last executing test programs:

5.180343529s ago: executing program 1 (id=738):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x1, 0x10, "12292083d584a74b161779b6cfacd7ae"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x20, 0x1, 0x33, "9afeb0dda96df434fb3d456cff632778f6b3d0e1fb91718d4ea89a2a0cef5071bb15b88712b58540713dfa0f853a0ba376d464"}, 0x0})

3.921756542s ago: executing program 3 (id=747):
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2)
r0 = syz_io_uring_setup(0x239, &(0x7f00000004c0)={0x0, 0x0, 0x10100, 0x1, 0x80000}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x1e4011, 0x0)

3.745545146s ago: executing program 3 (id=748):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x16fa, 0x800, 0x4, 0x8}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1, {0x0, r3}})
io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0)

3.20396525s ago: executing program 3 (id=752):
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x5, 0x8100, 0x1}, 0x10)

2.788185823s ago: executing program 1 (id=754):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.551619883s ago: executing program 1 (id=757):
newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x0)
setuid(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d000000000001000000000000000141"], 0x38}}, 0x0)

2.388477766s ago: executing program 1 (id=759):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0xf9)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x3, 0x4000, 0x4, r2, 0x8})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1})

2.239591188s ago: executing program 2 (id=761):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='xfrm0\x00', 0x10)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, &(0x7f0000000240)=[{&(0x7f00000007c0)="53ae219c70dbf4d844cdd1c1b67c", 0xe}], 0x1}, 0x0)

2.152988465s ago: executing program 3 (id=762):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, <r1=>0x0}, 0x2058)
write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18)
chown(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)

2.058714413s ago: executing program 2 (id=764):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000002c0)={0xa, 0x0, [{0xd, 0x7, 0x0, 0x7, 0xffff6dc7, 0x101, 0x9}, {0x1, 0x1ff, 0x9, 0x2, 0x80000000, 0x6, 0xb}, {0x80000001, 0x78d, 0x0, 0xfffffffd, 0x6, 0x800, 0xb7e1}, {0x80000019, 0xb, 0x1, 0x9, 0x9, 0x2}, {0x1, 0x7, 0x9, 0x6, 0x7, 0x6, 0xb33}, {0x40000001, 0xae, 0x0, 0x2, 0x2974c2b7, 0xafc, 0x80000000}, {0x80000019, 0xa85, 0x4, 0x8000, 0x4, 0x2, 0x2}, {0x1, 0x1, 0x1, 0x9, 0x7ff, 0xfcd, 0x10}, {0x1, 0x901, 0x5, 0x4, 0x2, 0x100, 0x80000001}, {0x80000008, 0x0, 0x2, 0x6ae09a83, 0x7, 0x6, 0xff}]})

2.014699816s ago: executing program 1 (id=765):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setuid(r1)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={{}, {0x0, 0x3fffffff}}, 0x0)

1.705964061s ago: executing program 2 (id=768):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x9)

1.564458503s ago: executing program 0 (id=769):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)

1.516417777s ago: executing program 0 (id=770):
fsopen(0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}, 0x20000880)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

1.431842444s ago: executing program 0 (id=771):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x46)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001640)=""/231, 0xe7}], 0x1)
setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)

1.212459381s ago: executing program 0 (id=772):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@routing={0x4, 0x0, 0x1, 0xb0}, 0x8)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)

1.209838192s ago: executing program 3 (id=773):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x300400, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
getdents64(r0, 0x0, 0x4f)

1.070981313s ago: executing program 0 (id=774):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0xa}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)

804.466445ms ago: executing program 0 (id=775):
syz_mount_image$ocfs2(&(0x7f00000048c0), &(0x7f00000006c0)='./file0\x00', 0x200008, &(0x7f0000000140)=ANY=[@ANYBLOB="6865617274626561743d6e6f6e652c6e6f61636c2c008c6b24e288e9e36909f46d5be448db83d929a4d4d86bf6d7673b069fe498ee91a67841736c9ab342f956565aa4a2c9d08563cd9e"], 0x1, 0x489f, &(0x7f0000004980)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

708.339553ms ago: executing program 2 (id=776):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182)
sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nfc={0x2a, 0x0, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x38}, 0x40)

697.044383ms ago: executing program 1 (id=777):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000140190933334000000000010902"], 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002aafee08f00a5167"], 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[], 0x0)

497.43313ms ago: executing program 3 (id=778):
unshare(0x62040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="09000200010000002c0012800e000100697036677265746170"], 0x60}, 0x1, 0x0, 0x0, 0x4014}, 0x0)

190.303915ms ago: executing program 2 (id=779):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=780):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x8109}], 0x1, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

ave_0): Enslaving as an active interface with an up link
[   88.247368][ T5786] team0: Port device team_slave_0 added
[   88.268212][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.275325][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.301701][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.315338][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.338397][ T5786] team0: Port device team_slave_1 added
[   88.345324][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.353025][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.379512][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.392875][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.400043][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.427808][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.492162][ T5789] Bluetooth: hci1: command tx timeout
[   88.492173][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.497603][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.531562][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.561258][ T5794] team0: Port device team_slave_0 added
[   88.571549][ T5796] Bluetooth: hci0: command tx timeout
[   88.577632][ T5789] Bluetooth: hci2: command tx timeout
[   88.584799][ T5794] team0: Port device team_slave_1 added
[   88.605223][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.612541][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.638773][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.650735][ T5789] Bluetooth: hci3: command tx timeout
[   88.709863][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.717080][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.744560][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.766667][ T5790] hsr_slave_0: entered promiscuous mode
[   88.773461][ T5790] hsr_slave_1: entered promiscuous mode
[   88.801121][ T5787] hsr_slave_0: entered promiscuous mode
[   88.808953][ T5787] hsr_slave_1: entered promiscuous mode
[   88.815486][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.824232][ T5787] Cannot create hsr debugfs directory
[   88.847114][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.854187][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.880521][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.938032][ T5786] hsr_slave_0: entered promiscuous mode
[   88.944695][ T5786] hsr_slave_1: entered promiscuous mode
[   88.951336][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.959317][ T5786] Cannot create hsr debugfs directory
[   89.072054][ T5794] hsr_slave_0: entered promiscuous mode
[   89.082216][ T5794] hsr_slave_1: entered promiscuous mode
[   89.088653][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.097465][ T5794] Cannot create hsr debugfs directory
[   89.448732][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.476141][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.488273][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.506282][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.586352][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.597377][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.613554][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.624908][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   89.714187][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.728200][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.745598][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.769273][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.853372][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.865408][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.888587][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.901527][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.008716][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.084880][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[   90.109810][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.151398][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.159266][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.173248][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.180425][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.216617][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.236181][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   90.272730][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.280099][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.305765][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.335303][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.342631][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.357842][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   90.387458][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.394672][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.439278][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   90.457502][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.464835][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.517671][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.524999][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.565704][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.573016][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.582824][ T5789] Bluetooth: hci1: command tx timeout
[   90.652155][ T5789] Bluetooth: hci2: command tx timeout
[   90.657640][ T5789] Bluetooth: hci0: command tx timeout
[   90.733065][ T5789] Bluetooth: hci3: command tx timeout
[   90.796471][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   90.869170][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[   90.995536][ T5790] veth0_vlan: entered promiscuous mode
[   91.035559][ T5790] veth1_vlan: entered promiscuous mode
[   91.130121][ T5790] veth0_macvtap: entered promiscuous mode
[   91.156554][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.179044][ T5790] veth1_macvtap: entered promiscuous mode
[   91.226389][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.264645][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.309065][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.318771][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.328090][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.336979][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   91.356630][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.448879][ T5787] veth0_vlan: entered promiscuous mode
[   91.498656][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.517027][ T5787] veth1_vlan: entered promiscuous mode
[   91.556469][ T5794] veth0_vlan: entered promiscuous mode
[   91.598462][ T5794] veth1_vlan: entered promiscuous mode
[   91.605163][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.615194][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.686477][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.695222][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   91.703845][ T5787] veth0_macvtap: entered promiscuous mode
[   91.717007][ T5787] veth1_macvtap: entered promiscuous mode
[   91.765467][ T5786] veth0_vlan: entered promiscuous mode
[   91.789354][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   91.800204][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.813757][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.842802][ T5786] veth1_vlan: entered promiscuous mode
[   91.856646][ T5794] veth0_macvtap: entered promiscuous mode
[   91.873130][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   91.888218][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   91.905496][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.934458][ T5794] veth1_macvtap: entered promiscuous mode
[   91.955306][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.968583][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.979292][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.990985][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.068381][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.088045][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.110490][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.122410][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.135754][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.156967][ T5786] veth0_macvtap: entered promiscuous mode
[   92.169457][ T5786] veth1_macvtap: entered promiscuous mode
[   92.198362][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.202610][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   92.212077][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.237727][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.249202][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.264677][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.299888][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.313155][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.322764][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.338889][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.383713][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.395582][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.408229][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.434105][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.435073][  T786] cfg80211: failed to load regulatory.db
[   92.449040][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   92.461764][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.473925][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.512819][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.523883][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.534376][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.545894][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.556920][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   92.567837][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   92.581667][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.600484][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.610139][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.619611][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.628486][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.651053][ T5789] Bluetooth: hci1: command tx timeout
[   92.675659][   T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.706775][ T5887] syz.3.6[5887]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   92.709654][   T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.722300][ T5887] loop3: detected capacity change from 0 to 128
[   92.731485][ T5789] Bluetooth: hci0: command tx timeout
[   92.736955][ T5789] Bluetooth: hci2: command tx timeout
[   92.811118][ T5789] Bluetooth: hci3: command tx timeout
[   92.870084][ T1328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.896578][ T1328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.047494][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.070776][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.177986][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.220898][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.239018][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.256132][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.312281][   T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.345474][   T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.357797][ T5900] loop2: detected capacity change from 0 to 1024
[   93.373790][ T5900] =======================================================
[   93.373790][ T5900] WARNING: The mand mount option has been deprecated and
[   93.373790][ T5900]          and is ignored by this kernel. Remove the mand
[   93.373790][ T5900]          option from the mount to silence this warning.
[   93.373790][ T5900] =======================================================
[   93.461857][ T5900] EXT4-fs: Ignoring removed bh option
[   93.630478][ T5900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.449411][ T5957] sctp: [Deprecated]: syz.1.8 (pid 5957) Use of int in max_burst socket option.
[   94.449411][ T5957] Use struct sctp_assoc_value instead
[   94.563385][ T5962] loop3: detected capacity change from 0 to 512
[   94.665018][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.695697][ T5962] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.731004][ T5789] Bluetooth: hci1: command tx timeout
[   94.766055][ T5962] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.798811][ T5962] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.9: corrupted inode contents
[   94.815120][ T5789] Bluetooth: hci2: command tx timeout
[   94.815130][ T5796] Bluetooth: hci0: command tx timeout
[   94.846299][ T5962] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #4: comm syz.3.9: mark_inode_dirty error
[   94.891368][ T5789] Bluetooth: hci3: command tx timeout
[   94.908291][ T5962] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.9: corrupted inode contents
[   94.966876][ T5962] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #4: comm syz.3.9: mark_inode_dirty error
[   95.025084][ T5962] Quota error (device loop3): write_blk: dquota write failed
[   95.058129][ T5962] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[   95.078149][ T5962] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   95.122237][ T5962] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.9: Failed to acquire dquot type 1
[   95.185122][ T5965] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.9: corrupted inode contents
[   95.246813][ T5965] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #4: comm syz.3.9: mark_inode_dirty error
[   95.302825][ T5965] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #4: comm syz.3.9: corrupted inode contents
[   95.334132][ T5970] loop1: detected capacity change from 0 to 512
[   95.378715][ T5965] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #4: comm syz.3.9: mark_inode_dirty error
[   95.426787][ T5965] Quota error (device loop3): write_blk: dquota write failed
[   95.447262][ T5965] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[   95.454555][ T5970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   95.485171][ T5965] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.9: Failed to acquire dquot type 1
[   95.511344][ T5970] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   95.641566][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   95.654663][ T5970] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.12: corrupted inode contents
[   95.663679][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'.
[   95.681872][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.709951][ T5970] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #2: comm syz.1.12: mark_inode_dirty error
[   95.776572][ T5970] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #2: comm syz.1.12: corrupted inode contents
[   95.805439][ T5970] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.12: mark_inode_dirty error
[   95.987895][ T5982] loop0: detected capacity change from 0 to 8
[   96.103043][ T5982] SQUASHFS error: lzo decompression failed, data probably corrupt
[   96.143278][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.155383][ T5982] SQUASHFS error: Failed to read block 0x0: -5
[   96.175695][ T5982] SQUASHFS error: lzo decompression failed, data probably corrupt
[   96.215191][ T5982] SQUASHFS error: Failed to read block 0x0: -5
[   96.271546][   T28] audit: type=1800 audit(1754341221.200:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.17" name="file2" dev="loop0" ino=3 res=0 errno=0
[   96.741333][ T5778] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.934180][ T5778] usb 1-1: Using ep0 maxpacket: 16
[   96.944555][ T5778] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.957091][ T5778] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   96.970181][ T5778] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   96.979535][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.000831][ T5778] usb 1-1: config 0 descriptor??
[   97.434918][ T6003] loop2: detected capacity change from 0 to 128
[   97.526736][ T5778] HID 045e:07da: Invalid code 65791 type 1
[   97.533133][ T6006] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   97.615778][ T5778] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input5
[   97.724130][ T5778] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[   98.029686][    T8] usb 1-1: USB disconnect, device number 2
[   98.394842][ T6024] loop2: detected capacity change from 0 to 512
[   98.443761][ T6024] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c119, mo2=0002]
[   98.452724][ T6024] System zones: 0-2, 18-18, 34-35
[   98.477283][ T6024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   98.491283][ T6024] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   98.662988][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.679517][ T5839] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   98.849724][ T6035] loop0: detected capacity change from 0 to 128
[   98.879382][ T6035] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   98.891613][ T5839] usb 4-1: Using ep0 maxpacket: 16
[   98.926987][ T5839] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[   98.937521][ T6035] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.946869][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.958442][ T5839] usb 4-1: Product: syz
[   98.964272][ T5839] usb 4-1: Manufacturer: syz
[   98.989587][ T5839] usb 4-1: SerialNumber: syz
[   99.008322][ T5839] usb 4-1: config 0 descriptor??
[   99.172241][ T6030] loop1: detected capacity change from 0 to 32768
[   99.228386][ T6030] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 scanned by syz.1.37 (6030)
[   99.321042][ T6030] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   99.346003][ T6030] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   99.367634][ T6030] BTRFS info (device loop1): using free space tree
[   99.462529][ T5839] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[   99.506003][ T5839] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   99.540268][ T5839] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[   99.579868][ T5839] usb 4-1: media controller created
[   99.625070][ T6030] BTRFS info (device loop1): enabling ssd optimizations
[   99.668760][ T6030] BTRFS info (device loop1): auto enabling async discard
[   99.728735][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.862696][ T5839] zl10353_read_register: readreg error (reg=127, ret==0)
[   99.894484][ T5839] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[   99.901911][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[   99.922636][ T5839] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[   99.951619][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'.
[   99.992561][ T5839] usb 4-1: USB disconnect, device number 2
[  100.037275][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'.
[  100.059462][ T6065] loop0: detected capacity change from 0 to 1024
[  100.081169][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'.
[  100.108999][ T6065] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  100.126581][ T5839] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  100.175648][ T6065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.195883][ T6063] Zero length message leads to an empty skb
[  100.495924][ T6072] loop3: detected capacity change from 0 to 512
[  100.524744][ T5794] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  100.583717][ T6072] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.47: casefold flag without casefold feature
[  100.619801][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.646761][ T6072] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.47: couldn't read orphan inode 15 (err -117)
[  100.752245][ T6072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  101.176432][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.261321][ T6084] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  101.540071][ T6092] input: syz1 as /devices/virtual/input/input6
[  101.600983][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  101.797009][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  101.824828][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.845625][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.871077][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  101.912913][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  101.931209][    T9] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  101.939450][    T9] usb 3-1: Manufacturer: syz
[  101.967585][    T9] usb 3-1: config 0 descriptor??
[  102.099033][ T6090] loop1: detected capacity change from 0 to 32768
[  102.172100][ T6105] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  102.193300][ T6090] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  102.358489][ T6090] XFS (loop1): Ending clean mount
[  102.401553][ T6090] XFS (loop1): Quotacheck needed: Please wait.
[  102.455115][    T9] appleir 0003:05AC:8243.0002: unknown main item tag 0x0
[  102.504616][    T9] appleir 0003:05AC:8243.0002: No inputs registered, leaving
[  102.507265][ T6090] XFS (loop1): Quotacheck: Done.
[  102.612766][    T9] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  102.824134][ T5794] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  102.869613][   T27] usb 3-1: USB disconnect, device number 2
[  103.446563][ T6125] loop1: detected capacity change from 0 to 4096
[  103.477655][ T6125] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  103.820423][ T6136] loop2: detected capacity change from 0 to 2048
[  103.922370][ T6136] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  104.035154][ T6141] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  104.258542][ T6136] syz.2.69: attempt to access beyond end of device
[  104.258542][ T6136] loop2: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  104.301107][ T6136] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1)
[  104.395605][ T6136] syz.2.69: attempt to access beyond end of device
[  104.395605][ T6136] loop2: rw=0, sector=262216, nr_sectors = 2 limit=2048
[  104.419011][ T6136] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=1)
[  104.608744][ T6151] loop3: detected capacity change from 0 to 8192
[  104.648728][ T6151] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  104.719121][ T6151] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  104.770967][ T6151] REISERFS (device loop3): using ordered data mode
[  104.777738][ T6151] reiserfs: using flush barriers
[  104.830892][ T6151] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  104.943248][ T6151] REISERFS (device loop3): checking transaction log (loop3)
[  105.049916][ T6164] syz.2.81 uses obsolete (PF_INET,SOCK_PACKET)
[  105.210354][ T6151] REISERFS (device loop3): Using tea hash to sort names
[  105.252960][ T6151] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  106.110713][ T5885] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  106.303470][ T5885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.326800][ T5885] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4
[  106.359450][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  106.379045][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.387865][ T5885] usb 1-1: Product: syz
[  106.394658][ T5885] usb 1-1: Manufacturer: syz
[  106.399526][ T5885] usb 1-1: SerialNumber: syz
[  107.439341][ T5885] cdc_ncm 1-1:1.0: bind() failure
[  107.472065][ T5885] usbtest: probe of 1-1:1.1 failed with error -71
[  107.494978][ T5885] usb 1-1: USB disconnect, device number 3
[  107.523541][ T6221] loop2: detected capacity change from 0 to 2048
[  107.577405][ T6221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.634529][   T28] audit: type=1800 audit(1754341232.570:3): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="bus" dev="loop2" ino=18 res=0 errno=0
[  107.694441][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.827994][ T6226] netlink: 84 bytes leftover after parsing attributes in process `syz.2.105'.
[  107.978840][ T6230] loop3: detected capacity change from 0 to 512
[  108.003125][ T6230] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  108.086919][ T6230] EXT4-fs (loop3): 1 orphan inode deleted
[  108.097160][ T6230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.118146][   T54] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  108.133810][ T6230] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.134198][ T6235] overlayfs: workdir and upperdir must be separate subtrees
[  108.191176][   T54] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1
[  108.384670][ T6238] loop0: detected capacity change from 0 to 1764
[  108.392237][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.406323][   T54] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  108.431192][   T54] EXT4-fs error (device loop3): ext4_release_dquot:6974: comm kworker/u4:4: Failed to release dquot type 1
[  109.021233][ T6254] loop1: detected capacity change from 0 to 1024
[  109.336244][ T6252] loop3: detected capacity change from 0 to 32768
[  109.415382][ T6252] JBD2: Ignoring recovery information on journal
[  109.487492][ T6252] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  109.692772][ T6269] loop2: detected capacity change from 0 to 256
[  109.705672][ T6269] exfat: Deprecated parameter 'utf8'
[  109.724872][ T6269] exfat: Deprecated parameter 'namecase'
[  109.750086][ T6269] exfat: Deprecated parameter 'utf8'
[  109.779877][ T6269] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  109.819111][ T6252] syz.3.115 (6252) used greatest stack depth: 19504 bytes left
[  109.955645][ T5790] ocfs2: Unmounting device (7,3) on (node local)
[  110.118985][ T6275] dvmrp0: entered allmulticast mode
[  111.210755][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout
[  111.217597][ T6258] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  112.024043][ T6258] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.040311][ T6258] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  112.048995][ T6258] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  112.055326][ T6258] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.067485][ T6258] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  112.075362][ T6258] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  112.081812][ T6258] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.088947][ T6258] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  112.099845][ T6258] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  112.107929][ T6258] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.116094][ T6258] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  112.590875][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  112.780754][    T9] usb 4-1: Using ep0 maxpacket: 32
[  112.788391][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  112.807219][    T9] usb 4-1: config 0 has no interface number 0
[  112.855384][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  112.874814][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.891161][    T9] usb 4-1: Product: syz
[  112.899983][    T9] usb 4-1: Manufacturer: syz
[  112.915783][    T9] usb 4-1: SerialNumber: syz
[  112.930484][    T9] usb 4-1: config 0 descriptor??
[  112.953407][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  113.078661][ T6317] loop0: detected capacity change from 0 to 512
[  113.128832][ T6317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.154773][ T6317] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.188275][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  113.209495][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  113.290933][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout
[  113.567460][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.686356][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  113.698630][ T5839] usb 4-1: USB disconnect, device number 3
[  113.732454][ T5839] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  113.777031][ T5839] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  113.810390][ T5839] quatech2 4-1:0.51: device disconnected
[  113.966269][ T6325] loop2: detected capacity change from 0 to 32768
[  114.062696][ T6325] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  114.090707][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout
[  114.106050][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout
[  114.148779][ T6334] loop0: detected capacity change from 0 to 4096
[  114.170735][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  114.180689][   T28] audit: type=1800 audit(1754341239.100:4): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.143" name="file1" dev="loop2" ino=9553 res=0 errno=0
[  114.316497][ T6335] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  114.423570][ T6327] loop1: detected capacity change from 0 to 32768
[  114.451703][ T6337] loop3: detected capacity change from 0 to 512
[  114.526023][ T6327] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  114.537156][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[  114.850479][ T6347] loop3: detected capacity change from 0 to 1024
[  114.887429][ T6327] XFS (loop1): Ending clean mount
[  114.916220][ T6349] loop0: detected capacity change from 0 to 2048
[  114.927299][ T6327] XFS (loop1): Quotacheck needed: Please wait.
[  114.937925][ T6347] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  114.960888][ T6347] hfsplus: xattr searching failed
[  114.968045][ T6349] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  114.970138][   T28] audit: type=1800 audit(1754341239.900:5): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.150" name="memory.events" dev="loop3" ino=26 res=0 errno=0
[  115.003958][ T6347] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  115.010376][ T6347] hfsplus: xattr searching failed
[  115.069436][ T5797] udevd[5797]: incorrect nilfs2 checksum on /dev/loop0
[  115.089969][ T6350] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.128927][ T6347] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  115.137554][ T6327] XFS (loop1): Quotacheck: Done.
[  115.156046][ T6347] hfsplus: xattr search failed
[  115.167401][ T6347] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  115.183612][ T6347] hfsplus: xattr search failed
[  115.330397][ T5933] hfsplus: b-tree write err: -5, ino 4
[  115.370929][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout
[  115.383696][   T28] audit: type=1800 audit(1754341240.320:6): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.144" name="file2" dev="loop1" ino=9287 res=0 errno=0
[  115.617301][ T6356] loop0: detected capacity change from 0 to 4096
[  115.642269][ T6356] EXT4-fs: inline encryption not supported
[  115.653463][ T5794] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.696769][ T6356] EXT4-fs (loop0): Test dummy encryption mode enabled
[  115.750071][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  115.952218][ T6356] fs-verity: sha512 using implementation "sha512-avx2"
[  116.144948][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.171764][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout
[  116.182397][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout
[  116.250662][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  116.503262][ T6381] tipc: Started in network mode
[  116.510386][ T6381] tipc: Node identity 8, cluster identity 4711
[  116.518486][ T6381] tipc: Node number set to 8
[  116.616563][ T6385] loop2: detected capacity change from 0 to 1024
[  116.621312][   T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  116.682972][ T5885] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  116.696003][   T28] audit: type=1804 audit(1754341241.630:7): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.164" name="/newroot/50/file1/file0" dev="loop2" ino=0 res=1 errno=0
[  116.840806][   T27] usb 1-1: Using ep0 maxpacket: 32
[  116.849307][   T27] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  116.863246][   T27] usb 1-1: config 0 has no interface number 0
[  116.882693][   T27] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  116.900823][   T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.908902][   T27] usb 1-1: Product: syz
[  116.923819][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.945046][ T5885] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  116.955842][   T27] usb 1-1: Manufacturer: syz
[  116.965376][   T27] usb 1-1: SerialNumber: syz
[  116.970324][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.986397][   T27] usb 1-1: config 0 descriptor??
[  117.003633][ T5885] usb 2-1: config 0 descriptor??
[  117.027250][   T27] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  117.276827][   T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  117.328142][   T27] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  117.758754][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  117.776466][   T27] usb 1-1: USB disconnect, device number 4
[  117.808705][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  117.842005][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  117.857468][   T27] quatech2 1-1:0.51: device disconnected
[  118.061923][ T5885] video4linux radio48: keene_cmd_set failed (-71)
[  118.075777][ T5885] radio-keene 2-1:0.0: V4L2 device registered as radio48
[  118.090239][ T5885] usb 2-1: USB disconnect, device number 2
[  118.263587][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout
[  118.263606][ T5796] Bluetooth: hci1: command 0x0c1a tx timeout
[  118.330912][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  118.587602][ T6426] Driver unsupported XDP return value 0 on prog  (id 26) dev N/A, expect packet loss!
[  118.663385][ T5885] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  118.870664][ T5885] usb 4-1: Using ep0 maxpacket: 16
[  118.882908][ T5885] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.895391][ T5885] usb 4-1: config 0 interface 0 has no altsetting 0
[  118.907944][ T5885] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  118.928791][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.946153][ T6424] loop0: detected capacity change from 0 to 32768
[  118.965660][ T5885] usb 4-1: config 0 descriptor??
[  119.050318][ T6424] JBD2: Ignoring recovery information on journal
[  119.113492][ T6424] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  119.413334][ T5885] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0
[  119.420461][ T5885] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0
[  119.445082][ T5885] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0
[  119.460931][ T5885] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0
[  119.470713][ T5885] hid-rmi 0003:0461:4E72.0003: unknown main item tag 0x0
[  119.496509][ T5885] hid-rmi 0003:0461:4E72.0003: hidraw0: USB HID v0.05 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0
[  119.569684][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  119.677345][ T5839] usb 4-1: USB disconnect, device number 4
[  119.795269][ T6441] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  120.104544][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.186'.
[  120.258171][ T6454] o2cb: This node has not been configured.
[  120.272181][ T6454] o2cb: Cluster check failed. Fix errors before retrying.
[  120.280464][ T6454] (syz.1.191,6454,1):user_dlm_register:674 ERROR: status = -22
[  120.329598][ T6454] (syz.1.191,6454,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  120.423475][ T6456] loop0: detected capacity change from 0 to 4096
[  120.433349][ T6456] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  121.170794][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  121.339903][ T6490] loop3: detected capacity change from 0 to 256
[  121.361403][ T5885] usb 2-1: Using ep0 maxpacket: 16
[  121.369404][ T6490] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  121.374626][ T5885] usb 2-1: config index 0 descriptor too short (expected 59154, got 18)
[  121.393370][ T6490] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  121.394960][ T5885] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  121.413754][ T6490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb94faefa, utbl_chksum : 0xe619d30d)
[  121.420904][ T5885] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  121.446639][ T5885] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  121.456415][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.473022][ T5885] usb 2-1: Product: syz
[  121.478857][ T5885] usb 2-1: Manufacturer: syz
[  121.484282][ T5885] usb 2-1: SerialNumber: syz
[  121.494431][ T5885] usb 2-1: config 0 descriptor??
[  121.509394][ T5885] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  121.700350][ T6494] binder: 6493:6494 ioctl c0306201 2000000000c0 returned -14
[  121.859671][ T6498] loop3: detected capacity change from 0 to 2048
[  121.898112][ T6498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  121.944714][ T6498] EXT4-fs (loop3): shut down requested (0)
[  122.019495][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.167434][ T6505] loop0: detected capacity change from 0 to 128
[  122.235737][   T28] audit: type=1800 audit(1754341247.170:8): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.211" name="file1" dev="loop0" ino=1048599 res=0 errno=0
[  122.238530][ T6507] vlan2: entered allmulticast mode
[  122.270144][ T6507] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  122.280395][ T6505] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[  122.289624][ T6505] FAT-fs (loop0): Filesystem has been set read-only
[  122.300248][ T6505] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[  122.557177][ T5885] ssu100: probe of 2-1:0.0 failed with error -71
[  122.609264][ T5885] usb 2-1: USB disconnect, device number 3
[  123.032873][ T6515] loop2: detected capacity change from 0 to 32768
[  123.042918][ T6515] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.215 (6515)
[  123.082588][ T6515] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  123.093406][ T6515] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  123.103097][ T6515] BTRFS info (device loop2): using free space tree
[  123.230764][ T6515] BTRFS info (device loop2): enabling ssd optimizations
[  123.237891][ T6515] BTRFS info (device loop2): auto enabling async discard
[  123.596005][ T5787] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  124.400954][ T5933] Bluetooth: hci4: Frame reassembly failed (-84)
[  124.407993][ T5933] Bluetooth: hci4: Frame reassembly failed (-84)
[  124.614243][ T6549] loop1: detected capacity change from 0 to 40427
[  124.638094][ T6549] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  124.648049][ T6549] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  124.663490][ T6549] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x7ffff
[  124.674883][ T6549] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6
[  124.685489][ T6549] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x5
[  124.707145][ T6549] F2FS-fs (loop1): invalid crc value
[  124.734366][ T6549] F2FS-fs (loop1): Found nat_bits in checkpoint
[  124.747614][ T6521] loop0: detected capacity change from 0 to 65536
[  124.850129][ T6521] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  124.868521][ T6549] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  124.876477][ T6549] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.007482][ T6549] syz.1.222: attempt to access beyond end of device
[  125.007482][ T6549] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.044805][ T6521] XFS (loop0): Ending clean mount
[  125.075618][ T6549] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  125.247643][ T5786] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  126.114044][ T6573] loop0: detected capacity change from 0 to 32768
[  126.123518][ T6573] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.227 (6573)
[  126.146813][ T6573] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.157333][ T6573] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  126.168825][ T6573] BTRFS info (device loop0): using free space tree
[  126.260727][ T5885] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  126.370814][ T6573] BTRFS info (device loop0): enabling ssd optimizations
[  126.390729][ T6573] BTRFS info (device loop0): auto enabling async discard
[  126.410775][ T5796] Bluetooth: hci4: command 0x1003 tx timeout
[  126.410855][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  126.464427][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  126.490643][ T5885] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  126.500882][ T5885] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  126.510127][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.530956][ T5885] usb 2-1: config 0 descriptor??
[  126.805125][ T5786] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  126.994348][ T5885] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0
[  127.051530][ T5885] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  127.121835][ T6606] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  127.187889][ T5885] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE
[  127.382748][ T6615] capability: warning: `syz.2.238' uses deprecated v2 capabilities in a way that may be insecure
[  127.502688][ T6615] Bluetooth: MGMT ver 1.22
[  127.553162][ T6617] loop0: detected capacity change from 0 to 128
[  127.586208][ T6617] EXT4-fs (loop0): Test dummy encryption mode enabled
[  127.606606][ T5885] cp2112 0003:10C4:EA90.0004: error setting SMBus config
[  127.637555][ T6617] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  127.662065][ T5885] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71
[  127.700834][ T6617] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  127.729917][ T5885] usb 2-1: USB disconnect, device number 4
[  128.034936][ T6634] loop2: detected capacity change from 0 to 128
[  128.269524][ T6617] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  128.472595][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  128.513250][ T6648] loop2: detected capacity change from 0 to 256
[  128.815536][ T6656] loop2: detected capacity change from 0 to 512
[  128.864599][ T6656] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  128.905678][ T6656] EXT4-fs (loop2): orphan cleanup on readonly fs
[  128.931313][ T6656] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:512: comm syz.2.253: Block bitmap for bg 0 marked uninitialized
[  128.986619][ T6656] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  129.048104][ T6656] EXT4-fs (loop2): 1 orphan inode deleted
[  129.055786][ T6656] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  129.167766][ T6656] vxcan0: tx address claim with different name
[  129.222080][ T6663] warning: `syz.3.256' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  129.246073][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.320684][   T28] audit: type=1326 audit(1754341254.250:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.339233][ T6646] loop1: detected capacity change from 0 to 32768
[  129.408354][ T6646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (6646)
[  129.414726][   T28] audit: type=1326 audit(1754341254.280:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.481823][ T6646] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.492377][   T28] audit: type=1326 audit(1754341254.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.504058][ T6646] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  129.540303][   T28] audit: type=1326 audit(1754341254.290:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.555908][ T6646] BTRFS info (device loop1): setting nodatacow, compression disabled
[  129.564358][   T28] audit: type=1326 audit(1754341254.290:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.594837][   T28] audit: type=1326 audit(1754341254.290:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.600498][ T6646] BTRFS info (device loop1): max_inline at 0
[  129.619262][   T28] audit: type=1326 audit(1754341254.300:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.619318][   T28] audit: type=1326 audit(1754341254.310:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.619376][   T28] audit: type=1326 audit(1754341254.320:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.619423][   T28] audit: type=1326 audit(1754341254.320:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6664 comm="syz.0.257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f979198eb69 code=0x7ffc0000
[  129.718405][ T6646] BTRFS info (device loop1): enabling disk space caching
[  129.726534][ T6646] BTRFS info (device loop1): turning off barriers
[  129.765374][ T6646] BTRFS info (device loop1): turning on flush-on-commit
[  129.776180][ T6646] BTRFS info (device loop1): doing ref verification
[  129.783634][ T6646] BTRFS info (device loop1): force clearing of disk cache
[  129.802886][ T6646] BTRFS info (device loop1): enabling ssd optimizations
[  129.810101][ T6646] BTRFS info (device loop1): max_inline at 4096
[  129.822387][ T6646] BTRFS info (device loop1): disk space caching is enabled
[  129.995934][ T6646] BTRFS info (device loop1): auto enabling async discard
[  130.049025][ T6646] BTRFS info (device loop1): rebuilding free space tree
[  130.055259][ T6686] loop3: detected capacity change from 0 to 8192
[  130.084353][ T6686] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  130.098660][ T6686] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  130.183438][ T6686] REISERFS (device loop3): using ordered data mode
[  130.190212][ T6686] reiserfs: using flush barriers
[  130.215884][ T6646] BTRFS info (device loop1): disabling free space tree
[  130.253432][ T6686] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.265202][ T6646] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  130.293364][ T6686] REISERFS (device loop3): checking transaction log (loop3)
[  130.329579][ T6646] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  130.538052][ T6686] REISERFS (device loop3): Using tea hash to sort names
[  130.548953][ T6686] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  130.931432][ T5794] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.246600][ T6706] syzkaller1: entered promiscuous mode
[  131.274129][ T6706] syzkaller1: entered allmulticast mode
[  132.336050][ T6732] loop3: detected capacity change from 0 to 256
[  132.385169][ T6732] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  132.439919][ T6721] loop1: detected capacity change from 0 to 32768
[  132.481756][ T6721] XFS: noikeep mount option is deprecated.
[  132.484281][ T6732] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  132.556143][ T6721] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  132.605787][ T6732] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  132.911736][ T6721] XFS (loop1): Ending clean mount
[  133.363247][ T5794] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  133.383282][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  133.391910][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  133.826028][ T6767] loop0: detected capacity change from 0 to 128
[  133.872551][ T6767] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  133.896431][ T6767] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  134.141932][ T5786] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  134.188267][ T6763] loop2: detected capacity change from 0 to 32768
[  134.295354][ T6763] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  134.627817][ T6763] XFS (loop2): Ending clean mount
[  134.744697][ T6795] loop3: detected capacity change from 0 to 1024
[  134.752905][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'.
[  134.964638][ T5787] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.370881][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  135.523534][ T5847] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  135.562716][ T5847] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  135.576320][    T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  135.640876][    T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  135.679759][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  135.697911][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.717645][ T6802] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  135.748462][    T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  136.047049][    T9] usb 1-1: USB disconnect, device number 5
[  136.266333][ T6818] loop1: detected capacity change from 0 to 32768
[  136.297717][ T6818] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.411669][ T6818] XFS (loop1): Ending clean mount
[  136.459202][ T6818] XFS (loop1): Quotacheck needed: Please wait.
[  136.585580][ T6818] XFS (loop1): Quotacheck: Done.
[  136.794051][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.171759][ T6845] MPI: mpi too large (107144 bits)
[  137.382589][ T6850] input: syz1 as /devices/virtual/input/input7
[  137.426505][    T9] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  137.457298][ T6852] loop2: detected capacity change from 0 to 2048
[  137.462879][    T9] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  137.584627][ T6852] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.695056][ T6852] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  137.751291][ T6852] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  137.775036][ T6852] EXT4-fs (loop2): This should not happen!! Data will be lost
[  137.775036][ T6852] 
[  137.793954][ T6852] EXT4-fs (loop2): Total free blocks count 0
[  137.800233][ T6852] EXT4-fs (loop2): Free/Dirty block details
[  137.817738][ T6852] EXT4-fs (loop2): free_blocks=2415919104
[  137.824185][ T6852] EXT4-fs (loop2): dirty_blocks=16
[  137.829376][ T6852] EXT4-fs (loop2): Block reservation details
[  137.842355][ T6852] EXT4-fs (loop2): i_reserved_data_blocks=1
[  137.971800][ T5945] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  137.984536][ T6867] loop3: detected capacity change from 0 to 1024
[  138.038416][ T6867] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.270690][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.010481][ T6898] loop1: detected capacity change from 0 to 512
[  139.019268][ T6898] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  139.390498][ T6903] sp0: Synchronizing with TNC
[  139.437159][ T6903] sp0: Found TNC
[  139.608967][ T6906] loop0: detected capacity change from 0 to 8192
[  140.266191][ T6928] netlink: 'syz.2.348': attribute type 3 has an invalid length.
[  140.511131][ T6936] loop0: detected capacity change from 0 to 128
[  140.528396][ T6936] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  141.880780][ T6976] loop3: detected capacity change from 0 to 16
[  141.952679][ T6976] erofs: (device loop3): mounted with root inode @ nid 36.
[  141.997212][ T6976] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  142.026595][ T6976] erofs: (device loop3): erofs_init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  142.400434][ T6972] loop2: detected capacity change from 0 to 32768
[  142.531344][ T6972] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  142.582890][ T6987] bridge0: port 3(gretap0) entered blocking state
[  142.590053][ T6987] bridge0: port 3(gretap0) entered disabled state
[  142.598075][ T6987] gretap0: entered allmulticast mode
[  142.607926][ T6987] gretap0: entered promiscuous mode
[  142.614705][ T6987] bridge0: port 3(gretap0) entered blocking state
[  142.621951][ T6987] bridge0: port 3(gretap0) entered forwarding state
[  143.039185][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[  144.051559][ T5839] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  144.270388][ T5839] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.300653][ T5839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  144.336988][ T5839] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  144.356915][ T5839] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  144.397162][ T5839] usb 3-1: SerialNumber: syz
[  144.470542][    C1] sched: RT throttling activated
[  144.619271][ T7001] loop3: detected capacity change from 0 to 32768
[  144.677633][ T5839] usb 3-1: 0:2 : does not exist
[  144.763904][ T5839] usb 3-1: 5:0: cannot get min/max values for control 1 (id 5)
[  144.779177][ T7001] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  144.844593][ T5839] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  144.896738][ T5839] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5)
[  145.015317][ T5839] usb 3-1: USB disconnect, device number 3
[  145.129939][ T7001] XFS (loop3): Ending clean mount
[  145.170095][ T7001] XFS (loop3): Quotacheck needed: Please wait.
[  145.210443][ T5795] udevd[5795]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.410084][ T7001] XFS (loop3): Quotacheck: Done.
[  145.936731][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  145.983534][ T7002] loop0: detected capacity change from 0 to 262144
[  146.012147][ T7002] F2FS-fs (loop0): invalid crc value
[  146.051477][ T7002] F2FS-fs (loop0): Found nat_bits in checkpoint
[  146.116158][ T7002] F2FS-fs (loop0): Start checkpoint disabled!
[  146.175949][ T7002] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  146.770631][ T5847] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  146.973675][ T5847] usb 3-1: config 0 has an invalid interface number: 153 but max is 0
[  147.010938][ T5847] usb 3-1: config 0 has no interface number 0
[  147.017322][ T5847] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30
[  147.079646][ T5847] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  147.110598][ T5847] usb 3-1: config 0 interface 153 has no altsetting 0
[  147.131699][ T5847] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34
[  147.143641][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.165740][ T5847] usb 3-1: Product: syz
[  147.169993][ T5847] usb 3-1: Manufacturer: syz
[  147.185084][ T5847] usb 3-1: SerialNumber: syz
[  147.197281][ T5847] usb 3-1: config 0 descriptor??
[  147.213055][ T5847] hub 3-1:0.153: bad descriptor, ignoring hub
[  147.227091][ T5847] hub: probe of 3-1:0.153 failed with error -5
[  147.241936][ T5847] sierra 3-1:0.153: Sierra USB modem converter detected
[  147.464060][ T5847] usb 3-1: USB disconnect, device number 4
[  147.477266][ T5847] sierra 3-1:0.153: device disconnected
[  147.577095][ T7035] loop1: detected capacity change from 0 to 32768
[  147.626565][ T7035] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  147.937757][ T5794] ocfs2: Unmounting device (7,1) on (node local)
[  148.495164][ T7052] loop3: detected capacity change from 0 to 1024
[  148.539279][ T7052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  148.573663][ T7052] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  148.590672][ T5847] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  148.687619][ T7052] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 3: comm syz.3.396: lblock 3 mapped to illegal pblock 3 (length 3)
[  148.745237][ T7052] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  148.788663][ T7052] EXT4-fs (loop3): This should not happen!! Data will be lost
[  148.788663][ T7052] 
[  148.811372][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.847202][ T5847] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.861672][ T7057] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #15: block 3: comm syz.3.396: lblock 3 mapped to illegal pblock 3 (length 1)
[  148.890777][ T5796] Bluetooth: hci4: command 0xfc11 tx timeout
[  148.897469][ T5789] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[  148.904426][ T5847] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  148.970124][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.062067][ T5847] usb 2-1: config 0 descriptor??
[  149.223938][ T5940] EXT4-fs error (device loop3): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:16: lblock 8 mapped to illegal pblock 8 (length 8)
[  149.286050][ T5940] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  149.327689][ T5940] EXT4-fs (loop3): This should not happen!! Data will be lost
[  149.327689][ T5940] 
[  149.372914][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  149.532905][ T5847] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  149.556787][ T5847] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  149.571298][ T5847] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  149.585996][ T5847] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  149.601849][ T5847] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0
[  149.617537][ T5847] cm6533_jd 0003:0D8C:0022.0007: No inputs registered, leaving
[  149.668091][ T5847] cm6533_jd 0003:0D8C:0022.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  149.864338][ T5847] usb 2-1: USB disconnect, device number 5
[  149.890466][ T7065] fido_id[7065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  149.892165][ T7069] loop3: detected capacity change from 0 to 64
[  150.312964][ T7071] loop3: detected capacity change from 0 to 8192
[  150.343169][ T7071] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  150.380713][ T7071] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  150.415184][ T7071] REISERFS (device loop3): using ordered data mode
[  150.465478][ T7071] reiserfs: using flush barriers
[  150.472691][ T7071] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.502537][ T7071] REISERFS (device loop3): checking transaction log (loop3)
[  150.532171][ T7071] REISERFS (device loop3): Using rupasov hash to sort names
[  150.546884][ T7071] REISERFS (device loop3): using 3.5.x disk format
[  150.555449][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.572844][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.615751][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.652678][ T7071] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2)
[  150.697023][ T7071] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  150.814214][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.860445][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.891948][ T7071] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  150.905240][ T7059] loop0: detected capacity change from 0 to 65536
[  150.927652][ T7082] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP
[  151.015877][ T7059] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  151.150007][ T7059] XFS (loop0): Ending clean mount
[  151.198566][ T7059] XFS (loop0): Quotacheck needed: Please wait.
[  151.378966][ T7059] XFS (loop0): Quotacheck: Done.
[  151.526246][ T7101] loop3: detected capacity change from 0 to 512
[  151.582682][ T7101] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.639709][ T7101] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  151.673527][ T7101] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.410: corrupted inode contents
[  151.704634][ T7101] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.410: mark_inode_dirty error
[  151.741854][ T7101] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.410: corrupted inode contents
[  151.787431][ T7101] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.410: mark_inode_dirty error
[  151.893649][ T5786] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  151.930320][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.328615][ T7104] loop1: detected capacity change from 0 to 32768
[  152.405780][ T7104] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.512703][ T7104] XFS (loop1): Ending clean mount
[  152.783711][ T7128] loop0: detected capacity change from 0 to 2048
[  152.805140][ T7128] EXT4-fs: Ignoring removed mblk_io_submit option
[  152.826026][ T5794] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.830791][ T7128] EXT4-fs: Ignoring removed nobh option
[  152.934618][ T7128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.125295][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.393687][ T7140] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  153.450758][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout
[  153.591430][ T7147] batadv0: entered promiscuous mode
[  153.602631][ T7147] batadv0: left promiscuous mode
[  153.824451][ T5839] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  153.943400][ T7154] loop3: detected capacity change from 0 to 4096
[  153.975225][ T7154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.022923][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.040666][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.050963][ T5839] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  154.060241][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.071758][ T5839] usb 2-1: config 0 descriptor??
[  154.122235][ T7152] loop0: detected capacity change from 0 to 32768
[  154.133495][ T7152] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.428 (7152)
[  154.203241][ T7152] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.227485][ T7152] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  154.249248][ T7152] BTRFS info (device loop0): enabling ssd optimizations
[  154.270037][ T7152] BTRFS info (device loop0): using spread ssd allocation scheme
[  154.302552][ T7152] BTRFS info (device loop0): using free space tree
[  154.304109][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.469580][ T7152] BTRFS info (device loop0): auto enabling async discard
[  154.520919][ T5839] cm6533_jd 0003:0D8C:0022.0008: No inputs registered, leaving
[  154.535673][ T5839] cm6533_jd 0003:0D8C:0022.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0
[  154.883101][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.899431][ T5839] usb 2-1: USB disconnect, device number 6
[  155.091867][ T5795] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5795)
[  155.168951][ T7185] input: syz0 as /devices/virtual/input/input8
[  155.453931][ T5796] Bluetooth: hci2: Opcode 0x206a failed: -110
[  155.460822][ T5796] Bluetooth: hci2: command 0x0c1a tx timeout
[  155.821012][   T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  156.030683][   T27] usb 1-1: Using ep0 maxpacket: 32
[  156.054537][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.085959][   T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.113309][   T27] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  156.150398][   T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.184169][   T27] usb 1-1: config 0 descriptor??
[  156.511553][ T5885] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  156.635813][   T27] ft260 0003:0403:6030.0009: unknown main item tag 0x0
[  156.712953][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.730638][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.760602][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  156.800781][ T5885] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.830422][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.844245][   T27] ft260 0003:0403:6030.0009: chip code: 6424 8183
[  156.863010][ T5885] usb 3-1: config 0 descriptor??
[  157.116755][ T7213] loop3: detected capacity change from 0 to 40427
[  157.158374][ T7213] F2FS-fs (loop3): invalid crc value
[  157.204864][ T7213] F2FS-fs (loop3): Found nat_bits in checkpoint
[  157.306300][ T5885] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0
[  157.327183][ T5839] usb 1-1: USB disconnect, device number 6
[  157.334382][ T5885] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving
[  157.345708][ T7213] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  157.393347][ T5885] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  157.496527][ T7213] F2FS-fs (loop3): Stopped filesystem due to reason: 0
[  158.071524][ T7227] syz.1.453 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  158.847020][ T7233] loop3: detected capacity change from 0 to 32768
[  158.870066][ T7233] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  158.979753][ T5839] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  158.983258][ T5795] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[  159.160631][ T5839] usb 1-1: Using ep0 maxpacket: 8
[  159.178194][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.206371][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  159.230662][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  159.259042][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  159.290950][ T5839] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  159.310729][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.335842][ T5839] hub 1-1:1.0: bad descriptor, ignoring hub
[  159.378583][ T5839] hub: probe of 1-1:1.0 failed with error -5
[  159.404278][ T5839] cdc_wdm 1-1:1.0: skipping garbage
[  159.409656][ T5839] cdc_wdm 1-1:1.0: skipping garbage
[  159.474739][ T5839] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[  159.490660][ T5839] cdc_wdm 1-1:1.0: Unknown control protocol
[  159.540743][    T9] usb 3-1: USB disconnect, device number 5
[  159.738110][ T7245] loop3: detected capacity change from 0 to 32768
[  159.761030][ T5839] usb 1-1: USB disconnect, device number 7
[  159.773778][ T7255] syzkaller1: entered promiscuous mode
[  159.779768][ T7255] syzkaller1: entered allmulticast mode
[  159.910111][   T28] kauditd_printk_skb: 2 callbacks suppressed
[  159.910127][   T28] audit: type=1800 audit(1754341284.840:21): pid=7245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.460" name="file1" dev="loop3" ino=4 res=0 errno=0
[  159.961644][ T5885] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  160.035357][ T7256] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  160.035357][ T7256] 
[  160.057768][ T7256] ERROR: (device loop3): remounting filesystem as read-only
[  160.065927][ T7256] ialloc: diAlloc returned -5!
[  160.140670][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  160.151736][ T5885] usb 2-1: Using ep0 maxpacket: 32
[  160.172216][ T5885] usb 2-1: config 0 interface 0 has no altsetting 0
[  160.183934][ T5885] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  160.203428][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.213317][ T7260] netlink: 'syz.2.467': attribute type 39 has an invalid length.
[  160.230599][ T5885] usb 2-1: Product: syz
[  160.235289][ T5885] usb 2-1: Manufacturer: syz
[  160.244567][ T5885] usb 2-1: SerialNumber: syz
[  160.261891][ T5885] usb 2-1: config 0 descriptor??
[  160.351049][ T5839] usb 1-1: Using ep0 maxpacket: 8
[  160.359829][ T5839] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.370585][ T5839] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  160.379627][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  160.391075][ T5839] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  160.402353][ T5839] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  160.411790][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.428619][ T5839] hub 1-1:1.0: bad descriptor, ignoring hub
[  160.436001][ T5839] hub: probe of 1-1:1.0 failed with error -5
[  160.443066][ T5839] cdc_wdm 1-1:1.0: skipping garbage
[  160.448828][ T5839] cdc_wdm 1-1:1.0: skipping garbage
[  160.457942][ T5839] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  160.464004][ T5839] cdc_wdm 1-1:1.0: Unknown control protocol
[  160.701352][ T5885] gs_usb 2-1:0.0: Configuring for 1 interfaces
[  160.782720][ T5839] usb 1-1: USB disconnect, device number 8
[  161.001274][ T7267] loop3: detected capacity change from 0 to 4096
[  161.440617][ T5885] usb 2-1: USB disconnect, device number 7
[  161.474724][ T7271] loop3: detected capacity change from 0 to 256
[  162.216755][ T7292] loop3: detected capacity change from 0 to 256
[  162.299594][ T7292] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  162.341659][ T7292] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  162.415234][ T7292] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  163.166857][ T7294] loop1: detected capacity change from 0 to 32768
[  163.231433][ T7294] (syz.1.477,7294,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.305496][ T7294] (syz.1.477,7294,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  163.326736][ T7319] loop0: detected capacity change from 0 to 512
[  163.354777][   T28] audit: type=1326 audit(1754341288.270:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.451992][   T28] audit: type=1326 audit(1754341288.270:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.502490][ T7294] JBD2: Ignoring recovery information on journal
[  163.513580][ T7319] FAT-fs (loop0): error, corrupted directory (invalid entries)
[  163.570637][   T28] audit: type=1326 audit(1754341288.280:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.672636][ T7294] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  163.689998][   T28] audit: type=1326 audit(1754341288.280:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.795344][   T28] audit: type=1326 audit(1754341288.310:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.817726][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.897324][   T28] audit: type=1326 audit(1754341288.310:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.943673][   T28] audit: type=1326 audit(1754341288.310:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  163.965981][    C1] vkms_vblank_simulate: vblank timer overrun
[  164.030696][   T28] audit: type=1326 audit(1754341288.310:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  164.058821][ T7294] (syz.1.477,7294,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #17: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=20946, name_len=138
[  164.123733][ T7337] loop2: detected capacity change from 0 to 256
[  164.159493][   T28] audit: type=1326 audit(1754341288.310:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.3.487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef5b8eb69 code=0x7ffc0000
[  164.181655][    C1] vkms_vblank_simulate: vblank timer overrun
[  164.196057][ T7337] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  164.207414][ T7337] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  164.243318][ T5794] ocfs2: Unmounting device (7,1) on (node local)
[  164.291224][ T7337] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  164.820913][    T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  165.040627][    T8] usb 1-1: Using ep0 maxpacket: 32
[  165.055619][    T8] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  165.068069][    T8] usb 1-1: config 0 has no interface number 0
[  165.092096][    T8] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  165.128007][    T8] usb 1-1: config 0 interface 85 has no altsetting 0
[  165.155327][    T8] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  165.167054][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.184117][    T8] usb 1-1: Product: syz
[  165.193164][    T8] usb 1-1: Manufacturer: syz
[  165.199074][    T8] usb 1-1: SerialNumber: syz
[  165.213827][    T8] usb 1-1: config 0 descriptor??
[  165.220625][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  165.400827][    T9] usb 2-1: Using ep0 maxpacket: 8
[  165.412598][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  165.453586][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  165.488624][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  165.529165][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  165.558926][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  165.584788][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.726092][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  165.836947][    T9] usb 2-1: GET_CAPABILITIES returned 0
[  165.858669][    T9] usbtmc 2-1:16.0: can't read capabilities
[  165.875042][    T8] appletouch 1-1:0.85: Geyser mode initialized.
[  165.902135][    T8] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input9
[  166.048111][ T5885] usb 2-1: USB disconnect, device number 8
[  166.180252][   T27] usb 1-1: USB disconnect, device number 9
[  166.234714][   T27] appletouch 1-1:0.85: input: appletouch disconnected
[  166.319841][ T7378] loop2: detected capacity change from 0 to 4096
[  166.435615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  166.560840][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.590842][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  166.896685][ T7381] loop1: detected capacity change from 0 to 512
[  166.939154][ T7381] EXT4-fs: Ignoring removed mblk_io_submit option
[  166.981650][ T7381] EXT4-fs: Ignoring removed nomblk_io_submit option
[  166.995552][ T7383] loop2: detected capacity change from 0 to 64
[  167.003447][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  167.020787][ T7381] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  167.063304][ T7381] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  167.095798][   T28] kauditd_printk_skb: 3 callbacks suppressed
[  167.095813][   T28] audit: type=1800 audit(1754341292.030:34): pid=7383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.505" name="file1" dev="loop2" ino=5 res=0 errno=0
[  167.200045][ T7381] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.504: Allocating blocks 41-42 which overlap fs metadata
[  167.281875][ T7381] Quota error (device loop1): write_blk: dquota write failed
[  167.289852][ T7381] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  167.320979][ T7381] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4036: comm syz.1.504: Allocating blocks 41-42 which overlap fs metadata
[  167.358379][ T7381] Quota error (device loop1): write_blk: dquota write failed
[  167.379331][ T7381] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  167.403076][ T7381] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.504: Failed to acquire dquot type 1
[  167.438194][ T7381] EXT4-fs error (device loop1): mb_free_blocks:1943: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  167.499286][ T7381] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.504: corrupted inode contents
[  167.597741][ T7381] EXT4-fs error (device loop1): ext4_dirty_inode:6106: inode #12: comm syz.1.504: mark_inode_dirty error
[  167.672824][ T7381] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.504: corrupted inode contents
[  167.724027][ T7381] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #12: comm syz.1.504: mark_inode_dirty error
[  167.744295][ T7381] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.504: corrupted inode contents
[  167.768957][ T7400] netlink: 'syz.3.512': attribute type 1 has an invalid length.
[  167.782825][ T7400] netlink: 'syz.3.512': attribute type 2 has an invalid length.
[  167.792374][ T7381] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  167.807630][ T7400] netlink: 'syz.3.512': attribute type 1 has an invalid length.
[  167.817487][ T7381] EXT4-fs error (device loop1): ext4_do_update_inode:5230: inode #12: comm syz.1.504: corrupted inode contents
[  167.829634][ T7400] netlink: 'syz.3.512': attribute type 2 has an invalid length.
[  167.859098][ T7381] EXT4-fs error (device loop1): ext4_truncate:4288: inode #12: comm syz.1.504: mark_inode_dirty error
[  167.895026][ T7381] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  167.912844][ T7381] EXT4-fs (loop1): 1 truncate cleaned up
[  167.920028][ T7381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  168.191527][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.702666][ T7417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.519'.
[  168.999073][ T7407] loop2: detected capacity change from 0 to 40427
[  169.029226][ T7407] F2FS-fs (loop2): heap/no_heap options were deprecated
[  169.045326][ T7407] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff
[  169.081763][ T7407] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c
[  169.117624][ T7407] F2FS-fs (loop2): invalid crc value
[  169.181685][ T7407] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1d6/0x920
[  169.259962][ T7407] F2FS-fs (loop2): Found nat_bits in checkpoint
[  169.340073][ T7407] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  169.371188][ T7407] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650
[  169.461013][ T7407] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  169.503615][ T7414] loop3: detected capacity change from 0 to 32768
[  169.585415][ T7407] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x13a/0x910
[  169.604834][ T7414] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  169.694302][ T7407] syz.2.515: attempt to access beyond end of device
[  169.694302][ T7407] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  169.711645][ T7407] syz.2.515: attempt to access beyond end of device
[  169.711645][ T7407] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  169.726089][ T7407] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of f2fs_submit_page_read+0x168/0x190
[  169.824986][ T7414] XFS (loop3): Ending clean mount
[  169.842574][ T5787] syz-executor: attempt to access beyond end of device
[  169.842574][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.863839][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  169.939543][ T7414] XFS (loop3): Quotacheck needed: Please wait.
[  170.028296][ T7414] XFS (loop3): Quotacheck: Done.
[  170.175002][   T28] audit: type=1800 audit(1754341295.110:35): pid=7414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.518" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  170.399070][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  171.376298][ T7473] loop1: detected capacity change from 0 to 64
[  171.448108][   T28] audit: type=1800 audit(1754341296.380:36): pid=7473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.538" name="file1" dev="loop1" ino=5 res=0 errno=0
[  171.498799][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  171.551822][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  171.640923][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  172.580916][   T55] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  172.721200][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  172.731087][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  172.778770][ T7476] loop2: detected capacity change from 0 to 32768
[  172.786680][   T55] usb 4-1: Using ep0 maxpacket: 16
[  172.810030][   T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.826867][ T7476] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  172.838091][   T55] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  172.867514][   T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.904348][   T55] usb 4-1: config 0 descriptor??
[  172.945827][   T55] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  173.120173][ T5795] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10
[  173.350431][ T5144] bcm5974 4-1:0.0: could not read from device
[  173.376111][ T5144] bcm5974 4-1:0.0: could not read from device
[  173.392093][   T55] usb 4-1: USB disconnect, device number 5
[  173.392563][ T7502] loop1: detected capacity change from 0 to 256
[  173.435684][ T5144] bcm5974 4-1:0.0: could not read from device
[  174.241971][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.252310][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.264323][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.291703][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.306880][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.317323][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.342204][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.371744][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.381573][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.394578][    C1] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  174.894493][ T7523] loop2: detected capacity change from 0 to 4096
[  174.920636][ T7523] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  175.202120][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  175.420646][    T9] usb 2-1: Using ep0 maxpacket: 32
[  175.427964][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.439764][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.470663][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  175.490057][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.521975][    T9] usb 2-1: config 0 descriptor??
[  175.624942][ T7533] loop3: detected capacity change from 0 to 128
[  175.636987][ T7525] loop0: detected capacity change from 0 to 32768
[  175.649965][ T7533] EXT4-fs: journaled quota format not specified
[  175.749787][ T7525] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  175.888665][ T7529] loop2: detected capacity change from 0 to 32768
[  175.925180][ T7529] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  175.958746][ T7529] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  176.011666][ T5786] (syz-executor,5786,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72
[  176.026101][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  176.051052][    T9] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  176.107377][ T7529] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  176.374812][    T9] usb 2-1: USB disconnect, device number 9
[  176.513682][ T5787] ocfs2: Unmounting device (7,2) on (node local)
[  177.074419][ T7544] loop3: detected capacity change from 0 to 32768
[  177.171111][ T7544] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  177.349245][ T7548] loop0: detected capacity change from 0 to 32768
[  177.408840][ T5790] ocfs2: Unmounting device (7,3) on (node local)
[  177.437750][ T7548] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.497042][ T7548] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  177.538339][ T7548] BTRFS info (device loop0): setting nodatacow, compression disabled
[  177.574316][ T7548] BTRFS info (device loop0): max_inline at 0
[  177.605361][ T7548] BTRFS info (device loop0): enabling disk space caching
[  177.630651][ T7548] BTRFS info (device loop0): turning off barriers
[  177.647399][ T7548] BTRFS info (device loop0): turning on flush-on-commit
[  177.684113][ T7548] BTRFS info (device loop0): doing ref verification
[  177.716090][ T7548] BTRFS info (device loop0): force clearing of disk cache
[  177.736796][ T7548] BTRFS info (device loop0): enabling ssd optimizations
[  177.766897][ T7548] BTRFS info (device loop0): max_inline at 4096
[  177.799696][ T7548] BTRFS info (device loop0): disk space caching is enabled
[  178.081867][ T7548] BTRFS info (device loop0): auto enabling async discard
[  178.134878][ T7548] BTRFS info (device loop0): rebuilding free space tree
[  178.237997][ T7548] BTRFS info (device loop0): disabling free space tree
[  178.280780][ T7548] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  178.299560][ T7548] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  178.544512][   T28] audit: type=1800 audit(1754341303.470:37): pid=7548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.562" name="file1" dev="loop0" ino=260 res=0 errno=0
[  178.811959][ T7567] loop3: detected capacity change from 0 to 40427
[  178.817937][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  178.924129][ T7567] F2FS-fs (loop3): Found nat_bits in checkpoint
[  179.001752][ T7584] loop1: detected capacity change from 0 to 32768
[  179.118517][ T7567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  179.136804][ T7584] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  179.346161][ T7584] XFS (loop1): Ending clean mount
[  179.393993][ T7584] XFS (loop1): Quotacheck needed: Please wait.
[  179.403453][ T5790] syz-executor: attempt to access beyond end of device
[  179.403453][ T5790] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  179.476464][ T5790] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  179.603921][ T7584] XFS (loop1): Quotacheck: Done.
[  179.674100][ T7611] loop2: detected capacity change from 0 to 64
[  179.768264][   T11] tipc: Subscription rejected, illegal request
[  180.017460][ T5794] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  180.605049][ T7623] vlan2: entered allmulticast mode
[  180.623418][ T7623] erspan0: entered allmulticast mode
[  180.832584][ T7635] loop1: detected capacity change from 0 to 128
[  181.034586][ T7639] netlink: 'syz.2.587': attribute type 6 has an invalid length.
[  181.180654][   T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  181.371731][   T27] usb 4-1: Using ep0 maxpacket: 16
[  181.389190][   T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.410621][   T27] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.427841][   T27] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  181.463573][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  181.473407][   T27] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  181.484939][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.499383][   T27] usb 4-1: config 0 descriptor??
[  181.942928][   T27] hid (null): report_id 784 is invalid
[  181.948823][   T27] hid (null): unknown global tag 0xe
[  181.954975][   T27] hid (null): unknown global tag 0xe
[  181.961267][   T27] hid (null): unknown global tag 0xe
[  181.966717][   T27] hid (null): unknown global tag 0xc
[  181.972758][   T27] hid (null): report_id 0 is invalid
[  181.978393][   T27] hid (null): unknown global tag 0xe
[  181.989804][   T27] hid (null): unknown global tag 0xe
[  181.997375][   T27] hid (null): unknown global tag 0xd
[  182.066802][   T55] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  182.114386][ T7663] loop1: detected capacity change from 0 to 2048
[  182.122095][ T7663] EXT4-fs: Ignoring removed mblk_io_submit option
[  182.138954][ T7663] EXT4-fs: Ignoring removed i_version option
[  182.175577][   T27] usb 4-1: USB disconnect, device number 6
[  182.224208][ T7663] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.284059][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  182.298931][   T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.302321][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.309678][   T55] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  182.351002][   T55] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  182.380608][   T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.402893][   T55] usb 1-1: config 0 descriptor??
[  182.690708][ T5847] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  182.822481][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.829968][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.854742][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.865854][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.887391][ T7677] netlink: 60 bytes leftover after parsing attributes in process `syz.3.601'.
[  182.891427][ T5847] usb 2-1: Using ep0 maxpacket: 8
[  182.902529][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.909987][   T55] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  182.932611][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  182.951511][   T55] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  182.967805][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  182.991498][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  183.002476][   T55] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  183.020611][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.060687][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  183.080580][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.315713][ T5847] usb 2-1: GET_CAPABILITIES returned 0
[  183.321614][ T5847] usbtmc 2-1:16.0: can't read capabilities
[  184.136687][ T5847] usb 2-1: USB disconnect, device number 10
[  184.308059][ T7688] loop2: detected capacity change from 0 to 40427
[  184.344225][ T7688] F2FS-fs (loop2): Found nat_bits in checkpoint
[  184.449141][ T7688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  184.537920][ T5787] syz-executor: attempt to access beyond end of device
[  184.537920][ T5787] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  184.553738][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  184.720705][   T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  184.921762][   T27] usb 4-1: Using ep0 maxpacket: 32
[  184.962370][   T27] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  184.965301][ T5778] usb 1-1: USB disconnect, device number 10
[  184.991062][   T27] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  185.035841][   T27] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  185.081672][   T27] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  185.118454][   T27] usb 4-1: config 0 interface 0 has no altsetting 0
[  185.137828][   T27] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  185.149522][ T7711] netlink: 'syz.2.609': attribute type 4 has an invalid length.
[  185.163576][   T27] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  185.213984][   T27] usb 4-1: Product: syz
[  185.219204][   T27] usb 4-1: Manufacturer: syz
[  185.231382][   T27] usb 4-1: SerialNumber: syz
[  185.252338][   T27] usb 4-1: config 0 descriptor??
[  185.265761][   T27] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  185.297704][   T27] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  185.543719][   T27] usb 4-1: USB disconnect, device number 7
[  185.549699][    C1] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  185.593622][   T27] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  185.908830][ T7729] loop2: detected capacity change from 0 to 16
[  185.949317][ T7729] erofs: (device loop2): mounted with root inode @ nid 36.
[  186.054726][ T7731] loop1: detected capacity change from 0 to 4096
[  186.072184][ T7731] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  186.235489][ T7731] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  186.485159][ T7739] loop3: detected capacity change from 0 to 2048
[  186.555562][ T7739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.611217][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.626'.
[  186.620930][ T7739] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.939101][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.156471][ T7763] loop1: detected capacity change from 0 to 512
[  187.232971][ T7763] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.255822][ T7767] loop2: detected capacity change from 0 to 2048
[  187.273491][ T7763] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.349483][ T7767]  loop2: p1 < > p4
[  187.390289][ T7767] loop2: p4 size 8388608 extends beyond EOD, truncated
[  187.446960][   T28] audit: type=1804 audit(1754341312.370:38): pid=7763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.635" name="/newroot/135/file0/file1" dev="loop1" ino=15 res=1 errno=0
[  187.578329][ T5794] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.915134][ T5797] udevd[5797]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  187.927314][ T5795] udevd[5795]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  188.117964][ T7784] loop0: detected capacity change from 0 to 1024
[  188.132064][ T7784] EXT4-fs: inline encryption not supported
[  188.171042][ T7784] EXT4-fs: Ignoring removed i_version option
[  188.193863][ T7784] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  188.303896][ T7784] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.438738][ T7772] loop3: detected capacity change from 0 to 32768
[  188.451598][ T7772] XFS: attr2 mount option is deprecated.
[  188.493106][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.517555][ T7772] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.710451][ T7772] XFS (loop3): Ending clean mount
[  188.722308][ T7772] XFS (loop3): Quotacheck needed: Please wait.
[  188.851355][ T7772] XFS (loop3): Quotacheck: Done.
[  189.087245][ T5790] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.843050][ T7829] loop1: detected capacity change from 0 to 8192
[  189.877803][ T7833] net_ratelimit: 250 callbacks suppressed
[  189.877822][ T7833] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  189.902484][ T5847] IPVS: starting estimator thread 0...
[  189.910603][ T7829] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.005603][ T7829] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  190.030805][ T7838] IPVS: using max 25 ests per chain, 60000 per kthread
[  190.081400][ T7829] REISERFS (device loop1): using ordered data mode
[  190.115229][ T7829] reiserfs: using flush barriers
[  190.173786][ T7842] loop2: detected capacity change from 0 to 128
[  190.190081][ T7829] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.208541][ T7842] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  190.241197][ T7829] REISERFS (device loop1): checking transaction log (loop1)
[  190.282117][ T7829] REISERFS (device loop1): Using r5 hash to sort names
[  190.299389][ T7844] Invalid ELF header magic: != ELF
[  190.317431][ T7829] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  190.366342][ T7829] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  190.495828][ T7829] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  190.563004][ T7829] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  190.593898][ T7849] loop2: detected capacity change from 0 to 1764
[  190.629786][ T7829] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  190.707879][ T7855] program syz.0.669 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  190.775690][ T7849] ISOFS: Unable to identify CD-ROM format.
[  191.249638][ T7866] loop2: detected capacity change from 0 to 4096
[  192.526333][ T7900] loop3: detected capacity change from 0 to 1024
[  192.579355][ T7900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  192.728740][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.737736][ T7904] loop0: detected capacity change from 0 to 512
[  193.880820][ T7917] loop1: detected capacity change from 0 to 32768
[  193.974072][ T7917] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  194.121109][ T7923] loop2: detected capacity change from 0 to 32768
[  194.169049][ T7923] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.698 (7923)
[  194.253533][ T7923] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  194.286768][ T7923] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  194.298129][ T7923] BTRFS info (device loop2): force zlib compression, level 3
[  194.328176][ T7923] BTRFS info (device loop2): force clearing of disk cache
[  194.354542][ T7923] BTRFS info (device loop2): setting nodatasum
[  194.367507][ T7917] syz.1.695 (7917) used greatest stack depth: 17712 bytes left
[  194.376098][ T7923] BTRFS info (device loop2): allowing degraded mounts
[  194.404575][ T7923] BTRFS info (device loop2): enabling disk space caching
[  194.422343][ T7923] BTRFS info (device loop2): disk space caching is enabled
[  194.437982][ T5794] ocfs2: Unmounting device (7,1) on (node local)
[  194.630785][ T7923] BTRFS info (device loop2): auto enabling async discard
[  194.670764][ T7923] BTRFS info (device loop2): rebuilding free space tree
[  194.749258][ T7923] BTRFS info (device loop2): disabling free space tree
[  194.765082][ T7923] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  194.788611][ T7923] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  194.816306][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[  194.824732][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[  194.941146][ T7963] loop3: detected capacity change from 0 to 4096
[  194.987198][ T7963] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  195.096791][ T7923] BTRFS info (device loop2): balance: start -susage=0..1048576,devid=0,limit=351830835986432,limit=0..81917,stripes=0..32767
[  195.132238][ T7923] BTRFS info (device loop2): balance: ended with status: 0
[  195.185093][   T28] audit: type=1800 audit(1754341576.113:39): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.706" name="file1" dev="loop3" ino=30 res=0 errno=0
[  195.263951][ T7963] ntfs3: loop3: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  195.388649][ T5787] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  195.594305][ T7971] input: syz1 as /devices/virtual/input/input11
[  195.621782][ T7971] input: failed to attach handler leds to device input11, error: -6
[  196.010176][ T7982] batadv_slave_1: entered promiscuous mode
[  196.042148][ T7979] batadv_slave_1: left promiscuous mode
[  196.418122][ T7986] loop2: detected capacity change from 0 to 4096
[  196.515820][ T7986] ntfs: volume version 3.1.
[  196.598177][   T28] audit: type=1804 audit(1754341577.523:40): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.714" name="/newroot/212/file0/file1" dev="loop2" ino=67 res=1 errno=0
[  196.639261][ T5778] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  196.773957][ T7978] loop0: detected capacity change from 0 to 32768
[  196.823073][ T7978] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  196.840636][ T5778] usb 4-1: Using ep0 maxpacket: 8
[  196.849690][ T5778] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  196.877472][ T5778] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  196.884121][ T7978] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  196.900759][ T5778] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  196.918150][ T5778] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.932758][ T5778] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  196.942297][ T5778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.171138][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  197.202492][ T5778] usb 4-1: GET_CAPABILITIES returned 0
[  197.208160][ T5778] usbtmc 4-1:16.0: can't read capabilities
[  197.435627][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'.
[  197.466680][ T5839] usb 4-1: USB disconnect, device number 8
[  197.543694][ T8005] sock: sock_timestamping_bind_phc: sock not bind to device
[  198.511851][ T5839] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  198.726926][ T5839] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  198.795500][ T5839] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  198.801480][ T8008] loop0: detected capacity change from 0 to 131072
[  198.851416][ T5839] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  198.872485][ T8008] F2FS-fs (loop0): Found nat_bits in checkpoint
[  198.877873][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.915803][ T8016] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  198.924250][ T8008] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  198.982741][ T5839] usb 4-1: Quirk or no altest; falling back to MIDI 1.0
[  199.075429][ T8008] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[  199.117502][ T8008] F2FS-fs (loop0): lookup inode (7) has corrupted xattr
[  199.186918][ T8032] loop2: detected capacity change from 0 to 16
[  199.268875][ T8032] erofs: (device loop2): mounted with root inode @ nid 36.
[  199.462023][   T27] usb 4-1: USB disconnect, device number 9
[  199.699450][ T5787] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 46
[  199.741145][ T5787] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  199.781853][ T5787] erofs: (device loop2): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  200.100795][    T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  200.290731][    T8] usb 2-1: Using ep0 maxpacket: 16
[  200.313312][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.341742][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.380196][    T8] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  200.410388][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.447654][    T8] usb 2-1: config 0 descriptor??
[  200.663971][ T8058] syzkaller1: entered promiscuous mode
[  200.670196][ T8058] syzkaller1: entered allmulticast mode
[  200.899143][    T8] playstation 0003:054C:05C4.000E: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0
[  201.312182][    T8] playstation 0003:054C:05C4.000E: Invalid reportID received, expected 163 got 154
[  201.328950][    T8] playstation 0003:054C:05C4.000E: Failed to retrieve DualShock4 firmware info: -22
[  201.339713][    T8] playstation 0003:054C:05C4.000E: Failed to get firmware info from DualShock4
[  201.365271][    T8] playstation 0003:054C:05C4.000E: Failed to create dualshock4.
[  201.396873][    T8] playstation: probe of 0003:054C:05C4.000E failed with error -22
[  201.530884][    T8] usb 2-1: USB disconnect, device number 11
[  201.912033][ T8083] loop0: detected capacity change from 0 to 512
[  201.925353][ T8083] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  201.965324][ T8083] EXT4-fs (loop0): 1 truncate cleaned up
[  201.998705][ T8083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.243622][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.295280][ T8091] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  203.607434][ T8116] loop1: detected capacity change from 0 to 32768
[  203.652378][ T8116] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  203.790865][ T8116] XFS (loop1): Ending clean mount
[  203.813389][ T8116] XFS (loop1): Quotacheck needed: Please wait.
[  203.970185][ T8145] loop3: detected capacity change from 0 to 512
[  204.009023][ T8116] XFS (loop1): Quotacheck: Done.
[  204.037383][ T8145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.081830][ T8145] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  204.157499][ T8145] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.773: corrupted inode contents
[  204.229904][ T8145] EXT4-fs error (device loop3): ext4_dirty_inode:6106: inode #2: comm syz.3.773: mark_inode_dirty error
[  204.263846][ T5794] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  204.283508][ T8145] EXT4-fs error (device loop3): ext4_do_update_inode:5230: inode #2: comm syz.3.773: corrupted inode contents
[  204.323559][ T8145] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.773: mark_inode_dirty error
[  204.477557][ T5790] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.017627][ T8150] loop0: detected capacity change from 0 to 32768
[  205.063931][ T8150] JBD2: Ignoring recovery information on journal
[  205.150621][ T5839] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  205.151170][ T8150] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  205.353095][ T5839] usb 2-1: config 0 has no interfaces?
[  205.358854][ T5839] usb 2-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40
[  205.388762][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.418983][ T5839] usb 2-1: config 0 descriptor??
[  205.562885][ T8150] overlayfs: upper fs does not support tmpfile.
[  205.603246][ T8150] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  205.619566][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.3.778'.
[  205.621074][ T8150] 
[  205.630121][ T8156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.778'.
[  205.630913][ T8150] ======================================================
[  205.630922][ T8150] WARNING: possible circular locking dependency detected
[  205.630939][ T8150] 6.6.101-syzkaller #0 Not tainted
[  205.630950][ T8150] ------------------------------------------------------
[  205.666304][ T8150] syz.0.775/8150 is trying to acquire lock:
[  205.672399][ T8150] ffff88805d4c5118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_xattr_set+0xada/0x11f0
[  205.685038][ T8150] 
[  205.685038][ T8150] but task is already holding lock:
[  205.692622][ T8150] ffff888076eebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  205.702262][ T8150] 
[  205.702262][ T8150] which lock already depends on the new lock.
[  205.702262][ T8150] 
[  205.712895][ T8150] 
[  205.712895][ T8150] the existing dependency chain (in reverse order) is:
[  205.722124][ T8150] 
[  205.722124][ T8150] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[  205.730168][ T8150]        down_read+0x46/0x2e0
[  205.734991][ T8150]        ocfs2_init_acl+0x2fa/0x720
[  205.740260][ T8150]        ocfs2_mknod+0x12e5/0x20f0
[  205.745497][ T8150]        ocfs2_create+0x196/0x410
[  205.750647][ T8150]        path_openat+0x1277/0x3190
[  205.755782][ T8150]        do_filp_open+0x1c5/0x3d0
[  205.760915][ T8150]        do_sys_openat2+0x12c/0x1c0
[  205.766133][ T8150]        __x64_sys_openat+0x139/0x160
[  205.771527][ T8150]        do_syscall_64+0x55/0xb0
[  205.776486][ T8150]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.783058][ T8150] 
[  205.783058][ T8150] -> #1 (jbd2_handle){++++}-{0:0}:
[  205.790462][ T8150]        jbd2_journal_lock_updates+0xab/0x380
[  205.796663][ T8150]        __ocfs2_flush_truncate_log+0x2b8/0x10b0
[  205.803130][ T8150]        ocfs2_flush_truncate_log+0x4f/0x60
[  205.809140][ T8150]        ocfs2_sync_fs+0x117/0x310
[  205.814357][ T8150]        sync_filesystem+0x1c2/0x220
[  205.819752][ T8150]        generic_shutdown_super+0x6f/0x2b0
[  205.825847][ T8150]        kill_block_super+0x44/0x90
[  205.831089][ T8150]        deactivate_locked_super+0x97/0x100
[  205.837060][ T8150]        cleanup_mnt+0x429/0x4c0
[  205.842105][ T8150]        task_work_run+0x1ce/0x250
[  205.847333][ T8150]        exit_to_user_mode_loop+0xe6/0x110
[  205.853152][ T8150]        exit_to_user_mode_prepare+0xb1/0x140
[  205.859242][ T8150]        syscall_exit_to_user_mode+0x1a/0x50
[  205.865255][ T8150]        do_syscall_64+0x61/0xb0
[  205.870210][ T8150]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.876655][ T8150] 
[  205.876655][ T8150] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  205.887194][ T8150]        __lock_acquire+0x2ddb/0x7c80
[  205.892585][ T8150]        lock_acquire+0x197/0x410
[  205.897631][ T8150]        down_write+0x97/0x1f0
[  205.902505][ T8150]        ocfs2_xattr_set+0xada/0x11f0
[  205.908072][ T8150]        __vfs_setxattr+0x431/0x470
[  205.913295][ T8150]        __vfs_setxattr_noperm+0x12d/0x5e0
[  205.919239][ T8150]        vfs_setxattr+0x16c/0x2f0
[  205.924323][ T8150]        ovl_get_workdir+0xba1/0x1740
[  205.929712][ T8150]        ovl_fill_super+0x1345/0x3560
[  205.935097][ T8150]        get_tree_nodev+0xb5/0x140
[  205.940567][ T8150]        vfs_get_tree+0x8c/0x280
[  205.945519][ T8150]        do_new_mount+0x24b/0xa40
[  205.950559][ T8150]        __se_sys_mount+0x2da/0x3c0
[  205.955939][ T8150]        do_syscall_64+0x55/0xb0
[  205.961072][ T8150]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  205.967602][ T8150] 
[  205.967602][ T8150] other info that might help us debug this:
[  205.967602][ T8150] 
[  205.978016][ T8150] Chain exists of:
[  205.978016][ T8150]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6 --> jbd2_handle --> &oi->ip_xattr_sem
[  205.978016][ T8150] 
[  205.994059][ T8150]  Possible unsafe locking scenario:
[  205.994059][ T8150] 
[  206.001531][ T8150]        CPU0                    CPU1
[  206.007085][ T8150]        ----                    ----
[  206.012820][ T8150]   lock(&oi->ip_xattr_sem);
[  206.017610][ T8150]                                lock(jbd2_handle);
[  206.024417][ T8150]                                lock(&oi->ip_xattr_sem);
[  206.031724][ T8150]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6);
[  206.039036][ T8150] 
[  206.039036][ T8150]  *** DEADLOCK ***
[  206.039036][ T8150] 
[  206.047280][ T8150] 4 locks held by syz.0.775/8150:
[  206.052405][ T8150]  #0: ffff88807983a0e0 (&type->s_umount_key#89/1){+.+.}-{3:3}, at: alloc_super+0x1fa/0x920
[  206.062714][ T8150]  #1: ffff88805b60a418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  206.072248][ T8150]  #2: ffff888076eec2d8 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_setxattr+0x145/0x2f0
[  206.083101][ T8150]  #3: ffff888076eebff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x410/0x11f0
[  206.093264][ T8150] 
[  206.093264][ T8150] stack backtrace:
[  206.099299][ T8150] CPU: 0 PID: 8150 Comm: syz.0.775 Not tainted 6.6.101-syzkaller #0
[  206.107311][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  206.117707][ T8150] Call Trace:
[  206.121231][ T8150]  <TASK>
[  206.124181][ T8150]  dump_stack_lvl+0x16c/0x230
[  206.128889][ T8150]  ? load_image+0x3b0/0x3b0
[  206.133525][ T8150]  ? show_regs_print_info+0x20/0x20
[  206.138849][ T8150]  ? print_circular_bug+0x12b/0x1a0
[  206.144074][ T8150]  check_noncircular+0x2bd/0x3c0
[  206.149119][ T8150]  ? look_up_lock_class+0x75/0x140
[  206.154517][ T8150]  ? print_deadlock_bug+0x5d0/0x5d0
[  206.159909][ T8150]  ? lockdep_lock+0xe0/0x220
[  206.164619][ T8150]  ? lockdep_unlock+0x137/0x2d0
[  206.169489][ T8150]  ? _find_first_zero_bit+0xd3/0x100
[  206.175420][ T8150]  __lock_acquire+0x2ddb/0x7c80
[  206.180440][ T8150]  ? verify_lock_unused+0x140/0x140
[  206.185760][ T8150]  ? stack_trace_save+0x9c/0xe0
[  206.190656][ T8150]  lock_acquire+0x197/0x410
[  206.195262][ T8150]  ? ocfs2_xattr_set+0xada/0x11f0
[  206.200485][ T8150]  ? __might_sleep+0xe0/0xe0
[  206.205312][ T8150]  ? read_lock_is_recursive+0x20/0x20
[  206.210791][ T8150]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  206.216887][ T8150]  ? ocfs2_xattr_block_find+0x154/0x4c0
[  206.222720][ T8150]  down_write+0x97/0x1f0
[  206.227074][ T8150]  ? ocfs2_xattr_set+0xada/0x11f0
[  206.232582][ T8150]  ? down_read_killable+0x340/0x340
[  206.238107][ T8150]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  206.243834][ T8150]  ocfs2_xattr_set+0xada/0x11f0
[  206.248920][ T8150]  ? __ocfs2_xattr_set_handle+0xf10/0xf10
[  206.254789][ T8150]  ? verify_lock_unused+0x140/0x140
[  206.260054][ T8150]  ? llist_add_batch+0x109/0x1e0
[  206.265251][ T8150]  ? aa_get_newest_label+0xf8/0x5c0
[  206.270823][ T8150]  ? end_current_label_crit_section+0x170/0x170
[  206.277194][ T8150]  ? posix_xattr_acl+0x93/0xb0
[  206.282176][ T8150]  ? evm_protect_xattr+0x36d/0x7a0
[  206.287312][ T8150]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  206.293206][ T8150]  __vfs_setxattr+0x431/0x470
[  206.297954][ T8150]  __vfs_setxattr_noperm+0x12d/0x5e0
[  206.303369][ T8150]  vfs_setxattr+0x16c/0x2f0
[  206.308073][ T8150]  ? xattr_permission+0x470/0x470
[  206.313317][ T8150]  ? up_write+0x1c3/0x410
[  206.317663][ T8150]  ovl_get_workdir+0xba1/0x1740
[  206.322536][ T8150]  ? ovl_fill_super+0x3560/0x3560
[  206.327679][ T8150]  ? preempt_schedule+0xab/0xc0
[  206.332574][ T8150]  ? __lock_acquire+0x7c80/0x7c80
[  206.337629][ T8150]  ? preempt_schedule_thunk+0x1a/0x30
[  206.343118][ T8150]  ? _raw_spin_unlock+0x3a/0x40
[  206.348035][ T8150]  ? ovl_inuse_trylock+0xbd/0xd0
[  206.353000][ T8150]  ovl_fill_super+0x1345/0x3560
[  206.357889][ T8150]  ? ida_alloc_range+0x79e/0x830
[  206.362958][ T8150]  ? virtio_fs_zero_page_range+0x140/0x140
[  206.368777][ T8150]  ? sget_fc+0x7f0/0x8d0
[  206.373135][ T8150]  ? __lock_acquire+0x7c80/0x7c80
[  206.378182][ T8150]  ? down_write+0x162/0x1f0
[  206.382729][ T8150]  ? down_read_killable+0x340/0x340
[  206.387978][ T8150]  ? sget_fc+0x7f0/0x8d0
[  206.392243][ T8150]  ? kill_litter_super+0xb0/0xb0
[  206.397211][ T8150]  ? virtio_fs_zero_page_range+0x140/0x140
[  206.403034][ T8150]  get_tree_nodev+0xb5/0x140
[  206.407642][ T8150]  vfs_get_tree+0x8c/0x280
[  206.412124][ T8150]  do_new_mount+0x24b/0xa40
[  206.416654][ T8150]  __se_sys_mount+0x2da/0x3c0
[  206.421360][ T8150]  ? __x64_sys_mount+0xc0/0xc0
[  206.426335][ T8150]  ? lockdep_hardirqs_on+0x98/0x150
[  206.431554][ T8150]  ? __x64_sys_mount+0x20/0xc0
[  206.436420][ T8150]  do_syscall_64+0x55/0xb0
[  206.440885][ T8150]  ? clear_bhb_loop+0x40/0x90
[  206.445847][ T8150]  ? clear_bhb_loop+0x40/0x90
[  206.450634][ T8150]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  206.456812][ T8150] RIP: 0033:0x7f979198eb69
[  206.461551][ T8150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  206.481529][ T8150] RSP: 002b:00007f9792800038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  206.490427][ T8150] RAX: ffffffffffffffda RBX: 00007f9791bb5fa0 RCX: 00007f979198eb69
[  206.498775][ T8150] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  206.507113][ T8150] RBP: 00007f9791a11df1 R08: 0000200000000a00 R09: 0000000000000000
[  206.515105][ T8150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  206.523537][ T8150] R13: 0000000000000000 R14: 00007f9791bb5fa0 R15: 00007ffe5782d188
[  206.531623][ T8150]  </TASK>
[  206.534730][    C0] vkms_vblank_simulate: vblank timer overrun
[  206.607318][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.618643][ T8150] overlayfs: upper fs missing required features.
[  206.634427][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.675563][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.699177][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.712179][ T5786] ocfs2: Unmounting device (7,0) on (node local)
[  206.724531][ T5778] usb 2-1: USB disconnect, device number 12
[  207.213554][    T8] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  207.404558][    T8] usb 2-1: config index 0 descriptor too short (expected 72, got 36)
[  207.412792][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  207.424030][    T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  207.435342][    T8] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  207.453224][    T8] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08
[  207.462467][    T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.470723][    T8] usb 2-1: Product: syz
[  207.475033][    T8] usb 2-1: Manufacturer: syz
[  207.479640][    T8] usb 2-1: SerialNumber: syz
[  207.725195][   T55] usb 2-1: USB disconnect, device number 13