last executing test programs:

12m42.282823116s ago: executing program 3 (id=2720):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12m40.288312987s ago: executing program 3 (id=2744):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x2, 0x129341)
fremovexattr(r0, &(0x7f0000000500)=@known='system.posix_acl_access\x00')

12m40.210703068s ago: executing program 3 (id=2746):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x9}, {@in6=@empty, 0x0, 0x6c}, @in6=@private1, {}, {}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)

12m39.551155548s ago: executing program 3 (id=2749):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

12m38.826535319s ago: executing program 3 (id=2752):
r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/route\x00')
read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96)

12m37.932252013s ago: executing program 3 (id=2759):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)

12m37.51622229s ago: executing program 32 (id=2759):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)

12m29.528374734s ago: executing program 2 (id=2828):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x700, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0xfd, 0x0, 0x0, @broadcast, @private, {[@timestamp_addr={0x44, 0x4, 0xf9}]}}}}})

12m29.248489928s ago: executing program 1 (id=2830):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000000040)={[{@clear_cache}, {@flushoncommit}, {@ssd_spread}]}, 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000003640)={{r0}, "033c6ca95e11a3f08590190248c863dc4c8a619bf0ca00c2be6ffe4797f88ece837adb247f888677c4864625529a81959e8aabf234a4643ac5a9c748df44255aab3ac3579a6c528f8c6dfe88eb52241244b068009806e384226024cbebaca5261ab646401a1cff22f99ed719bc64df6e907748fe7aa765a1c93b4a06152997c1f66ad0869e32c5d17a1dfd98bf4082bdbcb2845fe763b8ed5eafdd678a463a41b39768de4ff7f9815d163a0f879945b30f185daf1cb3cbe9634e765e4f0bb452275d52f2394a854ce9006c33838c995906ffc4b31a99b10ee3bf94cb309b60e44a6ef23a5825b13d20e3228c2032ce8702c109b3aedd6984906a316461453df6a08bada27ec27273e6578e1d23fc9708a3f2db9c22d19c9f89122a98939adb0797f7bc925a9e7b0bd7c3821fa0139a1c740120d2eefb2801b24587c9f952bf5872d8703ed919adf544a0a905b160d04381d545ebba9a25f1dc090a3324fb8961b6380ff9c35e4588246b9d17743bf367d1eba2b0efd47be4a51e0f3ac00f7d0d2206b6d72fb860b938104f41537e0e4e7d700c05e442b025effd2043584601269c1b21f4b36ec0c814cfc2afa145e59ab7abecae95ac22d2ecfbc1e95a34d48432a22a6c0ce10ed4abceab2245f5185d5d6a4cc56bcf32859ec3d442ce255ece7354b021e812be17edaa75ce6005d92678cd519d3ad5815bc256af02499119f6aa3963675f7cd85362050a84660947c639981ad9d712e945f7f9dbe5b94a0986d6515263e7dcaa5a5aa176a9ed772bc50005fab5146faa70f0e4522feaae8914ef04f93b610a774b736e2f2ba184b79b32e715e791454a1aeb8f8f3d0bba2bd480ee7ea3fd5e8aaa81f50b52fb87d7d6eb18d3ffc4c32103f722b23510020a77e1ad102239754c3f6aec4361d542a51b97cef8ea7b94f22562ff592e8578d9ba8941c8a77236d23d92ed860b967d5945d6051bb9fb96f3e329399aad5b476bff50fdec07cb94ce1b71c4147d4e3aa264fc7aa1a4137182d70ff6d4c14bdcb70ec72ef1eaf731a1aca39b5b948251e31b80f7b39784a1ff1dc7cb1100149b468cbee1aba0953357de72fd65379c8f45280e07e8801b2a663ca2d8635a901a5c6e248b8b53235c5ed346642d5f7253a40f859a046cfc98ea8d1aef6da7444d5b7633f34052dbc6adca5313717361b8368bd5f8b7a818ca8f07b6a5d29171df7b5826e08994aa04b831727aacb239a2c3cfc65b8aa0759afd13bdab8e9fecd78e6fcea8aa2e9e40cff9c679425248ab1f7e780280fe1d6176ff84f1b63cb4959b18f4070dd204298936c60c050a8f56bc5a8fce2d83419728af469c20aa0720de107de5fede18411e174ec6500fe94fae3cebf3addbdc4679743980fed58dcc47c56ab251d15c742bbae85f3828405a2b347fd433d52da85690aac3dfb4db83777f36a1ec6706456914ec897ab245fa35fd38aa8f404db70544d933e6c06b701478cb3973f56129ff110a4dfaa84fa977bad97150f72356e2fd961ba6fc85d122176436bbed7ebbb0d8378fbdceac1e74d44385917a285c2170200316bb057bafe0c539601724f11ef10dc12a399ab8a6b4f140b960a7934aaf2a4e5f66fd4228992018bf727d1ff557b534547c16189c8f74c85ebe9d48b0bfde19a92c01d2bf0f82713de10994adea6db31d58c16b30cdff0aef9e174f4475c6554a10c5bb2a3d480d722ae1cb42a9a451ee1c32dff6ca2851e4c3a23945163900fc6111f3c690eafc15e6512886e3617de2d31833e7df93639ccd654f998dba428dbea01914b476477ba50cffe6e97d31cf763134c84d84515ae8fdf928934d8637d6f9b0fa86fa25b25bd51cd37708eeb034fb0dd510f36ddd8766e4010e08df0f458507b73fe8ca5c4829c4038599f2af284d68eca20f18ce408e7dd877a3488fd269f3aa32b5ee2626ae803b936d863ab24a4aa4bee7adb97c418a2dc0ca711bba53f727ca3f7d94ddbd0567911358aed2baa152ae342584bb0a67ad0f4623dc99c9718ecf82b51b39854b1304d34f8c0be4375e95083a1955ac999c638f3f448e373cc456ae889f99a3d080b7ef720783b3898af099d3aee7c4dedf005533f1dbf3c14fc572d27f830371320c8f7c53440c31713f926afb3348c8270ad518b99669b34bdce6a135a0f7ef866099bf4d1c145d73a383a3cbbc3d34ae2c869edcd79610444632833072291c10765a9e962025a8ede679a8008ea24e900cf707c33d0042d33fc2443e3afb919fea6d41074f9fb03c37141ba089f17f55ae4979a78aabc4e72243fc7fd485f892c4011efbd4cd9ef0e3dd452f73deb4c415c75347a6235ec270f75ba31ba5409c380ec41a6b63cbb1003c9074b734a003fdacb95433a3dcb9b6e5f0130377bb40e49e04f188b83d46d254142f4496a6bb3408e90a9286941723ce68513e47ca8baa24ba79df46ddf1b59767e9462ded80ab054fd905c6db23ab0958452b07ba369534aaaf07f48f50c48dd1911dccb431112639a85516cc40f4b0d04c04c8f5b294bef2707b0299814ae7d6404cef3b654cb5e3d012d73e9abcb1f5cdac8880de537e75ba0eb68dda6c971747d2ac6f334a7756ffa813ec39d7e38f8f52b62831f28adadadb70e82266a25f12a48a951f5a2cfbffa868b464b27f8fc1ac89d769d2df18efd9be74116c749ee47dcead8bdf4b38f4f584c825eb088fa0048fb12bcd03778842b4f86eb6ded5e30900a74fa5171d0a9f721b0b99cb98d89d7c37259cf05be2a19b8f7ec8ceb330a1814f32e32d2dd75a7c6370fbc17b3adec5d13a28bb439c55dc2b52ffd188e593c9758b551b4074ccd66da831322b45a74c947e9403b32193a6198a57d08e145092b4c97db810447979825fd379a90b1668e0b80460b3448d8c7461482fca25f89e655942d40380a8b8c6ef2fd3866fe31d70f254bfbd67839c622f349060dd928b678033876f51aecf05524d3e179b4a43df7bc3c6cb9a0cd9852bcc42dec3d71add33060a4370448fbcc50808d7ff0a9410f5b91a79171305dc58e8554a4cffe13804ef71bbef85e903ba44f0a4100e9ade24e57de1591a9d71af9f94091d425220be23d4c7b58985873831fa1c0fde9ba091bde61e6caa50af521fb56b21ca1dd1e66e1697e68d6583b1c2c44d88b69a131434022902a4f96d464d40f0ee19928ae7027c02e9bfb49f9c4a5b74a48bd466ad991a35abd898886ee4c1a7e37a474f922a4e57e6c46f5fd06f48e4918b0bd2996881a999fcb7bf54b4e7a9eea1bd2315c1ee6b45cb21a49730b180096dc3290f7efc4de3c785a97b8797bccd9cd09d1bf8a498c22e5fbf0d388cd58be44cc2fdb4dd3677453d20c9e01ecf3467fe74f0a1fc6f20b0d81a7adc9c8ee28bcdcd71f1f97bbf72dd1006acde4824ef45f95dab9dea8cef52a0990add23f7d57fbf8b83652ccaa613c36f525b3777bd7ecd299b3b7d896c07d749922e235bd46a841348fdafa32671a7edda900dc19a74bbfbbdb8e5c7d55eb561d1ae7718aba187a3c5870571a50177ef2660a9cb566425f35f6cf71e866d1e584fdde0f57ecbbd57ea7a04459db823557a1f3e7ea432240bc5b724d51ef3a321397d9a455fb16dec828630f88253ee289e23798512da3db6c7965803155f27ba152f2287b373f74cd0048ac122f674a469b99614d2e24e7e2abe711aba352edaaeb2dc6419314f311fabc52c6947ea17dec6a1261e99163fb5c521aff0c89df3438a29e69c48b779505440fcac253a63a9a6c18680f0271046f579237739cd40d9334e2b4160384d1c69056e285181d4296abab6833dfff212f3b6da9aab6511ad69f682ba9cf990f066d68963f232a38b70f1fb76b19e8b1d8c6df332e237b0f6b2901755ab69751537d0f9ccb1b79db71cfb76f9e3a6771581768b5aa8bcbbe0ca71b86535880b7041c511bcf81cbeed58fb23489e89e02bb22f8dca24f05450962f1c1a45c3e2f2e424ce25ce46c2d7a59f64633097dc031a6dbd5e0505b0ececac2f1f25ef72b9f098fdfd82a575fa061d3b193e5afac8d3ed4a75c192beffdd5d22e8398fe898606a4ab242a3129c569556ac69c37a7f77928a9cc9185a5fc2582c31f1337ec15e5e1e66af1c51dbec78cba3c05d7867bc990b1e51bc6b152aaf2e4aaaffa50d93d841a921b554d79600ebfcde7c30f1b52b34cde75fba61fff59f03453ab4d0496afc18ba7546307d9d5e802f8d9b8c5f8787627e6d0f3f19527dc943239084994ce0d043e9e38f3ed77f5d4e08151300c3c04b6d4ac17adb13d0f5b96f29dc414b1c9f1e170e1618412e36325e2347eecb32199341aeec10b3cf8eccb1d2dddb5556ff7212cbe45e58c990d540819bd8abf92dda3018714ebd4a05ead45d63088b12bfd5f52c1096b7029345184edeb00e1f6a1bdbf553dbfb9c06d6954574cc188a0398170cdd3d5b02540d4554a0bd36893d5663dd8f369bf50819564600af6f14dd8af1b67dd8486a076fa8fa141a62747d8e693280fd732c3f9b0c2d7cf27dbc0292f52624ac3e821199282a637fad9376d7fc6307b4fb1a1c4b109bdcb7e1957cb7fe3d81022513381984ef79f2f95ac4b5adb9d05a633aa637a9def0cd5c34ac9ce116b501a0d36df0546985febcc31a9e84c317dd6918df959c257e186eec12cd41742b3591960df5ab821d931be5c8042fc5770d9afccb30c24f8a1d772e254b36cd1ede0c2a812c58cf5f4bce88393622087d7576ae74fa4b55b86bd178abe477e7346dc4b72dac62e9ded994e6bb7b90d5f6814f1c371c518990a4c2cb1787d9c84d4efe433a90b7c1f7a35ae3aef3ec68a30c5a754817ef3739c48c5b5784193b822e9aff25a0f559616e6dce19e33bdea329086890f6e161eaac1860f7230364389e398d6b9a95d5006a3df27d9551f40382ce27bba082c18bcec960d519ea98ba9d0ba784e0c58f126f417e5e94115d00d92e56056b98464ed8105f0ae00789a5492506fa04b0109a8ad87a856907f741652fea7d6d9561fd5e4066e4cff25b5a18c965f75bc68edbaa4c3cd37188a37320d495dc47aa7ccb878f33a03e4b6043146c1a2c58cb4faf11a4daad925b75e6715cd56ea4bcdd68ab2c9fcb231ab14654f4d3fc7d105e567c2c1de5f6a5f2c3483eba709dd63f2a2af63305d289a7ed38b0864f963f99775bd7db5e5935c6d9011d8d10ec62949c4dfa5955c1bed1c6fcd6eb4b88998a0fe4beb936879c8a894079a0e9fafe5862ed802ca30e0f4c755b2c9baea945c011f9cb827cd218573f343a3f6400df09a219f4408b95a22e325f85223401f5227ec15707b639f779ce559214c0da26c63e82841f084f4a8f36484436c6ad65ac60b14c8dee74138886197665a207312c031846db0d7a8f2ca37fe84184a698f9e0abf1b63de033fa105532e5b107f7a345bd3fc9f4d2ae09a698340dae6137236ec5e253e94ef71bbaa64f1252d536bb1c0b4551768ea911768745cac6c20e42db256e463d50e6318fb06dd46999a38e76c5683eeb276ad02755de4bb01c1ff3d24610bf38349800b488357bb611e6cab6ef8afd27952653a5e52b9fb968bcc1e06bd5349078c93c463daa4be697de51f6e15c699ead6fd1f84df8a74c4ce3dd32f6d33ba733e406cdc47764b7ff33d565d4c4e309559b65a53e7775d01bc2d7adfcfca33477fd453b8cd5cd3a23382ee70b1dae8bcf7479a86854b8b5b6348834ab509d03432eeeb93eb0d52ca70f5059781143b1f2d84c26bfa7e1ff37dd3296"})

12m29.248161058s ago: executing program 2 (id=2831):
symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
open(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2100, 0x8)

12m29.053391001s ago: executing program 2 (id=2832):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x40a}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

12m28.777861905s ago: executing program 2 (id=2835):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

12m28.203576394s ago: executing program 2 (id=2837):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC")
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2)

12m27.552136914s ago: executing program 1 (id=2840):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

12m27.324194878s ago: executing program 2 (id=2841):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12m26.631457778s ago: executing program 33 (id=2841):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

12m26.617602419s ago: executing program 1 (id=2844):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)

12m26.419290592s ago: executing program 1 (id=2846):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

12m25.90495199s ago: executing program 1 (id=2847):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'bridge0\x00', 0x3}, 0x18)

12m25.052125533s ago: executing program 1 (id=2848):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

12m24.549714861s ago: executing program 34 (id=2848):
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)

11m47.739051492s ago: executing program 6 (id=3087):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36)

11m46.860531216s ago: executing program 6 (id=3095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000280), &(0x7f00000003c0)}, 0x20)

11m46.667543639s ago: executing program 6 (id=3098):
msgsnd(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0], 0x8f, 0x0)
msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/251}, 0x103, 0x2, 0x3800)

11m46.487155702s ago: executing program 6 (id=3101):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x5, 0x6235, &(0x7f00000004c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

11m45.033246274s ago: executing program 6 (id=3108):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa)

11m43.428210459s ago: executing program 6 (id=3124):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

11m42.73104413s ago: executing program 35 (id=3124):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0xc0}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

3m54.878291373s ago: executing program 4 (id=7124):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8)
write$dsp(r1, 0x0, 0x0)

3m53.671856392s ago: executing program 4 (id=7134):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

3m53.370170467s ago: executing program 4 (id=7136):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x4000, &(0x7f0000002240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})
mount$fuseblk(0x0, &(0x7f0000004240)='./file0\x00', 0x0, 0x8104a9, 0x0)

3m53.192223119s ago: executing program 4 (id=7139):
syz_clone3(&(0x7f0000000300)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)

3m53.029103632s ago: executing program 4 (id=7142):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000400)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x196)
lseek(r0, 0x12, 0x1)

3m52.680283517s ago: executing program 4 (id=7146):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)

3m52.290977563s ago: executing program 36 (id=7146):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @local, 0x20}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4001c00)

3m9.742787604s ago: executing program 7 (id=7487):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000080)='./file2\x00', 0x300000a, &(0x7f0000000440)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x2}}, {@nodatasum}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@flushoncommit}, {@nodatasum}, {@enospc_debug}, {@discard}, {@clear_cache}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)

3m8.792078709s ago: executing program 7 (id=7491):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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")
syz_mount_image$exfat(0x0, &(0x7f00000000c0)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fsync(r0)

3m7.190547314s ago: executing program 7 (id=7503):
syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r0, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x0, 0x400000, 0x4}}, 0x11c)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2)

3m6.228951428s ago: executing program 7 (id=7499):
syz_clone3(&(0x7f0000000300)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)

3m5.995559432s ago: executing program 7 (id=7501):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)

3m5.47634562s ago: executing program 7 (id=7504):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb)

3m5.035873357s ago: executing program 37 (id=7504):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb)

1.969266529s ago: executing program 8 (id=9023):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={r2, @in={{0x2, 0x4e23, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)

1.853711221s ago: executing program 8 (id=9025):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)

1.812194662s ago: executing program 9 (id=9026):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.782432523s ago: executing program 8 (id=9028):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0)

1.700137513s ago: executing program 9 (id=9030):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000a80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6c733d63703835322c6e6f626172726965722c63726561746f723dbd3c66f52c626172726965722c706172743d3078303030303030303030303030303030322c756d61736b3d30303030303030303030303030303030303030363734352c00b08558549e3fb3af8feff2a5c10c825cef8ec0f1ddcd940f6058a48f0cc0887456a5b70061a195d3ed592d"], 0x3, 0x6a4, &(0x7f0000000100)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000005840), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
listxattr(&(0x7f0000000840)='./file1\x00', 0x0, 0x0)

1.488791687s ago: executing program 9 (id=9033):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"})
r1 = syz_open_pts(r0, 0x0)
dup3(r1, r0, 0x0)

1.29189506s ago: executing program 5 (id=9035):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, 0x0, 0x0)

1.29130377s ago: executing program 8 (id=9036):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

1.164391832s ago: executing program 5 (id=9038):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x1)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0)
unshare(0x2a020400)
pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x1}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0, 0x0)

1.051731184s ago: executing program 8 (id=9039):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000180)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

861.292417ms ago: executing program 5 (id=9041):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7001)

860.761137ms ago: executing program 0 (id=9042):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c)
sendto$inet6(r0, &(0x7f0000000780)='\r', 0x1, 0x6d91fb6102d8d9cc, 0x0, 0x0)
syz_emit_ethernet(0x46, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0)

680.290199ms ago: executing program 0 (id=9043):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)

626.57014ms ago: executing program 5 (id=9044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x30, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0x30}}, 0x0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010080000000fddbdf250f00000004000680240007800c000000020000000000000008000200070000020c000300c3000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x2805}, 0x4000)

488.382112ms ago: executing program 0 (id=9045):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)

400.340064ms ago: executing program 9 (id=9046):
r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
close(r0)

352.611515ms ago: executing program 5 (id=9047):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0)

295.729795ms ago: executing program 0 (id=9048):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340), 0x20000, 0x0)
ioctl$RTC_UIE_ON(r1, 0x7003)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc, 0x0, 0xd0})

295.248705ms ago: executing program 8 (id=9049):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

188.245627ms ago: executing program 9 (id=9050):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r0, r0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)

166.418367ms ago: executing program 0 (id=9051):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r0}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r1, &(0x7f0000000000)='K', 0x1, 0x8000c61)

48.683719ms ago: executing program 9 (id=9052):
gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

361.42µs ago: executing program 5 (id=9053):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x11)

0s ago: executing program 0 (id=9054):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0xc, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x8, 0x9}}}}}]}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[])

kernel console output (not intermixed with test programs):

usb 1-1: GET_CAPABILITIES returned 0
[ 1003.343341][T13325] usbtmc 1-1:16.0: can't read capabilities
[ 1003.474475][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.493179][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.565928][T12687] usb 1-1: USB disconnect, device number 62
[ 1003.581045][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1003.590899][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1003.843380][T25966] loop9: detected capacity change from 0 to 512
[ 1003.900992][T25966] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 1003.933921][T25966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[ 1003.943188][T25966] System zones: 1-12
[ 1003.958484][T25966] EXT4-fs (loop9): 1 truncate cleaned up
[ 1003.966194][T25966] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1004.042575][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1004.508072][T25987] loop8: detected capacity change from 0 to 1024
[ 1004.515913][T25987] UDF-fs: bad mount option "y��^7��Y�y���){�m�_(�q���S#X00000000000000000000��" or missing value
[ 1004.642321][   T28] audit: type=1326 audit(1750125651.401:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1004.715155][   T28] audit: type=1326 audit(1750125651.451:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1004.798511][   T28] audit: type=1326 audit(1750125651.451:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1004.868343][   T28] audit: type=1326 audit(1750125651.451:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1004.945217][   T28] audit: type=1326 audit(1750125651.451:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1005.015245][   T28] audit: type=1326 audit(1750125651.471:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1005.052357][T25997] lo speed is unknown, defaulting to 1000
[ 1005.069945][T25980] loop9: detected capacity change from 0 to 32768
[ 1005.079909][   T28] audit: type=1326 audit(1750125651.471:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1005.106691][T25999] lo: entered promiscuous mode
[ 1005.112324][T25999] tunl0: entered promiscuous mode
[ 1005.117709][T25980] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.7534 (25980)
[ 1005.146509][T25980] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1005.156946][   T28] audit: type=1326 audit(1750125651.471:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1005.180786][T25999] gre0: entered promiscuous mode
[ 1005.186692][T25980] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[ 1005.200074][T25999] erspan0: entered promiscuous mode
[ 1005.206682][T25980] BTRFS info (device loop9): force clearing of disk cache
[ 1005.213857][T25980] BTRFS info (device loop9): setting nodatacow, compression disabled
[ 1005.225184][   T28] audit: type=1326 audit(1750125651.471:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25990 comm="syz.5.7542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1005.255883][T25999] ip_vti0: entered promiscuous mode
[ 1005.261218][T25980] BTRFS info (device loop9): turning off barriers
[ 1005.269055][T25999] ip6_vti0: entered promiscuous mode
[ 1005.274460][T25980] BTRFS info (device loop9): enabling auto defrag
[ 1005.282080][T25999] sit0: entered promiscuous mode
[ 1005.288033][T25980] BTRFS info (device loop9): turning on sync discard
[ 1005.294784][T25980] BTRFS warning (device loop9): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1005.311573][T25999] ip6tnl0: entered promiscuous mode
[ 1005.318300][T25999] ip6gre0: entered promiscuous mode
[ 1005.323610][T25980] BTRFS info (device loop9): trying to use backup root at mount time
[ 1005.333321][T25999] syz_tun: entered promiscuous mode
[ 1005.355387][T25980] BTRFS info (device loop9): enabling ssd optimizations
[ 1005.375195][T25980] BTRFS info (device loop9): using spread ssd allocation scheme
[ 1005.382930][T25980] BTRFS info (device loop9): using free space tree
[ 1005.393149][T25999] ip6gretap0: entered promiscuous mode
[ 1005.438691][T25999] bridge0: entered promiscuous mode
[ 1005.456741][T25999] vcan0: entered promiscuous mode
[ 1005.462337][T25999] bond0: entered promiscuous mode
[ 1005.482191][T25999] bond_slave_0: entered promiscuous mode
[ 1005.513026][   T48] BTRFS warning (device loop9): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[ 1005.535342][T25999] bond_slave_1: entered promiscuous mode
[ 1005.541272][T25999] batadv0: entered promiscuous mode
[ 1005.555199][T25980] BTRFS warning (device loop9): couldn't read tree root
[ 1005.565466][T25980] BTRFS warning (device loop9): try to load backup roots slot 1
[ 1005.574796][T25999] team0: entered promiscuous mode
[ 1005.592922][  T135] BTRFS warning (device loop9): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[ 1005.609706][T25980] BTRFS warning (device loop9): couldn't read tree root
[ 1005.634450][T25999] team_slave_0: entered promiscuous mode
[ 1005.645420][T25999] team_slave_1: entered promiscuous mode
[ 1005.655115][T25980] BTRFS warning (device loop9): try to load backup roots slot 2
[ 1005.664209][T25999] dummy0: entered promiscuous mode
[ 1005.675147][T20404] BTRFS error (device loop9): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1005.681008][T25999] nlmon0: entered promiscuous mode
[ 1005.703725][T25980] BTRFS warning (device loop9): couldn't read tree root
[ 1005.716829][T25980] BTRFS warning (device loop9): try to load backup roots slot 3
[ 1005.744057][T25999] caif0: entered promiscuous mode
[ 1005.759627][T25999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1005.766375][T25980] BTRFS info (device loop9): rebuilding free space tree
[ 1005.798807][T25980] BTRFS info (device loop9): checking UUID tree
[ 1005.933858][T25867] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1006.019076][T12687] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1006.025497][T20366] Bluetooth: hci2: command tx timeout
[ 1006.260657][T12687] usb 9-1: Using ep0 maxpacket: 32
[ 1006.270818][T12687] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[ 1006.289333][T12687] usb 9-1: config 0 has no interface number 0
[ 1006.305388][T12687] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1006.317325][T12687] usb 9-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1006.331125][T12687] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1006.340483][T12687] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.349726][T12687] usb 9-1: Product: syz
[ 1006.354113][T12687] usb 9-1: Manufacturer: syz
[ 1006.358892][T12687] usb 9-1: SerialNumber: syz
[ 1006.366499][T12687] usb 9-1: config 0 descriptor??
[ 1006.374471][T12687] smsc95xx v2.0.0
[ 1006.402430][T12687] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1006.413006][T12687] smsc95xx: probe of 9-1:0.67 failed with error -22
[ 1006.604398][T13310] usb 9-1: USB disconnect, device number 3
[ 1006.795059][   T28] audit: type=1326 audit(1750125653.551:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26039 comm="syz.9.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1007.273399][T26058] overlay: ./file1 is not a directory
[ 1007.427117][T26062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7565'.
[ 1007.912686][T26078] loop8: detected capacity change from 0 to 128
[ 1008.120302][T26082] sp0: Synchronizing with TNC
[ 1008.973309][T26086] loop8: detected capacity change from 0 to 32768
[ 1009.354350][T26094] loop9: detected capacity change from 0 to 40427
[ 1009.377635][T26094] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x7ffff
[ 1009.409597][T26094] F2FS-fs (loop9): invalid crc value
[ 1009.457192][T26094] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1009.532848][T26094] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1009.735656][T26094] lo speed is unknown, defaulting to 1000
[ 1010.455348][T25867] syz-executor: attempt to access beyond end of device
[ 1010.455348][T25867] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1010.479701][T25867] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1011.107134][T26154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7605'.
[ 1011.255665][T26139] loop5: detected capacity change from 0 to 40427
[ 1011.285184][T26139] F2FS-fs (loop5): invalid crc value
[ 1011.375117][T26139] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1011.407837][ T5874] kernel write not supported for file /input/mouse0 (pid: 5874 comm: kworker/0:5)
[ 1011.495177][T26139] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[ 1012.405175][ T5874] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1012.444220][T26198] loop5: detected capacity change from 0 to 2048
[ 1012.494064][T26199] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1012.627758][ T5874] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1012.639234][ T5874] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1012.679961][ T5874] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1012.711431][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.732833][T26186] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1012.751644][ T5874] usb 10-1: Quirk or no altest; falling back to MIDI 1.0
[ 1012.913035][T26194] loop8: detected capacity change from 0 to 32768
[ 1012.946219][T26194] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1012.960806][T26209] loop5: detected capacity change from 0 to 2048
[ 1012.988343][T26209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1013.013102][T26209] ext4 filesystem being mounted at /1189/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1013.023501][ T5874] usb 10-1: USB disconnect, device number 2
[ 1013.042566][T26194] XFS (loop8): Ending clean mount
[ 1013.069471][T26194] XFS (loop8): Quotacheck needed: Please wait.
[ 1013.115611][T26209] fs-verity: sha256 using implementation "sha256-avx2"
[ 1013.141251][T26209] fs-verity (loop5, inode 13): fs-verity keyring is empty, rejecting signed file!
[ 1013.145258][T26194] XFS (loop8): Quotacheck: Done.
[ 1013.200984][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1013.276907][T24880] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1013.590155][T26226] loop8: detected capacity change from 0 to 1024
[ 1013.639076][T26226] hfsplus: bad catalog entry type
[ 1013.687440][T26228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1013.729629][ T2973] hfsplus: b-tree write err: -5, ino 4
[ 1013.926229][T26237] netlink: 108 bytes leftover after parsing attributes in process `syz.9.7636'.
[ 1014.182745][T26246] syz.9.7640: attempt to access beyond end of device
[ 1014.182745][T26246] loop19: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1014.204744][T26246] FAT-fs (loop19): unable to read boot sector
[ 1014.756921][T26259] loop9: detected capacity change from 0 to 16
[ 1014.807060][T26259] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1014.839976][T26262] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1015.733666][T26292] bond0: entered promiscuous mode
[ 1015.750148][T26292] bond_slave_0: entered promiscuous mode
[ 1015.758880][T26292] bond_slave_1: entered promiscuous mode
[ 1015.780538][T26292] bridge0: entered promiscuous mode
[ 1015.785342][T20366] Bluetooth: hci4: Entering manufacturer mode failed (-110)
[ 1015.786335][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout
[ 1015.828814][T26292] batadv0: entered promiscuous mode
[ 1015.878568][T26292] bond0: left promiscuous mode
[ 1015.892133][T26292] bond_slave_0: left promiscuous mode
[ 1015.902459][T26292] bond_slave_1: left promiscuous mode
[ 1015.920550][T26292] bridge0: left promiscuous mode
[ 1015.932301][T26292] batadv0: left promiscuous mode
[ 1016.007294][T26296] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7660'.
[ 1016.026320][T26299] loop5: detected capacity change from 0 to 512
[ 1016.026994][T26296] netlink: 'syz.9.7660': attribute type 7 has an invalid length.
[ 1016.051797][T26296] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7660'.
[ 1016.065984][T26299] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.7661: invalid indirect mapped block 256 (level 2)
[ 1016.085587][T26296] gretap0: entered promiscuous mode
[ 1016.093160][T26296] gretap0: left promiscuous mode
[ 1016.109180][T26299] EXT4-fs (loop5): 2 truncates cleaned up
[ 1016.116474][T26299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1016.319468][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1016.764554][T26317] lo speed is unknown, defaulting to 1000
[ 1016.796980][T26318] lo: entered promiscuous mode
[ 1016.824913][T26318] tunl0: entered promiscuous mode
[ 1016.852416][T26318] gre0: entered promiscuous mode
[ 1016.874577][T26318] gretap0: entered promiscuous mode
[ 1016.899787][T26318] erspan0: entered promiscuous mode
[ 1016.929449][T26318] ip_vti0: entered promiscuous mode
[ 1016.954728][T26318] ip6_vti0: entered promiscuous mode
[ 1016.988131][T26318] sit0: entered promiscuous mode
[ 1017.011684][T26318] ip6tnl0: entered promiscuous mode
[ 1017.034502][T26318] ip6gre0: entered promiscuous mode
[ 1017.063331][T26318] syz_tun: entered promiscuous mode
[ 1017.098555][T26318] ip6gretap0: entered promiscuous mode
[ 1017.136068][T26318] bridge0: entered promiscuous mode
[ 1017.142279][T26318] vcan0: entered promiscuous mode
[ 1017.162698][T26318] bond0: entered promiscuous mode
[ 1017.183885][T26318] bond_slave_0: entered promiscuous mode
[ 1017.204360][T26318] bond_slave_1: entered promiscuous mode
[ 1017.226345][T26318] team0: entered promiscuous mode
[ 1017.243978][T26318] team_slave_0: entered promiscuous mode
[ 1017.274747][T26318] team_slave_1: entered promiscuous mode
[ 1017.335387][T26318] dummy0: entered promiscuous mode
[ 1017.357453][T26318] nlmon0: entered promiscuous mode
[ 1017.393152][T26318] caif0: entered promiscuous mode
[ 1017.413957][T26315] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98
[ 1017.445428][T26318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1017.503930][T26320] loop5: detected capacity change from 0 to 32768
[ 1018.827450][T26357] netlink: 'syz.5.7688': attribute type 25 has an invalid length.
[ 1018.838364][T26357] netlink: 'syz.5.7688': attribute type 1 has an invalid length.
[ 1018.857042][T26357] bridge0: port 1(bridge_slave_0) entered learning state
[ 1019.589486][T26369] lo speed is unknown, defaulting to 1000
[ 1019.608337][T26370] lo: entered promiscuous mode
[ 1019.620226][T26370] tunl0: entered promiscuous mode
[ 1019.645670][T26370] gre0: entered promiscuous mode
[ 1019.661496][T26370] gretap0: entered promiscuous mode
[ 1019.683054][T26370] erspan0: entered promiscuous mode
[ 1019.697563][T26370] ip_vti0: entered promiscuous mode
[ 1019.720008][T26370] ip6_vti0: entered promiscuous mode
[ 1019.743909][T26370] sit0: entered promiscuous mode
[ 1019.758826][T26370] ip6tnl0: entered promiscuous mode
[ 1019.780054][T26370] ip6gre0: entered promiscuous mode
[ 1019.795415][T26370] syz_tun: entered promiscuous mode
[ 1019.826171][T26370] ip6gretap0: entered promiscuous mode
[ 1019.841568][T26370] bridge0: entered promiscuous mode
[ 1019.860133][T26370] vcan0: entered promiscuous mode
[ 1019.877887][T26370] bond0: entered promiscuous mode
[ 1019.906272][T26370] bond_slave_0: entered promiscuous mode
[ 1019.944672][T26370] bond_slave_1: entered promiscuous mode
[ 1019.962395][T26370] team0: entered promiscuous mode
[ 1019.985155][T26370] team_slave_0: entered promiscuous mode
[ 1020.002374][T26370] team_slave_1: entered promiscuous mode
[ 1020.019171][T26370] dummy0: entered promiscuous mode
[ 1020.038191][T26370] nlmon0: entered promiscuous mode
[ 1020.095834][T26370] caif0: entered promiscuous mode
[ 1020.118345][T26370] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1021.101655][T26398] loop9: detected capacity change from 0 to 32768
[ 1021.127352][T26398] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11
[ 1021.193896][T26411] netlink: 'syz.8.7711': attribute type 8 has an invalid length.
[ 1021.581507][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 1021.581524][   T28] audit: type=1326 audit(1750125668.341:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26396 comm="syz.9.7704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9836f8e929 code=0x0
[ 1022.209532][T26431] lo speed is unknown, defaulting to 1000
[ 1022.249616][T26432] lo: entered promiscuous mode
[ 1022.296010][T26432] tunl0: entered promiscuous mode
[ 1022.336862][T26432] gre0: entered promiscuous mode
[ 1022.342965][T26432] erspan0: entered promiscuous mode
[ 1022.388791][T26432] ip_vti0: entered promiscuous mode
[ 1022.426234][T26432] ip6_vti0: entered promiscuous mode
[ 1022.455941][T26432] sit0: entered promiscuous mode
[ 1022.461489][T26432] ip6tnl0: entered promiscuous mode
[ 1022.504860][T26432] ip6gre0: entered promiscuous mode
[ 1022.538129][T26432] syz_tun: entered promiscuous mode
[ 1022.553352][T26432] ip6gretap0: entered promiscuous mode
[ 1022.569981][T26432] bridge0: entered promiscuous mode
[ 1022.600328][T26432] vcan0: entered promiscuous mode
[ 1022.614258][T26432] bond0: entered promiscuous mode
[ 1022.715252][T26432] dummy0: entered promiscuous mode
[ 1022.721420][T26432] nlmon0: entered promiscuous mode
[ 1022.736588][T26432] caif0: entered promiscuous mode
[ 1022.746396][T26432] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1023.356531][T26439] loop9: detected capacity change from 0 to 32768
[ 1023.397924][T26439] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1023.471146][T26441] loop5: detected capacity change from 0 to 32768
[ 1023.479516][T26441] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.7724 (26441)
[ 1023.496831][T26441] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1023.519058][T26441] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1023.529124][T26441] BTRFS info (device loop5): using free space tree
[ 1023.611877][T26441] BTRFS info (device loop5): enabling ssd optimizations
[ 1023.619150][T26439] XFS (loop9): Ending clean mount
[ 1023.635311][T26441] BTRFS info (device loop5): auto enabling async discard
[ 1023.654767][T26439] XFS (loop9): Quotacheck needed: Please wait.
[ 1023.804405][T26439] XFS (loop9): Quotacheck: Done.
[ 1023.938093][T13114] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1023.945347][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1024.020974][T25867] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1026.126961][T26507] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1028.629141][T26548] loop9: detected capacity change from 0 to 40427
[ 1028.641922][T26548] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1028.666792][T26548] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1028.695166][T26548] F2FS-fs (loop9): invalid crc value
[ 1028.728535][T26548] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1028.864639][T26548] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1028.884927][T26548] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1028.990533][   T28] audit: type=1800 audit(1750125675.751:457): pid=26548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.7758" name="file1" dev="loop9" ino=10 res=0 errno=0
[ 1029.011108][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1029.816913][T26591] macsec1: entered allmulticast mode
[ 1030.074496][T20366] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[ 1030.086178][T20366] CPU: 0 PID: 20366 Comm: kworker/u5:3 Not tainted 6.6.93-syzkaller #0
[ 1030.094572][T20366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1030.104671][T20366] Workqueue: hci3 hci_rx_work
[ 1030.109411][T20366] Call Trace:
[ 1030.112729][T20366]  <TASK>
[ 1030.115695][T20366]  dump_stack_lvl+0x16c/0x230
[ 1030.120428][T20366]  ? show_regs_print_info+0x20/0x20
[ 1030.125680][T20366]  ? load_image+0x3b0/0x3b0
[ 1030.130249][T20366]  sysfs_create_dir_ns+0x256/0x280
[ 1030.135409][T20366]  ? hci_rx_work+0x43a/0xd80
[ 1030.140055][T20366]  ? sysfs_warn_dup+0xa0/0xa0
[ 1030.144778][T20366]  ? do_raw_spin_unlock+0x121/0x230
[ 1030.150036][T20366]  kobject_add_internal+0x6b8/0xc70
[ 1030.155291][T20366]  kobject_add+0x156/0x220
[ 1030.159756][T20366]  ? __rwlock_init+0x150/0x150
[ 1030.164575][T20366]  ? kobject_init+0x1e0/0x1e0
[ 1030.169304][T20366]  ? _raw_spin_unlock+0x28/0x40
[ 1030.174218][T20366]  ? get_device_parent+0x366/0x390
[ 1030.179383][T20366]  device_add+0x408/0xc20
[ 1030.183765][T20366]  hci_conn_add_sysfs+0xd5/0x1e0
[ 1030.188762][T20366]  le_conn_complete_evt+0xc37/0x1220
[ 1030.194096][T20366]  ? hci_event_packet+0x4a7/0x1210
[ 1030.199266][T20366]  ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0
[ 1030.205550][T20366]  ? __copy_skb_header+0xa7/0x550
[ 1030.210618][T20366]  ? __mutex_unlock_slowpath+0x1a2/0x6a0
[ 1030.216304][T20366]  ? skb_pull_data+0xfb/0x200
[ 1030.221034][T20366]  hci_le_conn_complete_evt+0x187/0x440
[ 1030.226650][T20366]  ? hci_remote_host_features_evt+0x160/0x160
[ 1030.232773][T20366]  hci_event_packet+0x795/0x1210
[ 1030.237775][T20366]  ? bis_list+0x290/0x290
[ 1030.242160][T20366]  ? lockdep_hardirqs_on+0x98/0x150
[ 1030.247387][T20366]  ? hci_send_to_monitor+0xd7/0x4f0
[ 1030.252615][T20366]  hci_rx_work+0x43a/0xd80
[ 1030.257073][T20366]  ? process_scheduled_works+0x957/0x15b0
[ 1030.262818][T20366]  process_scheduled_works+0xa45/0x15b0
[ 1030.268416][T20366]  ? assign_work+0x400/0x400
[ 1030.273033][T20366]  ? assign_work+0x39e/0x400
[ 1030.277679][T20366]  worker_thread+0xa55/0xfc0
[ 1030.282292][T20366]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 1030.288220][T20366]  ? _raw_spin_unlock+0x40/0x40
[ 1030.293104][T20366]  ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 1030.299046][T20366]  kthread+0x2fa/0x390
[ 1030.303134][T20366]  ? pr_cont_work+0x560/0x560
[ 1030.307833][T20366]  ? kthread_blkcg+0xd0/0xd0
[ 1030.312452][T20366]  ret_from_fork+0x48/0x80
[ 1030.316894][T20366]  ? kthread_blkcg+0xd0/0xd0
[ 1030.321500][T20366]  ret_from_fork_asm+0x11/0x20
[ 1030.326303][T20366]  </TASK>
[ 1030.337233][T20366] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[ 1030.353022][T20366] Bluetooth: hci3: failed to register connection device
[ 1031.175904][T26602] loop5: detected capacity change from 0 to 32768
[ 1031.216565][T26602] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 1031.232399][T26602] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1031.306039][T26602] XFS (loop5): Ending clean mount
[ 1031.326921][T26602] XFS (loop5): Quotacheck needed: Please wait.
[ 1031.372635][ T2973] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[ 1031.409572][ T2973] XFS (loop5): Unmount and run xfs_repair
[ 1031.435822][ T2973] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[ 1031.449589][ T2973] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[ 1031.465820][ T2973] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1031.474822][ T2973] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1031.505095][ T2973] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[ 1031.514337][ T2973] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1031.545099][ T2973] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[ 1031.554030][ T2973] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.585351][ T2973] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1031.594302][ T2973] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[ 1031.659747][T26602] XFS (loop5): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 1031.813638][T13114] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1032.104920][T26636] loop8: detected capacity change from 0 to 1024
[ 1032.164531][T26636] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1032.324892][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.535350][T25951] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1032.727346][T25951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.743872][T25951] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1032.756366][T25951] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1032.767761][T25951] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1032.774839][T25951] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[ 1032.784592][T25951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.796154][T25951] usb 6-1: config 0 descriptor??
[ 1033.214022][T25951] kye 0003:0458:5015.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1033.239710][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.245344][T26666] netlink: 277 bytes leftover after parsing attributes in process `syz.9.7799'.
[ 1033.255858][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.255903][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.255931][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.255959][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.255985][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.256013][T25951] kye 0003:0458:5015.0030: unknown main item tag 0x0
[ 1033.261628][T25951] kye 0003:0458:5015.0030: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.5-1/input0
[ 1033.363992][T25951] kye 0003:0458:5015.0030: tablet-enabling feature report not found
[ 1033.373266][T25951] kye 0003:0458:5015.0030: tablet enabling failed
[ 1033.481277][ T5874] usb 6-1: USB disconnect, device number 39
[ 1034.107159][T26690] input: syz0 as /devices/virtual/input/input32
[ 1035.323309][T26717] @: renamed from vlan0 (while UP)
[ 1035.987476][T26736] loop9: detected capacity change from 0 to 128
[ 1036.574087][T26756] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7838'.
[ 1036.625123][ T5874] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1036.750475][T26762] tipc: Started in network mode
[ 1036.767482][T26762] tipc: Node identity ac1414aa, cluster identity 4711
[ 1036.780744][T26762] tipc: Enabled bearer <udp:s>, priority 26
[ 1036.788517][T26765] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7842'.
[ 1036.808614][ T5874] usb 1-1: Using ep0 maxpacket: 16
[ 1036.842183][ T5874] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1036.855082][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1036.871150][ T5874] usb 1-1: Product: syz
[ 1036.881600][ T5874] usb 1-1: Manufacturer: syz
[ 1036.891469][ T5874] usb 1-1: SerialNumber: syz
[ 1036.897101][T26768] loop6: detected capacity change from 0 to 524287999
[ 1036.907182][ T5874] usb 1-1: config 0 descriptor??
[ 1037.148975][ T5874] usb 1-1: USB disconnect, device number 63
[ 1037.346045][T13671] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1037.355320][T26784] loop5: detected capacity change from 0 to 256
[ 1037.374431][   T28] audit: type=1800 audit(1750125684.131:458): pid=26784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7851" name="file1" dev="loop5" ino=1048835 res=0 errno=0
[ 1037.567418][T13671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1037.585092][T13671] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1037.610713][T13671] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1037.625466][T13671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.648554][T13671] usb 9-1: config 0 descriptor??
[ 1037.795875][T13310] tipc: Node number set to 2886997162
[ 1038.350827][T13310] IPVS: starting estimator thread 0...
[ 1038.358957][T26808] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1038.455886][T26809] IPVS: using max 16 ests per chain, 38400 per kthread
[ 1038.479576][T13671] hid-led: probe of 0003:0FC5:B080.0031 failed with error -71
[ 1038.510788][T13671] usb 9-1: USB disconnect, device number 4
[ 1038.525623][T25951] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1038.536433][T26813] loop5: detected capacity change from 0 to 64
[ 1038.585326][   T28] audit: type=1800 audit(1750125685.341:459): pid=26813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7865" name="file1" dev="loop5" ino=18 res=0 errno=0
[ 1038.715641][T25951] usb 1-1: Using ep0 maxpacket: 16
[ 1038.736926][T25951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1038.765260][T25951] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1038.774372][T25951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1038.795291][T25951] usb 1-1: config 0 descriptor??
[ 1038.975319][T13673] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1039.155160][T13673] usb 6-1: Using ep0 maxpacket: 32
[ 1039.174288][T13673] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1039.194196][T13673] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1039.211041][T13673] usb 6-1: config 0 descriptor??
[ 1039.233431][T25951] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1039.252690][T25951] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1039.262494][T25951] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1039.280739][T25951] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1039.295138][T25951] mcp2221 0003:04D8:00DD.0032: unknown main item tag 0x0
[ 1039.314090][T25951] mcp2221 0003:04D8:00DD.0032: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[ 1039.423180][    C0] usb 1-1: input irq status -75 received
[ 1039.472562][T13673] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1039.494502][T13673] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1039.523798][T26832] vlan0: entered promiscuous mode
[ 1039.529058][T13673] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1039.529112][T13673] usb 6-1: media controller created
[ 1039.536896][T26832] vlan0: entered allmulticast mode
[ 1039.536915][T26832] bridge0: entered allmulticast mode
[ 1039.637162][T13673] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1039.679815][T26834] binder: 26833:26834 ioctl c0306201 2000000003c0 returned -14
[ 1039.721119][T13673] az6027: usb out operation failed. (-71)
[ 1039.735173][T13671] usb 1-1: USB disconnect, device number 64
[ 1039.755383][T13673] az6027: usb out operation failed. (-71)
[ 1039.761173][T13673] stb0899_attach: Driver disabled by Kconfig
[ 1039.784134][T13673] az6027: no front-end attached
[ 1039.784134][T13673] 
[ 1039.796784][T13673] az6027: usb out operation failed. (-71)
[ 1039.802587][T13673] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1039.813902][T13673] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input33
[ 1039.839721][T13673] dvb-usb: schedule remote query interval to 400 msecs.
[ 1039.851036][T13673] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1039.862626][T13673] usb 6-1: USB disconnect, device number 40
[ 1039.880639][T26839] loop9: detected capacity change from 0 to 256
[ 1039.926637][T13673] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1039.939493][T26839] FAT-fs (loop9): Directory bread(block 64) failed
[ 1039.955803][T26839] FAT-fs (loop9): Directory bread(block 65) failed
[ 1039.972813][T26839] FAT-fs (loop9): Directory bread(block 66) failed
[ 1040.006082][T26839] FAT-fs (loop9): Directory bread(block 67) failed
[ 1040.014342][T26839] FAT-fs (loop9): Directory bread(block 68) failed
[ 1040.021217][T26839] FAT-fs (loop9): Directory bread(block 69) failed
[ 1040.028125][T26839] FAT-fs (loop9): Directory bread(block 70) failed
[ 1040.034690][T26839] FAT-fs (loop9): Directory bread(block 71) failed
[ 1040.041397][T26839] FAT-fs (loop9): Directory bread(block 72) failed
[ 1040.048181][T26839] FAT-fs (loop9): Directory bread(block 73) failed
[ 1041.504973][T26867] loop5: detected capacity change from 0 to 32768
[ 1041.544520][T26867] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1041.900311][T13114] ocfs2: Unmounting device (7,5) on (node local)
[ 1042.900535][T26890] loop9: detected capacity change from 0 to 32768
[ 1042.944468][T26890] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1043.027016][T26890] XFS (loop9): Ending clean mount
[ 1043.255105][T25867] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1043.778217][T26949] loop5: detected capacity change from 0 to 2048
[ 1043.856247][T26949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1043.963801][T26949] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #12: comm syz.5.7921: inline data xattr refers to an external xattr inode
[ 1043.983067][T26958] block device autoloading is deprecated and will be removed.
[ 1043.992605][T26958] syz.0.7931: attempt to access beyond end of device
[ 1043.992605][T26958] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1044.014998][T26949] EXT4-fs (loop5): Remounting filesystem read-only
[ 1044.024298][T26958] FAT-fs (loop1): unable to read boot sector
[ 1044.059705][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.524438][T26980] netlink: 'syz.9.7933': attribute type 12 has an invalid length.
[ 1044.537256][T25951] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1044.656943][T26985] loop9: detected capacity change from 0 to 1764
[ 1044.704772][T25951] usb 9-1: Using ep0 maxpacket: 8
[ 1044.722776][T25951] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1044.742668][T25951] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1044.763069][T25951] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1044.773552][T25951] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1044.787722][T25951] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1044.798611][T25951] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1045.019983][T25951] usb 9-1: GET_CAPABILITIES returned 0
[ 1045.032235][T25951] usbtmc 9-1:16.0: can't read capabilities
[ 1045.230104][T13310] usb 9-1: USB disconnect, device number 5
[ 1045.430661][T26996] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7940'.
[ 1045.442807][T26996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7940'.
[ 1046.482205][T27004] loop9: detected capacity change from 0 to 32768
[ 1046.857533][T13310] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1047.036561][T13310] usb 1-1: Using ep0 maxpacket: 16
[ 1047.063781][T13310] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1047.079451][T13310] usb 1-1: config 0 has no interface number 0
[ 1047.093229][T13310] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1047.108312][T13310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.138244][T13310] usb 1-1: Product: syz
[ 1047.142490][T13310] usb 1-1: Manufacturer: syz
[ 1047.165725][T13310] usb 1-1: SerialNumber: syz
[ 1047.175624][T13310] usb 1-1: config 0 descriptor??
[ 1047.206096][T13310] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1047.217775][T27025] loop8: detected capacity change from 0 to 128
[ 1047.367820][T27028] syz.8.7953: attempt to access beyond end of device
[ 1047.367820][T27028] loop8: rw=2049, sector=145, nr_sectors = 480 limit=128
[ 1047.558102][  T135] kworker/u4:5: attempt to access beyond end of device
[ 1047.558102][  T135] loop8: rw=1, sector=625, nr_sectors = 416 limit=128
[ 1047.984534][T13310] gspca_spca1528: reg_w err -71
[ 1048.022260][T13310] spca1528: probe of 1-1:0.1 failed with error -71
[ 1048.031555][T13310] usb 1-1: USB disconnect, device number 65
[ 1048.127696][   T28] audit: type=1326 audit(1750125695.387:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27041 comm="syz.5.7961" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x0
[ 1049.452847][T27055] loop8: detected capacity change from 0 to 32768
[ 1049.488639][T27055] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.7967 (27055)
[ 1049.550661][T27055] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1049.569484][T27055] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 1049.588883][T27055] BTRFS info (device loop8): turning off barriers
[ 1049.595369][T27055] BTRFS info (device loop8): setting nodatasum
[ 1049.607779][T27055] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1049.635330][T27055] BTRFS info (device loop8): use zstd compression, level 3
[ 1049.673001][T27055] BTRFS info (device loop8): using free space tree
[ 1050.037990][T27067] loop5: detected capacity change from 0 to 32768
[ 1050.055148][T27067] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.7972 (27067)
[ 1050.129319][T24880] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1050.680478][T27098] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7979'.
[ 1050.728453][T27098] macvtap1: entered promiscuous mode
[ 1050.754188][T27098] macvtap1: entered allmulticast mode
[ 1050.762666][T27098] gretap0: entered allmulticast mode
[ 1051.026079][T27107] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1051.274227][T27114] lo speed is unknown, defaulting to 1000
[ 1053.767594][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1053.774232][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1053.876101][T13310] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1054.072269][T13310] usb 1-1: Using ep0 maxpacket: 16
[ 1054.082589][T13310] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1054.100322][T13310] usb 1-1: config 0 has no interface number 0
[ 1054.106519][T13310] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1054.129774][T13310] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1054.158159][T13310] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1054.174656][T13310] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1054.182822][T13310] usb 1-1: Product: syz
[ 1054.195256][T13310] usb 1-1: SerialNumber: syz
[ 1054.202172][T13671] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1054.215862][T13310] usb 1-1: config 0 descriptor??
[ 1054.231922][T13310] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 1054.242807][T13310] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input34
[ 1054.427589][T13671] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1054.448965][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1054.472926][T13671] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1054.499999][T13671] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1054.528701][T13671] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.548355][T27184] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1054.559066][T13671] usb 6-1: Quirk or no altest; falling back to MIDI 1.0
[ 1054.846220][T25951] usb 6-1: USB disconnect, device number 41
[ 1054.975387][T27197] loop9: detected capacity change from 0 to 1024
[ 1055.014519][T27197] EXT4-fs: inline encryption not supported
[ 1055.048908][T27197] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1055.090087][T27197] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4036: comm syz.9.8021: Allocating blocks 257-513 which overlap fs metadata
[ 1055.118739][T27197] EXT4-fs (loop9): Remounting filesystem read-only
[ 1055.215753][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1055.341645][T27193] loop8: detected capacity change from 0 to 40427
[ 1055.353593][T27193] F2FS-fs (loop8): invalid crc value
[ 1055.365245][T27193] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1055.426333][T27193] F2FS-fs (loop8): Start checkpoint disabled!
[ 1055.439664][T27193] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[ 1055.465390][T27193] syz.8.8019: attempt to access beyond end of device
[ 1055.465390][T27193] loop8: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[ 1055.482272][T27193] syz.8.8019: attempt to access beyond end of device
[ 1055.482272][T27193] loop8: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1055.643994][  T135] kworker/u4:5: attempt to access beyond end of device
[ 1055.643994][  T135] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 1055.671023][  T135] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1055.690716][  T135] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1056.426204][T25951] usb 1-1: USB disconnect, device number 66
[ 1056.439175][T25951] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1056.572108][T27221] loop5: detected capacity change from 0 to 512
[ 1056.636862][T27221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1056.679692][T27221] ext4 filesystem being mounted at /1294/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1056.761697][T27221] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.8028: corrupted inode contents
[ 1056.805625][T27221] EXT4-fs error (device loop5): ext4_dirty_inode:6100: inode #2: comm syz.5.8028: mark_inode_dirty error
[ 1056.858876][   T28] audit: type=1326 audit(1750125704.753:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1056.905388][T27221] EXT4-fs error (device loop5): ext4_do_update_inode:5224: inode #2: comm syz.5.8028: corrupted inode contents
[ 1056.933155][   T28] audit: type=1326 audit(1750125704.753:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1056.934029][T27221] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #2: comm syz.5.8028: mark_inode_dirty error
[ 1056.955570][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1056.996074][   T28] audit: type=1326 audit(1750125704.753:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27cf2ab19 code=0x7ffc0000
[ 1057.018451][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1057.056113][   T28] audit: type=1326 audit(1750125704.753:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1057.130193][   T28] audit: type=1326 audit(1750125704.753:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1057.163543][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.167165][   T28] audit: type=1326 audit(1750125704.753:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1057.254094][   T28] audit: type=1326 audit(1750125704.753:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27cf2ab19 code=0x7ffc0000
[ 1057.302086][   T28] audit: type=1326 audit(1750125704.753:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27cf2ab19 code=0x7ffc0000
[ 1057.339773][   T28] audit: type=1326 audit(1750125704.753:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1057.362586][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1057.387050][   T28] audit: type=1326 audit(1750125704.753:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27218 comm="syz.8.8029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc27cf2ab19 code=0x7ffc0000
[ 1057.977257][T25951] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1058.167313][T25951] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1058.179888][T25951] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1058.190488][T25951] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1058.200235][T25951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.213810][T27241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1058.226140][T25951] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[ 1058.460434][T25951] usb 1-1: USB disconnect, device number 67
[ 1060.093118][T27244] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1060.102164][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[ 1060.112385][T27244] Bluetooth: hci1: Opcode 0x0406 failed: -110
[ 1060.849966][T27244] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1060.856168][T27244] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1060.872265][T27244] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1060.880851][T27244] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1060.890541][T27244] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1060.897916][T27244] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1060.911532][T27244] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1061.168632][T20404] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.340216][T20404] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.438151][T27269] loop8: detected capacity change from 0 to 16
[ 1061.443753][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1061.458246][T27269] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1061.472307][T20404] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.593982][T25951] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1061.656902][T20404] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1061.801442][T25951] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1061.817407][T25951] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1061.841220][T25951] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1061.870102][T25951] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1061.908232][T27258] loop5: detected capacity change from 0 to 40427
[ 1061.910285][T25951] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1061.924216][T27258] F2FS-fs (loop5): invalid crc value
[ 1061.950130][T25951] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1061.975766][T25951] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1061.983939][T25951] usb 10-1: Product: syz
[ 1062.009936][T27258] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1062.031739][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[ 1062.033763][T25951] usb 10-1: Manufacturer: syz
[ 1062.037974][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1062.088590][T25951] cdc_wdm 10-1:1.0: skipping garbage
[ 1062.093961][T25951] cdc_wdm 10-1:1.0: skipping garbage
[ 1062.138125][T25951] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1062.164266][T25951] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1062.167114][T27258] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1062.330667][T13114] syz-executor: attempt to access beyond end of device
[ 1062.330667][T13114] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1062.402130][T25951] usb 10-1: USB disconnect, device number 3
[ 1062.409520][T13114] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1062.797318][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1063.374342][T20404] IPVS: stopping master sync thread 11403 ...
[ 1063.520090][T27313] netlink: 292 bytes leftover after parsing attributes in process `syz.5.8063'.
[ 1063.970340][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1064.266516][T27332] loop8: detected capacity change from 0 to 16
[ 1064.297225][T27332] erofs: (device loop8): mounted with root inode @ nid 36.
[ 1064.305727][T20404] hsr_slave_0: left promiscuous mode
[ 1064.312006][T20404] hsr_slave_1: left promiscuous mode
[ 1064.346664][T20404] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1064.370299][T20404] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1064.400311][T20404] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1064.418126][T20404] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1064.446969][T20404] bridge_slave_1: left allmulticast mode
[ 1064.458507][T20404] bridge_slave_1: left promiscuous mode
[ 1064.478137][T20404] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1064.520352][T20404] bridge_slave_0: left allmulticast mode
[ 1064.520897][T24880] erofs: (device loop8): erofs_fill_dentries: bogus dirent @ nid 46
[ 1064.526069][T20404] bridge_slave_0: left promiscuous mode
[ 1064.526328][T20404] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1064.574079][T24880] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1064.605372][T24880] erofs: (device loop8): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1064.716173][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1064.765829][T20404] veth0_macvtap: left promiscuous mode
[ 1064.771607][T20404] veth1_vlan: left promiscuous mode
[ 1064.778060][T20404] veth0_vlan: left promiscuous mode
[ 1064.962302][T27343] input: syz1 as /devices/virtual/input/input35
[ 1064.977353][   T28] kauditd_printk_skb: 20 callbacks suppressed
[ 1064.977371][   T28] audit: type=1326 audit(1750125713.465:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.035730][   T28] audit: type=1326 audit(1750125713.465:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.108466][   T28] audit: type=1326 audit(1750125713.508:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.154524][   T28] audit: type=1326 audit(1750125713.508:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.177992][   T28] audit: type=1326 audit(1750125713.508:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.261802][   T28] audit: type=1326 audit(1750125713.508:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.309116][   T28] audit: type=1326 audit(1750125713.508:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.349959][   T28] audit: type=1326 audit(1750125713.508:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.397855][T27355] ptrace attach of "./syz-executor exec"[13114] was attempted by "./syz-executor exec"[27355]
[ 1065.414699][   T28] audit: type=1326 audit(1750125713.508:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27341 comm="syz.8.8077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x7ffc0000
[ 1065.910863][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1066.142188][T27360] loop5: detected capacity change from 0 to 32768
[ 1066.187345][T27360] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 11
[ 1066.655269][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1066.678106][   T28] audit: type=1326 audit(1750125715.289:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27359 comm="syz.5.8085" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f884d98e929 code=0x0
[ 1066.966837][T20404] team0 (unregistering): Port device team_slave_1 removed
[ 1067.048189][T20404] team0 (unregistering): Port device team_slave_0 removed
[ 1067.144526][T20404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1067.238982][T20404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1067.847653][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1068.411624][T20404] bond0 (unregistering): Released all slaves
[ 1068.657186][T27385] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1068.951395][T27397] loop9: detected capacity change from 0 to 32768
[ 1068.962412][T27397] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.8099 (27397)
[ 1068.999424][T27397] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1069.014567][T27397] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[ 1069.024523][T27397] BTRFS info (device loop9): using free space tree
[ 1069.134225][T13638] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1069.159417][T27397] BTRFS info (device loop9): enabling ssd optimizations
[ 1069.171451][T27397] BTRFS info (device loop9): auto enabling async discard
[ 1069.320722][T13638] usb 9-1: Using ep0 maxpacket: 32
[ 1069.322455][T25867] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1069.337974][T13638] usb 9-1: config index 0 descriptor too short (expected 156, got 27)
[ 1069.355769][T13638] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1069.370938][T13638] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1069.404831][T13638] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1069.448740][T13638] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1069.494449][T13638] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1069.515837][T13638] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1069.556106][T13638] usb 9-1: Product: syz
[ 1069.560354][T13638] usb 9-1: Manufacturer: syz
[ 1069.570649][T13638] usb 9-1: SerialNumber: syz
[ 1069.584467][T13638] usb 9-1: config 0 descriptor??
[ 1069.616770][T13638] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1069.655165][T13638] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1069.871583][T25951] usb 9-1: USB disconnect, device number 6
[ 1069.885088][T25951] ldusb 9-1:0.0: LD USB Device #0 now disconnected
[ 1069.966786][T27439] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1070.195727][T27446] loop5: detected capacity change from 0 to 2048
[ 1070.223490][T27446] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1070.255893][T27446] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1070.412224][T27454] netlink: 'syz.0.8118': attribute type 15 has an invalid length.
[ 1071.954732][T27509] loop8: detected capacity change from 0 to 512
[ 1071.971084][T27509] EXT4-fs: Ignoring removed bh option
[ 1071.996542][T27509] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 1072.062876][T27509] EXT4-fs (loop8): 1 truncate cleaned up
[ 1072.098388][T27509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1072.315621][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1072.480106][T25951] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1072.673756][T25951] usb 1-1: Using ep0 maxpacket: 32
[ 1072.687417][T25951] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[ 1072.715368][T25951] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 1072.740661][T25951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 1072.760671][T25951] usb 1-1: config 1 has no interface number 0
[ 1072.766858][T25951] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1072.793086][T25951] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1072.814487][T25951] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 1072.849577][T25951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.884995][T25951] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[ 1073.026863][T27526] loop9: detected capacity change from 0 to 32768
[ 1073.044213][T27526] BTRFS error: device /dev/loop9 already registered with a higher generation, found 8 expect 11
[ 1073.087266][T25951] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached
[ 1073.519222][T13309] usb 1-1: USB disconnect, device number 68
[ 1073.544003][T13309] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[ 1073.615565][T27541] loop5: detected capacity change from 0 to 32768
[ 1073.624561][T27552] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1073.648200][T27541] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1073.722520][T27541] XFS (loop5): Ending clean mount
[ 1073.838506][T13114] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1074.292696][T27583] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[ 1075.345879][T27600] loop8: detected capacity change from 0 to 32768
[ 1075.420043][T27600] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1075.528249][T27618] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1075.576971][T27600] XFS (loop8): Ending clean mount
[ 1075.588370][T27600] XFS (loop8): Quotacheck needed: Please wait.
[ 1075.721972][T27600] XFS (loop8): Quotacheck: Done.
[ 1075.819814][T27622] loop5: detected capacity change from 0 to 4096
[ 1075.899694][T24880] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1076.018042][T27626] macsec2: entered allmulticast mode
[ 1076.894378][T27643] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[ 1077.134521][T27650] macsec1: entered allmulticast mode
[ 1078.432583][T27668] loop9: detected capacity change from 0 to 4096
[ 1078.878140][T27676] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1079.137354][   T28] audit: type=1326 audit(1750125728.658:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.190191][   T28] audit: type=1326 audit(1750125728.679:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.264622][   T28] audit: type=1326 audit(1750125728.690:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.332264][   T28] audit: type=1326 audit(1750125728.690:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.381147][   T28] audit: type=1326 audit(1750125728.690:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.423750][   T28] audit: type=1326 audit(1750125728.690:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.450117][   T28] audit: type=1326 audit(1750125728.690:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.482998][   T28] audit: type=1326 audit(1750125728.690:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.530243][   T28] audit: type=1326 audit(1750125728.690:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1079.805799][   T28] audit: type=1326 audit(1750125729.366:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27684 comm="syz.5.8209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1080.688604][T27717] loop8: detected capacity change from 0 to 4096
[ 1081.281548][T27720] loop5: detected capacity change from 0 to 32768
[ 1081.851434][T27736] loop5: detected capacity change from 0 to 4096
[ 1081.860700][T27736] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[ 1082.036277][T27729] loop8: detected capacity change from 0 to 32768
[ 1082.054255][T27729] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1082.157856][T27755] loop5: detected capacity change from 0 to 1024
[ 1082.190592][T27755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1082.233891][T27729] XFS (loop8): Ending clean mount
[ 1082.270583][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1082.349791][T24880] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1082.456737][T27763] netlink: 277 bytes leftover after parsing attributes in process `syz.5.8241'.
[ 1082.493811][T27764] input: syz0 as /devices/virtual/input/input36
[ 1082.901954][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8245'.
[ 1082.959753][T27774] bond2: entered promiscuous mode
[ 1082.965376][T27774] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1083.607481][T27770] loop8: detected capacity change from 0 to 32768
[ 1083.627493][T27792] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8253'.
[ 1083.641726][T27779] loop9: detected capacity change from 0 to 32768
[ 1083.656453][T27790] syz.5.8254 (27790) used obsolete PPPIOCDETACH ioctl
[ 1083.693511][T27779] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[ 1083.704924][T27779] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1083.788239][T27779] XFS (loop9): Ending clean mount
[ 1083.814204][T27779] XFS (loop9): Quotacheck needed: Please wait.
[ 1083.841859][ T5874] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 
[ 1083.860397][ T5874] XFS (loop9): Unmount and run xfs_repair
[ 1083.868245][ T5874] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[ 1083.876421][ T5874] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[ 1083.885830][ T5874] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[ 1083.895935][ T5874] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 1083.905876][ T5874] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[ 1083.915446][ T5874] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[ 1083.924974][ T5874] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[ 1083.934611][ T5874] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1083.943754][ T5874] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1083.953873][ T3508] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x1d7/0x2d0" at daddr 0x10 len 8 error 74
[ 1083.973615][T27779] XFS (loop9): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[ 1084.118427][T25867] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1084.988517][ T5874] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1084.996211][   T28] kauditd_printk_skb: 306 callbacks suppressed
[ 1084.996228][   T28] audit: type=1326 audit(1750125734.945:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27808 comm="syz.5.8259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7fc00000
[ 1085.177343][T27827] netlink: 277 bytes leftover after parsing attributes in process `syz.8.8264'.
[ 1085.214828][ T5874] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1085.231271][ T5874] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1085.251828][ T5874] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1085.264208][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1085.275008][ T5874] usb 10-1: Product: syz
[ 1085.280250][ T5874] usb 10-1: Manufacturer: syz
[ 1085.285171][ T5874] usb 10-1: SerialNumber: syz
[ 1085.293077][ T5874] usb 10-1: config 0 descriptor??
[ 1085.304908][ T5874] usb 10-1: selecting invalid altsetting 0
[ 1085.558380][T13309] usb 10-1: USB disconnect, device number 4
[ 1086.954381][T27838] loop9: detected capacity change from 0 to 32768
[ 1087.051541][T27846] loop8: detected capacity change from 0 to 8192
[ 1087.211307][T27849] syz.5.8276[27849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1087.211449][T27849] syz.5.8276[27849] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1087.524152][T27854] loop9: detected capacity change from 0 to 512
[ 1087.541022][T27857] loop5: detected capacity change from 0 to 1024
[ 1087.582163][T27854] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1087.615677][T27854] EXT4-fs (loop9): orphan cleanup on readonly fs
[ 1087.638139][T27854] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.8274: bg 0: block 248: padding at end of block bitmap is not set
[ 1087.655670][T27857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.720388][T27854] Quota error (device loop9): write_blk: dquota write failed
[ 1087.729009][T27854] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota
[ 1087.739786][T27854] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.8274: Failed to acquire dquot type 1
[ 1087.756865][T27854] EXT4-fs (loop9): 1 truncate cleaned up
[ 1087.796012][T27854] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1087.811604][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.934421][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.966256][T27872] loop5: detected capacity change from 0 to 1024
[ 1088.001395][T27872] EXT4-fs: Ignoring removed oldalloc option
[ 1088.018123][T27872] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1088.075916][T27872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a80ec019, mo2=0083]
[ 1088.106754][T27872] System zones: 1-12
[ 1088.123680][T27872] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1088.423312][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1088.637918][T27883] loop5: detected capacity change from 0 to 2048
[ 1088.697002][T27883] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1088.776556][T27883] EXT4-fs error (device loop5): ext4_ext_precache:627: inode #2: comm syz.5.8286: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5)
[ 1088.795002][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1088.865772][T27883] EXT4-fs (loop5): Remounting filesystem read-only
[ 1088.938238][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1089.127641][T27896] tipc: Enabled bearer <udp:s>, priority 26
[ 1089.304680][T27904] loop6: detected capacity change from 0 to 524287999
[ 1089.573297][T27916] loop8: detected capacity change from 0 to 4096
[ 1089.600846][T27916] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1089.668687][ T5874] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1089.688626][T27916] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #15: comm syz.8.8300: corrupted inode contents
[ 1089.705141][T27916] EXT4-fs error (device loop8): ext4_dirty_inode:6100: inode #15: comm syz.8.8300: mark_inode_dirty error
[ 1089.722478][T27916] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #15: comm syz.8.8300: corrupted inode contents
[ 1089.735900][T27916] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #15: comm syz.8.8300: mark_inode_dirty error
[ 1089.747995][T27916] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #15: comm syz.8.8300: corrupted inode contents
[ 1089.761142][T27916] EXT4-fs error (device loop8): __ext4_ext_dirty:202: inode #15: comm syz.8.8300: mark_inode_dirty error
[ 1089.773182][T27916] EXT4-fs error (device loop8): ext4_do_update_inode:5224: inode #15: comm syz.8.8300: corrupted inode contents
[ 1089.804784][T27916] EXT4-fs error (device loop8): ext4_truncate:4283: inode #15: comm syz.8.8300: mark_inode_dirty error
[ 1089.824731][T27916] EXT4-fs error (device loop8): ext4_evict_inode:263: comm syz.8.8300: couldn't truncate inode 15 (err -117)
[ 1089.863286][ T5874] usb 6-1: Using ep0 maxpacket: 16
[ 1089.876349][ T5874] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1089.898828][ T5874] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1089.929345][ T5874] usb 6-1: Product: syz
[ 1089.933589][ T5874] usb 6-1: Manufacturer: syz
[ 1089.947066][ T5874] usb 6-1: SerialNumber: syz
[ 1089.962430][ T5874] usb 6-1: config 0 descriptor??
[ 1089.990996][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1090.217181][ T5874] usb 6-1: USB disconnect, device number 42
[ 1090.516547][T27925] tipc: Started in network mode
[ 1090.521502][T27925] tipc: Node identity ac1414aa, cluster identity 4711
[ 1090.530267][T27925] tipc: Enabled bearer <udp:s>, priority 26
[ 1090.628580][T27929] netlink: 80 bytes leftover after parsing attributes in process `syz.9.8306'.
[ 1091.568906][T13309] tipc: Node number set to 2886997162
[ 1091.606818][T27939] loop5: detected capacity change from 0 to 32768
[ 1091.659703][T27939] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1091.783776][T27939] XFS (loop5): Starting recovery (logdev: internal)
[ 1091.847388][T27939] XFS (loop5): Ending recovery (logdev: internal)
[ 1092.027699][T13114] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1092.567131][T27967] tipc: Enabled bearer <udp:s>, priority 26
[ 1092.630768][T13310] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1092.817058][T13310] usb 9-1: Using ep0 maxpacket: 16
[ 1092.839015][T13310] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1092.863604][T13310] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1092.871759][T13310] usb 9-1: Product: syz
[ 1092.886252][T13310] usb 9-1: Manufacturer: syz
[ 1092.890970][T13310] usb 9-1: SerialNumber: syz
[ 1092.913538][T13310] usb 9-1: config 0 descriptor??
[ 1093.219604][T13310] usb 9-1: USB disconnect, device number 7
[ 1093.609963][ T5874] tipc: Node number set to 436293487
[ 1093.787530][T27976] loop5: detected capacity change from 0 to 8192
[ 1093.907538][T13310] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1094.110957][T13310] usb 1-1: Using ep0 maxpacket: 32
[ 1094.141207][T13310] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1094.187829][T13310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1094.215208][T13310] usb 1-1: config 0 descriptor??
[ 1094.432497][T13310] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1094.451884][T13310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1094.477326][T13310] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1094.492406][T13310] usb 1-1: media controller created
[ 1094.536549][T27978] loop8: detected capacity change from 0 to 32768
[ 1094.546142][T13310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1094.558702][T27978] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 scanned by syz.8.8325 (27978)
[ 1094.588409][T27978] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1094.588505][T27978] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 1094.588543][T27978] BTRFS info (device loop8): enabling disk space caching
[ 1094.588556][T27978] BTRFS info (device loop8): force clearing of disk cache
[ 1094.588571][T27978] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1094.588587][T27978] BTRFS info (device loop8): use zstd compression, level 3
[ 1094.588602][T27978] BTRFS info (device loop8): disk space caching is enabled
[ 1094.622081][T13310] az6027: usb out operation failed. (-71)
[ 1094.623349][T13310] az6027: usb out operation failed. (-71)
[ 1094.623368][T13310] stb0899_attach: Driver disabled by Kconfig
[ 1094.623381][T13310] az6027: no front-end attached
[ 1094.623381][T13310] 
[ 1094.623748][T13310] az6027: usb out operation failed. (-71)
[ 1094.623763][T13310] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1094.628931][T13310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input37
[ 1094.631650][T13310] dvb-usb: schedule remote query interval to 400 msecs.
[ 1094.631667][T13310] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1094.634583][T13310] usb 1-1: USB disconnect, device number 69
[ 1094.636673][T27978] BTRFS info (device loop8): enabling ssd optimizations
[ 1094.636697][T27978] BTRFS info (device loop8): auto enabling async discard
[ 1094.643597][T27978] BTRFS info (device loop8): rebuilding free space tree
[ 1094.652399][T27978] BTRFS info (device loop8): disabling free space tree
[ 1094.652451][T27978] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1094.652469][T27978] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1094.693110][T13310] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1094.840909][T24880] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[ 1095.545893][T28017] loop8: detected capacity change from 0 to 512
[ 1095.595588][T28017] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.8336: casefold flag without casefold feature
[ 1095.641780][T28017] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.8336: couldn't read orphan inode 15 (err -117)
[ 1095.692609][T28017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1095.832655][T28017] EXT4-fs (loop8): shut down requested (0)
[ 1096.083493][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1096.203891][T28034] loop9: detected capacity change from 0 to 2048
[ 1096.228142][T28036] loop8: detected capacity change from 0 to 8
[ 1096.239863][T28034] EXT4-fs: Ignoring removed i_version option
[ 1096.271468][T28034] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1096.303078][T28034] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1096.383911][T28034] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.8343: bg 0: block 345: padding at end of block bitmap is not set
[ 1096.469364][T28034] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[ 1096.482107][T28034] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 1096.482107][T28034] 
[ 1096.550844][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1097.511074][T28054] loop9: detected capacity change from 0 to 32768
[ 1097.535280][T28054] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop9 scanned by syz.9.8351 (28054)
[ 1097.589366][T28069] vlan2: entered promiscuous mode
[ 1097.599927][T28054] BTRFS info (device loop9): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1097.624160][T28069] vlan2: entered allmulticast mode
[ 1097.630144][T28054] BTRFS info (device loop9): using blake2b (blake2b-256-generic) checksum algorithm
[ 1097.639989][T28069] bridge0: entered allmulticast mode
[ 1097.650259][T28054] BTRFS info (device loop9): using free space tree
[ 1097.762417][T28054] BTRFS info (device loop9): enabling ssd optimizations
[ 1097.773099][T28054] BTRFS info (device loop9): auto enabling async discard
[ 1097.906688][T25867] BTRFS info (device loop9): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1098.186503][T13671] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1098.221090][ T5874] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1098.304533][T28098] loop9: detected capacity change from 0 to 8192
[ 1098.382105][T13671] usb 9-1: Using ep0 maxpacket: 32
[ 1098.398587][T13671] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1098.416411][T13671] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.427264][T13671] usb 9-1: config 0 descriptor??
[ 1098.428339][ T5874] usb 6-1: Using ep0 maxpacket: 16
[ 1098.450699][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1098.467950][ T5874] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1098.484384][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.510157][ T5874] usb 6-1: config 0 descriptor??
[ 1098.643173][T13671] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1098.672244][T13671] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1098.694957][T13671] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1098.720356][T13671] usb 9-1: media controller created
[ 1098.749601][T13671] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1098.834474][T13671] az6027: usb out operation failed. (-71)
[ 1098.841569][T13671] az6027: usb out operation failed. (-71)
[ 1098.847954][T13671] stb0899_attach: Driver disabled by Kconfig
[ 1098.854201][T13671] az6027: no front-end attached
[ 1098.854201][T13671] 
[ 1098.866433][T13671] az6027: usb out operation failed. (-71)
[ 1098.873426][T13671] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1098.882772][T13671] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input38
[ 1098.907895][T13671] dvb-usb: schedule remote query interval to 400 msecs.
[ 1098.914197][ T5874] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0
[ 1098.924272][T25951] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[ 1098.929621][T13671] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1098.937891][ T5874] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0
[ 1098.947798][ T5874] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0
[ 1098.950893][T13671] usb 9-1: USB disconnect, device number 8
[ 1098.956730][ T5874] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0
[ 1098.968517][ T5874] mcp2221 0003:04D8:00DD.0033: unknown main item tag 0x0
[ 1098.976779][ T5874] mcp2221 0003:04D8:00DD.0033: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[ 1099.014179][T13671] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1099.118178][T25951] usb 1-1: Using ep0 maxpacket: 32
[ 1099.126532][T25951] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[ 1099.144119][T25951] usb 1-1: config 0 has no interface number 0
[ 1099.150441][    C0] usb 6-1: input irq status -75 received
[ 1099.163352][T25951] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1099.174986][T25951] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1099.185629][T25951] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1099.194807][T25951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1099.206643][T25951] usb 1-1: config 0 descriptor??
[ 1099.335799][T13671] usb 6-1: USB disconnect, device number 43
[ 1099.505872][T28107] loop9: detected capacity change from 0 to 128
[ 1099.532327][T28107] EXT4-fs: Ignoring removed nobh option
[ 1099.551148][T28107] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1099.566249][T28107] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1099.626576][T25867] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1099.783894][T25951] uclogic 0003:28BD:0094.0034: pen parameters not found
[ 1099.798110][T25951] uclogic 0003:28BD:0094.0034: interface is invalid, ignoring
[ 1100.028339][T13671] usb 1-1: USB disconnect, device number 70
[ 1100.242518][T28111] loop8: detected capacity change from 0 to 32768
[ 1100.267717][T28111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.8368 (28111)
[ 1100.311335][T28111] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1100.347840][T28111] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 1100.376931][T28111] BTRFS info (device loop8): force clearing of disk cache
[ 1100.384135][T28111] BTRFS info (device loop8): setting nodatacow, compression disabled
[ 1100.395385][T28111] BTRFS info (device loop8): turning off barriers
[ 1100.401910][T28111] BTRFS info (device loop8): enabling auto defrag
[ 1100.422912][T28111] BTRFS info (device loop8): turning on sync discard
[ 1100.429755][T28111] BTRFS warning (device loop8): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1100.450656][T28111] BTRFS info (device loop8): trying to use backup root at mount time
[ 1100.458801][T28111] BTRFS info (device loop8): enabling ssd optimizations
[ 1100.479263][T28111] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1100.487095][T28111] BTRFS info (device loop8): using free space tree
[ 1100.561601][   T48] BTRFS warning (device loop8): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xb6fb6650 level 0
[ 1100.579729][T28111] BTRFS warning (device loop8): couldn't read tree root
[ 1100.595702][T28111] BTRFS warning (device loop8): try to load backup roots slot 1
[ 1100.604547][   T42] BTRFS warning (device loop8): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x7a216cc0 level 0
[ 1100.620392][T28117] loop9: detected capacity change from 0 to 32768
[ 1100.630189][T28111] BTRFS warning (device loop8): couldn't read tree root
[ 1100.638352][T28111] BTRFS warning (device loop8): try to load backup roots slot 2
[ 1100.646417][   T42] BTRFS error (device loop8): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[ 1100.658392][T28111] BTRFS warning (device loop8): couldn't read tree root
[ 1100.670899][T28111] BTRFS warning (device loop8): try to load backup roots slot 3
[ 1100.680173][T28117] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1100.720687][T28111] BTRFS info (device loop8): rebuilding free space tree
[ 1100.760518][T28111] BTRFS info (device loop8): checking UUID tree
[ 1100.783949][T25867] ocfs2: Unmounting device (7,9) on (node local)
[ 1100.889844][T24880] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1101.391348][T28153] loop9: detected capacity change from 0 to 256
[ 1101.491784][T28153] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011bf5, chksum : 0xdfba1b89, utbl_chksum : 0xe619d30d)
[ 1101.492093][T28153] exFAT-fs (loop9): bogus allocation bitmap size(need : 2, cur : 17179869186)
[ 1101.589207][T28162] loop5: detected capacity change from 0 to 1024
[ 1102.553365][T28187] loop8: detected capacity change from 0 to 4096
[ 1102.706521][T28187] ntfs3: loop8: Mark volume as dirty due to NTFS errors
[ 1102.781376][T28193] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1102.788725][T28193] IPv6: NLM_F_CREATE should be set when creating new route
[ 1102.849037][T24880] ntfs3: loop8: ino=9, ntfs_sync_fs failed, -22.
[ 1103.204273][T28183] loop5: detected capacity change from 0 to 32768
[ 1103.295540][T28183] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1103.359159][T28183] XFS (loop5): Ending clean mount
[ 1103.413988][T28219] loop8: detected capacity change from 0 to 8192
[ 1103.540104][T13114] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1103.573084][T13310] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[ 1103.760094][T13310] usb 10-1: Using ep0 maxpacket: 32
[ 1103.770085][T13310] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1103.788082][T13310] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1103.812129][T13310] usb 10-1: config 0 descriptor??
[ 1104.042894][T13310] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1104.059358][T13310] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1104.077492][T13310] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1104.087104][T13310] usb 10-1: media controller created
[ 1104.129686][T13310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1104.254293][T28227] loop8: detected capacity change from 0 to 40427
[ 1104.258964][T13310] az6027: usb out operation failed. (-71)
[ 1104.270574][T13310] az6027: usb out operation failed. (-71)
[ 1104.276809][T13310] stb0899_attach: Driver disabled by Kconfig
[ 1104.280494][T28227] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1104.288364][T13310] az6027: no front-end attached
[ 1104.288364][T13310] 
[ 1104.297244][T13310] az6027: usb out operation failed. (-71)
[ 1104.314316][T13310] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1104.323766][T13310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input39
[ 1104.343729][T13310] dvb-usb: schedule remote query interval to 400 msecs.
[ 1104.351049][T13310] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1104.353540][T28227] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1104.375348][T13310] usb 10-1: USB disconnect, device number 5
[ 1104.448254][T13310] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1104.528765][T24880] syz-executor: attempt to access beyond end of device
[ 1104.528765][T24880] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1104.552159][T24880] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1104.619938][T28234] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1105.017371][T28238] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1105.619495][T28259] loop9: detected capacity change from 0 to 2048
[ 1105.669390][T28259] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1105.862707][T28253] loop8: detected capacity change from 0 to 32768
[ 1105.903777][T28259] EXT4-fs error (device loop9): ext4_find_inline_data_nolock:164: inode #12: comm syz.9.8421: inline data xattr refers to an external xattr inode
[ 1105.937086][T28253] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1105.984705][T28259] EXT4-fs (loop9): Remounting filesystem read-only
[ 1106.110989][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1106.358127][T24880] ocfs2: Unmounting device (7,8) on (node local)
[ 1106.673141][T28258] loop5: detected capacity change from 0 to 40427
[ 1106.684663][T28275] netlink: 'syz.0.8426': attribute type 12 has an invalid length.
[ 1106.741435][T28258] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1106.872668][T28258] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1107.285506][T13114] syz-executor: attempt to access beyond end of device
[ 1107.285506][T13114] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1107.320126][T13114] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1107.675932][T28298] loop8: detected capacity change from 0 to 32768
[ 1108.135342][T28314] loop9: detected capacity change from 0 to 128
[ 1108.178970][T28312] loop8: detected capacity change from 0 to 2048
[ 1108.225492][T28312] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.231702][T28314] syz.9.8439: attempt to access beyond end of device
[ 1108.231702][T28314] loop9: rw=2049, sector=145, nr_sectors = 896 limit=128
[ 1108.344845][T28312] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:164: inode #12: comm syz.8.8440: inline data xattr refers to an external xattr inode
[ 1108.368459][T28312] EXT4-fs (loop8): Remounting filesystem read-only
[ 1108.399298][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.538902][T28323] netlink: 'syz.8.8441': attribute type 12 has an invalid length.
[ 1108.803035][   T28] audit: type=1326 audit(1750125760.487:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28330 comm="syz.0.8448" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feab7f8e929 code=0x0
[ 1109.002083][T28338] loop5: detected capacity change from 0 to 128
[ 1109.118988][T28339] syz.5.8450: attempt to access beyond end of device
[ 1109.118988][T28339] loop5: rw=2049, sector=145, nr_sectors = 568 limit=128
[ 1109.317393][ T3508] kworker/u4:7: attempt to access beyond end of device
[ 1109.317393][ T3508] loop5: rw=1, sector=713, nr_sectors = 328 limit=128
[ 1109.532420][T28333] loop9: detected capacity change from 0 to 40427
[ 1109.561501][T28333] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1109.644363][T28333] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1109.695411][T28352] netlink: 'syz.5.8454': attribute type 12 has an invalid length.
[ 1109.707343][T28351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8453'.
[ 1109.765005][T28351] macvtap1: entered promiscuous mode
[ 1109.792036][T28351] macvtap1: entered allmulticast mode
[ 1109.809383][T28351] gretap0: entered allmulticast mode
[ 1109.919114][T25867] syz-executor: attempt to access beyond end of device
[ 1109.919114][T25867] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1109.946433][T25867] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1110.046751][T28362] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1110.408231][   T28] audit: type=1326 audit(1750125762.214:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28369 comm="syz.8.8463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc27cf8e929 code=0x0
[ 1111.026875][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1111.033377][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1111.695084][T28394] loop5: detected capacity change from 0 to 128
[ 1111.706257][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8472'.
[ 1111.743058][T28396] macvtap1: entered promiscuous mode
[ 1111.756820][T28396] macvtap1: entered allmulticast mode
[ 1111.772795][T28396] gretap0: entered allmulticast mode
[ 1111.814521][T28390] loop8: detected capacity change from 0 to 32768
[ 1111.830948][T28390] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.8470 (28390)
[ 1111.845674][T28397] syz.5.8473: attempt to access beyond end of device
[ 1111.845674][T28397] loop5: rw=2049, sector=145, nr_sectors = 592 limit=128
[ 1111.879870][T28390] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1111.899044][T28390] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm
[ 1111.913469][T28390] BTRFS info (device loop8): turning off barriers
[ 1111.924256][T28390] BTRFS info (device loop8): setting nodatasum
[ 1111.930492][T28390] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1111.947635][T28390] BTRFS info (device loop8): use zstd compression, level 3
[ 1111.957322][T28390] BTRFS info (device loop8): using free space tree
[ 1112.052077][ T3508] kworker/u4:7: attempt to access beyond end of device
[ 1112.052077][ T3508] loop5: rw=1, sector=737, nr_sectors = 304 limit=128
[ 1112.133151][T28412] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1112.279080][T24880] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1113.154525][T28418] loop9: detected capacity change from 0 to 32768
[ 1113.164231][T28418] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.8475 (28418)
[ 1113.182484][T28418] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1113.227845][T28418] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[ 1113.237531][T28418] BTRFS info (device loop9): turning off barriers
[ 1113.244208][T28418] BTRFS info (device loop9): setting nodatasum
[ 1113.250597][T28418] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1113.262066][T28418] BTRFS info (device loop9): use zstd compression, level 3
[ 1113.296567][T28418] BTRFS info (device loop9): using free space tree
[ 1113.554510][T25867] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1114.323881][T28474] loop9: detected capacity change from 0 to 32768
[ 1114.332564][T28474] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.8488 (28474)
[ 1114.348463][T28474] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1114.358885][T28474] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm
[ 1114.367931][T28474] BTRFS info (device loop9): turning off barriers
[ 1114.374483][T28474] BTRFS info (device loop9): setting nodatasum
[ 1114.381227][T28474] BTRFS info (device loop9): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1114.390858][T28474] BTRFS info (device loop9): use zstd compression, level 3
[ 1114.398325][T28474] BTRFS info (device loop9): using free space tree
[ 1114.479958][T25867] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1115.179213][T28507] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1115.389593][T28514] loop5: detected capacity change from 0 to 256
[ 1115.456487][T28514] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18e2c, utbl_chksum : 0xe619d30d)
[ 1116.243853][T28524] loop5: detected capacity change from 0 to 32768
[ 1116.263251][T28524] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.8504 (28524)
[ 1116.306640][T28524] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1116.329134][T28524] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1116.342437][T28524] BTRFS info (device loop5): setting nodatasum
[ 1116.348891][T28524] BTRFS info (device loop5): doing ref verification
[ 1116.359215][T28524] BTRFS info (device loop5): use zlib compression, level 3
[ 1116.368783][T28524] BTRFS info (device loop5): force clearing of disk cache
[ 1116.376586][T28524] BTRFS info (device loop5): doing ref verification
[ 1116.383778][T28524] BTRFS info (device loop5): using free space tree
[ 1116.517179][T28524] BTRFS info (device loop5): enabling ssd optimizations
[ 1116.524386][T28524] BTRFS info (device loop5): auto enabling async discard
[ 1116.536772][T28524] BTRFS info (device loop5): rebuilding free space tree
[ 1116.843687][T13114] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1119.364946][T28565] loop5: detected capacity change from 0 to 1024
[ 1119.384366][T28565] EXT4-fs: inline encryption not supported
[ 1119.438508][T28565] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1119.462719][   T28] audit: type=1326 audit(1750125771.924:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1119.485108][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.494628][   T28] audit: type=1326 audit(1750125771.956:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.516897][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.523768][   T28] audit: type=1326 audit(1750125771.956:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.546020][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.552760][   T28] audit: type=1326 audit(1750125771.956:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.553041][T28565] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4036: comm syz.5.8518: Allocating blocks 257-513 which overlap fs metadata
[ 1119.575077][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.576988][   T28] audit: type=1326 audit(1750125771.967:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.633295][   T28] audit: type=1326 audit(1750125771.967:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1119.655835][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.669443][T25951] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1119.678593][T28565] EXT4-fs (loop5): Remounting filesystem read-only
[ 1119.701547][   T28] audit: type=1326 audit(1750125771.967:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.733578][   T28] audit: type=1326 audit(1750125771.967:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.793352][   T28] audit: type=1326 audit(1750125771.967:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1119.835070][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1119.873121][T25951] usb 9-1: Using ep0 maxpacket: 16
[ 1119.890219][T25951] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1119.912112][   T28] audit: type=1326 audit(1750125771.967:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28566 comm="syz.9.8517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1119.934485][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1119.941197][T25951] usb 9-1: config 0 has no interface number 0
[ 1119.947373][T25951] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1119.974646][T25951] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1120.000635][T25951] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1120.010206][T25951] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1120.027180][T25951] usb 9-1: Product: syz
[ 1120.031401][T25951] usb 9-1: SerialNumber: syz
[ 1120.049326][T25951] usb 9-1: config 0 descriptor??
[ 1120.063268][T25951] cm109 9-1:0.8: invalid payload size 0, expected 4
[ 1120.077259][T25951] input: CM109 USB driver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.8/input/input40
[ 1120.300104][    C0] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1121.174340][T28584] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1121.277653][T28576] loop9: detected capacity change from 0 to 32768
[ 1121.287189][T28576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 scanned by syz.9.8520 (28576)
[ 1121.306865][T28576] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1121.327083][T28576] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm
[ 1121.352666][T28576] BTRFS info (device loop9): setting nodatasum
[ 1121.369352][T28576] BTRFS info (device loop9): doing ref verification
[ 1121.381712][T28576] BTRFS info (device loop9): use zlib compression, level 3
[ 1121.391864][T28576] BTRFS info (device loop9): force clearing of disk cache
[ 1121.408103][T28576] BTRFS info (device loop9): doing ref verification
[ 1121.418770][T28576] BTRFS info (device loop9): using free space tree
[ 1121.484000][T28576] BTRFS info (device loop9): enabling ssd optimizations
[ 1121.503958][T28576] BTRFS info (device loop9): auto enabling async discard
[ 1121.519798][T28576] BTRFS info (device loop9): rebuilding free space tree
[ 1121.566971][T28607] lo speed is unknown, defaulting to 1000
[ 1121.702571][T25867] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1122.171900][T25951] usb 9-1: USB disconnect, device number 9
[ 1122.199318][T25951] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1122.614604][T28610] loop9: detected capacity change from 0 to 40427
[ 1122.625641][T28610] F2FS-fs (loop9): invalid crc value
[ 1122.633356][T28610] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1122.682897][T28610] F2FS-fs (loop9): Start checkpoint disabled!
[ 1122.693163][T28610] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[ 1122.732375][T28610] syz.9.8527: attempt to access beyond end of device
[ 1122.732375][T28610] loop9: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[ 1122.746800][T28610] syz.9.8527: attempt to access beyond end of device
[ 1122.746800][T28610] loop9: rw=0, sector=45064, nr_sectors = 8 limit=40427
[ 1122.907161][   T42] kworker/u4:2: attempt to access beyond end of device
[ 1122.907161][   T42] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[ 1122.932254][   T42] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1122.940573][   T42] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1123.880613][T13309] IPVS: starting estimator thread 0...
[ 1123.975682][T28644] IPVS: using max 15 ests per chain, 36000 per kthread
[ 1124.891841][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[ 1124.892165][T28618] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1125.630772][T28618] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1125.640122][T28618] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1125.646336][T28618] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1125.774212][   T28] kauditd_printk_skb: 498 callbacks suppressed
[ 1125.774229][   T28] audit: type=1326 audit(1750125778.694:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1125.850749][   T28] audit: type=1326 audit(1750125778.737:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1125.923808][   T28] audit: type=1326 audit(1750125778.737:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.017589][   T28] audit: type=1326 audit(1750125778.769:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.101443][   T28] audit: type=1326 audit(1750125778.769:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.134659][T28658] lo speed is unknown, defaulting to 1000
[ 1126.177153][   T28] audit: type=1326 audit(1750125778.769:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.250985][   T28] audit: type=1326 audit(1750125778.769:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.307516][   T28] audit: type=1326 audit(1750125778.769:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.361713][   T28] audit: type=1326 audit(1750125778.769:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.391945][T28663] loop9: detected capacity change from 0 to 16
[ 1126.420074][T28663] erofs: (device loop9): mounted with root inode @ nid 36.
[ 1126.427990][   T28] audit: type=1326 audit(1750125778.769:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28649 comm="syz.9.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1126.576833][T28648] loop8: detected capacity change from 0 to 32768
[ 1126.577297][T25867] erofs: (device loop9): erofs_fill_dentries: bogus dirent @ nid 46
[ 1126.623926][T25867] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1126.626579][T28648] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.8542 (28648)
[ 1126.646719][T25867] erofs: (device loop9): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1126.677255][T28648] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1126.691606][T28648] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1126.707100][T28648] BTRFS info (device loop8): setting nodatasum
[ 1126.713519][T28648] BTRFS info (device loop8): doing ref verification
[ 1126.735983][T28648] BTRFS info (device loop8): use zlib compression, level 3
[ 1126.743289][T28648] BTRFS info (device loop8): force clearing of disk cache
[ 1126.790612][T28648] BTRFS info (device loop8): doing ref verification
[ 1126.800370][T28648] BTRFS info (device loop8): using free space tree
[ 1126.829241][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1126.912037][T28648] BTRFS info (device loop8): enabling ssd optimizations
[ 1126.929289][T28648] BTRFS info (device loop8): auto enabling async discard
[ 1126.953522][T28648] BTRFS info (device loop8): rebuilding free space tree
[ 1127.033553][T25951] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 1127.191562][T24880] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1127.256771][T25951] usb 10-1: Using ep0 maxpacket: 16
[ 1127.312924][T25951] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[ 1127.321092][T25951] usb 10-1: config 0 has no interface number 0
[ 1127.328891][T25951] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1127.345131][T25951] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1127.388328][T25951] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1127.416884][T25951] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1127.441164][T25951] usb 10-1: Product: syz
[ 1127.460400][T25951] usb 10-1: SerialNumber: syz
[ 1127.478672][T25951] usb 10-1: config 0 descriptor??
[ 1127.530493][T25951] cm109 10-1:0.8: invalid payload size 0, expected 4
[ 1127.549627][T25951] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input41
[ 1127.574161][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1127.872156][    C0] cm109 10-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1128.166756][T28695] netlink: 292 bytes leftover after parsing attributes in process `syz.8.8554'.
[ 1128.454000][T28699] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8555'.
[ 1129.512751][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1129.654079][T13638] usb 10-1: USB disconnect, device number 6
[ 1129.672013][T28718] lo speed is unknown, defaulting to 1000
[ 1129.709330][T13638] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1129.845074][T28725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8567'.
[ 1130.360886][T28732] loop5: detected capacity change from 0 to 16
[ 1130.388468][T28732] erofs: (device loop5): mounted with root inode @ nid 36.
[ 1130.508849][T13114] erofs: (device loop5): erofs_fill_dentries: bogus dirent @ nid 46
[ 1130.519480][T13114] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1130.530221][T13114] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89
[ 1132.420425][T28734] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1132.420540][ T5084] Bluetooth: hci1: command 0x0406 tx timeout
[ 1133.162936][T28734] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1133.171912][T28734] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1133.338024][T28751] input: syz1 as /devices/virtual/input/input42
[ 1133.802089][   T28] audit: type=1326 audit(1750125787.299:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.825867][   T28] audit: type=1326 audit(1750125787.309:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.861135][   T28] audit: type=1326 audit(1750125787.374:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.889515][   T28] audit: type=1326 audit(1750125787.406:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.913849][   T28] audit: type=1326 audit(1750125787.406:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.944426][   T28] audit: type=1326 audit(1750125787.406:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1133.972652][   T28] audit: type=1326 audit(1750125787.460:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1134.021577][   T28] audit: type=1326 audit(1750125787.460:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1134.069510][   T28] audit: type=1326 audit(1750125787.492:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1134.094948][   T28] audit: type=1326 audit(1750125787.492:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28776 comm="syz.5.8586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1134.229350][T28786] lo speed is unknown, defaulting to 1000
[ 1134.367218][ T5084] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1134.580171][T28796] ptrace attach of "./syz-executor exec"[24880] was attempted by "./syz-executor exec"[28796]
[ 1135.105088][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1136.037213][T13310] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1136.241703][T13310] usb 10-1: Using ep0 maxpacket: 32
[ 1136.262977][T13310] usb 10-1: config index 0 descriptor too short (expected 156, got 27)
[ 1136.285493][T13310] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1136.305464][T13310] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1136.325007][T13310] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1136.348007][T13310] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1136.381579][T13310] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1136.391232][T13310] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1136.407051][T13310] usb 10-1: Product: syz
[ 1136.422803][T13310] usb 10-1: Manufacturer: syz
[ 1136.427528][T13310] usb 10-1: SerialNumber: syz
[ 1136.453216][T13310] usb 10-1: config 0 descriptor??
[ 1136.471880][T13310] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1136.504288][T13310] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1136.709961][T25951] usb 10-1: USB disconnect, device number 7
[ 1136.728971][T25951] ldusb 10-1:0.0: LD USB Device #0 now disconnected
[ 1137.861013][T28892] sch_tbf: burst 19872 is lower than device lo mtu (39799) !
[ 1138.409133][T28914] loop5: detected capacity change from 0 to 1024
[ 1138.422024][T28914] EXT4-fs: Ignoring removed oldalloc option
[ 1138.439184][T28914] EXT4-fs: Ignoring removed orlov option
[ 1138.447395][T28914] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1138.502963][T28914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1138.613617][T28914] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4036: comm syz.5.8647: Allocating blocks 305-513 which overlap fs metadata
[ 1138.773599][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1139.179999][T28917] loop8: detected capacity change from 0 to 40427
[ 1139.192187][T28912] loop9: detected capacity change from 0 to 32768
[ 1139.207240][T28917] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x7ffff
[ 1139.214558][T28923] loop5: detected capacity change from 0 to 256
[ 1139.228578][T28923] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1139.238398][T28917] F2FS-fs (loop8): invalid crc value
[ 1139.240859][T28923] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[ 1139.276274][T28912] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1139.288240][T28917] F2FS-fs (loop8): Found nat_bits in checkpoint
[ 1139.292561][T28923] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[ 1139.374606][T28917] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 1139.429005][T28912] XFS (loop9): Ending clean mount
[ 1139.470966][T28912] XFS (loop9): Quotacheck needed: Please wait.
[ 1139.496105][T24880] syz-executor: attempt to access beyond end of device
[ 1139.496105][T24880] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1139.539095][T24880] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 1139.635495][T28912] XFS (loop9): Quotacheck: Done.
[ 1139.843375][T25867] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1139.917909][   T28] kauditd_printk_skb: 11 callbacks suppressed
[ 1139.917925][   T28] audit: type=1326 audit(1750125793.875:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28945 comm="syz.5.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1139.984587][   T28] audit: type=1326 audit(1750125793.875:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28945 comm="syz.5.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1140.070323][   T28] audit: type=1326 audit(1750125793.875:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28945 comm="syz.5.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1140.143029][   T28] audit: type=1326 audit(1750125793.908:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28945 comm="syz.5.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1140.240644][   T28] audit: type=1326 audit(1750125793.908:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28945 comm="syz.5.8657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f884d98e929 code=0x7ffc0000
[ 1140.451729][T28953] loop9: detected capacity change from 0 to 2048
[ 1140.495133][T28956] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1141.638968][T28973] xt_bpf: check failed: parse error
[ 1141.869161][T28967] loop8: detected capacity change from 0 to 32768
[ 1141.891465][T28967] XFS: attr2 mount option is deprecated.
[ 1141.955523][T28967] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1142.178098][T28967] XFS (loop8): Ending clean mount
[ 1142.207556][T28967] XFS (loop8): Quotacheck needed: Please wait.
[ 1142.251625][T28991] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1142.302944][T28967] XFS (loop8): Quotacheck: Done.
[ 1142.351646][T28967] XFS (loop8): User initiated shutdown received.
[ 1142.365703][T28967] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[ 1142.393757][T28967] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1142.487998][T24880] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1143.686434][   T28] audit: type=1326 audit(1750125797.910:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1143.740160][   T28] audit: type=1326 audit(1750125797.910:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1143.810032][   T28] audit: type=1326 audit(1750125797.910:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1143.893832][   T28] audit: type=1326 audit(1750125797.910:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1143.945042][   T28] audit: type=1326 audit(1750125797.910:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9836f8e929 code=0x7ffc0000
[ 1144.499492][T13310] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[ 1144.583446][   T28] kauditd_printk_skb: 625 callbacks suppressed
[ 1144.583462][   T28] audit: type=1326 audit(1750125798.875:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.674910][   T28] audit: type=1326 audit(1750125798.907:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.723797][   T28] audit: type=1326 audit(1750125798.907:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.757493][T13310] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1144.768979][T13310] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1144.775202][   T28] audit: type=1326 audit(1750125798.907:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.794226][T13310] usb 9-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[ 1144.840978][   T28] audit: type=1326 audit(1750125798.907:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.853561][T13310] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1144.894230][T13310] usb 9-1: config 0 descriptor??
[ 1144.900414][   T28] audit: type=1326 audit(1750125798.907:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1144.923994][T29035] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1144.961012][   T28] audit: type=1326 audit(1750125798.940:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1145.010095][T29037] loop5: detected capacity change from 0 to 32768
[ 1145.021450][   T28] audit: type=1326 audit(1750125798.940:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1145.046313][   T28] audit: type=1326 audit(1750125798.940:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1145.086867][   T28] audit: type=1326 audit(1750125798.940:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29024 comm="syz.9.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9836f2ab19 code=0x7ffc0000
[ 1145.127149][T29037] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1145.277002][T29037] XFS (loop5): Ending clean mount
[ 1145.352756][T13310] hid-rmi 0003:0461:4E72.0035: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.8-1/input0
[ 1145.388485][T13114] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1145.627995][T13310] usb 9-1: USB disconnect, device number 10
[ 1146.109512][T29062] syz.9.8700[29062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1146.109614][T29062] syz.9.8700[29062] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1146.174421][T29058] loop5: detected capacity change from 0 to 32768
[ 1146.207925][T29058] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.8698 (29058)
[ 1146.237842][T29058] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1146.257290][T29058] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[ 1146.268172][T29058] BTRFS info (device loop5): using free space tree
[ 1146.368986][T29058] BTRFS info (device loop5): enabling ssd optimizations
[ 1146.382715][T29058] BTRFS info (device loop5): auto enabling async discard
[ 1146.613074][T13114] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1147.031532][T29092] loop5: detected capacity change from 0 to 512
[ 1147.058817][T29092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1147.087969][T29092] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 1147.102221][T29092] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.8705: bg 0: block 248: padding at end of block bitmap is not set
[ 1147.128588][T29092] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.8705: Failed to acquire dquot type 1
[ 1147.156009][T29092] EXT4-fs (loop5): 1 truncate cleaned up
[ 1147.166538][T29092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1147.247190][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1147.550096][T29090] loop9: detected capacity change from 0 to 32768
[ 1147.569082][T29090] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1147.577900][T29090] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1147.604008][T29090] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1147.622954][T25951] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1147.629793][T25951] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1147.707313][T13638] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[ 1147.716460][T25951] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 92ms
[ 1147.723967][T25951] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1147.729319][T29090] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1147.897151][T13638] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1147.920378][T13638] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1147.938492][T13638] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1147.971998][T13638] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1148.007460][T13638] usb 1-1: Product: syz
[ 1148.016305][T13638] usb 1-1: Manufacturer: syz
[ 1148.051601][T13638] usb 1-1: SerialNumber: syz
[ 1148.065519][T13638] usb 1-1: config 0 descriptor??
[ 1148.101509][T13638] usb 1-1: selecting invalid altsetting 0
[ 1148.392577][T13638] usb 1-1: USB disconnect, device number 71
[ 1149.006152][T29133] syz.8.8719[29133] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1149.006293][T29133] syz.8.8719[29133] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1149.370463][T29143] loop5: detected capacity change from 0 to 1024
[ 1149.451653][T29143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1149.549557][   T28] kauditd_printk_skb: 92 callbacks suppressed
[ 1149.549575][   T28] audit: type=1800 audit(1750125804.197:2094): pid=29143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8723" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1149.678492][T29159] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1149.777465][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1150.654260][T29190] loop8: detected capacity change from 0 to 4096
[ 1151.401985][T29203] loop8: detected capacity change from 0 to 32768
[ 1151.414693][T29203] XFS: attr2 mount option is deprecated.
[ 1151.431427][T29203] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1151.551544][T29203] XFS (loop8): Ending clean mount
[ 1151.562972][T29203] XFS (loop8): Quotacheck needed: Please wait.
[ 1151.638120][T29203] XFS (loop8): Quotacheck: Done.
[ 1151.715801][T29203] XFS (loop8): User initiated shutdown received.
[ 1151.722390][T29203] XFS (loop8): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[ 1151.742767][T29203] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1151.792502][T24880] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1152.194846][T29230] loop5: detected capacity change from 0 to 32768
[ 1152.204290][T29230] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.8762 (29230)
[ 1152.230209][T29230] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1152.248148][T29230] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[ 1152.263925][T29230] BTRFS info (device loop5): using free space tree
[ 1152.306864][T29230] BTRFS info (device loop5): enabling ssd optimizations
[ 1152.314098][T29230] BTRFS info (device loop5): auto enabling async discard
[ 1152.488345][T13114] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1152.506071][T29251] loop9: detected capacity change from 0 to 512
[ 1152.513895][T29251] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1152.612377][T29251] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 2: comm syz.9.8774: invalid block
[ 1152.663162][T29251] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.8774: invalid indirect mapped block 10 (level 1)
[ 1152.691467][T29234] loop8: detected capacity change from 0 to 32768
[ 1152.697370][T29251] EXT4-fs error (device loop9): ext4_free_branches:1030: inode #13: comm syz.9.8774: invalid indirect mapped block 8 (level 1)
[ 1152.731836][T29234] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[ 1152.740410][T29251] EXT4-fs (loop9): 1 truncate cleaned up
[ 1152.758087][T29234] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[ 1152.775118][T29234] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[ 1152.775580][T29251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1152.788153][T13310] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[ 1152.803147][T13310] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[ 1152.881345][T13310] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 83ms
[ 1152.896775][T13310] gfs2: fsid=syz:syz.0: jid=0: Done
[ 1152.914714][T29234] gfs2: fsid=syz:syz.0: first mount done, others may mount
[ 1152.947435][T29256] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1153.078631][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1154.363836][T29283] loop5: detected capacity change from 0 to 32768
[ 1154.394945][T29283] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1154.447753][T29292] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1154.622612][T13114] ocfs2: Unmounting device (7,5) on (node local)
[ 1154.739865][T29297] lo speed is unknown, defaulting to 1000
[ 1155.259792][T29309] loop5: detected capacity change from 0 to 512
[ 1155.275686][T29309] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1155.299232][T29309] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 2: comm syz.5.8792: invalid block
[ 1155.325559][T29309] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8792: invalid indirect mapped block 10 (level 1)
[ 1155.357251][T29309] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.8792: invalid indirect mapped block 8 (level 1)
[ 1155.382909][T29309] EXT4-fs (loop5): 1 truncate cleaned up
[ 1155.393387][T29309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1155.499607][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1155.911530][T29326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1155.918892][T29326] IPv6: NLM_F_CREATE should be set when creating new route
[ 1155.977842][T29328] loop8: detected capacity change from 0 to 128
[ 1155.999816][T29328] EXT4-fs: Ignoring removed nobh option
[ 1156.051238][T29328] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1156.106423][T29328] ext4 filesystem being mounted at /372/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1156.188985][T29331] loop5: detected capacity change from 0 to 2048
[ 1156.246465][T29331] EXT4-fs: Ignoring removed i_version option
[ 1156.287970][T29331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1156.322197][T24880] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1156.340312][T29331] ext4 filesystem being mounted at /1499/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1156.464006][T29331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:439: comm syz.5.8791: bg 0: block 345: padding at end of block bitmap is not set
[ 1156.492713][T29331] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[ 1156.514415][T29331] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1156.514415][T29331] 
[ 1156.581579][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.692035][T29364] loop8: detected capacity change from 0 to 2048
[ 1157.705221][T29364] EXT4-fs: Ignoring removed i_version option
[ 1157.743265][T29364] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1157.755650][T29364] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1157.789326][T29372] loop5: detected capacity change from 0 to 512
[ 1157.789456][T29364] EXT4-fs error (device loop8): ext4_validate_block_bitmap:439: comm syz.8.8804: bg 0: block 345: padding at end of block bitmap is not set
[ 1157.818590][T29364] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[ 1157.832123][T29364] EXT4-fs (loop8): This should not happen!! Data will be lost
[ 1157.832123][T29364] 
[ 1157.844405][T29372] EXT4-fs: Ignoring removed bh option
[ 1157.852893][T29372] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1157.930194][T24880] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1157.946014][T29372] EXT4-fs (loop5): 1 truncate cleaned up
[ 1157.973124][T29372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1158.171868][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1158.329259][T29381] syzkaller1: entered promiscuous mode
[ 1158.344944][T29381] syzkaller1: entered allmulticast mode
[ 1158.577069][T29371] loop9: detected capacity change from 0 to 32768
[ 1158.589616][T29371] XFS: attr2 mount option is deprecated.
[ 1158.605926][T29385] lo speed is unknown, defaulting to 1000
[ 1158.652654][T29371] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1158.775292][T29371] XFS (loop9): Ending clean mount
[ 1158.790642][T29371] XFS (loop9): Quotacheck needed: Please wait.
[ 1158.894528][T29371] XFS (loop9): Quotacheck: Done.
[ 1159.002224][T29371] XFS (loop9): User initiated shutdown received.
[ 1159.011780][T29371] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[ 1159.034808][T29371] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[ 1159.126352][T25867] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1159.806895][T29416] netlink: 104 bytes leftover after parsing attributes in process `syz.9.8822'.
[ 1160.671566][T29413] loop8: detected capacity change from 0 to 32768
[ 1160.734627][T29413] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 1160.758654][T29429] loop9: detected capacity change from 0 to 1024
[ 1160.826901][T24880] ocfs2: Unmounting device (7,8) on (node local)
[ 1160.843736][T29429] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[ 1160.877658][T29429] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[ 1160.918784][T29429] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.8827: Failed to acquire dquot type 0
[ 1160.981376][T29429] EXT4-fs error (device loop9): mb_free_blocks:1943: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[ 1161.025075][T29429] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #13: comm syz.9.8827: corrupted inode contents
[ 1161.055628][T29429] EXT4-fs error (device loop9): ext4_dirty_inode:6100: inode #13: comm syz.9.8827: mark_inode_dirty error
[ 1161.081568][T29429] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #13: comm syz.9.8827: corrupted inode contents
[ 1161.144764][T29429] EXT4-fs error (device loop9): __ext4_ext_dirty:202: inode #13: comm syz.9.8827: mark_inode_dirty error
[ 1161.177376][T29429] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #13: comm syz.9.8827: corrupted inode contents
[ 1161.217832][T29429] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[ 1161.267529][T29429] EXT4-fs error (device loop9): ext4_do_update_inode:5224: inode #13: comm syz.9.8827: corrupted inode contents
[ 1161.300858][T29429] EXT4-fs error (device loop9): ext4_truncate:4283: inode #13: comm syz.9.8827: mark_inode_dirty error
[ 1161.338285][T13671] libceph: connect (1)[c::]:6789 error -101
[ 1161.348164][T13671] libceph: mon0 (1)[c::]:6789 connect error
[ 1161.360747][T29429] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[ 1161.400432][T13671] libceph: connect (1)[c::]:6789 error -101
[ 1161.406549][T13671] libceph: mon0 (1)[c::]:6789 connect error
[ 1161.424299][T29429] EXT4-fs (loop9): 1 truncate cleaned up
[ 1161.433170][T29429] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1161.494856][T29429] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1161.557620][T29429] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended
[ 1161.586928][T29429] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[ 1161.596501][T29429] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[ 1161.618060][T29429] EXT4-fs error (device loop9): ext4_acquire_dquot:6938: comm syz.9.8827: Failed to acquire dquot type 0
[ 1161.639346][T29429] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1161.701590][T13671] libceph: connect (1)[c::]:6789 error -101
[ 1161.708161][T13671] libceph: mon0 (1)[c::]:6789 connect error
[ 1161.718872][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1162.045641][T29439] ceph: No mds server is up or the cluster is laggy
[ 1162.108235][T13638] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1162.283728][T13638] usb 6-1: Using ep0 maxpacket: 32
[ 1162.291101][T13638] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1162.309569][T13638] usb 6-1: config 0 has no interface number 0
[ 1162.319510][T13638] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1162.348963][T13638] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1162.367375][T13638] usb 6-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1162.386248][T13638] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1162.396902][T13638] usb 6-1: config 0 descriptor??
[ 1162.918696][T29458] loop9: detected capacity change from 0 to 40427
[ 1162.932593][T29461] loop8: detected capacity change from 0 to 32768
[ 1162.940948][T29458] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x7ffff
[ 1162.955597][T29461] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.8837 (29461)
[ 1162.962918][T29458] F2FS-fs (loop9): invalid crc value
[ 1162.984838][T13638] uclogic 0003:28BD:0094.0036: pen parameters not found
[ 1162.987262][T29458] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1162.992407][T29461] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1162.992497][T29461] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm
[ 1163.027533][T13638] uclogic 0003:28BD:0094.0036: interface is invalid, ignoring
[ 1163.029665][T29461] BTRFS info (device loop8): using free space tree
[ 1163.130043][T29458] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1163.156989][T29461] BTRFS info (device loop8): enabling ssd optimizations
[ 1163.178296][T29461] BTRFS info (device loop8): auto enabling async discard
[ 1163.224061][T13671] usb 6-1: USB disconnect, device number 44
[ 1163.387370][T25867] syz-executor: attempt to access beyond end of device
[ 1163.387370][T25867] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1163.414932][T24880] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1163.425464][T25867] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[ 1163.623355][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1164.479745][T29518] loop9: detected capacity change from 0 to 1024
[ 1164.504643][T29514] netlink: 'syz.5.8863': attribute type 2 has an invalid length.
[ 1164.681962][T29520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1164.689290][T29520] IPv6: NLM_F_CREATE should be set when creating new route
[ 1164.824404][T29512] loop8: detected capacity change from 0 to 32768
[ 1164.833380][T29512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.8851 (29512)
[ 1164.850031][T29512] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1164.861184][T29512] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1164.870893][T29512] BTRFS info (device loop8): turning on sync discard
[ 1164.883904][T29512] BTRFS info (device loop8): doing ref verification
[ 1164.892867][T29512] BTRFS info (device loop8): use zlib compression, level 3
[ 1164.906074][T29512] BTRFS info (device loop8): force clearing of disk cache
[ 1164.932498][T29512] BTRFS info (device loop8): setting nodatacow, compression disabled
[ 1164.950716][T29512] BTRFS info (device loop8): doing ref verification
[ 1164.957399][T29512] BTRFS info (device loop8): doing ref verification
[ 1164.974439][T29512] BTRFS info (device loop8): using free space tree
[ 1165.060849][T29512] BTRFS info (device loop8): enabling ssd optimizations
[ 1165.083569][T29512] BTRFS info (device loop8): rebuilding free space tree
[ 1165.168790][   T28] audit: type=1800 audit(1750125820.966:2095): pid=29512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8851" name="bus" dev="loop8" ino=263 res=0 errno=0
[ 1165.195573][   T28] audit: type=1800 audit(1750125820.988:2096): pid=29512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8851" name="bus" dev="loop8" ino=263 res=0 errno=0
[ 1165.219682][ T5874] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[ 1165.293159][T24880] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1165.439658][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1165.469418][ T5874] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1165.480862][ T5874] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[ 1165.490179][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1165.530482][ T5874] usb 6-1: config 0 descriptor??
[ 1165.546253][T29522] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1165.900494][T29560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1165.907812][T29560] IPv6: NLM_F_CREATE should be set when creating new route
[ 1165.955715][ T5874] hid-rmi 0003:0461:4E72.0037: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.5-1/input0
[ 1166.167999][T13671] usb 6-1: USB disconnect, device number 45
[ 1166.478236][T29572] loop8: detected capacity change from 0 to 256
[ 1166.485836][T29572] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1166.505332][T29572] exFAT-fs (loop8): Medium has reported failures. Some data may be lost.
[ 1166.527039][T29572] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[ 1166.660030][T29557] ceph: No mds server is up or the cluster is laggy
[ 1166.844038][T29578] loop5: detected capacity change from 0 to 256
[ 1166.870826][T29578] exfat: Deprecated parameter 'utf8'
[ 1166.958598][T29578] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1167.395470][T29582] loop8: detected capacity change from 0 to 32768
[ 1167.408093][T29582] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1167.467456][T29582] XFS (loop8): Ending clean mount
[ 1167.481480][T29582] XFS (loop8): Quotacheck needed: Please wait.
[ 1167.538577][T29582] XFS (loop8): Quotacheck: Done.
[ 1167.625480][T24880] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1167.665663][T29600] loop9: detected capacity change from 0 to 256
[ 1167.677654][T29600] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1167.693875][T29602] netlink: 'syz.5.8892': attribute type 3 has an invalid length.
[ 1167.699278][T29600] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[ 1167.702759][T29602] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.8892'.
[ 1167.747243][T29600] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x43c9847d, utbl_chksum : 0xe619d30d)
[ 1167.883540][ T5874] libceph: connect (1)[c::]:6789 error -101
[ 1167.889890][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[ 1167.944640][T29610] netlink: 'syz.9.8887': attribute type 2 has an invalid length.
[ 1168.117804][T25951] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[ 1168.146619][ T5874] libceph: connect (1)[c::]:6789 error -101
[ 1168.152953][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[ 1168.299756][ T1286] ieee802154 phy0 wpan0: encryption failed: -22
[ 1168.304720][T25951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1168.313893][ T1286] ieee802154 phy1 wpan1: encryption failed: -22
[ 1168.318315][T25951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1168.335784][T25951] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[ 1168.345324][T25951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1168.356848][T25951] usb 1-1: config 0 descriptor??
[ 1168.363157][T29605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1168.632560][T29606] ceph: No mds server is up or the cluster is laggy
[ 1168.640312][ T5874] libceph: connect (1)[c::]:6789 error -101
[ 1168.646402][ T5874] libceph: mon0 (1)[c::]:6789 connect error
[ 1168.770898][T25951] hid-rmi 0003:0461:4E72.0038: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0
[ 1168.992174][T13310] usb 1-1: USB disconnect, device number 72
[ 1170.039593][T29638] netlink: 'syz.8.8899': attribute type 2 has an invalid length.
[ 1170.040656][T29640] Invalid ELF header magic: != ELF
[ 1170.284190][T29646] loop8: detected capacity change from 0 to 128
[ 1170.363374][T29650] input: syz0 as /devices/virtual/input/input43
[ 1170.408793][T29621] loop5: detected capacity change from 0 to 40427
[ 1170.418649][T29621] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x7ffff
[ 1170.444207][T29621] F2FS-fs (loop5): invalid crc value
[ 1170.486898][T29621] F2FS-fs (loop5): Found nat_bits in checkpoint
[ 1170.634414][T29621] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1170.821840][T13114] syz-executor: attempt to access beyond end of device
[ 1170.821840][T13114] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1170.851882][T13114] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1171.281563][T29681] loop8: detected capacity change from 0 to 7
[ 1171.299965][T29683] batadv_slave_0: entered promiscuous mode
[ 1171.308250][T29682] batadv_slave_0: left promiscuous mode
[ 1171.318876][T29681] Dev loop8: unable to read RDB block 7
[ 1171.322907][T29684] vxcan0: tx drop: invalid sa for name 0x0000001000000000
[ 1171.325226][T29681]  loop8: unable to read partition table
[ 1171.362096][T29681] loop8: partition table beyond EOD, truncated
[ 1171.368339][T29681] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1171.570417][T29695] loop9: detected capacity change from 0 to 256
[ 1171.597113][T29695] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1171.699640][T29699] loop8: detected capacity change from 0 to 128
[ 1171.827342][ T5874] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1172.004547][ T5874] usb 6-1: Using ep0 maxpacket: 8
[ 1172.012134][ T5874] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1172.025349][ T5874] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1172.034559][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1172.046054][ T5874] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1172.063174][ T5874] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1172.074764][ T5874] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.092527][ T5874] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1172.098775][ T5874] hub: probe of 6-1:1.0 failed with error -5
[ 1172.105225][ T5874] cdc_wdm 6-1:1.0: skipping garbage
[ 1172.110885][ T5874] cdc_wdm 6-1:1.0: skipping garbage
[ 1172.117687][ T5874] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1172.123627][ T5874] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1172.172253][T13671] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[ 1172.349409][T13671] usb 9-1: Using ep0 maxpacket: 32
[ 1172.356921][T13671] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1172.368140][T13671] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1172.380270][T13671] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1172.397994][T13671] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1172.406583][T13671] usb 9-1: Product: syz
[ 1172.410783][T13671] usb 9-1: Manufacturer: syz
[ 1172.427789][T13671] hub 9-1:4.0: USB hub found
[ 1172.570207][T13310] usb 6-1: reset high-speed USB device number 46 using dummy_hcd
[ 1172.629310][T13671] hub 9-1:4.0: 2 ports detected
[ 1173.113741][ T5874] usb 6-1: USB disconnect, device number 46
[ 1173.208077][T13671] usb 9-1: USB disconnect, device number 11
[ 1173.622004][T29733] program syz.9.8941 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1173.979697][T29747] netlink: 76 bytes leftover after parsing attributes in process `syz.9.8948'.
[ 1174.540301][T29763] loop8: detected capacity change from 0 to 32768
[ 1174.548555][T29763] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.8954 (29763)
[ 1174.598924][T29763] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1174.609291][T29763] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1174.618076][T29763] BTRFS info (device loop8): enabling disk space caching
[ 1174.627583][T29763] BTRFS info (device loop8): turning off barriers
[ 1174.634126][T29763] BTRFS info (device loop8): force clearing of disk cache
[ 1174.641290][T29763] BTRFS info (device loop8): enabling ssd optimizations
[ 1174.648413][T29763] BTRFS info (device loop8): using spread ssd allocation scheme
[ 1174.656180][T29763] BTRFS info (device loop8): enabling free space tree
[ 1174.663085][T29763] BTRFS info (device loop8): using free space tree
[ 1174.731225][T29763] BTRFS info (device loop8): rebuilding free space tree
[ 1174.751593][T29763] BTRFS info (device loop8): checking UUID tree
[ 1174.893351][T24880] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1175.068865][T29794] veth1_to_bond: entered allmulticast mode
[ 1175.128781][T29794] veth1_to_bond: entered promiscuous mode
[ 1175.148506][T29793] veth1_to_bond: left promiscuous mode
[ 1175.154235][T29793] veth1_to_bond: left allmulticast mode
[ 1175.533114][T29809] loop5: detected capacity change from 0 to 512
[ 1175.545662][T29809] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[ 1175.574023][T29809] EXT4-fs (loop5): 1 truncate cleaned up
[ 1175.581414][T29809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1175.583544][T13309] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1175.701341][T13114] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1175.798333][T13309] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1175.824826][T13309] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1175.837657][T13309] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1175.847977][T13309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.860240][T29803] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1175.870618][T13309] usb 10-1: Quirk or no altest; falling back to MIDI 1.0
[ 1176.094832][ T5874] usb 10-1: USB disconnect, device number 8
[ 1176.179726][T29820] loop8: detected capacity change from 0 to 128
[ 1176.200716][   T28] audit: type=1800 audit(1750125832.800:2097): pid=29820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8979" name="file1" dev="loop8" ino=1048861 res=0 errno=0
[ 1176.230283][T29820] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1176.238916][T29820] FAT-fs (loop8): Filesystem has been set read-only
[ 1176.247440][T29820] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522)
[ 1176.254991][T13638] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1176.717135][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1176.935722][ T5874] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1177.331856][T29843] loop8: detected capacity change from 0 to 32768
[ 1177.344530][T29843] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 scanned by syz.8.8981 (29843)
[ 1177.369382][T29843] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1177.380081][T29843] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm
[ 1177.389693][T29843] BTRFS info (device loop8): doing ref verification
[ 1177.396773][T29843] BTRFS info (device loop8): turning on async discard
[ 1177.404253][T29843] BTRFS info (device loop8): force clearing of disk cache
[ 1177.422354][T29843] BTRFS info (device loop8): doing ref verification
[ 1177.429143][T29843] BTRFS info (device loop8): disabling free space tree
[ 1177.465605][T29843] BTRFS info (device loop8): max_inline at 4096
[ 1177.561753][T29843] BTRFS info (device loop8): rebuilding free space tree
[ 1177.597916][T29845] loop5: detected capacity change from 0 to 32768
[ 1177.626625][T29843] BTRFS info (device loop8): disabling free space tree
[ 1177.633627][T29843] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1177.651339][T29843] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1177.705954][T29845] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1177.852729][T13114] ocfs2: Unmounting device (7,5) on (node local)
[ 1178.095472][T29886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8991'.
[ 1178.157748][T29887] loop9: detected capacity change from 0 to 512
[ 1178.181644][T29887] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.8993: bad orphan inode 11862016
[ 1178.247815][T29887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[ 1178.283770][T29887] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1178.297321][T24880] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1178.568509][T29887] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000d40000 ro.
[ 1178.774301][T25867] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[ 1179.198123][T29897] loop5: detected capacity change from 0 to 32768
[ 1179.207940][T29897] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.8997 (29897)
[ 1179.258290][T29897] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1179.272227][T29897] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[ 1179.281320][T29897] BTRFS info (device loop5): turning on sync discard
[ 1179.288570][T29897] BTRFS info (device loop5): doing ref verification
[ 1179.296693][T29897] BTRFS info (device loop5): use zlib compression, level 3
[ 1179.308367][T29897] BTRFS info (device loop5): force clearing of disk cache
[ 1179.316918][T29897] BTRFS info (device loop5): setting nodatacow, compression disabled
[ 1179.333905][T29897] BTRFS info (device loop5): doing ref verification
[ 1179.346574][T29897] BTRFS info (device loop5): doing ref verification
[ 1179.354603][T29897] BTRFS info (device loop5): using free space tree
[ 1179.453551][T29897] BTRFS info (device loop5): enabling ssd optimizations
[ 1179.465974][T29897] BTRFS info (device loop5): rebuilding free space tree
[ 1179.597122][   T28] audit: type=1800 audit(1750125836.437:2098): pid=29897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8997" name="bus" dev="loop5" ino=263 res=0 errno=0
[ 1179.624830][   T28] audit: type=1800 audit(1750125836.470:2099): pid=29897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.8997" name="bus" dev="loop5" ino=263 res=0 errno=0
[ 1179.628434][T29932] loop9: detected capacity change from 0 to 128
[ 1179.673931][T29932] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1179.688592][T29932] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1179.706430][T13114] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1179.790753][T29932] EXT4-fs error (device loop9): dx_make_map:1328: inode #2: block 18: comm syz.9.9003: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[ 1179.831422][T29932] EXT4-fs (loop9): Remounting filesystem read-only
[ 1179.928557][T25867] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1180.155199][T29938] loop5: detected capacity change from 0 to 128
[ 1180.194373][   T28] audit: type=1800 audit(1750125837.081:2100): pid=29938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9004" name="file1" dev="loop5" ino=1048862 res=0 errno=0
[ 1180.300714][T20404] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1180.308866][T20404] FAT-fs (loop5): Filesystem has been set read-only
[ 1180.324327][T20404] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522)
[ 1180.398984][T29944] netlink: 'syz.9.9010': attribute type 29 has an invalid length.
[ 1180.423346][T29944] netlink: 'syz.9.9010': attribute type 29 has an invalid length.
[ 1180.475793][T29944] netlink: 'syz.9.9010': attribute type 29 has an invalid length.
[ 1180.549256][T29950] iommufd_mock iommufd_mock1: Adding to iommu group 0
[ 1180.750945][T29961] loop8: detected capacity change from 0 to 128
[ 1180.778639][   T28] audit: type=1800 audit(1750125837.714:2101): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.9017" name="file1" dev="loop8" ino=1048863 res=0 errno=0
[ 1180.850539][T20404] FAT-fs (loop8): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1180.865480][T20404] FAT-fs (loop8): Filesystem has been set read-only
[ 1180.873764][T20404] FAT-fs (loop8): error, corrupted file size (i_pos 548, 522)
[ 1180.894096][T29964] loop9: detected capacity change from 0 to 1024
[ 1180.982136][ T3508] hfsplus: b-tree write err: -5, ino 4
[ 1181.146148][T29972] loop8: detected capacity change from 0 to 7
[ 1181.155525][T29972] Dev loop8: unable to read RDB block 7
[ 1181.162935][T29972]  loop8: AHDI p1 p3 p4
[ 1181.168629][T29972] loop8: partition table partially beyond EOD, truncated
[ 1181.175814][T29972] loop8: p1 start 975770946 is beyond EOD, truncated
[ 1181.183247][T29972] loop8: p3 start 6514546 is beyond EOD, truncated
[ 1181.585164][T29990] loop9: detected capacity change from 0 to 1024
[ 1181.701717][T29993] input: syz1 as /devices/virtual/input/input44
[ 1181.708972][T20404] hfsplus: b-tree write err: -5, ino 4
[ 1181.715429][T29993] input: failed to attach handler leds to device input44, error: -6
[ 1183.282697][T13309] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[ 1183.515172][T29712] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1184.417169][  T135] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.724782][  T135] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1184.775575][T13309] usb 9-1: device descriptor read/all, error -71
[ 1184.890127][  T135] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.031903][  T135] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1185.193164][  T135] tipc: Disabling bearer <udp:s>
[ 1185.215277][  T135] tipc: Left network mode
[ 1185.741127][  T135] gretap0 (unregistering): left allmulticast mode
[ 1185.932216][  T135] IPVS: stopping master sync thread 20397 ...
[ 1186.146959][  T135] hsr_slave_0: left promiscuous mode
[ 1186.162039][  T135] hsr_slave_1: left promiscuous mode
[ 1186.169773][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1186.177502][  T135] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1186.187328][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1186.194962][  T135] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1186.203231][  T135] bridge_slave_1: left allmulticast mode
[ 1186.208907][  T135] bridge_slave_1: left promiscuous mode
[ 1186.214796][  T135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1186.223965][  T135] bridge_slave_0: left allmulticast mode
[ 1186.229795][  T135] bridge_slave_0: left promiscuous mode
[ 1186.235591][  T135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1186.283615][  T135] veth1_macvtap: left promiscuous mode
[ 1186.289871][  T135] veth0_macvtap: left promiscuous mode
[ 1186.296126][  T135] veth1_vlan: left promiscuous mode
[ 1186.301543][  T135] veth0_vlan: left promiscuous mode
[ 1186.457739][  T135] bond1 (unregistering): Released all slaves
[ 1187.215349][  T135] team_slave_1 (unregistering): left promiscuous mode
[ 1187.244078][  T135] team0 (unregistering): Port device team_slave_1 removed
[ 1187.312589][  T135] team_slave_0 (unregistering): left promiscuous mode
[ 1187.324058][  T135] team0 (unregistering): Port device team_slave_0 removed
[ 1187.401362][  T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1187.410548][  T135] bond_slave_1 (unregistering): left promiscuous mode
[ 1187.482822][  T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1187.491944][  T135] bond_slave_0 (unregistering): left promiscuous mode
[ 1187.838602][  T135] bond0 (unregistering): (slave batadv0): Releasing backup interface
[ 1187.848822][  T135] batadv0 (unregistering): left promiscuous mode
[ 1188.347797][  T135] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1188.357084][  T135] bond0 (unregistering): Released all slaves
[ 1188.448270][  T135] lo (unregistering): left allmulticast mode
[ 1188.753431][  T135] IPVS: stop unused estimator thread 0...
[ 1188.850176][  T135] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1188.954355][  T135] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.035710][  T135] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.120303][  T135] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1189.260300][  T135] tipc: Disabling bearer <udp:s>
[ 1189.265533][  T135] tipc: Left network mode
[ 1189.840598][  T135] gretap0 (unregistering): left allmulticast mode
[ 1190.343384][  T135] hsr_slave_0: left promiscuous mode
[ 1190.350159][  T135] hsr_slave_1: left promiscuous mode
[ 1190.356281][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1190.364166][  T135] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1190.377745][  T135] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1190.386097][  T135] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1190.393898][  T135] bridge_slave_1: left allmulticast mode
[ 1190.399923][  T135] bridge_slave_1: left promiscuous mode
[ 1190.405846][  T135] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1190.415314][  T135] bridge_slave_0: left allmulticast mode
[ 1190.421013][  T135] bridge_slave_0: left promiscuous mode
[ 1190.426923][  T135] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1190.465204][  T135] veth1_macvtap: left promiscuous mode
[ 1190.472976][  T135] veth0_macvtap: left promiscuous mode
[ 1190.478872][  T135] veth1_vlan: left promiscuous mode
[ 1190.484226][  T135] veth0_vlan: left promiscuous mode
[ 1191.323052][  T135] team_slave_1 (unregistering): left promiscuous mode
[ 1191.341632][  T135] team0 (unregistering): Port device team_slave_1 removed
[ 1191.410581][  T135] team_slave_0 (unregistering): left promiscuous mode
[ 1191.418697][  T135] team0 (unregistering): Port device team_slave_0 removed
[ 1191.491683][  T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1191.500751][  T135] bond_slave_1 (unregistering): left promiscuous mode
[ 1191.580504][  T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1191.589808][  T135] bond_slave_0 (unregistering): left promiscuous mode
[ 1192.424959][  T135] bond0 (unregistering): (slave bridge0): Releasing backup interface
[ 1192.433845][  T135] bond0 (unregistering): Released all slaves