last executing test programs:

27.857560491s ago: executing program 3 (id=787):
syz_mount_image$msdos(&(0x7f0000000e80), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000001740)=ANY=[], 0x5, 0x2b1, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0xcc042, 0x8)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

27.194648416s ago: executing program 3 (id=791):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x800002, &(0x7f0000005ac0)=ANY=[@ANYBLOB="6e6f646973636172642c657874656e745f63616368652c646973636172645f756e69743d73656374696f6e2c6e6f5f686561702c636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f6e2c6163746976655f6c6f67733d342c6a71666d743d7666736f6c642c6d6f64653d667261676d656e743a626c6f636b2c646174615f666c7573682c6e6f5f686561702c696e6c696e655f64656e7472792c6e6f696e6c696e655f64656e7472792c00d0991201bee22991f669b6ae2e9e9331ec5574d0bcf66ddbb693bc8712a577f26d31"], 0x1, 0x5520, &(0x7f00000003c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x101042, 0x40)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)

25.442347636s ago: executing program 3 (id=805):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC], 0x27)

24.555755492s ago: executing program 3 (id=811):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000080), 0x3, 0x45c, &(0x7f00000002c0)="$eJzs281vFGUYAPBnZtsCArYifvChVtHY+NFSQOXgQY0mHjAx0YMem7YQZKGG1kQIUTAGT8aYeDce/Rc86cUYTyZe9W5IiOECeFozuzN0d9ld6LLbLezvlwy873z0fZ6deXffmXc3gKE1mf2TRGyLiL8iYrxWbdxhsvbftSvn5q9fOTefRKXy3r9Jdb+rV87NF7sWx23NK1NpRPplEntatLt85uyJuXJ58XRen1k5+fHM8pmzLx4/OXds8djiqQOHDx86OPvKywde6kmeWUxXd3+2tHfX2x9++86Rr7N1aZF/Ux49Mtlp4zOVSo+bG6ztdeVkZICBsCaliMhO12i1/49HKVZP3ni89cVAgwP6qlKpVLa233y+AtzDkmis6/IwLIoP+uz+t1iaBwGv9W/4MXCXX6/dAGV5X8uX2paR6vOByO+Ntvep/cmI+OD8f99nS/TnOQQAQIOfs/HPC63Gf2k8XLff/fnc0EREPBAROyLiwYjYGREPRVT3fSQiHl1j+82TJDePf9JLXSV2m7Lx36v53Fbj+K8Y/cVEKa9tr+Y/mhw9Xl7cn78mUzG6KavPdmjjlzf//KbdtvrxX7Zk7RdjwTyOSyObGo9ZmFuZu5Oc612+ELF7pFX+yY2ZgCQidkXE7i7bOP7cj3vbbbt1/h30YJ6p8kPEs7Xzfz6a8i8knecnZzZHeXH/THFV3Oz3Py6+2679O8q/B7Lzf1/L6/9G/hNJ/Xzt8trbuPj3V23vabq9/seS96vlsXzdp3MrK6dnI8aSI7Wg69cfWD22qBf7Z/lP7Wvd/3fE6iuxJyKyi/ixiHg8Ip7IY38yIp6KiH0d8v/tjac/6j7//sryX1jT+V8tjEXzmtaF0olff2podOKm/K93Pv+HqqWpfM3tvP/dTlzdXc0AAABw90kjYlsk6fSNcppOT9e+L78zIi0vLa88f3Tpk1MLtd8ITESkxZOu8brnobP5bX2tfiEial8tKLYfzJ8bf1faUq1Pzy+VFwadPAy5rW36f+af0qCjA/rO77VgeOn/MLxu1f8/X6c4gPXn8x+GV4v+v2UQcQDrbVPLz39jfhgOTf3ftB8Mkab+v3lQcQDrr/vnf2M9jQNYf57/w1Ba3hK3/pF8x0Lxl7o8/J4txOiGCKNvhUg3RBgbtjB6l/eLwb0nAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9NL/AQAA//8kV94B")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

24.099148287s ago: executing program 3 (id=814):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x1, 0x0, [{0x3, 0x1, 0x0, 0x0, @msi={0x0, 0x8000003, 0x1, 0x2}}]})

22.311121489s ago: executing program 3 (id=824):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0xee01)
keyctl$setperm(0x5, r0, 0x4000400)
keyctl$describe(0x6, r0, 0x0, 0x0)

22.131156139s ago: executing program 32 (id=824):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r0, 0xee01, 0xee01)
keyctl$setperm(0x5, r0, 0x4000400)
keyctl$describe(0x6, r0, 0x0, 0x0)

4.062922208s ago: executing program 0 (id=973):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808)

3.83077583s ago: executing program 0 (id=978):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'dh\x00', 0x19, 0x3, 0x6a}, 0x2c)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @remote, 0x4e23, 0x3, 'lc\x00', 0x0, 0x22, 0x7b}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44)

3.692966467s ago: executing program 0 (id=979):
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x8010)
shutdown(r0, 0x0)

3.313473887s ago: executing program 0 (id=983):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x2f}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

2.846794641s ago: executing program 0 (id=989):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
write$char_usb(r1, &(0x7f0000001300)='7', 0x1)
syz_usb_disconnect(r0)

2.704747269s ago: executing program 2 (id=992):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000000ac0)="$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")
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x7, 0x4100, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x300}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

2.30263448s ago: executing program 2 (id=997):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r0, 0x1)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0x10)

2.09437088s ago: executing program 2 (id=999):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000140)={[{@namecase}, {@discard}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {}, {@umask={'umask', 0x3d, 0x3}}, {}, {@utf8}, {@namecase}, {@sys_tz}, {@errors_continue}, {@utf8}, {@keep_last_dots}]}, 0x1, 0x152d, &(0x7f0000000880)="$eJzs3AuYT9X6OPD3XWvtMSS+TXIZ1lrv5ptclkmSXJLkkiRJkuSWkDTJkYTEEJI0JCG5DEkMIblMTBr3+/2SkCRNkoTklqz/M+FxOnX+55xf/XKe37yf59mP9c7e79rv/r7fbV9cvu06tFaT2tUbERH8IXjhlyQAiAWAgQCQFwACACgfVz4ua31OiUl/bCfsz/Vg6pWugF1J3P/sjfufvXH/szfuf/bG/c/euP/ZG/c/e+P+M5adbZpW6Bpesu9yBd//5/hjO2R/HF///w/JLDP2yzVlrusGEPPvpnD/szfu//9Zwb+zEfc/e+P+Z1exV7oA9l+Az//s4J8/aHP/szfuP2PZ2ZV+/3ylF4j8l30GR3JeaMxfdfyMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxthf4LS/TAHApfGVrosxxhhjjDHGGGN/Hp/jSlfAGGOMMcYYY4yx/30IAiQoCCAGckAs5IRcIADgasgDeSEC10AcXAv54DrIDwWgIBSCeCgMRUCDAQsEIRSFYhCF66E43AAloCSUgtLgoAwkwI1QFm6CcnAzlIdboALcChWhElSGKnAbVIUcUA3ugOpwJ9SAmlALasNdUAfuhrpwD9SDe6E+3AcN4H5oCA9AI3gQGsND0AQehqbwCDSD5tACWkKr/1H+89ATXoBe0BuSoA/0hRehH/SHAfASDISXYRC8AoPhVUiGITAUXoNh8DoMhzdgBIyEUfAmjIa3YAyMhXEwHlJgAkyEt2ESvAOT4V2YAlMhFabBdHgPZsBMmAXvw2z4AObAXJgH8yENPoQFsBDS4SNYBB9DBiyGJbAUlsFyWAErYRWshjWwFtbBetgAG2ETbIYtsBW2wXbYAZ/ATvgUdsFu2AOfwV74/D/MP/UP+d0QEFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMB/mw/yYHwtiQYzHeCyCRdCgQULColgUoxjF4lgcS2AJLIWl0KHDBEzAsngTlsNyWB7LYwWsgBWxElbCKlgFq2JVrIbVsDpWxxpYA2thLbwL78I+l95IYX2sf+n1FDbCRtgYG2MTbIJNsSk2w2bYAltgK2yFrbE1tsE22A7bYXtsjx2wAyZiInbEjtgJO2Fn7IxdsAt2xa7YDbtj98zncwC+gC9gb6wh+mBf7Iv9MDnHAHwJX8KXcRC+gq/gq5iMQ3Aovoav4es4HE/iCByJo3AUVhVv4RgciyTGYwqm4ESciJNwEmYV+i5OxVSchtNxOs7AmTgT38fZ+AF+gHNxLs7HNEzDBbgQ0zEdF+EpzMDFuASX4jJcjstwJa7ClbgG1+IaXI/rcSNuxM24GbfiVtyO2/ETVAD4Ke7G3ZiMe3Ev7sN9uB/34wE8gJmYiQfxIB7CQ3gYD+MRPIJH8Rgex2N4Ak/gSTyFp/E0nsWzeA6fjf+68SclVyeDyKKEEjEiRsSKWJFL5BK5RW6RR+QRERERcSJO5BP5RH6RXxQUBUW8iBdFRBFhhBEkwhgAEFERFcVFcVFClBClRCnhhBMJIkGUFWVFOVFOlBe3iAriVlFRVBJtXRVRRVQV7Vw1cYeoLqqLGqKmqCVqi9qijqgj6oq6op6oJ+qL+qKBuF80FH1wAD4osjrTRAzBpmIoNhPNhbz4RWkthmMb0Va0E4+LkTgCO4jWLlE8JTqKMdhJ/E2MxWdEFzEeu4rnRDfRXfQQz4ueoo3rJXqLydhH9BVTsZ/oLwaIl8QMrCnex9k5a4lXRbIYIoaK18R8fF0MF2+IEWKkGCXeFKPFW2KMGCvGifEiRUwQE8XbYpJ4R0wW74opYqpIFdPEdPGemCFmilnifTFbfCDmiLlinpgv0sSHYoFYKNLFR2KR+FhkiMViiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH+ETsFJ+KXWK32CM+E3vF52Kf+ELsF1+KA+IrkSm+FgfFN+KQ+FYcFt+JI+J7cVQcE8fFD+KE+FGcFKfEaXFGnBU/iXPiZ3FeeAESpZBSKhnIGJlDxsqcMpe8SuaWwcVP9xoZJ6+V+eR1Mr8sIAvKQjJeFpZFpJZGWkkylEVlMRmV18vi8gZZQpaUpWRp6WQZmSBvlGXlTbKcvFmWl7fICvJWWVFWkpVlFXmbrCpvlxC5sI8asqasJWvLu2QS3C3rZp308l5ZX94nG8j7ZUP5gGwkH5SN5UOyiXxYNpWPyGayuWwhW8pW8lHZWj4m28i2sp18XLaXT8gO8kmZKJ+SHaW/+BV5RnaRz8qu8jnZTXaXPeTP8rz0spfsLaEPyL7yRdlP9pcDYrP2+7IcJF+Rg+WrMlkOkUPla3KYfF0Ol2/IEXKkHCXflKPlW3KMHCvHyfEyRU6QE+XbcpJ8R06W78opcqpMldPkADnwl5lmSfkv89/+nfzBv+x9o9wkN8stcqvcJrfLHfITuVPulLvkLrlH7pF75V65T+6T++V+eUAekJkyUx6UB+UheUgeloflEXlEHpXH5Bn5gzwhf5Qn5Sl5Sp6RZ+VZee7iZwAKlVBSKRWoGJVDxaqcKpe6SuVWV6s8Kq+KqGtUnLpW5VPXqfyqgCqoCql4VVgVUVoZZRWpUBVVxVRUXY8XvzCqlCqtnCqjEtSN/0m+Kq5uUCVUyV/lX6ov6Z/U10q1Uq1Va9VGtVHtVDvVXrVXHVQHlagSVUfVUXVSnVRn1Vl1UV1UV9VVdVPdVA/VQ/VUPVUv1UslqSTVV72o+qn+aoB6SQ1UL6tBapAarAarZJWshqqhapgapoar4WqEGqFGqVFqtBqtxqgxapwap1JUipqoJqpJapKarCarKWqKSlWparqarmaoGWqWmqVmq9lqjpqj5ql5Kk2lqQVqgUpX6WqRWqQy1GK1WC1VS9VytVytVCvVarVarVVr1Xq1XmWoTWqT2qK2qG1qm9qhdqidaqfapXapPWqP2qv2qn1qn9qv9qsD6oDKVJnqoDqoDqlD6rA6rI6oI+qoOqqOq+PqhDqhTqqT6rQ6rc6qs+qcOqfOq/NZt32BCESgAhXEBDFBbBAb5ApyBbmD3EGeIE8QCSJBXBAX5AuuC/IHBYKCQaEgPigcFAl0YAIbiItNjwbXB8WDG4ISQcmgVFA6cEGZICG4MSgb3BSUC24Oyge3BBWCW4OKQaWgclAluC2oGtweVAvuCKoHdwY1gppBraB2cFdQJ7g7qBvcE9QL7g3qB/cFDYL7g4bBA0Gj4MGgcfBQ0CR4OGgaPBI0C5oHLYKWQas/dX7vTxZ4zPXSvXWS7qP76hd1P91fD9Av6YH6ZT1Iv6IH61d1sh6ih+rX9DD9uh6u39Aj9Eg9Sr+pR+u39Bg9Vo/T43WKnqAn6rf1JP2Onqzf1VP0VJ2qp+np+j09Q8/Us/T7erb+QM/Rc/U8PV+n6Q/1Ar1Qp+uP9CL9sc7Qi/USvVQv08v1Cr1Sr9Kr9Rq9Vq/T6/UGvVFv0pv1Fr1Vb9Pb9Q79id6pP9W79G69R3+m9+rP9T79hd6vv9QH9Fc6U3+tD+pv9CH9rT6sv9NH9Pf6qD6mj+sf9An9oz6pT+nT+ow+q3/S5/TP+rz2WTf3WZd3o4wyMSbGxJpYk8vkMrlNbpPH5DEREzFxJs7kM/lMfpPfFDQFTbyJN0VMEZOFDJmipqiJmqgpboqbEqaEKWVKGWecSTAJpqwpa8qZcqa8KW8qmAqmoqloKpvK5jZzm7nd3G7uMHeYO82dpqapaWqb2qaOqWPqmrqmnqln6pv6poFpYBqahqaRaWQam8amiWlimpqmpplpZlqYFqaVaWVam9amjWlj2pl2pr1pbzqYDibRJJqOpqPpZDqZzqaz6WK6mK6mq+lmupkepofpaXqaXqaXSTJJpq/pa/qZfmaAGWAGmoFmkBlkBpvBJtkkm6FmqBlmhpnhZrgZYUaaUVnXLPOWGWPGmnFmvEkxKWaimWgmmUlmsplsppgpJtWkmulmuplhZphZZpaZbWabOWaOmWfmmTSTZhaYBSbdpJtFZpHJMBlmiVlilpllZoVZYVaZVWaNWWPWwTqzwWwwm8wms8VsMdvMNrPD7DA7zU6zy+wye8wes9fsNfvMPrPf7DcHzAGTaTLNQXPQHDKHzGFz2BwxR8xRc9QcN8fNCXPCnDQnzWlz2pw1BS5eL72JtTltLnuVzW2vtnlsXvuPcUFbyMbbwraI1Ta/LfCr2FhrS9iStpQtbZ0tYxPsjb+JK9pKtrKtYm+zVe3tttpv4jr2blvX3mPr2XttbXvXhTjr7tfea+vb+2wD+7BtiAhgm9vGtqVtYh+2Te0jtpltblvYlra9fcJ2sE/aRPuU7Wif/k28wC60q+xqu8autbvsbnvanrGH7Lf2rP3J9rK97UD7sh1kX7GD7as22Q75TTzKvmlH27fsGDvWjrPjfxNPsVNtqp1mp9v37Aw78zdxmv3Qzrbpdo6da+fZ+b/EWTWl24/sIvuxzbABLLFL7TK73K6wKy/V6vPa9XaD3Wh32k/tFrvVbrPb7Y5LN8J2t91jP7N77ef2oP3G7rdf2gP2sM20X/8SZx3fYfudPWK/t0ftMXvc/mBP2B/VpeysY//B/mzPW2+BkIAkKQoohnJQLOWkXHQV5aarKQ/lpQhdQ3F0LeWj6yg/FaCCVIjiqTAVIU2GLBGFVJSKUZSup0vllaLS5KgMJdCNVJZuonJ0M5WnW6gC3UoVqRJVpip0G1Wl26ka3UHV6U6qQTWpFtWmu6gO3U116R6qR/dSfbqPGtD91JAeoEb0IDWmh6gJPUxN6RFqRs2pBbWkVvQotabHqA21pXb0OLWnJ6gDPUmJ9BR1pKepE/2NOtMz1IWepa70HHWj7tSDnqee9AL1ot6URH2oL71I/ag/DaCXaCC9TIPoFRpMr1IyDaGh9BoNo9dpOL1BI2gkjaI3aTS9RWNoLI2j8ZRCE2givU2T6B2aTO/SFJpKqTSNptN7NINm0ix6n2bTBzSH5tI8mk9p9CEtoIWUTh/RIvqYMmgxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqEdtKntIt20x76jPbS57SPvqD99CUdoK8ok76mg/QNHaJv6TB953vT93SUjtFx+oFO0I90kk7RaTpDZ+knOkc/03nyBCGGIpShCoMwJswRxoY5w1zhVWHu8OowT5g3jITXhHHhtWG+8Lowf1ggLBgWCuPDwmGRUIcmtCGFYVg0LBZGw+vD4uENYYmwZFgqLB26sEyYEN4Ylg1vCsuFN4flw1vCCuGtYcWwUvjwvVXC28Kq4e1htfCOsHp4Z1gjrBnWCmuHd4V1wrvDuuE9Yb3w3rBceF/YILw/bBg+EDYKHwwbhw+FTcKHw6bhI2GzsHnYImwZtgofDVuHj4VtwrZhu/DxsH34RNghfDJMDJ8KO4ZP/7L+voX/fH1S2CfsG74Yvhh6f4+cF50fTYt+GF0QXRhNj34UXRT9OJoRXRxdEl0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y9b52DnDohJNOucDFuBwu1uV0udxVLre72uVxeV3EXePi3LUun7vO5XcFXEFXyMW7wq6I084468iFrqgr5qLuelfc3eBKuJKulCvtnCvjElxL18q1cq3dY66Na+vaucfd4+4J94R70j3pnnId3dOuk/ub6+yecV3cs+5Z95zr5rq7Hu5519NNyHPhnExyfV1f18/1cwPcADfQDXSD3CA32A12yS7ZDXVD3TA3zA13w90IN8KNcqPcaDfajXFj3Dg3zqW4FDfRTXST3CQ32U12U9wUl+pS3XQ33c1wM1zVmRf2MsfNcfPcPJfm0twCl3XPmO4WuUUuw2W4JW6JW+aWuRVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrkdbofb6Xa6XT7vhUndXrfP7XP73X53wH3lMt3X7qD7xh1y37rD7jt3xH3vjrpj7rj7wZ1wP7qT7pQ77c64s+4nd8797M4771IiEyITI29HJkXeiUyOvBuZEpkaSY1Mi0yPvBeZEZkZmRV5PzI78kFkTmRuZF5kfiQt8mFkQWRhJD3yUWRR5ONIRmRxZElkaWRZZHnE+8JbQl/UF/NRf70v7m/wJXxJX8qX9s6X8Qn+Rl/W3+TL+Zt9eX+Lr+Bv9RV9JV/ZP+Kb+ea+hW/pW/lHfWv/mG/j2/p2/nHf3j/hO/gnfaJ/ynf0T/tO/m++s3/Gd/HP+q7+Od/Nd/c9/PO+p3/B9/K9fZLv4/v6F30/398P8C/5gf5lP8i/4gf7V32yH+KH+tf8MP+6H+7f8CP8SD8q5k0/+tIjMoz3KX6Cn+jf9pP8O36yf9dP8VN9qp/mp/v3/Aw/08/y7/vZ/gM/x8/18/x8n+Y/9Av8Qp/uP/KL/Mc+wy++9FLZr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wn/id/lO/y+/2e/xnfq//3O/zX/j9/kt/wH/lM/3X/qD/xh/y3/rD/jt/xH/vj/pj/rj/wZ/wP/qT/pQ/7c/4s/4nf87/7M/zv1ljjDHGGPu3TLg8FL9ec+F1fp/fyRF/t3FfALh6a6HMv1+fdUe5Lv+FcX8R3z4CAE/17vrgpaVGjaSkpIvbZkgIis0FuPQnQVli4HK8GNrBE5AIbaHs79bfX3Q/S/9i/ugtALn+LicWLseX5/8CAJN+Z/5HHx+1oEJ4Ou7/M/9cgBLFLufkhMvxYmj3y/uVtlDun9RfoPW/qD/nlykAbf4uJzdcji/XnwCPwdOQ+KstGWOMMcYYY4yxC/qLyp0vPX9e+hufv/d8Hq8u5+SAy/G/ej5njDHGGGOMMcbYlfdM9x5PPpqY2Lbzfz6o9j/K+rcHTeF/a2Ye/O7Ae4BLP1EA8AcnBMgayL/yKDb/JftKvnjq/OOqZWd8AP8drfwzBlf4NybGGGOMMcbYn+7yTf+vf66uVEGMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29Ff8d2JX+hgZY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxK+3/BQAA//9qhfvo")
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

2.09390505s ago: executing program 4 (id=1000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c1200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000e0110380dc1100800800034000000003d011"], 0x120c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.828470814s ago: executing program 4 (id=1001):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x1}]}}}]}, 0x44}}, 0x0)

1.583056407s ago: executing program 4 (id=1004):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x4, 0x4)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

1.582505137s ago: executing program 2 (id=1005):
r0 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0xf, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x8, @remote, 0x83c}, 0x1c)

1.437581784s ago: executing program 2 (id=1007):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
write$ppp(r0, &(0x7f0000000200)="bc72", 0x2)

1.298761602s ago: executing program 2 (id=1009):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0ca310a223010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x14, 0x6, "001329bf77d1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

858.699005ms ago: executing program 0 (id=1015):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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")
creat(&(0x7f0000000240)='./file1\x00', 0xd)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000200)={0x0, 0xfb, 0x2d, 0x2, 0x6, "d6a503f0b0000000e80c00", "57122f863cea65cfc3c71068965a87667890866ff52f9bbe"}, 0x31, 0x2)

775.690949ms ago: executing program 1 (id=1016):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4)
renameat2(r0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2)

599.210008ms ago: executing program 4 (id=1017):
unshare(0xa000400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x9}, 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r0, r1, 0x4}, 0x10)

598.961928ms ago: executing program 1 (id=1018):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000140)={0x0, 0x2})

473.480755ms ago: executing program 1 (id=1019):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0xefff, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x6008044}, 0x40840)

457.848565ms ago: executing program 4 (id=1020):
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})
ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}})

299.021644ms ago: executing program 1 (id=1021):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0)

146.460682ms ago: executing program 4 (id=1022):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x4)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x6100204)
preadv(r0, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/30, 0x1e}], 0x1, 0x6, 0xfffffffd)

144.295582ms ago: executing program 1 (id=1030):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44)

0s ago: executing program 1 (id=1023):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
io_setup(0x9, &(0x7f0000000240)=<r1=>0x0)
connect$can_bcm(r0, &(0x7f0000000000), 0x10)
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])

kernel console output (not intermixed with test programs):

 read_mapping_page failed!
[  112.579394][ T6552] loop3: detected capacity change from 0 to 2048
[  112.585941][ T6532] ERROR: (device loop0): txCommit: 
[  112.585941][ T6532] 
[  112.697509][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  112.734159][ T6553] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.936570][ T6555] kvm: kvm [6554]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x400003
[  113.006551][ T6558] loop3: detected capacity change from 0 to 1024
[  113.194239][ T6564] loop1: detected capacity change from 0 to 512
[  113.275098][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.351027][ T6564] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  113.504134][ T6564] EXT4-fs error (device loop1): ext4_get_inode_usage:888: inode #12: comm syz.1.239: corrupted xattr block 6: invalid header
[  113.654849][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.202131][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'.
[  114.314344][ T6580] loop1: detected capacity change from 0 to 32768
[  114.396427][ T6580] read_mapping_page failed!
[  114.410694][ T6580] ERROR: (device loop1): txCommit: 
[  114.410694][ T6580] 
[  114.770693][ T5826] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  114.973838][ T5826] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  114.991058][ T5826] usb 3-1: config 0 has no interface number 0
[  115.002390][ T6604] loop0: detected capacity change from 0 to 64
[  115.007464][ T5826] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.031669][ T6604] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  115.040951][ T5826] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.070707][ T5826] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  115.105003][ T5826] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  115.140834][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.170534][ T5826] usb 3-1: config 0 descriptor??
[  115.835519][ T5826] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0003/input/input10
[  115.895623][ T5826] uclogic 0003:28BD:0042.0003: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  115.950927][ T5826] usb 3-1: USB disconnect, device number 5
[  116.103783][ T6634] fido_id[6634]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  116.401507][ T6628] loop1: detected capacity change from 0 to 40427
[  116.420999][ T6628] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  116.428311][ T6628] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  116.438583][ T6628] F2FS-fs (loop1): heap/no_heap options were deprecated
[  116.460985][ T6628] F2FS-fs (loop1): invalid crc value
[  116.477478][ T6628] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.649363][ T6628] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  116.680683][ T6628] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  116.931577][ T5767] syz-executor: attempt to access beyond end of device
[  116.931577][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.980811][ T5767] F2FS-fs (loop1): Remounting filesystem read-only
[  117.190805][    T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  117.387432][    T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.406394][    T8] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  117.424542][ T6642] loop3: detected capacity change from 0 to 40427
[  117.437620][    T8] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  117.458095][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.466514][ T6642] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  117.476326][ T6642] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  117.478078][    T8] usb 1-1: config 0 descriptor??
[  117.514368][ T6642] F2FS-fs (loop3): invalid crc value
[  117.534469][    T8] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  117.561642][    T8] dvb-usb: bulk message failed: -22 (3/0)
[  117.583091][ T6642] F2FS-fs (loop3): Found nat_bits in checkpoint
[  117.619272][    T8] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  117.643280][    T8] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  117.657491][    T8] usb 1-1: media controller created
[  117.667018][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  117.702151][    T8] dvb-usb: bulk message failed: -22 (6/0)
[  117.708414][    T8] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  117.724063][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11
[  117.748938][ T6654] dibusb: i2c wr: len=90 is too big!
[  117.748938][ T6654] 
[  117.768765][ T6642] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  117.778329][    T8] dvb-usb: schedule remote query interval to 150 msecs.
[  117.790231][ T6642] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  117.797821][    T8] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  117.804744][    T8] usb 1-1: USB disconnect, device number 2
[  117.882484][    T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  118.002772][ T2927] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  118.027311][ T2927] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  119.382496][ T6690] loop0: detected capacity change from 0 to 16
[  119.446382][ T6690] erofs: (device loop0): mounted with root inode @ nid 36.
[  119.494613][ T5768] Bluetooth: hci4: command 0x1003 tx timeout
[  119.502830][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  119.520307][ T6692] loop2: detected capacity change from 0 to 2048
[  119.536579][ T6690] capability: warning: `syz.0.286' uses deprecated v2 capabilities in a way that may be insecure
[  119.676517][ T6692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.802268][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  119.833697][  T216] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  119.898938][  T216] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  119.912081][  T216] EXT4-fs (loop2): This should not happen!! Data will be lost
[  119.912081][  T216] 
[  119.924560][  T216] EXT4-fs (loop2): Total free blocks count 0
[  119.930690][  T216] EXT4-fs (loop2): Free/Dirty block details
[  119.937745][  T216] EXT4-fs (loop2): free_blocks=66060288
[  119.943848][  T216] EXT4-fs (loop2): dirty_blocks=32
[  119.949159][  T216] EXT4-fs (loop2): Block reservation details
[  119.955413][  T216] EXT4-fs (loop2): i_reserved_data_blocks=2
[  119.992119][ T2927] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  120.117871][ T6705] pimreg: entered allmulticast mode
[  120.142555][ T6705] pimreg: left allmulticast mode
[  120.353233][ T6713] tipc: Started in network mode
[  120.361800][ T6713] tipc: Node identity ac14140f, cluster identity 4711
[  120.382789][ T6713] tipc: New replicast peer: 255.255.255.255
[  120.404593][ T6713] tipc: Enabled bearer <udp:syz2>, priority 10
[  120.769221][ T6727] loop0: detected capacity change from 0 to 256
[  120.830762][   T28] audit: type=1800 audit(1776751462.975:5): pid=6727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.301" name="file1" dev="loop0" ino=1048601 res=0 errno=0
[  120.841573][ T6727] FAT-fs (loop0): error, clusters badly computed (0 != 128)
[  120.895780][ T6727] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  120.906806][ T6729] loop3: detected capacity change from 0 to 4096
[  120.974343][ T6729] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.068525][ T6737] loop2: detected capacity change from 0 to 256
[  121.081438][   T28] audit: type=1800 audit(1776751463.215:6): pid=6729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.303" name="file1" dev="loop3" ino=15 res=0 errno=0
[  121.131271][ T6733] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  121.244271][ T6737] FAT-fs (loop2): Directory bread(block 64) failed
[  121.259121][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.290735][ T6737] FAT-fs (loop2): Directory bread(block 65) failed
[  121.297440][ T6737] FAT-fs (loop2): Directory bread(block 66) failed
[  121.350699][ T6737] FAT-fs (loop2): Directory bread(block 67) failed
[  121.385141][ T6737] FAT-fs (loop2): Directory bread(block 68) failed
[  121.420702][ T6737] FAT-fs (loop2): Directory bread(block 69) failed
[  121.427377][ T6737] FAT-fs (loop2): Directory bread(block 70) failed
[  121.450198][ T6737] FAT-fs (loop2): Directory bread(block 71) failed
[  121.474320][ T6737] FAT-fs (loop2): Directory bread(block 72) failed
[  121.482736][ T6737] FAT-fs (loop2): Directory bread(block 73) failed
[  121.513037][ T5824] tipc: Node number set to 2886997007
[  121.951595][ T6739] loop1: detected capacity change from 0 to 32768
[  121.992337][ T6753] loop9: detected capacity change from 0 to 7
[  122.006344][ T6739] JBD2: Ignoring recovery information on journal
[  122.035949][ T5760] Dev loop9: unable to read RDB block 7
[  122.054199][ T5760]  loop9: unable to read partition table
[  122.075597][ T6739] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  122.098492][ T5760] loop9: partition table beyond EOD, truncated
[  122.149552][ T6753] Dev loop9: unable to read RDB block 7
[  122.184339][ T6753]  loop9: unable to read partition table
[  122.214993][ T6753] loop9: partition table beyond EOD, truncated
[  122.215762][ T6749] loop2: detected capacity change from 0 to 32768
[  122.232025][ T6749] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.310 (6749)
[  122.251848][ T6753] loop_reread_partitions: partition scan of loop9 (�被x�������� ) failed (rc=-5)
[  122.276306][ T6749] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.329102][ T6749] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  122.368510][ T6749] BTRFS info (device loop2): setting nodatasum
[  122.395954][ T6749] BTRFS info (device loop2): force zlib compression, level 3
[  122.420843][ T6749] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  122.455363][ T6749] BTRFS info (device loop2): use lzo compression, level 0
[  122.480188][ T6749] BTRFS info (device loop2): turning on flush-on-commit
[  122.495881][ T6749] BTRFS info (device loop2): enabling auto defrag
[  122.510951][ T6749] BTRFS info (device loop2): max_inline at 4096
[  122.517275][ T6749] BTRFS info (device loop2): using free space tree
[  122.527921][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  122.571493][ T6761] batadv_slave_0: entered promiscuous mode
[  122.593039][ T6761] batman_adv: batadv0: Adding interface: macvtap1
[  122.611980][ T6761] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.680299][ T6761] batman_adv: batadv0: Interface activated: macvtap1
[  122.770811][ T6749] BTRFS info (device loop2): enabling ssd optimizations
[  122.936787][ T6749] BTRFS error (device loop2: state M): unrecognized mount option './file1'
[  123.025590][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.488408][ T5780] IPVS: starting estimator thread 0...
[  124.507662][ T6820] IPVS: sed: FWM 3 0x00000003 - no destination available
[  124.529909][    C1] IPVS: sed: FWM 3 0x00000003 - no destination available
[  124.619058][ T6821] IPVS: using max 18 ests per chain, 43200 per kthread
[  124.729057][ T6808] loop0: detected capacity change from 0 to 131072
[  124.740288][ T6808] F2FS-fs (loop0): invalid crc value
[  124.774265][ T6808] F2FS-fs (loop0): Found nat_bits in checkpoint
[  124.815156][ T6808] sched: RT throttling activated
[  124.837528][ T6808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  125.379400][ T6836] netlink: 16 bytes leftover after parsing attributes in process `syz.3.340'.
[  125.417818][ T6839] loop2: detected capacity change from 0 to 512
[  125.460104][ T6839] EXT4-fs (loop2): orphan cleanup on readonly fs
[  125.540647][ T6839] EXT4-fs error (device loop2): ext4_quota_enable:7140: comm syz.2.342: Bad quota inum: 2, type: 1
[  125.625278][ T6839] EXT4-fs warning (device loop2): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix.
[  125.678780][ T6839] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  125.694657][ T6839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  125.836122][ T6839] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  125.863897][ T6839] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 8
[  125.962484][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.244863][ T6850] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.299680][ T6853] netlink: 'syz.1.347': attribute type 13 has an invalid length.
[  126.330826][ T6853] netlink: 'syz.1.347': attribute type 17 has an invalid length.
[  126.494708][ T6846] loop3: detected capacity change from 0 to 32768
[  126.566350][ T6846] JBD2: Ignoring recovery information on journal
[  126.660307][ T6846] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  126.697797][ T6853] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  126.867999][ T6846] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  126.868152][ T6846] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  126.938249][ T6846] OCFS2: File system is now read-only.
[  126.968325][ T6846] OCFS2: ERROR (device loop3): int ocfs2_xattr_find_entry(struct inode *, int, const char *, struct ocfs2_xattr_search *): corrupted xattr entries
[  126.968357][ T6846] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  127.122926][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  127.272092][ T6884] netlink: 332 bytes leftover after parsing attributes in process `syz.2.361'.
[  127.587923][ T6892] batadv_slave_0: entered promiscuous mode
[  127.626770][ T6892] batman_adv: batadv0: Adding interface: macvtap1
[  127.651653][ T6892] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.671457][ T6897] process 'syz.0.366' launched './file2' with NULL argv: empty string added
[  127.746478][ T6892] batman_adv: batadv0: Interface activated: macvtap1
[  128.041947][ T6908] loop0: detected capacity change from 0 to 4096
[  128.067825][ T6908] EXT4-fs: inline encryption not supported
[  128.112606][ T6908] EXT4-fs (loop0): Test dummy encryption mode enabled
[  128.148266][ T6908] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a857c019, mo2=0003]
[  128.181793][ T6908] System zones: 0-5
[  128.205224][ T6908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.262649][ T6908] EXT4-fs (loop0): shut down requested (0)
[  128.327653][ T6917] netlink: 284 bytes leftover after parsing attributes in process `syz.1.374'.
[  128.419437][ T6903] loop2: detected capacity change from 0 to 32768
[  128.480901][ T6903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.368 (6903)
[  128.506897][ T6903] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  128.533722][ T6903] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  128.555875][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.565921][ T6903] BTRFS info (device loop2): force clearing of disk cache
[  128.590897][ T6903] BTRFS info (device loop2): enabling disk space caching
[  128.598011][ T6903] BTRFS info (device loop2): turning on sync discard
[  128.622018][ T6903] BTRFS info (device loop2): disabling tree log
[  128.639310][ T6903] BTRFS info (device loop2): metadata ratio 5
[  128.670679][ T6903] BTRFS info (device loop2): disk space caching is enabled
[  128.902043][ T6903] BTRFS info (device loop2): enabling ssd optimizations
[  128.912696][ T6941] batadv_slave_0: entered promiscuous mode
[  128.920493][ T6941] batman_adv: batadv0: Adding interface: macvtap1
[  128.935275][ T6903] BTRFS info (device loop2): rebuilding free space tree
[  128.956631][ T6944] loop1: detected capacity change from 0 to 256
[  128.970807][ T6941] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.043213][ T6944] FAT-fs (loop1): Directory bread(block 64) failed
[  129.062727][ T6944] FAT-fs (loop1): Directory bread(block 65) failed
[  129.069649][ T6944] FAT-fs (loop1): Directory bread(block 66) failed
[  129.087950][ T6941] batman_adv: batadv0: Interface activated: macvtap1
[  129.104637][ T6914] loop3: detected capacity change from 0 to 32768
[  129.113997][ T6903] BTRFS info (device loop2): disabling free space tree
[  129.144475][ T6903] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.151113][ T6944] FAT-fs (loop1): Directory bread(block 67) failed
[  129.176491][ T6944] FAT-fs (loop1): Directory bread(block 68) failed
[  129.186808][ T6903] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.209799][ T6944] FAT-fs (loop1): Directory bread(block 69) failed
[  129.224870][ T6914] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.241860][ T6944] FAT-fs (loop1): Directory bread(block 70) failed
[  129.248729][ T6944] FAT-fs (loop1): Directory bread(block 71) failed
[  129.282944][ T6944] FAT-fs (loop1): Directory bread(block 72) failed
[  129.308845][ T6944] FAT-fs (loop1): Directory bread(block 73) failed
[  129.504903][ T5770] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.514226][ T6914] XFS (loop3): Ending clean mount
[  129.677238][  T969] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  129.749432][ T5772] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.890047][  T969] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  129.922848][  T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.950032][  T969] usb 1-1: Product: syz
[  129.955496][  T969] usb 1-1: Manufacturer: syz
[  129.960156][  T969] usb 1-1: SerialNumber: syz
[  130.442785][ T6971] loop1: detected capacity change from 0 to 1024
[  130.475680][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  130.498447][ T6971] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.552818][ T6975] loop3: detected capacity change from 0 to 64
[  130.580133][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  130.633246][  T969] rtl8150 1-1:1.0: eth1: rtl8150 is detected
[  130.845660][ T6982] loop2: detected capacity change from 0 to 512
[  130.873895][ T6978] loop1: detected capacity change from 0 to 4096
[  130.894421][ T6982] EXT4-fs: Ignoring removed mblk_io_submit option
[  130.919037][ T6982] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.930802][ T6978] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  130.943686][ T6978] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 4096)
[  130.967580][ T5805] usb 1-1: USB disconnect, device number 3
[  130.980674][ T6986] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.004847][ T6982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.065621][ T6982] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.335874][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.906068][   T27] IPVS: starting estimator thread 0...
[  132.010949][ T7009] IPVS: using max 18 ests per chain, 43200 per kthread
[  132.415769][ T7022] loop1: detected capacity change from 0 to 4096
[  132.439826][ T7022] ntfs3: loop1: Different NTFS sector size (2048) and media sector size (512).
[  132.507336][ T7022] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  132.828955][ T7043] netem: incorrect gi model size
[  132.851309][ T7043] netem: change failed
[  132.858371][ T7040] tap0: tun_chr_ioctl cmd 1074025677
[  132.881318][ T7040] tap0: linktype set to 778
[  132.888222][ T7046] netlink: 'syz.0.406': attribute type 3 has an invalid length.
[  132.905740][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'.
[  132.939859][ T5774] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  133.225610][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv1
[  133.239637][ T7058] team0: Port device batadv1 added
[  133.409152][ T7064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.440764][ T5780] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  133.454816][ T7064] netlink: 'syz.2.413': attribute type 13 has an invalid length.
[  133.463112][ T7064] netlink: 'syz.2.413': attribute type 17 has an invalid length.
[  133.621071][ T5780] usb 4-1: Using ep0 maxpacket: 32
[  133.635341][ T7064] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  133.654083][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.672630][ T7069] warning: `syz.1.415' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  133.682680][ T5780] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.696026][ T5780] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  133.705702][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.721819][ T5780] usb 4-1: config 0 descriptor??
[  133.867263][ T7073] netlink: 43 bytes leftover after parsing attributes in process `syz.2.417'.
[  134.169053][ T5780] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[  134.197562][ T5780] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[  134.217909][ T5780] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[  134.230665][ T5780] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[  134.248034][ T5780] koneplus 0003:1E7D:2D51.0004: unknown main item tag 0x0
[  134.266326][ T5780] koneplus 0003:1E7D:2D51.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[  134.587272][ T7071] loop1: detected capacity change from 0 to 40427
[  134.623650][ T7071] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  134.650535][ T7071] F2FS-fs (loop1): Image doesn't support compression
[  134.658706][ T5824] usb 4-1: USB disconnect, device number 6
[  134.671291][ T7071] F2FS-fs (loop1): invalid crc value
[  134.711597][ T7071] F2FS-fs (loop1): Found nat_bits in checkpoint
[  134.847690][ T7071] F2FS-fs (loop1): Start checkpoint disabled!
[  134.866611][ T7071] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  134.966930][ T7093] Set syz1 is full, maxelem 2 reached
[  135.034890][ T7086] loop0: detected capacity change from 0 to 32768
[  135.116350][ T7086] JBD2: Ignoring recovery information on journal
[  135.116506][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  135.132344][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  135.148737][ T7086] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  135.262577][ T2927] kworker/u4:11: attempt to access beyond end of device
[  135.262577][ T2927] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  135.312553][ T2927] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  135.329316][ T2927] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  135.368346][ T2927] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  135.632242][ T7106] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[  135.647394][ T7086] syz.0.424 (7086) used greatest stack depth: 18768 bytes left
[  135.658835][ T7106] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[  135.783695][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  135.924483][ T7111] loop2: detected capacity change from 0 to 256
[  135.958778][ T7111] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  136.024710][ T7114] loop1: detected capacity change from 0 to 128
[  136.032636][ T7111] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.073820][ T7114] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  136.161078][ T7114] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  136.267681][ T7114] fscrypt (loop1, inode 12): Unsupported encryption flags (0x10)
[  136.363003][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  136.424685][ T7128] loop3: detected capacity change from 0 to 512
[  136.446560][ T7128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  136.541944][ T7128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  136.610754][ T7128] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.897024][   T28] audit: type=1800 audit(1776751478.995:7): pid=7139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.441" name="file2" dev="loop3" ino=16 res=0 errno=0
[  137.039704][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.171155][ T7136] loop0: detected capacity change from 0 to 65536
[  137.277385][ T7136] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  137.352125][ T7136] XFS (loop0): Ending clean mount
[  137.356703][ T7154] delete_channel: no stack
[  137.358671][ T7136] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  137.541787][ T7161] loop1: detected capacity change from 0 to 4096
[  137.690412][ T7161] ntfs3: loop1: Failed to initialize $Extend/$ObjId.
[  138.475746][ T7162] loop3: detected capacity change from 0 to 32768
[  138.685933][ T7166] loop0: detected capacity change from 0 to 32768
[  138.716795][ T7166] (syz.0.454,7166,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.775467][ T7166] (syz.0.454,7166,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  138.824009][ T7166] JBD2: Ignoring recovery information on journal
[  138.909697][ T7166] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  139.557510][ T7184] infiniband syz1: set active
[  139.622908][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  139.632909][ T7184] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  139.681835][ T7185] netlink: 'syz.3.460': attribute type 13 has an invalid length.
[  139.689631][ T7185] netlink: 'syz.3.460': attribute type 17 has an invalid length.
[  139.768362][ T7185] infiniband syz1: set active
[  139.834619][ T7185] infiniband syz1: set active
[  139.892945][ T7189] loop2: detected capacity change from 0 to 128
[  139.933232][ T7185] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.092434][ T7193] loop0: detected capacity change from 0 to 512
[  140.099770][ T7193] EXT4-fs: Ignoring removed bh option
[  140.134781][ T7193] EXT4-fs: Ignoring removed oldalloc option
[  140.159050][ T7193] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  140.232574][ T7193] EXT4-fs (loop0): invalid journal inode
[  140.250872][ T7193] EXT4-fs (loop0): can't get journal size
[  140.298275][ T7193] EXT4-fs (loop0): 1 truncate cleaned up
[  140.311136][ T7193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.340055][ T7201] loop1: detected capacity change from 0 to 512
[  140.376897][ T7205] erspan0: entered promiscuous mode
[  140.421150][ T7201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  140.456464][ T7201] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  140.487791][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.551901][ T7201] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=84ec018, mo2=0002]
[  140.616750][ T7201] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.470: Allocating blocks 41-42 which overlap fs metadata
[  140.734824][ T7201] Quota error (device loop1): write_blk: dquota write failed
[  140.778392][ T7201] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5
[  140.831781][ T7201] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4059: comm syz.1.470: Allocating blocks 41-42 which overlap fs metadata
[  140.909850][ T7201] Quota error (device loop1): write_blk: dquota write failed
[  140.960385][ T7201] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  141.020903][ T7201] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.470: Failed to acquire dquot type 1
[  141.076569][ T7201] EXT4-fs error (device loop1): mb_free_blocks:1970: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  141.177631][ T7201] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.470: corrupted inode contents
[  141.251685][ T7201] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #12: comm syz.1.470: mark_inode_dirty error
[  141.316983][ T7201] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.470: corrupted inode contents
[  141.398146][ T7201] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.470: mark_inode_dirty error
[  141.447814][ T7201] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.470: corrupted inode contents
[  141.523471][ T7201] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  141.545092][ T7223] loop2: detected capacity change from 0 to 128
[  141.563713][ T7201] EXT4-fs error (device loop1): ext4_do_update_inode:5255: inode #12: comm syz.1.470: corrupted inode contents
[  141.603037][ T7221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  141.631170][ T7211] loop3: detected capacity change from 0 to 131072
[  141.645770][ T7224] netlink: 'syz.0.478': attribute type 13 has an invalid length.
[  141.647487][ T7201] EXT4-fs error (device loop1): ext4_truncate:4301: inode #12: comm syz.1.470: mark_inode_dirty error
[  141.660720][ T7224] netlink: 'syz.0.478': attribute type 17 has an invalid length.
[  141.673129][ T7211] F2FS-fs (loop3): invalid crc value
[  141.685466][ T7201] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  141.722925][ T7211] F2FS-fs (loop3): Found nat_bits in checkpoint
[  141.756134][ T7201] EXT4-fs (loop1): 1 truncate cleaned up
[  141.769998][ T7201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  141.788997][ T7211] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  142.069564][ T7201] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  142.089943][ T7224] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.165797][ T7201] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  142.292600][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.771798][    T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  142.852074][ T7236] loop2: detected capacity change from 0 to 32768
[  142.917861][ T7236] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  142.917861][ T7236] 
[  142.942745][ T7236] ERROR: (device loop2): remounting filesystem as read-only
[  142.975438][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  143.002268][ T5805] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  143.020264][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  143.047995][    T8] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  143.088269][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.122486][    T8] usb 1-1: config 0 descriptor??
[  143.217020][ T7248] vcan0: tx drop: invalid da for name 0x0000000000000002
[  143.237201][ T5805] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64
[  143.267485][ T5805] usb 2-1: config 0 interface 0 has no altsetting 0
[  143.286179][ T5805] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  143.305145][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.357096][ T5805] usb 2-1: config 0 descriptor??
[  143.387152][ T7243] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  143.397557][ T7252] loop3: detected capacity change from 0 to 128
[  143.583292][    T8] hid-steam 0003:28DE:1142.0005: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  143.685228][    T8] hid-steam 0003:28DE:1142.0005: Steam wireless receiver connected
[  143.769936][    T8] hid-steam 0003:28DE:1142.0006: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  143.811049][    T8] usb 1-1: USB disconnect, device number 4
[  143.853780][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.882765][    T8] hid-steam 0003:28DE:1142.0005: Steam wireless receiver disconnected
[  143.891559][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.899593][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.926939][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.947435][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.973925][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  143.984267][ T7260] fido_id[7260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  144.009124][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.021832][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.038931][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.059364][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.078240][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.105866][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.136922][ T5805] lua 0003:1E7D:2C2E.0007: unknown main item tag 0x0
[  144.161940][ T5805] lua 0003:1E7D:2C2E.0007: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0
[  144.191562][ T5805] usb 2-1: USB disconnect, device number 5
[  144.247072][ T7269] fido_id[7269]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  144.634163][ T7266] loop3: detected capacity change from 0 to 40427
[  144.654281][ T7268] loop2: detected capacity change from 0 to 32768
[  144.656751][ T7266] F2FS-fs (loop3): Invalid SB checksum offset: 0
[  144.683814][ T7268] JBD2: Ignoring recovery information on journal
[  144.742741][ T7266] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  144.802089][ T7266] F2FS-fs (loop3): invalid crc value
[  144.823605][ T7268] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  145.121247][ T7266] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  145.140495][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[  145.149587][ T7266] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  145.170756][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.500'.
[  145.285301][ T7271] loop0: detected capacity change from 0 to 32768
[  145.307341][ T7271] (syz.0.498,7271,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.352917][ T5770] ocfs2: Unmounting device (7,2) on (node local)
[  145.359549][ T7271] (syz.0.498,7271,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  145.416269][ T5772] syz-executor: attempt to access beyond end of device
[  145.416269][ T5772] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  145.460535][ T7271] JBD2: Ignoring recovery information on journal
[  145.471180][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  145.586617][ T7271] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  145.783041][ T7290] loop1: detected capacity change from 0 to 64
[  146.280927][ T7299] tap0: tun_chr_ioctl cmd 1074025677
[  146.286475][ T7299] tap0: linktype set to 825
[  146.309636][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  146.595879][ T7307] loop2: detected capacity change from 0 to 128
[  146.626808][ T7307] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  146.655011][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'.
[  146.685364][ T7309] ipvlan2: entered allmulticast mode
[  146.705068][ T7309] syz_tun: entered allmulticast mode
[  146.808046][ T2985] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[  147.038856][ T7303] loop1: detected capacity change from 0 to 32768
[  147.049688][ T7316] loop0: detected capacity change from 0 to 2048
[  147.075486][ T7303] JBD2: Ignoring recovery information on journal
[  147.141661][ T7318] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.210111][ T7303] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  147.389026][ T7312] loop3: detected capacity change from 0 to 32768
[  147.487472][ T7312] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.513 (7312)
[  147.555009][ T7312] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  147.600157][ T7312] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  147.620076][ T7312] BTRFS info (device loop3): using free space tree
[  147.751013][ T7312] BTRFS info (device loop3): enabling ssd optimizations
[  147.758039][ T7312] BTRFS info (device loop3): auto enabling async discard
[  147.821887][ T5767] ocfs2: Unmounting device (7,1) on (node local)
[  147.955469][  T216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.035756][ T5772] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  148.259136][  T216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.432299][ T7340] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  148.460398][ T5761] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop3 scanned by udevd (5761)
[  148.500869][ T7340] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  148.513734][  T216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.544159][ T7321] loop0: detected capacity change from 0 to 32768
[  148.603749][ T7321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.517 (7321)
[  148.706496][ T7321] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.775700][ T7321] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  148.816940][  T216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.841587][ T7321] BTRFS info (device loop0): force clearing of disk cache
[  148.848901][ T7321] BTRFS info (device loop0): enabling disk space caching
[  148.890912][ T7321] BTRFS info (device loop0): turning on sync discard
[  148.897674][ T7321] BTRFS info (device loop0): disabling tree log
[  148.927196][ T7321] BTRFS info (device loop0): metadata ratio 5
[  148.988520][ T7321] BTRFS info (device loop0): disk space caching is enabled
[  149.115492][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  149.136266][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  149.147764][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  149.164787][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  149.181003][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  149.189743][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  149.221739][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  149.295885][ T7321] BTRFS info (device loop0): enabling ssd optimizations
[  149.347466][ T7321] BTRFS info (device loop0): rebuilding free space tree
[  149.435571][    T8] usb 4-1: Using ep0 maxpacket: 8
[  149.460810][  T216] tipc: Disabling bearer <udp:syz2>
[  149.481185][  T216] tipc: Left network mode
[  149.500245][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  149.541218][ T7321] BTRFS info (device loop0): disabling free space tree
[  149.548212][ T7321] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  149.562477][    T8] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  149.570535][    T8] usb 4-1: Product: syz
[  149.572154][ T7321] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  149.575239][    T8] usb 4-1: Manufacturer: syz
[  149.598680][    T8] usb 4-1: SerialNumber: syz
[  149.637181][    T8] usb 4-1: config 0 descriptor??
[  149.652418][    T8] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  150.111944][ T5771] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  150.272662][    T8] input: gspca_zc3xx as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14
[  150.506118][    T8] usb 4-1: USB disconnect, device number 7
[  151.253276][ T5774] Bluetooth: hci1: command tx timeout
[  151.298980][ T7405] netlink: 'syz.0.532': attribute type 13 has an invalid length.
[  151.340273][ T7405] netlink: 'syz.0.532': attribute type 17 has an invalid length.
[  151.397254][ T7405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  151.580433][ T5774] Bluetooth: hci0: command tx timeout
[  151.618512][ T7416] sctp: [Deprecated]: syz.0.537 (pid 7416) Use of struct sctp_assoc_value in delayed_ack socket option.
[  151.618512][ T7416] Use struct sctp_sack_info instead
[  151.630682][ T5780] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  151.745396][ T7418] loop0: detected capacity change from 0 to 128
[  151.833048][ T5780] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.846538][ T5780] usb 2-1: config 0 has no interfaces?
[  151.854124][ T5780] usb 2-1: New USB device found, idVendor=056a, idProduct=0117, bcdDevice= 0.00
[  151.880708][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.893279][ T5780] usb 2-1: config 0 descriptor??
[  152.008097][ T7352] chnl_net:caif_netlink_parms(): no params data found
[  152.152601][ T5780] usb 2-1: USB disconnect, device number 6
[  152.625120][ T7352] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.680915][ T7352] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.688214][ T7352] bridge_slave_0: entered allmulticast mode
[  152.751574][ T7352] bridge_slave_0: entered promiscuous mode
[  152.856351][ T7352] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.878567][ T7352] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.901202][ T7352] bridge_slave_1: entered allmulticast mode
[  152.909269][ T7352] bridge_slave_1: entered promiscuous mode
[  153.035636][ T7352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.070752][   T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  153.135373][ T7352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.136801][ T7444] loop0: detected capacity change from 0 to 32768
[  153.166386][ T7444] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  153.283159][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.318068][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.330780][ T5768] Bluetooth: hci1: command tx timeout
[  153.355103][   T27] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  153.380767][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.394902][  T216] hsr_slave_0: left promiscuous mode
[  153.396036][   T27] usb 2-1: config 0 descriptor??
[  153.409460][ T5761] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 9
[  153.420962][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  153.433930][  T216] hsr_slave_1: left promiscuous mode
[  153.441337][  T216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.461328][  T216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.479434][  T216] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.487548][  T216] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.499879][  T216] bridge_slave_1: left allmulticast mode
[  153.506253][  T216] bridge_slave_1: left promiscuous mode
[  153.515579][  T216] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.539119][  T216] bridge_slave_0: left allmulticast mode
[  153.545645][  T216] bridge_slave_0: left promiscuous mode
[  153.552195][  T216] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.595594][  T216] veth1_macvtap: left promiscuous mode
[  153.602444][  T216] veth0_macvtap: left promiscuous mode
[  153.608395][  T216] veth1_vlan: left promiscuous mode
[  153.615842][  T216] veth0_vlan: left promiscuous mode
[  153.645438][    T8] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  153.650995][ T5774] Bluetooth: hci0: command tx timeout
[  153.666044][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.683780][    T8] usb 4-1: Product: syz
[  153.688454][    T8] usb 4-1: Manufacturer: syz
[  153.694596][    T8] usb 4-1: SerialNumber: syz
[  153.710894][    T8] usb 4-1: config 0 descriptor??
[  153.734448][    T8] ch341 4-1:0.0: ch341-uart converter detected
[  153.846816][   T27] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  153.926198][   T27] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected
[  153.958292][   T27] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  154.139262][ T5805] usb 2-1: USB disconnect, device number 7
[  154.179818][ T5805] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected
[  154.562883][    T8] usb 4-1: failed to send control message: -71
[  154.576686][    T8] ch341-uart: probe of ttyUSB0 failed with error -71
[  154.645432][    T8] usb 4-1: USB disconnect, device number 8
[  154.670341][    T8] ch341 4-1:0.0: device disconnected
[  154.807981][ T7459] loop1: detected capacity change from 0 to 128
[  154.823744][  T216] team0 (unregistering): Port device team_slave_1 removed
[  154.965455][  T216] team0 (unregistering): Port device team_slave_0 removed
[  155.029592][  T216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.065489][ T7461] kvm: kvm [7460]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000008f)
[  155.076660][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  155.119861][  T216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.270716][    T9] usb 1-1: Using ep0 maxpacket: 32
[  155.283675][    T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.321018][    T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  155.355861][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  155.375036][    T9] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00
[  155.402501][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.410873][ T5768] Bluetooth: hci1: command tx timeout
[  155.413871][    T9] usb 1-1: config 0 descriptor??
[  155.590906][ T5757] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  155.808309][ T5757] usb 2-1: Using ep0 maxpacket: 32
[  155.815371][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.840725][ T5757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.851635][ T5757] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  155.861228][ T7465] loop3: detected capacity change from 0 to 32768
[  155.898171][ T5757] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.918196][ T5757] usb 2-1: config 0 descriptor??
[  155.927530][ T5757] hub 2-1:0.0: USB hub found
[  155.929759][ T7465] JBD2: Ignoring recovery information on journal
[  155.991229][  T216] bond0 (unregistering): Released all slaves
[  156.078874][    T9] usb 1-1: language id specifier not provided by device, defaulting to English
[  156.104277][ T7465] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  156.144460][ T5757] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  156.187292][ T7352] team0: Port device team_slave_0 added
[  156.223836][ T7352] team0: Port device team_slave_1 added
[  156.267095][    T9] uclogic 0003:5543:3031.000A: failed retrieving Huion firmware version: -71
[  156.297740][    T9] uclogic 0003:5543:3031.000A: failed probing parameters: -71
[  156.312012][    T9] uclogic: probe of 0003:5543:3031.000A failed with error -71
[  156.320334][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.350745][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.391267][    T9] usb 1-1: USB disconnect, device number 5
[  156.439022][ T7352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.490126][ T7352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.501272][ T7352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.578756][ T7352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.604577][ T5757] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0
[  156.643980][ T5772] ocfs2: Unmounting device (7,3) on (node local)
[  156.809026][ T7352] hsr_slave_0: entered promiscuous mode
[  156.842836][ T7352] hsr_slave_1: entered promiscuous mode
[  156.862717][ T7352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.881563][ T5824] usb 2-1: USB disconnect, device number 8
[  156.890793][ T7352] Cannot create hsr debugfs directory
[  157.073970][  T216] IPVS: stop unused estimator thread 0...
[  157.122160][ T7481] loop3: detected capacity change from 0 to 512
[  157.173808][ T7481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  157.235723][ T7488] loop0: detected capacity change from 0 to 256
[  157.247851][ T7481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.280770][ T7481] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  157.424223][ T7488] FAT-fs (loop0): Directory bread(block 64) failed
[  157.455069][ T7488] FAT-fs (loop0): Directory bread(block 65) failed
[  157.482783][ T7488] FAT-fs (loop0): Directory bread(block 66) failed
[  157.489569][ T7488] FAT-fs (loop0): Directory bread(block 67) failed
[  157.496719][ T5768] Bluetooth: hci1: command tx timeout
[  157.515881][ T7488] FAT-fs (loop0): Directory bread(block 68) failed
[  157.543819][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.555554][ T7488] FAT-fs (loop0): Directory bread(block 69) failed
[  157.575428][ T7488] FAT-fs (loop0): Directory bread(block 70) failed
[  157.591972][ T7488] FAT-fs (loop0): Directory bread(block 71) failed
[  157.598671][ T7488] FAT-fs (loop0): Directory bread(block 72) failed
[  157.630877][ T7488] FAT-fs (loop0): Directory bread(block 73) failed
[  157.762667][ T5805] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  157.856065][ T7488] syz.0.553: attempt to access beyond end of device
[  157.856065][ T7488] loop0: rw=1, sector=1224, nr_sectors = 4 limit=256
[  157.904467][ T7498] loop3: detected capacity change from 0 to 128
[  157.970934][ T5805] usb 2-1: Using ep0 maxpacket: 8
[  157.981405][ T5805] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.021537][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.051662][ T5805] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.080518][ T5805] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.114447][ T5805] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  158.135678][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.268006][ T7501] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.293965][ T7502] netlink: 'syz.0.558': attribute type 13 has an invalid length.
[  158.340633][ T7502] netlink: 'syz.0.558': attribute type 17 has an invalid length.
[  158.362568][ T5805] usb 2-1: GET_CAPABILITIES returned 0
[  158.368827][ T5805] usbtmc 2-1:16.0: can't read capabilities
[  158.514655][ T7502] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  158.598517][ T5805] usb 2-1: USB disconnect, device number 9
[  158.601341][ T7352] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  158.632244][ T7352] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  158.678827][ T7352] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  158.728075][ T7352] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  158.881502][ T7352] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.927549][ T7352] 8021q: adding VLAN 0 to HW filter on device team0
[  158.956451][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.965148][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.989094][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.996411][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.365928][ T7514] loop3: detected capacity change from 0 to 32768
[  159.453672][ T7514] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  159.538650][ T7514] XFS (loop3): Ending clean mount
[  159.569516][ T7514] XFS (loop3): Quotacheck needed: Please wait.
[  159.643166][ T7352] 8021q: adding VLAN 0 to HW filter on device batadv0
[  159.764546][ T7514] XFS (loop3): Quotacheck: Done.
[  159.825401][ T7352] veth0_vlan: entered promiscuous mode
[  159.864912][ T7352] veth1_vlan: entered promiscuous mode
[  160.102827][ T7352] veth0_macvtap: entered promiscuous mode
[  160.117912][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  160.144537][ T7352] veth1_macvtap: entered promiscuous mode
[  160.167409][ T7556] netlink: 'syz.0.567': attribute type 10 has an invalid length.
[  160.177127][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'.
[  160.246317][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.307477][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.368544][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.402640][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.430655][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  160.453386][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.518529][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_0
[  160.540281][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.557892][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.568352][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.641776][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.671698][ T7352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  160.675293][ T7564] loop3: detected capacity change from 0 to 64
[  160.694700][ T7352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  160.762701][ T7352] batman_adv: batadv0: Interface activated: batadv_slave_1
[  160.799034][ T7352] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  160.834065][ T7352] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  160.853159][ T7352] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  160.879191][ T7352] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  161.199445][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.208388][ T7574] sctp: [Deprecated]: syz.3.571 (pid 7574) Use of int in maxseg socket option.
[  161.208388][ T7574] Use struct sctp_assoc_value instead
[  161.235878][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.314681][ T7581] loop0: detected capacity change from 0 to 16
[  161.333120][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  161.357434][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  161.403189][ T7581] erofs: (device loop0): mounted with root inode @ nid 36.
[  162.232133][ T7610] erspan0: entered promiscuous mode
[  162.271086][ T7613] loop3: detected capacity change from 0 to 512
[  162.320904][ T7613] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  162.379055][ T7613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  162.487247][ T7613] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.584: bad orphan inode 131083
[  162.556856][ T7613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.633328][ T7596] loop0: detected capacity change from 0 to 40427
[  162.674236][ T7596] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  162.701370][ T7596] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  162.704363][ T7613] EXT4-fs error (device loop3): ext4_empty_dir:3177: inode #2: block 13: comm syz.3.584: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  162.748187][ T7596] F2FS-fs (loop0): invalid crc value
[  162.777007][ T7596] F2FS-fs (loop0): Found nat_bits in checkpoint
[  162.790708][ T5826] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  162.867470][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.980022][ T7596] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  162.996722][ T5826] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.016884][ T7596] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  163.036868][ T5826] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  163.083260][ T5826] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  163.101309][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  163.109455][ T5826] usb 2-1: SerialNumber: syz
[  163.235752][ T7596] syz.0.577: attempt to access beyond end of device
[  163.235752][ T7596] loop0: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  163.307835][ T7643] loop2: detected capacity change from 0 to 512
[  163.327980][ T5771] syz-executor: attempt to access beyond end of device
[  163.327980][ T5771] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  163.373642][ T5826] usb 2-1: 0:2 : does not exist
[  163.382914][ T5771] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  163.436583][ T5826] usb 2-1: USB disconnect, device number 10
[  163.520217][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  164.065800][ T7655] mkiss: ax0: crc mode is auto.
[  164.308364][ T7651] loop2: detected capacity change from 0 to 32768
[  164.358798][ T7651] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.513616][ T7674] netlink: 'syz.3.601': attribute type 1 has an invalid length.
[  164.547264][ T7651] XFS (loop2): Ending clean mount
[  164.627660][ T7678] loop3: detected capacity change from 0 to 1024
[  164.776312][ T7352] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.261834][ T7688] loop3: detected capacity change from 0 to 128
[  165.303157][ T7688] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  165.335996][ T7688] hpfs: filesystem error: improperly stopped
[  165.369815][ T7688] hpfs: You really don't want any checks? You are crazy...
[  165.385240][ T7688] hpfs: hpfs_map_sector(): read error
[  165.398648][ T7688] hpfs: code page support is disabled
[  165.414746][ T7688] hpfs: hpfs_map_4sectors(): unaligned read
[  165.433658][ T7688] hpfs: hpfs_map_4sectors(): unaligned read
[  165.439631][ T7688] hpfs: filesystem error: unable to find root dir
[  165.600906][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  165.665445][ T7686] loop0: detected capacity change from 0 to 32768
[  165.753338][ T7686] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.821930][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.870988][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  165.925807][ T7686] XFS (loop0): Ending clean mount
[  165.927957][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  165.956860][    T8] usb 3-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  165.985510][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.019003][    T8] usb 3-1: config 0 descriptor??
[  166.132968][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.449952][    T8] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x2
[  166.489228][    T8] hid-rmi 0003:0461:4E72.000C: unknown main item tag 0x0
[  166.524730][    T8] hid-rmi 0003:0461:4E72.000C: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.2-1/input0
[  166.655737][   T27] usb 3-1: USB disconnect, device number 6
[  166.673273][ T7710] fido_id[7710]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0461:4E72.000C/report_descriptor': No such device
[  166.701408][ T7712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.614'.
[  166.856391][ T7707] loop1: detected capacity change from 0 to 32768
[  166.879935][ T7707] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.944578][ T7707] XFS (loop1): Ending clean mount
[  167.068822][ T7707] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  167.418889][ T5767] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  167.989387][ T7731] loop3: detected capacity change from 0 to 32768
[  168.024411][ T7731] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.075384][ T7729] loop2: detected capacity change from 0 to 40427
[  168.120882][ T7731] XFS (loop3): Ending clean mount
[  168.125580][ T7729] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  168.154367][ T7729] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  168.177591][ T7731] XFS (loop3): Quotacheck needed: Please wait.
[  168.195139][ T7729] F2FS-fs (loop2): invalid crc value
[  168.228725][ T7729] F2FS-fs (loop2): Found nat_bits in checkpoint
[  168.261914][ T7731] XFS (loop3): Quotacheck: Done.
[  168.279798][ T7750] sctp: [Deprecated]: syz.0.624 (pid 7750) Use of int in maxseg socket option.
[  168.279798][ T7750] Use struct sctp_assoc_value instead
[  168.331662][ T7731] XFS (loop3): User initiated shutdown received.
[  168.342486][ T7731] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  168.363349][ T7731] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  168.436499][ T7729] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  168.462139][ T7729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  168.473401][ T7757] macvtap2: entered allmulticast mode
[  168.478893][ T7757] veth0_macvtap: entered allmulticast mode
[  168.485618][ T5772] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.949380][ T7763] loop1: detected capacity change from 0 to 256
[  169.549812][ T7773] loop1: detected capacity change from 0 to 64
[  169.703955][ T7775] relay: one or more items not logged [item size (56) > sub-buffer size (3)]
[  169.728770][ T7773] hfs: inconsistency in B*Tree (1,0,1,0,3)
[  169.798748][ T7762] loop0: detected capacity change from 0 to 32768
[  170.057826][ T7781] bond1: entered promiscuous mode
[  170.116984][ T7784] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  170.131338][ T5757] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  170.341645][ T5757] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  170.356410][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.366098][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.388472][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.396609][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.405904][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.417124][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.426592][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.435771][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.447663][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.456283][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.465848][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.478175][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.487280][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.496680][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.508222][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.525264][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.539984][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.558844][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.567242][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.576865][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.588247][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.595002][   T27] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  170.610211][ T5757] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  170.619970][ T5757] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  170.633747][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0
[  170.643643][ T5757] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  170.653835][ T5757] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  170.662261][ T5757] usb 3-1: Product: syz
[  170.667067][ T5757] usb 3-1: Manufacturer: syz
[  170.676025][ T5757] usb 3-1: SerialNumber: syz
[  170.691920][ T5757] usb 3-1: config 0 descriptor??
[  170.710121][ T5757] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  170.793886][   T27] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  170.803540][   T27] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253
[  170.816074][   T27] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  170.826736][   T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.836551][   T27] usb 4-1: Product: syz
[  170.844196][   T27] usb 4-1: Manufacturer: syz
[  170.869466][   T27] usb 4-1: SerialNumber: syz
[  170.892162][   T27] usb 4-1: config 0 descriptor??
[  170.915585][   T27] gspca_main: sunplus-2.14.0 probing 055f:c630
[  170.985449][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.640'.
[  170.989354][ T5826] usb 3-1: USB disconnect, device number 7
[  171.008357][ T5826] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  171.069867][ T7796] loop1: detected capacity change from 0 to 32768
[  171.391366][ T7808] loop1: detected capacity change from 0 to 128
[  171.463262][ T7808] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.481988][ T7808] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  171.579398][ T5767] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.737931][   T27] gspca_sunplus: reg_r err -71
[  171.742965][   T27] sunplus: probe of 4-1:0.0 failed with error -71
[  171.786657][   T27] usb 4-1: USB disconnect, device number 9
[  171.923799][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.650'.
[  172.224169][ T7814] loop1: detected capacity change from 0 to 32768
[  172.394074][ T7828] loop0: detected capacity change from 0 to 8
[  172.522593][ T7830] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  172.528230][ T7828] SQUASHFS error: Unable to read directory block [629:fe]
[  172.556338][ T7832] netlink: 284 bytes leftover after parsing attributes in process `syz.3.656'.
[  172.575200][ T7830] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  172.601211][ T7830] overlayfs: failed to set uuid (13/file0, err=-13); falling back to uuid=null.
[  172.756645][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'.
[  172.986140][ T7847] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  173.098575][ T7851] IPv6: NLM_F_CREATE should be specified when creating new route
[  173.107066][ T7851] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  173.220883][ T5826] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  173.253679][ T7855] loop1: detected capacity change from 0 to 256
[  173.281585][ T7855] exfat: Deprecated parameter 'utf8'
[  173.287953][ T7855] exfat: Deprecated parameter 'utf8'
[  173.301323][ T7855] exfat: Deprecated parameter 'namecase'
[  173.384575][ T7855] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  173.427097][ T5826] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  173.446094][ T5826] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  173.474361][ T5826] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  173.499316][ T5826] usb 4-1: config 220 has no interface number 2
[  173.509376][ T5826] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  173.554616][ T5826] usb 4-1: config 220 interface 0 has no altsetting 0
[  173.576767][ T5826] usb 4-1: config 220 interface 76 has no altsetting 0
[  173.594640][ T5826] usb 4-1: config 220 interface 1 has no altsetting 0
[  173.620086][ T5826] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  173.640044][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.652263][ T5826] usb 4-1: Product: syz
[  173.680741][ T5826] usb 4-1: Manufacturer: syz
[  173.685416][ T5826] usb 4-1: SerialNumber: syz
[  173.778494][ T7849] loop0: detected capacity change from 0 to 32768
[  173.806337][ T7849] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  173.911569][ T7849] XFS (loop0): Ending clean mount
[  173.973553][ T5826] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  173.980150][ T5826] usb 4-1: No valid video chain found.
[  173.986467][ T5826] usb 4-1: selecting invalid altsetting 0
[  174.013920][ T5826] usb 4-1: selecting invalid altsetting 0
[  174.029270][ T5826] usbtest: probe of 4-1:220.1 failed with error -22
[  174.045105][ T5826] usb 4-1: USB disconnect, device number 10
[  174.095141][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  174.822364][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  174.856656][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.683'.
[  174.859107][ T7889] sp0: Synchronizing with TNC
[  174.892204][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'.
[  175.144871][ T7900] loop0: detected capacity change from 0 to 256
[  175.226825][ T7900] FAT-fs (loop0): Directory bread(block 64) failed
[  175.250809][ T7900] FAT-fs (loop0): Directory bread(block 65) failed
[  175.257527][ T7900] FAT-fs (loop0): Directory bread(block 66) failed
[  175.271162][ T7900] FAT-fs (loop0): Directory bread(block 67) failed
[  175.287978][ T7900] FAT-fs (loop0): Directory bread(block 68) failed
[  175.312892][ T7900] FAT-fs (loop0): Directory bread(block 69) failed
[  175.319597][ T7900] FAT-fs (loop0): Directory bread(block 70) failed
[  175.356358][ T7900] FAT-fs (loop0): Directory bread(block 71) failed
[  175.366561][ T7900] FAT-fs (loop0): Directory bread(block 72) failed
[  175.390281][ T7900] FAT-fs (loop0): Directory bread(block 73) failed
[  175.451448][ T7896] loop2: detected capacity change from 0 to 40427
[  175.489818][ T7896] F2FS-fs (loop2): invalid crc value
[  175.523092][ T7896] F2FS-fs (loop2): Found nat_bits in checkpoint
[  175.614540][ T7896] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  175.791062][ T7896] syz.2.684: attempt to access beyond end of device
[  175.791062][ T7896] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  175.844234][ T7896] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  175.884249][ T7896] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  176.001789][ T7911] loop3: detected capacity change from 0 to 2048
[  176.071946][ T7911] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.434347][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.649117][ T7923] pim6reg1: tun_chr_ioctl cmd 1074025680
[  177.332653][ T7946] loop3: detected capacity change from 0 to 4096
[  177.447323][ T7953] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  177.870966][ T5780] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  178.071669][ T5780] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  178.087034][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.105831][ T5780] usb 3-1: config 0 descriptor??
[  178.142322][ T5780] cp210x 3-1:0.0: cp210x converter detected
[  178.259103][ T7983] loop0: detected capacity change from 0 to 256
[  178.333560][ T7983] FAT-fs (loop0): Directory bread(block 64) failed
[  178.351189][ T7983] FAT-fs (loop0): Directory bread(block 65) failed
[  178.357922][ T7983] FAT-fs (loop0): Directory bread(block 66) failed
[  178.380737][ T7983] FAT-fs (loop0): Directory bread(block 67) failed
[  178.397809][ T7983] FAT-fs (loop0): Directory bread(block 68) failed
[  178.414650][ T7983] FAT-fs (loop0): Directory bread(block 69) failed
[  178.421867][ T7983] FAT-fs (loop0): Directory bread(block 70) failed
[  178.437474][ T7983] FAT-fs (loop0): Directory bread(block 71) failed
[  178.444888][ T7983] FAT-fs (loop0): Directory bread(block 72) failed
[  178.455342][ T7983] FAT-fs (loop0): Directory bread(block 73) failed
[  178.470816][    T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  178.574154][ T5780] usb 3-1: cp210x converter now attached to ttyUSB0
[  178.615597][ T7983] syz.0.717: attempt to access beyond end of device
[  178.615597][ T7983] loop0: rw=1, sector=1224, nr_sectors = 64 limit=256
[  178.635087][ T7983] syz.0.717: attempt to access beyond end of device
[  178.635087][ T7983] loop0: rw=1, sector=1320, nr_sectors = 36 limit=256
[  178.685418][    T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  178.700762][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.709541][    T9] usb 2-1: Product: syz
[  178.720141][    T9] usb 2-1: Manufacturer: syz
[  178.727081][    T9] usb 2-1: SerialNumber: syz
[  178.746630][    T9] usb 2-1: config 0 descriptor??
[  178.750739][ T5780] usb 3-1: USB disconnect, device number 8
[  178.809307][ T5780] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  178.848402][ T5780] cp210x 3-1:0.0: device disconnected
[  179.005694][ T7997] loop0: detected capacity change from 0 to 256
[  179.054602][   T27] usb 2-1: USB disconnect, device number 11
[  179.059954][ T7997] exfat: Deprecated parameter 'utf8'
[  179.107035][ T7997] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  179.165550][ T7997] netlink: 116 bytes leftover after parsing attributes in process `syz.0.724'.
[  179.312269][ T8003] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  179.443528][ T8005] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  179.453365][ T8005] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  179.462275][ T8005] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  179.471065][ T8005] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  179.696507][ T8012] loop3: detected capacity change from 0 to 256
[  179.757934][ T8012] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  180.064729][ T8020] loop3: detected capacity change from 0 to 1024
[  180.155335][ T8020] hfsplus: invalid extended attribute record
[  180.199599][ T8020] hfsplus: catalog searching failed
[  180.310293][ T8024] loop0: detected capacity change from 0 to 256
[  180.323765][   T49] hfsplus: b-tree write err: -5, ino 8
[  180.384092][ T8024] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  180.596106][ T8013] loop1: detected capacity change from 0 to 32768
[  180.671136][ T8013] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  180.813244][ T8013] XFS (loop1): Ending clean mount
[  180.832370][ T8013] XFS (loop1): Quotacheck needed: Please wait.
[  180.970411][ T8013] XFS (loop1): Quotacheck: Done.
[  181.117882][ T8048] loop0: detected capacity change from 0 to 512
[  181.138941][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.191348][ T5757] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  181.198336][ T8046] loop2: detected capacity change from 0 to 4096
[  181.199884][ T8048] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  181.222775][ T8046] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512).
[  181.265214][ T8048] EXT4-fs (loop0): orphan cleanup on readonly fs
[  181.319439][ T8046] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  181.421145][ T8048] Quota error (device loop0): v2_read_file_info: Can't read info structure
[  181.434656][ T8048] EXT4-fs warning (device loop0): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix.
[  181.481019][ T5757] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  181.489632][ T5757] usb 4-1: config 150 has no interface number 0
[  181.500801][ T8048] EXT4-fs (loop0): Cannot turn on quotas: error -5
[  181.534407][ T5757] usb 4-1: config 150 interface 204 has no altsetting 0
[  181.546741][ T5757] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  181.562180][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.569902][ T8048] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.744: bg 0: block 64: padding at end of block bitmap is not set
[  181.570214][ T5757] usb 4-1: Product: syz
[  181.593661][ T8048] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  181.642966][ T5757] usb 4-1: Manufacturer: syz
[  181.646266][ T8048] EXT4-fs (loop0): 1 truncate cleaned up
[  181.664870][ T8048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  181.670285][ T5757] usb 4-1: SerialNumber: syz
[  181.769224][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.959659][ T5757] xr_serial 4-1:150.204: xr_serial converter detected
[  182.270521][ T8066] loop0: detected capacity change from 0 to 128
[  182.426573][ T8053] loop2: detected capacity change from 0 to 32768
[  182.454210][ T8053] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.746 (8053)
[  182.544427][ T8053] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.566696][ T5757] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  182.582460][ T5757] xr_serial: probe of ttyUSB0 failed with error -71
[  182.592399][ T8053] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  182.632089][ T8053] BTRFS info (device loop2): setting nodatasum
[  182.664616][ T5757] usb 4-1: USB disconnect, device number 11
[  182.681532][ T8053] BTRFS info (device loop2): force zlib compression, level 3
[  182.688992][ T8053] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  182.697182][ T5757] xr_serial 4-1:150.204: device disconnected
[  182.745366][ T8053] BTRFS info (device loop2): use lzo compression, level 0
[  182.787293][ T8053] BTRFS info (device loop2): turning on flush-on-commit
[  182.796163][ T8053] BTRFS info (device loop2): enabling auto defrag
[  182.859281][ T8053] BTRFS info (device loop2): max_inline at 4096
[  182.875637][ T8053] BTRFS info (device loop2): using free space tree
[  182.976835][ T8053] BTRFS info (device loop2): enabling ssd optimizations
[  183.041302][   T28] audit: type=1800 audit(1776751525.195:8): pid=8053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.746" name="file1" dev="loop2" ino=260 res=0 errno=0
[  183.268465][ T7352] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.990314][ T8082] loop1: detected capacity change from 0 to 32768
[  184.049453][ T8082] 
[  184.049453][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.049453][ T8082] 
[  184.165457][ T8082] 
[  184.165457][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.165457][ T8082] 
[  184.190838][ T8082] 
[  184.190838][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.190838][ T8082] 
[  184.216464][ T8082] 
[  184.216464][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.216464][ T8082] 
[  184.227825][ T8082] 
[  184.227825][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.227825][ T8082] 
[  184.265675][ T8082] 
[  184.265675][ T8082]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.265675][ T8082] 
[  184.300244][  T113] 
[  184.300244][  T113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.300244][  T113] 
[  184.426034][ T5767] 
[  184.426034][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.426034][ T5767] 
[  184.440951][ T5767] 
[  184.440951][ T5767]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  184.440951][ T5767] 
[  184.623229][ T8126] netlink: 48 bytes leftover after parsing attributes in process `syz.1.769'.
[  184.651827][ T8126] netlink: 32 bytes leftover after parsing attributes in process `syz.1.769'.
[  184.692121][ T8116] loop3: detected capacity change from 0 to 32768
[  184.730705][ T8116] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.764 (8116)
[  184.813321][ T8116] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.870786][ T8116] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  184.879499][ T8116] BTRFS info (device loop3): using free space tree
[  185.059880][ T8116] BTRFS info (device loop3): enabling ssd optimizations
[  185.090709][ T8116] BTRFS info (device loop3): auto enabling async discard
[  185.262181][ T5772] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.296194][ T8124] loop0: detected capacity change from 0 to 32768
[  185.365800][ T8124] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  185.635415][ T8124] XFS (loop0): Ending clean mount
[  185.693213][ T8124] XFS (loop0): Quotacheck needed: Please wait.
[  185.963203][ T8124] XFS (loop0): Quotacheck: Done.
[  186.285870][ T5771] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  186.319870][ T8169] sp0: Synchronizing with TNC
[  186.599832][ T8163] loop1: detected capacity change from 0 to 32768
[  186.627298][ T8163] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.776 (8163)
[  186.676913][ T8163] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.704867][ T8163] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  186.734195][ T8163] BTRFS info (device loop1): using free space tree
[  186.808929][ T8163] BTRFS info (device loop1): enabling ssd optimizations
[  186.830619][ T8163] BTRFS info (device loop1): auto enabling async discard
[  186.870663][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  187.047621][ T5767] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  187.092452][    T9] usb 3-1: Using ep0 maxpacket: 32
[  187.119801][    T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  187.141298][    T9] usb 3-1: config 0 has no interface number 0
[  187.155639][    T9] usb 3-1: config 0 interface 184 has no altsetting 0
[  187.164390][ T8211] netlink: 'syz.3.785': attribute type 14 has an invalid length.
[  187.192921][    T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  187.225047][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.250809][    T9] usb 3-1: Product: syz
[  187.255042][    T9] usb 3-1: Manufacturer: syz
[  187.266397][    T9] usb 3-1: SerialNumber: syz
[  187.301751][    T9] usb 3-1: config 0 descriptor??
[  187.322931][    T9] smsc75xx v1.0.0
[  187.545763][ T8217] loop3: detected capacity change from 0 to 128
[  187.648629][   T28] audit: type=1800 audit(1776751529.795:9): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.787" name="file2" dev="loop3" ino=1048646 res=0 errno=0
[  187.737391][ T8217] FAT-fs (loop3): error, clusters badly computed (4 != 3)
[  187.799057][ T8217] FAT-fs (loop3): Filesystem has been set read-only
[  187.855768][ T8217] FAT-fs (loop3): error, clusters badly computed (5 != 4)
[  187.876710][ T8217] FAT-fs (loop3): error, clusters badly computed (6 != 5)
[  188.206869][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  188.241095][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  188.252725][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  188.263874][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  188.274047][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  188.305675][    T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  188.341606][    T9] smsc75xx: probe of 3-1:0.184 failed with error -71
[  188.375840][    T9] usb 3-1: USB disconnect, device number 9
[  189.013975][ T8255] loop0: detected capacity change from 0 to 256
[  189.049532][ T8255] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  189.378650][ T8231] loop3: detected capacity change from 0 to 40427
[  189.411242][ T8231] F2FS-fs (loop3): heap/no_heap options were deprecated
[  189.423334][ T8231] F2FS-fs (loop3): heap/no_heap options were deprecated
[  189.456814][ T8231] F2FS-fs (loop3): invalid crc value
[  189.481601][ T8231] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.600802][ T8231] F2FS-fs (loop3): Start checkpoint disabled!
[  189.623634][ T8231] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  189.903599][ T1083] kworker/u4:7: attempt to access beyond end of device
[  189.903599][ T1083] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  189.955043][ T1083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  189.958353][ T8270] loop2: detected capacity change from 0 to 4096
[  189.966416][ T1083] kworker/u4:7: attempt to access beyond end of device
[  189.966416][ T1083] loop3: rw=2049, sector=40976, nr_sectors = 8 limit=40427
[  189.994527][ T1083] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  190.016588][ T8270] EXT4-fs: inline encryption not supported
[  190.047058][ T8270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  190.061461][ T8270] EXT4-fs (loop2): Test dummy encryption mode enabled
[  190.094414][ T8270] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  190.121092][ T8270] System zones: 0-5
[  190.144649][ T8270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.425234][ T8279] loop1: detected capacity change from 0 to 512
[  190.531218][ T8270] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  190.765102][ T7352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.774891][ T8289] loop3: detected capacity change from 0 to 512
[  190.787603][ T8289] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  190.813453][ T8291] loop0: detected capacity change from 0 to 512
[  190.834178][ T8289] EXT4-fs (loop3): 1 truncate cleaned up
[  190.843871][ T8289] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  190.957018][ T8291] EXT4-fs (loop0): 1 truncate cleaned up
[  190.980280][ T8291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.098089][ T5772] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  191.163382][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.364995][ T5772] infiniband syz1: set down
[  191.414590][    T8] syz1: rxe_query_port: returned err = -19
[  191.456438][    T8] infiniband syz1: ib_query_port failed (-19)
[  191.464770][ T8287] loop1: detected capacity change from 0 to 32768
[  191.511273][ T1083] smc: removing ib device syz1
[  191.548661][ T8287] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  191.552896][ T8299] netlink: 56 bytes leftover after parsing attributes in process `syz.2.816'.
[  191.770801][ T8287] XFS (loop1): Ending clean mount
[  191.853956][ T8287] XFS (loop1): Quotacheck needed: Please wait.
[  191.965059][ T8315] loop0: detected capacity change from 0 to 256
[  191.985330][ T8287] XFS (loop1): Quotacheck: Done.
[  192.140896][ T8315] FAT-fs (loop0): Directory bread(block 64) failed
[  192.147500][ T8315] FAT-fs (loop0): Directory bread(block 65) failed
[  192.163890][ T5767] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  192.190824][ T8315] FAT-fs (loop0): Directory bread(block 66) failed
[  192.230054][ T8315] FAT-fs (loop0): Directory bread(block 67) failed
[  192.250814][ T8315] FAT-fs (loop0): Directory bread(block 68) failed
[  192.257866][ T8315] FAT-fs (loop0): Directory bread(block 69) failed
[  192.268060][ T8315] FAT-fs (loop0): Directory bread(block 70) failed
[  192.276511][    T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  192.289455][ T8315] FAT-fs (loop0): Directory bread(block 71) failed
[  192.298876][ T8315] FAT-fs (loop0): Directory bread(block 72) failed
[  192.313541][ T8315] FAT-fs (loop0): Directory bread(block 73) failed
[  192.470674][    T9] usb 3-1: Using ep0 maxpacket: 16
[  192.478784][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  192.507203][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  192.529533][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  192.557280][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.581871][    T9] usb 3-1: Product: syz
[  192.594282][    T9] usb 3-1: Manufacturer: syz
[  192.607188][    T9] usb 3-1: SerialNumber: syz
[  192.787746][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.066819][    T9] usb 3-1: 0:2 : does not exist
[  193.147619][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'.
[  193.167852][ T8323] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  193.179099][ T8323] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  193.500003][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  193.557635][ T5774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  193.577853][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  193.585710][    T9] usb 3-1: USB disconnect, device number 10
[  193.592670][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  193.605540][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  193.617798][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  193.625503][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  193.685737][ T5761] udevd[5761]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  193.917167][ T8326] chnl_net:caif_netlink_parms(): no params data found
[  194.033865][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.041947][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.049213][ T8326] bridge_slave_0: entered allmulticast mode
[  194.081175][ T8326] bridge_slave_0: entered promiscuous mode
[  194.103538][ T8338] netlink: 'syz.1.829': attribute type 2 has an invalid length.
[  194.129706][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.162702][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.170013][ T8326] bridge_slave_1: entered allmulticast mode
[  194.191063][ T8343] netlink: 'syz.2.831': attribute type 3 has an invalid length.
[  194.193272][ T8326] bridge_slave_1: entered promiscuous mode
[  194.294536][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  194.324299][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.416636][ T8326] team0: Port device team_slave_0 added
[  194.453605][ T8326] team0: Port device team_slave_1 added
[  194.547659][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.562572][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.646547][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.672995][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.687861][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.747219][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.877316][ T8326] hsr_slave_0: entered promiscuous mode
[  194.925858][ T8326] hsr_slave_1: entered promiscuous mode
[  194.947080][ T8326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.964259][ T8326] Cannot create hsr debugfs directory
[  195.094216][ T8361] loop2: detected capacity change from 0 to 512
[  195.113604][ T8361] EXT4-fs: Ignoring removed nomblk_io_submit option
[  195.120314][ T8361] EXT4-fs: Ignoring removed mblk_io_submit option
[  195.188441][ T8361] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  195.200705][ T8361] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  195.244259][ T8361] EXT4-fs (loop2): 1 truncate cleaned up
[  195.282468][ T8361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  195.393226][ T8361] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #2: block 4: comm syz.2.839: lblock 0 mapped to illegal pblock 4 (length 1)
[  195.466916][ T8361] EXT4-fs (loop2): Remounting filesystem read-only
[  195.578037][ T8326] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  195.593927][ T8326] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  195.617213][ T8326] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  195.632654][ T7352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.645665][ T8326] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  195.730848][ T5774] Bluetooth: hci2: command tx timeout
[  195.826707][ T8326] 8021q: adding VLAN 0 to HW filter on device bond0
[  195.935117][ T8326] 8021q: adding VLAN 0 to HW filter on device team0
[  195.969681][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'.
[  195.986774][ T8375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.844'.
[  195.999448][ T8375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'.
[  196.019192][ T8375] netlink: 32 bytes leftover after parsing attributes in process `syz.0.844'.
[  196.048521][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.055767][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.093435][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.100687][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.104370][ T8380] loop1: detected capacity change from 0 to 128
[  196.149540][ T8380] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  196.194980][ T8380] hpfs: filesystem error: improperly stopped
[  196.198414][ T8326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  196.217513][ T8380] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  196.242957][ T8326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  196.260078][ T8380] hpfs: You really don't want any checks? You are crazy...
[  196.286261][ T8380] hpfs: hpfs_map_sector(): read error
[  196.303829][ T8380] hpfs: code page support is disabled
[  196.329161][ T8380] hpfs: hpfs_map_4sectors(): unaligned read
[  196.356647][ T8380] hpfs: hpfs_map_4sectors(): unaligned read
[  196.372813][ T8380] hpfs: filesystem error: unable to find root dir
[  196.548265][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  196.555775][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  196.691783][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  196.775165][ T8397] openvswitch: netlink: Actions may not be safe on all matching packets
[  197.389901][ T8326] veth0_vlan: entered promiscuous mode
[  197.418093][ T8326] veth1_vlan: entered promiscuous mode
[  197.518971][ T8326] veth0_macvtap: entered promiscuous mode
[  197.538706][ T8326] veth1_macvtap: entered promiscuous mode
[  197.567567][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.579016][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.607588][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.633430][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.648840][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.665635][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.677594][ T8425] loop1: detected capacity change from 0 to 1764
[  197.681760][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.701567][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.722778][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.764284][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.785501][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.810709][ T5774] Bluetooth: hci2: command tx timeout
[  197.816457][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.880643][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.901697][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.912680][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.923514][ T8326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.934786][ T8326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.975444][ T8326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.018490][ T8326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.039401][ T8326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.051429][ T8415] loop2: detected capacity change from 0 to 32768
[  198.057634][ T8326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.058437][ T8430] loop5: detected capacity change from 0 to 7
[  198.071391][ T8326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.095659][ T8430] Dev loop5: unable to read RDB block 7
[  198.101875][ T8415] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  198.115894][ T8415] JBD2: Ignoring recovery information on journal
[  198.127285][ T8430]  loop5: unable to read partition table
[  198.154826][ T8430] loop5: partition table beyond EOD, truncated
[  198.161978][ T1094] loop: Write error at byte offset 4, length 3584.
[  198.194952][ T8430] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[  198.231437][    C1] I/O error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  198.241260][    C1] Buffer I/O error on dev loop5, logical block 0, lost async page write
[  198.313256][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.323767][ T8415] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  198.341194][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.444808][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.489129][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.639584][ T8415] syz.2.857 (8415) used greatest stack depth: 18224 bytes left
[  198.899272][ T8443] loop0: detected capacity change from 0 to 4096
[  198.917852][ T8443] EXT4-fs: inline encryption not supported
[  198.934278][ T7352] ocfs2: Unmounting device (7,2) on (node local)
[  198.976608][ T8443] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  198.995992][ T8443] EXT4-fs (loop0): Test dummy encryption mode enabled
[  199.024773][ T8443] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  199.049850][ T8443] System zones: 0-5
[  199.092542][ T8443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.544657][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.660638][ T8440] loop4: detected capacity change from 0 to 40427
[  199.708714][ T8440] F2FS-fs (loop4): invalid crc value
[  199.719895][ T8440] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.871683][ T8440] F2FS-fs (loop4): Start checkpoint disabled!
[  199.894289][ T5774] Bluetooth: hci2: command tx timeout
[  199.910662][ T8440] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  200.247427][  T144] kworker/u4:5: attempt to access beyond end of device
[  200.247427][  T144] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  200.289851][  T144] kworker/u4:5: attempt to access beyond end of device
[  200.289851][  T144] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  200.310737][  T144] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  200.317959][  T144] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  200.356494][  T144] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  200.630212][ T8474] program syz.0.878 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  200.738165][ T8478] loop1: detected capacity change from 0 to 2048
[  200.792925][ T8478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.570949][ T8507] pimreg: tun_chr_ioctl cmd 2147767507
[  201.605790][ T8509] loop2: detected capacity change from 0 to 128
[  201.631527][ T8509] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  201.683014][ T8509] hpfs: filesystem error: improperly stopped
[  201.689266][ T8509] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  201.719929][ T8509] hpfs: You really don't want any checks? You are crazy...
[  201.728019][ T8509] hpfs: hpfs_map_sector(): read error
[  201.741654][ T8509] hpfs: code page support is disabled
[  201.778687][ T8509] hpfs: hpfs_map_4sectors(): unaligned read
[  201.811303][ T8509] hpfs: hpfs_map_4sectors(): unaligned read
[  201.817275][ T8509] hpfs: filesystem error: unable to find root dir
[  201.970687][ T5774] Bluetooth: hci2: command tx timeout
[  202.304936][ T8530] loop0: detected capacity change from 0 to 8
[  202.326842][ T8530] squashfs: Unknown parameter '0xffffffffffffffff�O���DX9@w���	�����_���B���}�!�S���+N�X��M�e&'
[  202.341768][ T8532] loop4: detected capacity change from 0 to 512
[  202.387086][ T8532] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002]
[  202.422440][ T8532] System zones: 0-2, 18-18, 34-34
[  202.457061][ T8532] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.902: bg 0: block 248: padding at end of block bitmap is not set
[  202.570827][ T8532] Quota error (device loop4): write_blk: dquota write failed
[  202.630774][ T8532] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  202.670895][ T8532] EXT4-fs error (device loop4): ext4_acquire_dquot:6953: comm syz.4.902: Failed to acquire dquot type 1
[  202.746750][ T8532] EXT4-fs (loop4): 1 truncate cleaned up
[  202.761908][ T8532] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  202.819059][ T8532] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.852032][ T8525] loop2: detected capacity change from 0 to 40427
[  202.867951][ T8532] EXT4-fs (loop4): shut down requested (1)
[  202.900503][ T8525] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0)
[  202.908289][ T8525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  202.967388][ T8525] F2FS-fs (loop2): invalid crc value
[  202.983041][ T8326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.025763][ T8525] F2FS-fs (loop2): Found nat_bits in checkpoint
[  203.228866][ T8525] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  203.260710][ T8525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  203.384547][   T28] audit: type=1800 audit(1776751545.535:10): pid=8525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.899" name="file1" dev="loop2" ino=10 res=0 errno=0
[  203.466439][ T7352] syz-executor: attempt to access beyond end of device
[  203.466439][ T7352] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  203.487762][ T8537] loop0: detected capacity change from 0 to 32768
[  203.489005][ T7352] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  203.526152][ T8537] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.903 (8537)
[  203.599208][ T8537] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  203.622756][ T8537] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  203.645776][ T8537] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  203.664034][ T8537] BTRFS info (device loop0): use zstd compression, level 3
[  203.710953][ T8537] BTRFS info (device loop0): using free space tree
[  203.900985][ T8537] BTRFS info (device loop0): enabling ssd optimizations
[  203.964595][ T8537] BTRFS info (device loop0): auto enabling async discard
[  204.421865][ T5771] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  204.860755][   T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  205.050895][   T27] usb 3-1: Using ep0 maxpacket: 32
[  205.071054][   T27] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  205.098459][   T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.120720][   T27] usb 3-1: Product: syz
[  205.128912][   T27] usb 3-1: Manufacturer: syz
[  205.158982][ T8587] loop4: detected capacity change from 0 to 32768
[  205.165878][   T27] usb 3-1: SerialNumber: syz
[  205.180826][ T5780] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  205.201991][   T27] usb 3-1: config 0 descriptor??
[  205.214841][   T27] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  205.242645][ T8587] JBD2: Ignoring recovery information on journal
[  205.317569][ T8590] loop1: detected capacity change from 0 to 40427
[  205.334915][ T8590] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  205.371110][ T5780] usb 1-1: Using ep0 maxpacket: 8
[  205.383724][ T8587] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  205.403530][ T8590] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  205.427477][ T5780] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  205.460979][ T5780] usb 1-1: config 0 has no interface number 0
[  205.472653][ T8590] F2FS-fs (loop1): invalid crc value
[  205.490876][ T5780] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  205.516125][ T8590] F2FS-fs (loop1): Found nat_bits in checkpoint
[  205.540965][ T5780] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  205.550308][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.601060][ T5780] usb 1-1: config 0 descriptor??
[  205.631402][ T8587] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #20 has bad signature 
[  205.642343][ T5780] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  205.651491][ T8587] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  205.672768][ T8590] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  205.675885][ T8587] OCFS2: File system is now read-only.
[  205.685153][ T8590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  205.685456][ T8587] (syz.4.918,8587,0):ocfs2_search_chain:1761 ERROR: status = -30
[  205.730730][ T8587] (syz.4.918,8587,0):ocfs2_search_chain:1871 ERROR: status = -30
[  205.748894][ T8587] (syz.4.918,8587,0):ocfs2_claim_suballoc_bits:1950 ERROR: status = -30
[  205.758183][   T28] audit: type=1800 audit(1776751547.905:11): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.920" name="file1" dev="loop1" ino=10 res=0 errno=0
[  205.790743][ T8587] (syz.4.918,8587,1):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30
[  205.821371][ T5767] syz-executor: attempt to access beyond end of device
[  205.821371][ T5767] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  205.828018][ T8587] (syz.4.918,8587,1):ocfs2_claim_metadata:2018 ERROR: status = -30
[  205.851176][ T5767] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  205.854959][ T8587] (syz.4.918,8587,1):ocfs2_claim_metadata:2031 ERROR: status = -30
[  205.880883][ T8587] (syz.4.918,8587,0):ocfs2_dx_dir_attach_index:2330 ERROR: status = -30
[  205.899035][ T8587] (syz.4.918,8587,0):ocfs2_expand_inline_dir:3023 ERROR: status = -30
[  205.911171][ T5826] usb 1-1: USB disconnect, device number 6
[  205.948644][ T8587] (syz.4.918,8587,0):ocfs2_extend_dir:3205 ERROR: status = -30
[  205.967059][ T8587] (syz.4.918,8587,0):ocfs2_prepare_dir_for_insert:4326 ERROR: status = -30
[  205.976886][ T8587] (syz.4.918,8587,0):ocfs2_mknod:298 ERROR: status = -30
[  205.988296][ T8587] (syz.4.918,8587,0):ocfs2_mknod:502 ERROR: status = -30
[  205.996274][ T8587] (syz.4.918,8587,0):ocfs2_mkdir:659 ERROR: status = -30
[  206.045000][   T27] gspca_ov534_9: reg_w failed -71
[  206.065881][ T8326] (syz-executor,8326,0):ocfs2_read_blocks:239 ERROR: status = -12
[  206.077747][ T8326] (syz-executor,8326,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -12
[  206.107091][ T8326] (syz-executor,8326,0):_ocfs2_free_clusters:2583 ERROR: status = -12
[  206.121280][ T8326] (syz-executor,8326,0):ocfs2_sync_local_to_main:1001 ERROR: status = -12
[  206.129967][ T8326] (syz-executor,8326,0):ocfs2_sync_local_to_main:1013 ERROR: status = -12
[  206.143731][ T8326] (syz-executor,8326,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -12
[  206.203762][ T8326] ocfs2: Unmounting device (7,4) on (node local)
[  206.431539][   T27] gspca_ov534_9: Unknown sensor 0000
[  206.431630][   T27] ov534_9: probe of 3-1:0.0 failed with error -22
[  206.487664][   T27] usb 3-1: USB disconnect, device number 11
[  206.496607][ T8608] loop4: detected capacity change from 0 to 256
[  206.538021][ T8609] loop1: detected capacity change from 0 to 736
[  206.897093][ T8616] loop2: detected capacity change from 0 to 1024
[  206.942967][ T8616] EXT4-fs: Ignoring removed i_version option
[  206.951197][ T8616] EXT4-fs: inline encryption not supported
[  207.005524][ T8616] EXT4-fs (loop2): Test dummy encryption mode enabled
[  207.071958][ T8616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.275284][ T7352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.680873][    T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  207.845374][ T8629] loop4: detected capacity change from 0 to 32768
[  207.871348][    T8] usb 1-1: Using ep0 maxpacket: 8
[  207.883637][    T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  207.918936][    T8] usb 1-1: config 0 has no interface number 0
[  207.934173][    T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  207.949500][    T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  207.961057][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.983411][    T8] usb 1-1: config 0 descriptor??
[  208.024921][    T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  208.233953][ T8653] netlink: 64691 bytes leftover after parsing attributes in process `syz.2.946'.
[  208.288358][ T8655] loop4: detected capacity change from 0 to 128
[  208.658880][ T8664] loop1: detected capacity change from 0 to 64
[  209.048059][ T8673] netlink: 264 bytes leftover after parsing attributes in process `syz.2.956'.
[  209.197137][ T8677] loop2: detected capacity change from 0 to 128
[  209.214151][ T8677] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  209.257488][    T8] usb 1-1: USB disconnect, device number 7
[  209.278233][ T8677] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  209.667274][ T8667] loop4: detected capacity change from 0 to 40427
[  209.678130][ T8687] loop1: detected capacity change from 0 to 2048
[  209.686457][ T8667] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168)
[  209.702519][ T8667] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  209.711207][ T8687] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  209.736546][ T8667] F2FS-fs (loop4): invalid crc value
[  209.751643][ T8687] NILFS (loop1): mounting unchecked fs
[  209.769160][ T8667] F2FS-fs (loop4): Found nat_bits in checkpoint
[  209.808622][ T8687] NILFS (loop1): recovery complete
[  209.830467][ T8689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  209.911257][ T8667] F2FS-fs (loop4): Start checkpoint disabled!
[  209.972850][ T8667] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[  209.979968][ T8667] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  210.282517][ T2927] kworker/u4:11: attempt to access beyond end of device
[  210.282517][ T2927] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  210.331354][ T2927] kworker/u4:11: attempt to access beyond end of device
[  210.331354][ T2927] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  210.352889][ T2927] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  210.437750][ T2927] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  210.460706][ T2927] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  210.493928][ T8698] input: syz0 as /devices/virtual/input/input16
[  210.821070][ T8707] loop2: detected capacity change from 0 to 8
[  210.827865][ T8707] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  210.878454][ T5761] udevd[5761]: incorrect cramfs checksum on /dev/loop2
[  210.915921][ T5761] udevd[5761]: incorrect cramfs checksum on /dev/loop2
[  211.452744][   T27] IPVS: starting estimator thread 0...
[  211.563343][ T8726] IPVS: using max 19 ests per chain, 45600 per kthread
[  212.663754][ T8757] loop2: detected capacity change from 0 to 512
[  212.740910][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  212.951126][    T8] usb 1-1: Using ep0 maxpacket: 32
[  212.986217][    T8] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  213.001760][    T8] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  213.050924][    T8] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  213.091099][    T8] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  213.150981][    T8] usb 1-1: config 0 interface 0 has no altsetting 0
[  213.179708][    T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  213.201427][    T8] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  213.209913][    T8] usb 1-1: Product: syz
[  213.244385][ T8773] loop2: detected capacity change from 0 to 256
[  213.258173][    T8] usb 1-1: Manufacturer: syz
[  213.279306][    T8] usb 1-1: SerialNumber: syz
[  213.280374][ T8773] exfat: Deprecated parameter 'namecase'
[  213.295847][    T8] usb 1-1: config 0 descriptor??
[  213.301997][ T8773] exfat: Deprecated parameter 'utf8'
[  213.309253][ T8773] exfat: Deprecated parameter 'namecase'
[  213.313601][    T8] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  213.316800][ T8773] exfat: Deprecated parameter 'utf8'
[  213.364356][    T8] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  213.384366][ T8773] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d)
[  213.461915][ T8776] bridge0: port 2(bridge_slave_1) entered listening state
[  213.499250][ T8776] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.621961][ T5780] usb 1-1: USB disconnect, device number 8
[  213.622096][    C0] ldusb 1-1:0.0: usb_submit_urb failed (-19)
[  213.636159][ T8751] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  213.645408][ T5780] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  214.194374][ T8799] dvmrp1: tun_chr_ioctl cmd 1074025681
[  214.280824][    T8] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  214.388384][ T8803] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  214.471030][    T8] usb 3-1: Using ep0 maxpacket: 8
[  214.481953][    T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  214.507766][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.520167][    T8] usb 3-1: Product: syz
[  214.526118][    T8] usb 3-1: Manufacturer: syz
[  214.531508][    T8] usb 3-1: SerialNumber: syz
[  214.549310][    T8] usb 3-1: config 0 descriptor??
[  214.800775][    T8] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  215.072315][ T8805] loop0: detected capacity change from 0 to 32768
[  215.157458][ T8805] JBD2: Ignoring recovery information on journal
[  215.205472][ T8805] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  215.285285][ T8805] 
[  215.287699][ T8805] ======================================================
[  215.294728][ T8805] WARNING: possible circular locking dependency detected
[  215.301767][ T8805] syzkaller #0 Not tainted
[  215.306192][ T8805] ------------------------------------------------------
[  215.313236][ T8805] syz.0.1015/8805 is trying to acquire lock:
[  215.319227][ T8805] ffff88805d7ced98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  215.332589][ T8805] 
[  215.332589][ T8805] but task is already holding lock:
[  215.340061][ T8805] ffff888057e006f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  215.349592][ T8805] 
[  215.349592][ T8805] which lock already depends on the new lock.
[  215.349592][ T8805] 
[  215.360109][ T8805] 
[  215.360109][ T8805] the existing dependency chain (in reverse order) is:
[  215.369169][ T8805] 
[  215.369169][ T8805] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  215.377006][ T8805]        down_read+0x46/0x2e0
[  215.381684][ T8805]        ocfs2_init_acl+0x30a/0x770
[  215.386896][ T8805]        ocfs2_mknod+0x140f/0x2300
[  215.392015][ T8805]        ocfs2_mkdir+0x196/0x430
[  215.396963][ T8805]        vfs_mkdir+0x296/0x440
[  215.401732][ T8805]        do_mkdirat+0x1dc/0x450
[  215.406579][ T8805]        __x64_sys_mkdirat+0x89/0xa0
[  215.411865][ T8805]        do_syscall_64+0x55/0xa0
[  215.416808][ T8805]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.423257][ T8805] 
[  215.423257][ T8805] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  215.431774][ T8805]        down_read+0x46/0x2e0
[  215.436471][ T8805]        ocfs2_start_trans+0x3a8/0x6f0
[  215.441938][ T8805]        ocfs2_modify_bh+0xe4/0x4c0
[  215.447141][ T8805]        ocfs2_local_read_info+0x1445/0x1800
[  215.453127][ T8805]        dquot_load_quota_sb+0x757/0xb80
[  215.458786][ T8805]        dquot_load_quota_inode+0x2dc/0x5d0
[  215.464729][ T8805]        ocfs2_enable_quotas+0x1c9/0x490
[  215.470369][ T8805]        ocfs2_fill_super+0x417d/0x5010
[  215.476021][ T8805]        mount_bdev+0x221/0x2d0
[  215.480888][ T8805]        legacy_get_tree+0xea/0x180
[  215.486089][ T8805]        vfs_get_tree+0x8c/0x280
[  215.491034][ T8805]        do_new_mount+0x24b/0xa40
[  215.496075][ T8805]        __se_sys_mount+0x2e7/0x3d0
[  215.501269][ T8805]        do_syscall_64+0x55/0xa0
[  215.506218][ T8805]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.512631][ T8805] 
[  215.512631][ T8805] -> #2 (sb_internal#4){.+.+}-{0:0}:
[  215.520095][ T8805]        ocfs2_start_trans+0x2a9/0x6f0
[  215.525549][ T8805]        ocfs2_mknod+0xf1d/0x2300
[  215.530575][ T8805]        ocfs2_mkdir+0x196/0x430
[  215.535545][ T8805]        vfs_mkdir+0x296/0x440
[  215.540300][ T8805]        do_mkdirat+0x1dc/0x450
[  215.545157][ T8805]        __x64_sys_mkdirat+0x89/0xa0
[  215.550470][ T8805]        do_syscall_64+0x55/0xa0
[  215.555457][ T8805]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.561879][ T8805] 
[  215.561879][ T8805] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  215.572566][ T8805]        down_write+0x97/0x200
[  215.577362][ T8805]        ocfs2_reserve_local_alloc_bits+0x120/0x2600
[  215.584160][ T8805]        ocfs2_reserve_clusters_with_limit+0x1ba/0xc20
[  215.591029][ T8805]        ocfs2_mknod+0xebb/0x2300
[  215.596070][ T8805]        ocfs2_mkdir+0x196/0x430
[  215.601000][ T8805]        vfs_mkdir+0x296/0x440
[  215.605766][ T8805]        do_mkdirat+0x1dc/0x450
[  215.610622][ T8805]        __x64_sys_mkdirat+0x89/0xa0
[  215.615938][ T8805]        do_syscall_64+0x55/0xa0
[  215.620878][ T8805]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.627314][ T8805] 
[  215.627314][ T8805] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  215.637852][ T8805]        __lock_acquire+0x2df1/0x7d40
[  215.643419][ T8805]        lock_acquire+0x19e/0x420
[  215.648451][ T8805]        down_write+0x97/0x200
[  215.653229][ T8805]        ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  215.659656][ T8805]        ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  215.666623][ T8805]        ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  215.672792][ T8805]        ocfs2_xattr_set+0xc3f/0x13e0
[  215.678349][ T8805]        __vfs_setxattr+0x431/0x470
[  215.683665][ T8805]        __vfs_setxattr_noperm+0x12d/0x5e0
[  215.689492][ T8805]        vfs_setxattr+0x16b/0x2f0
[  215.694516][ T8805]        path_setxattr+0x3f3/0x5d0
[  215.699631][ T8805]        __x64_sys_setxattr+0xbb/0xd0
[  215.705014][ T8805]        do_syscall_64+0x55/0xa0
[  215.710043][ T8805]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  215.716524][ T8805] 
[  215.716524][ T8805] other info that might help us debug this:
[  215.716524][ T8805] 
[  215.726755][ T8805] Chain exists of:
[  215.726755][ T8805]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  215.726755][ T8805] 
[  215.730760][ T5774] Bluetooth: hci2: command tx timeout
[  215.744112][ T8805]  Possible unsafe locking scenario:
[  215.744112][ T8805] 
[  215.744120][ T8805]        CPU0                    CPU1
[  215.744123][ T8805]        ----                    ----
[  215.744127][ T8805]   lock(&oi->ip_xattr_sem);
[  215.744141][ T8805]                                lock(&journal->j_trans_barrier);
[  215.744153][ T8805]                                lock(&oi->ip_xattr_sem);
[  215.744163][ T8805]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  215.744179][ T8805] 
[  215.744179][ T8805]  *** DEADLOCK ***
[  215.744179][ T8805] 
[  215.744183][ T8805] 3 locks held by syz.0.1015/8805:
[  215.744208][ T8805]  #0: ffff88801c3c6418 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  215.744264][ T8805]  #1: ffff888057e009d8 (&sb->s_type->i_mutex_key#33){+.+.}-{3:3}, at: vfs_setxattr+0x144/0x2f0
[  215.827640][ T8805]  #2: ffff888057e006f8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x476/0x13e0
[  215.837578][ T8805] 
[  215.837578][ T8805] stack backtrace:
[  215.843509][ T8805] CPU: 0 PID: 8805 Comm: syz.0.1015 Not tainted syzkaller #0
[  215.850893][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  215.860990][ T8805] Call Trace:
[  215.864302][ T8805]  <TASK>
[  215.867259][ T8805]  dump_stack_lvl+0x18c/0x250
[  215.871950][ T8805]  ? load_image+0x420/0x420
[  215.876489][ T8805]  ? show_regs_print_info+0x20/0x20
[  215.881815][ T8805]  ? print_circular_bug+0x12b/0x1a0
[  215.887128][ T8805]  check_noncircular+0x2fc/0x400
[  215.892269][ T8805]  ? print_deadlock_bug+0x5d0/0x5d0
[  215.897584][ T8805]  ? lockdep_lock+0xf5/0x230
[  215.902201][ T8805]  ? _find_first_zero_bit+0xd3/0x100
[  215.907573][ T8805]  __lock_acquire+0x2df1/0x7d40
[  215.912520][ T8805]  ? __lock_acquire+0x7d40/0x7d40
[  215.917544][ T8805]  ? verify_lock_unused+0x140/0x140
[  215.922744][ T8805]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  215.928551][ T8805]  ? do_raw_spin_lock+0x11f/0x2c0
[  215.933580][ T8805]  ? mutex_unlock+0x10/0x10
[  215.938133][ T8805]  lock_acquire+0x19e/0x420
[  215.942672][ T8805]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  215.948733][ T8805]  ? ocfs2_get_system_file_inode+0x202/0x850
[  215.954998][ T8805]  ? __might_sleep+0xe0/0xe0
[  215.959601][ T8805]  ? read_lock_is_recursive+0x20/0x20
[  215.964996][ T8805]  ? ocfs2_fast_symlink_read_folio+0x550/0x550
[  215.971175][ T8805]  ? verify_lock_unused+0x140/0x140
[  215.976478][ T8805]  ? check_noncircular+0x18a/0x400
[  215.981589][ T8805]  down_write+0x97/0x200
[  215.985922][ T8805]  ? ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  215.992002][ T8805]  ? down_read_killable+0x340/0x340
[  215.997198][ T8805]  ocfs2_reserve_suballoc_bits+0x16e/0x44c0
[  216.003111][ T8805]  ? mark_lock+0x94/0x320
[  216.007478][ T8805]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  216.013454][ T8805]  ? lock_chain_count+0x20/0x20
[  216.018318][ T8805]  ? _raw_spin_unlock_irqrestore+0x86/0x120
[  216.024483][ T8805]  ? lockdep_hardirqs_on+0x98/0x150
[  216.029686][ T8805]  ? ocfs2_block_group_search+0x470/0x470
[  216.035671][ T8805]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  216.041652][ T8805]  ? _raw_spin_unlock+0x40/0x40
[  216.046501][ T8805]  ? stack_trace_save+0xaa/0x100
[  216.051447][ T8805]  ? stack_trace_snprint+0xf0/0xf0
[  216.056579][ T8805]  ? __stack_depot_save+0x560/0x630
[  216.061787][ T8805]  ? kasan_set_track+0x5f/0x70
[  216.066724][ T8805]  ? kasan_set_track+0x4e/0x70
[  216.071676][ T8805]  ? __kasan_kmalloc+0x8f/0xa0
[  216.076540][ T8805]  ? ocfs2_reserve_new_metadata_blocks+0x10d/0x9a0
[  216.083040][ T8805]  ? ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  216.089466][ T8805]  ? ocfs2_xattr_set+0xc3f/0x13e0
[  216.094518][ T8805]  ? __vfs_setxattr+0x431/0x470
[  216.099369][ T8805]  ? __vfs_setxattr_noperm+0x12d/0x5e0
[  216.104866][ T8805]  ? vfs_setxattr+0x16b/0x2f0
[  216.109540][ T8805]  ? path_setxattr+0x3f3/0x5d0
[  216.114301][ T8805]  ? __x64_sys_setxattr+0xbb/0xd0
[  216.119322][ T8805]  ? do_syscall_64+0x55/0xa0
[  216.123924][ T8805]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.130121][ T8805]  ocfs2_reserve_new_metadata_blocks+0x416/0x9a0
[  216.136625][ T8805]  ? ocfs2_init_steal_slots+0x160/0x160
[  216.142174][ T8805]  ? ocfs2_xattr_block_set+0x2e30/0x2e30
[  216.147812][ T8805]  ocfs2_init_xattr_set_ctxt+0x30b/0x710
[  216.153533][ T8805]  ? ocfs2_xattr_set+0xc05/0x13e0
[  216.158570][ T8805]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  216.164724][ T8805]  ? ocfs2_truncate_log_needs_flush+0x130/0x310
[  216.171163][ T8805]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  216.177178][ T8805]  ? down_write+0x16e/0x200
[  216.181688][ T8805]  ? down_read_killable+0x340/0x340
[  216.187003][ T8805]  ? up_write+0x1c3/0x410
[  216.191346][ T8805]  ocfs2_xattr_set+0xc3f/0x13e0
[  216.196241][ T8805]  ? __ocfs2_xattr_set_handle+0xf40/0xf40
[  216.201968][ T8805]  ? __lock_acquire+0x1347/0x7d40
[  216.207009][ T8805]  ? verify_lock_unused+0x140/0x140
[  216.212221][ T8805]  ? ____kasan_slab_free+0x126/0x1e0
[  216.217508][ T8805]  ? aa_get_newest_label+0xfd/0x5c0
[  216.222717][ T8805]  ? end_current_label_crit_section+0x170/0x170
[  216.228956][ T8805]  ? posix_xattr_acl+0x93/0xb0
[  216.233732][ T8805]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  216.239225][ T8805]  __vfs_setxattr+0x431/0x470
[  216.243944][ T8805]  __vfs_setxattr_noperm+0x12d/0x5e0
[  216.249246][ T8805]  vfs_setxattr+0x16b/0x2f0
[  216.253751][ T8805]  ? xattr_permission+0x470/0x470
[  216.258778][ T8805]  ? __mnt_want_write+0x223/0x2a0
[  216.263836][ T8805]  ? path_setxattr+0x3a1/0x5d0
[  216.268641][ T8805]  path_setxattr+0x3f3/0x5d0
[  216.273290][ T8805]  ? simple_xattrs_free+0x150/0x150
[  216.278538][ T8805]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  216.284519][ T8805]  ? lock_chain_count+0x20/0x20
[  216.289532][ T8805]  __x64_sys_setxattr+0xbb/0xd0
[  216.294451][ T8805]  do_syscall_64+0x55/0xa0
[  216.298874][ T8805]  ? clear_bhb_loop+0x40/0x90
[  216.303659][ T8805]  ? clear_bhb_loop+0x40/0x90
[  216.308344][ T8805]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.314257][ T8805] RIP: 0033:0x7f95c059c819
[  216.318679][ T8805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  216.338459][ T8805] RSP: 002b:00007f95c14d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  216.346871][ T8805] RAX: ffffffffffffffda RBX: 00007f95c0815fa0 RCX: 00007f95c059c819
[  216.354847][ T8805] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000200000000000
[  216.362817][ T8805] RBP: 00007f95c0632c91 R08: 0000000000000000 R09: 0000000000000000
[  216.370806][ T8805] R10: 0000000000000841 R11: 0000000000000246 R12: 0000000000000000
[  216.378812][ T8805] R13: 00007f95c0816038 R14: 00007f95c0815fa0 R15: 00007ffcdb6f0608
[  216.386809][ T8805]  </TASK>
[  216.404503][    T8] usb write operation failed. (-71)
[  216.421024][    T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  216.432034][    T8] dvbdev: DVB: registering new adapter (Terratec H7)
[  216.438775][    T8] usb 3-1: media controller created
[  216.447182][    T8] usb read operation failed. (-71)
[  216.454945][    T8] usb write operation failed. (-71)
[  216.463768][    T8] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5
[  216.473676][ T5771] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  216.489671][ T5771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  216.502774][    T8] usb 3-1: USB disconnect, device number 12
[  216.523518][ T5771] OCFS2: File system is now read-only.
[  216.529672][ T5771] (syz-executor,5771,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30
[  216.539811][ T5771] (syz-executor,5771,0):_ocfs2_free_clusters:2583 ERROR: status = -30
[  216.548304][ T5771] (syz-executor,5771,0):ocfs2_replay_truncate_records:5976 ERROR: status = -30
[  216.557784][ T5771] (syz-executor,5771,0):__ocfs2_flush_truncate_log:6057 ERROR: status = -30
[  216.566554][ T5771] (syz-executor,5771,0):ocfs2_sync_fs:404 ERROR: status = -30
[  216.576222][ T5771] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #1056 has bad signature 
[  216.591720][ T5771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  216.602727][ T5771] (syz-executor,5771,1):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30
[  216.611530][ T5771] (syz-executor,5771,1):_ocfs2_free_clusters:2583 ERROR: status = -30
[  216.619990][ T5771] (syz-executor,5771,1):ocfs2_sync_local_to_main:1001 ERROR: status = -30
[  216.628876][ T5771] (syz-executor,5771,1):ocfs2_sync_local_to_main:1013 ERROR: status = -30
[  216.637576][ T5771] (syz-executor,5771,1):ocfs2_shutdown_local_alloc:449 ERROR: status = -30
[  216.659943][ T5771] ocfs2: Unmounting device (7,0) on (node local)
[  222.144938][ T1094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.185593][ T1094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.225573][ T1094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.266154][ T1094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.175596][ T1094] hsr_slave_0: left promiscuous mode
[  223.184613][ T1094] hsr_slave_1: left promiscuous mode
[  223.192105][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  223.199662][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0
[  223.209786][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  223.220318][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1
[  223.229974][ T1094] batman_adv: batadv0: Interface deactivated: macvtap1
[  223.237617][ T1094] batman_adv: batadv0: Removing interface: macvtap1
[  223.247003][ T1094] bridge_slave_1: left allmulticast mode
[  223.253380][ T1094] bridge_slave_1: left promiscuous mode
[  223.262528][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.272535][ T1094] bridge_slave_0: left allmulticast mode
[  223.278245][ T1094] bridge_slave_0: left promiscuous mode
[  223.286535][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.298886][ T1094] batadv_slave_0: left promiscuous mode
[  223.309884][ T1094] veth1_macvtap: left promiscuous mode
[  223.316082][ T1094] veth0_macvtap: left promiscuous mode
[  223.323438][ T1094] veth1_vlan: left promiscuous mode
[  223.328779][ T1094] veth0_vlan: left promiscuous mode
[  223.554927][ T1094] team0 (unregistering): Port device team_slave_1 removed
[  223.598203][ T1094] team0 (unregistering): Port device team_slave_0 removed
[  223.666487][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.680431][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.837790][ T1094] bond0 (unregistering): Released all slaves