last executing test programs:

23.302221747s ago: executing program 1 (id=1010):
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x409d132, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8800)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@sb={'sb', 0x3d, 0x6}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nombcache}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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")

20.886776449s ago: executing program 1 (id=1020):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080))
socket(0x200000000000011, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x8000)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0)

18.508584169s ago: executing program 1 (id=1025):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='rdma.current\x00', 0x26e1, 0x0)
close(r4)
socket$l2tp6(0xa, 0x2, 0x73)
ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @local})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0xc048aeca, &(0x7f00000001c0)={0x8, 0x0, [{0xab8, 0x0, 0x101}, {0x9e9, 0x0, 0x4}, {0x118, 0x0, 0x6}, {0x909, 0x0, 0x8}, {0xbc4, 0x0, 0x9}, {0x28b, 0x0, 0xff}, {0x373, 0x0, 0x5}, {0x891, 0x0, 0x13}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc8)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0x4, 0x8, 0xb}})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r6)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
removexattr(0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
lseek(r7, 0x4, 0x1)
getdents64(r7, 0xffffffffffffffff, 0x43)

16.318635445s ago: executing program 1 (id=1033):
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xd, 0xc}, {0x10, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4004000)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)=@gettaction={0x5c, 0x32, 0x1, 0x70bd25, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x4}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}]}, 0x5c}}, 0x0)
mprotect(&(0x7f00000c0000/0x1000)=nil, 0x1000, 0x1000009)
syz_clone(0x42080, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mprotect(&(0x7f0000936000/0x9000)=nil, 0x9000, 0x0)
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001008, 0x2, 0x6, 0x1bf7, 0xc, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x3, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x10000002, 0x0, 0x6, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0xfffffffe, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x403, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x66cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000003000000000000000000000a000300766574683000000034001280090001007665746800000000240002"], 0x60}}, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x9, 0x4, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet(0x2, 0x2, 0x0)

15.428257888s ago: executing program 1 (id=1035):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

15.202115663s ago: executing program 1 (id=1039):
socket$nl_route(0x10, 0x3, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000880)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB, @ANYRES16=r0], 0x0)

6.430839106s ago: executing program 2 (id=1074):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa)

5.581129838s ago: executing program 4 (id=1080):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

5.45862523s ago: executing program 0 (id=1081):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xc, &(0x7f0000006680))
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x163281, 0xd8)
r1 = socket$inet6(0xa, 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = fsopen(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fsmount(r4, 0x0, 0x80)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f8000000160085"], 0xf8}}, 0x40000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x40800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888)
write$tcp_mem(r0, &(0x7f0000000140)={0x5, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48)

5.410361922s ago: executing program 2 (id=1082):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x401c2103, &(0x7f00000001c0)={0x0, 0x1, r2, 0x1, 0x80000})

4.384889658s ago: executing program 2 (id=1084):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x682, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.90273899s ago: executing program 0 (id=1085):
creat(&(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145)
symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0)
writev(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setstatus(r1, 0x4, 0x42400)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x2000000)
socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000bfd2b357620012", 0x32}], 0x1}, 0x0)

2.815449128s ago: executing program 3 (id=1087):
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x6, 0x7)
connect$inet6(r3, 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x10000)
ioctl$DRM_IOCTL_MODE_CURSOR(r7, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1})
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
sendmmsg$sock(r6, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0)
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0)
mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @win={{0x0, 0x8000, 0x2, 0x2}, 0x2, 0x0, &(0x7f0000000340)={{0xae04, 0x5, 0x6, 0x7}}, 0x8, &(0x7f00000003c0)="8274afbe70c5d8d90a9e78d93f4f57b42b3cd4f02b8cdd406dc1862155ed637fab3e331e05d79f94d93bba15569c4da7e5961ca1229ad0f4702379d1c22b9febc080607d", 0x4}})
pipe2$9p(&(0x7f00000001c0), 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000001a840), 0x0, 0x0, 0x0})

2.391294259s ago: executing program 3 (id=1088):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000380)={&(0x7f0000000680)=""/138, 0xffffffffffffff10})

2.383676809s ago: executing program 4 (id=1089):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006540)={0x2020}, 0xfffffce2)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000080000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0xe, 0x0, &(0x7f0000000540)="000000000000bde52128000000f1", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.274822612s ago: executing program 3 (id=1090):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
read$FUSE(r1, &(0x7f0000006040)={0x2020}, 0x2020)

2.274627742s ago: executing program 0 (id=1091):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)

2.098925606s ago: executing program 3 (id=1092):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, 0x0)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0xa)

2.029675458s ago: executing program 0 (id=1093):
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
sendmmsg(r1, 0x0, 0x0, 0x41)
mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f0000001dc0)={0x0, 0xf7, 0x40000}, 0x20)

1.890830952s ago: executing program 0 (id=1094):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x80)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x401c2103, &(0x7f00000001c0)={0x0, 0x1, r2, 0x1, 0x80000})

1.672987447s ago: executing program 2 (id=1095):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0xfc, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x800}}}}}}, 0x0)

1.5683805s ago: executing program 2 (id=1096):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x8800)
readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@sb={'sb', 0x3d, 0x6}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@resgid}, {@nombcache}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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")

1.501678111s ago: executing program 3 (id=1097):
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0})
dup(0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCSIFBR(r3, 0x8941, 0x0)

1.266555928s ago: executing program 4 (id=1098):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, &(0x7f0000000400))
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd70000000", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000400000000000000fe"], 0x1a4}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{0x0, 0x314}], 0x1}, 0x800)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

668.372432ms ago: executing program 0 (id=1099):
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000240), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f000000ad00))

568.615345ms ago: executing program 3 (id=1100):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
connect$inet6(r0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}})

390.88587ms ago: executing program 4 (id=1101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000008c0)={0xa, 0x4e22, 0xfffffffc, @loopback, 0x6}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x2, &(0x7f0000000380)={&(0x7f0000000680)=""/138, 0xffffffffffffff10})

364.91001ms ago: executing program 4 (id=1102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838})
read$FUSE(r1, &(0x7f0000006040)={0x2020}, 0x2020)

320.223471ms ago: executing program 2 (id=1103):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080), 0x10)
bind$inet6(r0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xd5)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r1=>0x0)
io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000080)=[{}, {}], 0x0, 0x0)
io_submit(r1, 0x0, 0x0)
io_submit(r1, 0x0, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0)
write$rfkill(r2, &(0x7f00000000c0)={0x0, 0x2, 0x3, 0xfe, 0x1}, 0x8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r3 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0xa0800)
ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000580)={"0d0000d3", 0x0, 0x6, 0x3, 0x4, 0x2000008, "3377f877c734c40400", "bd1c2415", "3469def7", "04ffffbf", ["c386afeefff8ffffff7eec01", "0080000000000000001000", "000000000000000000c40800", "0000000000000100"]})
r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f0000000100)=[{&(0x7f0000000140)="290000001600190f00f43fff0800da060200000000e80003dd08000401000000000000000005000000", 0x29}], 0x1)
close(r4)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x0, 0xfffffffd}, 0x20)
connect$l2tp6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x7fe8, @loopback, 0x7, 0xfffffffd}, 0x20)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000100))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x619}, 0x38)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4)
openat$cachefiles(0xffffff9c, &(0x7f0000000180), 0x800000, 0x0)

35.874949ms ago: executing program 32 (id=1039):
socket$nl_route(0x10, 0x3, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000880)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB, @ANYRES16=r0], 0x0)

0s ago: executing program 4 (id=1105):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000380)='2', 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0)
write(r0, &(0x7f0000000440)='2', 0x1)
symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0)
r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={[0x8000]}, 0x8, 0x800)
fcntl$setownex(r2, 0xf, &(0x7f00000002c0)={0x1})
fcntl$getownex(r0, 0x10, &(0x7f00000001c0))
socket(0xa, 0x3, 0x3a)
socket$netlink(0x10, 0x3, 0x9)
socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0xc6, &(0x7f0000000940)={@multicast, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x1}, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x7, 0xb0, 0x0, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x64010101, @private=0x1}, {0xfffc, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f0900000096c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002400)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r4, @ANYBLOB="3d4c9583b943127b8c738af30607715da2ea946b5881d99c0a3f6a0fd9aca8638d1558f5496d0e089ecab71a04994daa32bedcd766dd285ebab80724a5bc2535aaf031d89f743f1beabfe90f1fce94c9e5b1747f19013149eca2522b02bdb8ffba3a765b", @ANYBLOB="5be15f9b92a15781869b7e7ed4f4fe10ed13e7fcfca1d5b3e537cf018a34d1f12ff930491dcbc1af2d26936fba556a1cd743495811dafc738b5920b0269f9599f495706e16d38575b1d574c9747a9a7d5af5bfeccea48c11b1a163611a84559aa839d8256bd620508f9ca8aac95cb3cc544280b3a003cb0b2fd3a4136f124308a5b1af6032734b13bc4381cb6d7f17299bfe9e572851be55e06bc12d29e42a1d9fe97c"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000006c0)=""/83, 0x53}, {&(0x7f0000000740)=""/102, 0x41}], 0x2}, 0x18}], 0x1, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$packet(0x11, 0x2, 0x300)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50)
socket$netlink(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)

kernel console output (not intermixed with test programs):

 indirect mapped block 4278190080 (level 0)
[  130.553448][ T5119] loop4: detected capacity change from 0 to 512
[  130.615386][ T5108] EXT4-fs (loop3): Remounting filesystem read-only
[  130.638899][ T5108] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.235: invalid indirect mapped block 1 (level 1)
[  130.701722][ T5108] EXT4-fs (loop3): Remounting filesystem read-only
[  130.730968][ T5108] EXT4-fs (loop3): 1 truncate cleaned up
[  130.739590][ T5108] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  130.813331][ T5119] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  130.928365][ T5119] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  131.010323][ T5119] EXT4-fs (loop4): 1 truncate cleaned up
[  131.016459][ T5119] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  131.776521][ T5151] Zero length message leads to an empty skb
[  132.547930][ T5154] usb usb9: usbfs: process 5154 (syz.4.246) did not claim interface 4 before use
[  132.718002][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  132.724697][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  132.872387][ T5161] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  132.967187][ T5167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'.
[  133.065535][ T5161] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  133.963235][ T5177] loop1: detected capacity change from 0 to 512
[  134.258386][ T5177] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  134.275078][ T5177] EXT4-fs (loop1): Remounting filesystem read-only
[  134.282903][ T5177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.253: invalid indirect mapped block 4278190080 (level 0)
[  134.302446][ T5177] EXT4-fs (loop1): Remounting filesystem read-only
[  134.309074][ T5177] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.253: invalid indirect mapped block 1 (level 1)
[  134.326954][ T5177] EXT4-fs (loop1): Remounting filesystem read-only
[  134.336857][ T5177] EXT4-fs (loop1): 1 truncate cleaned up
[  134.342607][ T5177] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  136.602327][ T5214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.263'.
[  137.612145][ T5229] loop4: detected capacity change from 0 to 512
[  138.334256][ T5229] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  138.355400][ T5229] EXT4-fs (loop4): Remounting filesystem read-only
[  138.362160][ T5229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.266: invalid indirect mapped block 4278190080 (level 0)
[  138.381777][ T5229] EXT4-fs (loop4): Remounting filesystem read-only
[  138.388578][ T5229] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.266: invalid indirect mapped block 1 (level 1)
[  139.381217][ T5229] EXT4-fs (loop4): Remounting filesystem read-only
[  139.388656][ T5229] EXT4-fs (loop4): 1 truncate cleaned up
[  139.394347][ T5229] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  139.888225][ T5259] usb usb9: usbfs: process 5259 (syz.2.276) did not claim interface 0 before use
[  140.035184][ T5263] loop2: detected capacity change from 0 to 512
[  140.076231][ T5263] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.161994][ T5266] usb usb7: check_ctrlrecip: process 5266 (syz.4.278) requesting ep 01 but needs 81
[  140.191506][ T5263] EXT4-fs (loop2): 1 truncate cleaned up
[  140.209469][ T5263] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  143.310486][ T5302] usb usb9: usbfs: process 5302 (syz.2.287) did not claim interface 0 before use
[  143.463894][ T5306] loop1: detected capacity change from 0 to 512
[  143.694569][ T5306] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  143.719527][ T5306] EXT4-fs (loop1): Remounting filesystem read-only
[  143.726926][ T5306] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.288: invalid indirect mapped block 4278190080 (level 0)
[  143.746821][ T5306] EXT4-fs (loop1): Remounting filesystem read-only
[  143.753390][ T5306] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.288: invalid indirect mapped block 1 (level 1)
[  143.781854][ T5306] EXT4-fs (loop1): Remounting filesystem read-only
[  143.791584][ T5306] EXT4-fs (loop1): 1 truncate cleaned up
[  143.797389][ T5306] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  144.243849][ T5316] usb usb7: check_ctrlrecip: process 5316 (syz.2.291) requesting ep 01 but needs 81
[  145.483605][ T5332] loop0: detected capacity change from 0 to 512
[  145.675247][ T5332] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  147.454642][ T5350] usb usb9: usbfs: process 5350 (syz.3.302) did not claim interface 0 before use
[  149.176638][ T5376] loop3: detected capacity change from 0 to 512
[  149.197713][ T5376] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  149.436080][ T5381] usb usb7: check_ctrlrecip: process 5381 (syz.4.309) requesting ep 01 but needs 81
[  152.627354][ T5430] loop0: detected capacity change from 0 to 512
[  153.288132][ T5430] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  154.854944][ T5446] usb usb7: check_ctrlrecip: process 5446 (syz.0.329) requesting ep 01 but needs 81
[  156.108682][ T5481] loop1: detected capacity change from 0 to 512
[  156.267423][ T5481] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  156.571515][ T5481] EXT4-fs (loop1): 1 truncate cleaned up
[  156.573775][ T5483] loop2: detected capacity change from 0 to 512
[  156.636877][ T5483] EXT4-fs (loop2): bad s_min_extra_isize: 544
[  156.694655][ T5481] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  158.154464][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.348'.
[  159.104047][ T5524] usb usb7: check_ctrlrecip: process 5524 (syz.3.351) requesting ep 01 but needs 81
[  160.699785][ T5540] loop1: detected capacity change from 0 to 512
[  160.743890][ T5540] EXT4-fs (loop1): bad s_min_extra_isize: 544
[  160.984897][ T5546] loop4: detected capacity change from 0 to 512
[  161.163787][ T5546] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  161.180609][ T5546] EXT4-fs (loop4): Remounting filesystem read-only
[  161.188108][ T5546] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.355: invalid indirect mapped block 4278190080 (level 0)
[  161.204386][ T5546] EXT4-fs (loop4): Remounting filesystem read-only
[  161.211940][ T5546] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.355: invalid indirect mapped block 1 (level 1)
[  161.232995][ T5546] EXT4-fs (loop4): Remounting filesystem read-only
[  161.241439][ T5546] EXT4-fs (loop4): 1 truncate cleaned up
[  161.247236][ T5546] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  161.780685][ T5553] loop3: detected capacity change from 0 to 512
[  161.892401][ T5553] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.622633][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'.
[  162.860374][ T5553] EXT4-fs (loop3): 1 truncate cleaned up
[  162.901972][ T5553] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  166.462377][ T5619] loop1: detected capacity change from 0 to 512
[  166.476924][ T5617] usb usb7: check_ctrlrecip: process 5617 (syz.3.367) requesting ep 01 but needs 81
[  166.542326][ T5619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  166.570393][ T5619] System zones: 1-12
[  166.592701][ T5619] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.374: missing EA_INODE flag
[  166.633264][ T5619] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.374: error while reading EA inode 12 err=-117
[  166.695561][ T5619] EXT4-fs (loop1): 1 orphan inode deleted
[  166.701328][ T5619] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  166.842384][   T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  166.970644][ T5629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'.
[  167.801311][   T23] usb 3-1: device descriptor read/64, error -71
[  168.693985][   T23] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  169.116418][ T5654] usb usb9: usbfs: process 5654 (syz.1.377) did not claim interface 4 before use
[  170.203236][ T5668] loop1: detected capacity change from 0 to 512
[  170.366283][ T5674] loop3: detected capacity change from 0 to 512
[  170.430680][ T5668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  170.626421][ T5668] System zones: 1-12
[  170.720788][ T5668] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.387: missing EA_INODE flag
[  170.757153][ T5674] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.970594][ T5668] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.387: error while reading EA inode 12 err=-117
[  171.024913][ T5668] EXT4-fs (loop1): 1 orphan inode deleted
[  171.030691][ T5668] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  171.042721][ T5674] EXT4-fs (loop3): 1 truncate cleaned up
[  171.054713][ T5674] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  171.315923][ T5690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'.
[  174.268768][ T5719] usb usb9: usbfs: process 5719 (syz.4.397) did not claim interface 4 before use
[  174.279006][   T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  176.061907][ T5742] loop2: detected capacity change from 0 to 512
[  176.117790][ T5743] loop3: detected capacity change from 0 to 512
[  176.194757][   T23] usb 2-1: device descriptor read/64, error -71
[  176.220426][ T5748] loop1: detected capacity change from 0 to 512
[  176.421819][ T5742] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  176.484094][ T5742] System zones: 1-12
[  176.583598][ T5742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.405: missing EA_INODE flag
[  176.728084][ T5742] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.405: error while reading EA inode 12 err=-117
[  176.832809][ T5743] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.845006][ T5748] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  176.854968][ T5742] EXT4-fs (loop2): 1 orphan inode deleted
[  176.863910][ T5742] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  176.886171][ T5748] EXT4-fs (loop1): 1 truncate cleaned up
[  176.893223][ T5743] EXT4-fs (loop3): 1 truncate cleaned up
[  176.900151][ T5748] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  176.913568][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  178.391120][ T5775] loop1: detected capacity change from 0 to 512
[  179.086520][ T5775] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  179.102445][ T5775] EXT4-fs (loop1): Remounting filesystem read-only
[  179.109189][ T5775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.410: invalid indirect mapped block 4278190080 (level 0)
[  179.204522][ T5775] EXT4-fs (loop1): Remounting filesystem read-only
[  179.211400][ T5775] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.410: invalid indirect mapped block 1 (level 1)
[  179.229710][ T5775] EXT4-fs (loop1): Remounting filesystem read-only
[  179.249130][ T5775] EXT4-fs (loop1): 1 truncate cleaned up
[  179.255206][ T5775] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  181.525163][ T5813] loop3: detected capacity change from 0 to 512
[  181.557105][ T5815] loop0: detected capacity change from 0 to 512
[  181.568684][ T5813] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  181.604584][ T1111] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  181.631249][ T5813] EXT4-fs (loop3): 1 truncate cleaned up
[  181.642622][ T5813] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  181.701150][ T5815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  181.722180][ T5815] System zones: 1-12
[  181.735044][ T5815] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.423: missing EA_INODE flag
[  181.755947][ T5815] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.423: error while reading EA inode 12 err=-117
[  181.804587][ T1111] usb 2-1: device descriptor read/64, error -71
[  181.814342][ T5815] EXT4-fs (loop0): 1 orphan inode deleted
[  181.859044][ T5815] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  181.924242][ T5815] 9pnet: Insufficient options for proto=fd
[  182.084831][ T1111] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  184.217898][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'.
[  184.266622][ T5837] loop3: detected capacity change from 0 to 512
[  184.273203][ T1111] usb 2-1: device descriptor read/64, error -71
[  184.309640][ T5844] loop1: detected capacity change from 0 to 512
[  184.415368][ T1111] usb usb2-port1: attempt power cycle
[  184.449385][ T5837] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  184.466891][ T5837] EXT4-fs (loop3): Remounting filesystem read-only
[  184.474371][ T5837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.429: invalid indirect mapped block 4278190080 (level 0)
[  184.491054][ T5837] EXT4-fs (loop3): Remounting filesystem read-only
[  184.497812][ T5837] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.429: invalid indirect mapped block 1 (level 1)
[  184.512739][ T5837] EXT4-fs (loop3): Remounting filesystem read-only
[  184.522765][ T5837] EXT4-fs (loop3): 1 truncate cleaned up
[  184.528483][ T5837] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  184.640227][ T5844] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  184.785800][ T5844] EXT4-fs (loop1): 1 truncate cleaned up
[  184.841689][ T5859] loop3: detected capacity change from 0 to 512
[  184.848425][ T5844] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  184.966583][ T5859] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  185.054867][ T5859] EXT4-fs (loop3): 1 truncate cleaned up
[  185.060729][ T5859] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  185.088918][ T5863] loop0: detected capacity change from 0 to 512
[  185.276163][ T5863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  185.316816][ T5863] System zones: 1-12
[  185.374903][ T5863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.436: missing EA_INODE flag
[  185.475548][ T5863] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.436: error while reading EA inode 12 err=-117
[  185.519525][ T5863] EXT4-fs (loop0): 1 orphan inode deleted
[  185.538184][ T5863] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  185.563505][ T5863] 9pnet: Insufficient options for proto=fd
[  186.006910][ T4415] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  186.079836][ T1330] Bluetooth: hci0: command 0x0406 tx timeout
[  186.089433][ T1330] Bluetooth: hci3: command 0x0406 tx timeout
[  186.107130][ T1330] Bluetooth: hci1: command 0x0406 tx timeout
[  186.121074][ T1330] Bluetooth: hci2: command 0x0406 tx timeout
[  186.144613][ T1330] Bluetooth: hci4: command 0x0406 tx timeout
[  186.754742][ T4415] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  186.775522][ T4415] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.031404][ T4415] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  187.041520][ T4415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  187.050291][ T4415] usb 1-1: SerialNumber: syz
[  187.566817][ T4415] usb 1-1: 0:2 : does not exist
[  187.853306][ T5909] loop2: detected capacity change from 0 to 512
[  187.880519][ T4415] usb 1-1: USB disconnect, device number 2
[  187.886502][ T5910] loop4: detected capacity change from 0 to 512
[  187.889935][ T5912] loop1: detected capacity change from 0 to 512
[  187.904874][ T5909] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  187.953763][ T5910] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  187.988725][ T5909] EXT4-fs (loop2): 1 truncate cleaned up
[  188.013204][ T5912] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  188.040440][ T5909] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  188.070267][ T5912] System zones: 1-12
[  188.075360][ T5910] EXT4-fs (loop4): 1 truncate cleaned up
[  188.081170][ T5910] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  188.146095][ T5912] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.451: missing EA_INODE flag
[  188.227216][ T5912] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.451: error while reading EA inode 12 err=-117
[  188.302992][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.304162][ T5912] EXT4-fs (loop1): 1 orphan inode deleted
[  188.374760][ T5912] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  188.597001][ T5912] 9pnet: Insufficient options for proto=fd
[  188.804700][ T1330] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  189.044600][ T1330] usb 3-1: device descriptor read/64, error -71
[  189.941289][ T5943] loop1: detected capacity change from 0 to 256
[  189.944734][ T1330] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  190.061047][ T5943] FAT-fs (loop1): bogus sectors per cluster 0
[  190.085391][ T5943] FAT-fs (loop1): Can't find a valid FAT filesystem
[  190.154872][ T1330] usb 3-1: device descriptor read/64, error -71
[  192.024529][ T1330] usb usb3-port1: attempt power cycle
[  192.415574][ T5960] loop0: detected capacity change from 0 to 512
[  192.497846][ T5960] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  192.946658][ T5960] EXT4-fs (loop0): 1 truncate cleaned up
[  193.103120][ T5960] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  193.176174][ T5967] loop3: detected capacity change from 0 to 512
[  193.215977][ T5970] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  193.272914][ T5973] loop2: detected capacity change from 0 to 512
[  193.282635][ T5967] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  193.313699][ T5967] EXT4-fs (loop3): 1 truncate cleaned up
[  193.322572][ T5967] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  193.461467][ T5973] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  193.470457][ T5973] System zones: 1-12
[  193.476191][ T5973] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.470: missing EA_INODE flag
[  193.495002][ T5973] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.470: error while reading EA inode 12 err=-117
[  193.589810][ T5973] EXT4-fs (loop2): 1 orphan inode deleted
[  193.595770][ T5973] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  194.173074][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  194.179429][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  194.507648][ T1330] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  194.814652][ T1330] usb 3-1: device descriptor read/64, error -71
[  195.124935][ T1330] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  195.404680][ T1330] usb 3-1: device descriptor read/64, error -71
[  195.530084][ T1330] usb usb3-port1: attempt power cycle
[  195.687680][ T6010] loop1: detected capacity change from 0 to 512
[  195.954173][ T6010] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.394836][ T6010] EXT4-fs (loop1): 1 truncate cleaned up
[  196.400627][ T6010] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  196.496856][ T6015] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  196.512899][ T6018] loop0: detected capacity change from 0 to 512
[  196.524650][ T1330] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  196.574436][ T6023] loop3: detected capacity change from 0 to 512
[  196.603446][ T6025] loop1: detected capacity change from 0 to 512
[  196.614811][ T6023] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.628140][ T1330] usb 3-1: device descriptor read/8, error -71
[  196.636228][ T6018] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  196.712064][ T6025] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  196.728524][ T6023] EXT4-fs (loop3): 1 truncate cleaned up
[  196.734387][ T6025] System zones: 1-12
[  196.742337][ T6023] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  196.770393][ T6025] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.484: missing EA_INODE flag
[  196.792914][ T6025] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.484: error while reading EA inode 12 err=-117
[  196.814149][ T6025] EXT4-fs (loop1): 1 orphan inode deleted
[  196.820387][ T6025] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  196.914756][ T1330] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  197.039556][ T6033] usb usb7: check_ctrlrecip: process 6033 (syz.0.488) requesting ep 01 but needs 81
[  197.049854][ T6033] usb usb7: usbfs: process 6033 (syz.0.488) did not claim interface 0 before use
[  197.084746][ T1330] usb 3-1: device descriptor read/8, error -71
[  197.205173][ T1330] usb usb3-port1: unable to enumerate USB device
[  198.229593][ T6059] loop4: detected capacity change from 0 to 512
[  198.943670][ T6059] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  199.001472][ T6059] EXT4-fs (loop4): 1 truncate cleaned up
[  199.014619][ T6059] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  199.196160][ T6065] loop3: detected capacity change from 0 to 512
[  199.288820][ T6065] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  199.292098][ T6069] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  200.717077][ T6087] usb usb7: check_ctrlrecip: process 6087 (syz.4.504) requesting ep 01 but needs 81
[  200.727329][ T6087] usb usb7: usbfs: process 6087 (syz.4.504) did not claim interface 0 before use
[  201.612783][ T6093] loop4: detected capacity change from 0 to 1024
[  202.947459][ T6112] loop0: detected capacity change from 0 to 512
[  202.996409][ T6112] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  203.786739][ T6122] loop0: detected capacity change from 0 to 512
[  203.834217][ T6122] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  204.069368][ T6130] usb usb7: check_ctrlrecip: process 6130 (syz.3.517) requesting ep 01 but needs 81
[  204.079425][ T6130] usb usb7: usbfs: process 6130 (syz.3.517) did not claim interface 0 before use
[  204.180106][ T6122] EXT4-fs (loop0): 1 truncate cleaned up
[  204.206568][ T6122] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  204.863356][ T6133] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  205.915938][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  206.081822][ T6151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  207.044672][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  207.050646][ T6158] loop1: detected capacity change from 0 to 512
[  207.067730][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  207.113607][ T6158] EXT4-fs (loop1): bad s_min_extra_isize: 544
[  207.164818][ T4229] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  207.186565][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  207.210428][ T4229] usb 4-1: SerialNumber: syz
[  207.797022][ T4229] usb 4-1: 0:2 : does not exist
[  207.803119][ T4229] usb 4-1: unit 5 not found!
[  207.823708][ T4229] usb 4-1: USB disconnect, device number 3
[  208.036557][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.208732][ T6177] loop3: detected capacity change from 0 to 512
[  208.246193][ T6179] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  208.296722][ T6177] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  208.339306][ T6177] EXT4-fs (loop3): 1 truncate cleaned up
[  208.354565][ T6177] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  209.189513][ T4417] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  209.391594][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'.
[  209.764975][ T4417] usb 2-1: not running at top speed; connect to a high speed hub
[  209.905190][ T4417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.997866][ T4417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  210.059138][ T4417] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  210.076199][ T6195] loop2: detected capacity change from 0 to 512
[  210.228942][ T4417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.253694][ T6195] EXT4-fs (loop2): bad s_min_extra_isize: 544
[  210.276601][ T4417] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  210.283528][ T4417] usb 2-1: No valid video chain found.
[  210.827060][ T4417] usb 2-1: USB disconnect, device number 7
[  212.169100][ T6218] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  213.274639][ T4229] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  214.296152][ T4229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.306824][ T4229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  214.440021][ T6236] loop4: detected capacity change from 0 to 512
[  214.445022][ T4229] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  214.455757][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  214.465017][ T4229] usb 1-1: SerialNumber: syz
[  214.774086][ T6236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  214.892021][ T6236] System zones: 1-12
[  215.031798][ T6236] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #12: comm syz.4.550: missing EA_INODE flag
[  215.186626][ T6236] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.550: error while reading EA inode 12 err=-117
[  215.202137][ T6242] loop3: detected capacity change from 0 to 512
[  215.248372][ T6242] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  215.289597][ T6236] EXT4-fs (loop4): 1 orphan inode deleted
[  215.305306][ T6236] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  215.437004][ T4229] usb 1-1: 0:2 : does not exist
[  215.442310][ T4229] usb 1-1: unit 5 not found!
[  215.452906][ T4229] usb 1-1: USB disconnect, device number 3
[  217.021528][ T6236] 9pnet: Insufficient options for proto=fd
[  218.388848][ T6251] loop2: detected capacity change from 0 to 512
[  219.441102][ T6281] loop4: detected capacity change from 0 to 256
[  219.491174][ T6274] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  219.504911][ T6274] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  219.525152][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  219.688031][ T6291] loop3: detected capacity change from 0 to 512
[  220.346914][ T6291] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  220.362220][ T6291] EXT4-fs (loop3): Remounting filesystem read-only
[  220.368890][ T6291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.564: invalid indirect mapped block 4278190080 (level 0)
[  220.383795][ T6291] EXT4-fs (loop3): Remounting filesystem read-only
[  220.390435][ T6291] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.564: invalid indirect mapped block 1 (level 1)
[  220.407806][ T6291] EXT4-fs (loop3): Remounting filesystem read-only
[  220.415626][ T6291] EXT4-fs (loop3): 1 truncate cleaned up
[  220.421362][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  220.439085][ T6299] loop0: detected capacity change from 0 to 512
[  220.491636][   T26] audit: type=1800 audit(1787772716.114:2): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.562" name="file1" dev="loop4" ino=1048590 res=0 errno=0
[  220.505528][ T6281] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  221.049416][ T6299] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  221.274398][ T6299] System zones: 1-12
[  221.898907][ T6299] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.566: missing EA_INODE flag
[  222.297871][ T6299] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.566: error while reading EA inode 12 err=-117
[  222.359316][ T6299] EXT4-fs (loop0): 1 orphan inode deleted
[  222.386840][ T6299] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  222.514968][ T4229] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  222.711155][ T6321] loop2: detected capacity change from 0 to 64
[  222.712126][ T6314] loop3: detected capacity change from 0 to 32768
[  222.844899][ T4229] usb 5-1: not running at top speed; connect to a high speed hub
[  222.912986][ T6314] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  222.983779][ T6321] overlayfs: upper fs needs to support d_type.
[  222.991410][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  223.010059][ T4229] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  223.028688][ T6321] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  223.038074][ T4229] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  223.054242][ T6321] overlayfs: failed to set xattr on upper
[  223.068141][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.077633][ T6321] overlayfs: ...falling back to index=off,metacopy=off.
[  223.128617][ T4229] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  223.151433][ T4229] usb 5-1: No streaming interface found for terminal 2.
[  223.172084][ T4186] Trying to free block not in datazone
[  223.249960][ T6314] syz.3.572 (6314) used greatest stack depth: 18304 bytes left
[  223.332172][ T4229] usb 5-1: USB disconnect, device number 2
[  223.412099][ T4198] ocfs2: Unmounting device (7,3) on (node local)
[  223.488706][ T6330] loop1: detected capacity change from 0 to 32768
[  223.511583][ T6330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.577 (6330)
[  224.269988][ T6330] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  224.352152][ T6330] BTRFS info (device loop1): using free space tree
[  224.374280][ T6330] BTRFS info (device loop1): has skinny extents
[  224.380656][ T6346] loop2: detected capacity change from 0 to 1024
[  224.410407][ T6346] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  224.525401][ T6346] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: none.
[  224.637482][ T6363] loop3: detected capacity change from 0 to 512
[  224.936119][ T6363] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  224.954031][ T6363] EXT4-fs (loop3): Remounting filesystem read-only
[  224.961229][ T6363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.580: invalid indirect mapped block 4278190080 (level 0)
[  224.978927][ T6363] EXT4-fs (loop3): Remounting filesystem read-only
[  224.985544][ T6363] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.580: invalid indirect mapped block 1 (level 1)
[  225.001049][ T6363] EXT4-fs (loop3): Remounting filesystem read-only
[  225.014940][ T6363] EXT4-fs (loop3): 1 truncate cleaned up
[  225.020657][ T6363] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  225.336095][ T1111] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  225.469676][ T6330] BTRFS info (device loop1): enabling ssd optimizations
[  225.681384][ T6379] loop2: detected capacity change from 0 to 512
[  225.729837][ T1111] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.752718][ T1111] usb 5-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  225.821311][ T6379] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  225.854551][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.863527][ T6379] System zones: 1-12
[  225.901425][ T6379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.586: missing EA_INODE flag
[  225.985550][ T6379] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.586: error while reading EA inode 12 err=-117
[  226.061950][ T6379] EXT4-fs (loop2): 1 orphan inode deleted
[  226.074643][ T6379] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  226.103718][ T6388] loop0: detected capacity change from 0 to 512
[  226.148375][ T6388] EXT4-fs (loop0): inline encryption not supported
[  226.180772][ T6388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  226.229181][ T6388] EXT4-fs (loop0): 1 truncate cleaned up
[  226.257557][ T6388] EXT4-fs (loop0): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[  226.361732][ T6377] loop3: detected capacity change from 0 to 32768
[  226.411958][ T1111] wacom 0003:056A:033B.0008: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  226.429912][ T6377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.587 (6377)
[  226.457093][ T1111] wacom 0003:056A:033B.0008: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.4-1/input0
[  226.507700][ T1111] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:033B.0008/input/input5
[  226.540963][ T6396] loop2: detected capacity change from 0 to 1024
[  226.597312][ T6377] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  226.673389][ T6377] BTRFS info (device loop3): using free space tree
[  226.703583][ T6377] BTRFS info (device loop3): has skinny extents
[  226.735560][ T6396] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 2: comm syz.2.591: lblock 2 mapped to illegal pblock 2 (length 1)
[  226.795193][ T6396] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  226.834687][ T6396] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz.2.591: Invalid inode table block 1 in block_group 0
[  226.859955][ T6396] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  226.870186][ T6396] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.591: mark_inode_dirty error
[  226.889947][ T6396] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  226.917677][ T6396] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.591: Failed to acquire dquot type 0
[  226.936498][ T6396] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  226.952242][ T6396] EXT4-fs error (device loop2): ext4_evict_inode:284: inode #11: comm syz.2.591: mark_inode_dirty error
[  226.972587][ T6396] EXT4-fs warning (device loop2): ext4_evict_inode:287: couldn't mark inode dirty (err -117)
[  226.985775][ T6396] EXT4-fs (loop2): 1 orphan inode deleted
[  226.991701][ T6396] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,noblock_validity,grpquota,max_batch_time=0x00000000000008c9,,errors=continue. Quota mode: writeback.
[  227.022179][  T144] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #3: block 1: comm kworker/u4:1: lblock 1 mapped to illegal pblock 1 (length 1)
[  227.052831][  T144] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  227.068320][  T144] EXT4-fs error (device loop2): ext4_release_dquot:6272: comm kworker/u4:1: Failed to release dquot type 0
[  227.085737][ T4229] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  227.109910][ T6383] usb 5-1: USB disconnect, device number 3
[  227.174998][ T6377] BTRFS info (device loop3): enabling ssd optimizations
[  227.189855][ T4186] EXT4-fs error (device loop2): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 1 in block_group 0
[  227.284616][ T4186] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  227.313744][ T4186] EXT4-fs error (device loop2): ext4_quota_off:6542: inode #3: comm syz-executor: mark_inode_dirty error
[  227.427681][ T4229] usb 2-1: not running at top speed; connect to a high speed hub
[  227.528540][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  227.545136][ T4229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  227.557246][ T6432] loop2: detected capacity change from 0 to 1024
[  227.564334][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  227.599991][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.657044][ T4229] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  227.669590][ T4229] usb 2-1: No streaming interface found for terminal 2.
[  227.699802][ T6421] Built 2 zonelists, mobility grouping on.  Total pages: 1651765
[  227.733849][ T6421] Policy zone: Normal
[  227.858901][ T6440] loop3: detected capacity change from 0 to 512
[  228.044740][ T1108] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  228.109274][ T4415] usb 2-1: USB disconnect, device number 8
[  228.136008][ T6440] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  228.153974][ T6440] EXT4-fs (loop3): Remounting filesystem read-only
[  228.161351][ T6440] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.596: invalid indirect mapped block 4278190080 (level 0)
[  228.186311][ T6440] EXT4-fs (loop3): Remounting filesystem read-only
[  228.192967][ T6440] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.596: invalid indirect mapped block 1 (level 1)
[  228.208763][ T6440] EXT4-fs (loop3): Remounting filesystem read-only
[  228.216878][ T6440] EXT4-fs (loop3): 1 truncate cleaned up
[  228.222648][ T6440] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  228.644916][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.698420][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.726947][ T6450] loop3: detected capacity change from 0 to 1024
[  228.752175][ T6448] loop0: detected capacity change from 0 to 2048
[  228.768830][ T6450] EXT4-fs (loop3): Ignoring removed bh option
[  228.795369][ T6452] loop1: detected capacity change from 0 to 512
[  228.812334][ T6450] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  228.836707][ T1108] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  228.854532][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.862739][ T1108] usb 5-1: SerialNumber: syz
[  228.903613][ T6455] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  229.011151][ T6452] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002]
[  229.047935][ T6452] System zones: 1-12
[  229.113369][ T6452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.602: missing EA_INODE flag
[  229.125757][ T6448] attempt to access beyond end of device
[  229.125757][ T6448] loop0: rw=0, want=2198922592330, limit=2048
[  229.146952][ T1108] usb 5-1: 0:2 : does not exist
[  229.157596][ T1108] usb 5-1: unit 5: unexpected type 0x03
[  229.170962][ T1108] usb 5-1: USB disconnect, device number 4
[  229.194922][ T6448] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1)
[  229.214761][ T6452] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.602: error while reading EA inode 12 err=-117
[  229.302949][ T6452] EXT4-fs (loop1): 1 orphan inode deleted
[  229.328664][ T6452] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback.
[  229.464197][ T6465] loop0: detected capacity change from 0 to 1764
[  229.473216][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.513681][ T6465] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  229.582719][ T6465] iso9660: Corrupted directory entry in block 2 of inode 1920
[  230.240911][ T6461] XFS (loop3): Mounting V5 Filesystem
[  230.324241][ T6461] XFS (loop3): Ending clean mount
[  230.368575][   T26] audit: type=1800 audit(1787772725.994:3): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.603" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  230.423146][ T6461] XFS (loop3): User initiated shutdown received.
[  230.465960][ T6461] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  230.728749][ T6461] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  231.232587][ T4198] XFS (loop3): Unmounting Filesystem
[  231.320505][ T6493] set_capacity_and_notify: 5 callbacks suppressed
[  231.320520][ T6493] loop0: detected capacity change from 0 to 1024
[  231.423656][ T6493] EXT4-fs (loop0): Ignoring removed orlov option
[  231.458139][ T6495] loop2: detected capacity change from 0 to 256
[  231.472669][ T6493] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  231.535175][ T6493] EXT4-fs (loop0): orphan cleanup on readonly fs
[  231.622239][ T6493] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.614: Invalid inode table block 0 in block_group 0
[  231.678621][ T6475] loop1: detected capacity change from 0 to 32768
[  231.802176][ T6493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  231.814238][ T6493] EXT4-fs error (device loop0): ext4_quota_write:6648: inode #3: comm syz.0.614: mark_inode_dirty error
[  231.826395][ T6493] Quota error (device loop0): write_blk: dquota write failed
[  231.833834][ T6493] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  231.847906][ T6493] EXT4-fs error (device loop0): ext4_acquire_dquot:6236: comm syz.0.614: Failed to acquire dquot type 0
[  231.863512][ T6493] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.614: Invalid inode table block 0 in block_group 0
[  231.873593][ T6475] XFS (loop1): Mounting V5 Filesystem
[  231.883604][ T6493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  231.895887][ T6493] EXT4-fs error (device loop0): ext4_ext_truncate:4487: inode #15: comm syz.0.614: mark_inode_dirty error
[  231.960773][ T6493] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.614: Invalid inode table block 0 in block_group 0
[  231.989777][ T6493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  232.036302][ T6475] XFS (loop1): Ending clean mount
[  232.061307][ T6493] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  232.137897][ T6493] EXT4-fs error (device loop0): __ext4_get_inode_loc:4334: comm syz.0.614: Invalid inode table block 0 in block_group 0
[  232.177769][ T6493] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  232.224191][ T6475] XFS (loop1): User initiated shutdown received.
[  232.261773][ T6475] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  232.264908][ T6493] EXT4-fs error (device loop0): ext4_truncate:4286: inode #15: comm syz.0.614: mark_inode_dirty error
[  232.304584][ T6475] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  232.344634][ T6493] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  232.362056][ T6493] EXT4-fs (loop0): 1 truncate cleaned up
[  232.374794][ T4190] XFS (loop1): Unmounting Filesystem
[  232.381403][ T6493] EXT4-fs (loop0): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,usrjquota=,barrier=0x0000000000000101,data_err=ignore,noblock_validity,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  232.468524][ T6524] loop3: detected capacity change from 0 to 2048
[  232.529106][ T6511] loop2: detected capacity change from 0 to 32768
[  232.568595][ T6493] EXT4-fs (loop0): shut down requested (2)
[  232.586609][ T6511] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.618 (6511)
[  232.611654][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  232.667733][ T6511] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  232.684305][ T6511] BTRFS info (device loop2): setting nodatasum
[  232.713581][ T6511] BTRFS info (device loop2): force zlib compression, level 3
[  232.732258][ T6511] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  232.750032][ T6511] BTRFS info (device loop2): use lzo compression, level 0
[  232.814042][ T6511] BTRFS info (device loop2): turning on flush-on-commit
[  232.834763][ T6511] BTRFS info (device loop2): enabling auto defrag
[  232.841371][ T6511] BTRFS info (device loop2): max_inline at 4096
[  232.876520][ T6511] BTRFS info (device loop2): using free space tree
[  232.883207][ T6511] BTRFS info (device loop2): has skinny extents
[  232.976438][ T6521] loop4: detected capacity change from 0 to 32768
[  233.078469][ T6521] XFS (loop4): Mounting V5 Filesystem
[  233.134742][ T6521] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  233.218128][ T6521] XFS (loop4): Tail block (0x29) overwrite detected. Updated to 0x30
[  233.291420][ T6521] XFS (loop4): Ending clean mount
[  233.324637][ T6526] loop0: detected capacity change from 0 to 32768
[  233.375630][ T6526] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.623 (6526)
[  233.407851][ T6521] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  233.422122][ T6521] XFS (loop4): Unmount and run xfs_repair
[  233.428045][ T6521] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  233.436156][ T6521] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  233.442819][ T6511] BTRFS info (device loop2): enabling ssd optimizations
[  233.445289][ T6521] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  233.462478][ T6521] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  233.490281][ T6521] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  233.574794][ T6521] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  233.597868][   T26] audit: type=1800 audit(1787772729.224:4): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.618" name="file1" dev="loop2" ino=260 res=0 errno=0
[  233.627951][ T4179] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by udevd (4179)
[  233.669951][ T6521] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  233.679716][ T6521] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  233.690011][ T6521] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  233.701770][ T6558] XFS (loop4): Metadata corruption detected at xfs_dinode_verify+0x2bf/0xd50, inode 0x1803 dinode
[  233.745155][ T6558] XFS (loop4): Unmount and run xfs_repair
[  233.750982][ T6558] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  233.769677][ T6558] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[  233.963762][ T6558] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.204153][ T6558] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[  234.344761][ T6558] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[  234.353842][ T6558] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.454916][ T6558] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[  234.464218][ T6558] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[  234.485071][ T6558] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[  234.533464][ T4187] XFS (loop4): Unmounting Filesystem
[  234.543137][ T6539] loop3: detected capacity change from 0 to 40427
[  234.690656][ T6539] F2FS-fs (loop3): Fix alignment : internally, start(4096) end(16896) block(12288)
[  234.986963][ T6539] F2FS-fs (loop3): invalid crc value
[  235.113470][ T6530] loop1: detected capacity change from 0 to 32768
[  235.254919][ T6539] F2FS-fs (loop3): Found nat_bits in checkpoint
[  235.327860][ T6530] XFS (loop1): Mounting V5 Filesystem
[  235.437186][ T6530] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  235.445296][ T6539] F2FS-fs (loop3): recover fsync data on readonly fs
[  235.461118][ T6530] XFS (loop1): Tail block (0x29) overwrite detected. Updated to 0x30
[  235.478665][ T6539] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  235.502754][ T6530] XFS (loop1): Ending clean mount
[  235.548574][ T6539] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  235.668368][ T6539] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  235.771921][ T6539] F2FS-fs (loop3): Try to recover all the superblocks, ret: 0
[  235.819733][ T4190] XFS (loop1): Unmounting Filesystem
[  235.892324][ T6599] loop4: detected capacity change from 0 to 512
[  235.952741][ T6599] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  236.045316][ T6599] EXT4-fs (loop4): 1 truncate cleaned up
[  236.051000][ T6599] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  236.483950][ T6613] loop0: detected capacity change from 0 to 512
[  236.789038][ T6614] loop4: detected capacity change from 0 to 256
[  236.927733][ T6615] loop1: detected capacity change from 0 to 512
[  237.125267][ T6613] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  237.149771][ T6613] EXT4-fs (loop0): Remounting filesystem read-only
[  237.156975][ T6613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.634: invalid indirect mapped block 4278190080 (level 0)
[  237.173844][ T6615] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  237.191056][ T6613] EXT4-fs (loop0): Remounting filesystem read-only
[  237.197779][ T6613] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.634: invalid indirect mapped block 1 (level 1)
[  237.212729][ T6613] EXT4-fs (loop0): Remounting filesystem read-only
[  237.251092][ T6615] EXT4-fs (loop1): 1 truncate cleaned up
[  237.257070][ T6615] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  237.348196][ T6613] EXT4-fs (loop0): 1 truncate cleaned up
[  237.354296][ T6613] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  239.042653][ T6640] loop2: detected capacity change from 0 to 512
[  240.274731][ T6640] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  240.305003][ T6640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  240.402159][ T6652] loop3: detected capacity change from 0 to 2048
[  240.431286][ T6640] EXT4-fs (loop2): 1 truncate cleaned up
[  240.438246][ T6640] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none.
[  240.472223][ T6634] loop4: detected capacity change from 0 to 32768
[  240.524750][ T6634] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.638 (6634)
[  240.532167][ T6652] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  240.591898][ T6634] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  240.624690][ T6634] BTRFS info (device loop4): setting nodatacow, compression disabled
[  240.663426][ T6634] BTRFS info (device loop4): setting datasum, datacow enabled
[  240.693806][ T6658] loop2: detected capacity change from 0 to 24
[  240.714646][ T6634] BTRFS info (device loop4): disabling tree log
[  240.732433][ T6652] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.770391][ T6634] BTRFS info (device loop4): enabling ssd optimizations
[  240.803754][ T6634] BTRFS info (device loop4): using spread ssd allocation scheme
[  240.828818][ T6635] loop0: detected capacity change from 0 to 32768
[  240.852352][   T26] audit: type=1800 audit(1787772736.464:5): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.643" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  240.894750][ T6634] BTRFS info (device loop4): turning on sync discard
[  240.903149][ T6634] BTRFS info (device loop4): turning off barriers
[  240.961161][ T6634] BTRFS info (device loop4): setting nodatacow, compression disabled
[  241.014573][ T6634] BTRFS info (device loop4): allowing degraded mounts
[  241.021370][ T6634] BTRFS info (device loop4): enabling tree log
[  241.137981][ T6667] loop2: detected capacity change from 0 to 512
[  241.234740][ T6634] BTRFS info (device loop4): using free space tree
[  241.330362][ T6634] BTRFS info (device loop4): has skinny extents
[  241.394926][ T6667] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  241.413526][ T6667] EXT4-fs (loop2): Remounting filesystem read-only
[  241.420814][ T6667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.647: invalid indirect mapped block 4278190080 (level 0)
[  241.437786][ T6667] EXT4-fs (loop2): Remounting filesystem read-only
[  241.444758][ T6667] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.647: invalid indirect mapped block 1 (level 1)
[  241.459712][ T6667] EXT4-fs (loop2): Remounting filesystem read-only
[  241.467978][ T6667] EXT4-fs (loop2): 1 truncate cleaned up
[  241.473945][ T6667] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  241.939936][ T6673] loop3: detected capacity change from 0 to 1024
[  241.953400][ T6634] BTRFS error (device loop4): open_ctree failed: -12
[  243.194713][ T1330] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  243.493205][ T4179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (4179)
[  244.405147][ T1330] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.500752][ T1330] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.724713][ T1330] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  244.726330][ T6726] loop3: detected capacity change from 0 to 128
[  244.754166][ T1330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  244.770113][ T1330] usb 1-1: SerialNumber: syz
[  244.812308][ T6726] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  244.901644][ T6729] loop2: detected capacity change from 0 to 512
[  245.122436][ T6726] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.273007][ T6729] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  245.297983][ T6729] EXT4-fs (loop2): Remounting filesystem read-only
[  245.305172][ T6729] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.660: invalid indirect mapped block 4278190080 (level 0)
[  245.323099][ T6729] EXT4-fs (loop2): Remounting filesystem read-only
[  245.329765][ T6729] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.660: invalid indirect mapped block 1 (level 1)
[  245.346355][ T6729] EXT4-fs (loop2): Remounting filesystem read-only
[  245.354111][ T6729] EXT4-fs (loop2): 1 truncate cleaned up
[  245.359958][ T6729] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  245.648262][ T1330] usb 1-1: 0:2 : does not exist
[  245.653201][ T1330] usb 1-1: unit 5 not found!
[  245.682281][ T6726] ext2 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.775886][ T1330] usb 1-1: USB disconnect, device number 4
[  245.931101][ T6733] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  245.957413][ T6739] loop0: detected capacity change from 0 to 4096
[  245.959896][ T6733] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  245.997371][ T6739] ntfs3: Unknown parameter 'nocase'
[  246.027685][ T6711] loop1: detected capacity change from 0 to 32768
[  246.035331][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.440142][ T6711] 
[  246.440142][ T6711]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  246.440142][ T6711] 
[  247.135488][ T4190] 
[  247.135488][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.135488][ T4190] 
[  247.180752][ T6753] loop3: detected capacity change from 0 to 2048
[  247.187464][ T4190] 
[  247.187464][ T4190]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  247.187464][ T4190] 
[  247.253589][ T6753] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  247.337104][ T6741] loop2: detected capacity change from 0 to 32768
[  248.694693][ T6758] loop4: detected capacity change from 0 to 32768
[  248.760565][ T6758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.671 (6758)
[  248.817106][ T6758] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  248.834548][ T6758] BTRFS info (device loop4): using free space tree
[  248.841248][ T6758] BTRFS info (device loop4): has skinny extents
[  248.884541][ T6760] loop2: detected capacity change from 0 to 40427
[  248.894693][ T4415] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  249.286478][ T6760] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  249.302929][ T6780] loop3: detected capacity change from 0 to 256
[  249.310109][ T4415] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.341683][ T6760] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  249.348157][ T6782] loop0: detected capacity change from 0 to 256
[  249.356758][ T4415] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.359247][ T6760] F2FS-fs (loop2): invalid crc value
[  249.372641][ T6780] FAT-fs (loop3): Unrecognized mount option "smackfsroot=iochar" or missing value
[  249.395329][ T6782] exfat: Deprecated parameter 'utf8'
[  249.404630][ T6760] F2FS-fs (loop2): Found nat_bits in checkpoint
[  249.444792][ T4415] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  249.454209][ T4415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  249.462329][ T4415] usb 2-1: SerialNumber: syz
[  249.476502][ T6782] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xd956ea23, utbl_chksum : 0xe619d30d)
[  249.577294][ T6760] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  249.608878][ T6760] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  249.683711][ T6758] BTRFS info (device loop4): enabling ssd optimizations
[  249.757535][ T4415] usb 2-1: 0:2 : does not exist
[  249.762519][ T4415] usb 2-1: unit 5 not found!
[  249.802119][ T4415] usb 2-1: USB disconnect, device number 9
[  250.013196][ T6808] loop0: detected capacity change from 0 to 2048
[  250.153059][ T4179] udevd[4179]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  251.134308][ T6818] loop1: detected capacity change from 0 to 4096
[  251.432212][ T6818] EXT4-fs (loop1): Test dummy encryption mode enabled
[  251.450191][ T6818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003]
[  251.465842][ T6818] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  251.633094][ T6818] EXT4-fs (loop1): Test dummy encryption mode enabled
[  251.706559][ T6818] EXT4-fs (loop1): re-mounted. Opts: debug,min_batch_time=0x0000000000000004,noblock_validity,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,. Quota mode: writeback.
[  252.078211][ T6818] EXT4-fs (loop1): Remounting file system with no journal so ignoring journalled data option
[  252.097157][ T6818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003]
[  252.115414][ T6818] System zones: 0-5
[  252.140366][ T6818] EXT4-fs (loop1): re-mounted. Opts: journal_ioprio=0x0000000000000001,delalloc,init_itable,grpjquota=,data=writeback,noblock_validity,minixdf,block_validity,acl,max_batch_time=0x0000000000000006,. Quota mode: writeback.
[  253.232855][ T6826] loop0: detected capacity change from 0 to 32768
[  253.476736][ T6826] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.684 (6826)
[  254.001727][ T6826] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  254.061889][ T6826] BTRFS info (device loop0): using free space tree
[  254.119041][ T6826] BTRFS info (device loop0): has skinny extents
[  254.749811][ T6868] loop3: detected capacity change from 0 to 64
[  254.766010][ T6843] loop4: detected capacity change from 0 to 32768
[  254.823143][ T6868] attempt to access beyond end of device
[  254.823143][ T6868] loop3: rw=0, want=2321, limit=64
[  254.845690][ T6868] Buffer I/O error on dev loop3, logical block 2320, async page read
[  254.862880][ T6868] attempt to access beyond end of device
[  254.862880][ T6868] loop3: rw=0, want=2322, limit=64
[  254.911212][ T6868] Buffer I/O error on dev loop3, logical block 2321, async page read
[  254.919676][ T6868] attempt to access beyond end of device
[  254.919676][ T6868] loop3: rw=0, want=2323, limit=64
[  254.930844][ T6868] Buffer I/O error on dev loop3, logical block 2322, async page read
[  254.943154][ T6826] BTRFS error (device loop0): open_ctree failed: -12
[  254.951381][ T6868] attempt to access beyond end of device
[  254.951381][ T6868] loop3: rw=0, want=2324, limit=64
[  254.956622][ T6843] XFS (loop4): Mounting V5 Filesystem
[  254.963152][ T6868] Buffer I/O error on dev loop3, logical block 2323, async page read
[  254.976767][ T6868] hfs: unable to open catalog tree
[  254.993494][ T6868] hfs: can't find a HFS filesystem on dev loop3
[  255.010871][ T6838] loop2: detected capacity change from 0 to 32768
[  255.072552][ T6843] XFS (loop4): Ending clean mount
[  255.236222][ T6838] XFS (loop2): Mounting V5 Filesystem
[  255.278906][ T6850] loop1: detected capacity change from 0 to 32768
[  255.287142][ T6889] loop3: detected capacity change from 0 to 64
[  255.292206][ T6843] XFS (loop4): User initiated shutdown received.
[  255.305284][ T6843] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  255.325461][ T6843] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  255.328862][ T6838] XFS (loop2): Ending clean mount
[  255.362647][ T6889] attempt to access beyond end of device
[  255.362647][ T6889] loop3: rw=0, want=2321, limit=64
[  255.399741][ T6889] Buffer I/O error on dev loop3, logical block 2320, async page read
[  255.417132][ T6889] attempt to access beyond end of device
[  255.417132][ T6889] loop3: rw=0, want=2322, limit=64
[  255.436704][ T6889] Buffer I/O error on dev loop3, logical block 2321, async page read
[  255.474167][ T6889] attempt to access beyond end of device
[  255.474167][ T6889] loop3: rw=0, want=2323, limit=64
[  255.487804][ T4187] XFS (loop4): Unmounting Filesystem
[  255.494577][ T6889] Buffer I/O error on dev loop3, logical block 2322, async page read
[  255.538821][ T6850] XFS (loop1): Mounting V5 Filesystem
[  255.548664][ T6889] attempt to access beyond end of device
[  255.548664][ T6889] loop3: rw=0, want=2324, limit=64
[  255.559828][ T6889] Buffer I/O error on dev loop3, logical block 2323, async page read
[  255.606816][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  255.608745][ T4186] XFS (loop2): Unmounting Filesystem
[  255.613169][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  255.627590][ T6889] hfs: unable to open catalog tree
[  255.632892][ T6889] hfs: can't find a HFS filesystem on dev loop3
[  255.681119][ T6850] XFS (loop1): Ending clean mount
[  255.749189][ T6889] loop3: detected capacity change from 0 to 256
[  256.168585][ T4190] XFS (loop1): Unmounting Filesystem
[  256.254870][ T4415] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  256.754778][ T4415] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.797230][ T4415] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.924878][ T4415] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  256.944953][ T4415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  256.977539][ T4415] usb 5-1: SerialNumber: syz
[  257.332422][ T4415] usb 5-1: 0:2 : does not exist
[  257.344565][ T4415] usb 5-1: unit 5 not found!
[  257.401029][ T4415] usb 5-1: USB disconnect, device number 5
[  257.670198][ T6910] loop2: detected capacity change from 0 to 40427
[  257.754383][ T6910] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  257.762656][ T6914] loop0: detected capacity change from 0 to 512
[  257.769788][ T6910] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  257.807983][ T6917] loop4: detected capacity change from 0 to 512
[  257.831686][ T6914] EXT4-fs (loop0): Ignoring removed oldalloc option
[  257.843318][ T6910] F2FS-fs (loop2): invalid crc value
[  257.867799][ T6917] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  257.919537][ T6910] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  257.965669][ T6914] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,dioread_lock,oldalloc,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  257.989815][ T6921] netlink: 'syz.1.697': attribute type 3 has an invalid length.
[  258.071630][ T6917] EXT4-fs (loop4): 1 truncate cleaned up
[  258.079410][ T6917] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  258.171357][ T6910] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  258.190436][ T6910] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  258.224911][ T6930] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.292293][ T6930] EXT4-fs (loop3): 1 truncate cleaned up
[  258.350317][ T6930] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  258.425437][   T26] audit: type=1800 audit(1787772754.054:6): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.699" name="file1" dev="loop0" ino=20 res=0 errno=0
[  258.483193][ T6910] attempt to access beyond end of device
[  258.483193][ T6910] loop2: rw=10241, want=53256, limit=40427
[  258.591763][ T4186] attempt to access beyond end of device
[  258.591763][ T4186] loop2: rw=2049, want=45104, limit=40427
[  259.426208][ T6944] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  259.435856][ T6944] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  259.965685][ T6958] netlink: 164 bytes leftover after parsing attributes in process `syz.0.710'.
[  260.896397][ T6962] set_capacity_and_notify: 1 callbacks suppressed
[  260.896411][ T6962] loop2: detected capacity change from 0 to 32768
[  261.004639][ T6962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.705 (6962)
[  261.033465][ T6964] loop0: detected capacity change from 0 to 32768
[  261.044697][ T6970] loop1: detected capacity change from 0 to 8
[  261.051350][ T6962] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  261.062979][ T6962] BTRFS info (device loop2): setting nodatasum
[  261.129339][ T6962] BTRFS info (device loop2): force zlib compression, level 3
[  261.145681][ T6962] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  261.157271][ T6962] BTRFS info (device loop2): use lzo compression, level 0
[  261.164586][ T6962] BTRFS info (device loop2): turning on flush-on-commit
[  261.201594][ T6962] BTRFS info (device loop2): enabling auto defrag
[  261.208343][ T6962] BTRFS info (device loop2): max_inline at 4096
[  261.214800][ T6962] BTRFS info (device loop2): using free space tree
[  261.224905][ T6962] BTRFS info (device loop2): has skinny extents
[  261.405166][ T6964] XFS (loop0): Mounting V5 Filesystem
[  261.448902][ T6988] loop4: detected capacity change from 0 to 512
[  261.493827][ T6964] XFS (loop0): Ending clean mount
[  261.520826][ T6962] BTRFS info (device loop2): enabling ssd optimizations
[  261.524896][ T6968] loop3: detected capacity change from 0 to 32768
[  261.596467][ T6968] BTRFS: device fsid 9399ba92-402c-46cb-a272-9c4c6c4f62f5 devid 1 transid 8 /dev/loop3 scanned by syz.3.714 (6968)
[  261.609853][ T6988] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  261.625772][ T4185] XFS (loop0): Unmounting Filesystem
[  261.635243][ T6968] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  261.643904][ T6968] BTRFS info (device loop3): using free space tree
[  261.717477][   T26] audit: type=1800 audit(1787772757.344:7): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.705" name="file1" dev="loop2" ino=260 res=0 errno=0
[  261.734681][ T6968] BTRFS info (device loop3): has skinny extents
[  261.793794][ T6988] EXT4-fs (loop4): 1 truncate cleaned up
[  261.822236][ T6988] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  262.238184][ T6968] BTRFS info (device loop3): enabling ssd optimizations
[  262.974551][ T4273] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  263.167280][ T7036] loop0: detected capacity change from 0 to 32768
[  263.348797][ T4273] usb 5-1: not running at top speed; connect to a high speed hub
[  263.361213][ T7040] loop2: detected capacity change from 0 to 32768
[  263.454734][ T4273] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  263.488724][ T4273] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  263.493128][ T7040] XFS (loop2): Mounting V5 Filesystem
[  263.519713][ T4273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.578686][ T4273] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  263.585670][ T4273] usb 5-1: No streaming interface found for terminal 2.
[  263.669512][ T7053] netlink: 164 bytes leftover after parsing attributes in process `syz.3.724'.
[  263.679718][ T7040] XFS (loop2): Ending clean mount
[  263.804507][ T4259] usb 5-1: USB disconnect, device number 6
[  264.091625][ T4186] XFS (loop2): Unmounting Filesystem
[  265.437217][ T7069] loop4: detected capacity change from 0 to 32768
[  265.484975][ T7069] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.730 (7069)
[  265.685129][ T7069] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  265.693872][ T7069] BTRFS info (device loop4): setting nodatasum
[  265.754636][ T7069] BTRFS info (device loop4): force zlib compression, level 3
[  265.762723][ T7069] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  265.787136][ T7078] loop0: detected capacity change from 0 to 512
[  265.808461][ T7069] BTRFS info (device loop4): use lzo compression, level 0
[  265.824969][ T7069] BTRFS info (device loop4): turning on flush-on-commit
[  265.852439][ T7069] BTRFS info (device loop4): enabling auto defrag
[  265.899163][ T7078] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  265.959590][ T7069] BTRFS info (device loop4): max_inline at 4096
[  266.241167][ T7069] BTRFS info (device loop4): using free space tree
[  266.421319][ T7078] EXT4-fs (loop0): 1 truncate cleaned up
[  266.453173][ T7069] BTRFS info (device loop4): has skinny extents
[  266.523760][ T7078] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  266.793184][ T7104] loop2: detected capacity change from 0 to 512
[  266.865014][ T7069] BTRFS info (device loop4): enabling ssd optimizations
[  266.880308][ T7104] EXT4-fs (loop2): Ignoring removed oldalloc option
[  266.937285][ T7075] loop3: detected capacity change from 0 to 32768
[  266.964402][ T7104] EXT4-fs (loop2): Ignoring removed oldalloc option
[  266.996156][ T7104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.735: inode #1: comm syz.2.735: iget: illegal inode #
[  267.029031][ T7075] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.732 (7075)
[  267.036087][ T7104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.735: error while reading EA inode 1 err=-117
[  267.096992][ T7075] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  267.112290][ T7104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.735: inode #1: comm syz.2.735: iget: illegal inode #
[  267.132063][ T7075] BTRFS info (device loop3): using free space tree
[  267.157370][ T7104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.735: error while reading EA inode 1 err=-117
[  267.181881][ T7104] EXT4-fs (loop2): 1 orphan inode deleted
[  267.211176][ T7075] BTRFS info (device loop3): has skinny extents
[  267.211617][ T7104] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000005c,minixdf,oldalloc,grpquota,usrjquota=,oldalloc,,errors=continue. Quota mode: writeback.
[  267.528596][ T7075] BTRFS info (device loop3): enabling ssd optimizations
[  267.614657][ T6587] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  267.856515][ T6587] usb 1-1: Using ep0 maxpacket: 32
[  267.977001][ T6587] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  267.990325][ T6587] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  268.030534][ T6587] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  268.043519][ T6587] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  268.064843][ T6587] usb 1-1: config 0 interface 0 has no altsetting 0
[  268.244741][ T6587] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  268.254019][ T6587] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  268.267617][ T6587] usb 1-1: Product: syz
[  268.271892][ T6587] usb 1-1: Manufacturer: syz
[  268.278072][ T6587] usb 1-1: SerialNumber: syz
[  268.298313][ T6587] usb 1-1: config 0 descriptor??
[  268.347400][ T6587] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  268.403483][ T6587] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  268.688819][    T7] usb 1-1: USB disconnect, device number 5
[  268.710688][ T7121] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  268.752525][    T7] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  268.761241][ T7153] ldusb: No device or device unplugged -19
[  268.788566][ T4227] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  269.134804][ T4227] usb 5-1: not running at top speed; connect to a high speed hub
[  269.234773][ T4227] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  269.269085][ T4227] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  269.288644][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.367222][ T4227] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  269.374166][ T4227] usb 5-1: No streaming interface found for terminal 2.
[  269.570261][ T4226] usb 5-1: USB disconnect, device number 7
[  269.601073][ T7185] WARNING! power/level is deprecated; use power/control instead
[  270.854638][ T4227] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  271.104588][ T4227] usb 5-1: Using ep0 maxpacket: 8
[  271.224608][ T4227] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  271.232885][ T4227] usb 5-1: config 179 has no interface number 0
[  271.254544][ T4227] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  271.274533][ T4227] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  271.309440][ T4227] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  271.334508][ T4227] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  271.367513][ T4227] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  271.409557][ T4227] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  271.434590][ T4227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.484975][ T7195] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  271.710836][ T6382] usb 5-1: USB disconnect, device number 8
[  271.724548][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  272.549440][ T7226] loop4: detected capacity change from 0 to 512
[  273.092002][ T7226] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  273.110575][ T7226] EXT4-fs (loop4): Remounting filesystem read-only
[  273.118610][ T7226] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.767: invalid indirect mapped block 4278190080 (level 0)
[  273.146638][ T7226] EXT4-fs (loop4): Remounting filesystem read-only
[  273.153422][ T7226] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.767: invalid indirect mapped block 1 (level 1)
[  273.173191][ T7226] EXT4-fs (loop4): Remounting filesystem read-only
[  273.182807][ T7226] EXT4-fs (loop4): 1 truncate cleaned up
[  273.188781][ T7226] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  274.694533][ T4227] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  275.044681][ T4227] usb 3-1: not running at top speed; connect to a high speed hub
[  275.127705][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.151549][ T4227] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  275.194070][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.267039][ T4227] usb 3-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  275.273980][ T4227] usb 3-1: No streaming interface found for terminal 2.
[  275.470386][ T4227] usb 3-1: USB disconnect, device number 11
[  275.660736][ T7274] loop1: detected capacity change from 0 to 512
[  275.745017][ T7274] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  275.767453][ T7274] EXT4-fs (loop1): Remounting filesystem read-only
[  275.774138][ T7274] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.781: invalid indirect mapped block 4278190080 (level 0)
[  275.788483][ T7274] EXT4-fs (loop1): Remounting filesystem read-only
[  275.795753][ T7274] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.781: invalid indirect mapped block 1 (level 1)
[  275.810151][ T7274] EXT4-fs (loop1): Remounting filesystem read-only
[  275.817893][ T7274] EXT4-fs (loop1): 1 truncate cleaned up
[  275.823677][ T7274] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  277.844570][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'.
[  279.509910][ T7327] loop3: detected capacity change from 0 to 512
[  279.598899][ T7327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  279.615058][ T7327] EXT4-fs (loop3): Remounting filesystem read-only
[  279.621896][ T7327] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.795: invalid indirect mapped block 4278190080 (level 0)
[  279.643215][ T7327] EXT4-fs (loop3): Remounting filesystem read-only
[  279.649841][ T7327] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.795: invalid indirect mapped block 1 (level 1)
[  279.690940][ T7327] EXT4-fs (loop3): Remounting filesystem read-only
[  279.700370][ T7327] EXT4-fs (loop3): 1 truncate cleaned up
[  279.706884][ T7327] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  279.964731][ T7338] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  279.978796][ T7338] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  280.050502][ T6691] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  280.172899][ T7347] loop4: detected capacity change from 0 to 512
[  280.184393][ T7348] syz.3.801 uses obsolete (PF_INET,SOCK_PACKET)
[  280.266811][ T7347] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.800: inode has both inline data and extents flags
[  280.321333][ T7347] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.800: couldn't read orphan inode 15 (err -117)
[  280.334087][ T7347] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback.
[  280.365241][ T7352] loop2: detected capacity change from 0 to 512
[  280.435475][ T6691] usb 2-1: not running at top speed; connect to a high speed hub
[  280.552893][ T6691] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  280.877720][ T6691] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  281.104554][ T6691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.114478][ T7352] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  281.166939][ T7352] EXT4-fs (loop2): 1 truncate cleaned up
[  281.172620][ T7352] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  281.250896][ T6691] usb 2-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  281.258413][ T6691] usb 2-1: No streaming interface found for terminal 2.
[  281.430884][   T23] usb 2-1: USB disconnect, device number 10
[  281.650750][ T7373] loop0: detected capacity change from 0 to 512
[  281.712980][ T7373] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  281.728265][ T7373] EXT4-fs (loop0): Remounting filesystem read-only
[  281.736448][ T7373] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.809: invalid indirect mapped block 4278190080 (level 0)
[  281.754350][ T7373] EXT4-fs (loop0): Remounting filesystem read-only
[  281.761046][ T7373] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.809: invalid indirect mapped block 1 (level 1)
[  281.777560][ T7373] EXT4-fs (loop0): Remounting filesystem read-only
[  281.798223][ T7373] EXT4-fs (loop0): 1 truncate cleaned up
[  281.803904][ T7373] EXT4-fs (loop0): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  282.141106][ T7381] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  282.150215][ T7381] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  283.853662][ T7415] loop2: detected capacity change from 0 to 512
[  283.914687][ T7415] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  283.937746][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  283.944763][ T7415] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.822: invalid indirect mapped block 4278190080 (level 0)
[  283.962961][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  283.970047][ T7415] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.822: invalid indirect mapped block 1 (level 1)
[  283.998043][ T7415] EXT4-fs (loop2): Remounting filesystem read-only
[  284.005132][ T7415] EXT4-fs (loop2): 1 truncate cleaned up
[  284.010807][ T7415] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  284.134741][ T1330] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  284.504977][ T1330] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  284.514495][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  284.704693][ T1330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  284.721157][ T1330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  284.762104][ T1330] usb 1-1: Product: syz
[  284.770801][ T1330] usb 1-1: Manufacturer: syz
[  284.774543][ T4225] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  284.789225][ T1330] usb 1-1: SerialNumber: syz
[  285.134671][ T4225] usb 4-1: not running at top speed; connect to a high speed hub
[  285.234696][ T4225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.250373][ T4225] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  285.269780][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.321350][ T7431] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  285.348478][ T4225] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  285.359448][ T7431] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  285.373749][ T4225] usb 4-1: No streaming interface found for terminal 2.
[  285.556178][   T23] usb 4-1: USB disconnect, device number 4
[  286.460206][ T1330] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  286.493708][ T1330] usb 1-1: USB disconnect, device number 6
[  286.539443][ T1330] usblp0: removed
[  286.569092][ T7452] loop4: detected capacity change from 0 to 512
[  287.319433][ T7452] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  287.344905][ T7452] EXT4-fs (loop4): Remounting filesystem read-only
[  287.352868][ T7452] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.834: invalid indirect mapped block 4278190080 (level 0)
[  287.467455][ T7452] EXT4-fs (loop4): Remounting filesystem read-only
[  287.474158][ T7452] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.834: invalid indirect mapped block 1 (level 1)
[  288.094689][ T7452] EXT4-fs (loop4): Remounting filesystem read-only
[  288.103480][ T7452] EXT4-fs (loop4): 1 truncate cleaned up
[  288.109494][ T7452] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  288.193817][ T7466] loop1: detected capacity change from 0 to 512
[  288.390933][ T7466] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.837: inode has both inline data and extents flags
[  288.511830][ T7466] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.837: couldn't read orphan inode 15 (err -117)
[  288.557840][ T7474] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  288.590097][ T7466] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,,errors=continue. Quota mode: writeback.
[  288.599380][ T7474] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  288.875888][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'.
[  292.351849][ T7520] IPVS: lblc: TCP 127.0.0.1:5376 - no destination available
[  292.688101][ T7526] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  292.704607][ T7526] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  293.514473][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  293.524496][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  293.534479][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  293.544475][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[  293.634477][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  293.644476][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  293.654478][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  293.664477][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  293.674475][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  294.586001][ T7567] netlink: 52 bytes leftover after parsing attributes in process `syz.3.862'.
[  295.342941][ T7570] loop4: detected capacity change from 0 to 512
[  295.471505][ T7570] EXT4-fs (loop4): bad s_min_extra_isize: 544
[  296.637734][ T7609] netlink: 52 bytes leftover after parsing attributes in process `syz.0.875'.
[  297.431831][ T7618] process 'syz.0.878' launched './file0' with NULL argv: empty string added
[  297.435225][ T7620] loop4: detected capacity change from 0 to 512
[  297.490703][ T7620] EXT4-fs (loop4): bad s_min_extra_isize: 544
[  298.907308][ T7657] netlink: 52 bytes leftover after parsing attributes in process `syz.2.889'.
[  299.667755][ T7662] loop0: detected capacity change from 0 to 512
[  299.790696][ T7662] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  302.305424][ T7712] loop2: detected capacity change from 0 to 512
[  302.362478][ T7712] EXT4-fs (loop2): bad s_min_extra_isize: 544
[  302.554600][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  302.601250][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'.
[  302.804744][ T4227] usb 4-1: Using ep0 maxpacket: 16
[  304.135537][ T7735] loop1: detected capacity change from 0 to 512
[  304.167940][ T7735] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  304.230985][ T7735] EXT4-fs (loop1): 1 truncate cleaned up
[  304.244643][ T4227] usb 4-1: unable to get BOS descriptor or descriptor too short
[  304.260688][ T7735] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  304.307081][ T4227] usb 4-1: no configurations
[  304.345163][ T4227] usb 4-1: can't read configurations, error -22
[  305.452069][ T7750] loop3: detected capacity change from 0 to 512
[  305.508773][ T7750] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  306.075735][ T7783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.931'.
[  306.251216][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880601fac00: rx timeout, send abort
[  306.752057][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880601f9400: rx timeout, send abort
[  306.761385][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880601fac00: abort rx timeout. Force session deactivation
[  306.881980][ T7790] loop3: detected capacity change from 0 to 512
[  307.260484][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880601f9400: abort rx timeout. Force session deactivation
[  307.628604][ T7790] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  307.631102][ T7800] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  307.714189][ T7790] EXT4-fs (loop3): 1 truncate cleaned up
[  307.753704][ T7790] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  307.804390][ T7808] loop4: detected capacity change from 0 to 512
[  307.920984][ T7808] EXT4-fs (loop4): bad s_min_extra_isize: 544
[  308.780103][ T7820] netlink: 28 bytes leftover after parsing attributes in process `syz.0.944'.
[  310.933694][ T7854] loop0: detected capacity change from 0 to 512
[  311.104754][ T7854] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  311.185792][ T7854] EXT4-fs (loop0): 1 truncate cleaned up
[  311.191565][ T7854] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  311.494575][ T4227] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  312.481050][ T7869] loop0: detected capacity change from 0 to 512
[  312.524730][ T4227] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  312.537473][ T4227] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  312.563487][ T4227] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  312.586245][ T7869] EXT4-fs (loop0): bad s_min_extra_isize: 544
[  312.614787][ T4227] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.795532][ T4227] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  312.822056][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  312.840651][ T4227] usb 2-1: Product: syz
[  312.845209][ T4227] usb 2-1: Manufacturer: syz
[  312.942885][ T4227] cdc_wdm 2-1:1.0: skipping garbage
[  312.950123][ T4227] cdc_wdm 2-1:1.0: skipping garbage
[  312.957994][ T4227] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  312.964161][ T4227] cdc_wdm 2-1:1.0: Unknown control protocol
[  313.104893][ T7880] netlink: 28 bytes leftover after parsing attributes in process `syz.4.958'.
[  314.006664][   T26] audit: type=1326 audit(1787772808.654:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.115705][   T26] audit: type=1326 audit(1787772808.654:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.141517][   T26] audit: type=1326 audit(1787772808.664:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.166818][ T4227] usb 2-1: USB disconnect, device number 11
[  314.174313][   T26] audit: type=1326 audit(1787772808.664:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.176641][ T7859] cdc_wdm 2-1:1.0: Tx URB error: -19
[  314.203906][   T26] audit: type=1326 audit(1787772808.664:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.256597][   T26] audit: type=1326 audit(1787772808.664:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.288240][   T26] audit: type=1326 audit(1787772808.664:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  314.980693][   T26] audit: type=1326 audit(1787772808.664:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  315.228353][   T26] audit: type=1326 audit(1787772808.664:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  315.282332][   T26] audit: type=1326 audit(1787772808.664:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.0.957" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff81d69e0d9 code=0x7ffc0000
[  316.091414][ T7915] loop3: detected capacity change from 0 to 512
[  316.223344][ T7915] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  317.080240][ T1431] ieee802154 phy0 wpan0: encryption failed: -22
[  317.087422][ T1431] ieee802154 phy1 wpan1: encryption failed: -22
[  318.000625][ T7948] loop2: detected capacity change from 0 to 512
[  318.802142][ T7948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  318.859433][ T7948] EXT4-fs (loop2): Remounting filesystem read-only
[  318.874900][ T7948] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.978: invalid indirect mapped block 4278190080 (level 0)
[  318.964018][ T7948] EXT4-fs (loop2): Remounting filesystem read-only
[  318.994191][ T7948] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.978: invalid indirect mapped block 1 (level 1)
[  319.012570][ T7960] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  319.025834][ T7960] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  319.050896][ T7948] EXT4-fs (loop2): Remounting filesystem read-only
[  319.074828][ T7948] EXT4-fs (loop2): 1 truncate cleaned up
[  319.080513][ T7948] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  319.153898][ T7973] loop1: detected capacity change from 0 to 512
[  319.206923][ T7973] EXT4-fs (loop1): bad s_min_extra_isize: 544
[  319.377641][ T7980] netlink: 28 bytes leftover after parsing attributes in process `syz.4.985'.
[  319.925040][ T4227] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  320.464862][ T6873] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  320.864511][ T6873] usb 1-1: Using ep0 maxpacket: 16
[  321.005403][ T6873] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.098279][ T6873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.249827][ T6873] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  321.392096][ T6873] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  321.602187][ T8011] loop1: detected capacity change from 0 to 512
[  321.608995][ T4227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  321.619437][ T4227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.628745][ T6873] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  321.643309][ T6873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  321.655866][ T6873] usb 1-1: SerialNumber: syz
[  321.719635][ T4227] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  321.735227][ T6873] hub 1-1:1.0: bad descriptor, ignoring hub
[  321.739040][ T4227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  321.746757][ T6873] hub: probe of 1-1:1.0 failed with error -5
[  321.761461][ T4227] usb 3-1: SerialNumber: syz
[  321.768786][ T8011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  321.816876][ T6873] cdc_ether: probe of 1-1:1.0 failed with error -22
[  321.859846][ T8011] EXT4-fs (loop1): Remounting filesystem read-only
[  321.897165][ T8011] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.996: invalid indirect mapped block 4278190080 (level 0)
[  321.942358][ T8011] EXT4-fs (loop1): Remounting filesystem read-only
[  321.955964][ T8011] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.996: invalid indirect mapped block 1 (level 1)
[  322.004111][ T8011] EXT4-fs (loop1): Remounting filesystem read-only
[  322.031095][ T8011] EXT4-fs (loop1): 1 truncate cleaned up
[  322.048640][ T8011] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  322.056764][ T4227] usb 3-1: 0:2 : does not exist
[  322.104739][ T4227] usb 3-1: unit 5 not found!
[  322.140519][ T7989] raw-gadget.1 gadget: fail, usb_ep_set_wedge returned -11
[  322.143982][ T4227] usb 3-1: USB disconnect, device number 12
[  322.190207][ T8016] loop3: detected capacity change from 0 to 512
[  322.252356][ T8016] EXT4-fs (loop3): bad s_min_extra_isize: 544
[  322.364739][ T6873] usb 1-1: USB disconnect, device number 7
[  322.374798][ T8019] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  322.460056][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.999'.
[  322.511997][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.960761][ T8046] loop3: detected capacity change from 0 to 512
[  325.420872][ T8059] loop1: detected capacity change from 0 to 512
[  325.450835][ T8060] loop2: detected capacity change from 0 to 512
[  325.468736][ T8046] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  325.497880][ T8046] EXT4-fs (loop3): 1 truncate cleaned up
[  325.503818][ T8046] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none.
[  325.541437][ T8060] EXT4-fs (loop2): bad s_min_extra_isize: 544
[  325.656725][ T8059] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  325.903650][ T8059] EXT4-fs (loop1): Remounting filesystem read-only
[  326.019761][ T8059] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1010: invalid indirect mapped block 4278190080 (level 0)
[  326.210474][ T8059] EXT4-fs (loop1): Remounting filesystem read-only
[  326.217101][ T8059] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1010: invalid indirect mapped block 1 (level 1)
[  326.233450][ T8059] EXT4-fs (loop1): Remounting filesystem read-only
[  326.257775][ T8059] EXT4-fs (loop1): 1 truncate cleaned up
[  326.271765][ T8059] EXT4-fs (loop1): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  326.395762][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'.
[  326.544732][ T8084] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1016'.
[  327.621561][ T4225] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  328.284640][ T4225] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  328.641829][ T4225] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  328.735155][ T4225] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  328.744234][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  328.873071][ T4225] usb 4-1: SerialNumber: syz
[  329.031439][ T8111] overlayfs: missing 'lowerdir'
[  329.206911][ T4225] usb 4-1: 0:2 : does not exist
[  329.211851][ T4225] usb 4-1: unit 5 not found!
[  329.257879][ T4225] usb 4-1: USB disconnect, device number 7
[  329.561074][ T5588] udevd[5588]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  330.604141][ T8126] loop3: detected capacity change from 0 to 512
[  331.013946][ T8126] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  331.416916][ T8126] EXT4-fs (loop3): Remounting filesystem read-only
[  331.433908][ T8126] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1030: invalid indirect mapped block 4278190080 (level 0)
[  331.624347][ T8139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'.
[  331.677811][ T8126] EXT4-fs (loop3): Remounting filesystem read-only
[  331.684363][ T8126] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1030: invalid indirect mapped block 1 (level 1)
[  331.807630][ T8126] EXT4-fs (loop3): Remounting filesystem read-only
[  331.835453][ T8126] EXT4-fs (loop3): 1 truncate cleaned up
[  331.874625][ T8126] EXT4-fs (loop3): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  332.022629][ T8145] netlink: 'syz.4.1032': attribute type 5 has an invalid length.
[  333.845571][ T6691] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0
[  333.880333][ T6691] hid-generic 0000:0000:0000.0009: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  334.224962][ T8178] loop4: detected capacity change from 0 to 512
[  334.309833][ T8178] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  334.355021][ T8178] EXT4-fs (loop4): Remounting filesystem read-only
[  334.361763][ T8178] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1047: invalid indirect mapped block 4278190080 (level 0)
[  334.377396][ T8178] EXT4-fs (loop4): Remounting filesystem read-only
[  334.384055][ T8178] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1047: invalid indirect mapped block 1 (level 1)
[  334.398118][ T8178] EXT4-fs (loop4): Remounting filesystem read-only
[  334.404984][ T8178] EXT4-fs (loop4): 1 truncate cleaned up
[  334.410673][ T8178] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  334.823325][ T8193] loop4: detected capacity change from 0 to 1024
[  334.882076][ T8193] EXT4-fs (loop4): Ignoring removed orlov option
[  334.932408][ T8193] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  334.951584][ T8193] EXT4-fs (loop4): orphan cleanup on readonly fs
[  334.983863][ T8193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1052: Invalid inode table block 0 in block_group 0
[  335.050161][ T8193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  335.068174][ T8193] EXT4-fs error (device loop4): ext4_quota_write:6648: inode #3: comm syz.4.1052: mark_inode_dirty error
[  335.085692][ T8193] __quota_error: 14 callbacks suppressed
[  335.085786][ T8193] Quota error (device loop4): write_blk: dquota write failed
[  335.099624][ T8193] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  335.109930][ T8193] EXT4-fs error (device loop4): ext4_acquire_dquot:6236: comm syz.4.1052: Failed to acquire dquot type 0
[  335.124627][ T8193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1052: Invalid inode table block 0 in block_group 0
[  335.140038][ T8193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  335.158743][ T8193] EXT4-fs error (device loop4): ext4_ext_truncate:4487: inode #15: comm syz.4.1052: mark_inode_dirty error
[  335.177482][ T8193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1052: Invalid inode table block 0 in block_group 0
[  335.200355][ T8193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  335.213756][ T8193] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  335.223541][ T8193] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz.4.1052: Invalid inode table block 0 in block_group 0
[  335.238755][ T8193] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem
[  335.257084][ T8193] EXT4-fs error (device loop4): ext4_truncate:4286: inode #15: comm syz.4.1052: mark_inode_dirty error
[  335.269253][ T8193] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  335.280054][ T8193] EXT4-fs (loop4): 1 truncate cleaned up
[  335.290268][ T8193] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000040,stripe=0x0000000000000007,usrjquota=,barrier=0x0000000000000101,data_err=ignore,noblock_validity,minixdf,orlov,,errors=continue. Quota mode: writeback.
[  335.407477][ T8193] EXT4-fs (loop4): shut down requested (2)
[  337.228549][ T4227] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  337.258495][ T4227] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  337.549110][ T8220] loop4: detected capacity change from 0 to 512
[  337.640839][ T8220] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  337.672313][ T8220] EXT4-fs (loop4): Remounting filesystem read-only
[  337.688175][ T8220] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1061: invalid indirect mapped block 4278190080 (level 0)
[  337.705088][ T8220] EXT4-fs (loop4): Remounting filesystem read-only
[  337.715654][ T8220] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1061: invalid indirect mapped block 1 (level 1)
[  337.758139][ T8220] EXT4-fs (loop4): Remounting filesystem read-only
[  337.770972][ T8220] EXT4-fs (loop4): 1 truncate cleaned up
[  337.799633][ T8220] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  340.949889][ T8260] loop4: detected capacity change from 0 to 512
[  340.970727][ T6382] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  340.999235][ T6382] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  341.083805][ T8260] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  341.132145][ T8260] EXT4-fs (loop4): Remounting filesystem read-only
[  341.139094][ T8260] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1073: invalid indirect mapped block 4278190080 (level 0)
[  341.163954][ T8260] EXT4-fs (loop4): Remounting filesystem read-only
[  341.176006][ T8260] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1073: invalid indirect mapped block 1 (level 1)
[  341.202419][ T8260] EXT4-fs (loop4): Remounting filesystem read-only
[  341.219525][ T8260] EXT4-fs (loop4): 1 truncate cleaned up
[  341.250337][ T8260] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  341.356654][ T6583] Bluetooth: hci4: command 0x0405 tx timeout
[  344.167617][ T8315] netlink: 'syz.0.1085': attribute type 10 has an invalid length.
[  344.182363][ T8315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  345.336679][ T6691] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  345.407213][ T6691] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  345.761965][ T8350] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82
[  345.872189][ T8352] loop2: detected capacity change from 0 to 512
[  346.064133][ T8352] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  346.083592][ T8352] EXT4-fs (loop2): Remounting filesystem read-only
[  346.220131][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1096: invalid indirect mapped block 4278190080 (level 0)
[  346.726792][ T8352] EXT4-fs (loop2): Remounting filesystem read-only
[  346.733354][ T8352] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.1096: invalid indirect mapped block 1 (level 1)
[  346.783093][ T8352] EXT4-fs (loop2): Remounting filesystem read-only
[  346.794700][ T6587] Bluetooth: hci4: command 0x0405 tx timeout
[  346.852444][ T8352] EXT4-fs (loop2): 1 truncate cleaned up
[  346.888872][ T8352] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,errors=continue,sb=0x0000000000000006,errors=remount-ro,barrier=0x0000000000001000,resgid=0x0000000000000000,nombcache,noquota,auto_da_alloc=0x0000000000000006,data=journal,init_itable=0x0000000000000005,. Quota mode: none.
[  347.308294][ T8365] loop0: detected capacity change from 0 to 32768
[  347.424771][ T8365] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1099 (8365)
[  347.619880][ T8384] 
[  347.622257][ T8384] ======================================================
[  347.629402][ T8384] WARNING: possible circular locking dependency detected
[  347.636488][ T8384] syzkaller #0 Not tainted
[  347.640992][ T8384] ------------------------------------------------------
[  347.648441][ T8384] syz.2.1103/8384 is trying to acquire lock:
[  347.654544][ T8384] ffff88807da65028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[  347.665822][ T8384] 
[  347.665822][ T8384] but task is already holding lock:
[  347.673195][ T8384] ffffffff8d6d5c48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  347.683005][ T8384] 
[  347.683005][ T8384] which lock already depends on the new lock.
[  347.683005][ T8384] 
[  347.693404][ T8384] 
[  347.693404][ T8384] the existing dependency chain (in reverse order) is:
[  347.702416][ T8384] 
[  347.702416][ T8384] -> #4 (rfkill_global_mutex){+.+.}-{3:3}:
[  347.710551][ T8384]        __mutex_lock_common+0x1e5/0x2400
[  347.716486][ T8384]        mutex_lock_nested+0x17/0x20
[  347.721870][ T8384]        rfkill_register+0x2f/0x970
[  347.727076][ T8384]        hci_register_dev+0x459/0x980
[  347.732540][ T8384]        vhci_create_device+0x32e/0x5c0
[  347.738193][ T8384]        vhci_write+0x389/0x440
[  347.743042][ T8384]        vfs_write+0x748/0xd70
[  347.747918][ T8384]        ksys_write+0x153/0x260
[  347.752792][ T8384]        do_syscall_64+0x4c/0xa0
[  347.757761][ T8384]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  347.764197][ T8384] 
[  347.764197][ T8384] -> #3 (&data->open_mutex){+.+.}-{3:3}:
[  347.772018][ T8384]        __mutex_lock_common+0x1e5/0x2400
[  347.777755][ T8384]        mutex_lock_nested+0x17/0x20
[  347.783042][ T8384]        vhci_send_frame+0x88/0x100
[  347.788335][ T8384]        hci_send_frame+0x1a9/0x2e0
[  347.793529][ T8384]        hci_tx_work+0x9b5/0x16d0
[  347.798548][ T8384]        process_one_work+0x867/0xff0
[  347.803984][ T8384]        worker_thread+0xad7/0x12a0
[  347.809177][ T8384]        kthread+0x42e/0x520
[  347.813856][ T8384]        ret_from_fork+0x1f/0x30
[  347.818818][ T8384] 
[  347.818818][ T8384] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}:
[  347.828035][ T8384]        __flush_work+0x116/0x210
[  347.833064][ T8384]        hci_dev_do_close+0x201/0x1020
[  347.838521][ T8384]        hci_dev_close+0xd9/0x180
[  347.843540][ T8384]        sock_do_ioctl+0xfb/0x320
[  347.848649][ T8384]        sock_ioctl+0x48a/0x700
[  347.853496][ T8384]        __se_sys_ioctl+0xfa/0x170
[  347.858623][ T8384]        do_syscall_64+0x4c/0xa0
[  347.863644][ T8384]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  347.870065][ T8384] 
[  347.870065][ T8384] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[  347.877891][ T8384]        __mutex_lock_common+0x1e5/0x2400
[  347.883615][ T8384]        mutex_lock_nested+0x17/0x20
[  347.888993][ T8384]        bg_scan_update+0x44/0x3b0
[  347.894207][ T8384]        process_one_work+0x867/0xff0
[  347.899581][ T8384]        worker_thread+0xad7/0x12a0
[  347.905001][ T8384]        kthread+0x42e/0x520
[  347.910119][ T8384]        ret_from_fork+0x1f/0x30
[  347.915242][ T8384] 
[  347.915242][ T8384] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[  347.925623][ T8384]        __lock_acquire+0x2c66/0x7b50
[  347.931348][ T8384]        lock_acquire+0x19e/0x400
[  347.937031][ T8384]        __flush_work+0x116/0x210
[  347.942076][ T8384]        __cancel_work_timer+0x3f4/0x560
[  347.947827][ T8384]        hci_request_cancel_all+0xcc/0x300
[  347.953648][ T8384]        hci_dev_do_close+0x4e/0x1020
[  347.959188][ T8384]        hci_rfkill_set_block+0x101/0x180
[  347.964932][ T8384]        rfkill_set_block+0x1c1/0x3c0
[  347.970397][ T8384]        rfkill_fop_write+0x453/0x560
[  347.975784][ T8384]        vfs_write+0x304/0xd70
[  347.980563][ T8384]        ksys_write+0x153/0x260
[  347.985424][ T8384]        do_syscall_64+0x4c/0xa0
[  347.990378][ T8384]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  347.996809][ T8384] 
[  347.996809][ T8384] other info that might help us debug this:
[  347.996809][ T8384] 
[  348.007123][ T8384] Chain exists of:
[  348.007123][ T8384]   (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[  348.007123][ T8384] 
[  348.023536][ T8384]  Possible unsafe locking scenario:
[  348.023536][ T8384] 
[  348.031491][ T8384]        CPU0                    CPU1
[  348.036929][ T8384]        ----                    ----
[  348.042297][ T8384]   lock(rfkill_global_mutex);
[  348.047041][ T8384]                                lock(&data->open_mutex);
[  348.054134][ T8384]                                lock(rfkill_global_mutex);
[  348.061512][ T8384]   lock((work_completion)(&hdev->bg_scan_update));
[  348.068110][ T8384] 
[  348.068110][ T8384]  *** DEADLOCK ***
[  348.068110][ T8384] 
[  348.076266][ T8384] 1 lock held by syz.2.1103/8384:
[  348.081385][ T8384]  #0: ffffffff8d6d5c48 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560
[  348.091620][ T8384] 
[  348.091620][ T8384] stack backtrace:
[  348.097628][ T8384] CPU: 0 PID: 8384 Comm: syz.2.1103 Not tainted syzkaller #0
[  348.105034][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  348.115111][ T8384] Call Trace:
[  348.118498][ T8384]  <TASK>
[  348.121526][ T8384]  dump_stack_lvl+0x188/0x250
[  348.126282][ T8384]  ? load_image+0x410/0x410
[  348.130802][ T8384]  ? show_regs_print_info+0x20/0x20
[  348.136012][ T8384]  ? print_circular_bug+0x12b/0x1a0
[  348.141223][ T8384]  check_noncircular+0x296/0x330
[  348.146329][ T8384]  ? add_chain_block+0x9b0/0x9b0
[  348.151317][ T8384]  ? lockdep_lock+0xf1/0x1f0
[  348.156342][ T8384]  ? __lock_acquire+0x1305/0x7b50
[  348.161576][ T8384]  ? mark_lock+0x94/0x320
[  348.166029][ T8384]  ? _find_first_zero_bit+0xd1/0xf0
[  348.171716][ T8384]  __lock_acquire+0x2c66/0x7b50
[  348.176569][ T8384]  ? release_firmware_map_entry+0x190/0x190
[  348.182454][ T8384]  ? verify_lock_unused+0x140/0x140
[  348.187727][ T8384]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  348.193796][ T8384]  ? verify_lock_unused+0x140/0x140
[  348.198983][ T8384]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  348.204608][ T8384]  lock_acquire+0x19e/0x400
[  348.209096][ T8384]  ? __flush_work+0xfa/0x210
[  348.213665][ T8384]  ? __lock_acquire+0x7b50/0x7b50
[  348.218678][ T8384]  ? read_lock_is_recursive+0x10/0x10
[  348.224383][ T8384]  ? start_flush_work+0x784/0x830
[  348.229391][ T8384]  __flush_work+0x116/0x210
[  348.233882][ T8384]  ? __flush_work+0xfa/0x210
[  348.238461][ T8384]  ? flush_work+0x20/0x20
[  348.242811][ T8384]  ? try_to_grab_pending+0xfb/0x820
[  348.248089][ T8384]  ? mark_lock+0x94/0x320
[  348.253025][ T8384]  ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[  348.258997][ T8384]  ? lock_chain_count+0x20/0x20
[  348.263987][ T8384]  ? mark_lock+0x94/0x320
[  348.268338][ T8384]  ? __cancel_work_timer+0x36a/0x560
[  348.273636][ T8384]  __cancel_work_timer+0x3f4/0x560
[  348.278913][ T8384]  ? cancel_work_sync+0x20/0x20
[  348.283748][ T8384]  ? __cancel_work+0x1f9/0x2e0
[  348.288665][ T8384]  ? lockdep_hardirqs_on+0x94/0x140
[  348.293861][ T8384]  ? __cancel_work+0x27b/0x2e0
[  348.298629][ T8384]  ? cancel_work+0x20/0x20
[  348.303046][ T8384]  hci_request_cancel_all+0xcc/0x300
[  348.308324][ T8384]  hci_dev_do_close+0x4e/0x1020
[  348.313891][ T8384]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  348.320288][ T8384]  ? _raw_spin_unlock+0x40/0x40
[  348.325854][ T8384]  hci_rfkill_set_block+0x101/0x180
[  348.331162][ T8384]  ? rcu_lock_release+0x20/0x20
[  348.336020][ T8384]  rfkill_set_block+0x1c1/0x3c0
[  348.340925][ T8384]  rfkill_fop_write+0x453/0x560
[  348.345950][ T8384]  ? rfkill_fop_read+0x560/0x560
[  348.350888][ T8384]  ? common_file_perm+0x160/0x1c0
[  348.356027][ T8384]  ? fsnotify_perm+0x5d/0x560
[  348.360914][ T8384]  ? security_file_permission+0x75/0xa0
[  348.366648][ T8384]  ? rfkill_fop_read+0x560/0x560
[  348.371643][ T8384]  vfs_write+0x304/0xd70
[  348.375889][ T8384]  ? file_end_write+0x250/0x250
[  348.380722][ T8384]  ? __fget_files+0x402/0x470
[  348.385385][ T8384]  ? __fdget_pos+0x1e2/0x370
[  348.390134][ T8384]  ? ksys_write+0x70/0x260
[  348.394530][ T8384]  ksys_write+0x153/0x260
[  348.398874][ T8384]  ? __ia32_sys_read+0x80/0x80
[  348.403628][ T8384]  ? lockdep_hardirqs_on+0x94/0x140
[  348.409071][ T8384]  do_syscall_64+0x4c/0xa0
[  348.413563][ T8384]  ? clear_bhb_loop+0x30/0x80
[  348.418219][ T8384]  ? clear_bhb_loop+0x30/0x80
[  348.422887][ T8384]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  348.428778][ T8384] RIP: 0033:0x7f35c81d40d9
[  348.433248][ T8384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.452920][ T8384] RSP: 002b:00007f35c638a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  348.461495][ T8384] RAX: ffffffffffffffda RBX: 00007f35c845c090 RCX: 00007f35c81d40d9
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  348.469453][ T8384] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: 0000000000000005
[  348.477439][ T8384] RBP: 00007f35c826b024 R08: 0000000000000000 R09: 0000000000000000
[  348.485566][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  348.493542][ T8384] R13: 00007f35c845c128 R14: 00007f35c845c090 R15: 00007ffdddec5aa8
[  348.501769][ T8384]  </TASK>
[  348.515225][ T8365] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  348.587669][ T8365] BTRFS info (device loop0): using free space tree
[  348.594317][ T8365] BTRFS info (device loop0): has skinny extents
[  348.785914][ T8365] BTRFS error (device loop0): open_ctree failed: -12
[  348.882346][ T4228] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.040727][ T4228] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.160380][ T4228] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.173318][ T8385] chnl_net:caif_netlink_parms(): no params data found
[  349.203578][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.210724][ T8385] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.218887][ T8385] device bridge_slave_0 entered promiscuous mode
[  349.226508][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.233581][ T8385] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.241757][ T8385] device bridge_slave_1 entered promiscuous mode
[  349.257536][ T4228] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.270625][ T8385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.281937][ T8385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.311355][ T8385] team0: Port device team_slave_0 added
[  349.319148][ T8385] team0: Port device team_slave_1 added
[  349.333130][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.340215][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.367095][ T8385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.379352][ T8385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.387439][ T8385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  349.413760][ T8385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.443564][ T8385] device hsr_slave_0 entered promiscuous mode
[  349.450143][ T8385] device hsr_slave_1 entered promiscuous mode
[  349.456667][ T8385] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.464310][ T8385] Cannot create hsr debugfs directory
[  349.558489][ T8385] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  349.567637][ T8385] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  349.576933][ T8385] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  349.593817][ T8385] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  349.613446][ T8385] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.620553][ T8385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.627932][ T8385] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.635009][ T8385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.676780][  T155] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.685589][  T155] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.719894][ T8385] 8021q: adding VLAN 0 to HW filter on device bond0
[  349.732664][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  349.740484][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  349.751208][ T8385] 8021q: adding VLAN 0 to HW filter on device team0
[  349.769196][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  349.778364][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  349.788795][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.795873][ T4414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.806233][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  349.814884][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  349.823258][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.830397][ T4414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.852352][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  349.865173][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  349.878646][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  349.887893][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  349.902573][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  349.911197][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  349.921792][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  349.930790][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  349.940138][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  349.950690][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  349.959367][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  349.977242][ T8385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.059382][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  350.067431][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  350.080824][ T8385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.187756][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  350.197253][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  350.226784][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  350.236182][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  350.248264][ T8385] device veth0_vlan entered promiscuous mode
[  350.255941][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  350.264064][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  350.277614][ T8385] device veth1_vlan entered promiscuous mode
[  350.315641][ T8385] device veth0_macvtap entered promiscuous mode
[  350.322999][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  350.331748][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  350.339895][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  350.350205][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  350.358984][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  350.375629][ T8385] device veth1_macvtap entered promiscuous mode
[  350.390488][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.401581][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.412886][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.423360][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.433627][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.445258][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.455691][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.466206][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.476101][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  350.486662][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.497362][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  350.510157][ T4228] device hsr_slave_0 left promiscuous mode
[  350.516968][ T4228] device hsr_slave_1 left promiscuous mode
[  350.523083][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  350.531156][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  350.539637][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  350.548372][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  350.557013][ T4228] device bridge_slave_1 left promiscuous mode
[  350.563536][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.572185][ T4228] device bridge_slave_0 left promiscuous mode
[  350.578415][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.588343][ T4228] device veth1_macvtap left promiscuous mode
[  350.594402][ T4228] device veth0_macvtap left promiscuous mode
[  350.600492][ T4228] device veth1_vlan left promiscuous mode
[  350.606663][ T4228] device veth0_vlan left promiscuous mode
[  350.685740][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  350.697956][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  350.708715][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.721087][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.760655][ T4228] bond0 (unregistering): Released all slaves
[  350.799583][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  350.807969][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  350.816800][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  350.829032][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.840184][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.851761][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.862859][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.872947][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.883871][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.895684][ T8385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  350.906527][ T8385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  350.918135][ T8385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  350.929826][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  350.939193][ T4505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  350.950275][ T8385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  350.959668][ T6587] Bluetooth: hci3: command 0x0409 tx timeout
[  350.961447][ T8385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  350.976203][ T8385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  350.984992][ T8385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  351.030239][ T8385] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht'
[  351.053089][ T4505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.069959][ T4505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.070130][ T8385] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht'
[  351.107210][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  351.125586][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  351.133510][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  351.142963][ T4414] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  351.615433][ T4228] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.678120][ T4228] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.758013][ T4228] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.827770][ T4228] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.934651][ T4228] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.990962][ T4228] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.038752][ T4228] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.089928][ T4228] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.195424][ T4228] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.249905][ T4228] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.299683][ T4228] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.349316][ T4228] bond0: (slave netdevsim0): Releasing backup interface
[  352.358552][ T4228] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.431093][ T4228] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.469896][ T4228] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.519550][ T4228] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.568529][ T4228] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.842791][ T4228] device hsr_slave_0 left promiscuous mode
[  353.849351][ T4228] device hsr_slave_1 left promiscuous mode
[  353.857596][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.866216][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.873963][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.883121][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.891481][ T4228] device bridge_slave_1 left promiscuous mode
[  353.899396][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.907640][ T4228] device bridge_slave_0 left promiscuous mode
[  353.913820][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.927252][ T4228] device hsr_slave_0 left promiscuous mode
[  353.933668][ T4228] device hsr_slave_1 left promiscuous mode
[  353.942571][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.950279][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.959874][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.967933][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.976885][ T4228] device bridge_slave_1 left promiscuous mode
[  353.983087][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.990969][ T4228] device bridge_slave_0 left promiscuous mode
[  353.997138][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.007640][ T4228] device hsr_slave_0 left promiscuous mode
[  354.013696][ T4228] device hsr_slave_1 left promiscuous mode
[  354.020016][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.027596][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.035484][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.043142][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.050718][ T4228] device bridge_slave_1 left promiscuous mode
[  354.057006][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.065235][ T4228] device bridge_slave_0 left promiscuous mode
[  354.071365][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.081100][ T4228] device hsr_slave_0 left promiscuous mode
[  354.088889][ T4228] device hsr_slave_1 left promiscuous mode
[  354.095198][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  354.102659][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  354.110223][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  354.117668][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  354.125525][ T4228] device bridge_slave_1 left promiscuous mode
[  354.131655][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.139417][ T4228] device bridge_slave_0 left promiscuous mode
[  354.145577][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.159071][ T4228] device veth1_macvtap left promiscuous mode
[  354.165528][ T4228] device veth0_macvtap left promiscuous mode
[  354.172105][ T4228] device veth1_vlan left promiscuous mode
[  354.177943][ T4228] device veth0_vlan left promiscuous mode
[  354.184170][ T4228] device veth1_macvtap left promiscuous mode
[  354.190360][ T4228] device veth0_macvtap left promiscuous mode
[  354.196741][ T4228] device veth1_vlan left promiscuous mode
[  354.202473][ T4228] device veth0_vlan left promiscuous mode
[  354.208872][ T4228] device veth1_macvtap left promiscuous mode
[  354.215212][ T4228] device veth0_macvtap left promiscuous mode
[  354.221216][ T4228] device veth1_vlan left promiscuous mode
[  354.227048][ T4228] device veth0_vlan left promiscuous mode
[  354.233243][ T4228] device veth1_macvtap left promiscuous mode
[  354.240202][ T4228] device veth0_macvtap left promiscuous mode
[  354.246496][ T4228] device veth1_vlan left promiscuous mode
[  354.252249][ T4228] device veth0_vlan left promiscuous mode
[  354.429293][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  354.439307][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  354.452000][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.463783][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.501506][ T4228] bond0 (unregistering): Released all slaves
[  354.577538][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  354.589641][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  354.599212][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.610516][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.649419][ T4228] bond0 (unregistering): Released all slaves
[  354.756471][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  354.767041][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  354.779053][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.792425][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.831447][ T4228] bond0 (unregistering): Released all slaves
[  354.900028][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  354.909905][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  354.919939][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  354.932156][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  354.971191][ T4228] bond0 (unregistering): Released all slaves
[  356.509442][ T4228] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.569593][ T4228] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.617585][ T4228] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  356.658671][ T4228] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  357.350058][ T4228] device hsr_slave_0 left promiscuous mode
[  357.356714][ T4228] device hsr_slave_1 left promiscuous mode
[  357.363113][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.371095][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_0
[  357.379271][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.388107][ T4228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  357.396264][ T4228] device bridge_slave_1 left promiscuous mode
[  357.402436][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.410993][ T4228] device bridge_slave_0 left promiscuous mode
[  357.417748][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.428203][ T4228] device veth1_macvtap left promiscuous mode
[  357.434330][ T4228] device veth0_macvtap left promiscuous mode
[  357.441248][ T4228] device veth1_vlan left promiscuous mode
[  357.447246][ T4228] device veth0_vlan left promiscuous mode
[  357.542013][ T4228] team0 (unregistering): Port device team_slave_1 removed
[  357.551863][ T4228] team0 (unregistering): Port device team_slave_0 removed
[  357.563254][ T4228] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.575417][ T4228] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.602706][ T4228] bond0 (unregistering): Released all slaves