loop2): unmounting filesystem.
[  170.739645][ T5063] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  170.756857][ T5063] usb 1-1: SerialNumber: syz
[  170.803388][ T5518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  170.813669][ T5518] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  170.855710][ T3553] Bluetooth: hci3: unexpected event 0x42 length: 6 > 3
[  170.859876][ T5063] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  171.081890][ T5063] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  171.099696][ T5063] usb 1-1: USB disconnect, device number 13
[  171.578651][ T5553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.494'.
[  171.595720][ T5553] device bond_slave_0 entered promiscuous mode
[  171.602400][ T5553] device bond_slave_1 entered promiscuous mode
[  171.630061][ T5553] device macvtap1 entered promiscuous mode
[  171.644608][ T5553] device bond0 entered promiscuous mode
[  171.695751][ T5553] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  172.205741][ T5572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.502'.
[  172.213274][ T4399] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  172.310660][ T5572] device bridge_slave_1 left promiscuous mode
[  172.324166][ T5572] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.343988][ T5572] bridge1: port 1(bridge_slave_1) entered blocking state
[  172.351451][ T5572] bridge1: port 1(bridge_slave_1) entered disabled state
[  172.374567][ T5572] device bridge_slave_1 entered promiscuous mode
[  172.573197][ T4399] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  172.584039][ T4399] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  172.621898][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.630917][ T5586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.683313][ T4399] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  172.698031][ T4399] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  172.709269][ T4399] usb 3-1: SerialNumber: syz
[  172.793092][ T5063] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  172.963160][ T3600] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  172.995998][ T4399] usb 3-1: 0:2 : does not exist
[  173.001124][ T4399] usb 3-1: unit 48 not found!
[  173.024564][ T4399] usb 3-1: USB disconnect, device number 13
[  173.044468][ T5063] usb 2-1: Using ep0 maxpacket: 32
[  173.243088][ T5063] usb 2-1: config 0 has an invalid interface number: 217 but max is 0
[  173.261576][ T5063] usb 2-1: config 0 has no interface number 0
[  173.276070][ T3646] udevd[3646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.423419][ T3600] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  173.443269][ T5063] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43
[  173.458320][ T3600] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  173.469845][ T5063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.494394][ T5063] usb 2-1: Product: syz
[  173.498635][ T5063] usb 2-1: Manufacturer: syz
[  173.509184][ T3600] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  173.548165][ T5593] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  173.556126][ T5063] usb 2-1: SerialNumber: syz
[  173.564397][ T3600] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25
[  173.586384][ T5063] usb 2-1: config 0 descriptor??
[  173.654885][ T5063] ftdi_sio 2-1:0.217: FTDI USB Serial Device converter detected
[  173.672441][ T5063] ftdi_sio ttyUSB0: unknown device type: 0x2043
[  173.699379][ T3557] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.710294][ T3557] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.720789][ T3600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  173.724778][ T3557] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.746822][ T3557] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.757509][ T3600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  173.761096][ T3557] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  173.775402][ T3557] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  173.782530][ T3600] usb 1-1: SerialNumber: syz
[  173.863298][ T5588] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  173.902553][ T4748] usb 2-1: USB disconnect, device number 12
[  173.904800][ T5588] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  173.930164][ T4748] ftdi_sio 2-1:0.217: device disconnected
[  173.961577][ T3600] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  174.194811][ T3600] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  174.245933][ T3600] usb 1-1: USB disconnect, device number 14
[  175.408569][ T5605] syz.2.514 (5605): drop_caches: 2
[  175.554884][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.746692][ T5598] chnl_net:caif_netlink_parms(): no params data found
[  175.853377][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.518'.
[  175.920135][ T3553] Bluetooth: hci5: command tx timeout
[  176.810846][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.850670][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.878318][ T5633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  176.890229][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.900405][ T5598] device bridge_slave_0 entered promiscuous mode
[  176.957068][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.982132][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.995626][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.013211][ T5598] device bridge_slave_1 entered promiscuous mode
[  177.138119][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.187344][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.206760][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.258102][ T5598] team0: Port device team_slave_0 added
[  177.284733][ T5598] team0: Port device team_slave_1 added
[  177.305463][ T5640] loop4: detected capacity change from 0 to 512
[  177.370895][ T5640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.524: bg 0: block 393: padding at end of block bitmap is not set
[  177.434212][ T5640] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  177.518671][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.534825][ T5640] EXT4-fs (loop4): 2 truncates cleaned up
[  177.540716][ T5640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  177.573058][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.656772][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.689628][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.702195][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.759694][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.033273][ T3553] Bluetooth: hci5: command tx timeout
[  178.197667][ T5658] sctp: failed to load transform for md5: -2
[  178.369086][ T4748] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  178.372049][ T5598] device hsr_slave_0 entered promiscuous mode
[  178.394554][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  178.455215][ T5598] device hsr_slave_1 entered promiscuous mode
[  178.470236][ T5598] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.504919][ T5652] sctp: failed to load transform for md5: -4
[  178.543342][ T5598] Cannot create hsr debugfs directory
[  178.633259][ T4748] usb 3-1: Using ep0 maxpacket: 32
[  179.696196][ T4748] usb 3-1: config 0 has an invalid interface number: 217 but max is 0
[  179.709256][ T4748] usb 3-1: config 0 has no interface number 0
[  179.873838][ T4748] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=20.43
[  179.893003][ T4748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.921444][ T4748] usb 3-1: Product: syz
[  179.941487][ T4748] usb 3-1: Manufacturer: syz
[  179.960344][ T4748] usb 3-1: SerialNumber: syz
[  179.988362][ T4748] usb 3-1: config 0 descriptor??
[  180.015880][ T5680] loop0: detected capacity change from 0 to 4096
[  180.061372][ T4748] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected
[  180.074992][ T4748] ftdi_sio ttyUSB0: unknown device type: 0x2043
[  180.113245][ T3553] Bluetooth: hci5: command tx timeout
[  180.294971][   T27] usb 3-1: USB disconnect, device number 14
[  180.305862][   T27] ftdi_sio 3-1:0.217: device disconnected
[  180.426802][ T5669] loop4: detected capacity change from 0 to 32768
[  180.447169][ T5669] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.529 (5669)
[  180.488199][ T5669] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.555591][ T5669] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  180.593195][ T5669] BTRFS info (device loop4): using free space tree
[  180.936979][ T5669] BTRFS info (device loop4): enabling ssd optimizations
[  181.082146][ T5688] loop1: detected capacity change from 0 to 32768
[  181.091481][ T3561] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  181.140539][ T5688] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.533 (5688)
[  181.242289][ T5688] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.298280][ T5688] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  181.352692][ T5688] BTRFS info (device loop1): setting nodatacow, compression disabled
[  181.381462][ T5688] BTRFS info (device loop1): enabling auto defrag
[  181.402801][ T5688] BTRFS info (device loop1): max_inline at 0
[  181.429575][ T5688] BTRFS info (device loop1): using free space tree
[  181.512293][ T3600] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  181.566141][ T5598] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  181.653577][ T5598] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  181.783114][ T3600] usb 1-1: Using ep0 maxpacket: 8
[  181.873844][ T5598] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  181.923688][ T5598] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  181.937065][ T3600] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  181.973057][ T3600] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  181.987901][ T3714] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.013147][ T3600] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.192534][ T5754] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  182.193119][ T3553] Bluetooth: hci5: command tx timeout
[  182.303021][   T46] device hsr_slave_0 left promiscuous mode
[  182.334288][   T46] device hsr_slave_1 left promiscuous mode
[  182.376690][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.419286][ T3600] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  182.420293][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.429189][ T3600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.444095][ T3600] usb 1-1: Product: syz
[  182.448424][ T3600] usb 1-1: Manufacturer: syz
[  182.453198][ T3600] usb 1-1: SerialNumber: syz
[  182.508445][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.736848][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  183.066805][   T46] device bridge_slave_1 left promiscuous mode
[  183.103240][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.142185][   T46] device bridge_slave_0 left promiscuous mode
[  183.151267][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  183.323341][ T3600] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  183.326859][   T46] device veth1_macvtap left promiscuous mode
[  183.339164][   T46] device veth0_macvtap left promiscuous mode
[  183.346012][   T46] device veth1_vlan left promiscuous mode
[  183.357978][   T46] device veth0_vlan left promiscuous mode
[  183.364226][ T4404] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  183.402699][ T3600] usb 1-1: USB disconnect, device number 15
[  183.603079][ T4404] usb 3-1: Using ep0 maxpacket: 8
[  183.682224][ T5777] loop4: detected capacity change from 0 to 8
[  183.733607][ T4404] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  183.778861][ T4404] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  183.805693][ T4404] usb 3-1: config 135 has no interface number 0
[  183.842105][ T4404] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  184.024900][ T4404] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  184.042052][ T4404] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.051498][ T4404] usb 3-1: Product: syz
[  184.069422][ T4404] usb 3-1: Manufacturer: syz
[  184.078378][ T4404] usb 3-1: SerialNumber: syz
[  184.212635][ T5774] loop1: detected capacity change from 0 to 32768
[  184.230362][ T5774] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.546 (5774)
[  184.252461][ T5774] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  184.264786][ T5774] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  184.278829][ T5774] BTRFS warning (device loop1): excessive commit interval 2701
[  184.295530][ T5774] BTRFS info (device loop1): turning off barriers
[  184.302061][ T5774] BTRFS info (device loop1): force clearing of disk cache
[  184.315073][ T5774] BTRFS info (device loop1): doing ref verification
[  184.321802][ T5774] BTRFS info (device loop1): using free space tree
[  184.353376][ T4748] usb 3-1: USB disconnect, device number 15
[  184.428987][ T5774] BTRFS info (device loop1): enabling ssd optimizations
[  184.465180][ T5774] BTRFS info (device loop1): rebuilding free space tree
[  184.551418][ T5774] BTRFS info (device loop1): checking UUID tree
[  184.684099][ T3714] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  184.871461][   T46] team0 (unregistering): Port device team_slave_1 removed
[  185.062901][   T46] team0 (unregistering): Port device team_slave_0 removed
[  185.267219][ T5809] loop1: detected capacity change from 0 to 128
[  185.306799][ T5809] FAT-fs (loop1): Unrecognized mount option "0x0000000000000000" or missing value
[  185.374147][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.030751][ T5814] loop1: detected capacity change from 0 to 256
[  186.079197][ T5814] exfat: Unknown parameter '184467440737095516150x0000000000000003'
[  186.104543][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.200204][ T5820] loop2: detected capacity change from 0 to 512
[  186.269512][ T5809] loop1: detected capacity change from 0 to 512
[  186.369632][ T3646] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  186.438534][ T5823] program syz.4.558 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  186.814120][ T5834] xt_l2tp: v2 sid > 0xffff: 16777216
[  187.072833][ T5840] loop2: detected capacity change from 0 to 4096
[  187.155486][ T5840] ntfs: volume version 3.1.
[  188.393223][ T4748] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  188.429129][   T46] bond0 (unregistering): Released all slaves
[  188.781948][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.813444][ T4748] usb 3-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[  188.843150][ T4748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.853153][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.862114][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.885159][ T4748] usb 3-1: config 0 descriptor??
[  188.915862][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[  188.954325][ T4748] usb-storage 3-1:0.0: USB Mass Storage device detected
[  188.965627][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.994506][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.019007][ T4395] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.026242][ T4395] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.084484][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.113978][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.148101][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.155577][ T5851] netlink: 160 bytes leftover after parsing attributes in process `syz.2.567'.
[  189.182392][ T5851] netlink: 'syz.2.567': attribute type 1 has an invalid length.
[  189.203904][ T4404] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.211103][ T4404] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.219469][ T5895] loop4: detected capacity change from 0 to 1024
[  189.226217][ T5851] netlink: 'syz.2.567': attribute type 2 has an invalid length.
[  189.253378][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.284485][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.294746][ T5851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.567'.
[  189.339739][ T4748] usb 3-1: USB disconnect, device number 16
[  189.342781][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.370138][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.388554][ T5900] loop0: detected capacity change from 0 to 8
[  189.391081][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.408712][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.432833][ T5598] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.450898][ T5598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.465906][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.482664][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.492257][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.502125][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.511259][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.519543][ T5900] SQUASHFS error: Failed to read block 0x63a: -5
[  189.526868][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.547409][ T5900] SQUASHFS error: Unable to read metadata cache entry [638]
[  189.603402][ T5900] SQUASHFS error: Unable to read directory block [26067d:0]
[  189.625803][ T5903] tipc: Started in network mode
[  189.631268][ T5903] tipc: Node identity 4, cluster identity 4711
[  189.679542][ T5903] tipc: Node number set to 4
[  189.891745][ T5905] loop4: detected capacity change from 0 to 4096
[  189.963587][ T5905] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  190.021473][ T5905] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  190.102850][ T5911] loop1: detected capacity change from 0 to 4096
[  190.165102][ T5911] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  190.287770][ T5911] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  190.299309][   T95] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  190.340567][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.358572][ T3561] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  190.366222][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.377942][ T5911] ntfs3: loop1: Failed to load root.
[  190.421549][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.559238][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.583847][ T4752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.640503][ T5598] device veth0_vlan entered promiscuous mode
[  190.677985][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.706955][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.757147][ T5598] device veth1_vlan entered promiscuous mode
[  190.808511][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.819545][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.851130][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.906345][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.923867][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.940537][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.959747][ T5598] device veth0_macvtap entered promiscuous mode
[  191.007008][ T5598] device veth1_macvtap entered promiscuous mode
[  191.135224][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.143173][ T4392] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  191.147265][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.167593][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.180242][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.242172][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.294981][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.350638][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.404027][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.479871][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.525355][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.561915][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.664645][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.781875][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.784339][ T3557] Bluetooth: hci4: command 0x0406 tx timeout
[  191.835083][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.867577][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.899866][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.911072][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.921896][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.932802][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.946880][ T5598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.963992][ T5598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.055728][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.123023][ T4392] usb 5-1: Using ep0 maxpacket: 8
[  192.128452][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.148586][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  192.206080][ T5598] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  192.243366][ T4392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.257713][ T5598] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  192.263148][ T4392] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.279058][ T5598] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  192.293186][ T4392] usb 5-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00
[  192.318123][ T5598] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  192.322097][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.376546][ T4392] usb 5-1: config 0 descriptor??
[  192.583564][ T3725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.633951][ T3725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.707524][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.730647][   T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.887780][   T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.983716][ T4392] apple 0003:05AC:0267.0008: unknown main item tag 0x0
[  193.147948][ T4392] apple 0003:05AC:0267.0008: hidraw0: USB HID v0.00 Device [HID 05ac:0267] on usb-dummy_hcd.4-1/input0
[  193.468792][ T4392] usb 5-1: USB disconnect, device number 20
[  193.584433][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  193.612182][ T5964] input: syz1 as /devices/virtual/input/input7
[  194.284791][ T4395] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  194.355671][ T3553] Bluetooth: hci3: command 0x1003 tx timeout
[  194.364586][ T3557] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  194.517772][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.524414][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.560360][ T5993] syz.2.620 sent an empty control message without MSG_MORE.
[  194.643288][ T4395] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  194.669522][ T4395] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.683701][ T4404] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  194.853106][ T4395] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  194.866479][ T4395] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.883330][ T4395] usb 1-1: Product: syz
[  194.887548][ T4395] usb 1-1: Manufacturer: syz
[  194.892173][ T4395] usb 1-1: SerialNumber: syz
[  194.933135][ T4404] usb 5-1: Using ep0 maxpacket: 8
[  194.954144][ T4395] hub 1-1:1.0: bad descriptor, ignoring hub
[  194.961194][ T4395] hub: probe of 1-1:1.0 failed with error -5
[  195.053140][ T4404] usb 5-1: config 123 has an invalid descriptor of length 0, skipping remainder of the config
[  195.223127][ T4404] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=20.29
[  195.232474][ T4404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.241124][ T4404] usb 5-1: Product: syz
[  195.245663][ T4404] usb 5-1: Manufacturer: syz
[  195.250346][ T4404] usb 5-1: SerialNumber: syz
[  195.297961][ T4404] ttusb_dec_send_command: command bulk message failed: error -22
[  195.322504][ T4404] ttusb-dec: probe of 5-1:123.0 failed with error -22
[  195.423074][ T4748] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  195.427975][ T6003] loop1: detected capacity change from 0 to 4096
[  195.451312][ T6003] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  195.490715][ T6003] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  195.512637][ T3668] usb 5-1: USB disconnect, device number 21
[  195.642665][ T5761] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22.
[  195.650792][ T3714] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  195.713502][ T4748] usb 4-1: Using ep0 maxpacket: 8
[  195.833328][ T4748] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  196.053502][ T4395] cdc_ncm 1-1:1.0: bind() failure
[  196.075027][ T4395] hub: probe of 1-1:1.1 failed with error -71
[  196.103347][ T4748] usb 4-1: language id specifier not provided by device, defaulting to English
[  196.112833][ T4395] usbtest: probe of 1-1:1.1 failed with error -71
[  196.164103][ T4395] usb 1-1: USB disconnect, device number 16
[  196.433338][ T3954] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  196.823573][ T3954] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  196.847457][ T3954] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  196.866286][ T3954] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  196.880750][ T3954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.163351][ T4748] usb 4-1: New USB device found, idVendor=05ac, idProduct=0280, bcdDevice= 0.40
[  197.172686][ T4748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.225619][ T4748] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  197.578664][ T3954] usb 2-1: string descriptor 0 read error: -32
[  197.733216][ T6043] unsupported nla_type 40
[  197.891126][ T6039] loop4: detected capacity change from 0 to 40427
[  197.916644][ T6039] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  197.931891][ T6039] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  197.960177][ T3954] usb 4-1: USB disconnect, device number 9
[  198.008791][ T6039] F2FS-fs (loop4): Found nat_bits in checkpoint
[  198.107544][ T4748] usb 2-1: USB disconnect, device number 13
[  198.167434][ T6039] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  198.266417][ T6039] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  198.303099][ T6039] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  198.380659][ T4748] kernel write not supported for file /vcs (pid: 4748 comm: kworker/1:10)
[  198.512887][ T6067] syz.4.638: attempt to access beyond end of device
[  198.512887][ T6067] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  198.633455][ T6072] syz.4.638: attempt to access beyond end of device
[  198.633455][ T6072] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  200.478518][ T3954] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  200.542891][ T6116] xt_l2tp: v2 tid > 0xffff: 262144
[  200.629456][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  200.638307][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  200.682962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  200.692964][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  200.701142][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  200.709361][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  201.029223][ T3954] usb 1-1: New USB device found, idVendor=07ca, idProduct=a835, bcdDevice=c7.16
[  201.055049][ T3954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.106248][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'.
[  201.108943][ T3954] usb 1-1: config 0 descriptor??
[  201.206223][ T3954] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  201.224256][ T3954] dvb_usb_af9035: probe of 1-1:0.0 failed with error -22
[  201.409944][ T3954] usb 1-1: USB disconnect, device number 17
[  201.423221][ T3115] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  201.559183][ T6111] loop2: detected capacity change from 0 to 40427
[  201.594708][ T6111] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  201.597494][ T6132] loop4: detected capacity change from 0 to 256
[  201.602482][ T6111] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  201.703658][ T6132] FAT-fs (loop4): Directory bread(block 64) failed
[  201.721431][ T6111] F2FS-fs (loop2): Found nat_bits in checkpoint
[  201.723536][ T6132] FAT-fs (loop4): Directory bread(block 65) failed
[  201.742613][ T6132] FAT-fs (loop4): Directory bread(block 66) failed
[  201.762976][ T3115] usb 2-1: Using ep0 maxpacket: 16
[  201.773381][ T6132] FAT-fs (loop4): Directory bread(block 67) failed
[  201.780153][ T6132] FAT-fs (loop4): Directory bread(block 68) failed
[  201.790117][ T6132] FAT-fs (loop4): Directory bread(block 69) failed
[  201.796905][ T6111] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  201.807136][ T6132] FAT-fs (loop4): Directory bread(block 70) failed
[  201.814325][ T6132] FAT-fs (loop4): Directory bread(block 71) failed
[  201.838517][ T6132] FAT-fs (loop4): Directory bread(block 72) failed
[  201.848724][ T6111] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  201.860726][ T6111] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  201.869744][ T6132] FAT-fs (loop4): Directory bread(block 73) failed
[  201.992774][ T6111] syz.2.663: attempt to access beyond end of device
[  201.992774][ T6111] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  202.043273][ T3115] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  202.078355][ T3115] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.087530][ T6111] syz.2.663: attempt to access beyond end of device
[  202.087530][ T6111] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  202.111723][ T3115] usb 2-1: Product: syz
[  202.121932][ T3115] usb 2-1: Manufacturer: syz
[  202.132541][ T3115] usb 2-1: SerialNumber: syz
[  202.154325][ T3115] usb 2-1: config 0 descriptor??
[  202.397336][ T6150] xt_hashlimit: overflow, try lower: 0/0
[  202.456001][ T6139] loop3: detected capacity change from 0 to 32768
[  202.638456][ T3115] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  202.697933][ T3115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  202.763726][ T3115] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  202.784289][ T3115] usb 2-1: media controller created
[  202.862504][ T3115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.963032][   T22] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  202.974188][ T6160] tipc: Enabling of bearer <eth:pimreg0> rejected, failed to enable media
[  202.977885][ T3115] zl10353_read_register: readreg error (reg=127, ret==0)
[  203.008866][ T6162] xt_l2tp: v2 tid > 0xffff: 262144
[  203.017740][ T3115] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  203.036701][ T3115] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  203.067104][ T3115] usb 2-1: USB disconnect, device number 14
[  203.181955][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.686'.
[  203.208614][ T3115] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  203.353209][   T22] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.375973][   T22] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  203.393426][   T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  203.443034][   T22] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  203.452821][   T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  203.472651][ T6156] loop4: detected capacity change from 0 to 32768
[  203.489337][ T6156] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.683 (6156)
[  203.546354][ T6156] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.586624][ T6156] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  203.643244][   T22] usb 1-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=f6.b5
[  203.656127][ T6156] BTRFS info (device loop4): doing ref verification
[  203.668571][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.687323][ T6156] BTRFS info (device loop4): max_inline at 4096
[  203.697419][   T22] usb 1-1: Product: syz
[  203.706882][   T22] usb 1-1: Manufacturer: syz
[  203.711675][ T6156] BTRFS info (device loop4): disabling tree log
[  203.723105][   T22] usb 1-1: SerialNumber: syz
[  203.731932][ T6156] BTRFS info (device loop4): turning off barriers
[  203.746176][   T22] usb 1-1: config 0 descriptor??
[  203.764013][ T6156] BTRFS info (device loop4): setting nodatasum
[  203.810280][ T6156] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  203.823557][   T22] hdpvr 1-1:0.0: Could not find bulk-in endpoint
[  203.830077][   T22] hdpvr: probe of 1-1:0.0 failed with error -12
[  203.853647][ T6156] BTRFS info (device loop4): trying to use backup root at mount time
[  203.863763][ T6156] BTRFS info (device loop4): using free space tree
[  203.910196][ T6186] loop2: detected capacity change from 0 to 512
[  203.946940][ T6186] EXT4-fs (loop2): Test dummy encryption mode enabled
[  203.987304][ T6186] EXT4-fs error (device loop2): __ext4_iget:5044: inode #11: block 1: comm syz.2.695: invalid block
[  204.011162][ T6194] xt_l2tp: v2 tid > 0xffff: 262144
[  204.029352][ T3954] usb 1-1: USB disconnect, device number 18
[  204.035868][ T6186] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.695: couldn't read orphan inode 11 (err -117)
[  204.104045][ T6186] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  204.127188][ T6186] EXT4-fs error (device loop2): htree_dirblock_to_tree:1082: inode #2: comm syz.2.695: Directory hole found for htree leaf block
[  204.222071][ T3561] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  204.269044][ T3776] EXT4-fs (loop2): unmounting filesystem.
[  204.814392][ T3115] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  205.123026][ T3115] usb 4-1: Using ep0 maxpacket: 16
[  205.406282][ T3115] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  205.443581][ T3115] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.451626][ T3115] usb 4-1: Product: syz
[  205.462989][ T3115] usb 4-1: Manufacturer: syz
[  205.467788][ T3115] usb 4-1: SerialNumber: syz
[  205.488350][ T3115] usb 4-1: config 0 descriptor??
[  205.543158][  T152] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  205.798669][  T152] usb 3-1: Using ep0 maxpacket: 16
[  205.846472][ T6243] loop4: detected capacity change from 0 to 40427
[  205.856233][ T6243] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  205.868737][ T6267] loop1: detected capacity change from 0 to 256
[  205.870357][ T6243] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  205.905570][ T6267] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  205.942073][ T6243] F2FS-fs (loop4): Found nat_bits in checkpoint
[  205.953500][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  205.973018][  T152] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  205.973363][ T3115] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  205.996316][  T152] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  206.008449][  T152] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.019414][  T152] usb 3-1: config 0 descriptor??
[  206.028378][ T3115] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  206.053484][ T6243] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  206.066528][ T3115] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  206.076928][ T3115] usb 4-1: media controller created
[  206.112593][ T3115] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  206.122078][ T6243] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  206.133873][ T6243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  206.190879][ T6243] syz.4.711: attempt to access beyond end of device
[  206.190879][ T6243] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  206.204202][ T3115] zl10353_read_register: readreg error (reg=127, ret==0)
[  206.212041][ T3115] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  206.231215][ T3115] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  206.262988][ T6243] syz.4.711: attempt to access beyond end of device
[  206.262988][ T6243] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.266093][ T3115] usb 4-1: USB disconnect, device number 10
[  206.317101][ T3115] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  206.403048][ T3598] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  206.479454][ T3600] kernel write not supported for file /sg0 (pid: 3600 comm: kworker/1:6)
[  206.574335][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.593729][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.617050][  T152] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1
[  206.641182][  T152] hid-generic 0003:0158:0100.0009: unexpected long global item
[  206.657996][  T152] hid-generic: probe of 0003:0158:0100.0009 failed with error -22
[  206.706044][ T3563] Bluetooth: hci0: unexpected event for opcode 0x203c
[  206.813334][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.819958][ T3668] usb 3-1: USB disconnect, device number 17
[  206.832418][ T3598] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.833246][ T3557] Bluetooth: hci2: command 0x0406 tx timeout
[  206.873841][ T3598] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00
[  206.923009][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.954147][ T3598] usb 2-1: config 0 descriptor??
[  207.125460][ T6296] loop0: detected capacity change from 0 to 256
[  207.163765][ T6296] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  207.425705][ T3598] apple 0003:05AC:0262.000A: unbalanced delimiter at end of report description
[  207.443599][ T3598] apple 0003:05AC:0262.000A: parse failed
[  207.460277][ T3598] apple: probe of 0003:05AC:0262.000A failed with error -22
[  207.593153][ T3668] kernel write not supported for file /sg0 (pid: 3668 comm: kworker/0:8)
[  207.627355][ T3598] usb 2-1: USB disconnect, device number 15
[  207.644337][ T3553] Bluetooth: hci0: unexpected event for opcode 0x203c
[  208.003882][ T6322] overlayfs: conflicting lowerdir path
[  208.118243][ T6328] loop3: detected capacity change from 0 to 256
[  208.141753][ T6328] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  208.390529][ T6337] ax25_connect(): syz.3.750 uses autobind, please contact jreuter@yaina.de
[  208.500833][ T3600] kernel write not supported for file /sg0 (pid: 3600 comm: kworker/1:6)
[  208.554748][ T6342] loop3: detected capacity change from 0 to 64
[  208.593149][  T152] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  208.647794][ T6342] Trying to free block not in datazone
[  208.843127][  T152] usb 2-1: Using ep0 maxpacket: 32
[  208.916430][ T6355] overlayfs: conflicting lowerdir path
[  208.973303][  T152] usb 2-1: config 0 has an invalid interface number: 103 but max is 1
[  208.983038][  T152] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  208.993594][  T152] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 2
[  209.002806][  T152] usb 2-1: config 0 has no interface number 2
[  209.027771][  T152] usb 2-1: config 0 interface 103 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  209.062798][  T152] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  209.293962][  T152] usb 2-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c
[  209.304000][  T152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.312171][  T152] usb 2-1: Product: syz
[  209.367969][  T152] usb 2-1: Manufacturer: syz
[  209.461837][  T152] usb 2-1: SerialNumber: syz
[  209.608075][ T6366] loop3: detected capacity change from 0 to 256
[  209.635145][  T152] usb 2-1: config 0 descriptor??
[  209.744636][ T3598] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  209.859890][ T6368] ax25_connect(): syz.2.762 uses autobind, please contact jreuter@yaina.de
[  209.865132][ T6366] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  210.023074][  T152] usb 2-1: Could not set interface, error -71
[  210.056689][  T152] usb 2-1: USB disconnect, device number 16
[  210.323351][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  210.340073][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  210.392126][ T6381] loop4: detected capacity change from 0 to 64
[  210.392145][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  210.446387][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  210.468274][ T6381] Trying to free block not in datazone
[  210.573400][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  210.613249][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  210.650760][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  210.714865][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  210.801731][ T6394] loop1: detected capacity change from 0 to 256
[  210.844998][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  210.856884][ T6394] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  210.881790][ T6394] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  210.893134][ T3598] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  210.914106][ T3598] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  210.954721][ T3598] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  211.163588][ T3598] usb 1-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=4e.63
[  211.181701][ T3714] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  211.192983][ T3598] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.216550][ T3714] exFAT-fs (loop1): Filesystem has been set read-only
[  211.227465][ T3598] usb 1-1: Product: syz
[  211.241487][ T3598] usb 1-1: Manufacturer: syz
[  211.246907][ T3714] exFAT-fs (loop1): error, invalid access to FAT free cluster (entry 0x00000005)
[  211.256178][ T3598] usb 1-1: SerialNumber: syz
[  211.271105][ T3598] usb 1-1: config 0 descriptor??
[  211.329920][ T3598] ti_usb_3410_5052 1-1:0.0: TI USB 3410 1 port adapter converter detected
[  211.349088][ T3598] ti_usb_3410_5052 1-1:0.0: missing endpoints
[  211.603415][ T3598] usb 1-1: USB disconnect, device number 19
[  211.635807][ T6411] netlink: 'syz.3.780': attribute type 1 has an invalid length.
[  211.948767][ T5761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.062725][ T5761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.181599][ T5761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.335209][ T5761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.574123][ T3557] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  212.585648][ T3557] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  212.596305][ T3557] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  212.606836][ T3557] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  212.615853][ T3557] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  212.625270][ T3557] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  213.436925][ T6443] fscrypt (sda1, inode 1985): Unsupported encryption flags (0x2e)
[  213.451337][ T6438] netlink: 'syz.3.790': attribute type 2 has an invalid length.
[  213.685471][ T5761] tipc: Left network mode
[  213.926702][ T6455] loop4: detected capacity change from 0 to 2048
[  214.013908][ T6455] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  214.285746][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  214.357752][ T6433] chnl_net:caif_netlink_parms(): no params data found
[  214.428327][ T6442] loop0: detected capacity change from 0 to 32768
[  214.451880][ T6442] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz.0.792 (6442)
[  214.481856][ T6442] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  214.492696][ T6442] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  214.506141][ T6442] BTRFS info (device loop0): enabling auto defrag
[  214.512711][ T6442] BTRFS info (device loop0): using free space tree
[  214.544227][ T6476] bond_slave_1: Device is already in use.
[  214.673262][ T3563] Bluetooth: hci2: command tx timeout
[  214.695529][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state
[  214.714952][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.724295][ T6433] device bridge_slave_0 entered promiscuous mode
[  214.844668][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state
[  214.855156][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.898245][ T6433] device bridge_slave_1 entered promiscuous mode
[  215.050128][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.064072][ T6512] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  215.116470][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.117212][ T6512] overlayfs: failed to set xattr on upper
[  215.174749][ T6512] overlayfs: ...falling back to index=off,metacopy=off.
[  215.194587][ T6512] overlayfs: failed to resolve './file0': -2
[  215.252585][ T6433] team0: Port device team_slave_0 added
[  215.317210][ T3766] BTRFS info (device loop0): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  215.359888][ T6433] team0: Port device team_slave_1 added
[  215.926097][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.938168][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.007340][ T6535] loop3: detected capacity change from 0 to 2048
[  216.010900][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.075401][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  216.119715][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  216.134265][ T6535] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002]
[  216.149814][ T6535] System zones: 0-7
[  216.155332][ T6533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  216.159613][ T6543] loop0: detected capacity change from 0 to 512
[  216.174499][ T6543] EXT4-fs: Ignoring removed mblk_io_submit option
[  216.196296][ T6535] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  216.238262][ T6533] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  216.298235][ T6540] loop2: detected capacity change from 0 to 8192
[  216.301099][ T6543] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  216.342155][ T6540] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  216.396679][ T6532] syz.3.813 uses obsolete (PF_INET,SOCK_PACKET)
[  216.419503][ T6543] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  216.439329][ T6543] System zones: 1-12
[  216.456105][ T6543] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.817: corrupted in-inode xattr
[  216.480118][ T6543] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.817: couldn't read orphan inode 15 (err -117)
[  216.498344][ T6543] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  216.600059][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1
[  216.612285][ T6543] EXT4-fs warning (device loop0): dx_probe:832: inode #2: comm syz.0.817: Unrecognised inode hash code 4
[  216.613156][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.671654][ T6543] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.817: Corrupt directory, running e2fsck is recommended
[  216.682349][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  216.755516][ T3563] Bluetooth: hci2: command tx timeout
[  216.859730][ T5598] EXT4-fs (loop3): unmounting filesystem.
[  216.959662][ T3766] EXT4-fs (loop0): unmounting filesystem.
[  217.152482][   T26] audit: type=1800 audit(1719870426.437:37): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.819" name="bus" dev="sda1" ino=1989 res=0 errno=0
[  217.240074][   T26] audit: type=1800 audit(1719870426.477:38): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.819" name="bus" dev="sda1" ino=1989 res=0 errno=0
[  217.327242][ T6433] device hsr_slave_0 entered promiscuous mode
[  217.347683][ T6557] loop3: detected capacity change from 0 to 4096
[  217.370271][ T6433] device hsr_slave_1 entered promiscuous mode
[  217.412728][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.450231][ T6433] Cannot create hsr debugfs directory
[  217.491690][ T5761] device bridge_slave_1 left promiscuous mode
[  217.530991][ T5761] bridge1: port 1(bridge_slave_1) entered disabled state
[  217.702766][ T5761] device hsr_slave_0 left promiscuous mode
[  217.719388][ T5761] device hsr_slave_1 left promiscuous mode
[  217.729308][ T6578] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  217.761956][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.775343][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.813885][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.821381][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.868393][ T6548] loop4: detected capacity change from 0 to 32768
[  217.891471][ T5761] device bridge_slave_0 left promiscuous mode
[  217.906091][ T6548] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop4 scanned by syz.4.818 (6548)
[  217.918872][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.957712][ T6548] BTRFS info (device loop4): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  217.994156][ T6548] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  218.030704][ T6548] BTRFS info (device loop4): enabling auto defrag
[  218.052561][ T6548] BTRFS info (device loop4): using free space tree
[  218.063598][ T5761] device veth1_macvtap left promiscuous mode
[  218.072161][ T5761] device veth0_macvtap left promiscuous mode
[  218.094216][ T6557] loop3: detected capacity change from 4096 to 4071
[  218.102571][ T5761] device veth1_vlan left promiscuous mode
[  218.144361][ T5761] device veth0_vlan left promiscuous mode
[  218.209121][ T6590] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=13)
[  218.301834][ T6590] syz.3.820: attempt to access beyond end of device
[  218.301834][ T6590] loop3: rw=2049, sector=4088, nr_sectors = 2 limit=4071
[  218.325954][ T6590] Buffer I/O error on dev loop3, logical block 2044, lost sync page write
[  218.374234][ T6590] Remounting filesystem read-only
[  218.379778][ T6590] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=13)
[  218.393661][ T6590] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=13)
[  218.461716][ T6590] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=13)
[  218.493272][ T6590] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=13)
[  218.508052][   T26] audit: type=1800 audit(1719870427.797:39): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.820" name="file0" dev="loop3" ino=13 res=0 errno=0
[  218.509771][ T5761] bond1 (unregistering): Released all slaves
[  218.546087][ T3561] BTRFS info (device loop4): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  218.590783][ T6590] syz.3.820 (6590) used greatest stack depth: 18936 bytes left
[  218.731293][ T5598] NILFS (loop3): discard dirty page: offset=0, ino=6
[  218.745338][ T5598] NILFS (loop3): discard dirty block: blocknr=34, size=1024
[  218.755432][ T5598] NILFS (loop3): discard dirty block: blocknr=35, size=1024
[  218.793804][ T5598] NILFS (loop3): discard dirty block: blocknr=36, size=1024
[  218.808702][ T5598] NILFS (loop3): discard dirty block: blocknr=37, size=1024
[  218.816669][ T5598] NILFS (loop3): discard dirty page: offset=4096, ino=6
[  218.823899][ T5598] NILFS (loop3): discard dirty block: blocknr=38, size=1024
[  218.843158][ T3563] Bluetooth: hci2: command tx timeout
[  218.851298][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  218.889457][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  218.903891][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  218.949937][ T5598] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer
[  218.994224][ T5598] NILFS (loop3): discard dirty page: offset=0, ino=12
[  219.001552][ T5598] NILFS (loop3): discard dirty block: blocknr=17, size=1024
[  219.043048][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  219.064260][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  219.073741][ T5598] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024
[  219.352232][ T6629] loop4: detected capacity change from 0 to 2048
[  219.690503][ T6636] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  219.875604][ T6629] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002]
[  219.884819][ T6629] System zones: 0-7
[  219.900681][ T6629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  220.086871][ T6640] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.830: bg 0: block 234: padding at end of block bitmap is not set
[  220.131622][ T6640] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  220.169191][ T6640] EXT4-fs (loop4): This should not happen!! Data will be lost
[  220.169191][ T6640] 
[  220.181293][ T6640] EXT4-fs (loop4): Total free blocks count 0
[  220.189599][ T6640] EXT4-fs (loop4): Free/Dirty block details
[  220.207609][ T6640] EXT4-fs (loop4): free_blocks=0
[  220.304552][ T6640] EXT4-fs (loop4): dirty_blocks=48
[  220.309883][ T6640] EXT4-fs (loop4): Block reservation details
[  220.336693][ T6640] EXT4-fs (loop4): i_reserved_data_blocks=3
[  220.724524][ T5761] team0 (unregistering): Port device team_slave_1 removed
[  220.844583][ T5761] team0 (unregistering): Port device team_slave_0 removed
[  220.923057][ T3553] Bluetooth: hci2: command tx timeout
[  220.961322][ T5761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.120910][ T5761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.294276][ T6650] loop2: detected capacity change from 0 to 32768
[  221.318230][ T6650] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.839 (6650)
[  221.382367][ T6650] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  221.402311][ T6650] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  221.421220][ T6650] BTRFS info (device loop2): enabling auto defrag
[  221.435997][ T6650] BTRFS info (device loop2): using free space tree
[  221.442680][ T6654] 9pnet: Could not find request transport: u
[  221.777043][ T3776] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  222.465142][ T5761] bond0 (unregistering): Released all slaves
[  222.729931][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  222.993482][ T3563] Bluetooth: hci2: command tx timeout
[  223.030216][ T6697] loop3: detected capacity change from 0 to 512
[  223.106161][ T6697] EXT4-fs: Ignoring removed mblk_io_submit option
[  223.188332][ T6697] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  223.191799][ T3563] Bluetooth: hci4: unexpected event for opcode 0x201c
[  223.296690][ T6697] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  223.349475][ T6697] System zones: 1-12
[  223.418822][ T6697] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.851: corrupted in-inode xattr
[  223.463677][ T6697] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.851: couldn't read orphan inode 15 (err -117)
[  223.498069][ T6697] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  223.615224][ T6697] EXT4-fs warning (device loop3): dx_probe:832: inode #2: comm syz.3.851: Unrecognised inode hash code 4
[  223.643054][ T6697] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.851: Corrupt directory, running e2fsck is recommended
[  223.831231][ T5598] EXT4-fs (loop3): unmounting filesystem.
[  224.239458][ T6693] loop0: detected capacity change from 0 to 32768
[  224.306428][ T6693] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.850 (6693)
[  224.370351][ T6693] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  224.414216][ T6693] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  224.454236][ T6693] BTRFS info (device loop0): force zlib compression, level 3
[  224.461778][ T6693] BTRFS info (device loop0): force clearing of disk cache
[  224.508330][ T6433] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  224.521078][ T6693] BTRFS info (device loop0): setting nodatasum
[  224.549052][ T6693] BTRFS info (device loop0): allowing degraded mounts
[  224.552487][ T6433] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  224.575713][ T6693] BTRFS info (device loop0): enabling disk space caching
[  224.610085][ T6693] BTRFS info (device loop0): disk space caching is enabled
[  224.662358][ T6737] netlink: 120 bytes leftover after parsing attributes in process `syz.2.862'.
[  224.703411][ T6737] tipc: Started in network mode
[  224.727863][ T6737] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711
[  224.746944][ T6737] tipc: Enabled bearer <eth:bridge0>, priority 10
[  224.773396][ T6433] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  224.806324][ T6433] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  225.085012][ T6693] BTRFS info (device loop0): rebuilding free space tree
[  225.138057][ T6693] BTRFS info (device loop0): disabling free space tree
[  225.155394][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0
[  225.163589][ T6693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  225.193779][ T6693] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  225.244269][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  225.253762][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  225.290124][ T6433] 8021q: adding VLAN 0 to HW filter on device team0
[  225.324663][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  225.334319][ T3600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  225.342973][ T3600] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.350106][ T3600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.414863][ T6760] loop2: detected capacity change from 0 to 8192
[  225.459325][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  225.468862][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  225.493519][ T6693] BTRFS info (device loop0): balance: start -s
[  225.518115][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  225.575584][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.582844][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.640726][ T6693] BTRFS info (device loop0): relocating block group 1048576 flags system
[  225.654798][   T26] audit: type=1326 audit(1719870434.937:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.869" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5152975b99 code=0x0
[  225.682595][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  225.756999][ T3603] tipc: Node number set to 10922666
[  225.767371][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  225.777079][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  225.815171][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  225.843870][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  225.865224][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  225.918273][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  225.937560][ T6693] BTRFS info (device loop0): balance: ended with status: 0
[  225.946277][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  225.981622][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.006602][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.050279][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.092360][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  226.168534][ T3766] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  227.014153][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  227.021753][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  227.065275][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.172808][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.206894][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  227.218766][ T6807] loop4: detected capacity change from 0 to 2048
[  227.277131][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  227.304601][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  227.337233][ T6433] device veth0_vlan entered promiscuous mode
[  227.356870][ T6807] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c018, mo2=0002]
[  227.365361][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  227.374796][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  227.399027][ T6433] device veth1_vlan entered promiscuous mode
[  227.435851][ T6807] System zones: 0-7
[  227.467411][ T6807] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  227.606621][ T6811] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.875: bg 0: block 234: padding at end of block bitmap is not set
[  227.636006][ T6433] device veth0_macvtap entered promiscuous mode
[  227.654389][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  227.671111][ T6811] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28
[  227.675031][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  227.724388][ T6433] device veth1_macvtap entered promiscuous mode
[  227.745207][ T6811] EXT4-fs (loop4): This should not happen!! Data will be lost
[  227.745207][ T6811] 
[  227.747878][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  227.778650][ T6811] EXT4-fs (loop4): Total free blocks count 0
[  227.811879][ T6818] loop3: detected capacity change from 0 to 4096
[  227.821515][ T6811] EXT4-fs (loop4): Free/Dirty block details
[  227.838509][ T6811] EXT4-fs (loop4): free_blocks=0
[  227.847391][ T6811] EXT4-fs (loop4): dirty_blocks=48
[  227.853269][ T6811] EXT4-fs (loop4): Block reservation details
[  227.872970][ T6811] EXT4-fs (loop4): i_reserved_data_blocks=3
[  227.905920][ T6818] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  227.954799][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  228.005776][ T6795] loop2: detected capacity change from 0 to 32768
[  228.035101][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.084294][   T26] audit: type=1800 audit(1719870437.377:41): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.877" name="file1" dev="loop3" ino=30 res=0 errno=0
[  228.117706][ T6830] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  228.153038][ T6830] overlayfs: failed to set xattr on upper
[  228.160461][ T6830] overlayfs: ...falling back to index=off,metacopy=off.
[  228.172326][ T6795] XFS (loop2): Mounting V5 Filesystem
[  228.183044][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.209401][ T6830] overlayfs: failed to resolve './file0': -2
[  228.214142][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.226597][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.239064][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.249979][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.260069][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.270826][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.301365][ T6795] XFS (loop2): Ending clean mount
[  228.311025][ T6795] XFS (loop2): Quotacheck needed: Please wait.
[  228.324645][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.389291][ T6795] XFS (loop2): Quotacheck: Done.
[  228.413329][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  228.453964][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  228.542409][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.572968][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.620128][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.650043][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.665998][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.681565][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.703805][ T6433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.721426][ T6433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.733314][ T3776] XFS (loop2): Unmounting Filesystem
[  228.739610][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.805976][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  228.825486][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  228.848152][ T6433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  228.872141][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  228.903088][ T6433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  228.942995][ T6433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  228.951761][ T6433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.249632][   T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.276665][   T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.350279][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.391811][   T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.430147][   T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.462711][ T3115] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.260558][ T6902] xt_time: unknown flags 0xa0
[  230.305578][ T6901] device syzkaller1 entered promiscuous mode
[  231.851798][ T6960] device syzkaller1 entered promiscuous mode
[  232.517345][ T6937] loop4: detected capacity change from 0 to 32768
[  232.650078][ T6937] find_entry called with index >= next_index
[  232.668590][ T6937] find_entry called with index >= next_index
[  232.693570][ T6981] loop0: detected capacity change from 0 to 4096
[  232.718051][ T6937] find_entry called with index >= next_index
[  232.727029][ T6981] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  232.781004][ T6984] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 1
[  232.781004][ T6984] 
[  232.848515][ T6984] ERROR: (device loop4): remounting filesystem as read-only
[  232.873097][ T6984] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 3
[  232.873097][ T6984] 
[  232.894949][ T6984] ERROR: (device loop4): jfs_readdir: JFS:Dtree error: ino = 2, bn=48, index = 4
[  232.894949][ T6984] 
[  232.951537][   T26] audit: type=1800 audit(1719870442.237:42): pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name="bus" dev="loop0" ino=33 res=0 errno=0
[  233.004307][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.922'.
[  233.359693][ T6973] loop1: detected capacity change from 0 to 32768
[  233.400222][ T6973] XFS: noikeep mount option is deprecated.
[  233.540927][ T6973] XFS (loop1): Mounting V5 Filesystem
[  233.578366][ T7003] loop3: detected capacity change from 0 to 1024
[  233.601328][ T7003] EXT4-fs: Ignoring removed orlov option
[  233.625120][ T7003] EXT4-fs (loop3): Test dummy encryption mode enabled
[  233.655086][ T7003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  233.677345][ T6973] XFS (loop1): Ending clean mount
[  233.737284][ T6973] XFS (loop1): Quotacheck needed: Please wait.
[  233.821732][ T5598] EXT4-fs (loop3): unmounting filesystem.
[  233.887511][ T6973] XFS (loop1): Quotacheck: Done.
[  234.023698][ T6433] XFS (loop1): Unmounting Filesystem
[  234.088233][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'.
[  234.162228][ T7030] loop2: detected capacity change from 0 to 512
[  234.258045][ T7030] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  234.283279][ T7030] ext4 filesystem being mounted at /root/syzkaller.3YYaGE/191/file0 supports timestamps until 2038 (0x7fffffff)
[  234.369380][ T7034] loop4: detected capacity change from 0 to 256
[  234.376775][ T7030] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.937: corrupted inode contents
[  234.463223][ T7030] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz.2.937: mark_inode_dirty error
[  234.510110][ T7030] EXT4-fs error (device loop2): ext4_do_update_inode:5210: inode #2: comm syz.2.937: corrupted inode contents
[  234.572284][ T7030] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.937: mark_inode_dirty error
[  234.773893][ T3776] EXT4-fs (loop2): unmounting filesystem.
[  235.019291][ T7024] loop3: detected capacity change from 0 to 32768
[  235.068331][ T7024] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.934 (7024)
[  235.163557][ T7024] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.180393][ T7024] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  235.209816][ T7024] BTRFS info (device loop3): use zlib compression, level 3
[  235.259398][ T7024] BTRFS info (device loop3): using free space tree
[  235.318871][ T7029] loop0: detected capacity change from 0 to 32768
[  235.377760][ T7029] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt
[  235.377760][ T7029] 
[  235.388890][ T7029] xtLookup: xtSearch returned -5
[  235.394431][ T7029] read_mapping_page failed!
[  235.419470][ T7029] jfs_mount: diMount(ipaimap) failed w/rc = -5
[  235.478659][ T7024] BTRFS info (device loop3): enabling ssd optimizations
[  235.513676][ T7029] Mount JFS Failure: -5
[  235.538338][ T7029] jfs_mount failed w/return code = -5
[  235.775840][ T5598] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.288816][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[  236.725386][ T7110] loop4: detected capacity change from 0 to 2048
[  236.809794][ T7110] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  236.829608][ T7110] ext4 filesystem being mounted at /root/syzkaller.pMu96o/218/file0 supports timestamps until 2038 (0x7fffffff)
[  236.889770][ T7110] fs-verity: sha512 using implementation "sha512-avx2"
[  237.215926][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  237.421387][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'.
[  237.860662][ T7148] netlink: 'syz.1.969': attribute type 12 has an invalid length.
[  238.104239][ T7114] loop3: detected capacity change from 0 to 32768
[  238.183244][ T7090] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  238.257585][ T7114] XFS (loop3): Mounting V5 Filesystem
[  238.264013][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'.
[  238.389568][ T7114] XFS (loop3): Ending clean mount
[  238.504207][ T5598] XFS (loop3): Unmounting Filesystem
[  238.624151][ T7090] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.635238][ T7090] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.775133][ T7180] 9pnet_rdma: rdma_create_trans (7180): problem binding to privport: 13
[  238.823357][ T7090] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  238.838699][ T7090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.860505][ T7090] usb 5-1: Product: syz
[  238.892246][ T7090] usb 5-1: Manufacturer: syz
[  238.894724][ T7162] loop1: detected capacity change from 0 to 32768
[  238.908646][ T7090] usb 5-1: SerialNumber: syz
[  239.016548][ T7182] netlink: 'syz.2.982': attribute type 27 has an invalid length.
[  239.643445][ T7090] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  239.650219][ T7090] cdc_ncm 5-1:1.0: bind() failure
[  239.660084][ T7204] loop3: detected capacity change from 0 to 64
[  239.674404][   T26] audit: type=1800 audit(1719870448.967:43): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.990" name="bus" dev="sda1" ino=1978 res=0 errno=0
[  239.679876][ T7090] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  239.736568][ T7090] cdc_ncm 5-1:1.1: bind() failure
[  239.835188][ T7209] loop2: detected capacity change from 0 to 2048
[  239.925766][ T7209] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  239.943321][ T7209] ext4 filesystem being mounted at /root/syzkaller.3YYaGE/202/file0 supports timestamps until 2038 (0x7fffffff)
[  239.956195][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.995'.
[  240.008482][ T7216] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  240.248095][ T3776] EXT4-fs (loop2): unmounting filesystem.
[  240.280717][ T7229] syz.1.998[7229] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  240.280825][ T7229] syz.1.998[7229] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  240.473878][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  240.942776][ T7254] 9pnet_fd: Insufficient options for proto=fd
[  241.143705][ T7252] loop2: detected capacity change from 0 to 1024
[  241.644679][ T5062] usb 5-1: USB disconnect, device number 22
[  241.661403][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1006'.
[  241.734097][ T7256] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  242.051749][ T7267] mmap: syz.1.1012 (7267): VmData 37474304 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  242.808984][ T7260] loop4: detected capacity change from 0 to 4096
[  242.913758][ T5062] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  243.084001][   T26] audit: type=1800 audit(1719870452.377:44): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1008" name="bus" dev="loop4" ino=33 res=0 errno=0
[  243.155678][   T26] audit: type=1800 audit(1719870452.407:45): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1008" name="bus" dev="loop4" ino=33 res=0 errno=0
[  243.366315][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.743822][ T5062] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.786994][ T5062] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  243.806799][ T5062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.825251][ T7292] loop3: detected capacity change from 0 to 512
[  243.850704][ T5062] usb 3-1: config 0 descriptor??
[  243.943822][ T7292] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  243.973226][ T7292] ext4 filesystem being mounted at /root/syzkaller.IVusiq/85/file0 supports timestamps until 2038 (0x7fffffff)
[  244.241307][ T4392] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  244.279167][ T7304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  244.373625][ T7307] 9pnet_fd: Insufficient options for proto=fd
[  244.603559][   T26] audit: type=1800 audit(1719870453.887:46): pid=7292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1020" name="file1" dev="loop3" ino=15 res=0 errno=0
[  244.644390][ T4392] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.753850][ T4392] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.871718][ T7292] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  245.033083][ T7292] EXT4-fs (loop3): This should not happen!! Data will be lost
[  245.033083][ T7292] 
[  245.096156][ T7292] EXT4-fs (loop3): Total free blocks count 0
[  245.123394][   T26] audit: type=1804 audit(1719870454.407:47): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1020" name="/root/syzkaller.IVusiq/85/file0/file1" dev="loop3" ino=15 res=1 errno=0
[  245.154693][ T7292] EXT4-fs (loop3): Free/Dirty block details
[  245.177749][ T7292] EXT4-fs (loop3): free_blocks=65281
[  245.189580][ T4392] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  245.208958][ T7292] EXT4-fs (loop3): dirty_blocks=23
[  245.214880][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  245.239537][ T7292] EXT4-fs (loop3): Block reservation details
[  245.246405][ T4392] usb 2-1: Product: syz
[  245.263039][ T4392] usb 2-1: Manufacturer: syz
[  245.267699][ T4392] usb 2-1: SerialNumber: syz
[  245.323857][ T7292] EXT4-fs (loop3): i_reserved_data_blocks=23
[  245.409772][ T5598] EXT4-fs (loop3): unmounting filesystem.
[  245.593142][ T5062] uclogic 0003:256C:006D.000B: failed retrieving Huion firmware version: -71
[  245.608310][ T5062] uclogic 0003:256C:006D.000B: failed probing parameters: -71
[  245.619989][ T5062] uclogic: probe of 0003:256C:006D.000B failed with error -71
[  245.651178][ T5062] usb 3-1: USB disconnect, device number 18
[  246.053275][ T4392] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  246.059430][ T4392] cdc_ncm 2-1:1.0: bind() failure
[  246.081812][ T4392] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  246.089515][ T4392] cdc_ncm 2-1:1.1: bind() failure
[  246.232537][ T7089] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  246.456049][ T7338] loop3: detected capacity change from 0 to 2048
[  246.517424][ T7346] 9pnet_fd: Insufficient options for proto=fd
[  246.653789][ T7089] usb 5-1: Using ep0 maxpacket: 8
[  246.793485][ T7089] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  246.875942][ T7089] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  247.007778][ T7089] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.191833][ T7089] usb 5-1: config 0 descriptor??
[  247.237476][ T7343] loop0: detected capacity change from 0 to 4096
[  247.477417][ T7089] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  247.610306][   T26] audit: type=1800 audit(1719870456.897:48): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="bus" dev="loop0" ino=33 res=0 errno=0
[  247.683861][   T26] audit: type=1800 audit(1719870456.927:49): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1037" name="bus" dev="loop0" ino=33 res=0 errno=0
[  248.052464][ T7367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1043'.
[  248.225442][ T4398] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  248.239254][ T7089] usb 2-1: USB disconnect, device number 17
[  248.306961][ T5062] usb 5-1: USB disconnect, device number 23
[  248.325091][ T5062] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected
[  248.403976][ T7376] loop0: detected capacity change from 0 to 2048
[  248.583041][ T4398] usb 3-1: Using ep0 maxpacket: 16
[  248.667508][   T26] audit: type=1800 audit(1719870457.947:50): pid=7385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1049" name=".pending_reads" dev="sda1" ino=1997 res=0 errno=0
[  249.443137][ T4398] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.472800][ T4398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  249.490755][ T7396] ERROR: device name not specified.
[  249.507456][ T4398] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  249.517450][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1056'.
[  249.552762][ T4398] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  249.696430][ T7404] input: syz0 as /devices/virtual/input/input9
[  249.753598][ T4398] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  249.775870][ T4398] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  249.814189][ T4398] usb 3-1: Product: syz
[  249.818418][ T4398] usb 3-1: Manufacturer: syz
[  249.857472][ T4398] usb 3-1: SerialNumber: syz
[  249.875359][ T4398] usb 3-1: config 0 descriptor??
[  249.914641][ T4398] usb 3-1: NFC: intf ffff8880607ef000 id ffffffff8d9ced40
[  250.118142][ T4398] usb 3-1: USB disconnect, device number 19
[  250.133028][ T4392] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  250.372980][ T4392] usb 2-1: Using ep0 maxpacket: 8
[  250.493078][ T4392] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  250.513026][ T4392] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  250.532378][ T4392] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.561898][ T7416] loop4: detected capacity change from 0 to 65536
[  250.573547][ T4392] usb 2-1: config 0 descriptor??
[  250.644437][ T7416] XFS (loop4): Mounting V5 Filesystem
[  250.776138][ T7416] XFS (loop4): Ending clean mount
[  250.835698][ T4392] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  250.864962][ T3561] XFS (loop4): Unmounting Filesystem
[  251.099459][ T7435] loop2: detected capacity change from 0 to 2048
[  251.336606][ T7444] loop0: detected capacity change from 0 to 256
[  251.403275][ T7446] loop3: detected capacity change from 0 to 256
[  251.449160][ T3646] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  251.457446][ T7446] FAT-fs (loop3): Directory bread(block 64) failed
[  251.498292][ T7446] FAT-fs (loop3): Directory bread(block 65) failed
[  251.532497][ T7446] FAT-fs (loop3): Directory bread(block 66) failed
[  251.558797][ T7446] FAT-fs (loop3): Directory bread(block 67) failed
[  251.578747][ T7446] FAT-fs (loop3): Directory bread(block 68) failed
[  251.599037][ T7446] FAT-fs (loop3): Directory bread(block 69) failed
[  251.611307][ T7446] FAT-fs (loop3): Directory bread(block 70) failed
[  251.620309][ T7446] FAT-fs (loop3): Directory bread(block 71) failed
[  251.663714][ T7089] usb 2-1: USB disconnect, device number 18
[  251.673726][ T7089] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected
[  251.693275][ T7446] FAT-fs (loop3): Directory bread(block 72) failed
[  251.723104][ T7446] FAT-fs (loop3): Directory bread(block 73) failed
[  252.279085][ T7460] loop0: detected capacity change from 0 to 4096
[  252.438743][   T26] audit: type=1800 audit(1719870461.727:51): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1080" name="bus" dev="loop0" ino=33 res=0 errno=0
[  252.533249][   T26] audit: type=1800 audit(1719870461.757:52): pid=7460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1080" name="bus" dev="loop0" ino=33 res=0 errno=0
[  252.972024][ T7479] loop2: detected capacity change from 0 to 1024
[  253.004335][ T7479] EXT4-fs: Ignoring removed oldalloc option
[  253.048938][ T7479] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.152467][ T7479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  253.380004][ T3776] EXT4-fs (loop2): unmounting filesystem.
[  253.803280][ T3603] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  254.053065][ T3603] usb 3-1: Using ep0 maxpacket: 8
[  254.193288][ T3603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  254.218026][ T3603] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  254.242151][ T3603] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.284103][ T3603] usb 3-1: config 0 descriptor??
[  254.306519][ T7530] netlink: 'syz.3.1105': attribute type 21 has an invalid length.
[  254.320969][ T7530] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1105'.
[  254.330783][ T7530] netlink: 'syz.3.1105': attribute type 4 has an invalid length.
[  254.364745][ T7530] netlink: 'syz.3.1105': attribute type 5 has an invalid length.
[  254.404704][ T7530] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1105'.
[  254.513109][ T3563] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  254.515302][ T3553] Bluetooth: hci3: command 0x1003 tx timeout
[  254.538127][ T7534] bond0: (slave erspan0): Error -99 calling set_mac_address
[  254.574456][ T3603] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  255.096383][ T7544] loop0: detected capacity change from 0 to 2048
[  255.493217][ T3603] usb 3-1: USB disconnect, device number 20
[  255.512294][ T3603] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected
[  255.954725][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.961254][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.965112][ T7547] loop3: detected capacity change from 0 to 32768
[  256.028497][ T7547] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1114 (7547)
[  256.097384][ T7547] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.131819][ T7547] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  256.168450][ T7547] BTRFS info (device loop3): setting nodatacow, compression disabled
[  256.209775][ T7547] BTRFS info (device loop3): enabling auto defrag
[  256.237562][ T7547] BTRFS info (device loop3): max_inline at 0
[  256.251676][ T7567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1122'.
[  256.278455][ T7547] BTRFS info (device loop3): using free space tree
[  256.575002][ T7584] loop2: detected capacity change from 0 to 1024
[  256.582685][ T7584] ext4: Bad value for 'sb'
[  256.644132][ T5598] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  256.673280][ T3563] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  256.682221][ T3563] Bluetooth: hci5: Injecting HCI hardware error event
[  256.703305][ T3563] Bluetooth: hci5: hardware error 0x00
[  256.920737][ T7592] loop4: detected capacity change from 0 to 512
[  257.011246][ T7592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  257.119626][ T7592] System zones: 1-12
[  257.160516][ T7592] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1127: invalid indirect mapped block 8323072 (level 1)
[  257.244081][ T7592] EXT4-fs (loop4): 1 truncate cleaned up
[  257.251973][ T7592] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  257.334013][ T3561] EXT4-fs (loop4): unmounting filesystem.
[  257.435799][ T7603] loop1: detected capacity change from 0 to 512
[  257.521587][ T7603] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  257.578637][ T7603] ext4 filesystem being mounted at /root/syzkaller.LrpksZ/44/file0 supports timestamps until 2038 (0x7fffffff)
[  257.694622][ T7611] loop3: detected capacity change from 0 to 1024
[  257.783749][ T7611] 
[  257.786134][ T7611] ======================================================
[  257.793173][ T7611] WARNING: possible circular locking dependency detected
[  257.800218][ T7611] 6.1.96-syzkaller #0 Not tainted
[  257.805288][ T7611] ------------------------------------------------------
[  257.812312][ T7611] syz.3.1126/7611 is trying to acquire lock:
[  257.818410][ T7611] ffff88805c2cb048 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0
[  257.829394][ T7611] 
[  257.829394][ T7611] but task is already holding lock:
[  257.836758][ T7611] ffff88801f45a0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  257.846270][ T7611] 
[  257.846270][ T7611] which lock already depends on the new lock.
[  257.846270][ T7611] 
[  257.856672][ T7611] 
[  257.856672][ T7611] the existing dependency chain (in reverse order) is:
[  257.865722][ T7611] 
[  257.865722][ T7611] -> #1 (&tree->tree_lock){+.+.}-{3:3}:
[  257.873483][ T7611]        lock_acquire+0x1f8/0x5a0
[  257.878531][ T7611]        __mutex_lock+0x132/0xd80
[  257.883569][ T7611]        hfsplus_file_truncate+0x80d/0xb40
[  257.889389][ T7611]        hfsplus_delete_inode+0x170/0x220
[  257.895138][ T7611]        hfsplus_unlink+0x50d/0x7f0
[  257.900344][ T7611]        vfs_unlink+0x359/0x5f0
[  257.905204][ T7611]        do_unlinkat+0x4a5/0x820
[  257.910149][ T7611]        __x64_sys_unlinkat+0xca/0xf0
[  257.915542][ T7611]        do_syscall_64+0x3b/0xb0
[  257.920494][ T7611]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  257.926921][ T7611] 
[  257.926921][ T7611] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  257.935966][ T7611]        validate_chain+0x1661/0x5950
[  257.941355][ T7611]        __lock_acquire+0x125b/0x1f80
[  257.946740][ T7611]        lock_acquire+0x1f8/0x5a0
[  257.951777][ T7611]        __mutex_lock+0x132/0xd80
[  257.956894][ T7611]        hfsplus_get_block+0x37f/0x14e0
[  257.962449][ T7611]        block_read_full_folio+0x403/0xf60
[  257.968271][ T7611]        filemap_read_folio+0x199/0x780
[  257.973824][ T7611]        do_read_cache_folio+0x2ee/0x810
[  257.979469][ T7611]        do_read_cache_page+0x32/0x220
[  257.984947][ T7611]        __hfs_bnode_create+0x483/0x770
[  257.990504][ T7611]        hfsplus_bnode_create+0x120/0x440
[  257.996239][ T7611]        hfsplus_bmap_alloc+0x596/0x630
[  258.001791][ T7611]        hfs_btree_inc_height+0x11a/0xdb0
[  258.007613][ T7611]        hfsplus_brec_insert+0x776/0xdd0
[  258.013275][ T7611]        hfsplus_create_cat+0x498/0x1ba0
[  258.018914][ T7611]        hfsplus_fill_super+0x13e6/0x1c90
[  258.024637][ T7611]        mount_bdev+0x2c9/0x3f0
[  258.029514][ T7611]        legacy_get_tree+0xeb/0x180
[  258.034720][ T7611]        vfs_get_tree+0x88/0x270
[  258.039679][ T7611]        do_new_mount+0x2ba/0xb40
[  258.044724][ T7611]        __se_sys_mount+0x2d5/0x3c0
[  258.049958][ T7611]        do_syscall_64+0x3b/0xb0
[  258.054910][ T7611]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.061355][ T7611] 
[  258.061355][ T7611] other info that might help us debug this:
[  258.061355][ T7611] 
[  258.071587][ T7611]  Possible unsafe locking scenario:
[  258.071587][ T7611] 
[  258.079058][ T7611]        CPU0                    CPU1
[  258.084422][ T7611]        ----                    ----
[  258.089794][ T7611]   lock(&tree->tree_lock);
[  258.094307][ T7611]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  258.102635][ T7611]                                lock(&tree->tree_lock);
[  258.109660][ T7611]   lock(&HFSPLUS_I(inode)->extents_lock);
[  258.115471][ T7611] 
[  258.115471][ T7611]  *** DEADLOCK ***
[  258.115471][ T7611] 
[  258.123621][ T7611] 3 locks held by syz.3.1126/7611:
[  258.128749][ T7611]  #0: ffff88807a0300e0 (&type->s_umount_key#55/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930
[  258.138877][ T7611]  #1: ffff8880783ac198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90
[  258.149004][ T7611]  #2: ffff88801f45a0b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  258.159114][ T7611] 
[  258.159114][ T7611] stack backtrace:
[  258.165009][ T7611] CPU: 1 PID: 7611 Comm: syz.3.1126 Not tainted 6.1.96-syzkaller #0
[  258.172989][ T7611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  258.183059][ T7611] Call Trace:
[  258.186368][ T7611]  <TASK>
[  258.189324][ T7611]  dump_stack_lvl+0x1e3/0x2cb
[  258.194018][ T7611]  ? nf_tcp_handle_invalid+0x642/0x642
[  258.199557][ T7611]  ? print_circular_bug+0x12b/0x1a0
[  258.204799][ T7611]  check_noncircular+0x2fa/0x3b0
[  258.209805][ T7611]  ? add_chain_block+0x850/0x850
[  258.214775][ T7611]  ? lockdep_lock+0x11f/0x2a0
[  258.219467][ T7611]  ? validate_chain+0x112/0x5950
[  258.224436][ T7611]  ? _find_first_zero_bit+0xd0/0x100
[  258.229832][ T7611]  validate_chain+0x1661/0x5950
[  258.234708][ T7611]  ? preempt_count_add+0x8f/0x180
[  258.239741][ T7611]  ? reacquire_held_locks+0x660/0x660
[  258.245125][ T7611]  ? 0xffffffffa0000948
[  258.249295][ T7611]  ? is_bpf_text_address+0x289/0x2a0
[  258.254584][ T7611]  ? is_bpf_text_address+0x22/0x2a0
[  258.259791][ T7611]  ? kernel_text_address+0x9f/0xd0
[  258.264940][ T7611]  ? look_up_lock_class+0x77/0x140
[  258.270318][ T7611]  ? register_lock_class+0x100/0x990
[  258.275619][ T7611]  ? reacquire_held_locks+0x660/0x660
[  258.281006][ T7611]  ? is_dynamic_key+0x260/0x260
[  258.285867][ T7611]  ? mark_lock+0x9a/0x340
[  258.290298][ T7611]  __lock_acquire+0x125b/0x1f80
[  258.295170][ T7611]  lock_acquire+0x1f8/0x5a0
[  258.299695][ T7611]  ? hfsplus_get_block+0x37f/0x14e0
[  258.304913][ T7611]  ? read_lock_is_recursive+0x10/0x10
[  258.310316][ T7611]  ? __might_sleep+0xb0/0xb0
[  258.314945][ T7611]  ? mark_lock+0x9a/0x340
[  258.319292][ T7611]  ? __lock_acquire+0x125b/0x1f80
[  258.324331][ T7611]  __mutex_lock+0x132/0xd80
[  258.328932][ T7611]  ? hfsplus_get_block+0x37f/0x14e0
[  258.334167][ T7611]  ? hfsplus_get_block+0x37f/0x14e0
[  258.339402][ T7611]  ? mutex_lock_nested+0x10/0x10
[  258.344466][ T7611]  hfsplus_get_block+0x37f/0x14e0
[  258.349507][ T7611]  ? create_page_buffers+0x1d2/0x4b0
[  258.354809][ T7611]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  258.360540][ T7611]  ? do_raw_spin_unlock+0x137/0x8a0
[  258.365773][ T7611]  ? create_page_buffers+0x24e/0x4b0
[  258.371083][ T7611]  block_read_full_folio+0x403/0xf60
[  258.376379][ T7611]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  258.382107][ T7611]  ? block_is_partially_uptodate+0x590/0x590
[  258.388121][ T7611]  ? folio_add_lru+0xd70/0xd70
[  258.392892][ T7611]  ? folio_add_lru+0x34d/0xd70
[  258.397943][ T7611]  ? folio_add_lru+0x584/0xd70
[  258.402742][ T7611]  filemap_read_folio+0x199/0x780
[  258.407802][ T7611]  ? filemap_add_folio+0x570/0x570
[  258.412936][ T7611]  ? hfsplus_writepage+0x30/0x30
[  258.418003][ T7611]  ? maybe_unlock_mmap_for_io+0x130/0x130
[  258.423816][ T7611]  ? __hfs_bnode_create+0x38d/0x770
[  258.429117][ T7611]  ? __lock_acquire+0x1f80/0x1f80
[  258.434154][ T7611]  ? do_raw_spin_lock+0x14a/0x370
[  258.439185][ T7611]  do_read_cache_folio+0x2ee/0x810
[  258.444306][ T7611]  ? hfsplus_writepage+0x30/0x30
[  258.449250][ T7611]  do_read_cache_page+0x32/0x220
[  258.454213][ T7611]  __hfs_bnode_create+0x483/0x770
[  258.459253][ T7611]  ? hfsplus_bnode_get+0x40/0x40
[  258.464204][ T7611]  ? do_raw_spin_unlock+0x137/0x8a0
[  258.469415][ T7611]  hfsplus_bnode_create+0x120/0x440
[  258.474627][ T7611]  hfsplus_bmap_alloc+0x596/0x630
[  258.479664][ T7611]  ? hfsplus_bmap_reserve+0x4e0/0x4e0
[  258.485048][ T7611]  hfs_btree_inc_height+0x11a/0xdb0
[  258.490258][ T7611]  ? hfsplus_brec_insert+0x72c/0xdd0
[  258.495554][ T7611]  ? __rwlock_init+0x140/0x140
[  258.500335][ T7611]  ? __lock_acquire+0x1f80/0x1f80
[  258.505370][ T7611]  ? hfsplus_brec_insert+0xdd0/0xdd0
[  258.510673][ T7611]  ? do_raw_spin_unlock+0x137/0x8a0
[  258.515887][ T7611]  ? hfsplus_bnode_put+0x1bf/0x6d0
[  258.521013][ T7611]  hfsplus_brec_insert+0x776/0xdd0
[  258.526147][ T7611]  ? hfsplus_brec_keylen+0x310/0x310
[  258.531461][ T7611]  ? __kmalloc+0xe2/0x230
[  258.535819][ T7611]  hfsplus_create_cat+0x498/0x1ba0
[  258.540937][ T7611]  ? look_up_lock_class+0x77/0x140
[  258.546059][ T7611]  ? hfsplus_find_cat+0x5c0/0x5c0
[  258.551100][ T7611]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  258.557054][ T7611]  ? do_raw_spin_unlock+0x137/0x8a0
[  258.562258][ T7611]  ? _raw_spin_unlock+0x24/0x40
[  258.567116][ T7611]  ? hfsplus_new_inode+0x5c9/0x740
[  258.572244][ T7611]  hfsplus_fill_super+0x13e6/0x1c90
[  258.577475][ T7611]  ? hfsplus_mount+0x40/0x40
[  258.582111][ T7611]  ? snprintf+0xd6/0x120
[  258.586453][ T7611]  ? vscnprintf+0x80/0x80
[  258.590794][ T7611]  ? set_blocksize+0x1c6/0x350
[  258.595595][ T7611]  mount_bdev+0x2c9/0x3f0
[  258.599937][ T7611]  ? hfsplus_mount+0x40/0x40
[  258.604537][ T7611]  legacy_get_tree+0xeb/0x180
[  258.609312][ T7611]  ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0
[  258.614882][ T7611]  vfs_get_tree+0x88/0x270
[  258.619334][ T7611]  do_new_mount+0x2ba/0xb40
[  258.623843][ T7611]  ? ns_capable+0x85/0xe0
[  258.628182][ T7611]  ? do_move_mount_old+0x160/0x160
[  258.633306][ T7611]  __se_sys_mount+0x2d5/0x3c0
[  258.638002][ T7611]  ? __x64_sys_mount+0xc0/0xc0
[  258.642800][ T7611]  ? syscall_enter_from_user_mode+0x2e/0x230
[  258.648790][ T7611]  ? lockdep_hardirqs_on+0x94/0x130
[  258.653994][ T7611]  ? __x64_sys_mount+0x1c/0xc0
[  258.658772][ T7611]  do_syscall_64+0x3b/0xb0
[  258.663221][ T7611]  ? clear_bhb_loop+0x45/0xa0
[  258.667930][ T7611]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  258.673922][ T7611] RIP: 0033:0x7f6b03f7729a
[  258.678426][ T7611] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.698042][ T7611] RSP: 002b:00007f6b04d01e78 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5
[  258.706484][ T7611] RAX: ffffffffffffffda RBX: 00007f6b04d01f00 RCX: 00007f6b03f7729a
[  258.714588][ T7611] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f6b04d01ec0
[  258.722560][ T7611] RBP: 0000000020000000 R08: 00007f6b04d01f00 R09: 0000000002000010
[  258.730532][ T7611] R10: 0000000002000010 R11: 0000000000000206 R12: 0000000020000080
[  258.738503][ T7611] R13: 00007f6b04d01ec0 R14: 00000000000006a2 R15: 00000000200013c0
[  258.746491][ T7611]  </TASK>
[  258.817219][ T7603] loop1: detected capacity change from 512 to 0
[  258.876476][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  258.903375][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 5: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  258.926629][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.935797][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 6: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  258.959054][    C0] vkms_vblank_simulate: vblank timer overrun
[  258.967870][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 7: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  258.995832][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 8: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.022731][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 9: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.048413][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 10: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.069793][ T7590] loop0: detected capacity change from 0 to 65536
[  259.074643][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 11: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.130639][ T7590] XFS (loop0): Mounting V5 Filesystem
[  259.133206][ T6433] EXT4-fs error (device loop1): ext4_empty_dir:3099: inode #11: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.169046][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.182211][ T6433] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 4: comm syz-executor: path /root/syzkaller.LrpksZ/44/file0/lost+ound: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  259.206780][ T7590] XFS (loop0): Ending clean mount
[  259.207764][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.226237][ T7590] XFS (loop0): Quotacheck needed: Please wait.
[  259.233011][ T3563] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  259.241148][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.245863][ T7590] XFS (loop0): Quotacheck: Done.
[  259.254393][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.276009][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.289115][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.301882][ T3766] XFS (loop0): Unmounting Filesystem
[  259.309096][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.322846][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.337638][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.362166][ T6433] EXT4-fs warning (device loop1): ext4_empty_dir:3101: inode #11: comm syz-executor: directory missing '.'
[  259.745765][ T6433] EXT4-fs (loop1): unmounting filesystem.
[  259.757340][ T5761] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.827763][ T5761] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.882009][ T5761] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.940721][ T5761] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.800463][ T5761] device hsr_slave_0 left promiscuous mode
[  260.814240][ T5761] device hsr_slave_1 left promiscuous mode
[  260.825499][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.853568][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.873537][ T5761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.881124][ T5761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.905329][ T5761] device bridge_slave_1 left promiscuous mode
[  260.911596][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.946922][ T5761] device bridge_slave_0 left promiscuous mode
[  260.953230][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.968196][ T5761] device veth1_macvtap left promiscuous mode
[  260.974927][ T5761] device veth0_macvtap left promiscuous mode
[  260.981039][ T5761] device veth1_vlan left promiscuous mode
[  260.988912][ T5761] device veth0_vlan left promiscuous mode
[  261.190102][ T5761] team0 (unregistering): Port device team_slave_1 removed
[  261.227134][ T5761] team0 (unregistering): Port device team_slave_0 removed
[  261.267807][ T5761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  261.309753][ T5761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.396348][ T5761] bond0 (unregistering): Released all slaves