last executing test programs:

1m56.793800501s ago: executing program 0 (id=25):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x24}}, 0x80)

1m56.603144671s ago: executing program 0 (id=28):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r0, &(0x7f0000000080)}, 0x20)

1m56.460918738s ago: executing program 0 (id=29):
r0 = memfd_secret(0x80000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800000, 0x13, r0, 0xffffe000)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)

1m56.343223705s ago: executing program 0 (id=30):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540), &(0x7f0000000580), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

1m55.88178735s ago: executing program 0 (id=36):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x35, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8)
close(0x3)

1m55.384024916s ago: executing program 0 (id=40):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

1m55.052224703s ago: executing program 32 (id=40):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7a680000)

18.487810788s ago: executing program 4 (id=789):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000ec0)="$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")
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0xfffffff, @ioapic={0x54000, 0xffffe244, 0x9, 0x9, 0x0, [{0x7a, 0x1, 0x0, '\x00', 0x8}, {0x5, 0x6, 0x9, '\x00', 0x6}, {0xf1, 0x66, 0x8, '\x00', 0x6}, {0x5, 0xf9, 0x5, '\x00', 0x8}, {0x9, 0x2, 0x4, '\x00', 0x7d}, {0x6, 0x9, 0x6, '\x00', 0xfe}, {0x2, 0x9, 0x8e, '\x00', 0x7}, {0xb2, 0x0, 0x0, '\x00', 0x3}, {0x8, 0xb, 0xdc, '\x00', 0x8}, {0x10, 0x30, 0x2c, '\x00', 0x7}, {0x9, 0x9, 0x5, '\x00', 0x9}, {0x1, 0x8, 0xf8, '\x00', 0xe}, {0xd, 0x2, 0x0, '\x00', 0x6}, {0xc, 0x2, 0x5b, '\x00', 0x9}, {0x9, 0x0, 0x8, '\x00', 0x9}, {0x5, 0x7, 0x10, '\x00', 0x2}, {0x0, 0x10, 0x0, '\x00', 0x8}, {0x3, 0x0, 0xd9, '\x00', 0x6}, {0x6, 0x4, 0x8, '\x00', 0x9}, {0xff, 0x73, 0x4, '\x00', 0x5d}, {0x8, 0xc, 0x5, '\x00', 0x2}, {0x7f, 0xc, 0x7, '\x00', 0x5}, {0x5, 0x7, 0x8, '\x00', 0x5}, {0x2, 0x80, 0x5, '\x00', 0x5}]}})

17.907312819s ago: executing program 4 (id=795):
r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3})
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x218}, {r0, 0x104}, {r0, 0x4004}], 0x3, 0x0, 0x0, 0x0)
mq_timedreceive(r0, &(0x7f0000000140)=""/191, 0xbf, 0x0, 0x0)

17.610991544s ago: executing program 4 (id=798):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSBRK(r1, 0x5409, 0x1)

17.4984699s ago: executing program 4 (id=800):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]})
lchown(&(0x7f0000000080)='./file0/file1\x00', 0x0, 0x0)

16.54460458s ago: executing program 4 (id=807):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1010000, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6206, &(0x7f00000019c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2900, 0x1cf)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc2}})
mknod(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x247)

15.953367921s ago: executing program 4 (id=815):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0)

15.584204331s ago: executing program 33 (id=815):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, 0x0)

3.781742201s ago: executing program 3 (id=893):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00')
r1 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
syz_fuse_handle_req(r0, &(0x7f0000000980)="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", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.461187378s ago: executing program 3 (id=895):
r0 = eventfd2(0x400, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x60000000})
read$eventfd(r0, &(0x7f0000000080), 0x8)

3.200569002s ago: executing program 3 (id=898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xff4a, 0x2, 0x50d, 0x8, 0x9, 0xfffa, 0x6, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.84255035s ago: executing program 3 (id=902):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}}, 0x0)

2.782091113s ago: executing program 2 (id=903):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x1, 0x13, r0, 0x59712000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f00000000c0), 0x2)

2.634238851s ago: executing program 5 (id=904):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.627813141s ago: executing program 3 (id=905):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@autodefrag}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x7, 0x3a, ',', 0x3a, 'flushoncommit', 0x3a, './file1'}, 0x35)
ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f00000003c0)={&(0x7f0000000380)=[{&(0x7f0000000200)="a9", 0x1}], 0x1, 0x5, 0x0, 0x2, 0xfffffffffffffffe, 0xf4e0, 0x5, 0x400})

2.432408642s ago: executing program 5 (id=907):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f0000000080)=""/127, 0x7f, 0x0, 0x0, 0x3}}, 0x48)

2.328045478s ago: executing program 2 (id=908):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}], 0x1c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x3ff, @private2, 0x1ff}]}, &(0x7f0000000b00)=0x10)

2.207832714s ago: executing program 1 (id=909):
io_uring_setup(0x46eb, &(0x7f0000000100)={0x0, 0xc469, 0x0, 0x2, 0x296})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)

2.179027985s ago: executing program 5 (id=910):
r0 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x10a})
close_range(r0, r0, 0x0)
rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)

2.045992402s ago: executing program 1 (id=911):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{}, {0x0, 0x2710}}, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x2000000000000000, 0xfffffffffffffffb}, 0x0)

1.89213811s ago: executing program 5 (id=912):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000000980)='\x00', 0x1}], 0x1}}, {{&(0x7f0000000240)={0x2, 0x4e1e, @private=0xa010102}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000340)="06", 0x1}], 0x1}}], 0x3, 0x4000800)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x8}, 0x8)

1.752004288s ago: executing program 5 (id=913):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"/2303], 0xff, 0x5e9b, &(0x7f000000bc00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x60843, 0x15)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xfc6, 0xfffffffffffffff7, 0x6976})
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f0000006900)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES8, @ANYRESHEX, @ANYRESHEX, @ANYBLOB="0d9435a8af712ba22db08aad61bf52901d77aded910bc7949acdf1a626f568d38938f8ec34f72c1e0b3e6540dc1e44beac32958b12631708d0a5635580b2f9fef13a977211e5d519ab9531321cfb53a9b413ea91f290924482d4007a70a19759dd63f9fc81f2c63fe27bce5e7dddf01fa5c3f09ef226ee04045b0cf0661e3d5a67446c4d93db12c2ac7a15f0265fd7eade1a72cbd696413a03174375c955f8c82a9774c2c8ac5046d59c86dbd5165e6e447586", @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYBLOB="ac2d5b5b8945d57e7869648ebe10b8d2719763b4bf3f6667bf8f722606d2b3593f26218e9a5fba2e7d4166787da71737b380045fb0a682e2915271f214c0112961b73c4638e7ba68deb34826d7682ace7549c83bf52bd9142b6c5adebf82155270d33204c09c07ed4ca2fc932af48646c9624e3e3544d68f61a2b073fb85332599b299a4f441a8e2f74c57aa38b5b596238280c1693bba97ff258679ab84485970b60f81093dda6501baba18a7790ca3e6fcfa12898b9fff3faf613d71f9d64dbd5c2edad8e774fb0da39e532d92164e2d34aff7cae32f3cd7aa9aace000f136323e4808d0c66c0828942def38deb2e1d847555fe0d5ba8084babb3169f9f06246ecd5327758448c9c7e4591da12ff1b084e757d05af4f0f0444ecfcc0c4d2067a98d49fe52412218380bb75e21cd23724e0390b116b9a1c1e3350b3e6f17c5bd1f1adb4ce1d03d5b30eb0690340708f06dfca5c9d74a7c140cabddd0f37d8bcf15e578dde85d7c28ccb1c9633ceeb54bb278d5a097220ca53a2ea4781aca2b70189199938afba9a700a610225311fe8316794ca0ae139a50dbd34d572d6165eaaa94844620045e615d51f5e19c29aadad3539490961135851f15bbfd0604f3926877583d85c45a04c6f155ad6e1966d2004ab6ab51f9beb82dbcdcaaab886564cbf81b581da397eba4fc8fe430ef93ed613cd588e399669b9f4b63481163e6c2b74112538192be9551ca400bc2b947a535fccbc567a68a3ab94554385bb1f2a0e2146310113102a9ffbcbbf44d30e076d363d6201faecf8bbbbc9d7fcd38195860bbc85ee3f5f9b2c990164abc3a7674ab2a631147d708585f52694a46b681cbc623b53a272f21f2aa5597beec8094954541316cc45ec9751fef12369e7272b7bdcb527bac4a19e0bba1b68ef98e3563705e9ca40bb914cece2fd75c2375b81a06dadcdb1c54a175855e30c3d9ca58ca873e43d703b1471526fb3dfe12e140b81df3afae6104e5ffa4e8585b456a7199c75c5abc7afeca743fce310df09062f20b9a99fac5d019338d98606805f4faad9cc81ebf03b7239a340c973828b676af4e594d796689f9823730c5ead8dba256925869ab0d7196a99b75a15f9927852d7813aa5a4cb76764749e882d59c094c5ebd1911153150e8d53aa8abbf360a4045b63e0e296d03158de8aa02b5aeb459dcdc6b9d5aa8c0e455e7cb6a5d9b26ee5420e41d89590a0c04ca8701a6a386716a32e04102f281f66317a21940c0cf83e128f4f83bdf6770170d74d43f3b1f4c0bb5e8c69254e0bfd15c6d02596bf3b547e5b9b8e84390455a9c4b00b633c661616aca4a4158868be21633f343155996eaff00c2c347fea03c6f06e7adcd83cf320e3a446d07dba202e5960632560da8a3b60efe5a814a5cb2a4ff0842fff23897b583b381e5030e506caef8dc97bef9532111e3eb3621870ec39fe2351d3814a02d2f9e38aac1f0897f32ddbffdc6e0acdea95ff7f67865daae1130f68f00985682ecefc43fb6f8521514923b5cf3560be0739aeb4eb00b389d39ebb9b974e054120fcd48c0d6bc09441c2c19f41bdfceed01a3b686921500fae88795f216794d21dd3a98f2fdb5a1590e0cbdc5cd9593b164e255131c21f22ed7e7ed4ec83db91f8bf5f327d7222be1e470a7c0d0a657c73ad606f2ef0c59d3c118c601d23d67ee16ce3658c9153b8131f06c1e4f83c49dbe6dbc3478b1313b9221bc4c5eadebfd16cd07afde509f2e926fcfd5f8feabe836f4080ea5e65c1e4d859f16ac45ad8c804eb9ecce363faf19c1409d8192a644823578ccfd5b643478eb948223676d375f811fffa874f7c2a281104a28baf4da2716ae870abb3e0f05e63466176356728a700fe39ebb62bdbff139fdbf21520022984dc6d3eed1d81b94f28a07cc238ccb64d65e87534c0111bb76212368c6e8e9a536e758fa2f16a2cab9d31984055488b27bcff12bcc5a0fe21a0e44edfb87c681060e6944ff89dce4a9c7122c53acc27913a5fbf15c9ada971df88f0df3f82eb563f63c640ad6e39a1f5c1aad83c364957ec6d645f4243d1fb4ecef275d4c0ca0284064cde0c282d793f290bab5a4dec15f3e2adcc9d455d2e28bd040d6e0f651ac6f20f55d1303d2aaef2104b393afc849e9cd7743ca20a6f092cbf42a67446892493128d38bb0d0f507ffe3fd718ec48eff58df729728bc01ee180d676dfa22c81da0e4e3fda94f4f94195bc82e1f941d8a290ca0d416373d420eba196470e4f25940506061c601f12b3656d6d6b3a47e50d5235b7fd0f82bb0835aee3470b69bf7e59616ece447d9af36c396f687214ff7d7e27961f461c780b4c563aeb47fa9f335cbdade8a06711ba79b6fe8778ac1bc06bb59131c17409c1d1d0cc746aec8c3b1348f9585945192d8e32002c676753ab246a92702fc8e3a3ce89b84661b1b10dcd73fddacd311ca663d483b87a59225f60627eecf409d6188236b198633d47c5f1c0ba0bb4321aac88a6061d5e97883914cd74284ab937b9579ccee6ab5bb39f6274a04e3e7a8c3d033e340357bc15c5f6daa047b1cee448ac380bbde4bf806b0891a04b9e408609b040b7d3a02d2a76d4013756d79244792c543fe2327a3c371852bed5ab54de987bc4699b32ad1c08f7fff7a23069e72bddc9a590b2c707bac3957d46b657a4e17f1914db58fb6436bdd58b86df491016a2b9ebe0c35a859b216f17f4828c8dee30a38ed1fc36347af978999d0c404313cf99c9281c45194abd79475a80ea1486840aad72b1c0c4f17fe35a150fcb574fa9fcc09a7fc5dcd34e15d4bf1bccfa8bf423d2437e2eb0d3ca9324fbfc7e256b862c50ebc8db3fb69f69003d37807af8ddccf2d929ad9d06ebbb7e538d93bb0b7bc828e1639e0b5e89c22badca307ad28183c3083e87c917feb4c882397d397ea2e7ff0e05ebb252940302cdc0f0f7efe40685f7c3e8923e3795d70d69c70d9a071e401cee771f29dcb5316471768464c4659f2c76d11713ab44f4c944a4819deb1248b02457403e9630aaf4a180e9e55bb4d291e9a2bc85a1ed17f906d54935c7e5e8b707ead56284fda0208bd88ab5c3259bd5329c0d26653eb07b6856ad799fd6fa8d2111da3970ff8509bc2ef3a8813d04f36001526b70757646ed4bf25a256751b8ec714f2e62dea19e82aacec389195532bf7f335afae4351adb93c846e22f1f2a3e0d620d81688bd5530e389f2284b3c997d4abab7c30aac1b141425cd9aa315dc5a5e8b04fd503d79896b1494d8be48048c7392fc92c325b76bde4496c49da34c9ff95969bec8f95c356239d5336907957383b12c512fff6d797097a26a5aee9251bae940ef1a19b3f746396300d3baeb476b023f740ed7c1da92fdbf1834c3a882a6079885b933333d0e194cc1f25a06c3a2d370936886cb385d9861d6762c7416a1db5275228b6499cdef9767fb998d43251b963bc4477b2c051b70a0317de5f6ec3158914145bd036ff194df9722d2a3d2ac2397891b573a34ad16236cdc7ca77bc15f0fdbc3cae923d61633a42bab450a80cf3ee6580e792b1617d74fa189d450a64ca12d8c797698208ea61010b6072885b762af598159621f838ebacc00ea11f5924b39b2bbbc5c7d667871ce32e9aa75893a9fa13a2ffe66b360e266446259a8745addb4e186139d86d4e8d48537ac35029b0d87c03e8c1a9b9a422594496feda8bc5502777428fe737198ed896c2128a4f7d552f2eea8fef6e68feaf3cbfd549e622eea7bc988bb16fc49b7ab241426f2e40edcca07d4f947ccb1d3b8c2e9cb14a0c04495dbb75bd9c935f36bfe398455b0e5f927d5726e617c69ca81fe36c3e6ea510c5fe4735161c992f9ebf66727e5a7ded590061d4da3b86b996846a6bb102e47d33465d88a68644c8a76a770d5e0318e6c301e7c7f5575bf15a9589b32cfaa41ee15972488497195a2cb49a6b6f937a8e311e34d311dfd4fe222d3abc095b0b24a1b7193eb3353def0cc1511c8fce9b0a7867ae2fed4db93009646dc91a3745387cbe61b37f749b40d5d38970856b7ab8b6e1e0b81c078c68cb55c57854b8b5863b7a4c87f42e6d6dca2de0326b1b26970168c99f59816877448e7f72626f5354fdb5e033cd6b42e9476665efae66287e656590d1f80b3a09557a57d7de4bade6a122d40a92db1d347463b74151d44a02dbe067259c633b8c84425e77a736fca99f06d0fd66e35365511ec017537f4c212e7f2e23369958c3a7b92feffad9edb12139f1f690f9512725c0a1a164e78b4130c91fd3961df91c1a11783c24b03bcf305fd0e14e6510f4d58cf73326e94f2bc1b1ab295297bee7a98b77afe483a7d66e780d5e111b4202285f580ce571ecc0985501faa0e9f2f5b9848d770d8d8ad7b90a951f83279073e45a0c7abcf89cd6200f7fc320e46ea3de2addee3a984432501063f9928d0897d93dde20fe8fbe4dabc1ac34b0efdb3d7c7b4d49571ea64252d7209ff6d0ae5b95ef35d8160c5976f7ed9c4b69db81a73f6d00fd254c417696d6af694f3688826cc04db8019f2419fa99e47dc436fd76890b5291cd2724717a1e604e6cb5e214235664e8c7148c2bd87996c05bcfe1f29200f40a0d766df3ddc6faef82fb34d385f90b8f0e4bb7ba519e7986735c169cb3546d62fb70fbd49eec4edd70397d2fcbfdb9cd87331fce3c9786b7090501b904c8f925a1dbfa151a18e6c145ebb74da7100de60a627100d6c04ce789a7d4e88692cb090fd9ff2006e5ddb870f5b2aa502081eb7a26744de9a0d29a66ef18eb097e1d396561078e3f9258046a3a3e9b5878964d71b526755084f385d9777b2ab503f9d77c09a46004b5005f69eedee80edd87dd17f2292eba00f71dedb010b7b003a8400f6b44d63559a10bc0052c678ac8ed9658aff4f858778ebb60cbaf53d82248a260c7255f943711e8ac31a4b7a4694dcdace3be25ea43bdc9dfd52d369292d8d7581a6979d1b8ad543baeb9296907e0926025f4c3597e98e2eacd048a5dedd0e9dabc3268ed35a91c6180908af07a95bf374573c7b4f611eb30bbb5f1721a6550f483dcaed51d84fdaa5c6a52d7c4d04ca4edfd2884483c2d5aaebf6f06c6fff8bff813923ac8c6edd0eadefab938442ff09b1b3ff926c963d67a01cccbd86cb69bb5e5a4adca82110f87d3ee7800b14412b48cd94feacbaa9c1921e816d0287ad1198b94fd6de314912b79938a0d00ef5968ca4cb506afa1496ce4886c8c44955a92c9d2395f108a357e240511cc7e6548ac4174e5b52cc1f03ea8fa8268a7283e9cd25518cc71114869537891b64337222f04c111407bc2c8777f1132e1b294ec533610fd1ae3b4aa7e20c315d87aeed3a19151677e04173fbd55e88669f515dea19c8b99f8d7e829734f615a9b95e278fec62cf2d1a37d535ef71996530c62e65bb6fde625447e9122cfd947d7032c7580bfa5286bdde0bd9c4f0c63cbceddc302e1daef7f27bf289f72456802560e4477b27520b45f3a39e787824f169b3fa0ec7fba1c37f4499d43a9cdca7595f3e9ab74223c34819b260130d8a7613653101cc9a6e236ac01965356c90814c632ed421a62654a457ccc66040026451610b94898d13292cf2096fc1744b8fe67cebbcee0a3830be987694e593d732f05e3c6503a71173dc9870c3eca017318b628dd651232ea1c424a98b394188c8b8dbf30d69f1976219fd5b1975f8deebabeca970581f011f428c164bb35e0d6be187a5a2887d6bb0889c41c5c24d0b173f05db5d3a9e50318b448b3c8c", @ANYRESDEC, @ANYRESHEX, @ANYRES8], 0xb, 0x0, &(0x7f0000000000))

1.267213613s ago: executing program 2 (id=914):
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4e21, 0x401, 0x4e24, 0x0, 0x2, 0xb0, 0x20, 0x76, 0x0, 0xee01}, {0x0, 0x7f, 0xf, 0x4, 0x8000000000000001, 0xfffffffffffffff9, 0x3, 0x7fffffff}, {0x5ec18add, 0xffffffffffffff7f, 0x100000000, 0x8e40}, 0xffff, 0x6e6bb8, 0x0, 0x1, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d6, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3509, 0x0, 0x0, 0x9, 0x7, 0x7, 0x1}}, 0xe8)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008800)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)

1.044382135s ago: executing program 1 (id=915):
r0 = io_uring_setup(0x4822, &(0x7f0000000080)={0x0, 0xc8bf, 0x1, 0x2, 0x1000002})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

952.03006ms ago: executing program 2 (id=916):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x4}, {0x0, 0xa}}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0x89f}, @filter_kind_options=@f_u32={{0x8}, {0x188, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x2, 0x7, 0x2, 0x0, 0x7, 0xd, 0x94, 0x2}}, @TCA_U32_ACT={0x170, 0x7, [@m_csum={0xd8, 0x4, 0x0, 0x0, {{0x9}, {0xac, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffb}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x4, 0x1, 0x8, 0x928}, 0x60}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x10001, 0x7a, 0x10000000, 0x5, 0x3}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xc, 0x0, 0x1, 0x3, 0x3}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x430800, 0x4, 0x7, 0x4}, 0x80}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x4, 0x9, 0xb}, 0x77}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x68, 0x1a, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x3, 0x2, 0x2}}}]}, {0x21, 0x6, "59b69513e97e708c0dc836f724775dbb59b2f21e013426759c817a1bd7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x2c, 0x13, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x91}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

899.276773ms ago: executing program 3 (id=917):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x1c, &(0x7f0000000880)=ANY=[], 0x0, 0x2eb, &(0x7f00000004c0)="$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")
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x95, @remote, 0x4121}, 0x1c)
getsockopt$sock_buf(r0, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a)

781.554269ms ago: executing program 2 (id=918):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f0000000040)=0x1c8, 0x12)

660.174485ms ago: executing program 1 (id=919):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x4, 0x1}, {0x74, 0x2}, @const={0x0, {0xfffe, 0x33fa, 0xfffc, 0xfffc}}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000005c0)=""/218)

389.81854ms ago: executing program 1 (id=920):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000200)={0x4, "fa02791d2a69a2610f02000000000000001100010000000800"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x5, "8f18b2cb6aeca1ddeda78b15020dd932490ec734cbfacbf09ca58ff8648692e8"})

181.43376ms ago: executing program 2 (id=921):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]})

172.437161ms ago: executing program 1 (id=922):
pipe(&(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_setup(0x2, &(0x7f0000002400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])
fcntl$setpipe(r0, 0x407, 0x401)

0s ago: executing program 5 (id=923):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r0, 0xb, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @random="2c6b38191931"}, @NL80211_ATTR_PMKID={0x14, 0x55, "09732622753b21700542a62d569c8033"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x28c4)

kernel console output (not intermixed with test programs):

41] veth1_macvtap: left promiscuous mode
[   80.905058][   T41] veth0_macvtap: left promiscuous mode
[   80.911413][   T41] veth1_vlan: left promiscuous mode
[   80.934942][   T41] veth0_vlan: left promiscuous mode
[   81.183059][ T6006] loop2: detected capacity change from 0 to 8192
[   81.202991][ T5994] loop3: detected capacity change from 0 to 32768
[   81.257589][ T5994] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   81.483035][ T5994] XFS (loop3): Ending clean mount
[   81.516074][ T5994] XFS (loop3): Quotacheck needed: Please wait.
[   81.659598][ T5994] XFS (loop3): Quotacheck: Done.
[   81.727561][ T5994] XFS (loop3): User initiated shutdown received.
[   81.735301][ T5994] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[   81.759676][ T5994] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[   81.831673][ T6009] loop1: detected capacity change from 0 to 40427
[   81.856689][  T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   81.872177][ T6009] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   81.892866][ T6009] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   81.901723][ T5764] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   81.916529][ T6009] F2FS-fs (loop1): invalid crc_offset: 33558524
[   82.023921][ T6009] F2FS-fs (loop1): Found nat_bits in checkpoint
[   82.064412][  T788] usb 3-1: Using ep0 maxpacket: 32
[   82.095110][  T788] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[   82.122854][  T788] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[   82.185758][  T788] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[   82.210050][  T788] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[   82.256253][  T788] usb 3-1: config 0 interface 0 has no altsetting 0
[   82.262981][ T6009] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   82.278913][ T6009] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   82.290395][  T788] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[   82.309999][  T788] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[   82.333944][  T788] usb 3-1: Product: syz
[   82.354705][  T788] usb 3-1: Manufacturer: syz
[   82.365778][  T788] usb 3-1: SerialNumber: syz
[   82.405149][  T788] usb 3-1: config 0 descriptor??
[   82.426429][  T788] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[   82.454323][ T6009] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix.
[   82.469939][  T788] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[   82.492525][ T6009] F2FS-fs (loop1): Should run fsck to repair first.
[   82.548336][ T5763] Bluetooth: hci3: command tx timeout
[   82.659122][ T6027] loop3: detected capacity change from 0 to 1024
[   82.794584][ T6027] hfsplus: xattr searching failed
[   82.808354][ T5771] usb 3-1: USB disconnect, device number 2
[   82.814267][    C1] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[   82.879402][ T5771] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[   83.027613][ T6019] ldusb: No device or device unplugged -19
[   83.123022][ T6029] loop3: detected capacity change from 0 to 1024
[   83.301721][   T41] team0 (unregistering): Port device team_slave_1 removed
[   83.401998][   T41] team0 (unregistering): Port device team_slave_0 removed
[   83.463475][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   83.531803][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   83.794330][ T6035] loop3: detected capacity change from 0 to 32768
[   83.822150][ T6035] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   83.836233][ T6035] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   83.963467][ T6035] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[   83.985187][ T5771] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   83.992223][ T5771] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   84.063443][ T5771] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 71ms
[   84.107956][ T5771] gfs2: fsid=syz:syz.0: jid=0: Done
[   84.123371][ T6035] gfs2: fsid=syz:syz.0: first mount done, others may mount
[   84.624990][ T5763] Bluetooth: hci3: command tx timeout
[   84.801332][   T41] bond0 (unregistering): Released all slaves
[   85.050145][ T6031] netlink: 88 bytes leftover after parsing attributes in process `syz.1.66'.
[   85.234335][ T6057] process 'syz.3.75' launched './file0' with NULL argv: empty string added
[   85.273780][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.281845][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state
[   85.293718][ T5938] bridge_slave_0: entered allmulticast mode
[   85.303022][ T5938] bridge_slave_0: entered promiscuous mode
[   85.324380][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.352964][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state
[   85.390406][ T5938] bridge_slave_1: entered allmulticast mode
[   85.398340][ T5938] bridge_slave_1: entered promiscuous mode
[   85.526041][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   85.563663][ T6062] loop1: detected capacity change from 0 to 2048
[   85.602223][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   85.656521][ T6062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   85.710798][ T5938] team0: Port device team_slave_0 added
[   85.732147][ T5938] team0: Port device team_slave_1 added
[   85.831083][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0
[   85.856177][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   85.934687][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   85.977295][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1
[   85.985306][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   86.034985][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   86.036155][ T6076] use of bytesused == 0 is deprecated and will be removed in the future,
[   86.084975][ T6076] use the actual size instead.
[   86.139284][ T5938] hsr_slave_0: entered promiscuous mode
[   86.167311][ T5938] hsr_slave_1: entered promiscuous mode
[   86.187334][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   86.204824][ T5938] Cannot create hsr debugfs directory
[   86.241238][ T5771] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   86.291190][ T5751] kernel write not supported for file /sg0 (pid: 5751 comm: kworker/0:3)
[   86.456390][ T5771] usb 4-1: config 0 has an invalid interface number: 16 but max is 0
[   86.476239][ T5771] usb 4-1: config 0 has no interface number 0
[   86.482385][ T5771] usb 4-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30
[   86.514213][ T5771] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.546779][ T5771] usb 4-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.584001][ T5771] usb 4-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[   86.626120][ T5771] usb 4-1: config 0 interface 16 has no altsetting 0
[   86.646354][ T5771] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[   86.666421][ T5771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.687855][ T5771] usb 4-1: config 0 descriptor??
[   86.707016][ T5938] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   86.714886][ T5763] Bluetooth: hci3: command tx timeout
[   86.733024][ T5938] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   86.758917][ T5938] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   86.815276][ T5938] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   86.874256][ T1205] cfg80211: failed to load regulatory.db
[   86.932914][ T6090] loop1: detected capacity change from 0 to 32768
[   86.976534][ T6090] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.84 (6090)
[   87.062285][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.077621][ T6090] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.095675][ T6090] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   87.113728][ T6090] BTRFS info (device loop1): using free space tree
[   87.128991][ T5938] 8021q: adding VLAN 0 to HW filter on device team0
[   87.147451][ T5771] uclogic 0003:5543:004D.0001: interface is invalid, ignoring
[   87.174314][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.181522][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.293096][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.300288][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.331650][ T6090] BTRFS info (device loop1): enabling ssd optimizations
[   87.338763][ T6090] BTRFS info (device loop1): auto enabling async discard
[   87.420453][ T1205] usb 4-1: USB disconnect, device number 4
[   87.569129][ T6121] input: syz0 as /devices/virtual/input/input6
[   87.594329][ T5761] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.940795][ T5756] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop1 scanned by udevd (5756)
[   88.213074][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0
[   88.948538][ T6163] loop1: detected capacity change from 0 to 512
[   89.066364][ T6163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.073248][ T5938] veth0_vlan: entered promiscuous mode
[   89.094272][ T5938] veth1_vlan: entered promiscuous mode
[   89.210238][ T5938] veth0_macvtap: entered promiscuous mode
[   89.247175][ T5938] veth1_macvtap: entered promiscuous mode
[   89.255990][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.296733][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.334681][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.354519][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.377263][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.394930][ T5771] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.401764][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   89.433975][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.457733][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.492410][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.523723][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.540326][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.565811][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.579798][ T6150] loop3: detected capacity change from 0 to 32768
[   89.590898][ T5938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.594771][ T5771] usb 3-1: Using ep0 maxpacket: 32
[   89.614560][ T5938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.641896][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.657913][ T5771] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[   89.689332][ T5938] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.698984][ T5771] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[   89.733683][ T5938] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.754903][ T5771] usb 3-1: string descriptor 0 read error: -22
[   89.761263][ T5771] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[   89.794558][ T5938] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.808426][ T6150] read_mapping_page failed!
[   89.813377][ T6150] ERROR: (device loop3): txCommit: 
[   89.813377][ T6150] 
[   89.823081][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.828702][ T5938] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.857489][ T6171] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   89.883388][ T6187] jfs_unlink: dtDelete returned -116
[   89.911289][ T5771] usb 3-1: Quirk or no altest; falling back to MIDI 1.0
[   89.946380][ T6187] jfs_unlink: dtDelete returned -116
[   89.951888][ T5771] usb 3-1: MIDIStreaming interface descriptor not found
[   90.141129][   T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.162236][   T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.252708][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.277230][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.378875][ T5751] usb 3-1: USB disconnect, device number 3
[   91.803286][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.111'.
[   91.902939][ T6235] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   91.905368][   T27] audit: type=1326 audit(1777041013.171:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6231 comm="syz.2.112" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f075679cdd9 code=0x0
[   92.052266][ T6241] sctp: [Deprecated]: syz.1.114 (pid 6241) Use of int in max_burst socket option deprecated.
[   92.052266][ T6241] Use struct sctp_assoc_value instead
[   92.232911][ T6246] loop4: detected capacity change from 0 to 128
[   92.257635][ T6246] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   92.431124][   T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1)
[   92.453085][ T6227] loop3: detected capacity change from 0 to 32768
[   92.507722][ T6227] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.573483][ T6227] XFS (loop3): Ending clean mount
[   92.862314][ T5764] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   92.922848][ T6269] loop6: detected capacity change from 0 to 8
[   92.989100][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   93.073708][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.083233][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.083996][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.100631][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.122274][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.131530][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.148432][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.157662][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.174601][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.183776][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.246473][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   93.259959][    C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.269222][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.297590][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.306821][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.330139][    C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   93.339379][    C1] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.352669][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.361840][    C0] Buffer I/O error on dev loop6, logical block 0, async page read
[   93.766049][ T6296] netlink: 'syz.2.128': attribute type 102 has an invalid length.
[   93.770405][ T6295] loop4: detected capacity change from 0 to 64
[   94.256867][ T6278] loop1: detected capacity change from 0 to 32768
[   94.305800][ T6278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.123 (6278)
[   94.411472][ T6278] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   94.440367][ T6278] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   94.466077][ T6278] BTRFS info (device loop1): setting nodatasum
[   94.492647][ T6278] BTRFS info (device loop1): force zlib compression, level 3
[   94.526926][ T6278] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8)
[   94.565956][ T6278] BTRFS info (device loop1): use lzo compression, level 0
[   94.593626][ T6278] BTRFS info (device loop1): turning on flush-on-commit
[   94.616657][ T6278] BTRFS info (device loop1): enabling auto defrag
[   94.647157][ T6278] BTRFS info (device loop1): max_inline at 4096
[   94.653466][ T6278] BTRFS info (device loop1): using free space tree
[   94.874703][ T6278] BTRFS info (device loop1): enabling ssd optimizations
[   94.887768][ T6291] loop3: detected capacity change from 0 to 40427
[   94.899650][ T6300] loop2: detected capacity change from 0 to 40427
[   94.952576][ T6291] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x7ffff
[   94.953336][ T6300] F2FS-fs (loop2): invalid crc value
[   94.991115][ T6291] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4
[   95.031025][ T6300] F2FS-fs (loop2): Found nat_bits in checkpoint
[   95.043323][ T6291] F2FS-fs (loop3): invalid crc value
[   95.124394][ T6291] F2FS-fs (loop3): Found nat_bits in checkpoint
[   95.171967][   T27] audit: type=1800 audit(1777041016.421:3): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.123" name="file1" dev="loop1" ino=260 res=0 errno=0
[   95.267459][ T6300] F2FS-fs (loop2): Start checkpoint disabled!
[   95.297084][ T6291] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x68b/0x9b0
[   95.321634][ T6300] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   95.425267][ T6291] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   95.611963][ T6291] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x754/0x1c70
[   95.802012][ T5761] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   95.879641][ T5764] syz-executor: attempt to access beyond end of device
[   95.879641][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   95.960921][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[   95.962286][   T49] kworker/u4:3: attempt to access beyond end of device
[   95.962286][   T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   96.037429][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.064885][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   96.081065][ T6347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'.
[   97.174440][    C0] sched: RT throttling activated
[   97.265530][ T6350] loop1: detected capacity change from 0 to 131072
[   97.279529][ T6350] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[   97.286610][ T6350] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   97.327027][ T6350] F2FS-fs (loop1): invalid crc value
[   97.354622][ T6362] binder: 6358:6362 ioctl 40046205 0 returned -22
[   97.368104][ T6350] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.424875][ T6350] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   97.431959][ T6350] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[   98.340596][ T6380] loop3: detected capacity change from 0 to 256
[   98.474585][ T1205] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   98.494383][ T6383] Zero length message leads to an empty skb
[   98.517101][ T6383] netlink: 'syz.2.144': attribute type 1 has an invalid length.
[   98.531464][ T6383] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.144'.
[   98.569907][ T6385] pim6reg1: tun_chr_ioctl cmd 35108
[   98.668798][ T1205] usb 5-1: Using ep0 maxpacket: 8
[   98.676530][ T1205] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[   98.701374][ T1205] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   98.712274][ T1205] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.720612][ T1205] usb 5-1: Product: syz
[   98.727212][ T1205] usb 5-1: Manufacturer: syz
[   98.731939][ T1205] usb 5-1: SerialNumber: syz
[   98.745588][ T1205] usb 5-1: config 0 descriptor??
[   98.762221][ T1205] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   98.804640][ T1205] usb 5-1: setting power ON
[   98.815280][ T1205] dvb-usb: bulk message failed: -22 (2/0)
[   98.846269][ T1205] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   98.893236][ T1205] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   98.918963][ T1205] usb 5-1: media controller created
[   98.959946][ T1205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   99.012601][ T6375] dvb-usb: bulk message failed: -22 (3/0)
[   99.064704][ T6375] dvb-usb: bulk message failed: -22 (4/0)
[   99.083849][ T6375] cxusb: i2c read failed
[   99.107326][ T1205] usb 5-1: selecting invalid altsetting 6
[   99.113236][ T1205] usb 5-1: digital interface selection failed (-22)
[   99.138550][ T1205] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   99.138559][ T6400] dvb-usb: bulk message failed: -22 (3/0)
[   99.167119][ T6400] dvb-usb: bulk message failed: -22 (3/0)
[   99.170042][ T1205] usb 5-1: setting power OFF
[   99.196083][ T1205] dvb-usb: bulk message failed: -22 (2/0)
[   99.223316][ T1205] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   99.250397][ T1205] (NULL device *): no alternate interface
[   99.358953][ T1205] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   99.425409][ T1205] usb 5-1: USB disconnect, device number 2
[   99.593004][ T6415] loop1: detected capacity change from 0 to 128
[   99.633305][ T6415] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   99.673688][ T6415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.805106][ T6421] Driver unsupported XDP return value 0 on prog  (id 9) dev N/A, expect packet loss!
[   99.951992][ T6425] netlink: 52 bytes leftover after parsing attributes in process `syz.3.165'.
[  100.195115][ T6438] netem: change failed
[  101.470792][ T6464] loop1: detected capacity change from 0 to 16
[  101.504774][ T6464] erofs: (device loop1): mounted with root inode @ nid 36.
[  101.818548][ T6453] loop2: detected capacity change from 0 to 32768
[  101.875488][ T6453] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  101.956902][ T6453] XFS (loop2): Ending clean mount
[  101.983971][ T6453] XFS (loop2): Quotacheck needed: Please wait.
[  102.112809][ T6453] XFS (loop2): Quotacheck: Done.
[  102.215682][ T6487] loop3: detected capacity change from 0 to 256
[  102.280210][ T6487] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  102.362206][ T5769] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.398401][   T41] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  103.084044][ T6502] loop1: detected capacity change from 0 to 2048
[  103.116422][ T6502] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576
[  103.157225][ T6502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.240442][ T6509] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  103.566838][ T6522] loop1: detected capacity change from 0 to 1024
[  104.289449][ T6546] loop1: detected capacity change from 0 to 128
[  104.334170][ T6546] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  104.387119][ T6546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.059164][ T6568] loop2: detected capacity change from 0 to 512
[  105.169943][ T6568] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  105.214600][ T6568] System zones: 1-12
[  105.252407][ T6568] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #12: comm syz.2.218: missing EA_INODE flag
[  105.357535][ T6568] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.218: error while reading EA inode 12 err=-117
[  105.406787][ T6568] EXT4-fs (loop2): 1 orphan inode deleted
[  105.435225][ T6568] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.632559][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.436715][ T6612] input: syz0 as /devices/virtual/input/input7
[  106.444089][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'.
[  106.623502][ T6623] loop4: detected capacity change from 0 to 256
[  107.723853][ T6652] loop2: detected capacity change from 0 to 8192
[  107.789729][ T6656] loop3: detected capacity change from 0 to 512
[  107.832167][ T6652] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  107.887843][ T6652] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  107.941634][ T6652] REISERFS (device loop2): using ordered data mode
[  107.981987][ T6652] reiserfs: using flush barriers
[  108.044602][ T6652] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  108.135293][ T6652] REISERFS (device loop2): checking transaction log (loop2)
[  108.229715][ T6652] REISERFS (device loop2): Using r5 hash to sort names
[  108.279174][ T6652] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  108.391546][ T6668] loop3: detected capacity change from 0 to 8192
[  108.498426][ T5874] blk_print_req_error: 2 callbacks suppressed
[  108.498441][ T5874] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  109.081417][ T6688] loop1: detected capacity change from 0 to 4096
[  109.179772][ T6695] netlink: 16 bytes leftover after parsing attributes in process `syz.3.254'.
[  109.387058][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.2.256'.
[  110.256162][ T6739] syz.2.268 uses obsolete (PF_INET,SOCK_PACKET)
[  111.049256][ T6772] loop3: detected capacity change from 0 to 512
[  111.108306][ T6772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  111.137950][ T6772] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.263521][ T6742] loop1: detected capacity change from 0 to 40427
[  111.285359][ T6742] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  111.299975][ T6742] F2FS-fs (loop1): Image doesn't support compression
[  111.314017][ T6742] F2FS-fs (loop1): Image doesn't support compression
[  111.342734][ T6742] F2FS-fs (loop1): invalid crc value
[  111.390614][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.429716][ T6742] F2FS-fs (loop1): Found nat_bits in checkpoint
[  111.634915][ T6742] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  111.749580][ T6795] loop4: detected capacity change from 0 to 8
[  111.755389][ T6742] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_page+0x1d7/0x910
[  111.770747][ T6797] capability: warning: `syz.2.283' uses 32-bit capabilities (legacy support in use)
[  111.838979][ T6797] program syz.2.283 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  111.851582][ T6800] loop3: detected capacity change from 0 to 164
[  111.892245][ T5761] syz-executor: attempt to access beyond end of device
[  111.892245][ T5761] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  111.915017][ T6795] SQUASHFS error: Failed to read block 0x1ec: -5
[  111.944635][ T6795] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  111.974560][ T5761] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  111.985994][ T5761] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  112.023652][ T5761] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  112.036358][ T6800] rock: directory entry would overflow storage
[  112.086868][ T6800] rock: sig=0x4d4e, size=5, remaining=4
[  112.094927][ T6803] isofs: isofs_export_get_parent(): child directory not normalized!
[  112.151785][ T6800] isofs: isofs_export_get_parent(): child directory not normalized!
[  112.526901][ T6819] loop4: detected capacity change from 0 to 128
[  112.694794][  T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  112.907907][  T788] usb 3-1: Using ep0 maxpacket: 16
[  112.939110][  T788] usb 3-1: unable to get BOS descriptor or descriptor too short
[  112.967964][  T788] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  112.997279][  T788] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  113.011271][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.030778][  T788] usb 3-1: Product: syz
[  113.041211][  T788] usb 3-1: Manufacturer: syz
[  113.046204][  T788] usb 3-1: SerialNumber: syz
[  113.309188][  T788] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  113.333499][  T788] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  113.467801][ T6856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'.
[  113.508565][ T6856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'.
[  113.542909][ T6859] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'.
[  113.615335][ T6856] netlink: 60 bytes leftover after parsing attributes in process `syz.4.298'.
[  113.754803][  T788] usb 3-1: USB disconnect, device number 4
[  113.851661][ T6871] netlink: 'syz.4.302': attribute type 4 has an invalid length.
[  113.938891][ T6873] loop3: detected capacity change from 0 to 256
[  113.991776][ T6873] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  114.228465][ T6880] loop4: detected capacity change from 0 to 16
[  114.248911][ T6880] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  114.280754][ T6882] loop3: detected capacity change from 0 to 512
[  114.308858][ T5763] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  114.318988][ T5763] Bluetooth: hci2: Injecting HCI hardware error event
[  114.328769][ T5763] Bluetooth: hci2: hardware error 0x00
[  114.966010][ T1205] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  114.981814][ T6898] serio: Serial port ttyS3
[  115.174757][    T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.187266][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 135, changing to 11
[  115.216319][ T1205] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24844, setting to 1024
[  115.238266][ T1205] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  115.269815][ T1205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.284232][ T1205] usb 3-1: config 0 descriptor??
[  115.406680][    T8] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  115.431123][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  115.439360][    T8] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  115.461546][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.484208][    T8] usb 4-1: config 0 descriptor??
[  115.701523][ T1205] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[  115.714707][ T1205] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x4
[  115.729203][ T1205] cm6533_jd 0003:0D8C:0022.0002: item fetching failed at offset 4/5
[  115.738924][ T1205] cm6533_jd 0003:0D8C:0022.0002: parse failed
[  115.745709][ T1205] cm6533_jd: probe of 0003:0D8C:0022.0002 failed with error -22
[  115.907720][ T6177] usb 3-1: USB disconnect, device number 5
[  115.914828][  T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  115.940817][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.949943][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.956845][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.964313][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.977777][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.987019][    T8] asus 0003:048D:CE50.0003: unknown main item tag 0x0
[  115.994374][    T8] asus 0003:048D:CE50.0003: unexpected long global item
[  116.008082][    T8] asus 0003:048D:CE50.0003: Asus hid parse failed: -22
[  116.027851][    T8] asus: probe of 0003:048D:CE50.0003 failed with error -22
[  116.117220][  T788] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  116.127469][  T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.155081][  T788] usb 5-1: config 0 descriptor??
[  116.172070][  T788] cp210x 5-1:0.0: cp210x converter detected
[  116.196196][ T6177] usb 4-1: USB disconnect, device number 5
[  116.384902][ T5763] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  116.584661][  T788] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  116.606597][   T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  116.625424][  T788] usb 5-1: cp210x converter now attached to ttyUSB0
[  116.790812][ T6950] loop3: detected capacity change from 0 to 256
[  116.807787][   T42] usb 2-1: Using ep0 maxpacket: 16
[  116.831838][   T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.841364][    T8] usb 5-1: USB disconnect, device number 3
[  116.870883][   T42] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.880235][    T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  116.907509][   T42] usb 2-1: config 0 interface 0 has no altsetting 0
[  116.934018][    T8] cp210x 5-1:0.0: device disconnected
[  116.951676][   T42] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  116.979234][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.013250][   T42] usb 2-1: config 0 descriptor??
[  117.024409][ T6954] loop2: detected capacity change from 0 to 512
[  117.241182][ T6956] loop3: detected capacity change from 0 to 8192
[  117.286397][ T6956] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  117.299531][ T6956] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  117.309672][ T6956] REISERFS (device loop3): using ordered data mode
[  117.316332][ T6956] reiserfs: using flush barriers
[  117.324049][ T6956] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  117.341311][ T6956] REISERFS (device loop3): checking transaction log (loop3)
[  117.356828][ T6956] REISERFS (device loop3): Using r5 hash to sort names
[  117.377496][ T6956] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  117.407978][ T6961] loop2: detected capacity change from 0 to 128
[  117.486222][   T42] hid (null): bogus close delimiter
[  117.490224][ T6961] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  117.501965][   T42] hid (null): unknown global tag 0xe
[  117.538891][ T6961] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  117.766076][ T1205] usb 2-1: USB disconnect, device number 2
[  118.863277][ T6980] loop2: detected capacity change from 0 to 40427
[  118.898242][ T6982] loop1: detected capacity change from 0 to 32768
[  118.928616][ T6982] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  118.938287][ T6980] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff
[  118.955169][ T6980] F2FS-fs (loop2): Image doesn't support compression
[  118.961896][ T6980] F2FS-fs (loop2): heap/no_heap options were deprecated
[  119.002999][ T6980] F2FS-fs (loop2): invalid crc value
[  119.052442][ T6982] XFS (loop1): Ending clean mount
[  119.059463][ T6980] F2FS-fs (loop2): Found nat_bits in checkpoint
[  119.273593][ T6980] F2FS-fs (loop2): Start checkpoint disabled!
[  119.320864][ T6980] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  119.441993][ T5761] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  119.671958][   T49] kworker/u4:3: attempt to access beyond end of device
[  119.671958][   T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  119.692843][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  119.701321][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  119.827545][ T7000] loop3: detected capacity change from 0 to 4096
[  120.415937][ T7012] loop2: detected capacity change from 0 to 8192
[  120.447102][ T7012] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  120.471739][ T7012] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  120.481940][ T7012] REISERFS (device loop2): using ordered data mode
[  120.488619][ T7012] reiserfs: using flush barriers
[  120.496033][ T7012] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  120.513077][ T7012] REISERFS (device loop2): checking transaction log (loop2)
[  120.576414][ T7012] REISERFS (device loop2): Using r5 hash to sort names
[  120.613072][ T7012] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  121.518180][ T7031] warning: `syz.2.360' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  121.721518][ T7035] tipc: Started in network mode
[  121.729221][ T7035] tipc: Node identity ac14140f, cluster identity 4711
[  121.759239][ T7035] tipc: New replicast peer: 255.255.255.255
[  121.777538][ T7035] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.584529][ T6177] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  122.776650][ T6177] usb 2-1: Using ep0 maxpacket: 16
[  122.797407][ T6177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  122.840951][ T6177] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  122.867865][ T6177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.897878][ T6177] usb 2-1: Product: syz
[  122.902101][ T6177] usb 2-1: Manufacturer: syz
[  122.916241][    T8] tipc: Node number set to 2886997007
[  122.922008][ T6177] usb 2-1: SerialNumber: syz
[  122.941140][ T6177] usb 2-1: config 0 descriptor??
[  122.959760][ T6177] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  122.984592][ T6177] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  123.279458][ T7076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'.
[  123.407278][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'.
[  123.580370][ T6177] em28xx 2-1:0.0: chip ID is em2765
[  123.820535][ T7072] loop4: detected capacity change from 0 to 32768
[  123.843227][ T7072] (syz.4.376,7072,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  123.900577][ T6177] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  123.943861][ T6177] em28xx 2-1:0.0: board has no eeprom
[  123.996399][ T7072] (syz.4.376,7072,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  124.034663][ T6177] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  124.060223][ T6177] em28xx 2-1:0.0: dvb set to bulk mode.
[  124.084915][  T788] em28xx 2-1:0.0: Binding DVB extension
[  124.102880][ T7080] loop3: detected capacity change from 0 to 32768
[  124.114573][ T6177] usb 2-1: USB disconnect, device number 3
[  124.146748][ T6177] em28xx 2-1:0.0: Disconnecting em28xx
[  124.262158][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.262158][ T7080] 
[  124.289430][  T788] em28xx 2-1:0.0: Registering input extension
[  124.292304][ T7080] xtLookup: xtSearch returned -5
[  124.315084][ T6177] em28xx 2-1:0.0: Closing input extension
[  124.330726][ T7080] add_index: get/read_metapage failed!
[  124.355897][ T6177] em28xx 2-1:0.0: Freeing device
[  124.362801][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.362801][ T7080] 
[  124.416131][ T7072] JBD2: Ignoring recovery information on journal
[  124.527236][ T7080] xtLookup: xtSearch returned -5
[  124.532849][ T7080] free_index: error reading directory table
[  124.564309][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.564309][ T7080] 
[  124.606010][ T7080] xtLookup: xtSearch returned -5
[  124.624874][ T7080] free_index: error reading directory table
[  124.631436][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.631436][ T7080] 
[  124.694545][ T7080] xtLookup: xtSearch returned -5
[  124.699583][ T7080] free_index: error reading directory table
[  124.717208][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.717208][ T7080] 
[  124.744605][ T7080] xtLookup: xtSearch returned -5
[  124.755795][ T7072] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  124.769485][ T7080] free_index: error reading directory table
[  124.780643][ T7080] ERROR: (device loop3): xtSearch: XT_GETPAGE: xtree page corrupt
[  124.780643][ T7080] 
[  124.804804][ T7080] xtLookup: xtSearch returned -5
[  124.809800][ T7080] free_index: error reading directory table
[  124.987967][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'.
[  125.082802][ T7093] bridge0: entered promiscuous mode
[  125.133702][ T7093] macvtap1: entered promiscuous mode
[  125.168753][ T7093] macvtap1: entered allmulticast mode
[  125.174232][ T7093] bridge0: entered allmulticast mode
[  125.204102][ T7093] bridge0: port 3(macvtap1) entered blocking state
[  125.232291][ T7093] bridge0: port 3(macvtap1) entered disabled state
[  125.270297][ T7093] bridge0: left allmulticast mode
[  125.282666][ T7093] bridge0: left promiscuous mode
[  125.312304][ T7096] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  125.349134][ T7098] loop3: detected capacity change from 0 to 512
[  125.404378][ T7098] EXT4-fs (loop3): 1 truncate cleaned up
[  125.408025][ T7099] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  125.433497][ T5938] ocfs2: Unmounting device (7,4) on (node local)
[  125.453225][ T7098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  125.489124][   T27] audit: type=1800 audit(1777041046.761:4): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.387" name="file1" dev="loop3" ino=13 res=0 errno=0
[  125.561829][ T7098] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.387: bg 0: block 465: padding at end of block bitmap is not set
[  125.620019][ T7098] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28
[  125.665567][ T7098] EXT4-fs (loop3): This should not happen!! Data will be lost
[  125.665567][ T7098] 
[  125.694550][ T7098] EXT4-fs (loop3): Total free blocks count 0
[  125.700644][ T7098] EXT4-fs (loop3): Free/Dirty block details
[  125.707408][ T7098] EXT4-fs (loop3): free_blocks=0
[  125.717202][ T7098] EXT4-fs (loop3): dirty_blocks=2
[  125.722284][ T7098] EXT4-fs (loop3): Block reservation details
[  125.754557][ T7098] EXT4-fs (loop3): i_reserved_data_blocks=2
[  125.837206][ T7098] syz.3.387 (7098) used greatest stack depth: 20912 bytes left
[  125.915803][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.069187][ T7113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.393'.
[  126.095263][ T7113] netlink: 'syz.3.393': attribute type 20 has an invalid length.
[  126.103243][ T7113] netlink: 'syz.3.393': attribute type 21 has an invalid length.
[  126.706042][ T7125] netlink: 'syz.1.399': attribute type 1 has an invalid length.
[  126.730663][ T7125] netlink: 'syz.1.399': attribute type 2 has an invalid length.
[  126.739439][ T7125] netlink: 244 bytes leftover after parsing attributes in process `syz.1.399'.
[  126.854614][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  127.012942][ T7129] loop1: detected capacity change from 0 to 256
[  127.020970][ T7105] loop2: detected capacity change from 0 to 32768
[  127.037343][ T7129] exfat: Deprecated parameter 'utf8'
[  127.053041][ T7129] exfat: Deprecated parameter 'namecase'
[  127.067218][    T8] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  127.080087][ T7105] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.391 (7105)
[  127.105335][    T8] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  127.127768][ T7129] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  127.150290][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.206947][    T8] gspca_main: stv0680-2.14.0 probing 041e:4007
[  127.289679][ T7105] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  127.352334][ T7105] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  127.374766][ T7105] BTRFS info (device loop2): enabling disk space caching
[  127.381900][ T7105] BTRFS info (device loop2): force clearing of disk cache
[  127.428060][ T7111] loop4: detected capacity change from 0 to 32768
[  127.458009][ T7105] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  127.474604][ T7105] BTRFS info (device loop2): use zstd compression, level 3
[  127.521950][ T7105] BTRFS info (device loop2): disk space caching is enabled
[  127.599136][ T7111] read_mapping_page failed!
[  127.604313][ T7111] ERROR: (device loop4): txCommit: 
[  127.604313][ T7111] 
[  127.702396][ T7111] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  127.702396][ T7111] 
[  127.781631][ T7105] BTRFS info (device loop2): enabling ssd optimizations
[  127.786985][ T7152] loop1: detected capacity change from 0 to 16
[  127.806039][ T7152] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  127.836149][ T7105] BTRFS info (device loop2): auto enabling async discard
[  127.887981][ T7105] BTRFS info (device loop2): rebuilding free space tree
[  128.114912][ T7105] BTRFS info (device loop2): disabling free space tree
[  128.154632][ T7105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  128.208651][ T7105] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  128.318727][    T8] stv0680 4-1:4.0: Could not get descriptor 0200
[  128.531447][    T8] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  128.552290][    T8] stv0680 4-1:4.0: last error: 0,  command = 0x0
[  128.579840][    T8] usb 4-1: USB disconnect, device number 6
[  128.631863][ T5769] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  129.386628][ T7180] program syz.1.415 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  130.083518][ T7175] loop3: detected capacity change from 0 to 40427
[  130.119906][ T7175] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.128508][ T7175] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.155378][ T7175] F2FS-fs (loop3): invalid crc_offset: 33558524
[  130.221052][ T7187] loop4: detected capacity change from 0 to 32768
[  130.224501][ T7175] F2FS-fs (loop3): Found nat_bits in checkpoint
[  130.257833][ T7187] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.417 (7187)
[  130.329633][ T7187] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.371956][ T7175] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  130.375197][ T7187] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  130.398571][ T7187] BTRFS info (device loop4): setting nodatasum
[  130.404942][ T7187] BTRFS info (device loop4): force zlib compression, level 3
[  130.412365][ T7187] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  130.426226][ T7175] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  130.459222][ T7187] BTRFS info (device loop4): use lzo compression, level 0
[  130.478760][ T7187] BTRFS info (device loop4): turning on flush-on-commit
[  130.504607][ T7187] BTRFS info (device loop4): enabling auto defrag
[  130.521424][ T7187] BTRFS info (device loop4): max_inline at 4096
[  130.534521][ T7187] BTRFS info (device loop4): using free space tree
[  130.663420][   T27] audit: type=1107 audit(1777041051.931:5): pid=7222 uid=0 auid=0 ses=1 subj=unconfined msg=''
[  130.755107][ T7187] BTRFS info (device loop4): enabling ssd optimizations
[  131.118852][ T5938] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.121678][ T7237] loop2: detected capacity change from 0 to 256
[  131.366624][ T7237] FAT-fs (loop2): Directory bread(block 64) failed
[  131.373215][ T7237] FAT-fs (loop2): Directory bread(block 65) failed
[  131.390912][ T7237] FAT-fs (loop2): Directory bread(block 66) failed
[  131.404571][ T7237] FAT-fs (loop2): Directory bread(block 67) failed
[  131.411255][ T7237] FAT-fs (loop2): Directory bread(block 68) failed
[  131.470911][ T7237] FAT-fs (loop2): Directory bread(block 69) failed
[  131.484690][ T7237] FAT-fs (loop2): Directory bread(block 70) failed
[  131.491271][ T7237] FAT-fs (loop2): Directory bread(block 71) failed
[  131.535355][ T7237] FAT-fs (loop2): Directory bread(block 72) failed
[  131.541947][ T7237] FAT-fs (loop2): Directory bread(block 73) failed
[  131.631673][ T7243] loop1: detected capacity change from 0 to 128
[  132.354830][   T42] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  132.367006][ T7261] loop3: detected capacity change from 0 to 8192
[  132.405111][ T7261] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  132.451509][ T7267] loop4: detected capacity change from 0 to 512
[  132.454022][ T7270] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.470811][ T7261] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  132.489489][ T7261] REISERFS (device loop3): using journaled data mode
[  132.530654][ T7261] reiserfs: using flush barriers
[  132.564793][   T42] usb 3-1: Using ep0 maxpacket: 16
[  132.567954][ T7267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.576411][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  132.606156][ T7261] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  132.620175][   T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.644605][ T7267] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.678108][   T42] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  132.693248][ T7261] REISERFS (device loop3): checking transaction log (loop3)
[  132.708721][   T42] usb 3-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  132.728189][   T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.729695][ T7261] REISERFS (device loop3): Using r5 hash to sort names
[  132.749692][ T7261] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  132.757690][   T42] usb 3-1: config 0 descriptor??
[  132.767030][ T7261] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  132.793833][ T7267] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  132.856439][ T5938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.949986][ T1288] ieee802154 phy0 wpan0: encryption failed: -22
[  132.958644][ T1288] ieee802154 phy1 wpan1: encryption failed: -22
[  133.210284][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  133.255055][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  133.279026][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.301604][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.324542][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.335525][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.351472][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.363679][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.379737][ T7283] pimreg: entered allmulticast mode
[  133.389699][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.403981][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.417758][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.431751][ T7275] loop1: detected capacity change from 0 to 32768
[  133.433088][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x2
[  133.439337][ T7284] pimreg: left allmulticast mode
[  133.457964][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.484213][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.502855][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.523350][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x2
[  133.540757][   T42] apple 0003:05AC:027D.0005: unknown main item tag 0x0
[  133.571139][   T42] apple 0003:05AC:027D.0005: hidraw0: USB HID v0.00 Device [HID 05ac:027d] on usb-dummy_hcd.2-1/input0
[  133.623158][   T42] usb 3-1: USB disconnect, device number 6
[  133.783395][ T7285] fido_id[7285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  134.353685][ T7289] overlayfs: upper fs does not support file handles, falling back to index=off.
[  134.374023][ T7289] overlayfs: fs on '.' does not support file handles, falling back to xino=off.
[  134.511439][ T7293] loop2: detected capacity change from 0 to 2048
[  134.584079][ T7293] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.607481][ T7296] loop1: detected capacity change from 0 to 1024
[  134.992804][ T7300] macvlan0: entered promiscuous mode
[  135.006688][ T7300] batadv0: entered promiscuous mode
[  135.040170][ T7300] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network
[  135.151077][ T7291] loop4: detected capacity change from 0 to 32768
[  135.191443][ T7291] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.386978][ T7291] XFS (loop4): Ending clean mount
[  135.518376][ T5938] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.534550][ T5751] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  135.713229][ T7327] loop2: detected capacity change from 0 to 8192
[  135.731139][ T7327] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  135.754731][ T5751] usb 4-1: Using ep0 maxpacket: 16
[  135.760909][   T27] audit: type=1800 audit(1777041057.031:6): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.467" name="file1" dev="loop2" ino=1048618 res=0 errno=0
[  135.799107][ T5751] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.846935][ T5751] usb 4-1: config 0 interface 0 has no altsetting 0
[  135.874621][ T5751] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  135.924789][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.946234][ T7331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  135.947199][ T5751] usb 4-1: config 0 descriptor??
[  135.985180][ T7331] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  136.024194][ T7333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'.
[  136.399272][ T7345] loop4: detected capacity change from 0 to 256
[  136.433082][ T5751] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0
[  136.700096][ T7352] loop4: detected capacity change from 0 to 512
[  136.715678][ T7352] EXT4-fs: Ignoring removed bh option
[  136.753284][ T7352] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  136.855172][ T7352] EXT4-fs (loop4): 1 truncate cleaned up
[  136.868628][ T7352] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.989808][   T42] usb 4-1: USB disconnect, device number 7
[  137.043981][ T7347] loop2: detected capacity change from 0 to 32768
[  137.052108][ T7347] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.474 (7347)
[  137.099621][ T7347] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  137.108647][ T5938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.126493][ T7347] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  137.147937][ T7347] BTRFS info (device loop2): using free space tree
[  137.150615][ T5798] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  137.251071][ T7347] BTRFS info (device loop2): enabling ssd optimizations
[  137.260102][ T7347] BTRFS info (device loop2): auto enabling async discard
[  137.408675][ T5798] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  137.444654][ T5798] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  137.453748][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.506476][ T5798] usb 2-1: config 0 descriptor??
[  137.638203][ T5769] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  137.951508][ T5798] elecom 0003:056E:011C.0007: item fetching failed at offset 2/40
[  137.959936][ T5751] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  137.975448][ T5798] elecom: probe of 0003:056E:011C.0007 failed with error -22
[  138.106202][ T7389] loop2: detected capacity change from 0 to 512
[  138.155209][ T5798] usb 2-1: USB disconnect, device number 4
[  138.194517][ T5751] usb 4-1: unable to get BOS descriptor or descriptor too short
[  138.214585][ T5751] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  138.238969][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.257468][ T5751] usb 4-1: Product: syz
[  138.266313][ T5751] usb 4-1: Manufacturer: syz
[  138.273467][ T5751] usb 4-1: SerialNumber: syz
[  139.014590][  T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  139.119897][ T5751] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1
[  139.202126][ T5751] usb 4-1: USB disconnect, device number 8
[  139.219305][  T788] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  139.245047][  T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.278368][ T5752] udevd[5752]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.309217][  T788] usb 2-1: config 0 descriptor??
[  139.332444][  T788] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  139.597878][ T7420] netlink: 28 bytes leftover after parsing attributes in process `syz.2.498'.
[  139.619659][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.666017][ T7420] bridge_slave_1: left allmulticast mode
[  139.671948][ T7420] bridge_slave_1: left promiscuous mode
[  139.678458][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.701844][ T7424] loop4: detected capacity change from 0 to 512
[  139.868924][ T7424] EXT4-fs (loop4): Test dummy encryption mode enabled
[  139.879922][ T7424] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  139.909282][ T7424] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  139.987290][ T7424] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  140.031208][ T7424] EXT4-fs (loop4): 1 truncate cleaned up
[  140.038855][ T7424] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.151466][  T788] usb 2-1: USB disconnect, device number 5
[  140.373719][ T7424] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  140.417042][ T7442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  140.565649][ T7424] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  140.600183][ T7424] overlayfs: upper fs does not support tmpfile.
[  140.637309][ T7424] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  140.840856][ T5938] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.932819][ T7460] loop3: detected capacity change from 0 to 256
[  140.951148][ T7460] exfat: Deprecated parameter 'utf8'
[  141.000142][ T7460] exfat: Deprecated parameter 'utf8'
[  141.042764][ T7460] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  141.787787][ T7483] loop2: detected capacity change from 0 to 256
[  141.826941][ T7483] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  141.978209][ T7483] syz.2.516: attempt to access beyond end of device
[  141.978209][ T7483] loop2: rw=524288, sector=280, nr_sectors = 128 limit=256
[  142.036815][ T7483] syz.2.516: attempt to access beyond end of device
[  142.036815][ T7483] loop2: rw=524288, sector=408, nr_sectors = 256 limit=256
[  142.064681][ T7483] syz.2.516: attempt to access beyond end of device
[  142.064681][ T7483] loop2: rw=0, sector=280, nr_sectors = 8 limit=256
[  142.072296][ T7490] loop3: detected capacity change from 0 to 4096
[  142.080223][   T27] audit: type=1800 audit(1777041063.351:7): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.516" name="file1" dev="loop2" ino=1048621 res=0 errno=0
[  142.269601][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.594556][ T5751] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  142.719558][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.529'.
[  142.752883][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.780538][ T7512] bridge_slave_1: left allmulticast mode
[  142.787382][ T7512] bridge_slave_1: left promiscuous mode
[  142.794694][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.795095][ T5751] usb 3-1: Using ep0 maxpacket: 8
[  142.855452][ T5751] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  142.885392][ T5751] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  142.922841][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  142.943433][ T5751] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  142.978503][ T5751] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  143.007622][ T5751] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  143.018458][ T5751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.057884][ T7522] loop3: detected capacity change from 0 to 128
[  143.080736][ T7522] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  143.110008][ T7522] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.164660][   T23] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  143.264715][ T5751] usb 3-1: GET_CAPABILITIES returned 0
[  143.284648][ T5751] usbtmc 3-1:16.0: can't read capabilities
[  143.364544][   T23] usb 5-1: Using ep0 maxpacket: 32
[  143.384277][   T23] usb 5-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c
[  143.409491][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.431624][   T23] usb 5-1: Product: syz
[  143.439561][   T23] usb 5-1: Manufacturer: syz
[  143.449639][   T23] usb 5-1: SerialNumber: syz
[  143.475542][   T23] usb 5-1: config 0 descriptor??
[  143.494081][   T23] dw2102: su3000_identify_state
[  143.507167][   T23] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state.
[  143.524739][   T23] dw2102: su3000_power_ctrl: 1, initialized 0
[  143.547878][   T23] dvb-usb: bulk message failed: -22 (2/0)
[  143.580392][   T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  143.599969][    T8] usb 3-1: USB disconnect, device number 7
[  143.638916][   T23] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0)
[  143.660862][   T23] usb 5-1: media controller created
[  143.681060][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.694060][   T23] dw2102: i2c transfer failed.
[  143.722055][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.737322][   T23] dw2102: i2c transfer failed.
[  143.756588][ T7517] dvb-usb: bulk message failed: -22 (5/0)
[  143.781120][ T7517] dw2102: i2c transfer failed.
[  143.833203][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.843589][   T23] dw2102: i2c transfer failed.
[  143.860722][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.866959][   T23] dw2102: i2c transfer failed.
[  143.871878][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.894596][   T23] dw2102: i2c transfer failed.
[  143.902185][   T23] dvb-usb: bulk message failed: -22 (6/0)
[  143.913770][   T23] dw2102: i2c transfer failed.
[  143.918829][   T23] dvb-usb: MAC address: 02:02:02:02:02:02
[  143.961231][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.026980][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  144.046384][   T23] dw2102: command 0x0e transfer failed.
[  144.052349][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  144.082826][   T23] dw2102: command 0x0e transfer failed.
[  144.425453][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  144.431247][   T23] dw2102: command 0x0e transfer failed.
[  144.467766][   T23] dvb-usb: bulk message failed: -22 (3/0)
[  144.473552][   T23] dw2102: command 0x0e transfer failed.
[  144.494491][   T23] dvb-usb: bulk message failed: -22 (1/0)
[  144.524666][ T5798] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  144.531939][   T23] dw2102: command 0x51 transfer failed.
[  144.630786][   T23] DVB: Unable to find symbol ds3000_attach()
[  144.655068][   T23] dvb-usb: no frontend was attached by 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0'
[  144.734517][ T5798] usb 3-1: Using ep0 maxpacket: 32
[  144.756972][ T5798] usb 3-1: config 6 has an invalid interface number: 12 but max is 0
[  144.773122][ T5798] usb 3-1: config 6 has no interface number 0
[  144.784692][ T5798] usb 3-1: config 6 interface 12 has no altsetting 0
[  144.797497][ T5798] usb 3-1: New USB device found, idVendor=2019, idProduct=ab31, bcdDevice= e.39
[  144.804550][   T23] rc_core: IR keymap rc-su3000 not found
[  144.824587][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.827046][   T23] Registered IR keymap rc-empty
[  144.832589][ T5798] usb 3-1: Product: syz
[  144.832604][ T5798] usb 3-1: Manufacturer: syz
[  144.832617][ T5798] usb 3-1: SerialNumber: syz
[  144.880314][ T7537] can0: slcan on ttyS3.
[  144.902923][   T23] rc rc0: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  144.951901][   T23] input: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input9
[  144.995924][   T23] dvb-usb: schedule remote query interval to 150 msecs.
[  145.026414][   T23] dw2102: su3000_power_ctrl: 0, initialized 1
[  145.032547][   T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2.0 successfully initialized and connected.
[  145.064567][ T7537] can0 (unregistered): slcan off ttyS3.
[  145.090874][ T5798] usb-storage 3-1:6.12: USB Mass Storage device detected
[  145.091434][   T23] usb 5-1: USB disconnect, device number 4
[  145.107260][ T7537] Falling back ldisc for ttyS3.
[  145.261333][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'.
[  145.282454][   T23] dvb-usb: Hauppauge MAX S2 or WinTV NOVA HD USB2. successfully deinitialized and disconnected.
[  145.305337][ T5798] usb 3-1: USB disconnect, device number 8
[  145.587089][ T7533] loop4: detected capacity change from 0 to 32768
[  145.921625][   T27] audit: type=1800 audit(1777041067.191:8): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.538" name="file1" dev="loop4" ino=7 res=0 errno=0
[  146.012368][  T114] ERROR: (device loop4): diFree: numfree > numinos
[  146.012368][  T114] 
[  146.053010][  T114] ERROR: (device loop4): remounting filesystem as read-only
[  146.223128][ T7574] loop2: detected capacity change from 0 to 2048
[  146.259958][ T7574] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.309730][   T27] audit: type=1800 audit(1777041067.581:9): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.550" name="file1" dev="loop2" ino=1415 res=0 errno=0
[  146.336887][ T7577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'.
[  147.010205][ T7600] loop4: detected capacity change from 0 to 256
[  147.067686][ T7602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'.
[  147.098992][ T7600] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x0726f69c, utbl_chksum : 0xe619d30d)
[  147.169984][ T7598] loop2: detected capacity change from 0 to 4096
[  147.171345][ T7600] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[  147.225524][ T7600] exFAT-fs (loop4): Filesystem has been set read-only
[  147.270652][ T7600] exFAT-fs (loop4): hint_cluster is invalid (1), rewind to the first cluster
[  147.288041][ T7598] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.291951][ T7600] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000)
[  147.311682][ T7600] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805ab59b60 iblock : 9, err : -5)
[  147.328681][ T7600] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[  147.343098][ T7612] exFAT-fs (loop4): error, invalid access to exfat cache (entry 0x00000000)
[  147.372963][ T7612] exFAT-fs (loop4): error, failed to bmap (inode : ffff88805ab59b60 iblock : 8, err : -5)
[  147.403314][ T7612] exFAT-fs (loop4): error, tried to truncate zeroed cluster.
[  147.423221][ T7615] loop1: detected capacity change from 0 to 512
[  147.443074][ T7615] EXT4-fs: Ignoring removed nobh option
[  147.477538][ T7615] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  147.554796][ T7615] EXT4-fs (loop1): 1 truncate cleaned up
[  147.561668][ T7615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.661423][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.841342][   T27] audit: type=1800 audit(1777041069.111:10): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.561" name="file1" dev="loop1" ino=15 res=0 errno=0
[  147.951299][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.194588][ T5798] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  148.214282][ T7637] loop2: detected capacity change from 0 to 2048
[  148.253518][ T7637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.389082][ T7643] netlink: 52 bytes leftover after parsing attributes in process `syz.3.571'.
[  148.397705][ T7637] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  148.425415][ T5798] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  148.443913][ T5798] usb 5-1: config 0 has no interface number 0
[  148.444143][ T7637] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  148.451877][ T5798] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.475383][ T5798] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.485723][ T5798] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.500948][ T5798] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  148.510598][ T5798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.529392][ T5798] usb 5-1: config 0 descriptor??
[  148.542220][ T7637] EXT4-fs (loop2): This should not happen!! Data will be lost
[  148.542220][ T7637] 
[  148.583679][ T7637] EXT4-fs (loop2): Total free blocks count 0
[  148.597657][ T7637] EXT4-fs (loop2): Free/Dirty block details
[  148.614674][ T7637] EXT4-fs (loop2): free_blocks=2415919504
[  148.620520][ T7637] EXT4-fs (loop2): dirty_blocks=32
[  148.644916][ T7637] EXT4-fs (loop2): Block reservation details
[  148.662005][ T7635] loop1: detected capacity change from 0 to 32768
[  148.668578][ T7637] EXT4-fs (loop2): i_reserved_data_blocks=2
[  148.677432][ T7635] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.567 (7635)
[  148.696368][ T7637] EXT4-fs error (device loop2) in ext4_setattr:5682: error 28
[  148.751009][ T7635] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  148.774791][ T7635] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  148.802717][ T7635] BTRFS info (device loop1): using free space tree
[  148.816795][ T3435] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  148.952840][ T7635] BTRFS info (device loop1): enabling ssd optimizations
[  148.985433][ T7635] BTRFS info (device loop1): auto enabling async discard
[  149.253909][ T5798] input: HID 28bd:0042 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0008/input/input10
[  149.340371][ T5761] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  149.427263][ T5798] uclogic 0003:28BD:0042.0008: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1
[  149.526315][ T5798] usb 5-1: USB disconnect, device number 5
[  149.685583][ T7676] fido_id[7676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  149.712557][ T7681] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  150.871767][ T7699] loop3: detected capacity change from 0 to 32768
[  150.932212][ T7699] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.027737][ T7699] XFS (loop3): Ending clean mount
[  151.064060][ T7699] XFS (loop3): Quotacheck needed: Please wait.
[  151.109777][ T7727] loop1: detected capacity change from 0 to 64
[  151.138381][ T7728] loop2: detected capacity change from 0 to 512
[  151.157598][ T7728] EXT4-fs: Ignoring removed bh option
[  151.184588][ T7728] EXT4-fs: Ignoring removed nomblk_io_submit option
[  151.217786][ T7699] XFS (loop3): Quotacheck: Done.
[  151.236066][ T7728] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  151.261577][ T7727] gfs2: path_lookup on c::: returned error -2
[  151.319091][   T27] audit: type=1800 audit(1777041072.591:11): pid=7699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.589" name="file1" dev="loop3" ino=6150 res=0 errno=0
[  151.346534][ T7728] EXT4-fs (loop2): 1 truncate cleaned up
[  151.354933][ T7728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.448950][ T7728] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 1057052516 > max in inode 18
[  151.470884][ T5764] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  151.681049][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.007767][ T7747] loop4: detected capacity change from 0 to 764
[  152.089610][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'.
[  152.565031][ T7765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.615'.
[  152.584809][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  152.729848][ T7771] loop4: detected capacity change from 0 to 1024
[  152.765533][ T7771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.795967][    T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.825078][    T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  152.866040][    T8] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  152.875284][   T27] audit: type=1800 audit(1777041074.131:12): pid=7771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.617" name="file2" dev="loop4" ino=840 res=0 errno=0
[  152.907437][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.921539][    T8] usb 4-1: Product: syz
[  152.932917][    T8] usb 4-1: Manufacturer: syz
[  152.945304][    T8] usb 4-1: SerialNumber: syz
[  152.955608][    T8] usb 4-1: config 0 descriptor??
[  153.226166][  T788] usb 4-1: USB disconnect, device number 9
[  153.324713][   T42] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  153.524860][   T42] usb 3-1: Using ep0 maxpacket: 32
[  153.541366][   T42] usb 3-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[  153.564602][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.585015][   T42] usb 3-1: Product: syz
[  153.589240][   T42] usb 3-1: Manufacturer: syz
[  153.593861][   T42] usb 3-1: SerialNumber: syz
[  153.626997][   T42] usb 3-1: config 0 descriptor??
[  153.856403][   T42] usb 3-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[  154.395621][   T42] usb 3-1: reset high-speed USB device number 9 using dummy_hcd
[  154.511538][ T7791] mmap: syz.1.627 (7791) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  154.699171][ T7794] loop3: detected capacity change from 0 to 32768
[  154.739344][ T7794] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.628 (7794)
[  154.811871][ T7794] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.833354][ T7794] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  154.854682][   T42] usb 3-1: [UEAGLE-ATM] interface 1 not found
[  154.860862][   T42] ueagle-atm 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  154.872805][ T7794] BTRFS info (device loop3): using free space tree
[  155.062179][    T8] usb 3-1: USB disconnect, device number 9
[  155.111823][ T7794] BTRFS info (device loop3): enabling ssd optimizations
[  155.144641][ T7794] BTRFS info (device loop3): auto enabling async discard
[  155.764781][ T5764] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.780380][ T7825] binfmt_misc: register: failed to install interpreter file ./file0
[  156.030970][ T7829] loop2: detected capacity change from 0 to 1024
[  156.354902][   T42] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  156.527917][ T7835] loop4: detected capacity change from 0 to 8192
[  156.563175][   T42] usb 2-1: Using ep0 maxpacket: 8
[  156.574724][ T5751] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  156.574732][   T42] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  156.574756][   T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  156.634738][   T42] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  156.645540][   T42] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  156.668942][   T42] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  156.695666][   T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.815479][ T5751] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  156.839744][ T5751] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.872003][ T5751] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  156.893788][ T5751] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.908509][ T5751] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  156.918463][ T5751] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  156.933862][   T42] usb 2-1: GET_CAPABILITIES returned 0
[  156.934486][ T5751] usb 4-1: Product: syz
[  156.943695][ T5751] usb 4-1: Manufacturer: syz
[  156.953714][   T42] usbtmc 2-1:16.0: can't read capabilities
[  156.966196][ T5751] cdc_wdm 4-1:1.0: skipping garbage
[  156.971457][ T5751] cdc_wdm 4-1:1.0: skipping garbage
[  156.993562][ T5751] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[  157.022700][ T5751] cdc_wdm 4-1:1.0: Unknown control protocol
[  157.219919][   T42] usb 2-1: USB disconnect, device number 6
[  157.685406][  T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  157.694966][    T8] usb 4-1: USB disconnect, device number 10
[  157.877686][  T788] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  157.908398][  T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.927740][ T5771] IPVS: starting estimator thread 0...
[  157.945595][  T788] usb 3-1: config 0 descriptor??
[  157.956698][ T7861] IPVS: lc: SCTP 172.20.20.187:0 - no destination available
[  157.963715][  T788] cp210x 3-1:0.0: cp210x converter detected
[  158.035013][ T7862] IPVS: using max 23 ests per chain, 55200 per kthread
[  158.255308][ T7857] loop4: detected capacity change from 0 to 32768
[  158.378150][  T788] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  158.419182][  T788] usb 3-1: cp210x converter now attached to ttyUSB0
[  158.641799][  T788] usb 3-1: USB disconnect, device number 10
[  158.666699][  T788] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  158.697664][  T788] cp210x 3-1:0.0: device disconnected
[  158.792737][ T7879] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only
[  158.824298][ T7873] loop3: detected capacity change from 0 to 8192
[  158.874092][ T7873] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  158.909863][ T7873] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  158.919413][ T7873] REISERFS (device loop3): using ordered data mode
[  158.927324][ T7873] reiserfs: using flush barriers
[  158.936852][ T7873] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  158.961795][ T7873] REISERFS (device loop3): checking transaction log (loop3)
[  159.089538][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.661'.
[  159.096920][ T7873] REISERFS (device loop3): Using r5 hash to sort names
[  159.108502][ T7873] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  159.213000][ T7873] REISERFS warning (device loop3): super-6502 reiserfs_getopt: unknown mount option "ÿÿ18446744073709551615ÿÿÿÿ0177777777777777777777701777777777777777777777ÿÿ18446744073709551615ÿÿ"
[  160.079685][ T7914] loop2: detected capacity change from 0 to 256
[  160.095821][ T7914] exfat: Deprecated parameter 'utf8'
[  160.124848][ T7914] exfat: Deprecated parameter 'utf8'
[  160.130224][ T7914] exfat: Deprecated parameter 'utf8'
[  160.180228][ T7914] exfat: Deprecated parameter 'utf8'
[  160.284611][ T7914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  160.346368][ T7900] loop4: detected capacity change from 0 to 32768
[  160.446619][ T7900] syz.4.666: attempt to access beyond end of device
[  160.446619][ T7900] loop14: rw=0, sector=8, nr_sectors = 8 limit=0
[  160.524533][ T7900] lbmIODone: I/O error in JFS log
[  160.530279][ T7900] *** Log Format Error ! ***
[  160.577957][ T7900] lmLogInit: exit(-22)
[  160.582366][ T7900] lmLogOpen: exit(-22)
[  160.652838][ T7900] ERROR: (device loop4): jfs_link: read-only filesystem
[  160.652838][ T7900] 
[  160.734200][ T7900] ERROR: (device loop4): remounting filesystem as read-only
[  160.923836][ T7921] loop3: detected capacity change from 0 to 128
[  161.036138][ T7921] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.049044][ T7921] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.332318][ T5764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  161.529850][ T7932] erspan0: entered promiscuous mode
[  161.814691][ T5751] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  162.014721][ T5751] usb 5-1: Using ep0 maxpacket: 16
[  162.031032][ T5751] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.052764][ T5751] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.074757][ T5751] usb 5-1: config 0 interface 0 has no altsetting 0
[  162.081433][ T5751] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  162.090899][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.115602][ T5751] usb 5-1: config 0 descriptor??
[  162.314656][  T788] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  162.393448][ T7952] loop3: detected capacity change from 0 to 40427
[  162.411397][ T7952] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  162.421567][ T7952] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  162.430827][ T7952] F2FS-fs (loop3): invalid crc value
[  162.445812][ T7952] F2FS-fs (loop3): Found nat_bits in checkpoint
[  162.498218][ T7952] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  162.505471][ T7952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  162.520850][  T788] usb 2-1: Using ep0 maxpacket: 16
[  162.531539][  T788] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  162.547262][  T788] usb 2-1: config 0 has no interface number 0
[  162.553908][  T788] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  162.568474][  T788] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  162.576765][ T5751] hid (null): usage index exceeded
[  162.582336][  T788] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  162.598815][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.607954][  T788] usb 2-1: Product: syz
[  162.612361][  T788] usb 2-1: Manufacturer: syz
[  162.630415][  T788] usb 2-1: SerialNumber: syz
[  162.642669][  T788] usb 2-1: config 0 descriptor??
[  162.651107][ T7954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  162.665099][ T7954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  162.697407][ T5764] syz-executor: attempt to access beyond end of device
[  162.697407][ T5764] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  162.717033][ T5764] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  162.839707][ T5751] usb 5-1: USB disconnect, device number 6
[  162.888352][ T7960] loop2: detected capacity change from 0 to 1024
[  162.906909][ T7954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  162.914203][ T7954] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  162.930447][ T7960] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  162.970565][ T7960] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.037865][ T7960] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  163.101891][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.354155][  T788] asix 2-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  163.395721][  T788] asix: probe of 2-1:0.251 failed with error -524
[  163.528291][ T7974] loop4: detected capacity change from 0 to 256
[  163.558780][ T7974] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  163.635787][   T23] usb 2-1: USB disconnect, device number 7
[  163.836854][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.694'.
[  163.949204][ T7978] loop7: detected capacity change from 0 to 7
[  163.973147][ T7978] Dev loop7: unable to read RDB block 7
[  163.980632][ T7978]  loop7: unable to read partition table
[  163.987090][ T7978] loop7: partition table beyond EOD, truncated
[  163.994737][ T7978] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[  164.025161][   T79] loop: Write error at byte offset 2, length 3584.
[  164.032327][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  164.041964][    C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[  164.063283][ T5136] Dev loop7: unable to read RDB block 7
[  164.069211][ T5136]  loop7: unable to read partition table
[  164.076260][ T5136] loop7: partition table beyond EOD, truncated
[  165.296281][ T7994] loop4: detected capacity change from 0 to 40427
[  165.309922][ T8001] syz.2.705[8001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.310048][ T8001] syz.2.705[8001] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.340225][ T7994] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff
[  165.404234][ T7994] F2FS-fs (loop4): invalid crc value
[  165.472574][ T7994] F2FS-fs (loop4): Found nat_bits in checkpoint
[  165.675737][ T7994] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  165.771155][ T5938] syz-executor: attempt to access beyond end of device
[  165.771155][ T5938] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  165.786636][ T5938] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  165.817706][ T8014] loop2: detected capacity change from 0 to 4096
[  165.864620][  T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  165.878873][ T8014] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  165.894806][   T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  165.911433][ T8014] ntfs3: loop2: Failed to initialize $Extend/$ObjId.
[  166.021844][ T8014] ntfs3: loop2: ino=1e, "file1" attr_set_size
[  166.065995][  T788] usb 2-1: Using ep0 maxpacket: 16
[  166.082625][  T788] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  166.092298][  T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.108803][  T788] usb 2-1: Product: syz
[  166.109123][   T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  166.130714][  T788] usb 2-1: Manufacturer: syz
[  166.136897][  T788] usb 2-1: SerialNumber: syz
[  166.142762][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.162644][   T23] usb 4-1: config 0 descriptor??
[  166.190848][   T23] cp210x 4-1:0.0: cp210x converter detected
[  166.370776][  T788] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  166.383600][ T8022] loop2: detected capacity change from 0 to 1764
[  166.385440][  T788] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  166.423413][  T788] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  166.463335][  T788] usb 2-1: media controller created
[  166.511836][  T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  166.636291][   T23] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  166.693110][   T23] usb 4-1: cp210x converter now attached to ttyUSB0
[  166.778301][  T788] zl10353_read_register: readreg error (reg=127, ret==-110)
[  166.841970][  T788] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5
[  166.864200][ T5751] usb 4-1: USB disconnect, device number 11
[  166.883996][ T5751] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  166.892083][  T788] usb 2-1: USB disconnect, device number 8
[  166.933383][ T5751] cp210x 4-1:0.0: device disconnected
[  167.136215][ T8036] loop2: detected capacity change from 0 to 4096
[  167.183555][ T8036] ntfs3: loop2: ino=3, Correct links count -> 2.
[  167.372239][ T8028] loop4: detected capacity change from 0 to 32768
[  167.451538][ T8028] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  167.627840][ T8028] XFS (loop4): Ending clean mount
[  167.646659][ T8048] loop2: detected capacity change from 0 to 64
[  167.679871][ T8028] XFS (loop4): Quotacheck needed: Please wait.
[  167.785287][ T8028] XFS (loop4): Quotacheck: Done.
[  168.027437][ T5938] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  168.511757][ T8068] netlink: 72 bytes leftover after parsing attributes in process `syz.3.730'.
[  168.544303][ T8050] loop1: detected capacity change from 0 to 32768
[  168.573349][ T8050] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.720 (8050)
[  168.597759][ T8050] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  168.615025][  T788] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  168.629126][ T8050] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  168.639898][ T8050] BTRFS info (device loop1): using free space tree
[  168.763149][ T8050] BTRFS info (device loop1): enabling ssd optimizations
[  168.792476][ T8088] netlink: 32 bytes leftover after parsing attributes in process `syz.4.732'.
[  168.811161][ T8050] BTRFS info (device loop1): auto enabling async discard
[  168.826804][  T788] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  168.850649][  T788] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  168.884546][  T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.898551][  T788] usb 3-1: Product: syz
[  168.914838][  T788] usb 3-1: Manufacturer: syz
[  168.919486][  T788] usb 3-1: SerialNumber: syz
[  168.950201][  T788] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  169.108784][ T5761] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  169.399945][ T5756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop1 scanned by udevd (5756)
[  169.779847][ T8109] netlink: 'syz.1.740': attribute type 39 has an invalid length.
[  169.809315][  T788] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  169.923176][  T788] usb 3-1: USB disconnect, device number 11
[  170.014050][ T8114] loop4: detected capacity change from 0 to 128
[  170.078820][ T8114] syz.4.742: attempt to access beyond end of device
[  170.078820][ T8114] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128
[  170.516120][ T8129] netlink: 56 bytes leftover after parsing attributes in process `syz.2.748'.
[  170.824402][ T8140] loop1: detected capacity change from 0 to 8
[  170.944747][ T5751] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  170.975913][   T27] audit: type=1326 audit(1777041092.251:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.014713][   T27] audit: type=1326 audit(1777041092.271:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.045445][   T27] audit: type=1326 audit(1777041092.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.068763][   T27] audit: type=1326 audit(1777041092.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.105733][   T27] audit: type=1326 audit(1777041092.271:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.143851][   T27] audit: type=1326 audit(1777041092.271:18): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.169367][   T27] audit: type=1326 audit(1777041092.271:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.192970][ T5751] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  171.209568][   T27] audit: type=1326 audit(1777041092.271:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8143 comm="syz.2.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f075679cdd9 code=0x7ffc0000
[  171.234518][ T5751] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  171.244342][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  171.256072][ T5751] usb 4-1: SerialNumber: syz
[  171.341472][ T8153] program syz.4.759 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.619154][ T8163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  171.642902][ T8165] tap0: tun_chr_ioctl cmd 1074025677
[  171.648870][ T8165] tap0: linktype set to 774
[  171.895501][ T8171] loop1: detected capacity change from 0 to 1024
[  171.949721][ T8175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'.
[  171.962713][ T8171] hfsplus: bad catalog entry type
[  172.037034][ T3435] hfsplus: b-tree write err: -5, ino 25
[  172.060716][ T3435] hfsplus: b-tree write err: -5, ino 4
[  172.076424][ T3435] hfsplus: b-tree write err: -5, ino 2
[  172.085856][ T3435] hfsplus: b-tree write err: -5, ino 26
[  172.194680][   T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  172.384564][   T23] usb 5-1: Using ep0 maxpacket: 8
[  172.394191][   T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.420992][   T23] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  172.444317][   T23] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  172.457797][   T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.484684][   T23] usb 5-1: Product: syz
[  172.494949][   T23] usb 5-1: Manufacturer: syz
[  172.504524][   T23] usb 5-1: SerialNumber: syz
[  172.516606][   T23] usb 5-1: config 0 descriptor??
[  172.718084][ T8180] loop1: detected capacity change from 0 to 40427
[  172.732592][ T8180] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x35f7
[  172.751084][    T8] usb 5-1: USB disconnect, device number 7
[  172.755219][ T8180] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff
[  172.788025][ T8180] F2FS-fs (loop1): Image doesn't support compression
[  172.801012][ T8180] F2FS-fs (loop1): invalid crc value
[  172.813176][ T8180] F2FS-fs (loop1): Found nat_bits in checkpoint
[  172.885027][ T8180] F2FS-fs (loop1): Start checkpoint disabled!
[  172.902791][ T8180] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  173.410531][ T8191] loop2: detected capacity change from 0 to 40427
[  173.446296][ T8191] F2FS-fs (loop2): invalid crc value
[  173.464850][ T8191] F2FS-fs (loop2): Found nat_bits in checkpoint
[  173.537748][ T8199] loop1: detected capacity change from 0 to 128
[  173.607335][ T8191] F2FS-fs (loop2): Start checkpoint disabled!
[  173.642123][ T8191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  173.722215][ T5751] cdc_ether: probe of 4-1:1.0 failed with error -71
[  173.762187][   T27] audit: type=1804 audit(1777041095.031:21): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.777" name="/newroot/212/file0/file0" dev="loop2" ino=10 res=1 errno=0
[  173.785764][ T8191] F2FS-fs (loop2): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  173.812353][ T5751] usb 4-1: USB disconnect, device number 12
[  173.829436][ T8205] loop3: detected capacity change from 0 to 512
[  173.848710][ T8205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  173.927343][ T8208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'.
[  173.935957][ T8205] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.783: bad orphan inode 131083
[  173.965477][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.971816][ T8205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.014821][ T8208] bridge0: entered allmulticast mode
[  174.126968][   T49] kworker/u4:3: attempt to access beyond end of device
[  174.126968][   T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  174.148158][ T5764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.158693][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  174.180659][   T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  174.399419][ T8219] loop4: detected capacity change from 0 to 128
[  174.442429][ T8219] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  174.524213][ T8219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.631876][ T8227] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  174.950312][ T8239] loop2: detected capacity change from 0 to 128
[  174.964041][ T8239] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  175.383085][ T8247] loop3: detected capacity change from 0 to 4096
[  175.394401][ T8253] loop1: detected capacity change from 0 to 1764
[  175.408185][ T8252] loop4: detected capacity change from 0 to 1024
[  175.431332][ T8252] EXT4-fs: Ignoring removed bh option
[  175.437234][ T8247] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  175.501968][ T8252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.543526][ T8247] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  175.771024][ T8262] loop2: detected capacity change from 0 to 256
[  175.804399][ T8262] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  175.850708][ T8262] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  175.899426][ T8262] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  175.919983][ T8252] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.800: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  176.004256][ T8262] exFAT-fs (loop2): error, found bogus dentry(18) beyond unused empty group(0) (start_clu : 5, cur_clu : 5)
[  176.020084][ T8252] EXT4-fs (loop4): Remounting filesystem read-only
[  176.031447][ T8262] exFAT-fs (loop2): Filesystem has been set read-only
[  176.447848][ T8274] loop1: detected capacity change from 0 to 64
[  176.630044][ T7387] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.832840][ T8286] loop1: detected capacity change from 0 to 128
[  176.945088][ T5798] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  176.980041][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.073562][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.149872][ T5798] usb 3-1: Using ep0 maxpacket: 32
[  177.166059][ T8293] loop3: detected capacity change from 0 to 164
[  177.166211][ T5798] usb 3-1: config 0 has an invalid interface number: 10 but max is 0
[  177.212511][ T5798] usb 3-1: config 0 has no interface number 0
[  177.230576][ T5798] usb 3-1: config 0 interface 10 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  177.245947][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.269039][ T5798] usb 3-1: New USB device found, idVendor=0424, idProduct=c001, bcdDevice=aa.5f
[  177.290307][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.314577][ T5798] usb 3-1: Product: syz
[  177.320767][ T5798] usb 3-1: Manufacturer: syz
[  177.334995][ T5798] usb 3-1: SerialNumber: syz
[  177.346060][ T5798] usb 3-1: config 0 descriptor??
[  177.428612][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.446162][   T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  177.625086][ T5771] usb 3-1: USB disconnect, device number 12
[  177.638156][   T42] usb 2-1: Using ep0 maxpacket: 32
[  177.655350][   T42] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  177.663484][   T42] usb 2-1: config 0 has no interface number 0
[  177.747430][    T8] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  177.778939][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  177.808584][   T11] tipc: Disabling bearer <udp:syz2>
[  177.808702][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  177.823343][   T11] tipc: Left network mode
[  177.825706][   T42] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  177.845940][   T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.854020][   T42] usb 2-1: Product: syz
[  177.858370][   T42] usb 2-1: Manufacturer: syz
[  177.863869][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  177.874134][   T42] usb 2-1: SerialNumber: syz
[  177.883135][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  177.894573][   T42] usb 2-1: config 0 descriptor??
[  177.906896][   T42] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  177.919069][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  177.927248][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  177.965718][    T8] usb 4-1: Using ep0 maxpacket: 16
[  177.986564][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.005056][    T8] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.040683][    T8] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.049840][    T8] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  178.091498][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.147066][    T8] usb 4-1: config 0 descriptor??
[  178.161451][   T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  178.188722][   T42] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  178.657611][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  178.658668][ T5798] usb 2-1: USB disconnect, device number 9
[  178.694333][ T5798] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  178.745907][ T5798] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  178.770793][    T8] usb 4-1: USB disconnect, device number 13
[  178.802356][ T5798] quatech2 2-1:0.51: device disconnected
[  178.946591][ T8300] chnl_net:caif_netlink_parms(): no params data found
[  179.061250][ T8314] loop2: detected capacity change from 0 to 32768
[  179.086239][ T8314] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.821 (8314)
[  179.141414][ T8314] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  179.192385][ T8314] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  179.222490][ T8314] BTRFS info (device loop2): using free space tree
[  179.412018][ T8314] BTRFS info (device loop2): enabling ssd optimizations
[  179.425880][ T8314] BTRFS info (device loop2): auto enabling async discard
[  179.541401][ T8349] loop3: detected capacity change from 0 to 2048
[  179.585727][ T8349] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  179.644642][ T8349] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.701084][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.708656][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.717321][ T8300] bridge_slave_0: entered allmulticast mode
[  179.725946][ T8300] bridge_slave_0: entered promiscuous mode
[  179.884780][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.891938][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.951735][ T8300] bridge_slave_1: entered allmulticast mode
[  179.972192][ T8300] bridge_slave_1: entered promiscuous mode
[  179.984937][ T5763] Bluetooth: hci3: command tx timeout
[  180.046620][ T5769] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  180.463814][ T8373] loop1: detected capacity change from 0 to 512
[  180.499034][   T11] hsr_slave_0: left promiscuous mode
[  180.544612][ T8373] EXT4-fs (loop1): unsupported inode size: 4096
[  180.561537][ T8373] EXT4-fs (loop1): blocksize: 1024
[  180.567304][   T11] hsr_slave_1: left promiscuous mode
[  180.615048][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.629567][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.687050][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.720148][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.755601][   T11] bridge_slave_1: left promiscuous mode
[  180.788218][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.819605][   T11] bridge_slave_0: left allmulticast mode
[  180.853422][   T11] bridge_slave_0: left promiscuous mode
[  180.879828][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.956674][   T11] veth1_macvtap: left promiscuous mode
[  180.963907][   T11] veth0_macvtap: left promiscuous mode
[  180.978098][   T11] veth1_vlan: left promiscuous mode
[  180.984095][   T11] veth0_vlan: left promiscuous mode
[  181.315895][ T8383] loop2: detected capacity change from 0 to 164
[  181.850738][ T8394] input: syz0 as /devices/virtual/input/input11
[  182.076827][ T5763] Bluetooth: hci3: command tx timeout
[  182.670454][   T11] team0 (unregistering): Port device team_slave_1 removed
[  182.749452][   T11] team0 (unregistering): Port device team_slave_0 removed
[  182.857150][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  182.928000][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.342136][ T8414] loop2: detected capacity change from 0 to 2048
[  183.361687][ T8414] EXT4-fs: Ignoring removed nobh option
[  183.411104][ T8414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.431889][ T8414] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.554204][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.786048][   T11] bond0 (unregistering): Released all slaves
[  183.957873][ T8300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.001658][ T8405] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  184.011177][ T8405] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  184.019984][ T8405] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  184.029395][ T8405] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  184.071360][ T8300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.150377][ T5763] Bluetooth: hci3: command tx timeout
[  184.250412][ T8300] team0: Port device team_slave_0 added
[  184.277242][ T8300] team0: Port device team_slave_1 added
[  184.339154][ T8432] o2cb: This node has not been configured.
[  184.393961][ T8432] o2cb: Cluster check failed. Fix errors before retrying.
[  184.403598][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.415413][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.442454][ T8432] (syz.3.855,8432,1):user_dlm_register:674 ERROR: status = -22
[  184.451927][ T8432] (syz.3.855,8432,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  184.462676][ T8300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  184.522331][ T8300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  184.548469][ T8300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  184.575897][ T8300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  184.741669][ T8300] hsr_slave_0: entered promiscuous mode
[  184.760918][ T8300] hsr_slave_1: entered promiscuous mode
[  184.770190][ T8300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  184.779593][ T8300] Cannot create hsr debugfs directory
[  185.122687][ T8458] loop3: detected capacity change from 0 to 128
[  185.193383][ T8458] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  185.235671][ T8458] hpfs: filesystem error: improperly stopped
[  185.241802][ T8458] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  185.253772][ T8458] hpfs: You really don't want any checks? You are crazy...
[  185.263750][ T8458] hpfs: hpfs_map_sector(): read error
[  185.269584][ T8458] hpfs: code page support is disabled
[  185.277714][ T8458] hpfs: hpfs_map_4sectors(): unaligned read
[  185.315063][ T8458] hpfs: hpfs_map_4sectors(): unaligned read
[  185.321028][ T8458] hpfs: filesystem error: unable to find root dir
[  185.466203][ T8300] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  185.526763][ T8300] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  185.574235][ T8300] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  185.641940][ T8300] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  185.828734][ T8478] loop1: detected capacity change from 0 to 512
[  185.842334][ T8478] EXT4-fs error (device loop1): __ext4_iget:5078: inode #11: block 1: comm syz.1.870: invalid block
[  185.885629][ T8300] 8021q: adding VLAN 0 to HW filter on device bond0
[  185.904342][ T8300] 8021q: adding VLAN 0 to HW filter on device team0
[  185.919273][ T8478] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.870: couldn't read orphan inode 11 (err -117)
[  185.986458][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.993700][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.009706][ T8478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.054935][ T8478] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.870: Directory hole found for htree leaf block 0
[  186.066192][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.075534][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.131124][ T8484] sp0: Synchronizing with TNC
[  186.172109][ T5761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.241106][ T5763] Bluetooth: hci3: command tx timeout
[  186.708355][ T8506] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  186.752039][ T8506] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  186.776697][ T8506] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  186.783273][ T8506] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  186.831824][ T8506] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  186.839160][ T8506] comedi comedi3: 8255: I/O port conflict (0x5c95238c,4)
[  186.851574][ T8506] comedi comedi3: 8255: I/O port conflict (0xa,4)
[  186.875237][ T8506] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[  186.892893][ T8506] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  186.909911][ T8506] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[  186.931429][ T8506] comedi comedi3: 8255: I/O port conflict (0x400e1c8,4)
[  186.954839][ T8506] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  186.973742][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  186.977587][ T8506] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  187.016279][ T8506] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  187.035873][ T8506] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  187.065747][ T8506] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  187.085230][ T8506] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  187.116277][ T8506] comedi comedi3: 8255: I/O port conflict (0x10,4)
[  187.133418][ T8506] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  187.154622][ T8506] comedi comedi3: 8255: I/O port conflict (0xef,4)
[  187.792514][ T8518] loop2: detected capacity change from 0 to 32768
[  187.822932][ T8300] veth0_vlan: entered promiscuous mode
[  187.854724][ T8518] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.880 (8518)
[  187.878900][ T8300] veth1_vlan: entered promiscuous mode
[  187.909053][ T8518] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  187.943642][ T8518] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  187.970651][ T8518] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  187.983017][ T8300] veth0_macvtap: entered promiscuous mode
[  187.990194][ T8518] BTRFS info (device loop2): use zstd compression, level 3
[  188.006548][ T8518] BTRFS info (device loop2): using free space tree
[  188.013778][ T8300] veth1_macvtap: entered promiscuous mode
[  188.036604][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.047944][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.059152][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.078439][ T8546] loop1: detected capacity change from 0 to 1024
[  188.136988][ T8546] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  188.149259][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.196993][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  188.246915][ T8546] gfs2: path_lookup on c::: returned error -2
[  188.264679][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.295057][ T8518] BTRFS info (device loop2): enabling ssd optimizations
[  188.302058][ T8518] BTRFS info (device loop2): auto enabling async discard
[  188.326514][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  188.352639][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.384071][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.416733][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.444820][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.464688][ T8300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  188.484975][ T8300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  188.507337][ T8300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  188.597713][ T8300] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  188.638829][ T8300] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  188.677700][ T8300] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  188.701746][ T8300] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  188.793454][ T5769] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  189.051002][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.099618][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.205969][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  189.222645][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  189.232735][ T8588] netlink: 20 bytes leftover after parsing attributes in process `syz.2.892'.
[  190.961408][ T8622] loop3: detected capacity change from 0 to 32768
[  190.985196][ T8622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.905 (8622)
[  191.054104][ T8622] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.082743][ T8622] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  191.121237][ T8622] BTRFS info (device loop3): enabling auto defrag
[  191.139564][ T8622] BTRFS info (device loop3): force zlib compression, level 3
[  191.167386][ T8622] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  191.183954][ T8622] BTRFS info (device loop3): use lzo compression, level 0
[  191.200956][ T8622] BTRFS info (device loop3): turning on flush-on-commit
[  191.212525][ T8622] BTRFS info (device loop3): max_inline at 4096
[  191.221252][ T8622] BTRFS info (device loop3): using free space tree
[  191.340377][ T8622] BTRFS info (device loop3): enabling ssd optimizations
[  191.350914][ T5763] Bluetooth: hci0: command 0x0406 tx timeout
[  191.357033][ T5765] Bluetooth: hci1: command 0x0406 tx timeout
[  191.801682][ T5764] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.884080][ T8646] loop5: detected capacity change from 0 to 32768
[  192.035308][ T8646] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  192.035308][ T8646] 
[  192.088521][ T8646] ERROR: (device loop5): remounting filesystem as read-only
[  192.269796][ T8684] block device autoloading is deprecated and will be removed.
[  192.566925][ T8693] loop3: detected capacity change from 0 to 128
[  192.639067][  T113] BUG: Bad page state in process jfsCommit  pfn:77c16
[  192.655301][  T113] page:ffffea0001df0580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x77c16
[  192.678618][  T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  192.724921][  T113] page_type: 0xffffffff()
[  192.746415][  T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  192.764175][  T113] raw: 000000000000001c ffff88802fd5aba0 00000000ffffffff 0000000000000000
[  192.807489][  T113] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[  192.835368][  T113] page_owner tracks the page as allocated
[  192.849031][  T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8646, tgid 8645 (syz.5.913), ts 191986747431, free_ts 191968950768
[  192.911029][  T113]  post_alloc_hook+0x1c1/0x200
[  192.919147][  T113]  get_page_from_freelist+0x1951/0x19e0
[  192.925175][  T113]  __alloc_pages+0x1f0/0x460
[  192.929877][  T113]  folio_alloc+0x1e/0x30
[  192.938214][  T113]  filemap_alloc_folio+0xdf/0x490
[  192.943379][  T113]  do_read_cache_folio+0x364/0x7d0
[  192.953272][  T113]  do_read_cache_page+0x32/0x250
[  192.958590][  T113]  __get_metapage+0x31a/0xfa0
[  192.963391][  T113]  diRead+0x6d3/0xb90
[  192.972066][  T113]  jfs_iget+0x90/0x440
[  192.976697][  T113]  jfs_fill_super+0x712/0xad0
[  192.981520][  T113]  mount_bdev+0x221/0x2d0
[  192.990695][  T113]  legacy_get_tree+0xea/0x180
[  192.999744][  T113]  vfs_get_tree+0x8c/0x280
[  193.004311][  T113]  do_new_mount+0x24b/0xa40
[  193.010811][  T113]  __se_sys_mount+0x2e7/0x3d0
[  193.018989][  T113] page last free stack trace:
[  193.023801][  T113]  free_unref_page_prepare+0x7b2/0x8c0
[  193.036482][  T113]  free_unref_page_list+0xbe/0x860
[  193.041763][  T113]  release_pages+0x1f7a/0x2200
[  193.052173][  T113]  tlb_flush_mmu+0x379/0x510
[  193.057598][  T113]  tlb_finish_mmu+0xf9/0x220
[  193.062343][  T113]  exit_mmap+0x428/0xb90
[  193.072610][  T113]  __mmput+0x118/0x3c0
[  193.077060][  T113]  exit_mm+0x1f2/0x2c0
[  193.081270][  T113]  do_exit+0x8dd/0x2460
[  193.089375][  T113]  do_group_exit+0x21b/0x2d0
[  193.095764][  T113]  __x64_sys_exit_group+0x3f/0x40
[  193.100944][  T113]  do_syscall_64+0x55/0xa0
[  193.108461][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.114837][  T113] Modules linked in:
[  193.118894][  T113] CPU: 0 PID: 113 Comm: jfsCommit Not tainted syzkaller #0
[  193.126127][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  193.136229][  T113] Call Trace:
[  193.139548][  T113]  <TASK>
[  193.142499][  T113]  dump_stack_lvl+0x18c/0x250
[  193.147214][  T113]  ? show_regs_print_info+0x20/0x20
[  193.152445][  T113]  ? swiotlb_print_info+0x70/0x70
[  193.157502][  T113]  ? dump_page+0xba3/0x14a0
[  193.162043][  T113]  bad_page+0x14b/0x170
[  193.166222][  T113]  free_unref_page_prepare+0x85f/0x8c0
[  193.171716][  T113]  free_unref_page+0x32/0x2e0
[  193.176419][  T113]  ? __folio_put+0xef/0x210
[  193.180943][  T113]  txUnlock+0x27e/0xcb0
[  193.185134][  T113]  ? lockdep_hardirqs_on+0x98/0x150
[  193.190356][  T113]  jfs_lazycommit+0x56e/0xa70
[  193.195070][  T113]  ? txFreelock+0x5a0/0x5a0
[  193.199604][  T113]  ? do_task_dead+0xd0/0xd0
[  193.204146][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  193.209113][  T113]  kthread+0x2fa/0x390
[  193.213225][  T113]  ? txFreelock+0x5a0/0x5a0
[  193.217760][  T113]  ? kthread_blkcg+0xd0/0xd0
[  193.222378][  T113]  ret_from_fork+0x48/0x80
[  193.226828][  T113]  ? kthread_blkcg+0xd0/0xd0
[  193.231449][  T113]  ret_from_fork_asm+0x11/0x20
[  193.236254][  T113]  </TASK>
[  193.252442][  T113] Disabling lock debugging due to kernel taint
[  193.262077][  T113] page:ffffea0001df0580 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1c pfn:0x77c16
[  193.272845][  T113] flags: 0xfff0800000820d(locked|referenced|uptodate|workingset|private|node=0|zone=1|lastcpupid=0x7ff)
[  193.284212][  T113] page_type: 0xffffffff()
[  193.288785][  T113] raw: 00fff0800000820d dead000000000100 dead000000000122 0000000000000000
[  193.297624][  T113] raw: 000000000000001c ffff88802fd5aba0 00000000ffffffff 0000000000000000
[  193.307050][  T113] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u))
[  193.317643][  T113] page_owner tracks the page as allocated
[  193.323381][  T113] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 8646, tgid 8645 (syz.5.913), ts 191986747431, free_ts 191968950768
[  193.342858][  T113]  post_alloc_hook+0x1c1/0x200
[  193.348532][  T113]  get_page_from_freelist+0x1951/0x19e0
[  193.354114][  T113]  __alloc_pages+0x1f0/0x460
[  193.359147][  T113]  folio_alloc+0x1e/0x30
[  193.363510][  T113]  filemap_alloc_folio+0xdf/0x490
[  193.368941][  T113]  do_read_cache_folio+0x364/0x7d0
[  193.374100][  T113]  do_read_cache_page+0x32/0x250
[  193.379376][  T113]  __get_metapage+0x31a/0xfa0
[  193.384082][  T113]  diRead+0x6d3/0xb90
[  193.388400][  T113]  jfs_iget+0x90/0x440
[  193.392513][  T113]  jfs_fill_super+0x712/0xad0
[  193.397630][  T113]  mount_bdev+0x221/0x2d0
[  193.402105][  T113]  legacy_get_tree+0xea/0x180
[  193.407101][  T113]  vfs_get_tree+0x8c/0x280
[  193.411612][  T113]  do_new_mount+0x24b/0xa40
[  193.416452][  T113]  __se_sys_mount+0x2e7/0x3d0
[  193.421164][  T113] page last free stack trace:
[  193.426202][  T113]  free_unref_page_prepare+0x7b2/0x8c0
[  193.431700][  T113]  free_unref_page_list+0xbe/0x860
[  193.437597][  T113]  release_pages+0x1f7a/0x2200
[  193.442459][  T113]  tlb_flush_mmu+0x379/0x510
[  193.448781][  T113]  tlb_finish_mmu+0xf9/0x220
[  193.453416][  T113]  exit_mmap+0x428/0xb90
[  193.459113][  T113]  __mmput+0x118/0x3c0
[  193.463225][  T113]  exit_mm+0x1f2/0x2c0
[  193.468401][  T113]  do_exit+0x8dd/0x2460
[  193.472596][  T113]  do_group_exit+0x21b/0x2d0
[  193.479057][  T113]  __x64_sys_exit_group+0x3f/0x40
[  193.484120][  T113]  do_syscall_64+0x55/0xa0
[  193.488863][  T113]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.496958][  T113] ------------[ cut here ]------------
[  193.502452][  T113] kernel BUG at include/linux/mm.h:1458!
[  193.508495][  T113] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  193.514592][  T113] CPU: 0 PID: 113 Comm: jfsCommit Tainted: G    B              syzkaller #0
[  193.523282][  T113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  193.533354][  T113] RIP: 0010:put_metapage+0x253/0x340
[  193.538664][  T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81
[  193.558297][  T113] RSP: 0018:ffffc90002697cc0 EFLAGS: 00010246
[  193.564387][  T113] RAX: 733c15945ad16400 RBX: ffff88802fd5aba0 RCX: 733c15945ad16400
[  193.572378][  T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00
[  193.580370][  T113] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[  193.588362][  T113] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802fd5abc8
[  193.596354][  T113] R13: ffffea0001df05b4 R14: 1ffff11005fab579 R15: 1ffff11005fab586
[  193.604361][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  193.613316][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  193.619919][  T113] CR2: 00007f646f3ec4b8 CR3: 000000002e7ba000 CR4: 00000000003506f0
[  193.627937][  T113] Call Trace:
[  193.631235][  T113]  <TASK>
[  193.634185][  T113]  txUnlock+0x427/0xcb0
[  193.638377][  T113]  jfs_lazycommit+0x56e/0xa70
[  193.643092][  T113]  ? txFreelock+0x5a0/0x5a0
[  193.647620][  T113]  ? do_task_dead+0xd0/0xd0
[  193.652153][  T113]  ? __kthread_parkme+0x7a/0x1c0
[  193.657118][  T113]  kthread+0x2fa/0x390
[  193.661212][  T113]  ? txFreelock+0x5a0/0x5a0
[  193.665741][  T113]  ? kthread_blkcg+0xd0/0xd0
[  193.670365][  T113]  ret_from_fork+0x48/0x80
[  193.674819][  T113]  ? kthread_blkcg+0xd0/0xd0
[  193.679419][  T113]  ret_from_fork_asm+0x11/0x20
[  193.684177][  T113]  </TASK>
[  193.687186][  T113] Modules linked in:
[  193.694317][  T113] ---[ end trace 0000000000000000 ]---
[  193.699841][  T113] RIP: 0010:put_metapage+0x253/0x340
[  193.705407][  T113] Code: 38 c1 0f 8c 32 ff ff ff 4c 89 ef e8 b7 78 d9 fe e9 25 ff ff ff e8 3d 41 81 fe 48 8b 3c 24 48 c7 c6 80 09 04 8b e8 dd aa c1 fe <0f> 0b 4c 8b 2c 24 4c 89 ee 48 81 e6 ff 0f 00 00 31 ff e8 56 45 81
[  193.725240][  T113] RSP: 0018:ffffc90002697cc0 EFLAGS: 00010246
[  193.731334][  T113] RAX: 733c15945ad16400 RBX: ffff88802fd5aba0 RCX: 733c15945ad16400
[  193.740531][  T113] RDX: 0000000000000000 RSI: ffffffff8b1c8e40 RDI: ffffffff8b1c8e00
[  193.749400][  T113] RBP: 000000000000007f R08: ffffffff8e8b15ef R09: 1ffffffff1d162bd
[  193.758054][  T113] R10: dffffc0000000000 R11: fffffbfff1d162be R12: ffff88802fd5abc8
[  193.766102][  T113] R13: ffffea0001df05b4 R14: 1ffff11005fab579 R15: 1ffff11005fab586
[  193.774084][  T113] FS:  0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  193.783052][  T113] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  193.789720][  T113] CR2: 00007f646f3ec4b8 CR3: 000000002e7ba000 CR4: 00000000003506f0
[  193.797845][  T113] Kernel panic - not syncing: Fatal exception
[  193.804032][  T113] Kernel Offset: disabled
[  193.808369][  T113] Rebooting in 86400 seconds..