last executing test programs:

9m54.924018049s ago: executing program 32 (id=2206):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15)
write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xff2e)

6m47.776090968s ago: executing program 3 (id=3912):
r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0x8, 0x0, 0x8, {0x8, 0xffffffff}, 0xfc, 0x9}})

6m47.550975918s ago: executing program 3 (id=3915):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0)
getdents64(r0, &(0x7f0000001f80)=""/4095, 0xfff)

6m47.390298691s ago: executing program 3 (id=3919):
ioperm(0x3, 0x5, 0x7)
setuid(0xee01)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x8, 0x2, 0x2, 0x2}]})

6m47.194798868s ago: executing program 3 (id=3921):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6282, &(0x7f000000f900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

6m45.665381392s ago: executing program 3 (id=3931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)={0xb4, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x84, 0x8, 0x0, 0x1, [{0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x58, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x6, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)

6m44.685370957s ago: executing program 3 (id=3941):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
listen(r0, 0x8ba)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)

6m44.212087328s ago: executing program 33 (id=3941):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca)
listen(r0, 0x8ba)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10)

5m33.916852276s ago: executing program 1 (id=4480):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0xfe, 0x18100})

5m33.706593665s ago: executing program 1 (id=4473):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x100000001, 0x0, 0x2}])
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000018142d"], 0x18}, 0x1, 0x0, 0x0, 0x20008045}, 0x48090)

5m33.52879054s ago: executing program 1 (id=4476):
r0 = msgget$private(0x0, 0x4df)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
msgctl$IPC_RMID(r0, 0x0)

5m33.204398738s ago: executing program 1 (id=4482):
syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1b4a0ff322839e69b507d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31fd2cfc77f269f873e14e5fe3c46c0acbb22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b9"], 0x1, 0x6282, &(0x7f000000f900)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

5m31.893506933s ago: executing program 1 (id=4487):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x7, 0xd654, 0x101}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840)

5m30.736358273s ago: executing program 1 (id=4495):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x108, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7e, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0x1000d, 0x0, 0x8001, 0x7, 0x1}}, {0x2, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x0, 0x8000, 0x7]}}, {{0x1c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xa, 0x77dd, 0x1, 0x7, 0xffff}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x1}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840)

5m30.091160059s ago: executing program 34 (id=4495):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x108, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7e, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0x1000d, 0x0, 0x8001, 0x7, 0x1}}, {0x2, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x0, 0x8000, 0x7]}}, {{0x1c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0xa, 0x77dd, 0x1, 0x7, 0xffff}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x1}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840)

4m0.225578731s ago: executing program 5 (id=5248):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d6d616363656c7469632c71756965742c636f6465706167653d6d6163696e7569742c6469725f756d61736b3d30303030303030303030303030303030303030323030312c63726561746f723decf3ae122c00b9f0cf13144d95ad6fb52973147357153a250e5a9573d6335708978eca6178d431e94849beb47b385a257a6042"], 0x1, 0x314, &(0x7f00000004c0)="$eJzs3T1vFEccx/Hf7D34HFvOxXYUKU0iJ5aSxoqTFFGaROhaeioE+M6SxckI20hA48OiRLwAet4CL4IGxBsAGio6GneLZnZ2b+9ubs+HfF7bfD+SrX2Y/+5/2Kf/rGRWAL5aV1pvn//1wf4YqaKKpH+lSFJDqkr6Xj807u0e7Bx0O+2iDVVchP0xSiLNSJut3U4o1Ma5CK9p56pazC/DbMRx/P+7spNA6dzVHxBJc/46dOsbZ5zXafGdm0vne9JPJaZTivwBNsc61n0tlZgOAOAc8M//yD8mFt0ioyiS1v1j/0I//4cdl53A6fq7O7IoLgzIPf9ddRcbe3y/dav64z03hLPro3SUeJJkakPzdSVn1kCBacKjyvdxwucSzW/vVLWx9UjtSEf6z8sFrLrf7eTUTU3Idi0wNh3HVoxjt1bT1W+S3tiKcn54dZrS9k634yrPQP4roZ1O8689LfPSvDbXTUPP1M7qv2r8SXUZdyo0h45UVLP5/zF+iwsuyrayXTZJP6OBJt+5nfzozwVvQi8b4RFJfpvpC4JelkEgz6N0wu17WYOvFZLebYZ2YPobXwlFNbO50Vi3r9WBqIo/Eza27nQLX6XMRtpF89RcM2v6qBdq5er/yOa3rtyVWXSrN66lPzOS/tTDLauuZXPkydHLpn7OMvDmpu4bpCnflj3RLf2jpf0HD29Xut3Onp24GZi4u7hn/JLaYynYZvYTFRW0Ua+/xD08DuP4pFuOZ5n8718QVR+7yt4/siX28gmF26ssWxKd9WG6fBNVhVa1XqnohJzpRFq6TBneCK6yhdaYqJnco3DO7Jv0oPsFI0UsLjlbd5lk/OcqeV/VufuM/dUsqNMDg8zewFxui5vZCG6wFFwO1S4TxgYL40dwuT3+OTpmdLWlG3P98pv0ay7OqHCPTZfnpWFaeqMbvP8HAAAAAAAAAAAAAAAAAAC4aAJ/KnB42n/kU3YfAQAAAAAAAAAAAAAAAAAAAAC46E7+/d/5/peaQv9HvPv+b3Pi938HPgDsPxTF93+BcnwOAAD//xtvfLA=")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

4m0.072398735s ago: executing program 5 (id=5249):
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x13, 0x14, 0x0})

3m59.88874803s ago: executing program 5 (id=5252):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff})
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={0x0, 0x3cb0}}, 0x40010)

3m59.710515886s ago: executing program 5 (id=5256):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0032006c00ae1ecebf96fccb8a69f4a8ea113bda4a1e87a726a9dcf01d4bf4543b835eb2b9e6066dc6b060d90b6ca4385a4244aa53e0a0acaebd0c1dd5d380385e85b29008b29f2fb4a93ebe5ace1c105e684d1fd61659e8decea319f675e039904905a8130e2f3c8d5c7a22b4487a331c727612ff1ddd6aabd0e4ab29212632a15e835fac77a7c827"], 0x1, 0x198, &(0x7f00000006c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m59.256785865s ago: executing program 5 (id=5258):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r0)
sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000b00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25130000000400138008000100ac"], 0x20}, 0x1, 0x0, 0x0, 0x20008851}, 0x0)

3m59.041777744s ago: executing program 4 (id=5259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x48, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "24b38000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

3m58.723504732s ago: executing program 4 (id=5262):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r0 = io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d8})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20)

3m58.672616046s ago: executing program 5 (id=5263):
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mlockall(0x7)

3m58.116985905s ago: executing program 35 (id=5263):
mlock(&(0x7f0000656000/0x3000)=nil, 0x3000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
mlockall(0x7)

3m58.107158086s ago: executing program 4 (id=5266):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x80)
syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a35f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x2f00, 0xfff5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xffff}}}}}}}, 0x0)

3m57.894882514s ago: executing program 4 (id=5267):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0)
mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)

3m57.682565412s ago: executing program 4 (id=5268):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000867700000000000000000000180100002025702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m57.224449562s ago: executing program 4 (id=5269):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000003a80)=0x6, 0x1)

3m56.323106021s ago: executing program 36 (id=5269):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000003a80)=0x6, 0x1)

1m44.78670277s ago: executing program 0 (id=6368):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54ebadd", 0xcb}, {&(0x7f0000001240)="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", 0x1b5}], 0x2}, 0x9cdc2384056b48b8)

1m44.628922163s ago: executing program 0 (id=6369):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000040)={[{@noswap}, {@mpol={'mpol', 0x3d, {'prefer', '', @void}}}]})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})

1m44.488435135s ago: executing program 0 (id=6370):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000340)={r1, 0x1, 0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10)

1m44.31842769s ago: executing program 0 (id=6371):
ioperm(0x5, 0x8, 0x8000000000005)
prctl$PR_MCE_KILL(0x21, 0x1, 0x3)
prctl$PR_MCE_KILL_GET(0x22)

1m44.2067636s ago: executing program 0 (id=6373):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x10)
mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x1)

1m44.038317945s ago: executing program 0 (id=6374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001d00ac1414bb05001a"], 0x2c}}, 0x0)

1m28.960334697s ago: executing program 37 (id=6374):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001d00ac1414bb05001a"], 0x2c}}, 0x0)

1m24.158783755s ago: executing program 7 (id=6487):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x4, 0x10, 0xfffff004}, {0x6, 0x0, 0xd}]}, 0x10)
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x48, 0x3a, 0x0, @remote, @local, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3571a6", 0x0, 0x33, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing={0x0, 0x0, 0x0, 0x2}, @fragment={0x6c, 0x0, 0x73, 0x0, 0x0, 0x6, 0x66}, @routing={0x87, 0x0, 0x0, 0x8}]}}}}}}}, 0x0)

1m23.903588347s ago: executing program 7 (id=6489):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r0, &(0x7f0000002f00)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xcd89}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}, {{&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000540)=';', 0x1}], 0x1}}], 0x2, 0x4004851)
setsockopt(r0, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)

1m23.363851784s ago: executing program 7 (id=6493):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0))

1m23.168406731s ago: executing program 7 (id=6494):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c010000100013070000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000320000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400"], 0x13c}}, 0x0)

1m22.987214817s ago: executing program 7 (id=6495):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
syz_read_part_table(0x1062, &(0x7f0000000000)="$eJzsz7FNBDEUBNC503rtDUgIth6agDYgJYJ6KICAapCgCqSVkQ01wAXvBSP90ciSw78qSbYl9/t1r+lr8vg6u9PbyBy997n7vBq5j6hrS2pOs/96LslNknUb51Pej9+Xl6TlfG4lbd41pedhrO7qz+Ijty9//2MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuDzfAQAA//83nRHZ")

1m22.139324001s ago: executing program 7 (id=6498):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x6, 0xc0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="53c66ac636de", 0x0, 0x200005, 0x10011, 0x3, 0x0})

1m6.98573589s ago: executing program 38 (id=6498):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000008c0)={0x53, 0xfffffffffffffffb, 0x6, 0xc0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="53c66ac636de", 0x0, 0x200005, 0x10011, 0x3, 0x0})

2.780069578s ago: executing program 8 (id=6958):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000480)={0x40, 0x8, 0x1, "c8"}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.014441195s ago: executing program 9 (id=6966):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

1.7248533s ago: executing program 9 (id=6970):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r0, 0x10ada85e65c25359, 0x70bd26, 0x25dfdbfc, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c41}, 0x4000000)

1.48974148s ago: executing program 9 (id=6972):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)={0x2c, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

1.466136323s ago: executing program 2 (id=6973):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000140)=[r1], 0x1, 0x80800})

1.465326552s ago: executing program 6 (id=6974):
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]})

1.294390627s ago: executing program 9 (id=6975):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r0 = open(&(0x7f0000000040)='./file2\x00', 0x1, 0x104)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, 0x0)

1.278074808s ago: executing program 6 (id=6976):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0)

1.26492218s ago: executing program 2 (id=6977):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1})

1.095096795s ago: executing program 9 (id=6978):
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$search(0xa, r0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, r1)

1.03499026s ago: executing program 8 (id=6979):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)={0x54, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffd98, 0xb, 0x87}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004808}, 0x20008000)

1.03434233s ago: executing program 6 (id=6980):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000180)=0xf)
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2)

1.007235952s ago: executing program 2 (id=6981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x6, 0x25dfdbff, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_IIF={0x8}]}, 0x24}}, 0x48010)

824.621438ms ago: executing program 2 (id=6982):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'pim6reg1\x00', 0x1})
ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0)

794.378051ms ago: executing program 9 (id=6983):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000000)=0x8, 0x4)

794.086741ms ago: executing program 6 (id=6984):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x300})

728.217126ms ago: executing program 8 (id=6985):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x80}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback={0xffffffffffffffa4}, 0x800, 0x0, 0x3, 0x2, 0x40, 0x8}, 0x20)

569.687681ms ago: executing program 6 (id=6986):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x82}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x83}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000)

444.436652ms ago: executing program 8 (id=6987):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$media(&(0x7f0000000140), 0x9, 0x4)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f00000011c0), 0x0})

385.584226ms ago: executing program 2 (id=6988):
r0 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x9, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0}}], 0x2, 0x0)

282.695356ms ago: executing program 6 (id=6989):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

164.402266ms ago: executing program 8 (id=6990):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000600)="4fd9611ae6ed127ab99164d712eb", 0xe}], 0x1}}], 0x1, 0x0)

150.088517ms ago: executing program 2 (id=6991):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0)
ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)

0s ago: executing program 8 (id=6992):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010b00000000000000000e000000080003000923"], 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

25a5b65a09.
[  765.698525][T21473] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  765.698896][T21473] EXT4-fs (loop7): orphan cleanup on readonly fs
[  765.769715][T21473] EXT4-fs (loop7): 1 truncate cleaned up
[  765.795124][T21473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  766.100933][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  766.456489][T21488] loop7: detected capacity change from 0 to 2048
[  766.599839][T21493] loop6: detected capacity change from 0 to 1024
[  766.644056][ T1097] hfsplus: b-tree write err: -5, ino 4
[  766.667311][T21495] loop0: detected capacity change from 0 to 64
[  766.695800][T21493] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  766.906939][T21494] Trying to free block not in datazone
[  767.606197][T21521] loop7: detected capacity change from 0 to 512
[  767.634887][T21521] EXT4-fs: Ignoring removed nobh option
[  767.647338][T21521] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  767.700890][T21521] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e02c, mo2=0002]
[  767.717836][T21521] EXT4-fs (loop7): orphan cleanup on readonly fs
[  767.747467][T21521] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #11: comm syz.7.5816: attempt to clear invalid blocks 1024 len 1
[  767.765211][T21521] EXT4-fs (loop7): Remounting filesystem read-only
[  767.772800][T21521] EXT4-fs (loop7): 1 truncate cleaned up
[  767.784352][T21521] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  767.863004][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  768.516102][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5828'.
[  768.696163][T21548] netlink: 'syz.7.5829': attribute type 6 has an invalid length.
[  769.087684][T21542] loop0: detected capacity change from 0 to 32768
[  769.145980][T21542] JBD2: Ignoring recovery information on journal
[  769.211033][T21542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  769.273202][T21558] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5833'.
[  769.455411][ T5769] ocfs2: Unmounting device (7,0) on (node local)
[  770.353360][T21577] ip6gretap0: entered promiscuous mode
[  770.369004][T21577] macvtap1: entered promiscuous mode
[  770.383329][T21577] ip6gretap0: left promiscuous mode
[  771.055083][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5846'.
[  771.164489][   T28] audit: type=1326 audit(1771572694.916:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21574 comm="syz.0.5841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7fc00000
[  771.267626][T21588] loop7: detected capacity change from 0 to 1024
[  771.308807][T21590] loop0: detected capacity change from 0 to 256
[  771.339604][T21588] EXT4-fs error (device loop7): ext4_orphan_get:1424: comm syz.7.5847: bad orphan inode 32767
[  771.389407][T21588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  771.412700][   T28] audit: type=1800 audit(1771572695.166:946): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5848" name="file1" dev="loop0" ino=1049019 res=0 errno=0
[  771.652617][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  772.900522][T21600] loop6: detected capacity change from 0 to 40427
[  772.953798][T21600] F2FS-fs (loop6): Small segment_count (9 < 1 * 24)
[  772.971951][T21600] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  773.008128][T21600] F2FS-fs (loop6): Found nat_bits in checkpoint
[  773.140267][T21604] loop7: detected capacity change from 0 to 32768
[  773.145732][T21600] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  773.173674][T21600] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  773.246106][T21604] XFS (loop7): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  773.384091][T17593] syz-executor: attempt to access beyond end of device
[  773.384091][T17593] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  773.418255][T17593] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  773.489463][T21604] XFS (loop7): Ending clean mount
[  773.531344][T17816] XFS (loop7): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xd0, xfs_finobt block 0x20 
[  773.562623][T17816] XFS (loop7): Unmount and run xfs_repair
[  773.587723][T17816] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[  773.617791][T17816] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  773.663792][T17816] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  773.701328][T17816] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  773.734033][T17816] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  773.743058][T17816] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  773.786152][T17816] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  773.813584][T17816] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  773.822602][T17816] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  773.844935][T21604] XFS (loop7): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x20 len 8 error 74
[  773.879042][T21604] XFS (loop7): Failed to initialize disk quotas.
[  774.124512][T19681] XFS (loop7): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  774.518794][T21635] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  774.534207][T21635] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  774.541163][T21635] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  774.585712][T21635] comedi comedi3: 8255: I/O port conflict (0xc9,4)
[  774.601713][T21635] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  774.633792][T21635] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  774.640475][T21635] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  774.673851][T21635] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  774.698630][T21635] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  774.714375][T21635] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  774.884935][T21641] loop0: detected capacity change from 0 to 1024
[  774.900676][T21640] autofs4:pid:21640:autofs_fill_super: called with bogus options
[  775.259105][T21649] loop0: detected capacity change from 0 to 256
[  775.398789][T21649] FAT-fs (loop0): Directory bread(block 64) failed
[  775.416254][T21649] FAT-fs (loop0): Directory bread(block 65) failed
[  775.423323][T21649] FAT-fs (loop0): Directory bread(block 66) failed
[  775.432600][T21649] FAT-fs (loop0): Directory bread(block 67) failed
[  775.440535][T21649] FAT-fs (loop0): Directory bread(block 68) failed
[  775.474415][T21649] FAT-fs (loop0): Directory bread(block 69) failed
[  775.481435][T21649] FAT-fs (loop0): Directory bread(block 70) failed
[  775.506689][T21649] FAT-fs (loop0): Directory bread(block 71) failed
[  775.530649][T21649] FAT-fs (loop0): Directory bread(block 72) failed
[  775.548223][T21649] FAT-fs (loop0): Directory bread(block 73) failed
[  776.567033][T21655] loop7: detected capacity change from 0 to 32768
[  776.636958][T21655] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.5873 (21655)
[  776.695668][T21655] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  776.730814][T21655] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  776.784460][T21655] BTRFS info (device loop7): using free space tree
[  776.862066][T21681] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5882'.
[  776.993765][T21655] BTRFS info (device loop7): enabling ssd optimizations
[  777.001280][T21655] BTRFS info (device loop7): auto enabling async discard
[  777.482902][T21705] netlink: 'syz.8.5887': attribute type 15 has an invalid length.
[  777.515213][T19681] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  777.855027][T21715] netlink: 'syz.0.5892': attribute type 10 has an invalid length.
[  777.878725][T21714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  777.939242][T21719] loop6: detected capacity change from 0 to 256
[  778.210000][T21723] netlink: 'syz.6.5895': attribute type 2 has an invalid length.
[  778.255256][T21723] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5895'.
[  778.474020][T21721] loop7: detected capacity change from 0 to 8192
[  778.548249][T21721] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  778.565493][T21721] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  778.592055][T21721] REISERFS (device loop7): using ordered data mode
[  778.620751][T21721] reiserfs: using flush barriers
[  778.638934][T21721] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  778.692318][T21721] REISERFS (device loop7): checking transaction log (loop7)
[  778.728320][T21721] REISERFS (device loop7): Using r5 hash to sort names
[  778.744326][T21721] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  778.796307][T21713] loop8: detected capacity change from 0 to 40427
[  778.820911][T21713] F2FS-fs (loop8): invalid crc value
[  778.854381][T21713] F2FS-fs (loop8): Found nat_bits in checkpoint
[  779.012892][T21713] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  779.255596][T19712] syz-executor: attempt to access beyond end of device
[  779.255596][T19712] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  779.292792][T19712] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  779.537589][T21738] loop7: detected capacity change from 0 to 4096
[  779.549555][T21740] loop6: detected capacity change from 0 to 1764
[  779.566761][T21738] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  779.598794][T21742] loop0: detected capacity change from 0 to 64
[  779.813330][T21738] ntfs3: loop7: failed to convert "c46c" to iso8859-13
[  781.042246][T21776] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5917'.
[  781.062625][T21776] tipc: Invalid UDP bearer configuration
[  781.062693][T21776] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  781.179898][T21760] loop8: detected capacity change from 0 to 32768
[  781.228839][T21760] JBD2: Ignoring recovery information on journal
[  781.329162][T21777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  781.368880][T21760] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  781.579155][T19712] ocfs2: Unmounting device (7,8) on (node local)
[  782.003035][T21796] loop7: detected capacity change from 0 to 256
[  782.042069][T21796] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d)
[  782.246750][T21800] loop7: detected capacity change from 0 to 256
[  782.275926][T21800] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  782.321549][T21800] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  782.342477][T21800] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  782.798498][T21792] loop8: detected capacity change from 0 to 32768
[  782.885575][T21792] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  782.902154][T21792] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  782.988120][T21792] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  783.121035][T21792] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  783.147930][T21815] loop7: detected capacity change from 0 to 2048
[  783.204887][T21815] EXT4-fs: Ignoring removed mblk_io_submit option
[  783.285527][T21815] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  783.442062][T21815] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.5935: bg 0: block 234: padding at end of block bitmap is not set
[  783.460699][T21815] EXT4-fs (loop7): Remounting filesystem read-only
[  783.540682][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  784.617402][T21856] loop8: detected capacity change from 0 to 512
[  784.648733][T21856] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2
[  784.694496][T21856] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2
[  784.729000][T21856] EXT4-fs (loop8): 1 truncate cleaned up
[  784.739880][T21856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  784.841930][T21856] EXT4-fs: user quota file already specified
[  785.011413][T21867] loop7: detected capacity change from 0 to 256
[  785.051186][T21867] exfat: Deprecated parameter 'utf8'
[  785.062187][T21867] exfat: Deprecated parameter 'utf8'
[  785.068647][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  785.157938][T21867] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  785.456606][T21880] loop7: detected capacity change from 0 to 64
[  785.480874][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5966'.
[  785.767216][T21889] loop0: detected capacity change from 0 to 128
[  785.801021][T21889] EXT4-fs: Ignoring removed nobh option
[  785.830032][T21889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  785.904537][T21889] ext4 filesystem being mounted at /1543/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  786.077199][T21889] EXT4-fs warning (device loop0): verify_group_input:151: Cannot add at group 2175 (only 1 groups)
[  786.255823][ T5769] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  786.811035][T21885] loop6: detected capacity change from 0 to 32768
[  787.379944][T21928] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5990'.
[  787.571481][T21938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5991'.
[  787.784352][T21943] tipc: Invalid UDP bearer configuration
[  787.784435][T21943] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  789.274835][ T5770] kernel write not supported for file /input/mice (pid: 5770 comm: kworker/1:3)
[  789.276802][T21978] loop8: detected capacity change from 0 to 2048
[  789.313153][T21978] NILFS (loop8): broken superblock, retrying with spare superblock (blocksize = 1024)
[  789.361062][ T5773] udevd[5773]: incorrect nilfs2 checksum on /dev/loop8
[  789.384193][T21982] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  789.412778][T21983] loop6: detected capacity change from 0 to 128
[  789.464996][T21983] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  789.514857][T21985] loop0: detected capacity change from 0 to 1024
[  789.571414][T21985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  790.072862][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  790.188568][T21994] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6017'.
[  790.198290][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6017'.
[  790.207561][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6017'.
[  790.216933][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6017'.
[  790.389515][T21989] loop8: detected capacity change from 0 to 40427
[  790.414386][T21989] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  790.422907][T21989] F2FS-fs (loop8): Image doesn't support compression
[  790.473792][T21989] F2FS-fs (loop8): Image doesn't support compression
[  790.485963][T21989] F2FS-fs (loop8): invalid crc value
[  790.511264][T21989] F2FS-fs (loop8): Found nat_bits in checkpoint
[  790.580820][T21989] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  790.683091][T19712] F2FS-fs (loop8): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x5b4/0x19c0
[  790.701274][T19712] F2FS-fs (loop8): invalid blkaddr: 1535, type: 10, run fsck to fix.
[  791.015373][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6024'.
[  791.541352][T22026] netlink: 134736 bytes leftover after parsing attributes in process `syz.0.6032'.
[  791.553163][   T28] audit: type=1326 audit(1771572715.306:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.603753][   T28] audit: type=1326 audit(1771572715.336:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.634536][   T28] audit: type=1326 audit(1771572715.346:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.667619][   T28] audit: type=1326 audit(1771572715.346:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.738403][   T28] audit: type=1326 audit(1771572715.346:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.743696][T22030] loop0: detected capacity change from 0 to 512
[  791.803876][   T28] audit: type=1326 audit(1771572715.346:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.840122][   T28] audit: type=1326 audit(1771572715.346:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22027 comm="syz.8.6033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c4e39c629 code=0x7ffc0000
[  791.915987][T22030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  791.973136][T22042] loop8: detected capacity change from 0 to 256
[  791.980798][T22030] ext4 filesystem being mounted at /1569/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  791.981776][T22042] exfat: Deprecated parameter 'utf8'
[  791.998709][T22042] exfat: Deprecated parameter 'namecase'
[  792.005154][T22042] exfat: Deprecated parameter 'namecase'
[  792.011636][T22042] exfat: Deprecated parameter 'utf8'
[  792.036591][T22042] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  792.067244][T22030] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  792.133370][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  792.335681][T22045] loop0: detected capacity change from 0 to 4096
[  792.355622][T22045] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  792.455312][T22045] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22.
[  792.474840][T22045] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  792.526720][T22045] ntfs3: loop0: ino=1e, "file1" ntfs_sync_inode failed, -22.
[  792.619916][   T12] ntfs3: loop0: ino=1e, ntfs3_write_inode failed, -22.
[  792.915451][T22058] netlink: 188 bytes leftover after parsing attributes in process `syz.7.6045'.
[  792.921903][T22054] loop0: detected capacity change from 0 to 4096
[  792.954808][T22056] netlink: 188 bytes leftover after parsing attributes in process `syz.7.6045'.
[  793.061440][T22054] ntfs: volume version 3.1.
[  793.514944][T22072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6052'.
[  793.758898][T22075] loop6: detected capacity change from 0 to 1024
[  794.231492][T22089] loop7: detected capacity change from 0 to 512
[  794.282722][T22089] EXT4-fs: Ignoring removed bh option
[  794.316153][T22063] loop8: detected capacity change from 0 to 32768
[  794.346184][T22089] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  794.429612][T22089] EXT4-fs (loop7): 1 truncate cleaned up
[  794.456127][T22089] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  794.560718][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  794.719963][T22099] hugetlbfs: Bad value for 'uid'
[  794.988386][T22105] loop0: detected capacity change from 0 to 1024
[  795.081390][T22105] hfsplus: bad catalog entry type
[  795.192993][ T1097] hfsplus: b-tree write err: -5, ino 4
[  795.341011][T22115] netlink: 'syz.0.6072': attribute type 2 has an invalid length.
[  795.363654][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6072'.
[  795.386303][T22113] tipc: Started in network mode
[  795.392538][T22113] tipc: Node identity ac141441, cluster identity 4711
[  795.408071][T22113] tipc: Enabled bearer <udp:syz2>, priority 10
[  795.526479][T22119] loop7: detected capacity change from 0 to 16
[  795.550166][T22119] erofs: (device loop7): mounted with root inode @ nid 36.
[  795.638678][T22119] syz.7.6075: attempt to access beyond end of device
[  795.638678][T22119] loop7: rw=524288, sector=64, nr_sectors = 960 limit=16
[  795.678199][T22119] syz.7.6075: attempt to access beyond end of device
[  795.678199][T22119] loop7: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  795.710199][T22119] syz.7.6075: attempt to access beyond end of device
[  795.710199][T22119] loop7: rw=524288, sector=0, nr_sectors = 576 limit=16
[  795.878105][T22129] loop0: detected capacity change from 0 to 2048
[  795.959444][T22129] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  795.979976][T22129] ext4 filesystem being mounted at /1582/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  796.003663][T17816] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  796.064409][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  796.203748][T17816] usb 9-1: Using ep0 maxpacket: 16
[  796.211390][T17816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  796.243011][T17816] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  796.270660][T17816] usb 9-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  796.297890][T17816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  796.325586][T17816] usb 9-1: config 0 descriptor??
[  796.388890][T22143] loop0: detected capacity change from 0 to 256
[  796.411082][T22143] exfat: Deprecated parameter 'namecase'
[  796.441945][T22141] loop7: detected capacity change from 0 to 8192
[  796.511509][T22143] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfe5fe6b3, utbl_chksum : 0xe619d30d)
[  796.535939][T17744] tipc: Node number set to 2886997057
[  796.802191][T17816] playstation 0003:054C:05C4.0032: global environment stack underflow
[  796.854955][T17816] playstation 0003:054C:05C4.0032: item 0 4 1 11 parsing failed
[  796.874399][T17816] playstation 0003:054C:05C4.0032: Parse failed
[  796.882236][T17816] playstation: probe of 0003:054C:05C4.0032 failed with error -22
[  796.945916][T22149] loop0: detected capacity change from 0 to 4096
[  796.968394][T22149] EXT4-fs: Ignoring removed bh option
[  796.997287][T22149] EXT4-fs (loop0): Test dummy encryption mode enabled
[  797.027320][T22149] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  797.036478][T22149] System zones: 0-5
[  797.050564][T17816] usb 9-1: USB disconnect, device number 6
[  797.064931][T22149] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  797.097586][T22149] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  797.140466][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  797.832882][T22173] Bluetooth: MGMT ver 1.22
[  798.056377][T22167] loop0: detected capacity change from 0 to 32768
[  798.088152][T22167] 
[  798.088152][T22167]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  798.088152][T22167] 
[  798.115244][   T28] audit: type=1800 audit(1771572721.876:954): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6097" name="file1" dev="loop0" ino=4 res=0 errno=0
[  798.142057][ T5769] 
[  798.142057][ T5769]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  798.142057][ T5769] 
[  798.154778][ T5769] 
[  798.154778][ T5769]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  798.154778][ T5769] 
[  798.217465][T17816] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  798.343237][T22179] netlink: 'syz.0.6103': attribute type 2 has an invalid length.
[  798.430070][T17816] usb 9-1: Using ep0 maxpacket: 8
[  798.445406][T17816] usb 9-1: config 0 interface 0 has no altsetting 0
[  798.462415][T17816] usb 9-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  798.473386][T17816] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.505272][T17816] usb 9-1: config 0 descriptor??
[  798.540125][T22183] loop0: detected capacity change from 0 to 1024
[  798.608784][   T34] hfsplus: b-tree write err: -5, ino 4
[  798.931651][T17816] monterey 0003:0566:3004.0033: bogus close delimiter
[  798.939310][T17816] monterey 0003:0566:3004.0033: item 0 0 2 10 parsing failed
[  798.948354][T17816] monterey: probe of 0003:0566:3004.0033 failed with error -22
[  799.150847][T17816] usb 9-1: USB disconnect, device number 7
[  800.277919][T22209] loop0: detected capacity change from 0 to 2048
[  800.365258][T22209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  800.436348][   T28] audit: type=1800 audit(1771572724.196:955): pid=22209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6118" name="bus" dev="loop0" ino=18 res=0 errno=0
[  800.510874][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  800.802230][T22205] loop7: detected capacity change from 0 to 32768
[  800.881468][T22205] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  801.092386][T22243] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6128'.
[  801.121002][T22205] XFS (loop7): Ending clean mount
[  801.188347][T22205] XFS (loop7): Quotacheck needed: Please wait.
[  801.376836][T22205] XFS (loop7): Quotacheck: Done.
[  801.405416][T22245] loop8: detected capacity change from 0 to 4096
[  801.419625][T22205] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  801.445959][T22245] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512).
[  801.742145][T22245] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  801.824701][   T28] audit: type=1326 audit(1771572725.576:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  801.931514][   T28] audit: type=1326 audit(1771572725.576:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.018976][   T28] audit: type=1326 audit(1771572725.576:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.107967][T22259] loop0: detected capacity change from 0 to 8
[  802.139745][   T28] audit: type=1326 audit(1771572725.576:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.167878][T22259] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  802.238121][   T28] audit: type=1326 audit(1771572725.576:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.274790][T11511] udevd[11511]: incorrect cramfs checksum on /dev/loop0
[  802.396846][   T28] audit: type=1326 audit(1771572725.576:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.471049][ T5780] udevd[5780]: incorrect cramfs checksum on /dev/loop0
[  802.477599][   T28] audit: type=1326 audit(1771572725.586:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.581667][   T28] audit: type=1326 audit(1771572725.586:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22252 comm="syz.0.6132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5808d9c629 code=0x7ffc0000
[  802.981189][T22279] loop8: detected capacity change from 0 to 2048
[  803.030669][T22283] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  803.878187][T22300] ptrace attach of "./syz-executor exec"[19712] was attempted by ""[22300]
[  804.592764][T22317] loop7: detected capacity change from 0 to 4096
[  804.631041][T22317] ntfs3: loop7: Different NTFS sector size (4096) and media sector size (512).
[  804.811511][T22329] IPVS: Error connecting to the multicast addr
[  806.971298][T22367] loop6: detected capacity change from 0 to 40427
[  806.996532][T22367] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  807.033695][T22367] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  807.085246][T22367] F2FS-fs (loop6): invalid crc value
[  807.104550][T22367] F2FS-fs (loop6): Found nat_bits in checkpoint
[  807.248398][T22367] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  807.260518][T22367] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  807.357621][T22367] syz.6.6185: attempt to access beyond end of device
[  807.357621][T22367] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  807.364213][T22394] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  807.505171][T22398] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  807.512920][T22398] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  807.564784][T22398] vhci_hcd vhci_hcd.0: Device attached
[  807.654281][T22399] vhci_hcd: connection closed
[  807.668681][   T34] vhci_hcd: stop threads
[  807.701563][   T34] vhci_hcd: release socket
[  807.725769][   T34] vhci_hcd: disconnect device
[  807.754208][ T5770] vhci_hcd: vhci_device speed not set
[  807.878747][T17593] syz-executor: attempt to access beyond end of device
[  807.878747][T17593] loop6: rw=2051, sector=45096, nr_sectors = 8 limit=40427
[  807.898495][T17593] F2FS-fs (loop6): Issue discard(5637, 5637, 1) failed, ret: -5
[  808.970904][T22420] loop6: detected capacity change from 0 to 40427
[  809.013199][T22420] F2FS-fs (loop6): build fault injection attr: rate: 771, type: 0x7ffff
[  809.030147][T22420] F2FS-fs (loop6): invalid crc value
[  809.050449][T22420] F2FS-fs (loop6): Found nat_bits in checkpoint
[  809.126312][T22438] QAT: Invalid ioctl 21531
[  809.141156][T22420] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  809.150783][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  809.150969][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  809.243693][   T28] kauditd_printk_skb: 5 callbacks suppressed
[  809.243713][   T28] audit: type=1800 audit(1771572732.986:969): pid=22420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6205" name="file1" dev="loop6" ino=10 res=0 errno=0
[  809.370974][T17593] syz-executor: attempt to access beyond end of device
[  809.370974][T17593] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  809.423695][T17593] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  809.508143][T22447] netlink: 64 bytes leftover after parsing attributes in process `syz.8.6216'.
[  810.069141][T22458] loop0: detected capacity change from 0 to 4096
[  810.190379][T22463] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  810.191088][T22458] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  810.279071][T22458] NILFS (loop0): mounting fs with errors
[  810.358365][T22458] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  810.373978][T22458] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  810.415573][T22458] NILFS error (device loop0): nilfs_readdir: bad page in #2
[  811.145245][T22479] loop7: detected capacity change from 0 to 8192
[  811.180718][T22479] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  811.194296][T22479] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal
[  811.204432][T22479] REISERFS (device loop7): using ordered data mode
[  811.210997][T22479] reiserfs: using flush barriers
[  811.229871][T22467] loop6: detected capacity change from 0 to 32768
[  811.240058][T22479] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  811.257857][T22479] REISERFS (device loop7): checking transaction log (loop7)
[  811.622276][T22479] REISERFS (device loop7): Using tea hash to sort names
[  811.655234][T22479] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage.
[  813.161307][T22529] loop8: detected capacity change from 0 to 4096
[  813.208884][T22529] ntfs3: loop8: Different NTFS sector size (2048) and media sector size (512).
[  813.352464][T22533] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6256'.
[  813.371751][T22533] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6256'.
[  813.403234][T22533] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6256'.
[  813.631321][T22525] loop7: detected capacity change from 0 to 32768
[  813.686266][T22525] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  813.852023][T22525] XFS (loop7): Ending clean mount
[  813.860041][T22525] XFS (loop7): Quotacheck needed: Please wait.
[  813.971657][T22525] XFS (loop7): Quotacheck: Done.
[  814.257433][T19681] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  814.567574][T22555] loop8: detected capacity change from 0 to 32768
[  814.607117][T22555] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  814.672431][T22555] XFS (loop8): Ending clean mount
[  814.716168][T22555] XFS (loop8): Quotacheck needed: Please wait.
[  814.787836][T22565] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6264'.
[  814.789828][T22555] XFS (loop8): Quotacheck: Done.
[  814.906909][T19712] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  815.231295][T22571] loop7: detected capacity change from 0 to 256
[  815.264758][T22571] exfat: Deprecated parameter 'namecase'
[  815.297966][T22571] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  815.360518][T22571] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  816.359995][T13204] Bluetooth: hci0: command 0x0406 tx timeout
[  817.063326][T22618] bridge0: entered promiscuous mode
[  817.076216][T22618] macsec2: entered promiscuous mode
[  817.081685][T22618] macsec2: entered allmulticast mode
[  817.089221][T22618] bridge0: entered allmulticast mode
[  817.097616][T22618] bridge0: port 3(macsec2) entered blocking state
[  817.109730][T22618] bridge0: port 3(macsec2) entered disabled state
[  817.120866][T22618] bridge0: left allmulticast mode
[  817.164341][T22618] bridge0: left promiscuous mode
[  817.421356][T22610] loop8: detected capacity change from 0 to 32768
[  817.570009][T22610] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  817.741595][T22610] XFS (loop8): Ending clean mount
[  817.764888][T22610] XFS (loop8): Quotacheck needed: Please wait.
[  817.885984][T22610] XFS (loop8): Quotacheck: Done.
[  818.117423][T19712] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  818.821115][T22666] gretap0: entered promiscuous mode
[  818.836633][T22666] vlan2: entered promiscuous mode
[  819.693798][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6318'.
[  819.740096][T22682] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6318'.
[  820.710202][T22680] loop7: detected capacity change from 0 to 32768
[  821.290118][T22705] loop6: detected capacity change from 0 to 64
[  821.664546][T22715] loop7: detected capacity change from 0 to 22
[  821.672425][T22715] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  821.704012][T22715] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  822.082642][T22726] loop0: detected capacity change from 0 to 2048
[  822.102702][T22726] NILFS (loop0): unrecognized mount option "~Ð"
[  822.160323][T11511] blk_print_req_error: 9 callbacks suppressed
[  822.160343][T11511] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  822.161177][T22730] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  822.186921][T22730] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  822.196392][T22730] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  822.206823][T22730] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  822.293871][T22726] NILFS (loop0): device size too small
[  823.298129][T22759] vlan2: entered promiscuous mode
[  823.323286][T22759] bridge0: entered promiscuous mode
[  823.459685][T22763] loop0: detected capacity change from 0 to 2048
[  823.468347][T22763] ext4: Unknown parameter 'smackfsroot'
[  824.193076][T22784] syz.0.6367 (22784): /proc/22783/oom_adj is deprecated, please use /proc/22783/oom_score_adj instead.
[  824.288027][T22775] loop8: detected capacity change from 0 to 32768
[  824.316123][T22775] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop8 scanned by syz.8.6363 (22775)
[  824.353151][T22775] BTRFS info (device loop8): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  824.372184][T22775] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  824.382821][T22775] BTRFS info (device loop8): using free space tree
[  824.513068][T22775] BTRFS info (device loop8): enabling ssd optimizations
[  824.550477][T22775] BTRFS info (device loop8): auto enabling async discard
[  824.770470][T19712] BTRFS info (device loop8): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  825.062078][ T5773] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 9 /dev/loop8 scanned by udevd (5773)
[  825.452649][T17816] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  825.678435][T17816] usb 9-1: Using ep0 maxpacket: 32
[  825.685966][T17816] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.716631][T17816] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.736095][T17816] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  825.750944][T17816] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  825.762013][T17816] usb 9-1: Product: syz
[  825.774619][T17816] usb 9-1: Manufacturer: syz
[  825.807403][T17816] hub 9-1:4.0: USB hub found
[  826.028496][T17816] hub 9-1:4.0: config failed, hub has too many ports! (err -19)
[  826.394851][ T1205] usb 9-1: USB disconnect, device number 8
[  827.417933][T22844] loop7: detected capacity change from 0 to 2048
[  827.490724][T22844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  827.665061][   T28] audit: type=1800 audit(1771572751.426:970): pid=22844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6387" name="bus" dev="loop7" ino=18 res=0 errno=0
[  827.871943][T19681] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  828.124494][T22862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6392'.
[  828.147571][T22862] netlink: 'syz.7.6392': attribute type 5 has an invalid length.
[  828.162153][T22860] loop6: detected capacity change from 0 to 2048
[  828.266378][T22860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  828.409901][T17593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  828.996827][T22885] loop8: detected capacity change from 0 to 128
[  829.135439][T22888] team_slave_0: entered promiscuous mode
[  829.141573][T22888] team_slave_1: entered promiscuous mode
[  829.165437][T22888] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  829.178604][T22888] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  830.201229][T22890] loop8: detected capacity change from 0 to 40427
[  830.249785][T22890] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff
[  830.295474][T22890] F2FS-fs (loop8): Image doesn't support compression
[  830.302604][T22890] F2FS-fs (loop8): Image doesn't support compression
[  830.333203][T22890] F2FS-fs (loop8): build fault injection attr: rate: 0, type: 0x4
[  830.357211][T22890] F2FS-fs (loop8): invalid crc value
[  830.382983][T22890] F2FS-fs (loop8): Found nat_bits in checkpoint
[  830.477545][T22890] F2FS-fs (loop8): Start checkpoint disabled!
[  830.522726][T22890] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  830.744174][T20241] Bluetooth: hci1: command tx timeout
[  830.861582][  T141] kworker/u4:4: attempt to access beyond end of device
[  830.861582][  T141] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  830.883198][  T141] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  830.892760][  T141] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  831.369100][T22918] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.6415'.
[  831.472060][T22920] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6417'.
[  833.960015][T22957] loop6: detected capacity change from 0 to 256
[  834.065472][T22957] FAT-fs (loop6): Directory bread(block 64) failed
[  834.082610][T22957] FAT-fs (loop6): Directory bread(block 65) failed
[  834.102959][T22957] FAT-fs (loop6): Directory bread(block 66) failed
[  834.123138][T22957] FAT-fs (loop6): Directory bread(block 67) failed
[  834.154254][T22957] FAT-fs (loop6): Directory bread(block 68) failed
[  834.161039][T22957] FAT-fs (loop6): Directory bread(block 69) failed
[  834.197717][T22957] FAT-fs (loop6): Directory bread(block 70) failed
[  834.214177][T22957] FAT-fs (loop6): Directory bread(block 71) failed
[  834.223959][T22957] FAT-fs (loop6): Directory bread(block 72) failed
[  834.230555][T22957] FAT-fs (loop6): Directory bread(block 73) failed
[  835.691670][T22981] loop7: detected capacity change from 0 to 256
[  835.801420][T22983] loop6: detected capacity change from 0 to 2048
[  835.832150][T22981] FAT-fs (loop7): Directory bread(block 64) failed
[  835.880751][T22981] FAT-fs (loop7): Directory bread(block 65) failed
[  835.887588][T22983] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  835.944183][T22981] FAT-fs (loop7): Directory bread(block 66) failed
[  835.975003][T22981] FAT-fs (loop7): Directory bread(block 67) failed
[  835.981818][T22981] FAT-fs (loop7): Directory bread(block 68) failed
[  836.017639][T22981] FAT-fs (loop7): Directory bread(block 69) failed
[  836.055048][T22981] FAT-fs (loop7): Directory bread(block 70) failed
[  836.062929][T22981] FAT-fs (loop7): Directory bread(block 71) failed
[  836.104751][T22981] FAT-fs (loop7): Directory bread(block 72) failed
[  836.131244][T22981] FAT-fs (loop7): Directory bread(block 73) failed
[  836.216249][T22985] binder: BINDER_SET_CONTEXT_MGR already set
[  836.243609][T22985] binder: 22984:22985 ioctl 40046207 0 returned -16
[  836.445326][T22977] loop8: detected capacity change from 0 to 32768
[  836.583845][T22977] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  836.626715][T22997] loop7: detected capacity change from 0 to 128
[  836.635128][T22997] EXT4-fs: Ignoring removed nobh option
[  836.705979][T22997] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  836.729807][T22997] ext4 filesystem being mounted at /281/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  836.810216][T22977] XFS (loop8): Ending clean mount
[  836.824934][T22997] EXT4-fs warning (device loop7): verify_group_input:151: Cannot add at group 1073745927 (only 1 groups)
[  836.946330][T19681] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  837.058001][T19712] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  837.669112][T23003] loop8: detected capacity change from 0 to 512
[  837.711515][T23003] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.6452: invalid block
[  837.732797][T23003] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.6452: invalid indirect mapped block 4294967295 (level 1)
[  837.750730][T23003] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.6452: invalid indirect mapped block 4294967295 (level 1)
[  837.768029][T23003] EXT4-fs (loop8): 2 truncates cleaned up
[  837.775624][T23003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  837.875282][T23003] EXT4-fs warning (device loop8): ext4_empty_dir:3147: inode #2: comm syz.8.6452: directory missing '.'
[  837.939371][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  838.156487][T23006] loop8: detected capacity change from 0 to 256
[  838.205469][T23006] exFAT-fs (loop8): failed to load upcase table (idx : 0x00000c00, chksum : 0x08037f6a, utbl_chksum : 0xe619d30d)
[  838.735599][   T23] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  838.927266][   T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  838.949177][   T23] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.970429][   T23] usb 9-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  838.981543][T23010] loop7: detected capacity change from 0 to 40427
[  838.990588][   T23] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.994981][T23010] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  839.022062][   T23] usb 9-1: config 0 descriptor??
[  839.047193][T23010] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  839.085947][T23010] F2FS-fs (loop7): invalid crc value
[  839.115755][T23010] F2FS-fs (loop7): Found nat_bits in checkpoint
[  839.281413][T23010] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  839.301168][T23010] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  839.508183][   T23] elo 0003:04E7:0030.0034: item fetching failed at offset 5/7
[  839.545150][   T23] elo 0003:04E7:0030.0034: parse failed
[  839.551248][   T23] elo: probe of 0003:04E7:0030.0034 failed with error -22
[  839.835308][ T5809] usb 9-1: USB disconnect, device number 9
[  840.186756][T23023] loop6: detected capacity change from 0 to 1024
[  840.214920][T23023] EXT4-fs: Ignoring removed bh option
[  840.250129][T23023] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  840.346482][T23023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  840.510743][T23023] EXT4-fs error (device loop6): ext4_check_all_de:666: inode #12: block 7: comm syz.6.6461: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0
[  840.623165][T23023] EXT4-fs (loop6): Remounting filesystem read-only
[  840.835487][T17593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  840.875278][T13204] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  840.889485][T13204] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  840.902240][T13204] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  840.915232][T13204] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  840.925687][T13204] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  840.933392][T13204] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  841.293081][T23041] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  841.309763][T23041] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  841.316965][T23041] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  841.325099][T23041] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  841.332532][T23041] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  841.339652][T23041] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  841.350485][T23041] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  841.394015][T23041] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  841.400553][T23041] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  841.425914][T23041] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  841.438781][ T1142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.451246][T23041] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  841.458796][T23041] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  841.636140][ T1142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.864840][ T1142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.940843][T23038] loop6: detected capacity change from 0 to 32768
[  842.042810][   T28] audit: type=1800 audit(1771572765.796:971): pid=23038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6465" name="file1" dev="loop6" ino=4 res=0 errno=0
[  842.092926][T23038] ERROR: (device loop6): dbAllocBits: leaf page corrupt
[  842.092926][T23038] 
[  842.145084][T23038] ERROR: (device loop6): remounting filesystem as read-only
[  842.195822][T23038] syz.6.6465: attempt to access beyond end of device
[  842.195822][T23038] loop6: rw=34817, sector=4680704, nr_sectors = 968 limit=32768
[  842.282941][ T1142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.294286][  T111] blkno = 8ed80, nblocks = 79
[  842.299205][  T111] ERROR: (device loop6): dbFree: block to be freed is outside the map
[  842.299205][  T111] 
[  842.357295][T23032] chnl_net:caif_netlink_parms(): no params data found
[  842.373951][ T5809] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  842.564531][T23032] bridge0: port 1(bridge_slave_0) entered blocking state
[  842.572332][T23032] bridge0: port 1(bridge_slave_0) entered disabled state
[  842.580437][T23032] bridge_slave_0: entered allmulticast mode
[  842.588169][T23032] bridge_slave_0: entered promiscuous mode
[  842.593659][ T5809] usb 9-1: Using ep0 maxpacket: 8
[  842.598622][T23032] bridge0: port 2(bridge_slave_1) entered blocking state
[  842.608749][T23032] bridge0: port 2(bridge_slave_1) entered disabled state
[  842.616642][T23032] bridge_slave_1: entered allmulticast mode
[  842.616740][T23062] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6473'.
[  842.625131][T23032] bridge_slave_1: entered promiscuous mode
[  842.647174][ T5809] usb 9-1: config 6 has an invalid interface number: 51 but max is 1
[  842.669679][ T5809] usb 9-1: config 6 has no interface number 1
[  842.669919][T23063] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0
[  842.681923][ T5809] usb 9-1: config 6 interface 0 has no altsetting 0
[  842.735518][ T5809] usb 9-1: config 6 interface 51 has no altsetting 0
[  842.767287][ T5809] usb 9-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  842.771097][T23032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  842.813960][ T5809] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.822314][ T5809] usb 9-1: Product: syz
[  842.843770][ T5809] usb 9-1: Manufacturer: syz
[  842.855340][ T5809] usb 9-1: SerialNumber: syz
[  842.878557][T23032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  843.064776][T20241] Bluetooth: hci4: command tx timeout
[  843.085243][T23032] team0: Port device team_slave_0 added
[  843.138639][T23032] team0: Port device team_slave_1 added
[  843.148332][ T5809] xr_serial 9-1:6.51: xr_serial converter detected
[  843.162392][ T1142] tipc: Disabling bearer <udp:syz0>
[  843.172116][ T5809] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  843.184128][ T1142] tipc: Left network mode
[  843.203680][ T5809] xr_serial: probe of ttyUSB0 failed with error -71
[  843.220453][ T5809] usb 9-1: USB disconnect, device number 10
[  843.251109][ T5809] xr_serial 9-1:6.0: device disconnected
[  843.277412][T23032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  843.300850][T23032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  843.349741][T23032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  843.424333][T23032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  843.464674][T23032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  843.544027][T23032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  843.741112][T23079] loop6: detected capacity change from 0 to 2048
[  843.757031][T23079] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  843.842986][T23080] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  844.032030][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.067695][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.093551][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.114091][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.133035][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.180158][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.205030][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.223827][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.241102][T23032] hsr_slave_0: entered promiscuous mode
[  844.243392][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.268701][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.281357][T23032] hsr_slave_1: entered promiscuous mode
[  844.293915][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.319249][T17817] hid-generic 0103:0004:0000.0035: unknown main item tag 0x0
[  844.447182][T17817] hid-generic 0103:0004:0000.0035: hidraw0: <UNKNOWN> HID v0.02 Device [syz0] on syz1
[  844.589082][T23075] loop7: detected capacity change from 0 to 32768
[  844.636186][T23075] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9
[  844.692245][T23092] fido_id[23092]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  845.060807][ T5773] BTRFS error: device /dev/loop7 already registered with a higher generation, found 8 expect 9
[  845.143740][T20241] Bluetooth: hci4: command tx timeout
[  845.253222][T23106] loop6: detected capacity change from 0 to 2048
[  845.339985][T23106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  845.608598][T17593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  845.642088][T23120] loop8: detected capacity change from 0 to 16
[  845.758451][T23120] erofs: (device loop8): mounted with root inode @ nid 36.
[  845.884112][T23120] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[  846.429442][ T1142] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode
[  846.440117][T23129] loop7: detected capacity change from 0 to 8192
[  846.487143][T23129]  loop7: p1 < > p2 p3 < p5 p6 > p4
[  846.492708][T23129] loop7: partition table partially beyond EOD, truncated
[  846.513235][T23129] loop7: p1 start 100663296 is beyond EOD, truncated
[  846.526488][T23129] loop7: p2 size 134217732 extends beyond EOD, truncated
[  846.584617][T23129] loop7: p4 size 14876672 extends beyond EOD, truncated
[  846.602473][T23129] loop7: p5 size 134217732 extends beyond EOD, truncated
[  846.651104][T23129] loop7: p6 size 14876672 extends beyond EOD, truncated
[  847.229467][T20241] Bluetooth: hci4: command tx timeout
[  847.394763][T23032] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  847.447437][T23032] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  847.555540][ T1142] hsr_slave_0: left promiscuous mode
[  847.645272][ T1142] hsr_slave_1: left promiscuous mode
[  847.709639][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  847.741073][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_0
[  847.797777][ T1142] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  847.815076][ T1142] batman_adv: batadv0: Removing interface: batadv_slave_1
[  847.845021][ T1142] batman_adv: batadv0: Interface deactivated: geneve2
[  847.873351][ T1142] batman_adv: batadv0: Removing interface: geneve2
[  847.895038][T23131] loop8: detected capacity change from 0 to 40427
[  847.917762][T23131] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  847.935728][ T1142] bridge_slave_1: left allmulticast mode
[  847.941627][ T1142] bridge_slave_1: left promiscuous mode
[  847.944420][T23131] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  847.983990][ T1142] bridge0: port 2(bridge_slave_1) entered disabled state
[  847.998916][ T1142] bridge_slave_0: left allmulticast mode
[  848.000123][T23131] F2FS-fs (loop8): invalid crc value
[  848.016113][ T1142] bridge_slave_0: left promiscuous mode
[  848.033029][ T1142] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.069979][T23131] F2FS-fs (loop8): Found nat_bits in checkpoint
[  848.199703][ T1142] batadv_slave_1: left promiscuous mode
[  848.226962][ T1142] veth1_vlan: left promiscuous mode
[  848.237601][ T1142] veth0_vlan: left promiscuous mode
[  848.265698][T23131] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  848.273086][T23131] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  848.314082][T23157] loop6: detected capacity change from 0 to 1024
[  848.527382][  T141] hfsplus: b-tree write err: -5, ino 4
[  848.934193][ T1142] pim6reg9 (unregistering): left allmulticast mode
[  849.303877][T20241] Bluetooth: hci4: command tx timeout
[  849.856206][T23166] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  850.729480][T23170] loop8: detected capacity change from 0 to 32768
[  851.334693][ T1142] team_slave_1 (unregistering): left allmulticast mode
[  851.357221][ T1142] team0 (unregistering): Port device team_slave_1 removed
[  851.476971][ T1142] team_slave_0 (unregistering): left allmulticast mode
[  851.487430][ T1142] team0 (unregistering): Port device team_slave_0 removed
[  851.609670][ T1142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  851.732358][ T1142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  852.455495][ T1142] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  852.729361][ T1142] bond0 (unregistering): Released all slaves
[  852.949074][T23032] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  852.961829][T23032] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  853.027578][T23160] veth0_to_bond: entered allmulticast mode
[  853.559734][T23032] 8021q: adding VLAN 0 to HW filter on device bond0
[  853.565484][T23179] loop6: detected capacity change from 0 to 4096
[  853.678337][T23032] 8021q: adding VLAN 0 to HW filter on device team0
[  853.701493][T23181] [U] ¦
[  853.748395][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[  853.755634][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[  853.776297][T23179] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  853.777295][ T1142] IPVS: stop unused estimator thread 0...
[  853.782968][T23179] ntfs3: loop6: Failed to initialize $Extend/$ObjId.
[  853.905471][T17746] bridge0: port 2(bridge_slave_1) entered blocking state
[  853.913194][T17746] bridge0: port 2(bridge_slave_1) entered forwarding state
[  854.033200][   T28] audit: type=1800 audit(1771572777.786:972): pid=23179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6510" name="file1" dev="loop6" ino=30 res=0 errno=0
[  854.184643][T17746] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22.
[  854.204193][T17593] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  854.211189][T17593] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  854.243864][T17593] ntfs3: loop6: ino=3, ntfs_set_state failed, -22.
[  854.253917][ T1097] ntfs3: loop6: ino=3, ntfs3_write_inode failed, -22.
[  854.911042][T23032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  855.312136][T23220] syz_tun: entered promiscuous mode
[  855.344173][T23220] macsec1: entered promiscuous mode
[  855.350686][T23220] macsec1: entered allmulticast mode
[  855.375534][T23222] loop6: detected capacity change from 0 to 16
[  855.393636][T23220] syz_tun: entered allmulticast mode
[  855.415673][T23220] syz_tun: left allmulticast mode
[  855.421068][T23220] syz_tun: left promiscuous mode
[  855.452218][T23222] erofs: (device loop6): mounted with root inode @ nid 36.
[  855.508309][   T28] audit: type=1800 audit(1771572779.266:973): pid=23222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6522" name="file1" dev="loop6" ino=86 res=0 errno=0
[  855.970341][T23032] veth0_vlan: entered promiscuous mode
[  856.035273][T23032] veth1_vlan: entered promiscuous mode
[  856.169103][T23032] veth0_macvtap: entered promiscuous mode
[  856.181357][T23238] loop8: detected capacity change from 0 to 256
[  856.193318][T23032] veth1_macvtap: entered promiscuous mode
[  856.260050][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  856.274949][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.300350][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  856.330911][T23238] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  856.373637][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.404026][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  856.441738][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.488813][T23032] batman_adv: batadv0: Interface activated: batadv_slave_0
[  856.530072][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  856.542857][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.594939][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  856.628396][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.648578][T23032] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  856.671966][T23032] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  856.720058][T23032] batman_adv: batadv0: Interface activated: batadv_slave_1
[  856.827649][T23032] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  856.873587][T23032] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  856.892872][T23250] [U] 
[  856.896990][T23250] [U] 
[  856.900027][T23250] [U] 
[  856.902775][T23250] [U] 
[  856.905609][T23250] [U] 
[  856.908351][T23250] [U] 
[  856.911169][T23250] [U] 
[  856.913900][T23250] [U] 
[  856.916706][    C0] vkms_vblank_simulate: vblank timer overrun
[  856.933633][T23032] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  856.947982][T23032] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  856.966360][T23250] [U] 
[  856.969146][T23250] [U] 
[  856.971901][T23250] [U] 
[  856.991006][T23248] [U] 
[  857.232523][T17746] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.273996][T17746] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.337217][T23258] vivid-007: disconnect
[  857.353889][T23258] vivid-007: reconnect
[  857.384536][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  857.393139][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  857.429036][T23256] loop6: detected capacity change from 0 to 4096
[  857.475054][T23256] ntfs: (device loop6): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  857.587095][T23256] ntfs: volume version 3.1.
[  857.765634][T23263] loop9: detected capacity change from 0 to 8
[  857.874324][T23263] SQUASHFS error: Failed to read block 0x6de: -5
[  857.933746][T23263] SQUASHFS error: Unable to read metadata cache entry [6dc]
[  857.954124][T23263] SQUASHFS error: Failed to read block 0x63a: -5
[  857.982454][T23263] SQUASHFS error: Unable to read metadata cache entry [638]
[  858.014823][T23263] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  858.303908][ T5811] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  858.502824][T23277] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72
[  858.514930][ T5811] usb 9-1: Using ep0 maxpacket: 16
[  858.527385][ T5811] usb 9-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  858.551453][ T5811] usb 9-1: config 0 interface 0 has no altsetting 0
[  858.571927][ T5811] usb 9-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00
[  858.618860][ T5811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.659408][ T5811] usb 9-1: config 0 descriptor??
[  858.699843][T23282] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6539'.
[  858.719675][T23282] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6539'.
[  859.130805][ T5811] uclogic 0003:5543:0004.0036: unknown main item tag 0x0
[  859.164957][ T5811] uclogic 0003:5543:0004.0036: unknown main item tag 0x0
[  859.172144][ T5811] uclogic 0003:5543:0004.0036: unknown main item tag 0x0
[  859.214591][ T5811] uclogic 0003:5543:0004.0036: No inputs registered, leaving
[  859.247212][ T5811] uclogic 0003:5543:0004.0036: hidraw0: USB HID vff.ff Device [HID 5543:0004] on usb-dummy_hcd.8-1/input0
[  859.433187][ T5811] usb 9-1: USB disconnect, device number 11
[  859.494767][T23296] fido_id[23296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  860.340509][T23316] loop8: detected capacity change from 0 to 4096
[  860.459348][T23316] ntfs: (device loop8): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  860.504759][T23316] ntfs: (device loop8): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  860.525562][T23316] ntfs: (device loop8): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  860.553308][T23316] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  860.594079][T23316] ntfs: (device loop8): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  860.658315][T23316] ntfs: volume version 3.1.
[  860.736746][T23316] ntfs: (device loop8): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  860.793746][T23316] ntfs: (device loop8): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  860.852566][T23316] ntfs: (device loop8): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  860.905135][T23316] ntfs: (device loop8): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  860.943748][T23316] ntfs: (device loop8): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  861.277653][T23335] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6553'.
[  861.638624][T23345] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6556'.
[  863.359048][T13204] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  863.381027][T13204] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  863.404158][T13204] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  863.414385][T13204] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  863.422998][T13204] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  863.445662][T13204] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  863.585895][T23371] loop8: detected capacity change from 0 to 32768
[  863.619708][T23371] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  863.663378][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6574'.
[  863.729398][   T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  863.800905][   T34] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.001768][T23371] XFS (loop8): Ending clean mount
[  864.127781][   T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  864.164100][   T34] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.438137][T19712] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  864.462823][   T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  864.499615][   T34] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  864.976797][   T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.008936][   T34] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.543968][T20241] Bluetooth: hci0: command tx timeout
[  865.656894][T23387] chnl_net:caif_netlink_parms(): no params data found
[  865.679762][T23445] loop9: detected capacity change from 0 to 4096
[  865.744724][T23445] NILFS (loop9): invalid segment: Checksum error in segment payload
[  865.752887][T23445] NILFS (loop9): trying rollback from an earlier position
[  865.875747][T23445] NILFS (loop9): recovery complete
[  865.916219][T23450] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  865.967506][T23433] loop6: detected capacity change from 0 to 32768
[  866.093189][T23433] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  866.463892][T23433] XFS (loop6): Ending clean mount
[  866.538472][T23467] loop8: detected capacity change from 0 to 512
[  866.660538][T23467] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  866.675378][T17593] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  866.723597][   T28] kauditd_printk_skb: 6 callbacks suppressed
[  866.723615][   T28] audit: type=1800 audit(1771572790.476:974): pid=23467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6591" name="bus" dev="loop8" ino=18 res=0 errno=0
[  866.760573][T23387] bridge0: port 1(bridge_slave_0) entered blocking state
[  866.760683][T23387] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.760885][T23387] bridge_slave_0: entered allmulticast mode
[  866.762545][T23387] bridge_slave_0: entered promiscuous mode
[  866.766617][T23387] bridge0: port 2(bridge_slave_1) entered blocking state
[  866.766710][T23387] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.766866][T23387] bridge_slave_1: entered allmulticast mode
[  866.768410][T23387] bridge_slave_1: entered promiscuous mode
[  866.786285][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  867.217214][T23387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  867.220853][T23387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  867.612537][T23387] team0: Port device team_slave_0 added
[  867.625847][T20241] Bluetooth: hci0: command tx timeout
[  867.667052][T23387] team0: Port device team_slave_1 added
[  867.836976][T23494] loop9: detected capacity change from 0 to 512
[  867.850870][T23494] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  867.883243][T23494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0102]
[  867.907208][T23493] loop8: detected capacity change from 0 to 4096
[  867.922932][T23493] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512).
[  867.934241][T23494] System zones: 1-12
[  867.938551][T23494] EXT4-fs (loop9): orphan cleanup on readonly fs
[  867.951519][T23494] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.6598: bg 0: block 361: padding at end of block bitmap is not set
[  868.033945][T23494] EXT4-fs (loop9): Remounting filesystem read-only
[  868.097855][T23494] EXT4-fs (loop9): 1 truncate cleaned up
[  868.110904][T23494] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  868.198128][T23493] ntfs3: loop8: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  868.222478][T23387] batman_adv: batadv0: Adding interface: batadv_slave_0
[  868.244407][T23387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.333612][T23387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  868.428029][T23032] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  868.655957][T23387] batman_adv: batadv0: Adding interface: batadv_slave_1
[  868.693636][T23387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  868.773306][T23387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  869.051998][T23515] loop8: detected capacity change from 0 to 4096
[  869.085149][T23515] ntfs3: loop8: Different NTFS sector size (1024) and media sector size (512).
[  869.085886][   T34] IPVS: stopping backup sync thread 23063 ...
[  869.142177][T23387] hsr_slave_0: entered promiscuous mode
[  869.237072][T23387] hsr_slave_1: entered promiscuous mode
[  869.270016][T23387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  869.275372][T23515] ntfs3: loop8: ino=1e, "file1" ntfs_sync_inode failed, -22.
[  869.289304][T23387] Cannot create hsr debugfs directory
[  869.324404][T23515] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  869.358734][T23525] ntfs3: loop8: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  869.703882][T20241] Bluetooth: hci0: command tx timeout
[  870.038535][T23536] loop9: detected capacity change from 0 to 2048
[  870.118342][   T34] hsr_slave_0: left promiscuous mode
[  870.146374][T23536] Alternate GPT is invalid, using primary GPT.
[  870.158189][   T34] hsr_slave_1: left promiscuous mode
[  870.174599][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  870.182305][T23536]  loop9: p1 p2 p3
[  870.196009][   T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[  870.216369][   T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  870.243820][   T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[  870.287812][   T34] bridge_slave_1: left allmulticast mode
[  870.313770][   T34] bridge_slave_1: left promiscuous mode
[  870.354343][   T34] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.407910][   T34] bridge_slave_0: left allmulticast mode
[  870.447550][   T34] bridge_slave_0: left promiscuous mode
[  870.474131][   T34] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.614960][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  870.624257][   T34] team_slave_0: left promiscuous mode
[  870.631045][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  870.631066][   T34] team_slave_1: left promiscuous mode
[  870.699925][   T34] veth1_macvtap: left promiscuous mode
[  870.700296][T11511] udevd[11511]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory
[  870.718727][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory
[  870.721061][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  870.733227][   T34] veth0_macvtap: left promiscuous mode
[  870.733416][   T34] veth1_vlan: left promiscuous mode
[  870.733876][   T34] veth0_vlan: left promiscuous mode
[  871.068662][T23533] loop8: detected capacity change from 0 to 32768
[  871.142181][T23533] JBD2: Ignoring recovery information on journal
[  871.198442][T23533] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  871.541831][   T28] audit: type=1800 audit(1771572795.296:975): pid=23533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6610" name="bus" dev="loop8" ino=17058 res=0 errno=0
[  871.722492][T19712] ocfs2: Unmounting device (7,8) on (node local)
[  871.785829][T20241] Bluetooth: hci0: command tx timeout
[  871.933085][    C0] vkms_vblank_simulate: vblank timer overrun
[  871.943783][ T1205] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  872.113847][T23569] Bluetooth: MGMT ver 1.22
[  872.174138][ T1205] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  872.213755][ T1205] usb 10-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  872.223321][ T1205] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  872.264698][ T1205] usb 10-1: config 0 descriptor??
[  872.270662][T23565] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[  872.399235][T23573] loop8: detected capacity change from 0 to 256
[  872.542365][T23573] FAT-fs (loop8): Directory bread(block 64) failed
[  872.550430][T23573] FAT-fs (loop8): Directory bread(block 65) failed
[  872.558875][T23573] FAT-fs (loop8): Directory bread(block 66) failed
[  872.566317][T23573] FAT-fs (loop8): Directory bread(block 67) failed
[  872.574090][T23573] FAT-fs (loop8): Directory bread(block 68) failed
[  872.580788][T23573] FAT-fs (loop8): Directory bread(block 69) failed
[  872.588810][T23573] FAT-fs (loop8): Directory bread(block 70) failed
[  872.597530][T23573] FAT-fs (loop8): Directory bread(block 71) failed
[  872.605249][T23573] FAT-fs (loop8): Directory bread(block 72) failed
[  872.620419][T23573] FAT-fs (loop8): Directory bread(block 73) failed
[  872.806162][ T1205] razer 0003:1532:010E.0037: hidraw0: USB HID v1.01 Device [HID 1532:010e] on usb-dummy_hcd.9-1/input0
[  873.071951][ T5811] usb 10-1: USB disconnect, device number 2
[  873.415836][   T34] team0 (unregistering): Port device team_slave_1 removed
[  873.508035][   T34] team0 (unregistering): Port device team_slave_0 removed
[  873.602977][   T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  873.741867][   T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  874.117012][ T5809] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  874.315917][ T5809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  874.326887][ T5809] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  874.359855][ T5809] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  874.371793][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  874.380760][ T5809] usb 10-1: SerialNumber: syz
[  874.601975][   T34] bond0 (unregistering): Released all slaves
[  874.627179][ T5809] usb 10-1: 0:2 : does not exist
[  874.712852][ T5809] usb 10-1: 0:0: failed to get current value for ch 0 (-22)
[  874.743244][ T5809] usb 10-1: USB disconnect, device number 3
[  875.360044][T23599] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6629'.
[  875.371301][T23599] tipc: Invalid UDP bearer configuration
[  875.371387][T23599] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  875.666026][T23604] genirq: Flags mismatch irq 5. 00000000 (das16m1) vs. 00000000 (aio_iiro_16)
[  875.756901][T23606] loop8: detected capacity change from 0 to 512
[  875.872435][T23606] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.6632: inode #13: comm syz.8.6632: iget: illegal inode #
[  875.906626][T23606] EXT4-fs error (device loop8): ext4_orphan_get:1403: comm syz.8.6632: couldn't read orphan inode 13 (err -117)
[  875.984810][T23606] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  876.288562][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  876.637300][T23622] sp0: Synchronizing with TNC
[  876.682102][T23603] loop6: detected capacity change from 0 to 32768
[  876.696940][T23619] [U] è
[  877.032378][T23629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  877.502336][T23641] loop8: detected capacity change from 0 to 128
[  877.505617][T23387] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  877.571079][T23387] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  877.600326][T23641] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  877.638644][T23387] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  877.690578][T23641] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  877.823689][T23387] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  877.879088][T23646] loop9: detected capacity change from 0 to 4096
[  877.986673][T23646] ntfs: volume version 3.1.
[  878.100145][T19712] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  878.220331][T23387] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.326439][T23387] 8021q: adding VLAN 0 to HW filter on device team0
[  878.399684][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state
[  878.407238][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.434813][T23658] loop9: detected capacity change from 0 to 256
[  878.485608][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.492930][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.512675][T23658] FAT-fs (loop9): Directory bread(block 64) failed
[  878.535421][T23658] FAT-fs (loop9): Directory bread(block 65) failed
[  878.542246][T23658] FAT-fs (loop9): Directory bread(block 66) failed
[  878.599996][T23658] FAT-fs (loop9): Directory bread(block 67) failed
[  878.633824][T23658] FAT-fs (loop9): Directory bread(block 68) failed
[  878.640447][T23658] FAT-fs (loop9): Directory bread(block 69) failed
[  878.687940][T23658] FAT-fs (loop9): Directory bread(block 70) failed
[  878.718117][T23658] FAT-fs (loop9): Directory bread(block 71) failed
[  878.774632][T23658] FAT-fs (loop9): Directory bread(block 72) failed
[  878.781249][T23658] FAT-fs (loop9): Directory bread(block 73) failed
[  879.375982][T23387] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.556850][T23387] veth0_vlan: entered promiscuous mode
[  879.586692][T23685] loop8: detected capacity change from 0 to 2048
[  879.600843][T23387] veth1_vlan: entered promiscuous mode
[  879.688416][T23685] Alternate GPT is invalid, using primary GPT.
[  879.699132][T23387] veth0_macvtap: entered promiscuous mode
[  879.714097][T23685]  loop8: p1 p2 p3
[  879.767495][T23387] veth1_macvtap: entered promiscuous mode
[  879.855987][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  879.906420][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  879.927167][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  879.953634][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.022994][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  880.071847][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.109707][T23387] batman_adv: batadv0: Interface activated: batadv_slave_0
[  880.154635][T23668] loop6: detected capacity change from 0 to 32768
[  880.172690][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  880.199602][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.242520][T23668] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  880.259872][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  880.268086][T11511] udevd[11511]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory
[  880.278576][ T5773] udevd[5773]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  880.320530][ T5780] udevd[5780]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory
[  880.341112][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.401884][T23387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  880.473849][T23387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  880.519811][T23668] XFS (loop6): Ending clean mount
[  880.524966][T23387] batman_adv: batadv0: Interface activated: batadv_slave_1
[  880.547579][T23668] XFS (loop6): Quotacheck needed: Please wait.
[  880.579497][T23387] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  880.613965][T23387] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  880.654405][T23387] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  880.663374][T23387] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  880.678751][T23690] loop9: detected capacity change from 0 to 32768
[  880.694643][T23668] XFS (loop6): Quotacheck: Done.
[  880.823308][T23690] add_index: next_index = 0.  Resetting!
[  880.865110][T23690] non-latin1 character 0x3ff found in JFS file name
[  880.871878][T23690] mount with iocharset=utf8 to access
[  881.021757][T17593] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  881.151868][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.213701][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  881.363259][T19804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  881.382180][T19804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.754863][T23707] loop8: detected capacity change from 0 to 32768
[  882.903669][T13204] Bluetooth: hci1: command 0x0406 tx timeout
[  882.951928][T23707] XFS (loop8): DAX unsupported by block device. Turning off DAX.
[  883.008617][T23707] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  883.236595][T23707] XFS (loop8): Ending clean mount
[  883.309791][T23707] XFS (loop8): Quotacheck needed: Please wait.
[  883.523174][T23707] XFS (loop8): Quotacheck: Done.
[  883.581681][T23729] loop9: detected capacity change from 0 to 32768
[  883.618190][T19712] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  883.654003][T23729] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.6659 (23729)
[  883.776115][T23729] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  883.802566][T23729] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[  883.815002][T23729] BTRFS info (device loop9): setting nodatacow, compression disabled
[  883.823352][T23729] BTRFS info (device loop9): force clearing of disk cache
[  883.868202][T23729] BTRFS info (device loop9): enabling ssd optimizations
[  883.924660][T23729] BTRFS info (device loop9): using spread ssd allocation scheme
[  883.932687][T23729] BTRFS info (device loop9): turning off barriers
[  883.990538][T23729] BTRFS info (device loop9): disabling free space tree
[  884.024349][T23729] BTRFS info (device loop9): not using ssd optimizations
[  884.062902][T23729] BTRFS info (device loop9): not using spread ssd allocation scheme
[  884.248961][T23733] loop2: detected capacity change from 0 to 40427
[  884.292016][T23733] F2FS-fs (loop2): Invalid log blocks per segment (4278190089)
[  884.314215][T23733] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  884.337900][T23729] BTRFS info (device loop9): rebuilding free space tree
[  884.370660][T23733] F2FS-fs (loop2): invalid crc value
[  884.409221][T23729] BTRFS info (device loop9): disabling free space tree
[  884.426409][T23729] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  884.454765][T23729] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  884.468960][T23733] F2FS-fs (loop2): Found nat_bits in checkpoint
[  884.715507][T23733] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  884.722723][T23733] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  884.862637][T23733] F2FS-fs (loop2): Corrupted max_depth of 3: 255
[  884.913206][T23032] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  884.919106][T23733] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  885.883622][T23782] loop8: detected capacity change from 0 to 32768
[  885.997316][T23782] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  886.198205][T23782] XFS (loop8): Ending clean mount
[  886.236539][T23782] XFS (loop8): Quotacheck needed: Please wait.
[  886.359283][T23816] loop9: detected capacity change from 0 to 4096
[  886.493789][T23782] XFS (loop8): Quotacheck: Done.
[  886.546316][T23816] ntfs: volume version 3.1.
[  886.591679][T23816] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  886.634813][T23816] ntfs: (device loop9): load_and_init_quota(): Failed to find inode number for $Quota.
[  886.676510][T23816] ntfs: (device loop9): load_system_files(): Failed to load $Quota.  Mounting read-only.  Run chkdsk.
[  886.724220][T23816] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  886.754860][T23816] ntfs: (device loop9): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl.
[  886.776695][T23825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6674'.
[  886.797114][T23816] ntfs: (device loop9): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  886.870536][T19712] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  887.067923][T23816] ntfs: (device loop9): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-1.  You might want to try to use the mount option nls=utf8.
[  887.131372][T23816] ntfs: (device loop9): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  887.370294][T23833] loop2: detected capacity change from 0 to 256
[  887.819762][T23822] loop6: detected capacity change from 0 to 40427
[  887.855184][T23822] F2FS-fs (loop6): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  887.873935][T23822] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  887.882649][T23822] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0x35f7
[  887.908371][T23822] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff
[  887.935895][T23822] F2FS-fs (loop6): Image doesn't support compression
[  887.951859][T23822] F2FS-fs (loop6): invalid crc value
[  887.993875][T23822] F2FS-fs (loop6): Found nat_bits in checkpoint
[  888.135108][T23822] F2FS-fs (loop6): Start checkpoint disabled!
[  888.241879][T23822] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  888.255659][T23822] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  888.917401][ T1097] kworker/u4:7: attempt to access beyond end of device
[  888.917401][ T1097] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  888.968687][ T1097] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  889.003757][ T1097] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  889.538272][T23887] loop8: detected capacity change from 0 to 256
[  889.579353][T23887] exfat: Deprecated parameter 'namecase'
[  889.589028][T23889] autofs4:pid:23889:autofs_fill_super: called with bogus options
[  889.613869][T23887] exfat: Deprecated parameter 'namecase'
[  889.624080][T23887] exfat: Deprecated parameter 'namecase'
[  889.692949][T23887] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[  889.731561][T23887] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  889.879515][T23893] loop9: detected capacity change from 0 to 1024
[  890.044414][T23893] hfsplus: bad catalog entry type
[  890.164636][ T1097] hfsplus: b-tree write err: -5, ino 4
[  890.363064][T23905] loop9: detected capacity change from 0 to 1024
[  890.613269][T23916] netlink: 'syz.6.6702': attribute type 1 has an invalid length.
[  890.623140][ T1142] hfsplus: b-tree write err: -5, ino 4
[  891.023641][ T1205] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  891.093356][T23934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6708'.
[  891.102740][T23934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6708'.
[  891.224645][ T1205] usb 9-1: Using ep0 maxpacket: 16
[  891.261233][ T1205] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[  891.283966][ T1205] usb 9-1: config 0 has no interface number 0
[  891.291088][ T1205] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  891.351409][ T1205] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  891.387447][ T1205] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  891.398591][ T1205] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  891.430613][ T1205] usb 9-1: Product: syz
[  891.447270][ T1205] usb 9-1: SerialNumber: syz
[  891.476663][ T1205] usb 9-1: config 0 descriptor??
[  891.494306][ T1205] cm109 9-1:0.8: invalid payload size 0, expected 4
[  891.535655][ T1205] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input28
[  891.594982][T23944] loop9: detected capacity change from 0 to 512
[  891.636186][T23948] loop2: detected capacity change from 0 to 128
[  891.695181][T23944] EXT4-fs warning (device loop9): dx_probe:833: inode #2: comm syz.9.6713: Unrecognised inode hash code 255
[  891.711031][T23948] VFS: Found a Xenix FS (block size = 512) on device loop2
[  891.743747][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.754780][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.762015][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.769724][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.777112][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.784393][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.791836][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.799076][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.810502][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.818545][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71
[  891.826950][ T1205] usb 9-1: USB disconnect, device number 12
[  891.832958][    C0] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  891.842858][T23944] EXT4-fs warning (device loop9): dx_probe:966: inode #2: comm syz.9.6713: Corrupt directory, running e2fsck is recommended
[  891.857157][T23944] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  891.866776][T23944] EXT4-fs error (device loop9): ext4_iget_extra_inode:4732: inode #15: comm syz.9.6713: corrupted in-inode xattr: invalid ea_ino
[  891.885462][T23944] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.6713: couldn't read orphan inode 15 (err -117)
[  891.926362][T23944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  891.940788][ T1205] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  891.995706][T23387] sysv_free_block: trying to free block not in datazone
[  892.057739][T23387] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  892.221289][T23032] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  892.470969][T23967] ieee802154 phy1 wpan1: encryption failed: -126
[  892.588757][T23972] loop8: detected capacity change from 0 to 128
[  892.627753][T23972] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  893.273667][ T5842] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  893.469951][ T5842] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  893.501888][ T5842] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  893.530449][ T5842] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  893.570829][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.585261][ T5842] usb 9-1: config 0 descriptor??
[  893.829983][T23974] loop9: detected capacity change from 0 to 32768
[  893.836937][ T5842] usb 9-1: USB disconnect, device number 13
[  893.902396][T23974] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[  893.922948][T24005] loop2: detected capacity change from 0 to 1024
[  893.975126][T24005] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  894.047634][T23974] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  894.052047][T24005] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  894.364016][T23032] ocfs2: Unmounting device (7,9) on (node local)
[  894.380526][T23387] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  894.847268][T24016] loop8: detected capacity change from 0 to 4096
[  894.888792][T24016] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512).
[  894.989843][T24026] loop2: detected capacity change from 0 to 2048
[  895.020477][T24016] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[  895.034816][T24026] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  895.063153][T24016] ntfs3: loop8: Failed to load $Extend (-22).
[  895.086298][T24026] NILFS (loop2): mounting unchecked fs
[  895.094302][T24016] ntfs3: loop8: Failed to initialize $Extend.
[  895.126362][T24026] NILFS (loop2): recovery complete
[  895.140676][T24030] loop6: detected capacity change from 0 to 164
[  895.144604][T24032] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  895.300896][T24030] iso9660: Corrupted directory entry in block 2 of inode 1792
[  895.340775][T24016] overlayfs: upper fs does not support tmpfile.
[  895.421931][T24016] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  895.500666][T24016] overlayfs: failed to get uuid (/file0, err=-22); falling back to uuid=null.
[  895.510085][   T28] audit: type=1326 audit(1771572819.256:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24035 comm="syz.9.6738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f018cf9c629 code=0x0
[  895.556845][T24016] overlayfs: failed to get origin (-22)
[  895.564155][T24016] overlayfs: failed to verify origin (/, ino=5, err=-22)
[  895.593925][T24016] overlayfs: failed to verify upper root origin
[  895.824552][T24044] loop2: detected capacity change from 0 to 256
[  895.929803][T24044] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  896.050018][T24051] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6744'.
[  896.505031][T24056] loop6: detected capacity change from 0 to 4096
[  896.624381][T24056] ntfs: volume version 3.1.
[  897.042563][T24079] loop8: detected capacity change from 0 to 4096
[  897.059791][T24079] ntfs: (device loop8): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  897.117310][T24079] ntfs: (device loop8): ntfs_read_locked_inode(): $DATA attribute is missing.
[  897.139709][T24079] ntfs: (device loop8): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  897.210388][T24079] ntfs: (device loop8): load_system_files(): Failed to load $MFTMirr.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  897.241647][T24086] loop6: detected capacity change from 0 to 1024
[  897.323648][T24079] ntfs: volume version 3.1.
[  897.361959][T24086] hfsplus: bad catalog entry type
[  897.526917][ T1097] hfsplus: b-tree write err: -5, ino 4
[  898.106636][T24107] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6762'.
[  898.513685][T23612] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  898.750902][T23612] usb 10-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00
[  898.783560][T23612] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.816768][T23612] usb 10-1: config 0 descriptor??
[  898.850846][T24132] loop6: detected capacity change from 0 to 16
[  898.872492][T24132] erofs: (device loop6): mounted with root inode @ nid 36.
[  899.279002][T23612] lenovo 0003:17EF:60B5.0038: hidraw0: USB HID v1.01 Device [HID 17ef:60b5] on usb-dummy_hcd.9-1/input0
[  899.436443][T24118] loop8: detected capacity change from 0 to 32768
[  899.460312][   T23] usb 10-1: USB disconnect, device number 4
[  899.463958][T24118] (syz.8.6768,24118,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  899.527617][T24118] (syz.8.6768,24118,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  899.599261][T24140] fido_id[24140]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  899.599292][T24118] JBD2: Ignoring recovery information on journal
[  899.623037][T24144] loop6: detected capacity change from 0 to 2048
[  899.693963][T24118] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  899.723353][T24144] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  899.876916][   T28] audit: type=1800 audit(1771572823.626:977): pid=24144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6774" name="file1" dev="loop6" ino=1367 res=0 errno=0
[  899.928536][T24118] syz.8.6768: attempt to access beyond end of device
[  899.928536][T24118] loop8: rw=2051, sector=28680, nr_sectors = 28664 limit=32768
[  900.063979][T24118] (syz.8.6768,24118,0):ocfs2_trim_group:7510 ERROR: status = -5
[  900.071794][T24118] (syz.8.6768,24118,0):ocfs2_trim_mainbm:7621 ERROR: status = -5
[  900.304037][T19712] ocfs2: Unmounting device (7,8) on (node local)
[  900.360100][T24134] loop2: detected capacity change from 0 to 32768
[  900.512107][T24152] loop9: detected capacity change from 0 to 4096
[  900.545416][T24152] ntfs3: loop9: Different NTFS sector size (4096) and media sector size (512).
[  900.568090][T24134] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  900.684944][T24134] XFS (loop2): Ending clean mount
[  900.707623][T24134] XFS (loop2): Quotacheck needed: Please wait.
[  901.032982][   T28] audit: type=1326 audit(1771572824.786:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.058229][T24134] XFS (loop2): Quotacheck: Done.
[  901.130567][   T28] audit: type=1326 audit(1771572824.786:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.273038][   T28] audit: type=1326 audit(1771572824.796:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.381771][   T28] audit: type=1326 audit(1771572824.796:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.457076][T23387] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  901.471197][   T28] audit: type=1326 audit(1771572824.796:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.547270][   T28] audit: type=1326 audit(1771572824.796:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.630010][   T28] audit: type=1326 audit(1771572824.796:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  901.688612][   T28] audit: type=1326 audit(1771572824.796:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24172 comm="syz.6.6780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8a139c629 code=0x7ffc0000
[  902.300716][T24204] loop2: detected capacity change from 0 to 64
[  902.685380][T24179] loop8: detected capacity change from 0 to 32768
[  902.987371][T24212] loop2: detected capacity change from 0 to 4096
[  903.144325][    C1] sd 0:0:1:0: [sda] tag#7899 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  903.155217][    C1] sd 0:0:1:0: [sda] tag#7899 CDB: Read(6) 08 00 00 00 00 00
[  903.422831][T24212] ntfs3: loop2: failed to convert "0080" to macturkish
[  903.467078][T24212] ntfs3: loop2: failed to convert name for inode 1e.
[  904.132650][T24245] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  904.658166][T24232] loop6: detected capacity change from 0 to 32768
[  904.703880][T24232] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.6798 (24232)
[  904.783770][T24232] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  904.823748][T24232] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm
[  904.863704][T24232] BTRFS info (device loop6): setting nodatacow, compression disabled
[  904.872071][T24232] BTRFS info (device loop6): force clearing of disk cache
[  904.892331][T24255] loop2: detected capacity change from 0 to 4096
[  904.896407][T24231] loop9: detected capacity change from 0 to 32768
[  904.919601][T24232] BTRFS info (device loop6): enabling ssd optimizations
[  904.960287][T24232] BTRFS info (device loop6): using spread ssd allocation scheme
[  905.002680][T24232] BTRFS info (device loop6): turning off barriers
[  905.049110][T24255] ntfs: volume version 3.1.
[  905.054586][T24232] BTRFS info (device loop6): disabling free space tree
[  905.061702][T24232] BTRFS info (device loop6): not using ssd optimizations
[  905.103253][T24232] BTRFS info (device loop6): not using spread ssd allocation scheme
[  905.492386][T24232] BTRFS info (device loop6): rebuilding free space tree
[  905.583296][T24232] BTRFS info (device loop6): disabling free space tree
[  905.594021][ T5809] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  905.625517][T24232] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  905.643245][T24248] loop8: detected capacity change from 0 to 32768
[  905.673721][T24232] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  905.805982][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  905.824830][ T5809] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  905.845387][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  905.855231][T24248] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  905.866922][ T5809] usb 10-1: config 0 descriptor??
[  906.039435][T24248] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  906.086066][   T28] audit: type=1800 audit(1771572829.846:986): pid=24232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6798" name="file1" dev="loop6" ino=260 res=0 errno=0
[  906.110652][T24248] XFS (loop8): Starting recovery (logdev: internal)
[  906.227533][T17593] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  906.235746][T24248] XFS (loop8): Ending recovery (logdev: internal)
[  906.376781][ T5809] logitech 0003:046D:C626.0039: unbalanced collection at end of report description
[  906.394621][ T5809] logitech 0003:046D:C626.0039: parse failed
[  906.401083][ T5809] logitech: probe of 0003:046D:C626.0039 failed with error -22
[  906.653009][T19712] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  906.695893][ T1205] usb 10-1: USB disconnect, device number 5
[  907.618372][T24327] loop9: detected capacity change from 0 to 1024
[  907.627506][T24323] loop6: detected capacity change from 0 to 4096
[  907.730670][T24327] hfsplus: inconsistency in B*Tree (1,0,2,1,0)
[  907.743831][T24329] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  907.772473][T24327] hfsplus: xattr searching failed
[  907.968377][T17746] hfsplus: b-tree write err: -5, ino 4
[  908.024895][T24323] NILFS error (device loop6): nilfs_dotdot: directory #12 missing '.'
[  908.103930][T24323] Remounting filesystem read-only
[  908.546717][T24344] loop6: detected capacity change from 0 to 512
[  908.583521][T24344] EXT4-fs: inline encryption not supported
[  908.592837][T24344] EXT4-fs: Ignoring removed mblk_io_submit option
[  908.683840][T24344] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  908.765379][T24344] EXT4-fs (loop6): Test dummy encryption mode enabled
[  908.815377][T24344] EXT4-fs (loop6): orphan cleanup on readonly fs
[  908.822043][T24344] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.6823: inode #13: comm syz.6.6823: iget: illegal inode #
[  908.959586][T24322] loop8: detected capacity change from 0 to 32768
[  909.008053][T24344] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.6823: couldn't read orphan inode 13 (err -117)
[  909.080086][T24322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.6813 (24322)
[  909.129672][T24344] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  909.132358][T24322] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  909.197688][T24322] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[  909.225626][T24322] BTRFS info (device loop8): setting nodatasum
[  909.254153][T24344] EXT4-fs error (device loop6): ext4_resize_begin:62: comm syz.6.6823: resize_inode disabled but reserved GDT blocks non-zero
[  909.266897][T24322] BTRFS info (device loop8): force zlib compression, level 3
[  909.309528][T24322] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8)
[  909.350275][T24322] BTRFS info (device loop8): use lzo compression, level 0
[  909.380545][T24322] BTRFS info (device loop8): turning on flush-on-commit
[  909.413784][T24322] BTRFS info (device loop8): enabling auto defrag
[  909.453668][T24322] BTRFS info (device loop8): max_inline at 4096
[  909.460107][T24322] BTRFS info (device loop8): using free space tree
[  909.478259][T17593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  909.771154][T24322] BTRFS info (device loop8): enabling ssd optimizations
[  910.468208][T19712] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  910.911190][T24386] loop9: detected capacity change from 0 to 32768
[  911.045715][T24386] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  911.137174][T24420] loop2: detected capacity change from 0 to 128
[  911.286542][T24420] FAT-fs (loop2): Directory bread(block 32) failed
[  911.342871][T24420] FAT-fs (loop2): Directory bread(block 33) failed
[  911.386833][T24420] FAT-fs (loop2): Directory bread(block 34) failed
[  911.426517][T24420] FAT-fs (loop2): Directory bread(block 35) failed
[  911.464522][T24420] FAT-fs (loop2): Directory bread(block 36) failed
[  911.471314][T24420] FAT-fs (loop2): Directory bread(block 37) failed
[  911.539829][T24420] FAT-fs (loop2): Directory bread(block 38) failed
[  911.573543][T24420] FAT-fs (loop2): Directory bread(block 39) failed
[  911.580445][T24420] FAT-fs (loop2): Directory bread(block 40) failed
[  911.614287][T24420] FAT-fs (loop2): Directory bread(block 41) failed
[  911.618989][T23032] ocfs2: Unmounting device (7,9) on (node local)
[  912.117784][T24420] syz.2.6843: attempt to access beyond end of device
[  912.117784][T24420] loop2: rw=524288, sector=4108, nr_sectors = 4 limit=128
[  912.194696][T24420] syz.2.6843: attempt to access beyond end of device
[  912.194696][T24420] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128
[  912.284872][   T28] audit: type=1800 audit(1771572836.046:987): pid=24420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.6843" name="file1" dev="loop2" ino=1049119 res=0 errno=0
[  912.775525][T24451] loop2: detected capacity change from 0 to 1024
[  912.888712][   T28] audit: type=1800 audit(1771572836.636:988): pid=24451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6852" name="file1" dev="loop2" ino=2 res=0 errno=0
[  913.668226][T24474] loop9: detected capacity change from 0 to 4096
[  913.802371][T24474] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[  913.827509][T24474] ntfs3: loop9: Failed to initialize $Extend/$ObjId.
[  913.915639][T24474] ntfs3: loop9: ino=1e, "file1" The size of extended attributes must not exceed 64KiB
[  914.461052][T24498] loop9: detected capacity change from 0 to 64
[  914.735447][T24503] loop9: detected capacity change from 0 to 256
[  914.875127][T24478] loop2: detected capacity change from 0 to 32768
[  914.911106][T24478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.6863 (24478)
[  914.989890][T24482] loop6: detected capacity change from 0 to 32768
[  915.003741][T24478] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  915.046459][T24478] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  915.076103][T24482] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop6 scanned by syz.6.6864 (24482)
[  915.098174][T24478] BTRFS info (device loop2): setting nodatasum
[  915.134039][T24478] BTRFS info (device loop2): force zlib compression, level 3
[  915.141713][T24478] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  915.196070][T24482] BTRFS info (device loop6): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  915.202941][T24478] BTRFS info (device loop2): use lzo compression, level 0
[  915.248933][T24478] BTRFS info (device loop2): turning on flush-on-commit
[  915.261863][T24482] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  915.283568][T24478] BTRFS info (device loop2): enabling auto defrag
[  915.303772][T24478] BTRFS info (device loop2): max_inline at 4096
[  915.304928][T24482] BTRFS info (device loop6): force zlib compression, level 3
[  915.330963][T24478] BTRFS info (device loop2): using free space tree
[  915.371736][T24482] BTRFS info (device loop6): force clearing of disk cache
[  915.439152][T24482] BTRFS info (device loop6): setting nodatasum
[  915.446702][T24510] loop9: detected capacity change from 0 to 4096
[  915.453832][T24482] BTRFS info (device loop6): allowing degraded mounts
[  915.461305][T24482] BTRFS info (device loop6): enabling disk space caching
[  915.474967][T24510] ntfs: (device loop9): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  915.508385][T24510] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing.
[  915.524366][T24510] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  915.548007][T24510] ntfs: (device loop9): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  915.549748][T24482] BTRFS info (device loop6): disk space caching is enabled
[  915.651545][T24510] ntfs: volume version 3.1.
[  915.677272][T24478] BTRFS info (device loop2): enabling ssd optimizations
[  915.702867][T24510] ntfs: (device loop9): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  915.815379][T24510] ntfs: (device loop9): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  915.864213][T24510] ntfs: (device loop9): load_system_files(): Failed to determine if Windows is hibernated.  Mounting read-only.  Run chkdsk.
[  915.927993][T24510] ntfs: (device loop9): ntfs_read_locked_index_inode(): $INDEX_ROOT attribute is missing.
[  915.989970][T24482] BTRFS info (device loop6): auto enabling async discard
[  916.042974][T24482] BTRFS info (device loop6): rebuilding free space tree
[  916.131793][T24482] BTRFS info (device loop6): disabling free space tree
[  916.163349][T24482] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  916.205274][T24482] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  916.256734][T23387] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  916.544516][T24482] BTRFS info (device loop6): Snapshot src from another FS
[  916.741701][T17593] BTRFS info (device loop6): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  917.016937][T24573] loop9: detected capacity change from 0 to 2048
[  917.244960][T24573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  917.475832][    C1] vkms_vblank_simulate: vblank timer overrun
[  917.494572][T23032] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  917.723792][ T5809] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  917.755850][T24596] devpts: called with bogus options
[  917.946254][ T5809] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.983895][ T5809] usb 9-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00
[  918.025280][ T5809] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  918.049314][T24606] loop2: detected capacity change from 0 to 1024
[  918.058254][ T5809] usb 9-1: config 0 descriptor??
[  918.562299][ T5809] gembird 0003:11FF:3331.003A: unknown main item tag 0x0
[  918.585924][ T5809] gembird 0003:11FF:3331.003A: unknown main item tag 0x0
[  918.602393][ T5809] gembird 0003:11FF:3331.003A: unknown main item tag 0x0
[  918.621157][ T5809] gembird 0003:11FF:3331.003A: unknown main item tag 0x0
[  918.653898][ T5809] gembird 0003:11FF:3331.003A: unknown main item tag 0x0
[  918.685200][ T5809] gembird 0003:11FF:3331.003A: hidraw0: USB HID v0.00 Device [HID 11ff:3331] on usb-dummy_hcd.8-1/input0
[  918.871104][ T5809] usb 9-1: USB disconnect, device number 14
[  918.959105][T24621] fido_id[24621]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[  919.078883][T23612] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  919.298396][T23612] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  919.309763][T24631] loop9: detected capacity change from 0 to 256
[  919.329483][T23612] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  919.360508][T23612] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  919.402665][T23612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.429907][T24622] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  919.450121][T24631] FAT-fs (loop9): Directory bread(block 64) failed
[  919.459826][T23612] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[  919.488380][T24631] FAT-fs (loop9): Directory bread(block 65) failed
[  919.521411][T24631] FAT-fs (loop9): Directory bread(block 66) failed
[  919.555846][T24631] FAT-fs (loop9): Directory bread(block 67) failed
[  919.594599][T24631] FAT-fs (loop9): Directory bread(block 68) failed
[  919.603232][T24631] FAT-fs (loop9): Directory bread(block 69) failed
[  919.638542][T24631] FAT-fs (loop9): Directory bread(block 70) failed
[  919.673068][T24631] FAT-fs (loop9): Directory bread(block 71) failed
[  919.723870][T24631] FAT-fs (loop9): Directory bread(block 72) failed
[  919.730657][T24631] FAT-fs (loop9): Directory bread(block 73) failed
[  920.043330][ T5809] usb 3-1: USB disconnect, device number 20
[  920.672390][T24657] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  921.039565][T24672] xt_NFQUEUE: number of queues (1024) out of range (got 66558)
[  921.115271][T24673] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6912'.
[  921.149694][T24673] nbd: couldn't find a device at index 196608
[  922.101150][T24663] loop2: detected capacity change from 0 to 32768
[  922.209946][T24663] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  922.456524][T24663] XFS (loop2): Ending clean mount
[  922.505248][T24663] XFS (loop2): Quotacheck needed: Please wait.
[  922.648035][T24717] loop9: detected capacity change from 0 to 64
[  922.750829][T24663] XFS (loop2): Quotacheck: Done.
[  923.060657][T23387] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  923.926992][T24748] loop2: detected capacity change from 0 to 128
[  924.319565][T24763] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6936'.
[  924.459439][T24767] sp0: Synchronizing with TNC
[  925.260508][T24790] loop8: detected capacity change from 0 to 512
[  925.309170][T24790] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  925.369523][T24790] EXT4-fs (loop8): 1 truncate cleaned up
[  925.380692][T24790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  925.543280][T19712] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  925.720269][T24807] pimreg3: entered allmulticast mode
[  926.371891][T23612] kernel write not supported for file /zero (pid: 23612 comm: kworker/0:8)
[  926.614564][ T5842] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  926.825980][ T5842] usb 9-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[  926.853681][ T5842] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 184
[  926.875186][ T5842] usb 9-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[  926.897285][ T5842] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  926.905479][T24848] netlink: 'syz.9.6964': attribute type 10 has an invalid length.
[  926.953773][ T5842] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[  927.174884][ T5842] gspca_sn9c2028: read1 error -32
[  927.385773][ T5842] gspca_sn9c2028: read1 error -71
[  927.403632][ T5842] sn9c2028: probe of 9-1:220.0 failed with error -71
[  927.436737][ T5842] usb 9-1: USB disconnect, device number 15
[  928.153796][T24889] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6979'.
[  928.974739][T24920] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[  929.034728][T24920] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[  929.034823][    C0] divide error: 0000 [#1] PREEMPT SMP KASAN
[  929.043710][    C0] CPU: 0 PID: 24914 Comm: syz.6.6989 Not tainted syzkaller #0
[  929.057379][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  929.067829][    C0] RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430
[  929.074511][    C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 ed 09 77 f9 48 bb 00 00 00
[  929.094039][T24920] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (das16m1)
[  929.094742][    C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046
[  929.110388][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  929.118412][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  929.126510][    C0] RBP: ffff88802fcc7600 R08: ffff88802fcc7600 R09: 00000000000000ff
[  929.134699][    C0] R10: dffffc0000000000 R11: fffff520017cbc01 R12: ffff88802fcc7688
[  929.143357][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802fcc7634
[  929.151642][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  929.160792][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  929.167766][    C0] CR2: 00007f5a6c12fb4c CR3: 00000000196e7000 CR4: 00000000003506f0
[  929.176053][    C0] Call Trace:
[  929.179506][    C0]  <IRQ>
[  929.182654][    C0]  comedi_buf_write_samples+0x372/0x5d0
[  929.188702][    C0]  das16m1_handler+0x213/0x4b0
[  929.193537][    C0]  das16m1_interrupt+0xab/0x180
[  929.198535][    C0]  ? das16m1_detach+0xd0/0xd0
[  929.203611][    C0]  __handle_irq_event_percpu+0x271/0x940
[  929.209325][    C0]  ? __irq_wake_thread+0x160/0x160
[  929.214601][    C0]  ? do_raw_spin_lock+0x11f/0x2c0
[  929.219727][    C0]  ? do_raw_spin_unlock+0x121/0x230
[  929.225074][    C0]  handle_irq_event+0x8b/0x1e0
[  929.229903][    C0]  ? handle_edge_irq+0x23f/0xb30
[  929.234885][    C0]  handle_edge_irq+0x247/0xb30
[  929.239742][    C0]  __common_interrupt+0x13b/0x230
[  929.244821][    C0]  common_interrupt+0xb4/0xd0
[  929.249747][    C0]  </IRQ>
[  929.252792][    C0]  <TASK>
[  929.255926][    C0]  asm_common_interrupt+0x26/0x40
[  929.261339][    C0] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x60
[  929.267635][    C0] Code: 04 24 65 48 8b 0d a0 a0 7c 7e 65 8b 15 a1 a0 7c 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48
[  929.287898][    C0] RSP: 0018:ffffc9000bc5f638 EFLAGS: 00000246
[  929.294315][    C0] RAX: ffffffff81d60c99 RBX: 1ffffd40001726f0 RCX: ffff88801ffa3c00
[  929.302429][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  929.310529][    C0] RBP: dffffc0000000000 R08: ffffea0000b93787 R09: 1ffffd40001726f0
[  929.318792][    C0] R10: dffffc0000000000 R11: fffff940001726f1 R12: ffffea0000b93780
[  929.326789][    C0] R13: 1ffffd40001726f1 R14: ffffea0000b93788 R15: 0000000000000000
[  929.334807][    C0]  ? free_swap_cache+0xe9/0x750
[  929.339682][    C0]  free_swap_cache+0xe9/0x750
[  929.344367][    C0]  free_pages_and_swap_cache+0x64/0xa0
[  929.349846][    C0]  tlb_flush_mmu+0x379/0x510
[  929.354489][    C0]  unmap_page_range+0x2690/0x3000
[  929.359543][    C0]  ? copy_page_range+0x3670/0x3670
[  929.364684][    C0]  ? unmap_single_vma+0x1b0/0x2a0
[  929.369766][    C0]  unmap_vmas+0x286/0x3f0
[  929.374129][    C0]  ? unmap_page_range+0x3000/0x3000
[  929.379345][    C0]  ? __lock_acquire+0x7d40/0x7d40
[  929.384385][    C0]  exit_mmap+0x238/0xb90
[  929.388672][    C0]  ? exit_mm_release+0x1a/0x30
[  929.393667][    C0]  ? vm_brk+0x30/0x30
[  929.397725][    C0]  ? __mutex_unlock_slowpath+0x1b4/0x6c0
[  929.403413][    C0]  ? uprobe_clear_state+0x278/0x290
[  929.408671][    C0]  ? mm_update_next_owner+0x562/0x6c0
[  929.414174][    C0]  __mmput+0x118/0x3c0
[  929.418259][    C0]  exit_mm+0x1f2/0x2c0
[  929.422345][    C0]  ? do_exit+0x2460/0x2460
[  929.426865][    C0]  ? taskstats_exit+0x35e/0x9e0
[  929.431741][    C0]  do_exit+0x8dd/0x2460
[  929.436667][    C0]  ? preempt_schedule+0xc0/0xd0
[  929.442190][    C0]  ? put_task_struct+0xc0/0xc0
[  929.447333][    C0]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  929.453706][    C0]  ? lock_chain_count+0x20/0x20
[  929.458756][    C0]  ? preempt_schedule_thunk+0x1a/0x30
[  929.464291][    C0]  do_group_exit+0x21b/0x2d0
[  929.469121][    C0]  __x64_sys_exit_group+0x3f/0x40
[  929.474387][    C0]  do_syscall_64+0x55/0xa0
[  929.479034][    C0]  ? clear_bhb_loop+0x40/0x90
[  929.483833][    C0]  ? clear_bhb_loop+0x40/0x90
[  929.488991][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  929.495403][    C0] RIP: 0033:0x7fa8a139c629
[  929.499960][    C0] Code: Unable to access opcode bytes at 0x7fa8a139c5ff.
[  929.507560][    C0] RSP: 002b:00007ffd884cad38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  929.517831][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa8a139c629
[  929.526094][    C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  929.534207][    C0] RBP: 00007ffd884cad9c R08: 0000000000000000 R09: 00000000000927c0
[  929.542633][    C0] R10: 00007fa8a1616038 R11: 0000000000000246 R12: 000000000000025f
[  929.550877][    C0] R13: 00000000000927c0 R14: 00000000000e2b52 R15: 00007ffd884cadf0
[  929.559107][    C0]  </TASK>
[  929.562230][    C0] Modules linked in:
[  929.566511][    C0] ---[ end trace 0000000000000000 ]---
[  929.572095][    C0] RIP: 0010:comedi_inc_scan_progress+0x1a2/0x430
[  929.578907][    C0] Code: b6 0c 19 84 c9 0f 85 b8 01 00 00 03 45 34 4c 8d a5 88 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 c7 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 ed 09 77 f9 48 bb 00 00 00
[  929.600105][    C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046
[  929.606384][    C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000
[  929.614701][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  929.623045][    C0] RBP: ffff88802fcc7600 R08: ffff88802fcc7600 R09: 00000000000000ff
[  929.631814][    C0] R10: dffffc0000000000 R11: fffff520017cbc01 R12: ffff88802fcc7688
[  929.640231][    C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88802fcc7634
[  929.648469][    C0] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  929.657491][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  929.664595][    C0] CR2: 00007f5a6c12fb4c CR3: 00000000196e7000 CR4: 00000000003506f0
[  929.673096][    C0] Kernel panic - not syncing: Fatal exception in interrupt
[  929.680920][    C0] Kernel Offset: disabled
[  929.685259][    C0] Rebooting in 86400 seconds..