last executing test programs:

3.535664289s ago: executing program 2 (id=1020):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200))
pwritev(r0, &(0x7f0000000540)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x0, 0x0)

3.283062162s ago: executing program 2 (id=1027):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030300000000000010005a"], 0x38}}, 0x0)

3.102797399s ago: executing program 0 (id=1029):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCFLSH(r1, 0x40085500, 0x0)

3.031008525s ago: executing program 2 (id=1030):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@any, 0xffffffff}, 0x0, 0x1})

3.008598777s ago: executing program 2 (id=1031):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0)
socket(0x0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f000000a3013528e2c3"], 0x0}, 0x0)

2.770284929s ago: executing program 0 (id=1043):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005020524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

2.398754622s ago: executing program 3 (id=1035):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040))
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="3751f02b82f73cc7c7c4316177f5732f765c975ebce8947e5388c4ff26fa3817", 0x20}, {&(0x7f00000001c0)="a928", 0x2}], 0x2)

2.292789552s ago: executing program 3 (id=1036):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8)
close(r0)

2.164409014s ago: executing program 3 (id=1039):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000f, 0x401c031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000)
mlock(&(0x7f0000a74000/0x1000)=nil, 0x1000)
move_pages(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x3000)=nil], &(0x7f00000001c0)=[0x1], &(0x7f0000000040), 0x0)

1.691455516s ago: executing program 3 (id=1046):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_DEVMASK(r0, 0xc0044dff, &(0x7f0000001480))

1.598506315s ago: executing program 3 (id=1048):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0)

1.465435507s ago: executing program 4 (id=1050):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='attr\x00')
fchdir(r0)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, 0x0, 0x0)

1.329958569s ago: executing program 4 (id=1052):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301)
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.255067726s ago: executing program 1 (id=1053):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4)

1.191988002s ago: executing program 1 (id=1054):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETVESABLANK(r1, 0x4b4d, &(0x7f0000000140))

1.170214874s ago: executing program 4 (id=1055):
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000180), 0xb)
copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x0)

1.098504051s ago: executing program 1 (id=1056):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10)
recvmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe96}, 0x2042)

1.091959351s ago: executing program 0 (id=1057):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@dioread_lock}, {@dioread_nolock}]}, 0xfd, 0x586, &(0x7f0000000e80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000008c0)="10", 0x1, 0x8000c61)
rename(&(0x7f0000000580)='./file1\x00', &(0x7f0000000680)='./file2\x00')

1.035622606s ago: executing program 4 (id=1058):
syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21000e, &(0x7f00000026c0), 0xe1, 0x525, &(0x7f00000001c0)="$eJzs3V9rZGcZAPDnTDJrtpuaVL2ohdbFVnaL7kzS2DZ40VYU7wpKvV9DMgkhk0zITNpNKCXFDyCIaMErr7wR/ACC9CNIoWDvRUUR3dULL9Qj58yZbHZ6Jn/YmUxIfj94Z97znjnned5kc+Y9f/acAK6smxHxRkRMRMSLETFTtFeKEgfdkn3uwf13l7OSzXnr70kkRVtEXj10o1hsqvtWqr23v7HUbDZ2iul6Z3O73t7bv7O+ubTWWGtsLSzMv7L46uLLi3ND6WfWr9e+/eef/uiX33ntt1975w93/3r7vSzpbxXzi34M3Sf5azX7WRyajIidUQQbg4miP9VxJwIAwKlkY/zPRcSX8/H/TEzko7lc/5Bu6vyzAwAAAIYhfX06/pNEpAAAAMCl9XpETEdSqRXXAkxHpVKrda/h/UI8UWm22p2vrrZ2t1ayeRGzUa2srjcbc8U1tbNRTbLp+bz+cPqlvumFiHgqIn4ycz2fri23mivjPvgBAAAAV8SNvv3/f8109/8BAACAS2Z23AkAAAAAIzdo/z855zwAAACA0XH+HwAAAC617775ZlbS3vOvV97e291ovX1npdHeqG3uLteWWzvbtbVWay2/Z9/mSetrtlrbX4+t3Xv1TqPdqbf39u9utna3OnfXPT8QAAAAxuWpL334SRIRB9+4npfMtexlYsACrhWAS6Nylg//aXR5AOdv0Nc8cPlNjjsBYHwOzr7IzVHkAYzNI7f6KBkUHL1455FjBr8bXU4AAMBw3fpi+fn/bBegOu7kgJE60/l/4FJx/h+urjOe//9oVHkA569qBABX3kmP+ii9ecf1Aef/r5V9OE2PXRcAADBy03lJKrXiXOB0VCq1WsST+X/1ryar683GXER8NiJ+P1P9TDY9ny+ZeDwgAAAAAAAAAAAAAAAAAAAAAAAAAJxSmiaRAgAAAJdaROUvSfH8r1szL0z3Hx+4lvx7JopHer3z87d+dm+p09mZz9r/cdje+aBof2kcRzAAAACAfr399N5+PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM04P77y73ynnG/ds3I2K2LP5kTOXvU1GNiCf+mcTkkeWSiJgYQvyD9yPi6bL4SZZWzBZZ9MevRMT14cevPpxzGP/ZNE1L498YQny4yj7Mtj9vlP39V+Jm/l7+9z9ZlMc1ePtXOdz+TQzY/j15yhjPfPzr+sD470c8M1m+/evFTwbEf75shSU/lB98f3//U43dlUf6i4hbpd8/ySOx6p3N7Xp7b//O+ubSWmOtsbWwMP/K4quLLy/O1VfXm43itbSPP372N//ra/pv2pX3PwbEnz2h/y9klSNb7Ej7wxTBPr53//PdarVvFXn828+X//6fPiZ+9m/iK8X3QDb/Vq9+0K0f9dyvPnquNLEi/sqA/p/0+789aKV9XvzeD/94yo8CAOegvbe/sdRsNnZGUknTiF7LB2majjKWyuNVeqO7kYWYuig9vQCVbGx9AdIYVBnGkS0AAOCieTjoP/Ui7400IQAAAAAAAAAAAAAAAAAAALiC2ntROf5+YGka8Xi3E+uPeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOv/AQAA//+ybtqI")
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20)
getdents64(r0, 0x0, 0x0)

939.170115ms ago: executing program 1 (id=1059):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0xffffffff}, 0x10)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)

688.362157ms ago: executing program 2 (id=1060):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000000000000000988e73dd08000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000014005a80"], 0x3c}}, 0x0)

687.752307ms ago: executing program 1 (id=1070):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)

503.861514ms ago: executing program 0 (id=1061):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x54, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY={0x2c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x54}}, 0x0)

484.863146ms ago: executing program 1 (id=1062):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f0000000080)={[{@sysvgroups}, {@gqnoenforce}, {@swalloc}, {@ikeep}, {@lazytime}]}, 0x1, 0x9730, &(0x7f0000012f40)="$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")
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xe00f, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$security_ima(&(0x7f0000000180)='./file1\x00', &(0x7f0000000340), &(0x7f00000003c0)=@sha1={0x1, "38fd72674e608a87e092a271aace7add25be06a2"}, 0x11, 0x0)

484.323886ms ago: executing program 4 (id=1063):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000140)={[{}, {@gid}, {}, {@nodecompose}, {@nobarrier}, {@umask={'umask', 0x3d, 0xfffffffffffffff8}}, {@nls={'nls', 0x3d, 'cp866'}}]}, 0x44, 0x6f6, &(0x7f0000000940)="$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")
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='osx.'], 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0)

439.05523ms ago: executing program 2 (id=1064):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))

213.006171ms ago: executing program 0 (id=1065):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000000000000000000001000000060000000000000011000000000000000000000001000000040000000000000014000000000000000033aa0001000000010000000000000030000000000000000000000007000000008310f211295160385c6a96978064b9de8307a8ac1414bb07071a000000000014000000000000000000000001"], 0x90}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000001"], 0x50}}], 0x2, 0x0)

210.831651ms ago: executing program 4 (id=1066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

52.690205ms ago: executing program 3 (id=1067):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080))
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

0s ago: executing program 0 (id=1068):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

9][   T46] team0 (unregistering): Port device team_slave_0 removed
[   72.132953][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   72.175554][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   72.501717][   T46] bond0 (unregistering): Released all slaves
[   72.592979][ T3892] team0: Port device team_slave_1 added
[   72.599814][ T3984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'.
[   72.713801][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.743532][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.804773][ T3892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.833177][ T3892] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.845862][ T3892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.980777][ T3892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   73.050480][ T3945] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   73.146247][ T3892] device hsr_slave_0 entered promiscuous mode
[   73.210565][ T3892] device hsr_slave_1 entered promiscuous mode
[   73.221391][ T3892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   73.250072][ T3892] Cannot create hsr debugfs directory
[   73.388760][ T4042] loop0: detected capacity change from 0 to 4096
[   73.416301][ T4042] =======================================================
[   73.416301][ T4042] WARNING: The mand mount option has been deprecated and
[   73.416301][ T4042]          and is ignored by this kernel. Remove the mand
[   73.416301][ T4042]          option from the mount to silence this warning.
[   73.416301][ T4042] =======================================================
[   73.470477][ T3945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.491391][ T3945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   73.515072][ T3945] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   73.524563][ T3945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.538794][ T4042] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[   73.566099][ T3945] usb 5-1: config 0 descriptor??
[   73.675171][ T4042] ntfs3: loop0: Failed to load $Extend.
[   73.952709][ T4034] loop2: detected capacity change from 0 to 32768
[   73.972762][ T4034] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   73.982384][ T4034] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   74.044285][ T3638] Bluetooth: hci3: command tx timeout
[   74.053581][ T4034] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   74.063213][ T3945] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[   74.073606][ T3945] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[   74.084770][ T3945] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input7
[   74.099158][ T3679] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   74.109325][ T3679] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   74.139647][ T3945] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[   74.218668][ T3679] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 109ms
[   74.231245][ T3679] gfs2: fsid=syz:syz.0: jid=0: Done
[   74.238171][ T4034] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   74.279832][ T3679] usb 5-1: USB disconnect, device number 2
[   74.499234][ T3892] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   74.546479][ T3892] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   74.567106][ T3892] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   74.604833][ T3892] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   74.752465][ T3892] 8021q: adding VLAN 0 to HW filter on device bond0
[   74.777104][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   74.785317][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   74.799526][ T3892] 8021q: adding VLAN 0 to HW filter on device team0
[   74.818652][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   74.836842][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   74.861818][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.868935][ T3850] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.891829][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   74.904377][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   74.916914][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   74.934022][ T3850] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.941159][ T3850] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.954608][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   74.963542][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   74.972427][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   74.983981][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   75.006368][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   75.016310][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   75.026934][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   75.041580][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   75.051966][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   75.060721][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   75.069229][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   75.081929][ T3892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   75.274712][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   75.282336][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   75.293920][ T3892] 8021q: adding VLAN 0 to HW filter on device batadv0
[   75.328575][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.337587][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.362998][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.372118][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.382643][ T3892] device veth0_vlan entered promiscuous mode
[   75.390862][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.398834][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.418802][ T3892] device veth1_vlan entered promiscuous mode
[   75.464325][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.477621][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.486726][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.509790][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.527197][ T3892] device veth0_macvtap entered promiscuous mode
[   75.543697][ T3892] device veth1_macvtap entered promiscuous mode
[   75.568811][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.584855][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.595089][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.611007][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.627681][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.639421][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.658761][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.669431][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.681840][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.689131][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.702826][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   75.714521][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.724588][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.737248][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.748209][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.763774][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.776545][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.787234][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.797766][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.807706][ T3892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.818359][ T3892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.832360][ T3892] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.843140][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.852381][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.863071][ T3892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.872582][ T3892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.881510][ T3892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.890780][ T3892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.940974][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.955591][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.967465][ T3850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.971434][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.980390][ T3850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.992825][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.079772][ T4107] loop4: detected capacity change from 0 to 64
[   76.095975][ T4101] trusted_key: encrypted_key: insufficient parameters specified
[   76.124190][ T3638] Bluetooth: hci3: command tx timeout
[   76.281648][  T155] cfg80211: failed to load regulatory.db
[   76.366338][ T3945] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.475812][ T4118] capability: warning: `syz.4.88' uses deprecated v2 capabilities in a way that may be insecure
[   76.751173][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   76.774147][ T3945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   76.812774][ T3945] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   76.834081][ T3945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.876685][ T3945] usb 1-1: config 0 descriptor??
[   76.964951][ T4110] loop3: detected capacity change from 0 to 32768
[   76.985923][ T4110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.85 (4110)
[   77.007306][ T4136] vim2m vim2m.0: vidioc_s_fmt queue busy
[   77.009694][ T4110] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   77.035962][ T4110] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   77.045505][ T4110] BTRFS info (device loop3): using free space tree
[   77.135412][ T4150] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.103'.
[   77.217734][ T4110] BTRFS info (device loop3): enabling ssd optimizations
[   77.317684][ T1114] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   77.348791][ T3892] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   77.361732][ T3679] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   77.391015][ T3945] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[   77.399788][ T3945] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0
[   77.425045][ T3945] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0005/input/input8
[   77.600981][ T3945] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[   77.614151][ T3679] usb 2-1: Using ep0 maxpacket: 8
[   77.634917][ T3945] usb 1-1: USB disconnect, device number 2
[   77.740525][ T3679] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[   77.772542][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[   77.784311][ T4170] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   77.794907][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   77.815504][ T3679] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   77.845086][ T3679] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   77.880550][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.888056][ T4174] netlink: 68 bytes leftover after parsing attributes in process `syz.3.106'.
[   78.098565][ T4186] loop4: detected capacity change from 0 to 128
[   78.126509][ T4186] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   78.171082][ T3679] usb 2-1: GET_CAPABILITIES returned 0
[   78.176821][ T3679] usbtmc 2-1:16.0: can't read capabilities
[   78.183576][ T4165] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   78.376249][   T41] usb 2-1: USB disconnect, device number 3
[   78.565511][ T4165] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   78.590750][ T4165] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   78.609379][ T4165] usb 3-1: config 0 descriptor??
[   78.661570][ T4165] cp210x 3-1:0.0: cp210x converter detected
[   78.735706][ T4189] loop0: detected capacity change from 0 to 32768
[   78.758587][ T4189] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4189)
[   78.823515][ T4189] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   78.837197][ T4189] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   78.861031][ T4189] BTRFS info (device loop0): using free space tree
[   79.055687][ T4189] BTRFS info (device loop0): enabling ssd optimizations
[   79.094705][ T4215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'.
[   79.110996][ T4165] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[   79.154606][ T4165] usb 3-1: cp210x converter now attached to ttyUSB0
[   79.199831][ T3850] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   79.328838][ T4218] program syz.4.121 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   79.351790][ T3644] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   79.354013][   T41] usb 3-1: USB disconnect, device number 3
[   79.387759][   T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   79.434406][   T41] cp210x 3-1:0.0: device disconnected
[   79.818573][ T4226] loop4: detected capacity change from 0 to 1024
[   79.937093][ T4226] hfsplus: extend alloc file! (8192,512,16777719)
[   80.263264][ T4220] loop1: detected capacity change from 0 to 32768
[   80.405281][ T3943] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   80.635006][ T4241] loop3: detected capacity change from 0 to 128
[   80.716052][ T4241] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   80.763697][ T4241] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038 (0x7fffffff)
[   80.845230][ T3943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.886610][ T3943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.937324][ T3943] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   80.957681][ T3943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.966233][ T3892] EXT4-fs (loop3): unmounting filesystem.
[   80.989610][ T3943] usb 5-1: config 0 descriptor??
[   81.171660][ T4256] loop2: detected capacity change from 0 to 190
[   81.196311][ T4256] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum.
[   81.215528][ T4243] loop0: detected capacity change from 0 to 32768
[   81.229314][ T4256] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[   81.255077][ T4256] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[   81.275546][ T4243] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.134 (4243)
[   81.301165][ T4256] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr.
[   81.310811][ T4256] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[   81.336158][ T4256] ntfs: (device loop2): ntfs_attr_find(): Inode is corrupt.  Run chkdsk.
[   81.344792][ T4243] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.357876][ T4243] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   81.367366][ T4256] ntfs: (device loop2): ntfs_read_locked_inode(): Failed to lookup attribute list attribute.
[   81.372838][ T4258] loop1: detected capacity change from 0 to 4096
[   81.378145][ T4243] BTRFS info (device loop0): using free space tree
[   81.391300][ T4256] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[   81.413893][ T4258] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[   81.452639][ T4256] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[   81.472208][ T3943] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[   81.492733][ T3943] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0
[   81.503614][ T4256] ntfs: volume version 3.1.
[   81.509102][ T4256] ntfs: (device loop2): ntfs_read_locked_inode(): Inode is not in use!
[   81.542577][ T3943] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input9
[   81.551758][ T4256] syz.2.138: attempt to access beyond end of device
[   81.551758][ T4256] loop2: rw=0, sector=552, nr_sectors = 8 limit=190
[   81.605210][ T3943] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[   81.644939][ T4256] syz.2.138: attempt to access beyond end of device
[   81.644939][ T4256] loop2: rw=0, sector=560, nr_sectors = 8 limit=190
[   81.729345][ T3810] usb 5-1: USB disconnect, device number 3
[   81.753325][ T4256] syz.2.138: attempt to access beyond end of device
[   81.753325][ T4256] loop2: rw=0, sector=560, nr_sectors = 8 limit=190
[   81.859036][ T4243] BTRFS info (device loop0): enabling ssd optimizations
[   82.153528][ T1114] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   82.357068][ T3644] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.489158][ T4311] loop2: detected capacity change from 0 to 64
[   82.627346][ T4311] syz.2.153: attempt to access beyond end of device
[   82.627346][ T4311] loop2: rw=34817, sector=39, nr_sectors = 125 limit=64
[   82.653540][ T4311] syz.2.153: attempt to access beyond end of device
[   82.653540][ T4311] loop2: rw=34817, sector=167, nr_sectors = 1 limit=64
[   82.709916][ T4311] syz.2.153: attempt to access beyond end of device
[   82.709916][ T4311] loop2: rw=34817, sector=169, nr_sectors = 1 limit=64
[   82.748174][ T4311] syz.2.153: attempt to access beyond end of device
[   82.748174][ T4311] loop2: rw=34817, sector=171, nr_sectors = 7 limit=64
[   82.832149][ T4311] syz.2.153: attempt to access beyond end of device
[   82.832149][ T4311] loop2: rw=34817, sector=179, nr_sectors = 140 limit=64
[   82.846760][ T3945] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   83.004204][ T4330] loop0: detected capacity change from 0 to 512
[   83.085450][ T4330] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.150: invalid indirect mapped block 256 (level 2)
[   83.110384][ T4330] EXT4-fs (loop0): Remounting filesystem read-only
[   83.161761][ T4330] EXT4-fs (loop0): 2 truncates cleaned up
[   83.196637][ T4330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   83.240777][ T3945] usb 5-1: config 0 interface 0 has no altsetting 0
[   83.247522][ T3945] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[   83.300296][ T3945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.315895][ T4330] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.150: bg 0: block 5: invalid block bitmap
[   83.352406][ T4330] EXT4-fs (loop0): Remounting filesystem read-only
[   83.368787][ T3945] usb 5-1: config 0 descriptor??
[   83.461509][ T3644] EXT4-fs (loop0): unmounting filesystem.
[   83.671966][ T4352] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   84.087296][ T4339] loop1: detected capacity change from 0 to 32768
[   84.163499][ T4337] loop3: detected capacity change from 0 to 32768
[   84.204808][ T4337] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.161 (4337)
[   84.287255][ T4337] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.297582][ T3945] video4linux radio32: keene_cmd_main failed (-71)
[   84.304688][ T3945] radio-keene 5-1:0.0: V4L2 device registered as radio32
[   84.320337][ T4337] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   84.329677][ T4337] BTRFS info (device loop3): using free space tree
[   84.353930][ T3945] usb 5-1: USB disconnect, device number 4
[   84.603038][ T4337] BTRFS info (device loop3): enabling ssd optimizations
[   84.787637][   T46] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared)
[   84.813981][ T4391] loop0: detected capacity change from 0 to 512
[   84.909300][ T3892] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.946470][ T4391] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   84.993820][ T4391] ext4 filesystem being mounted at /25/bus supports timestamps until 2038 (0x7fffffff)
[   85.065847][ T4362] loop2: detected capacity change from 0 to 32768
[   85.189265][ T4362] XFS (loop2): Mounting V5 Filesystem
[   85.262972][ T4362] XFS (loop2): Ending clean mount
[   85.324162][ T3644] EXT4-fs (loop0): unmounting filesystem.
[   85.457004][ T3639] XFS (loop2): Unmounting Filesystem
[   85.677634][ T4423] loop1: detected capacity change from 0 to 164
[   85.763661][ T4423] rock: directory entry would overflow storage
[   85.810801][ T4423] rock: sig=0x4f50, size=4, remaining=3
[   85.830443][ T4423] iso9660: Corrupted directory entry in block 4 of inode 1792
[   86.626220][ T4431] loop4: detected capacity change from 0 to 32768
[   86.645050][ T4431] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.184 (4431)
[   86.698786][ T4431] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.750399][ T4431] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   86.787616][ T4431] BTRFS info (device loop4): using free space tree
[   87.053192][ T4439] loop1: detected capacity change from 0 to 32768
[   87.061593][ T4431] BTRFS info (device loop4): enabling ssd optimizations
[   87.097867][ T4439] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.187 (4439)
[   87.176055][   T46] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[   87.387093][ T3643] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   87.929063][ T4504] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   88.505872][ T4521] device bridge_slave_1 left promiscuous mode
[   88.545140][ T4521] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.960423][ T3808] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.135211][ T4515] loop1: detected capacity change from 0 to 32768
[   89.154312][ T4515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.210 (4515)
[   89.195672][ T4515] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.250996][ T4515] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   89.269938][ T4515] BTRFS info (device loop1): using free space tree
[   89.346969][ T3808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.368110][ T3808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.378032][ T3808] usb 3-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00
[   89.392824][ T3808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.442560][ T3808] usb 3-1: config 0 descriptor??
[   89.542271][ T4515] BTRFS info (device loop1): enabling ssd optimizations
[   89.675389][ T1114] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   89.796505][ T4527] loop0: detected capacity change from 0 to 40427
[   89.810720][ T3635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.907204][ T4527] F2FS-fs (loop0): Found nat_bits in checkpoint
[   89.924388][ T4525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.941359][ T4534] loop3: detected capacity change from 0 to 32768
[   90.062330][ T4534] read_mapping_page failed!
[   90.078976][ T4525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.106503][ T3808] wacom 0003:056A:0065.0007: unknown main item tag 0x7
[   90.117361][ T4527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   90.128002][ T3808] wacom 0003:056A:0065.0007: unknown main item tag 0x4
[   90.151843][ T3808] wacom 0003:056A:0065.0007: Unknown device_type for 'HID 056a:0065'. Assuming pen.
[   90.214470][ T4537] loop4: detected capacity change from 0 to 32768
[   90.244365][ T3808] wacom 0003:056A:0065.0007: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.2-1/input0
[   90.283194][ T3808] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0065.0007/input/input10
[   90.286182][ T4537] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.220 (4537)
[   90.375944][ T3644] syz-executor: attempt to access beyond end of device
[   90.375944][ T3644] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   90.420523][ T4537] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   90.436505][ T3808] usb 3-1: USB disconnect, device number 4
[   90.470403][ T4537] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   90.520925][ T4537] BTRFS info (device loop4): using free space tree
[   90.749473][ T4537] BTRFS info (device loop4): enabling ssd optimizations
[   90.811839][ T4592] input: syz1 as /devices/virtual/input/input13
[   91.042037][ T3643] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   91.055577][ T4595] input input14: cannot allocate more than FF_MAX_EFFECTS effects
[   91.548566][ T4609] loop1: detected capacity change from 0 to 2048
[   91.591702][ T4609] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[   91.694356][ T4618] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.521934][ T4644] loop0: detected capacity change from 0 to 8
[   92.656364][ T4616] loop2: detected capacity change from 0 to 32768
[   92.684824][ T4616] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.232 (4616)
[   92.706307][ T4622] loop4: detected capacity change from 0 to 32768
[   92.766574][ T4616] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   92.817783][ T4616] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   92.850455][ T4616] BTRFS info (device loop2): using free space tree
[   92.912001][ T4622] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   93.029257][ T4651] loop3: detected capacity change from 0 to 4096
[   93.044529][ T4651] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   93.083321][ T4651] EXT4-fs (loop3): shut down requested (2)
[   93.117453][ T4651] EXT4-fs warning (device loop3): ext4_empty_dir:3154: inode #12: comm syz.3.248: directory missing '..'
[   93.196838][ T4616] BTRFS info (device loop2): enabling ssd optimizations
[   93.211904][ T3892] EXT4-fs (loop3): unmounting filesystem.
[   93.263219][ T3643] ocfs2: Unmounting device (7,4) on (node local)
[   93.330554][ T4560] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   93.384387][ T3850] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   93.457603][ T3639] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   93.469030][ T4687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.254'.
[   93.583965][ T4560] usb 2-1: Using ep0 maxpacket: 16
[   93.780504][ T4560] usb 2-1: config 0 has no interfaces?
[   93.916881][ T4701] IPVS: persistence engine module ip_vs_pe_X not found
[   93.940522][ T4560] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   93.969919][ T4560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.004861][ T4560] usb 2-1: Product: syz
[   94.009062][ T4560] usb 2-1: Manufacturer: syz
[   94.032465][ T4560] usb 2-1: SerialNumber: syz
[   94.056694][ T4560] usb 2-1: config 0 descriptor??
[   94.325887][ T4560] usb 2-1: USB disconnect, device number 4
[   94.750835][ T4709] loop0: detected capacity change from 0 to 32768
[   94.785605][ T4709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.262 (4709)
[   94.861066][ T4709] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.887298][ T4709] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   94.951308][ T4709] BTRFS info (device loop0): use no compression
[   94.967844][ T4709] BTRFS info (device loop0): force zlib compression, level 3
[   94.991212][ T4709] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8)
[   95.009070][ T4710] loop3: detected capacity change from 0 to 32768
[   95.016801][ T4709] BTRFS info (device loop0): use lzo compression, level 0
[   95.091345][ T4709] BTRFS info (device loop0): turning on flush-on-commit
[   95.108583][ T4709] BTRFS info (device loop0): enabling auto defrag
[   95.190319][ T4709] BTRFS info (device loop0): using free space tree
[   95.206915][ T4710] XFS (loop3): Mounting V5 Filesystem
[   95.386653][ T4710] XFS (loop3): Ending clean mount
[   95.411783][ T4718] loop2: detected capacity change from 0 to 32768
[   95.424960][ T4710] XFS (loop3): Quotacheck needed: Please wait.
[   95.462956][ T4718] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.266 (4718)
[   95.509188][ T4709] BTRFS info (device loop0): enabling ssd optimizations
[   95.612928][ T4718] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   95.641323][ T4710] XFS (loop3): Quotacheck: Done.
[   95.688370][ T4718] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   95.707985][ T3644] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.738403][ T4720] loop4: detected capacity change from 0 to 40427
[   95.738609][ T4718] BTRFS info (device loop2): using free space tree
[   95.769556][ T3892] XFS (loop3): Unmounting Filesystem
[   95.922582][ T4720] F2FS-fs (loop4): invalid crc value
[   95.994082][ T4720] F2FS-fs (loop4): Found nat_bits in checkpoint
[   96.081488][ T4720] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[   96.108533][ T4718] BTRFS info (device loop2): enabling ssd optimizations
[   96.287804][ T3643] syz-executor: attempt to access beyond end of device
[   96.287804][ T3643] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   96.371741][   T46] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   96.546244][ T3639] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.576288][ T4793] capability: warning: `syz.0.280' uses 32-bit capabilities (legacy support in use)
[   96.632060][ T4795] device netdevsim0 entered promiscuous mode
[   96.687129][ T4795] device macsec1 entered promiscuous mode
[   96.808111][ T4795] device netdevsim0 left promiscuous mode
[   97.887904][ T4832] loop4: detected capacity change from 0 to 512
[   97.899296][ T4810] loop0: detected capacity change from 0 to 32768
[   98.007511][ T4832] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[   98.026008][ T4832] System zones: 0-2, 18-18, 34-35
[   98.049044][ T4832] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.066575][ T4832] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038 (0x7fffffff)
[   98.113038][ T4822] loop1: detected capacity change from 0 to 32768
[   98.132587][ T4822] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.290 (4822)
[   98.193550][ T4822] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.205640][ T4822] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   98.214805][ T4822] BTRFS info (device loop1): using free space tree
[   98.375072][ T4822] BTRFS info (device loop1): enabling ssd optimizations
[   98.544640][ T3942] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[   98.639155][ T3635] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   98.942198][ T3643] EXT4-fs (loop4): unmounting filesystem.
[   99.408090][ T4902] loop1: detected capacity change from 0 to 2048
[   99.410489][ T3844] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   99.466178][ T4902] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[   99.486920][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   99.513937][ T4910] loop2: detected capacity change from 0 to 512
[   99.545734][ T4902] EXT4-fs (loop1): shut down requested (2)
[   99.602259][ T3635] EXT4-fs (loop1): unmounting filesystem.
[   99.608467][ T4910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   99.617866][ T4910] ext4 filesystem being mounted at /70/bus supports timestamps until 2038 (0x7fffffff)
[   99.690420][ T3844] usb 4-1: Using ep0 maxpacket: 32
[   99.970591][ T3844] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[   99.979980][ T3844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.993957][ T3844] usb 4-1: Product: syz
[   99.998154][ T3844] usb 4-1: Manufacturer: syz
[  100.003207][ T3844] usb 4-1: SerialNumber: syz
[  100.018788][ T3844] usb 4-1: config 0 descriptor??
[  100.081198][ T3844] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  100.201299][ T3639] EXT4-fs (loop2): unmounting filesystem.
[  100.210335][ T3818] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  100.242306][ T4930] loop0: detected capacity change from 0 to 512
[  100.254273][ T4930] EXT4-fs: Ignoring removed i_version option
[  100.260958][ T4930] EXT4-fs: Ignoring removed nobh option
[  100.280944][ T4930] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  100.316612][ T4930] EXT4-fs (loop0): 1 truncate cleaned up
[  100.323875][ T4930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  100.406699][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  100.480582][ T3818] usb 5-1: Using ep0 maxpacket: 16
[  100.489089][ T4939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.332'.
[  100.492861][ T4938] loop0: detected capacity change from 0 to 1024
[  100.546168][ T4938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002]
[  100.569806][ T4938] System zones: 0-1, 3-12
[  100.581635][ T4938] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  100.601019][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.620297][ T3818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.630706][ T3818] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.643698][ T3818] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  100.652860][ T3818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.662867][ T3818] usb 5-1: config 0 descriptor??
[  100.801983][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  100.930321][ T3844] gspca_stk1135: reg_w 0x5 err -71
[  100.936507][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  100.950346][ T3844] gspca_stk1135: Sensor write failed
[  100.955672][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  100.990443][ T3844] gspca_stk1135: Sensor write failed
[  101.003246][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.010465][ T3844] gspca_stk1135: Sensor read failed
[  101.015691][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.044570][ T3844] gspca_stk1135: Sensor read failed
[  101.059938][ T3844] gspca_stk1135: Detected sensor type unknown (0x0)
[  101.092863][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.118195][ T3844] gspca_stk1135: Sensor read failed
[  101.130987][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.137057][ T3818] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  101.150811][ T3844] gspca_stk1135: Sensor read failed
[  101.156049][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.183174][ T3844] gspca_stk1135: Sensor write failed
[  101.191351][ T4956] loop0: detected capacity change from 0 to 512
[  101.195436][ T3818] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input15
[  101.210041][ T3844] gspca_stk1135: serial bus timeout: status=0x00
[  101.239596][ T3844] gspca_stk1135: Sensor write failed
[  101.261886][ T4956] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  101.275125][ T3818] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  101.287145][ T3844] stk1135: probe of 4-1:0.0 failed with error -71
[  101.288976][ T3844] usb 4-1: USB disconnect, device number 2
[  101.309296][ T4956] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038 (0x7fffffff)
[  101.338785][ T3818] usb 5-1: USB disconnect, device number 5
[  101.475390][   T26] kauditd_printk_skb: 9 callbacks suppressed
[  101.475404][   T26] audit: type=1800 audit(1727465374.241:10): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.339" name="bus" dev="loop0" ino=18 res=0 errno=0
[  101.561466][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  101.717736][ T4947] loop1: detected capacity change from 0 to 32768
[  101.799174][ T4974] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  101.808299][ T4947] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  101.926167][ T4947] (syz.1.335,4947,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿÿ0xffffffffffffffff¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value
[  101.945923][    C0] vkms_vblank_simulate: vblank timer overrun
[  102.021929][ T4947] (syz.1.335,4947,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿÿ0xffffffffffffffff¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value
[  102.160332][ T4561] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  102.186718][ T3635] ocfs2: Unmounting device (7,1) on (node local)
[  102.410249][ T4561] usb 3-1: Using ep0 maxpacket: 32
[  102.530431][ T4561] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.572451][ T4561] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0
[  102.603099][ T4561] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.639354][ T4561] usb 3-1: config 0 descriptor??
[  102.648536][ T5004] loop4: detected capacity change from 0 to 512
[  102.694501][ T4561] usb 3-1: bad CDC descriptors
[  102.778174][ T5004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.788196][ T5004] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038 (0x7fffffff)
[  102.810279][   T14] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  102.897507][ T4561] usb 3-1: USB disconnect, device number 5
[  102.941655][ T3643] EXT4-fs (loop4): unmounting filesystem.
[  103.221209][   T14] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  103.240327][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.266123][   T14] usb 2-1: config 0 descriptor??
[  103.759331][   T14] gs_usb 2-1:0.0: Configuring for 2 interfaces
[  103.765833][ T5030] loop4: detected capacity change from 0 to 32768
[  104.170424][   T14] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  104.240324][   T14] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  104.371491][   T14] gs_usb: probe of 2-1:0.0 failed with error -71
[  104.408998][   T14] usb 2-1: USB disconnect, device number 5
[  104.546885][ T5070] netlink: 'syz.2.387': attribute type 10 has an invalid length.
[  104.565272][ T5070] bridge0: port 3(team0) entered blocking state
[  104.580422][ T5070] bridge0: port 3(team0) entered disabled state
[  104.597454][ T5070] device team0 entered promiscuous mode
[  104.617266][ T5070] device team_slave_0 entered promiscuous mode
[  104.623819][ T3814] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.644346][ T5070] device team_slave_1 entered promiscuous mode
[  104.675191][ T5070] bridge0: port 3(team0) entered blocking state
[  104.682801][ T5070] bridge0: port 3(team0) entered forwarding state
[  104.910362][ T3814] usb 4-1: Using ep0 maxpacket: 16
[  105.040566][ T3814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  105.057303][ T3814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  105.111061][ T3814] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  105.147739][ T3814] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  105.174734][ T3814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.204191][ T3814] usb 4-1: config 0 descriptor??
[  105.726989][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.770335][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.793604][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.819260][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.836311][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.849593][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.860380][ T3680] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  105.865972][ T3814] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  105.888866][ T3814] microsoft 0003:045E:07DA.0009: No inputs registered, leaving
[  105.919600][ T3814] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  105.963404][ T3814] microsoft 0003:045E:07DA.0009: no inputs found
[  105.975296][ T3814] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  105.996972][ T3814] usb 4-1: USB disconnect, device number 3
[  106.230494][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.255248][ T3680] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  106.277667][ T3680] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  106.309322][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.348884][ T3680] usb 5-1: config 0 descriptor??
[  106.378955][ T5130] loop0: detected capacity change from 0 to 256
[  106.418091][ T5132] device vlan2 entered promiscuous mode
[  106.450723][ T5132] device virt_wifi0 entered promiscuous mode
[  106.459983][ T5132] team0: Port device vlan2 added
[  106.629453][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.404'.
[  106.826599][ T5143] loop1: detected capacity change from 0 to 4096
[  106.897655][ T3680] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  106.924912][ T5143] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  106.945293][ T3680] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  106.981334][ T3680] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  106.988764][ T3680] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  107.076900][ T3680] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  107.095922][ T3680] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  107.139350][ T3680] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  107.175526][ T3680] usb 5-1: USB disconnect, device number 6
[  107.203582][ T3635] EXT4-fs (loop1): unmounting filesystem.
[  107.664395][ T5180] vivid-002: =================  START STATUS  =================
[  107.674675][ T5180] vivid-002: Radio HW Seek Mode: Bounded
[  107.682067][ T5180] vivid-002: Radio Programmable HW Seek: false
[  107.695988][ T5180] vivid-002: RDS Rx I/O Mode: Block I/O
[  107.706099][ T5180] vivid-002: Generate RBDS Instead of RDS: false
[  107.717393][ T5180] vivid-002: RDS Reception: true
[  107.727701][ T5180] vivid-002: RDS Program Type: 0 inactive
[  107.743996][ T5180] vivid-002: RDS PS Name:  inactive
[  107.749279][ T5180] vivid-002: RDS Radio Text:  inactive
[  107.790298][ T5180] vivid-002: RDS Traffic Announcement: false inactive
[  107.807385][ T5180] vivid-002: RDS Traffic Program: false inactive
[  107.821484][ T5180] vivid-002: RDS Music: false inactive
[  107.837209][ T5180] vivid-002: ==================  END STATUS  ==================
[  107.999113][ T5189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'.
[  108.238901][ T5164] loop2: detected capacity change from 0 to 32768
[  108.293323][ T5200] loop4: detected capacity change from 0 to 256
[  108.329542][ T5200] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  108.374509][ T5164] XFS (loop2): Mounting V5 Filesystem
[  108.509511][ T5164] XFS (loop2): Ending clean mount
[  108.612085][ T5224] loop4: detected capacity change from 0 to 16
[  108.631295][ T5224] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  108.661128][ T3639] XFS (loop2): Unmounting Filesystem
[  109.153523][ T5240] IPv6: Can't replace route, no match found
[  109.330511][ T4400] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  109.479449][ T5254] loop2: detected capacity change from 0 to 1764
[  109.580276][ T4400] usb 5-1: Using ep0 maxpacket: 8
[  109.700755][ T4400] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  109.719010][ T4400] usb 5-1: config 179 has no interface number 0
[  109.733942][ T4400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  109.758783][ T4400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  109.782704][ T4400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  109.797343][ T5268] netlink: 20 bytes leftover after parsing attributes in process `syz.0.460'.
[  109.813697][ T4400] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  109.834595][ T4400] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  109.849983][ T4400] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  109.868198][ T4400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.890566][ T5236] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  109.896554][ T5272] loop0: detected capacity change from 0 to 2048
[  109.919522][ T5272] EXT4-fs: Ignoring removed mblk_io_submit option
[  110.005623][ T5272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  110.030477][ T3680] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  110.086748][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  110.310106][   T26] audit: type=1400 audit(1727465383.081:11): apparmor="DENIED" operation="change_onexec" info="label not found" error=-2 profile="unconfined" name=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
[  110.377071][ T4400] usb 5-1: USB disconnect, device number 7
[  110.464112][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  110.464283][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  110.466808][   T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  110.480881][ T3680] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.526676][ T3680] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  110.543944][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.570719][ T3680] usb 2-1: config 0 descriptor??
[  110.743751][ T5301] loop0: detected capacity change from 0 to 2048
[  110.793512][ T5301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  110.843650][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  110.910440][   T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  110.941444][   T14] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  111.051662][ T3680] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[  111.060498][   T14] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  111.060526][   T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  111.060545][   T14] usb 3-1: SerialNumber: syz
[  111.156655][ T3680] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input18
[  111.287060][ T3680] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  111.340985][ T5311] loop4: detected capacity change from 0 to 4096
[  111.369605][   T14] usb 3-1: 0:2 : does not exist
[  111.464017][ T5311] ntfs: volume version 3.1.
[  111.500447][   T14] usb 3-1: USB disconnect, device number 6
[  111.585828][ T5307] loop3: detected capacity change from 0 to 32768
[  111.612008][ T5307] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.477 (5307)
[  111.695670][ T5307] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.731737][ T5307] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  111.744516][ T5314] netlink: 20 bytes leftover after parsing attributes in process `syz.4.480'.
[  111.780693][ T5307] BTRFS info (device loop3): using free space tree
[  111.825265][ T5305] loop0: detected capacity change from 0 to 32768
[  111.906449][ T5305] XFS (loop0): Mounting V5 Filesystem
[  111.964222][ T3680] usb 2-1: USB disconnect, device number 6
[  111.976398][ T5337] xt_hashlimit: max too large, truncated to 1048576
[  112.122046][ T5305] XFS (loop0): Ending clean mount
[  112.130352][ T5307] BTRFS info (device loop3): enabling ssd optimizations
[  112.145077][ T5346] mkiss: ax0: crc mode is auto.
[  112.149502][ T5305] XFS (loop0): Quotacheck needed: Please wait.
[  112.247277][ T5305] XFS (loop0): Quotacheck: Done.
[  112.251099][ T3892] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  112.427057][   T14] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  112.505753][ T3644] XFS (loop0): Unmounting Filesystem
[  112.634351][ T5358] loop1: detected capacity change from 0 to 16
[  112.676826][ T5358] erofs: (device loop1): mounted with root inode @ nid 36.
[  112.685405][   T14] usb 5-1: Using ep0 maxpacket: 8
[  112.831566][   T14] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  112.840094][ T5364] loop3: detected capacity change from 0 to 1024
[  112.870255][   T14] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  112.897181][   T14] usb 5-1: config 135 has no interface number 0
[  112.912433][   T14] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  112.933309][ T5364] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.100860][   T14] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  113.127500][   T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.154244][ T5374] loop2: detected capacity change from 0 to 2048
[  113.161736][   T14] usb 5-1: Product: syz
[  113.165931][   T14] usb 5-1: Manufacturer: syz
[  113.192539][   T14] usb 5-1: SerialNumber: syz
[  113.229041][ T5374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  113.286819][ T3892] EXT4-fs (loop3): unmounting filesystem.
[  113.294807][   T14] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  113.317343][ T5379] option changes via remount are deprecated (pid=5378 comm=syz.0.488)
[  113.319171][   T14] usb 5-1: No valid video chain found.
[  113.500361][ T3815] usb 5-1: USB disconnect, device number 8
[  114.428563][ T5430] loop4: detected capacity change from 0 to 512
[  114.555812][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.521'.
[  114.575925][ T5430] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  114.616324][ T5430] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038 (0x7fffffff)
[  114.724585][ T5430] EXT4-fs error (device loop4): ext4_add_entry:2484: inode #2: comm syz.4.519: Directory hole found for htree leaf block 0
[  114.751543][ T5411] loop2: detected capacity change from 0 to 32768
[  114.782231][ T5411] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 scanned by syz.2.511 (5411)
[  114.816370][ T5411] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  114.856897][ T5411] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  114.868941][ T3643] EXT4-fs (loop4): unmounting filesystem.
[  114.878402][ T5411] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  114.902371][ T5411] BTRFS info (device loop2): use lzo compression, level 0
[  114.909845][ T5411] BTRFS info (device loop2): using free space tree
[  114.990351][ T3680] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  115.192280][ T5468] loop0: detected capacity change from 0 to 256
[  115.207886][ T5468] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  115.250411][ T3680] usb 2-1: Using ep0 maxpacket: 32
[  115.275321][ T5411] BTRFS info (device loop2): enabling ssd optimizations
[  115.329802][ T5477] loop3: detected capacity change from 0 to 256
[  115.350680][ T5475] loop4: detected capacity change from 0 to 4096
[  115.370523][ T3680] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  115.392690][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.404102][ T3680] usb 2-1: config 0 descriptor??
[  115.429335][ T5478] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.446269][ T3680] gspca_main: sq930x-2.14.0 probing 041e:403c
[  115.487920][ T3639] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  115.503672][ T5477] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x0619d298, utbl_chksum : 0xe619d30d)
[  115.648421][ T5481] loop0: detected capacity change from 0 to 1024
[  115.806284][ T5483] loop4: detected capacity change from 0 to 1024
[  115.974771][ T3942] hfsplus: b-tree write err: -5, ino 4
[  116.138401][ T5493] syzkaller0: tun_chr_ioctl cmd 1074025677
[  116.165904][ T5493] syzkaller0: linktype set to 776
[  116.350365][ T3680] gspca_sq930x: reg_w 0105 bf00 failed -71
[  116.420450][ T3680] sq930x: probe of 2-1:0.0 failed with error -71
[  116.438981][ T3680] usb 2-1: USB disconnect, device number 7
[  116.444247][ T5508] serio: Serial port ptm0
[  116.617788][ T5517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'.
[  116.748178][ T5521] loop2: detected capacity change from 0 to 1024
[  116.847494][ T5521] hfsplus: catalog searching failed
[  116.908490][   T33] hfsplus: b-tree write err: -5, ino 4
[  116.910018][ T5530] loop3: detected capacity change from 0 to 1024
[  116.924035][ T5530] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  116.936119][ T5532] loop1: detected capacity change from 0 to 512
[  117.000436][ T3818] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  117.025623][ T5532] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  117.039667][ T5530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  117.058977][ T5532] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  117.095053][ T5530] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters
[  117.125909][ T5532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  117.134562][ T5532] System zones: 0-2, 18-18, 34-34
[  117.142872][ T5530] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  117.161060][ T5530] EXT4-fs (loop3): This should not happen!! Data will be lost
[  117.161060][ T5530] 
[  117.171436][ T5530] EXT4-fs (loop3): Total free blocks count 0
[  117.177479][ T5530] EXT4-fs (loop3): Free/Dirty block details
[  117.188158][ T5532] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  117.192376][ T5530] EXT4-fs (loop3): free_blocks=268435456
[  117.212229][ T5530] EXT4-fs (loop3): dirty_blocks=32
[  117.217373][ T5530] EXT4-fs (loop3): Block reservation details
[  117.224251][ T5530] EXT4-fs (loop3): i_reserved_data_blocks=2
[  117.236692][ T5532] EXT4-fs (loop1): 1 truncate cleaned up
[  117.247587][ T5532] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  117.266371][ T3942] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28
[  117.325385][ T3635] EXT4-fs (loop1): unmounting filesystem.
[  117.355741][ T5547] loop3: detected capacity change from 0 to 64
[  117.362872][ T3810] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  117.410570][ T3818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.422892][ T3818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.453515][ T3818] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  117.476346][ T3818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.501177][ T3818] usb 1-1: config 0 descriptor??
[  117.770617][ T3810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  117.780461][ T3810] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  117.950457][ T3810] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  117.962603][ T3810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.970268][ T3680] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.970982][ T3810] usb 5-1: Product: syz
[  117.987992][ T3810] usb 5-1: Manufacturer: syz
[  118.014210][ T3810] usb 5-1: SerialNumber: syz
[  118.019983][ T3818] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  118.070526][ T5542] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  118.118819][ T5562] loop1: detected capacity change from 0 to 4096
[  118.220719][ T3680] usb 4-1: Using ep0 maxpacket: 16
[  118.324549][ T3810] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8
[  118.430455][ T3818] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device
[  118.437905][ T3818] pyra 0003:1E7D:2CF6.000C: couldn't install mouse
[  118.452607][ T3818] pyra: probe of 0003:1E7D:2CF6.000C failed with error -71
[  118.486147][ T3818] usb 1-1: USB disconnect, device number 3
[  118.500650][ T3680] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  118.522959][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.540271][ T3680] usb 4-1: Product: syz
[  118.540392][    C0] usblp0: nonzero read bulk status received: -71
[  118.551043][ T3680] usb 4-1: Manufacturer: syz
[  118.555873][ T5542] usblp0: error -71 reading from printer
[  118.564118][ T3680] usb 4-1: SerialNumber: syz
[  118.588517][ T3680] usb 4-1: config 0 descriptor??
[  118.597746][ T3678] usb 5-1: USB disconnect, device number 9
[  118.611515][ T3678] usblp0: removed
[  118.632770][ T3680] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  118.744886][ T5568] loop2: detected capacity change from 0 to 32768
[  118.762244][ T5568] XFS: ikeep mount option is deprecated.
[  118.807478][ T5568] XFS (loop2): Mounting V5 Filesystem
[  118.856006][ T3680] gspca_sn9c2028: read1 error -32
[  118.866734][ T5568] XFS (loop2): Ending clean mount
[  118.883398][ T5568] XFS (loop2): Quotacheck needed: Please wait.
[  118.902894][ T3680] gspca_sn9c2028: read1 error -32
[  118.934746][ T5568] XFS (loop2): Quotacheck: Done.
[  118.968532][ T5585] loop1: detected capacity change from 0 to 1024
[  119.046831][   T33] hfsplus: b-tree write err: -5, ino 4
[  119.115855][ T3639] XFS (loop2): Unmounting Filesystem
[  119.176969][ T3810] usb 4-1: USB disconnect, device number 4
[  119.446315][ T5598] netlink: 'syz.0.581': attribute type 2 has an invalid length.
[  119.624763][ T5603] loop4: detected capacity change from 0 to 512
[  119.730021][ T5603] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  119.770077][ T5603] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038 (0x7fffffff)
[  119.998843][ T3643] EXT4-fs (loop4): unmounting filesystem.
[  120.435247][ T5590] loop1: detected capacity change from 0 to 32768
[  120.475821][ T5590] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  120.504540][ T5590] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  120.546983][ T5590] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  120.669080][ T5590] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  120.688028][ T5637] loop4: detected capacity change from 0 to 8192
[  120.736801][ T5637] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  120.796811][ T5625] loop3: detected capacity change from 0 to 32768
[  120.825489][ T5637] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  120.900920][ T5637] REISERFS (device loop4): using ordered data mode
[  120.907462][ T5637] reiserfs: using flush barriers
[  120.919904][ T5621] loop0: detected capacity change from 0 to 32768
[  120.939285][ T5625] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.593 (5625)
[  120.947165][ T5637] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  121.060530][ T5621] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.590 (5621)
[  121.068250][ T5625] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.086770][ T5637] REISERFS (device loop4): checking transaction log (loop4)
[  121.112497][ T5625] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  121.135235][ T5625] BTRFS info (device loop3): using free space tree
[  121.158050][ T5621] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.215989][ T5637] REISERFS (device loop4): Using r5 hash to sort names
[  121.227000][ T5637] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  121.242417][ T5637] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  121.252189][ T5621] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  121.252267][ T5621] BTRFS info (device loop0): using free space tree
[  121.421913][ T5637] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.473671][ T5637] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.504253][ T5637] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  121.524662][ T5625] BTRFS info (device loop3): enabling ssd optimizations
[  121.657394][   T26] audit: type=1800 audit(1727465394.431:12): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.593" name="file1" dev="loop3" ino=260 res=0 errno=0
[  121.730413][ T5621] BTRFS info (device loop0): enabling ssd optimizations
[  121.816229][ T5702] loop1: detected capacity change from 0 to 256
[  121.885572][ T3892] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  121.921218][ T5702] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  122.250677][ T5712] tap0: tun_chr_ioctl cmd 2147767521
[  122.270976][ T3644] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.730447][ T3808] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  122.982115][ T3808] usb 2-1: Using ep0 maxpacket: 16
[  123.004480][ T5735] loop2: detected capacity change from 0 to 8192
[  123.049822][ T5735] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  123.079781][ T5735] process 'syz.2.625' launched './file1' with NULL argv: empty string added
[  123.090779][ T3626] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  123.120611][ T3808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.140398][ T3808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.175589][ T3808] usb 2-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00
[  123.196036][ T3808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.211366][ T3808] usb 2-1: config 0 descriptor??
[  123.267322][ T5744] loop2: detected capacity change from 0 to 256
[  123.302062][ T5744] FAT-fs (loop2): Directory bread(block 64) failed
[  123.318899][ T5744] FAT-fs (loop2): Directory bread(block 65) failed
[  123.338185][ T5729] loop4: detected capacity change from 0 to 32768
[  123.339237][ T5744] FAT-fs (loop2): Directory bread(block 66) failed
[  123.369282][ T5744] FAT-fs (loop2): Directory bread(block 67) failed
[  123.369442][ T5729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.624 (5729)
[  123.379422][ T5744] FAT-fs (loop2): Directory bread(block 68) failed
[  123.408543][ T5744] FAT-fs (loop2): Directory bread(block 69) failed
[  123.422472][ T5744] FAT-fs (loop2): Directory bread(block 70) failed
[  123.429274][ T5744] FAT-fs (loop2): Directory bread(block 71) failed
[  123.429381][ T5729] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.441868][ T5744] FAT-fs (loop2): Directory bread(block 72) failed
[  123.455557][ T5729] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  123.470551][ T3626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.474771][ T5744] FAT-fs (loop2): Directory bread(block 73) failed
[  123.489443][ T3626] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.500308][ T5729] BTRFS info (device loop4): using free space tree
[  123.520040][ T3626] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  123.565180][ T3626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.648763][ T3626] usb 4-1: config 0 descriptor??
[  123.683665][ T3808] wacom 0003:056A:0300.000D: unknown main item tag 0x0
[  123.694084][ T3808] wacom 0003:056A:0300.000D: unknown main item tag 0x0
[  123.710855][ T3808] wacom 0003:056A:0300.000D: Unknown device_type for 'HID 056a:0300'. Assuming pen.
[  123.743289][ T3808] wacom 0003:056A:0300.000D: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.1-1/input0
[  123.763757][ T3808] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0300.000D/input/input19
[  123.843455][ T5729] BTRFS info (device loop4): enabling ssd optimizations
[  123.884668][ T3808] usb 2-1: USB disconnect, device number 8
[  124.032088][ T3643] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.156508][ T3626] logitech 0003:046D:C29C.000E: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  124.489673][ T5773] loop2: detected capacity change from 0 to 32768
[  124.573163][ T3626] logitech 0003:046D:C29C.000E: no inputs found
[  124.588101][ T3626] usb 4-1: USB disconnect, device number 5
[  124.666066][ T3808] XFS (loop2): Metadata CRC error detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb_quiet block 0x0 
[  124.683763][ T3808] XFS (loop2): Unmount and run xfs_repair
[  124.689640][ T3808] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  124.697785][ T3808] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  124.707082][ T3808] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  124.716226][ T3808] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  124.725879][ T3808] 00000030: 00 00 00 00 00 00 00 20 00 00 00 00 00 00 24 40  ....... ......$@
[  124.735195][ T3808] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  124.744484][ T3808] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[  124.754249][ T3808] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  124.763570][ T3808] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  124.875071][ T5791] loop1: detected capacity change from 0 to 512
[  124.912665][ T5791] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  124.969082][ T5791] EXT4-fs (loop1): 1 truncate cleaned up
[  124.985720][ T5791] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.112306][ T5782] loop4: detected capacity change from 0 to 32768
[  125.121318][ T5782] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.638 (5782)
[  125.136784][ T3635] EXT4-fs (loop1): unmounting filesystem.
[  125.154979][ T5782] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  125.170678][ T5782] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  125.191128][ T5782] BTRFS info (device loop4): using free space tree
[  125.584790][ T5782] BTRFS info (device loop4): enabling ssd optimizations
[  125.665812][ T5813] loop0: detected capacity change from 0 to 4096
[  125.755166][ T3643] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  125.910045][ T5831] loop1: detected capacity change from 0 to 4096
[  125.970668][ T5831] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  126.035335][ T5833] loop2: detected capacity change from 0 to 4096
[  126.085157][ T5833] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  126.152017][ T5831] ntfs3: loop1: failed to convert "c46c" to cp737
[  126.459847][ T5809] loop3: detected capacity change from 0 to 40427
[  126.477760][ T5809] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  126.529987][ T5809] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  126.562590][ T5809] F2FS-fs (loop3): invalid crc value
[  126.586850][ T5848] loop4: detected capacity change from 0 to 8
[  126.603078][ T5809] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.630943][ T5848] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  126.717452][ T5809] F2FS-fs (loop3): Start checkpoint disabled!
[  126.760959][ T5809] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  126.770416][ T5809] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  126.868755][ T5853] netlink: 'syz.4.659': attribute type 29 has an invalid length.
[  126.893525][ T5853] netlink: 'syz.4.659': attribute type 29 has an invalid length.
[  127.001491][ T3850] kworker/u4:6: attempt to access beyond end of device
[  127.001491][ T3850] loop3: rw=2049, sector=40960, nr_sectors = 40 limit=40427
[  127.197905][ T5842] loop1: detected capacity change from 0 to 32768
[  127.360466][ T5842] XFS (loop1): Mounting V5 Filesystem
[  127.445909][ T5850] loop2: detected capacity change from 0 to 32768
[  127.455953][ T5842] XFS (loop1): Ending clean mount
[  127.462935][ T5869] loop4: detected capacity change from 0 to 128
[  127.472030][ T5869] EXT4-fs: Ignoring removed orlov option
[  127.525942][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  127.544495][ T3635] XFS (loop1): Unmounting Filesystem
[  127.552319][ T5850] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  127.632493][ T5869] ext4 filesystem being mounted at /111/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  127.696102][ T5869] fscrypt (loop4, inode 12): Unsupported encryption flags (0x77)
[  127.808331][ T3643] EXT4-fs (loop4): unmounting filesystem.
[  127.817754][ T3639] ocfs2: Unmounting device (7,2) on (node local)
[  128.208121][ T5893] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready
[  128.624771][ T5912] loop2: detected capacity change from 0 to 256
[  128.976387][ T5890] loop0: detected capacity change from 0 to 32768
[  129.014171][ T5890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.672 (5890)
[  129.067426][ T5890] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.099424][ T5890] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  129.129774][ T5890] BTRFS info (device loop0): turning off barriers
[  129.149981][ T5890] BTRFS info (device loop0): force zlib compression, level 3
[  129.190498][ T5890] BTRFS info (device loop0): enabling auto defrag
[  129.193379][ T5927] loop1: detected capacity change from 0 to 512
[  129.200609][ T5890] BTRFS info (device loop0): max_inline at 4096
[  129.240071][ T5890] BTRFS info (device loop0): using free space tree
[  129.269104][ T5927] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  129.310799][ T5927] ext4 filesystem being mounted at /145/bus supports timestamps until 2038 (0x7fffffff)
[  129.356889][ T5909] loop3: detected capacity change from 0 to 32768
[  129.519783][ T5890] BTRFS info (device loop0): enabling ssd optimizations
[  129.543017][ T3635] EXT4-fs (loop1): unmounting filesystem.
[  129.610887][ T3644] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.769051][ T3629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop0 scanned by udevd (3629)
[  130.077980][ T5964] loop1: detected capacity change from 0 to 2048
[  130.171281][ T5964] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.576057][ T5984] 9pnet: Could not find request transport: f
[  131.106670][ T6015] loop0: detected capacity change from 0 to 128
[  131.715441][ T6039] loop2: detected capacity change from 0 to 1024
[  131.820448][ T6039] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  132.039481][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.048965][ T6030] loop4: detected capacity change from 0 to 32768
[  132.073282][ T6030] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  132.116160][ T3629] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 9
[  132.116510][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.222111][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.245538][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.298233][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.353978][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.429805][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.487969][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.514815][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.556849][ T3639] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  132.606858][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  132.613268][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  132.786092][ T6074] loop4: detected capacity change from 0 to 256
[  133.222049][ T6083] netlink: 236 bytes leftover after parsing attributes in process `syz.3.744'.
[  133.407279][ T6088] loop0: detected capacity change from 0 to 1024
[  133.451209][ T6088] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.505190][ T6088] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  133.550628][ T6088] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  133.659515][ T6088] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003]
[  133.700501][ T6088] System zones: 0-1, 3-36
[  133.713777][ T6096] loop1: detected capacity change from 0 to 64
[  133.728989][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.749349][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  133.857879][ T6098] loop3: detected capacity change from 0 to 512
[  133.891240][ T6098] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  133.931815][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  134.004260][ T6098] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2808: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  134.047042][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.069634][   T26] audit: type=1326 audit(1727465406.841:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.095167][ T6098] EXT4-fs (loop3): 1 truncate cleaned up
[  134.107169][ T6098] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  134.140711][   T26] audit: type=1326 audit(1727465406.841:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.197101][   T26] audit: type=1326 audit(1727465406.871:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.248120][   T26] audit: type=1326 audit(1727465406.871:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.256176][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.277123][   T26] audit: type=1326 audit(1727465406.871:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.323601][ T6082] loop4: detected capacity change from 0 to 32768
[  134.420481][   T26] audit: type=1326 audit(1727465406.891:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.469000][ T3892] EXT4-fs (loop3): unmounting filesystem.
[  134.533257][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.548741][   T26] audit: type=1326 audit(1727465406.911:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.639688][   T26] audit: type=1326 audit(1727465406.911:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.747532][ T3639] EXT4-fs (loop2): unmounting filesystem.
[  134.804797][   T26] audit: type=1326 audit(1727465406.911:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  134.918201][   T26] audit: type=1326 audit(1727465406.911:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.1.752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b397dff9 code=0x7ffc0000
[  135.194436][   T14] kernel read not supported for file /rfkill (pid: 14 comm: kworker/0:1)
[  135.502527][ T6140] input: syz1 as /devices/virtual/input/input22
[  135.865838][ T6150] loop0: detected capacity change from 0 to 2048
[  135.916070][ T6157] ubi0: attaching mtd0
[  135.962052][ T6150] NILFS (loop0): invalid segment: Checksum error in segment payload
[  135.978834][ T6157] ubi0: scanning is finished
[  135.996555][ T6150] NILFS (loop0): trying rollback from an earlier position
[  136.025942][ T6157] ubi0: empty MTD device detected
[  136.067306][ T6150] NILFS (loop0): recovery complete
[  136.103421][ T6163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.171726][ T6150] NILFS error (device loop0): nilfs_readdir: zero-length directory entry
[  136.217672][ T6150] Remounting filesystem read-only
[  136.287161][ T3638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  136.299138][ T6157] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  136.299346][ T3638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  136.320285][ T3638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  136.331793][ T3638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  136.346832][ T3638] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  136.354368][ T3638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  136.396218][ T6157] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  136.403625][ T6157] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  136.423750][ T6157] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  136.446128][ T6157] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  136.453445][ T6157] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  136.461588][ T6157] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2327688048
[  136.471624][ T6157] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  136.484274][ T6159] ubi0: detaching mtd0
[  136.487128][ T6171] ubi0: background thread "ubi_bgt0d" started, PID 6171
[  136.561715][ T6159] ubi0: mtd0 is detached
[  136.642587][ T6174] loop0: detected capacity change from 0 to 4096
[  136.736552][ T6177] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  136.974619][ T6183] loop3: detected capacity change from 0 to 512
[  137.036989][ T6183] EXT4-fs: Ignoring removed nobh option
[  137.075076][ T6183] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  137.157383][ T6183] EXT4-fs (loop3): 1 truncate cleaned up
[  137.187679][ T6183] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.398578][ T3892] EXT4-fs (loop3): unmounting filesystem.
[  137.659515][   T46] device hsr_slave_0 left promiscuous mode
[  137.676909][   T46] device hsr_slave_1 left promiscuous mode
[  137.689312][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.697547][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.706030][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.713957][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.734960][   T46] device team0 left promiscuous mode
[  137.770326][ T3626] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  137.770358][   T46] device team_slave_0 left promiscuous mode
[  137.792445][ T6222] ubi0: attaching mtd0
[  137.797723][ T6222] ubi0: scanning is finished
[  137.798996][   T46] device team_slave_1 left promiscuous mode
[  137.829627][   T46] bridge0: port 3(team0) entered disabled state
[  137.847389][   T46] device bridge_slave_1 left promiscuous mode
[  137.854468][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.875657][   T46] device bridge_slave_0 left promiscuous mode
[  137.895345][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.968078][   T46] device veth1_macvtap left promiscuous mode
[  137.968087][ T6222] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  137.974745][   T46] device veth0_macvtap left promiscuous mode
[  137.990048][   T46] device veth1_vlan left promiscuous mode
[  137.996133][   T46] device veth0_vlan left promiscuous mode
[  138.005119][ T6222] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  138.013369][ T3626] usb 4-1: Using ep0 maxpacket: 8
[  138.021465][ T6222] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  138.028644][ T6222] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  138.040691][ T6222] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  138.047683][ T6222] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  138.064290][ T6222] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2327688048
[  138.077929][ T6222] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  138.096976][ T6227] ubi0: background thread "ubi_bgt0d" started, PID 6227
[  138.106078][ T6224] ubi0: detaching mtd0
[  138.142662][ T6224] ubi0: mtd0 is detached
[  138.303065][ T3626] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a5, bcdDevice=23.a2
[  138.322265][ T3626] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.353254][ T3626] usb 4-1: Product: syz
[  138.357457][ T3626] usb 4-1: Manufacturer: syz
[  138.368353][ T3626] usb 4-1: SerialNumber: syz
[  138.397958][ T3626] usb 4-1: config 0 descriptor??
[  138.447206][   T48] Bluetooth: hci1: command tx timeout
[  138.456011][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.500345][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.506730][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.644442][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.675405][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.751420][ T3626] usb 4-1: dvb_usb_v2: found a 'Terratec H7 Rev.4' in warm state
[  138.777431][ T3626] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  138.800044][ T3626] dvbdev: DVB: registering new adapter (Terratec H7 Rev.4)
[  138.808605][ T3626] usb 4-1: media controller created
[  138.819864][ T3626] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  138.835166][ T3626] usb 4-1: dvb_usb_v2: MAC address: 00:00:00:00:00:00
[  138.864986][ T3626] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.054533][   T46] team0 (unregistering): Port device team_slave_1 removed
[  139.104643][   T46] team0 (unregistering): Port device team_slave_0 removed
[  139.167712][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  139.209668][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  139.645880][   T46] bond0 (unregistering): Released all slaves
[  139.989613][ T6167] chnl_net:caif_netlink_parms(): no params data found
[  140.032815][ T6266] ubi0: attaching mtd0
[  140.047195][ T6266] ubi0: scanning is finished
[  140.096067][ T6266] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  140.104511][ T6266] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  140.150419][ T6266] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  140.181072][ T6266] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  140.213973][ T6266] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  140.240286][ T6266] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  140.249061][ T6266] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2327688048
[  140.262773][ T6266] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  140.277771][ T6269] ubi0: background thread "ubi_bgt0d" started, PID 6269
[  140.285873][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.296300][ T6268] ubi0: detaching mtd0
[  140.315913][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.325482][ T6268] ubi0: mtd0 is detached
[  140.344493][ T6167] device bridge_slave_0 entered promiscuous mode
[  140.369973][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.405279][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.443383][ T6167] device bridge_slave_1 entered promiscuous mode
[  140.520454][   T48] Bluetooth: hci1: command tx timeout
[  140.583535][   T14] usb 4-1: USB disconnect, device number 6
[  140.652602][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  140.694480][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  140.838175][ T6293] loop0: detected capacity change from 0 to 1024
[  140.838229][ T6167] team0: Port device team_slave_0 added
[  140.877015][ T6293] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  140.909940][ T6293] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[  140.912934][ T6167] team0: Port device team_slave_1 added
[  140.938317][ T6293] EXT4-fs (loop0): invalid journal inode
[  140.956636][ T6293] EXT4-fs (loop0): can't get journal size
[  140.976744][ T6293] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  141.027003][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0
[  141.040057][ T6293] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 37: comm syz.0.813: path /179/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  141.091630][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.131462][ T6293] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz.0.813: path /179/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0
[  141.164566][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  141.185857][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1
[  141.197359][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  141.226096][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  141.296971][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  141.342758][ T6167] device hsr_slave_0 entered promiscuous mode
[  141.369882][ T6167] device hsr_slave_1 entered promiscuous mode
[  141.393428][ T6167] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  141.409595][ T6167] Cannot create hsr debugfs directory
[  141.969627][ T6317] device bond1 entered promiscuous mode
[  141.981418][ T6317] 8021q: adding VLAN 0 to HW filter on device bond1
[  142.038877][ T6297] loop4: detected capacity change from 0 to 40427
[  142.080558][ T6297] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  142.088566][ T6297] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  142.147694][ T6297] F2FS-fs (loop4): Found nat_bits in checkpoint
[  142.235992][ T6297] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  142.245209][ T6297] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  142.327979][ T6297] Process accounting resumed
[  142.348695][ T6317] bond1 (unregistering): Released all slaves
[  142.600659][   T48] Bluetooth: hci1: command tx timeout
[  142.937142][ T6167] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  142.948374][ T6167] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  142.964002][ T6167] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  142.980115][ T6167] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  143.096152][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.120039][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  143.129029][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  143.141401][ T6167] 8021q: adding VLAN 0 to HW filter on device team0
[  143.155544][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  143.164983][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.174569][ T3850] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.181696][ T3850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.189410][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.208147][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.217655][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.226739][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.233861][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.249381][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  143.267510][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  143.281699][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  143.294848][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.303667][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.320122][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.329652][ T3850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.345366][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  143.354904][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  143.366783][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  143.376638][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  143.388862][ T6167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  143.609727][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  143.625950][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  143.642108][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0
[  143.673125][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  143.686214][ T1114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  143.711931][ T6167] device veth0_vlan entered promiscuous mode
[  143.719008][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  143.728676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  143.749119][ T6167] device veth1_vlan entered promiscuous mode
[  143.757780][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  143.766644][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  143.776403][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  143.801864][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  143.810143][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  143.822175][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  143.839707][ T6167] device veth0_macvtap entered promiscuous mode
[  143.858010][ T6167] device veth1_macvtap entered promiscuous mode
[  143.884379][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.908017][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.918706][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.934661][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.944984][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.956420][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.968262][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  143.979491][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  143.994572][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0
[  144.004113][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  144.013196][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  144.021581][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  144.037892][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  144.049988][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.068766][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.079870][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.090721][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.101234][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.111988][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.122979][ T6167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  144.134933][ T6167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  144.146313][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1
[  144.157829][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  144.167924][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  144.193019][ T6167] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  144.210001][ T6167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  144.218784][ T6167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  144.234791][ T6167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  144.322539][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.341659][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.376826][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  144.388252][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  144.397958][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  144.412420][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  144.682360][   T48] Bluetooth: hci1: command tx timeout
[  144.735879][ T6399] ubi0: attaching mtd0
[  144.741940][ T6399] ubi0: scanning is finished
[  144.794136][ T6399] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  144.802399][ T6399] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  144.809796][ T6399] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  144.818031][ T6399] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  144.829487][ T6399] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  144.836648][ T6399] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  144.847541][ T6399] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2327688048
[  144.858283][ T6399] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  144.879624][ T6402] ubi0: background thread "ubi_bgt0d" started, PID 6402
[  144.888721][ T6401] ubi0: detaching mtd0
[  144.898018][ T6401] ubi0: mtd0 is detached
[  145.047927][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.071461][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.079789][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.088601][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.097090][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.130094][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.157339][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.179031][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.195599][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.209538][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.236321][ T4562] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  145.273271][ T4562] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  145.437096][ T6420] ubi0: attaching mtd0
[  145.446937][ T6420] ubi0: scanning is finished
[  145.575649][ T6420] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  145.590622][ T6420] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  145.604214][ T6420] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  145.621791][ T6420] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  145.646423][ T6420] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  145.670342][ T6420] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  145.693174][ T6420] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2327688048
[  145.730311][ T6420] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  145.765908][ T6426] ubi0: background thread "ubi_bgt0d" started, PID 6426
[  145.773873][ T6424] ubi0: detaching mtd0
[  145.825375][ T6387] loop0: detected capacity change from 0 to 40427
[  145.839739][ T6424] ubi0: mtd0 is detached
[  145.869223][ T6387] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  145.908815][ T6387] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  146.005707][ T6387] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.104306][ T6440] ubi0: attaching mtd0
[  146.123049][ T6440] ubi0: scanning is finished
[  146.181266][ T6387] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  146.200563][ T6387] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.291485][ T6387] Process accounting resumed
[  146.317300][ T6440] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  146.343556][ T6440] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  146.372112][ T6440] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  146.399449][ T6440] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  146.427448][ T6440] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  146.457263][ T6440] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  146.509186][ T6440] ubi0: max/mean erase counter: 2/1, WL threshold: 4096, image sequence number: 2327688048
[  146.547730][ T6440] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  146.619390][ T6450] ubi0: background thread "ubi_bgt0d" started, PID 6450
[  146.680885][ T6443] ubi0: detaching mtd0
[  146.687932][ T6443] ubi0: mtd0 is detached
[  147.264198][ T6476] loop1: detected capacity change from 0 to 64
[  147.398692][ T6476] syz.1.852: attempt to access beyond end of device
[  147.398692][ T6476] loop1: rw=34817, sector=39, nr_sectors = 125 limit=64
[  147.457747][ T6476] syz.1.852: attempt to access beyond end of device
[  147.457747][ T6476] loop1: rw=34817, sector=167, nr_sectors = 1 limit=64
[  147.520273][ T6476] syz.1.852: attempt to access beyond end of device
[  147.520273][ T6476] loop1: rw=34817, sector=169, nr_sectors = 1 limit=64
[  147.527559][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.586328][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.589850][ T6476] syz.1.852: attempt to access beyond end of device
[  147.589850][ T6476] loop1: rw=34817, sector=171, nr_sectors = 7 limit=64
[  147.606529][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.618081][ T6492] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  147.629981][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.637603][ T6476] syz.1.852: attempt to access beyond end of device
[  147.637603][ T6476] loop1: rw=34817, sector=179, nr_sectors = 140 limit=64
[  147.652608][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.661248][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.669340][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.686138][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.699291][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.712895][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.725025][ T3677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  147.742978][ T3677] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  148.160991][ T3815] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  148.426720][ T6531] loop0: detected capacity change from 0 to 164
[  148.551650][ T3815] usb 2-1: config 0 interface 0 has no altsetting 0
[  148.558302][ T3815] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  148.591363][ T6531] rock: directory entry would overflow storage
[  148.597558][ T6531] rock: sig=0x4f50, size=4, remaining=3
[  148.626070][ T3815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.635484][ T6531] iso9660: Corrupted directory entry in block 4 of inode 1792
[  148.660969][ T3815] usb 2-1: config 0 descriptor??
[  149.158504][ T6542] loop3: detected capacity change from 0 to 512
[  149.225734][ T6542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  149.246664][ T6542] ext4 filesystem being mounted at /145/bus supports timestamps until 2038 (0x7fffffff)
[  149.263068][ T6535] loop2: detected capacity change from 0 to 32768
[  149.390025][ T3892] EXT4-fs (loop3): unmounting filesystem.
[  149.569075][ T3815] video4linux radio32: keene_cmd_main failed (-71)
[  149.578751][ T3815] radio-keene 2-1:0.0: V4L2 device registered as radio32
[  149.621509][ T3815] usb 2-1: USB disconnect, device number 9
[  150.748427][ T6601] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  151.054542][ T6615] device bridge_slave_1 left promiscuous mode
[  151.119046][ T6615] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.208484][ T6640] input: syz1 as /devices/virtual/input/input23
[  152.354376][ T6629] loop4: detected capacity change from 0 to 32768
[  152.410982][ T6629] read_mapping_page failed!
[  152.528018][ T6634] loop1: detected capacity change from 0 to 40427
[  152.579064][ T6634] F2FS-fs (loop1): Found nat_bits in checkpoint
[  152.631167][ T3677] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  152.646695][ T6634] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  152.736697][ T3635] syz-executor: attempt to access beyond end of device
[  152.736697][ T3635] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  152.865934][ T6644] loop0: detected capacity change from 0 to 32768
[  152.878564][ T6644] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.908 (6644)
[  152.901971][ T6644] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  152.939710][ T6644] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  152.949812][ T6644] BTRFS info (device loop0): using free space tree
[  153.010579][ T3677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.031257][ T3677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.060390][ T3677] usb 4-1: New USB device found, idVendor=056a, idProduct=0065, bcdDevice= 0.00
[  153.080790][ T3677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.100910][ T3677] usb 4-1: config 0 descriptor??
[  153.224172][ T6670] input input24: cannot allocate more than FF_MAX_EFFECTS effects
[  153.387450][ T6644] BTRFS info (device loop0): enabling ssd optimizations
[  153.561947][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  153.596405][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.644545][ T3677] wacom 0003:056A:0065.0011: unknown main item tag 0x7
[  153.648968][ T3644] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  153.663622][ T3677] wacom 0003:056A:0065.0011: unknown main item tag 0x4
[  153.683223][ T6687] loop4: detected capacity change from 0 to 2048
[  153.690703][ T3677] wacom 0003:056A:0065.0011: Unknown device_type for 'HID 056a:0065'. Assuming pen.
[  153.702562][ T3677] wacom 0003:056A:0065.0011: hidraw0: USB HID v0.00 Device [HID 056a:0065] on usb-dummy_hcd.3-1/input0
[  153.719956][ T6687] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  153.733324][ T3677] input: Wacom Bamboo Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0065.0011/input/input25
[  153.777531][ T6688] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.900536][ T3677] usb 4-1: USB disconnect, device number 7
[  154.237490][ T6700] loop4: detected capacity change from 0 to 8
[  154.781792][ T6723] netlink: 20 bytes leftover after parsing attributes in process `syz.1.934'.
[  154.825839][ T6721] loop0: detected capacity change from 0 to 4096
[  154.962066][ T6721] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  155.033191][ T6721] EXT4-fs (loop0): shut down requested (2)
[  155.052801][ T6713] loop2: detected capacity change from 0 to 32768
[  155.077952][ T6721] EXT4-fs warning (device loop0): ext4_empty_dir:3154: inode #12: comm syz.0.932: directory missing '..'
[  155.137170][ T6713] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  155.148871][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  155.369005][ T6167] ocfs2: Unmounting device (7,2) on (node local)
[  155.755491][ T6750] IPVS: persistence engine module ip_vs_pe_X not found
[  155.881522][ T3626] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  156.126946][ T3626] usb 5-1: Using ep0 maxpacket: 16
[  156.330409][ T3626] usb 5-1: config 0 has no interfaces?
[  156.500754][ T3626] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  156.520870][ T3626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.528984][ T3626] usb 5-1: Product: syz
[  156.554143][ T3626] usb 5-1: Manufacturer: syz
[  156.568986][ T3626] usb 5-1: SerialNumber: syz
[  156.590055][ T3626] usb 5-1: config 0 descriptor??
[  156.789210][ T6765] loop2: detected capacity change from 0 to 32768
[  156.829255][ T6765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.951 (6765)
[  156.858394][ T3677] usb 5-1: USB disconnect, device number 10
[  156.871326][ T6765] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.890508][ T6765] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  156.909563][ T6765] BTRFS info (device loop2): use no compression
[  156.929834][ T6765] BTRFS info (device loop2): force zlib compression, level 3
[  156.950109][ T6765] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  156.985711][ T6765] BTRFS info (device loop2): use lzo compression, level 0
[  156.995863][ T6765] BTRFS info (device loop2): turning on flush-on-commit
[  157.017571][ T6765] BTRFS info (device loop2): enabling auto defrag
[  157.036315][ T6765] BTRFS info (device loop2): using free space tree
[  157.129015][ T6771] loop0: detected capacity change from 0 to 32768
[  157.158626][ T6773] loop3: detected capacity change from 0 to 40427
[  157.179756][ T6773] F2FS-fs (loop3): invalid crc value
[  157.192872][ T6765] BTRFS info (device loop2): enabling ssd optimizations
[  157.202624][ T6773] F2FS-fs (loop3): Found nat_bits in checkpoint
[  157.221334][ T6771] XFS (loop0): Mounting V5 Filesystem
[  157.276909][ T6773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  157.286054][ T6167] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  157.348569][ T3892] syz-executor: attempt to access beyond end of device
[  157.348569][ T3892] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  157.748444][ T6771] XFS (loop0): Ending clean mount
[  157.822691][ T6771] XFS (loop0): Quotacheck needed: Please wait.
[  157.914910][ T6771] XFS (loop0): Quotacheck: Done.
[  157.918600][ T6816] device netdevsim0 entered promiscuous mode
[  157.956871][ T6816] device macsec1 entered promiscuous mode
[  158.008438][ T6816] device netdevsim0 left promiscuous mode
[  158.071842][ T3644] XFS (loop0): Unmounting Filesystem
[  159.653094][ T6845] loop3: detected capacity change from 0 to 32768
[  160.226176][ T6895] loop3: detected capacity change from 0 to 1024
[  160.274105][ T6895] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a000c118, mo2=0002]
[  160.290277][ T3841] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  160.301173][ T6895] System zones: 0-1, 3-12
[  160.317841][ T6900] loop2: detected capacity change from 0 to 512
[  160.324883][ T6900] EXT4-fs: Ignoring removed i_version option
[  160.326539][ T6895] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  160.331407][ T6900] EXT4-fs: Ignoring removed nobh option
[  160.342292][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'.
[  160.354942][ T6900] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  160.384122][ T6900] EXT4-fs (loop2): 1 truncate cleaned up
[  160.389931][ T6900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  160.530420][ T3841] usb 5-1: Using ep0 maxpacket: 32
[  160.577248][ T6167] EXT4-fs (loop2): unmounting filesystem.
[  160.577756][ T3892] EXT4-fs (loop3): unmounting filesystem.
[  160.810515][ T3841] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  160.840273][ T3841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.848305][ T3841] usb 5-1: Product: syz
[  160.878652][ T3841] usb 5-1: Manufacturer: syz
[  160.889597][ T3841] usb 5-1: SerialNumber: syz
[  160.909447][ T3841] usb 5-1: config 0 descriptor??
[  160.962155][ T3841] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  161.555461][ T6954] loop0: detected capacity change from 0 to 4096
[  161.603771][ T6954] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  161.706504][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  161.843673][ T3841] gspca_stk1135: reg_w 0x5 err -71
[  161.849859][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.875129][ T3841] gspca_stk1135: Sensor write failed
[  161.890129][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.897014][ T3841] gspca_stk1135: Sensor write failed
[  161.903166][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.909502][ T3841] gspca_stk1135: Sensor read failed
[  161.915037][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.921475][ T3841] gspca_stk1135: Sensor read failed
[  161.926693][ T3841] gspca_stk1135: Detected sensor type unknown (0x0)
[  161.934040][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.940448][ T3841] gspca_stk1135: Sensor read failed
[  161.946170][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.952563][ T3841] gspca_stk1135: Sensor read failed
[  161.957761][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.964440][ T3841] gspca_stk1135: Sensor write failed
[  161.969721][ T3841] gspca_stk1135: serial bus timeout: status=0x00
[  161.976097][ T3841] gspca_stk1135: Sensor write failed
[  161.981470][ T3841] stk1135: probe of 5-1:0.0 failed with error -71
[  161.998760][ T3841] usb 5-1: USB disconnect, device number 11
[  162.180909][ T3818] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  162.295927][ T6978] vivid-001: =================  START STATUS  =================
[  162.304277][ T6978] vivid-001: Radio HW Seek Mode: Bounded
[  162.309936][ T6978] vivid-001: Radio Programmable HW Seek: false
[  162.316832][ T6978] vivid-001: RDS Rx I/O Mode: Block I/O
[  162.323033][ T6978] vivid-001: Generate RBDS Instead of RDS: false
[  162.329467][ T6978] vivid-001: RDS Reception: true
[  162.334562][ T6978] vivid-001: RDS Program Type: 0 inactive
[  162.340553][ T6978] vivid-001: RDS PS Name:  inactive
[  162.345866][ T6978] vivid-001: RDS Radio Text:  inactive
[  162.350487][ T3626] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  162.361285][ T6978] vivid-001: RDS Traffic Announcement: false inactive
[  162.368122][ T6978] vivid-001: RDS Traffic Program: false inactive
[  162.374879][ T6978] vivid-001: RDS Music: false inactive
[  162.380727][ T6978] vivid-001: ==================  END STATUS  ==================
[  162.584501][ T3818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.602489][ T3818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.629411][ T3818] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.666003][ T3818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.692438][ T3818] usb 3-1: config 0 descriptor??
[  162.714140][ T3626] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  162.739934][ T3626] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  162.846136][ T3626] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  162.857062][ T3626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  162.877405][ T3626] usb 1-1: SerialNumber: syz
[  162.898831][ T6997] loop4: detected capacity change from 0 to 1764
[  163.058451][ T7002] xt_hashlimit: max too large, truncated to 1048576
[  163.162804][ T3626] usb 1-1: 0:2 : does not exist
[  163.199816][ T3626] usb 1-1: USB disconnect, device number 4
[  163.243200][ T3629] udevd[3629]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  163.278713][ T3818] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  163.290103][ T3818] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  163.308140][ T3818] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  163.316417][ T3818] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  163.324588][ T3818] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  163.348751][ T3818] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  163.390450][ T3818] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  163.541661][ T3710] usb 3-1: USB disconnect, device number 7
[  163.841963][ T7027] loop4: detected capacity change from 0 to 512
[  163.857293][ T7024] loop0: detected capacity change from 0 to 1024
[  163.871746][ T7027] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  163.919914][ T7027] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  163.941305][ T7024] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  163.950030][ T7027] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  163.978512][ T7027] System zones: 0-2, 18-18, 34-34
[  163.993347][ T7009] loop3: detected capacity change from 0 to 32768
[  164.001943][ T7027] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  164.017001][ T7009] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 scanned by syz.3.1048 (7009)
[  164.038738][ T7027] EXT4-fs (loop4): 1 truncate cleaned up
[  164.047635][ T7009] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  164.059712][ T7024] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  164.071341][ T7027] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  164.097326][ T7009] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  164.175570][ T7009] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  164.240531][ T7009] BTRFS info (device loop3): use lzo compression, level 0
[  164.275898][ T7009] BTRFS info (device loop3): using free space tree
[  164.304637][ T3644] EXT4-fs (loop0): unmounting filesystem.
[  164.333148][ T3643] EXT4-fs (loop4): unmounting filesystem.
[  164.436255][ T7050] loop4: detected capacity change from 0 to 1024
[  164.581989][ T7009] BTRFS info (device loop3): enabling ssd optimizations
[  164.602801][ T1114] hfsplus: b-tree write err: -5, ino 4
[  164.788243][ T3892] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  164.830398][ T3892] assertion failed: list_empty(&fs_info->delayed_iputs), in fs/btrfs/disk-io.c:4707
[  164.853723][ T3892] ------------[ cut here ]------------
[  164.859241][ T3892] kernel BUG at fs/btrfs/ctree.h:3717!
[  164.915386][ T3892] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  164.921492][ T3892] CPU: 1 PID: 3892 Comm: syz-executor Not tainted 6.1.111-syzkaller #0
[  164.929735][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  164.939882][ T3892] RIP: 0010:assertfail+0x18/0x1a
[  164.944834][ T3892] Code: c0 b1 4d 8b 48 c7 c2 e0 ae 4d 8b e8 17 e4 ff ff 0f 0b 89 f1 48 89 fe 48 c7 c7 40 e2 4d 8b 48 c7 c2 b0 b3 4d 8b e8 fd e3 ff ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec
[  164.964545][ T3892] RSP: 0018:ffffc90004f97b38 EFLAGS: 00010246
[  164.970620][ T3892] RAX: 0000000000000051 RBX: ffff88805c00cd58 RCX: ce2a30f75f5b8400
[  164.978591][ T3892] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  164.986549][ T3892] RBP: ffffc90004f97ce0 R08: ffffffff816e4eac R09: fffff520009f2f09
[  164.994506][ T3892] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805c00c010
[  165.002474][ T3892] R13: ffff88805c00c000 R14: dffffc0000000000 R15: 0000000000000000
[  165.010442][ T3892] FS:  00005555939c5500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  165.019363][ T3892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.025936][ T3892] CR2: 0000001b2f01cff8 CR3: 0000000054c52000 CR4: 00000000003506e0
[  165.033898][ T3892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.041854][ T3892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.049806][ T3892] Call Trace:
[  165.053068][ T3892]  <TASK>
[  165.055987][ T3892]  ? __die_body+0x5e/0xa0
[  165.060309][ T3892]  ? die+0x83/0xb0
[  165.064020][ T3892]  ? do_trap+0x11e/0x350
[  165.068246][ T3892]  ? assertfail+0x18/0x1a
[  165.072560][ T3892]  ? assertfail+0x18/0x1a
[  165.076879][ T3892]  ? do_error_trap+0x13d/0x1e0
[  165.081638][ T3892]  ? assertfail+0x18/0x1a
[  165.085963][ T3892]  ? do_int3+0x30/0x30
[  165.090021][ T3892]  ? rcu_is_watching+0x11/0xb0
[  165.094771][ T3892]  ? handle_invalid_op+0x2c/0x40
[  165.099697][ T3892]  ? assertfail+0x18/0x1a
[  165.104014][ T3892]  ? exc_invalid_op+0x2f/0x40
[  165.108679][ T3892]  ? asm_exc_invalid_op+0x16/0x20
[  165.113696][ T3892]  ? __wake_up_klogd+0xcc/0x100
[  165.118531][ T3892]  ? assertfail+0x18/0x1a
[  165.122845][ T3892]  ? assertfail+0x18/0x1a
[  165.127157][ T3892]  close_ctree+0x830/0xc35
[  165.131560][ T3892]  ? hook_sb_delete+0xa5a/0xb80
[  165.136400][ T3892]  ? hook_sb_delete+0x842/0xb80
[  165.141236][ T3892]  ? init_tree_roots+0x1d92/0x1d92
[  165.146331][ T3892]  ? hook_sb_delete+0x19f/0xb80
[  165.151167][ T3892]  ? __fsnotify_vfsmount_delete+0x20/0x20
[  165.156870][ T3892]  ? clear_inode+0x150/0x150
[  165.161444][ T3892]  ? btrfs_attach_transaction_barrier+0x30/0x90
[  165.167669][ T3892]  ? btrfs_sync_fs+0x1c1/0x700
[  165.172424][ T3892]  ? fscrypt_destroy_keyring+0x282/0x2a0
[  165.178041][ T3892]  ? btrfs_fill_super+0x2d0/0x2d0
[  165.183050][ T3892]  generic_shutdown_super+0x130/0x340
[  165.188413][ T3892]  kill_anon_super+0x37/0x60
[  165.192990][ T3892]  btrfs_kill_super+0x3d/0x50
[  165.197651][ T3892]  deactivate_locked_super+0xa0/0x110
[  165.203008][ T3892]  cleanup_mnt+0x490/0x520
[  165.207408][ T3892]  ? lockdep_hardirqs_on+0x94/0x130
[  165.212593][ T3892]  task_work_run+0x246/0x300
[  165.217169][ T3892]  ? task_work_cancel+0x2e0/0x2e0
[  165.222179][ T3892]  ? exit_to_user_mode_loop+0x39/0x100
[  165.227621][ T3892]  exit_to_user_mode_loop+0xde/0x100
[  165.232887][ T3892]  exit_to_user_mode_prepare+0xb1/0x140
[  165.238412][ T3892]  syscall_exit_to_user_mode+0x60/0x270
[  165.243944][ T3892]  do_syscall_64+0x47/0xb0
[  165.248351][ T3892]  ? clear_bhb_loop+0x45/0xa0
[  165.253018][ T3892]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  165.258898][ T3892] RIP: 0033:0x7fdc00f7f327
[  165.263307][ T3892] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  165.282915][ T3892] RSP: 002b:00007ffe1b0ebac8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  165.291319][ T3892] RAX: 0000000000000000 RBX: 00007fdc00ff0134 RCX: 00007fdc00f7f327
[  165.299274][ T3892] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe1b0ebb80
[  165.307232][ T3892] RBP: 00007ffe1b0ebb80 R08: 0000000000000000 R09: 0000000000000000
[  165.315185][ T3892] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe1b0ecc00
[  165.323139][ T3892] R13: 00007fdc00ff0134 R14: 0000000000027da0 R15: 00007ffe1b0ecc40
[  165.331101][ T3892]  </TASK>
[  165.334101][ T3892] Modules linked in:
[  165.341277][ T3892] ---[ end trace 0000000000000000 ]---
[  165.346794][ T3892] RIP: 0010:assertfail+0x18/0x1a
[  165.363018][ T3892] Code: c0 b1 4d 8b 48 c7 c2 e0 ae 4d 8b e8 17 e4 ff ff 0f 0b 89 f1 48 89 fe 48 c7 c7 40 e2 4d 8b 48 c7 c2 b0 b3 4d 8b e8 fd e3 ff ff <0f> 0b 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec
[  165.403182][ T3892] RSP: 0018:ffffc90004f97b38 EFLAGS: 00010246
[  165.409295][ T3892] RAX: 0000000000000051 RBX: ffff88805c00cd58 RCX: ce2a30f75f5b8400
[  165.415967][ T7045] loop1: detected capacity change from 0 to 32768
[  165.435688][ T7045] XFS: ikeep mount option is deprecated.
[  165.438987][ T3892] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  165.457497][ T3892] RBP: ffffc90004f97ce0 R08: ffffffff816e4eac R09: fffff520009f2f09
[  165.467362][ T3892] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88805c00c010
[  165.475843][ T7045] XFS (loop1): Mounting V5 Filesystem
[  165.481488][ T3892] R13: ffff88805c00c000 R14: dffffc0000000000 R15: 0000000000000000
[  165.489508][ T7045] XFS (loop1): Ending clean mount
[  165.489551][ T3892] FS:  00005555939c5500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  165.497006][ T7045] XFS (loop1): Quotacheck needed: Please wait.
[  165.504415][ T3892] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  165.516514][ T3892] CR2: 00007faa07108178 CR3: 0000000054c52000 CR4: 00000000003506f0
[  165.517549][ T7045] XFS (loop1): Quotacheck: Done.
[  165.525101][ T3892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  165.539286][ T3892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  165.547643][ T3892] Kernel panic - not syncing: Fatal exception
[  165.553929][ T3892] Kernel Offset: disabled
[  165.558241][ T3892] Rebooting in 86400 seconds..