last executing test programs:

15m34.120572114s ago: executing program 32 (id=744):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='gid=', @ANYRESOCT])
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='tracefs\x00', 0x210000, &(0x7f0000000100))

15m9.199813837s ago: executing program 33 (id=874):
syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000001080)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@flush}, {@uni_xlate}, {@numtail}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_win95}, {@shortname_lower}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@shortname_win95}, {@shortname_lower}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$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")
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0)

15m1.758755256s ago: executing program 34 (id=898):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x4, 0x2, 0x5, 0x1ff, 0x2, "00120dd608f500001e20000080008000"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xd)

13m51.923885796s ago: executing program 35 (id=1304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)={0x24, r2, 0x905, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c0}, 0x40)

13m5.945721518s ago: executing program 5 (id=1520):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}, {{&(0x7f0000000600)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000a40)='~', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f00000001c0)=0x8)

13m5.511547168s ago: executing program 5 (id=1522):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

13m4.377599386s ago: executing program 5 (id=1525):
io_uring_setup(0x4a86, &(0x7f0000000000)={0x0, 0x4178, 0x40, 0x8001002, 0x112})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10)
sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0)

13m3.999929515s ago: executing program 5 (id=1526):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80)
getdents64(r0, &(0x7f0000000180)=""/42, 0x2a)

13m3.693914583s ago: executing program 5 (id=1527):
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0)
r1 = dup(r0)
ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)={0x206})

13m2.677773737s ago: executing program 5 (id=1532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0)

13m2.058740512s ago: executing program 36 (id=1532):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0)

10m18.648375675s ago: executing program 2 (id=2534):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000280)={0x1, 0x0, [{0x7, 0x1, 0x7, 0x9, 0x6b4000, 0xfff, 0x7}]})

10m17.485385453s ago: executing program 2 (id=2540):
mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0)
openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/events/mac80211/enable\x00', &(0x7f0000000140), 0x0)

10m17.285746377s ago: executing program 2 (id=2541):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f00000004c0)=[{0x48, 0x9, 0x0, 0xa}, {0x6, 0x1, 0xf7}]})
pwritev(r0, &(0x7f0000000840)=[{&(0x7f0000000400)="403fe6aac0024e7f6d6b", 0xa}], 0x1, 0x1, 0x0)

10m17.026905974s ago: executing program 2 (id=2543):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x2000, 0x0, 0x10}, 0x18)

10m16.78639801s ago: executing program 2 (id=2545):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10)
syz_emit_ethernet(0x73, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x65, 0x68, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x1, 0x4e24, 0x51, 0x0, @opaque="c1ab386ff764497ba5a7a7c1361d5ce820c4c61450de13041e68332caa2575504a5100853b63837e8186a48a43bb6ba9e28886b94ac37670b3fdef4c6c277c8d041fab6e700f44ce61"}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1, 0x0)

10m16.141923345s ago: executing program 2 (id=2550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x38}}, 0x0)

10m15.607692938s ago: executing program 37 (id=2550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x38}}, 0x0)

5m21.695452098s ago: executing program 8 (id=4085):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)="01303030303030203230111714b89392c4e8dad6fb3bfd2d2d1a690d6cd23a2bf40d8b78fb53c58662ad390df129840a", 0x30)

5m21.329130126s ago: executing program 8 (id=4086):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgsnd(0x0, 0x0, 0x8, 0x0)

5m19.074827051s ago: executing program 8 (id=4094):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

5m18.679666411s ago: executing program 8 (id=4096):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40084146, &(0x7f0000000300))

5m18.079831395s ago: executing program 8 (id=4101):
unshare(0x22040400)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYBLOB='&2'], 0x1, 0x374, &(0x7f0000000f80)="$eJzs3c9rI2UYwPEnbX5MWrbJQRQF6YNe9DK01bMaZBfEgEt3I+4Kwux2oiFjUmZCJCK2N6/izX9AcNnjgocF9R/oxdt68eLJXgRBFxFH5leapJMfjSmb7n4/0OZJ3veZed/84nkDeXP83pcfN+ueWbc6smKoZEREHoqUZUUSmegiLykO5eX1Px48f+3Gzbcr1erlXdUrleuv7Kjqxub3n3xWjLvdL8hR+YNjMX49evro2eN/r3/U8LThaavdUUtvtX/pWLccW/caXtNUverYlmdro+XZbtTejtrrTnt/v6dWa+/S2r5re55arZ427Z522tpxe2p9aDVaapqmXlpLG+5jzJgjp3Znd9eqzHnC23PmYdH+9n1/QrPrVqxVEbN4qqV251zHBQAAltJI/f91UiOUZaVfUGbitUA+jIeXAUH9n8Rh/R8sFk7q/7sv/NhZf/feRlz/38+n1f+v/hzlD9X/wdkXXv9/O3L9dEV04R2cpfP/qv+xHDaHX5G/nazYY0H9H7wa+iv63Pt3t8KA+h8AAAAAAAAAAAAAAAAAAAAAgIvgoe+XfN8vJZfJ38lXCOLrybVJXzTGhTPu8S/EOwr0nw94LF27cVOM8It72Q0R54turVuLLuP2pOOWlOSf8PkQizacOAwbNVCWH5yDbi0XJ6yG/ysiKo7Ysi0lKQ/lh/GVt6qXtzUS5YfnP+jWMtm1IL8ujTB/R0ryVHr+Tmp+Xl56cSDflJL8dFva4she/D6W5H++rfrmO9WR/GLYL83r5/uQAAAAAACwcKaqES+fy8Pr32j9bpqqae3BWl4G1+enPx/or6+3Utfn2dJz2Uc7dwAAAAAAnhRe/tOm5Ti26/XGBkWZ1qcQH22kKStTjhwE2Rn6DAUPwiA3qc/qwAxnPXI+/gWNWYfhej2ZecxJ8GdBUu/MZAvXoSYj/V6dMUjmP0Nn46wPgeutnH3ututtBuPRuaYzECQfG43rI1fnPfK4INk5d1rnZ7765q/5TpGJd+0dbHrtnjFlpmGQGbnlcMqT9nffD17UE8eTS3+3+G6eH5kBAAAAsCSSor/oJbe8MSVj/fwHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAE2ah26SNCR71HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBl8V8AAAD//1f39NU=")
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x20000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000140)={@desc={0x1, 0x0, @desc3}})

5m17.082246109s ago: executing program 8 (id=4108):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)
recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

5m2.003664714s ago: executing program 38 (id=4108):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000001280), 0x6)
recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0)

3m40.395712068s ago: executing program 7 (id=4565):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@local, 0x6f, r1})

3m40.093240925s ago: executing program 7 (id=4566):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r0, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

3m39.657323186s ago: executing program 7 (id=4569):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0xd)

3m39.101650879s ago: executing program 7 (id=4572):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x36, 0x8001, 0xc445, 0x3, 0xfa, 0x4}, 0xc)
listen(r0, 0x80000000)

3m38.608536591s ago: executing program 7 (id=4575):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0xc0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=""/195, 0xc3)

3m38.008948836s ago: executing program 7 (id=4577):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

3m22.93468209s ago: executing program 39 (id=4577):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0)

1m50.054881828s ago: executing program 1 (id=5017):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x80}}, 0x0, 0x8, 0x0, 0x0, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000640)='@', 0x1, 0x20000000, &(0x7f00000002c0)={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x53}, 0x2}, 0x1c)

1m48.663329131s ago: executing program 1 (id=5019):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000d00)=ANY=[@ANYBLOB="00fe67a4c64696ae517061fb7bd5706172743d3078303030303030303020303030303061302c66696c655f756d61736b3d30303030303030303030303030003030303030303030372c636f646570616765743d61736369692c00000000000000000000000000000020"], 0x9, 0x344, &(0x7f0000000980)="$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")
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000000)='./bus/file1\x00')

1m47.938220099s ago: executing program 1 (id=5022):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000180)={[{@dioread_nolock}, {@barrier_val={'barrier', 0x3d, 0xd}}, {@minixdf}, {@stripe={'stripe', 0x3d, 0xb74}}, {@resuid}, {@jqfmt_vfsv1}, {@grpjquota}, {@i_version}]}, 0x1, 0x4c7, &(0x7f0000000f00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18f443, 0x10c)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1m46.591063742s ago: executing program 1 (id=5027):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000006400)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303235342c6c6f6e6761642c756d61736b3d30303030303030303030303030303030303137373737372c646d6f64653d30303030303030303030303030303030303030303430302c756e686964652c73686f727461642c616e63686f723d30303030303030303030303030303030303030372c6e6f7374726963742c696f636861727365743d6b6f69382d72752c00263468691e626cd4f6d91d6fed4bb42a4515346a98d55253771fadd9bb31ceaa8d7647a551ee49f3b17bfc6ae1090b228307b8fdc1935c7e8cbbf9aea203bd"], 0x1, 0xc65, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x283016, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_off}]})

1m44.62960605s ago: executing program 1 (id=5039):
ftruncate(0xffffffffffffffff, 0x3)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x9, {"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", 0x1000}}, 0x1006)

1m43.665833534s ago: executing program 1 (id=5047):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fanotify_mark(0xffffffffffffffff, 0x574945db5765d52f, 0x11, 0xffffffffffffffff, 0x0)

1m42.870559624s ago: executing program 40 (id=5047):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fanotify_mark(0xffffffffffffffff, 0x574945db5765d52f, 0x11, 0xffffffffffffffff, 0x0)

1m14.487828248s ago: executing program 6 (id=5186):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010)

1m14.208252405s ago: executing program 6 (id=5189):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x6c0, 0x1, 0x1, 0x0, 0x5e})

1m13.863605483s ago: executing program 6 (id=5192):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x23}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m13.606050249s ago: executing program 6 (id=5195):
syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x200005c, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'cp866'}}]}, 0x1, 0x152b, &(0x7f0000002780)="$eJzs3AmYjtXbAPD7Puc8Y0zS2yTLcM65H95kOSZJsiTJkiRJkmRLSJrkLwmJIVvSkIRkGZJlCMkyMWns+74kJEmTJCHZkvNdir/66r8vvuub+3ddzzXnfs9zn+c87/0+8yyzfNN5SI1GNas2ICL4l+AvX5IBIBYABgDANQAQAEDZ+LLxF/pzSkz+1zbC/r0eSrvSM2BXEtc/e+P6Z29c/+yN65+9cf2zN65/9sb1z964/oxlZ5umFbiWl+y78PP/7IzP//+PZJUa88WaUtd3AYj5e1O4/tkb1///reDvWYnrn71x/bOr2Cs9AfZ/AB//2UGOv9jD9c/euP6MZWdX+vnzf36Rf7UfItnhPfgr+88YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjP0XnPaXKQC41L7S82KMMcYYY4wxxti/j89xpWfAGGOMMcYYY4yx/zwEARIUBBADOSAWckIcCAC4GnLDNRCBayEeroM8cD3khXyQHwpAAhSEQqDBgAWCEApDEYjCDVAUboRiUBxKQElwUAoS4SYoDTdDGbgFysKtUA5ug/JQASpCJbgdKsMdUAXuhKpwF1SD6lADasLdUAvugdpwL9SB+6Au3A/14AGoDw9CA3gIGsLD0AgegcbwKDSBptAMmkOLfyr/BegOL0IP6AnJ0At6w0vQB/pCP+gPA+BlGAivwCB4FVJgMAyB12AovA7D4A0YDiNgJLwJo+AtGA1jYCyMg1QYDxPgbZgI78AkmAxTYCqkwTSYDu/CDJgJs+A9mA3vwxyYC/NgPqTDB7AAFkIGfAiL4CPIhMWwBJbCMlgOK2AlrILVsAbWwjpYDxtgI2yCzbAFtsI22A474GPYCZ/ALtgNe/5cv38k/9Sv8j+FvdAFAQEFClSoMAZjMBZjMQ7jMBfmwtyYGyMYwXiMxzyYB/NiXsyP+TEBE7AQFkKDBgkJC2NhjGIUi2JRLIbFsASWQIcOEzERS+PNWAbLYFksi+WwHJbHClgBK2ElrIyVsQpWwapYFathNayBNfBuvBt7YW2sjXWwDtbFupceT2EDbIANsSE2wkbYGBtjE2yCzbAZtsAW2BJbYitshW2wDbbFttgO22ESJmF7bI8dsAN2xI7YCTthZ+yMXbArds16IQfgi/gi9sRqohf2xt7YB1Ny9MP+2B9fxoH4Cr6Cr2IKDsYh+Bq+hq/jMDyJw3EEjsSRWFm8haNxDJIYh6mYihNwAk7EiTgJJ+NknIppOA2n43ScgTNxJr6Hs/F9fB/n4lycj+mYjgtwIWZgBi7CU5iJi3EJLsVluByX4UpchStxDa7FNbge1+NG3IibcTNuxa24Hbfjx6gA8BPcjbsxBffiXtyH+3A/7scDeACzMAsP4kE8hIfwMB7GI3gEj+IxPI7H8ASewJN4Ck/jaTyLZ/EcPpfwVcOPi69OAXGBEkrEiBgRK2JFnIgTuUQukVvkFhEREfEiXuQReURekVfkF/lFgkgQhUQhYYQRJMIYABBRERVFRVFRTBQTJUQJ4YQTiSJRlBalRRlRRpQVt4py4jZRXlQQrV0lUUlUFm1cFXGnqCqqimqiuqghaoqaopaoJWqL2qKOqCPqirqinnhA1Be9sB8+JC5UppEYjI3FEGwimgp58QhoKYZhK9FatBFPiBE4HNuJli5JPC3ai9HYQfxJjMFnRScxDjuL50UX0VV0Ey+I7qKV6yF6iknYS/QWU7GP6Cv6if5iBlYX7+HsnDXEqyJFDBZDxGtiPr4uhok3xHAxQowUb4pR4i0xWowRY8U4kSrGiwnibTFRvCMmicliipgq0sQ0MV28K2aImWKWeE/MFu+LOWKumCfmi3TxgVggFooM8aFYJD4SmWKxWCKWimViuVghVopVYrVYI9aKdWK92CA2ik1is9gitoptYrvYIT4WO8UnYpfYLfaIT8Ve8ZnYJz4X+8UX4oD4UmSJr8RB8bU4JL4Rh8W34oj4ThwVx8Rx8b04IX4QJ8UpcVqcEWfFj+Kc+EmcF16ARCmklEoGMkbmkLEyp4yTV8lcMrj47l4r4+V1Mo+8XuaV+WR+WUAmyIKykNTSSCtJhrKwLCKj8gZZVN4oi8nisoQsKZ0sJRPlTbK0vFmWkbfIsvJWWU7eJsvLCrKirCRvl5XlHRIiv2yjmqwua8ia8m6ZDPfI2vJeWUfeJ+vK+2U9+YCsLx+UDeRDsqF8WDaSj8jG8lHZRDaVzWRz2UI+JlvKx2Ur2Vq2kU/ItvJJ2U4+JZPk07K99Bc/Is/KTvI52Vk+L7vIrrKb/Emel172kD0l9ALZW74k+8i+sp/sLwfIl+VA+YocJF+VKXKwHCJfk0Pl63KYfEMOlyPkSPmmHCXfkqPlGDlWjpOpcrycIN+WE+U7cpKcLKfIqTJNTpP9Lo40S8q/mf/2r/MvnHrlNDno561vlJvkZrlFbpXb5Ha5Q34sd8qdcpfcJffIPXKv3Cv3yX1yv9wvD8gDMktmyYPyoDwkD8nD8rA8Io/Io/KYPCO/lyfkD/KkPCVPyTPyrDwrz118D0ChEkoqpQIVo3KoWJVTxamrVC51tcqtrlERda2KV9epPOp6lVflU/lVAZWgCqpCSiujrCIVqsKqiIqqG/DiB0aVUCWVU6VUorrpH8lXRdWNqpgq/pv8S/NL/gvza6FaqJaqpWqlWqk2qo1qq9qqdqqdSlJJqr1qrzqoDqqj6qg6qU6qs+qsuqguqpvqprqr7qqH6qGSVbLqrV5SfVRf1U/1VwPUy2qgGqgGqUEqRaWoIWqIGqqGqmFqmBquhquRaqQapUap0Wq0GqvGqlSVqiaoCWqimqgmqUlqipqi0lSamq6mqxlqhpqlZqnZaraao+aoeWqeSlfpaoFaoDJUhlqkFqlMtVgtVkvVUrVcLVcr1Uq1Wq1Wa9VatV6tV5lqk9qktqgtapvapnaoHWqn2ql2qV1qj9qj9qq9ap/ap/ar/eqAOqCyVJY6qA6qQ+qQOqwOqyPqiDqqjqrj6rg6oU6ok+qkOq1Oq7PqrDqnzqnz6ryCQIAIRKACFcQEMUFsEBvEBXFBriBXkDvIHUSCSBAfxAd5guuDvEG+IH9QIEgICgaFAh2YwAbiYtGjwQ1B0eDGoFhQPCgRlAxcUCpIDG4KSgc3B2WCW4Kywa1BueC2oHxQIagYVApuDyoHdwRVgjuDqsFdQbWgelAjqBncHdQK7glqB/cGdYL7grrB/UG94IGgfvBg0CB4KGgYPBw0Ch4JGgePBk2CpkGzoHnQ4t86vvcn8z3ueuieOln30r31S7qP7qv76f56gH5ZD9Sv6EH6VZ2iB+sh+jU9VL+uh+k39HA9Qo/Ub+pR+i09Wo/RY/U4narH6wn6bT1Rv6Mn6cl6ip6q0/Q0PV2/q2fomXqWfk/P1u/rOXqunqfn63T9gV6gF+oM/aFepD/SmXqxXqKX6mV6uV6hV+pVerVeo9fqdXq93qA36k16s96it+pterveoT/WO/UnepferffoT/Ve/Znepz/X+/UX+oD+Umfpr/RB/bU+pL/Rh/W3+oj+Th/Vx/Rx/b0+oX/QJ/UpfVqf0Wf1j/qc/kmf1/7Cxf2F07tRRpkYE2NiTayJM3Eml8llcpvcJmIiJt7Emzwmj8lr8pr8Jr9JMAmmkClkLiBDprApbKImaoqaoqaYKWZKmBLGGWcSTaIpbUqbMqaMKWvKmnKmnClvypuKpqK53dxu7jB3mDvNneYuc5epbqqbmqamqWVqmdqmtqlj6pi6pq6pZ+qZ+qa+aWAamIamoWlkGpnGprFpYpqYZqaZaWFamJampWllWpk2po1pa9qadqadSTJJpr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WGSTbLpbXqbPqaP6Wf6mQFmgBloBppBZpBJMSlmiBlihpqhZpgZZoabEWbkhQtV85YZbcaYsWacSTWpZoKZYCaaiWaSmWSmmCkmzaSZ6Wa6mWFmmFlmlpltZps5Zo6ZZ+aZdJNuFpgFJsNkmEVmkck0mWaJWWKWmWVmhVlhVplVZo1ZY9bBOrPBbDCbzCazxWwx28w2s8PsMDvNTrPL7DJ7zB6z1+w1+8w+s9/sNwfMAZNlssxBc9AcMofMYXPYHDFHzFFz1Bw3x80Jc8KcNCfNaXPanDX5Lp4vvYm1OW2cvcrmslfb3PYa+7/j/LaATbAFbSGrbV6b7zexsdYWs8VtCVvSOlvKJtqbfheXtxVsRVvJ3m4r2ztsld/Ftew9tra919ax99ma9u7fxHXt/baefcTWRwSwTW1D29w2so/YxvZR28Q2tc1sc9vWPmnb2adskn3atrfP/C5eYBfaVXa1XWPX2l12tz1tz9hD9ht71v5oe9iedoB92Q60r9hB9lWbYgf/Lh5p37Sj7Ft2tB1jx9pxv4un2Kk2zU6z0+27doad+bs43X5gZ9sMO8fOtfPs/J/jC3PKsB/aRfYjm2kDWGKX2mV2uV1hV/55rkvtervBbrQ77Sd2i91qt9ntdselC2G72+6xn9q99jN70H5t99sv7AF72GbZr36OL+zfYfutPWK/s0ftMXvcfm9P2B/UpewL+/69/cmet94CIQFJUhRQDOWgWMpJcXQV5aKrKTddQxG6luLpOspD11Neykf5qQAlUEEqRJoMWSIKqTAVoSjdQJemV4JKkqNSlEg3UWm6mcrQLVSWbqVydBuVpwpUkSrR7VSZ7qAqdCdVpbuoGlWnGlST7qZadA/VpnupDt1Hdel+qkcPUH16kBrQQ9SQHqZG9Ag1pkepCTWlZtScWtBj1JIep1bUmtrQE9SWnqR29BQl0dPUnp6hDvQn6kjPUid6jjrT89SFulI3eoG604vUg3pSMvWi3vQS9aG+1I/60wB6mQbSKzSIXqUUGkxD6DUaSq/TMHqDhtMIGklv0ih6i0bTGBpL4yiVxtMEepsm0js0iSbTFJpKaTSNptO7NINm0ix6j2bT+zSH5tI8mk/p9AEtoIWUQR/SIvqIMmkxLaGltIyW0wpaSatoNa2htbSO1tMG2kibaDNtoa20jbbTDvqYdtIntIt20x76lPbSZ7SPPqf99AUdoC8pi76ig/Q1HaJv6DB963vSd3SUjtFx+p5O0A90kk7RaTpDZ+lHOkc/0XnyBCGGIpShCoMwJswRxoY5w7jwqjBXeHWYO7wmjITXhvHhdWGe8Powb5gvzB8WCBPCgmGhUIcmtCGFYVg4LBJGwxvCouGNYbGweFgiLBm6sFSYGN4Ulg5vDsuEt4Rlw1vDcuFtYfmwQvjIfZXC28PK4R1hlfDOsGp4V1gtrB7WCGuGd4e1wnvC2uG9YZ3wvrBMeH9YL3wgrB8+GDYIHwobhg+HjcJHwsbho2GTsGnYLGwetggfC1uGj4etwtZhm/CJsG34ZNgufCpMCp8O24fP/Nx//8K/3J8c9gp7hy+FL4Xe3yvnRedH06MfRBdEF0Yzoh9GF0U/imZGF0eXRJdGl0WXR1dEV0ZXRVdH10TXRtdF10c3RDdGva+ZAxw64aRTLnAxLoeLdTldnLvK5XJXu9zuGhdx17p4d53L4653eV0+l98VcAmuoCvktDPOOnKhK+yKuKi7wRV1N7pirrgr4Uo650q5RNfctXAtXEv3uGvlWrs27gn3hHvSPemeck+5p11794zr4P7kOrpnXSf3nHvOPe+6uK6um3vBdXfjc/9yTCa73q636+P6uH6unxvgBriBbqAb5Aa5FJfihrghbqgb6oa5YW64G+5GupFulBvlRrvRbqwb61JdqpvgJriJbqKb5Ca5KW6KS3Npbrqb7ma4Ga7yzF+2MsfNcfPcPJfu0t0Cd+GaMcMtcotcpst0S9wSt8wtcyvcCrfKrXJr3Bq3zq1zG9wGt8ltclvcFrfNbXM73A630+10u/w1vwzq9rp9bp/b7/a7A+5Ll+W+cgfd1+6Q+8Yddt+6I+47d9Qdc8fd9+6E+8GddKfcaXfGnXU/unPuJ3feeZcaGR+ZEHk7MjHyTmRSZHJkSmRqJC0yLTI98m5kRmRmZFbkvcjsyPuROZG5kXmR+ZH0yAeRBZGFkYzIh5FFkY8imZHFkSWRpZFlkeUR7wtuCX1hX8RH/Q2+qL/RF/PFfQlf0jtfyif6m3xpf7Mv42/xZf2tvpy/zZf3FXxF/6hv4pv6Zr65b+Ef8y39476Vb+3b+Cd8W/+kb+ef8kn+ad/eP+M7+D/5jv5Z38k/5zv7530X39V38y/47v5F38P39Mm+l+/tX/J9fF/fz/f3A/zLfqB/xQ/yr/oUP9gP8a/5of51P8y/4Yf7EX5kzJt+1KVbZBjnU/14P8G/7Sf6d/wkP9lP8VN9mp/mp/t3/Qw/08/y7/nZ/n0/x8/18/x8n+4/8Av8Qp/hP/SL/Ec+0y++9FDSr/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3e/wH/ud/hO/y+/2e/ynfq//zO/zn/v9/gt/wH/ps/xX/qD/2h/y3/jD/lt/xH/nj/pj/rj/3p/wP/iT/pQ/7c/4s/5Hf87/5M/z36wxxhhjjP1dxl9uit/2/PI4v9cf5IhfrdwbAK7eWiDr1/0XrijX5f2l3VcktI0AwNM9Oz90aalWLTk5+eK6mRKCInMBLv0k6IIYuBwvhjbwJCRBayj9h/PvK7qepb8xfvRWgLhf5cTC5fjy+J8DYPIfjP/YEyMXlAtPx/+V8ecCFCtyOScnXI4XQ5ufn6+0hjJ/Yf75Wv6N+ef8IhWg1a9ycsHl+PL8E+FxeAaSfrMmY4wxxhhjjDH2i76iYsdL95+XfuPzj+7PE9TlnBxwOf5b9+eMMcYYY4wxxhi78p7t2u2px5KSWnf8xxtV/qmsv7vRGP5TI3PjDxveA1x6RQHAvzggwIWG/G/uxeb/yrZSLh46/7tr2RkfwP+NUv7zjbF/fuUKf2NijDHGGGOM/dtdvvr/7evqSk2IMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLhv4b/1fsSu8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdqX9TwAAAP//HmP+kg==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000580)=""/174, 0xff56)

1m13.075304932s ago: executing program 6 (id=5201):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0xf, 0x1})

1m10.525762895s ago: executing program 6 (id=5213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc)

1m9.834484981s ago: executing program 41 (id=5213):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r1, 0x1}, 0xc)

4.262511586s ago: executing program 3 (id=5547):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@mblk_io_submit}, {@nodioread_nolock}, {@noquota}, {@debug}, {@noblock_validity}, {@nojournal_checksum}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
fallocate(r0, 0x10, 0x37ef, 0x7f)

3.146655543s ago: executing program 3 (id=5556):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffc, 0x0, 0x3, 0xa, 0x0, 0x20}, {0x20000000, 0x7fffffffffffffff, 0x0, 0xffffffffffff0dac, 0x0, 0x14d, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffff7, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x3, 0x2}}, 0xb8}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xf1f, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e20, 0x0, 0x4e23, 0xfffc, 0xa, 0x10, 0x0, 0x2}, {0x8, 0x1, 0x0, 0x0, 0x100, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
close(0x3)

3.145983463s ago: executing program 9 (id=5557):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000004000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fefbffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x94)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)

2.795818092s ago: executing program 9 (id=5560):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES8, @ANYRES32, @ANYRES64, @ANYRES16=0x0], 0xa, 0x254, &(0x7f0000000180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x8d)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
getdents64(r0, 0x0, 0x0)

2.602638756s ago: executing program 3 (id=5561):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000cb2000/0x4000)=nil, 0x4000, &(0x7f0000000040)=')^(://\x00')
read$FUSE(r0, &(0x7f0000005200)={0x2020}, 0x2020)

2.320116083s ago: executing program 9 (id=5563):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0)
recvfrom$inet6(r0, 0x0, 0x61, 0x40, 0x0, 0x0)

2.174713317s ago: executing program 3 (id=5564):
mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000280)='\x00', 0x1)

1.987594081s ago: executing program 9 (id=5567):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r0}, 0xc)

1.900129483s ago: executing program 3 (id=5568):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a40)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1.693734579s ago: executing program 9 (id=5570):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000140)='./file2\x00', 0x4, &(0x7f0000000000)=ANY=[], 0xfd, 0x6179, &(0x7f0000000340)="$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")
creat(&(0x7f0000000240)='./file1\x00', 0xd)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)

1.569856591s ago: executing program 4 (id=5571):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, r1, 0x331, 0x1, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c015}, 0x200480c4)

1.498190743s ago: executing program 0 (id=5572):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)="48f53b8198800acead6e5f2e346af0f1", 0x10}], 0x1}}], 0x1, 0x2000c010)

1.188930451s ago: executing program 4 (id=5573):
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000003c0)={0x4, 0x8}, 0x2)

1.080247314s ago: executing program 0 (id=5574):
set_mempolicy(0x4005, &(0x7f0000001040)=0x2, 0x7f)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040))
write$FUSE_ATTR(r0, 0x0, 0x0)

919.713877ms ago: executing program 3 (id=5575):
r0 = semget(0x1, 0x4, 0x39c)
semop(r0, &(0x7f0000000080)=[{0x3, 0x8001, 0x1000}], 0x1)
semop(r0, &(0x7f0000000000)=[{0x1, 0xbbdc, 0x1000}, {0x1, 0x0, 0x1800}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff])

887.784588ms ago: executing program 4 (id=5576):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x894b, &(0x7f0000000140)={r0})

810.82622ms ago: executing program 0 (id=5577):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000360000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20)
ppoll(&(0x7f0000000200)=[{r0, 0x3008}], 0x1, &(0x7f0000000240)={0x0, 0x989680}, 0x0, 0x0)

547.733747ms ago: executing program 0 (id=5578):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4, 0x0, 0xff, 0x0, 0x9, 0xfd8c}, &(0x7f0000000100)=0x3d)

475.798528ms ago: executing program 4 (id=5579):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x3, 0x11, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000100e70000000000000000008500000027000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

326.794032ms ago: executing program 0 (id=5580):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}], 0x4)

266.497803ms ago: executing program 4 (id=5581):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)

105.642747ms ago: executing program 9 (id=5582):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0000ffffffffa000903626e43925", 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

98.372627ms ago: executing program 0 (id=5583):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='1', 0x1)

0s ago: executing program 4 (id=5584):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
mknod(&(0x7f0000001f40)='./file0\x00', 0x4, 0x0)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000002000)=0x24000000)

kernel console output (not intermixed with test programs):

982.691702][T12905] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  982.736828][T12905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  982.759909][   T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  982.786856][T12905] usb 7-1: Product: syz
[  982.815277][T12905] usb 7-1: Manufacturer: syz
[  982.843384][T12905] usb 7-1: SerialNumber: syz
[  982.887152][T12905] usb 7-1: config 0 descriptor??
[  982.946581][T12905] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  982.982520][T21328] loop0: detected capacity change from 0 to 64
[  983.183782][T12905] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  983.287107][T12905] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  983.571063][ T5776] Bluetooth: hci0: command 0x1003 tx timeout
[  983.580869][T18660] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  983.715128][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  983.727615][T12905] usb 7-1: USB disconnect, device number 37
[  983.792105][T12905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  983.901144][T12905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  983.989457][T12905] quatech2 7-1:0.51: device disconnected
[  985.410636][    T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  985.631044][    T8] usb 1-1: Using ep0 maxpacket: 32
[  985.671423][    T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  985.710357][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  985.767261][    T8] usb 1-1: config 0 descriptor??
[  986.064871][    T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  986.139554][    T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  986.218023][    T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  986.262964][    T8] usb 1-1: media controller created
[  986.270714][T21376] loop9: detected capacity change from 0 to 512
[  986.342617][T21376] EXT4-fs: Ignoring removed oldalloc option
[  986.399353][    T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  986.494790][T21376] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  986.566261][    T8] az6027: usb out operation failed. (-71)
[  986.595820][T21376] ext4 filesystem being mounted at /700/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  986.612466][    T8] az6027: usb out operation failed. (-71)
[  986.659958][    T8] stb0899_attach: Driver disabled by Kconfig
[  986.709541][    T8] az6027: no front-end attached
[  986.709541][    T8] 
[  986.766324][    T8] az6027: usb out operation failed. (-71)
[  986.817800][    T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  986.851890][T21376] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm syz.9.4967: bg 0: block 217: padding at end of block bitmap is not set
[  986.911853][    T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36
[  986.930399][T21381] EXT4-fs error (device loop9): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set
[  987.011272][T21376] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6655: Corrupt filesystem
[  987.051180][    T8] dvb-usb: schedule remote query interval to 400 msecs.
[  987.058208][    T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  987.212597][    T8] usb 1-1: USB disconnect, device number 11
[  987.409091][T13907] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  987.449123][    T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  988.208439][T21398] loop9: detected capacity change from 0 to 2048
[  988.313863][T21398] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  988.729134][T21390] loop6: detected capacity change from 0 to 32768
[  988.854737][T21390] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop6 scanned by syz.6.4970 (21390)
[  989.025513][T21390] BTRFS info (device loop6): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  989.128783][T21390] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  989.193914][T21390] BTRFS info (device loop6): using free space tree
[  989.279713][T21414] loop0: detected capacity change from 0 to 2048
[  989.424939][T21413] loop9: detected capacity change from 0 to 4096
[  989.489921][T21390] BTRFS info (device loop6): enabling ssd optimizations
[  989.538127][T21390] BTRFS info (device loop6): auto enabling async discard
[  989.617998][T21414] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  989.710512][T21414] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  989.718204][T21414] UDF-fs: Scanning with blocksize 512 failed
[  990.017013][T21414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  990.224292][ T8238] BTRFS info (device loop6): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  991.048249][T21446] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.4982'.
[  991.208938][T21449] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4983'.
[  991.784124][T21454] loop6: detected capacity change from 0 to 4096
[  991.882127][T21454] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  992.791278][T21464] loop9: detected capacity change from 0 to 131072
[  992.842887][T21464] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0)
[  992.851495][T21464] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  992.882532][T21464] F2FS-fs (loop9): invalid crc value
[  992.955338][T21454] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  992.971225][T21464] F2FS-fs (loop9): Found nat_bits in checkpoint
[  993.049117][T21464] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  993.056739][T21464] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  993.093790][T21454] ntfs3: loop6: Failed to initialize $Extend/$Reparse.
[  993.256830][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[  993.268989][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[  993.410778][   T28] kauditd_printk_skb: 53 callbacks suppressed
[  993.410794][   T28] audit: type=1800 audit(1785408109.422:216): pid=21454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4979" name="file1" dev="loop6" ino=24 res=0 errno=0
[  993.447837][T21454] ntfs3: loop6: ino=5, "/" directory corrupted
[  993.499021][T21441] loop1: detected capacity change from 0 to 32768
[  993.713701][ T8238] ntfs3: loop6: ino=1a, ntfs_sync_fs failed, -22.
[  994.978341][T21470] loop0: detected capacity change from 0 to 32768
[  995.203240][T21487] __sock_release: fasync list not empty!
[  995.471856][   T28] audit: type=1800 audit(1785408111.522:217): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4988" name="file1" dev="loop0" ino=4 res=0 errno=0
[  995.492308][    C0] vkms_vblank_simulate: vblank timer overrun
[  995.679674][T21478] loop6: detected capacity change from 0 to 32768
[  995.772016][T21478] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.4990 (21478)
[  995.945652][T21478] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  996.040571][T21478] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  996.107197][T21478] BTRFS info (device loop6): turning on sync discard
[  996.181273][T21478] BTRFS info (device loop6): use zlib compression, level 3
[  996.230420][T21478] BTRFS info (device loop6): turning off barriers
[  996.306777][T21478] BTRFS warning (device loop6): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  996.400574][T21478] BTRFS info (device loop6): trying to use backup root at mount time
[  996.408736][T21478] BTRFS info (device loop6): enabling auto defrag
[  996.541651][T21478] BTRFS info (device loop6): max_inline at 0
[  996.547722][T21478] BTRFS info (device loop6): using free space tree
[  996.557243][T21501] loop0: detected capacity change from 0 to 1024
[  996.898236][   T11] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  997.048908][T21478] BTRFS error (device loop6): failed to load root extent
[  997.086389][T21478] BTRFS warning (device loop6): try to load backup roots slot 1
[  997.160878][   T11] BTRFS warning (device loop6): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  997.249123][T21478] BTRFS warning (device loop6): couldn't read tree root
[  997.270819][T21478] BTRFS warning (device loop6): try to load backup roots slot 2
[  997.291981][T21492] loop1: detected capacity change from 0 to 32768
[  997.351883][ T2907] BTRFS error (device loop6): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  997.396042][T21492] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.4995 (21492)
[  997.462153][T21478] BTRFS warning (device loop6): couldn't read tree root
[  997.507444][T21478] BTRFS warning (device loop6): try to load backup roots slot 3
[  997.867955][ T6646] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (6646)
[  998.018397][T21478] BTRFS error (device loop6): open_ctree failed: -4
[  998.161708][T21527] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  998.330688][T21527] overlayfs: overlapping lowerdir path
[  999.878309][T21529] loop0: detected capacity change from 0 to 32768
[ 1000.054888][T21529] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.5000 (21529)
[ 1000.234913][T21529] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1000.234996][T21529] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[ 1000.235024][T21529] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[ 1000.235040][T21529] BTRFS info (device loop0): trying to use backup root at mount time
[ 1000.235054][T21529] BTRFS info (device loop0): setting nodatasum
[ 1000.235069][T21529] BTRFS info (device loop0): enabling ssd optimizations
[ 1000.235081][T21529] BTRFS info (device loop0): using spread ssd allocation scheme
[ 1000.235097][T21529] BTRFS info (device loop0): force zlib compression, level 3
[ 1000.235112][T21529] BTRFS info (device loop0): allowing degraded mounts
[ 1000.235125][T21529] BTRFS info (device loop0): turning on flush-on-commit
[ 1000.235138][T21529] BTRFS info (device loop0): setting nodatacow
[ 1000.235150][T21529] BTRFS info (device loop0): using free space tree
[ 1000.672347][T21529] BTRFS info (device loop0): auto enabling async discard
[ 1001.690949][T18658] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1001.774876][T21592] loop6: detected capacity change from 0 to 2048
[ 1001.959655][T21592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1002.178739][T21592] EXT4-fs error (device loop6): ext4_find_extent:947: inode #2: comm syz.6.5013: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[ 1002.225922][T21579] loop1: detected capacity change from 0 to 32768
[ 1002.421583][   T28] audit: type=1800 audit(1785408118.472:218): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5011" name="file1" dev="loop1" ino=4 res=0 errno=0
[ 1002.442036][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1002.510506][T21592] EXT4-fs (loop6): Remounting filesystem read-only
[ 1002.796693][ T8238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1003.347701][T21615] loop6: detected capacity change from 0 to 256
[ 1003.429656][T21615] exfat: Deprecated parameter 'utf8'
[ 1003.502698][T21615] exfat: Deprecated parameter 'utf8'
[ 1003.626320][T21615] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1004.306990][T21621] loop1: detected capacity change from 0 to 64
[ 1004.890510][T21627] program syz.6.5021 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1005.077326][T21629] loop1: detected capacity change from 0 to 512
[ 1005.146588][T21629] EXT4-fs: Ignoring removed i_version option
[ 1005.243589][T21629] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1005.347077][T21629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1005.481893][T21629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1005.658172][T21629] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1005.857297][   T28] audit: type=1800 audit(1785408121.902:219): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5022" name="file1" dev="loop1" ino=15 res=0 errno=0
[ 1006.158772][T20231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1006.590001][T21660] loop1: detected capacity change from 0 to 2048
[ 1006.755966][T21660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1006.815114][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5028'.
[ 1006.892009][T21665] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5028'.
[ 1006.991652][T21669] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1007.088075][T21660] overlayfs: upper fs needs to support d_type.
[ 1007.210612][T21669] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[ 1007.311548][T21660] overlayfs: cleanup of 'work/#26' failed (-2)
[ 1007.319121][T21660] overlayfs: upper fs does not support RENAME_WHITEOUT.
[ 1007.334400][T21676] can0: slcan on ptm0.
[ 1007.471723][T21675] can0 (unregistered): slcan off ptm0.
[ 1007.515724][T21669] overlayfs: cleanup of 'bus/work' failed (-2)
[ 1007.582155][T21660] overlayfs: failed to set xattr on upper
[ 1007.626959][T21660] overlayfs: ...falling back to redirect_dir=nofollow.
[ 1007.700457][T21669] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[ 1007.710230][T21669] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[ 1007.780360][T21660] overlayfs: ...falling back to index=off.
[ 1007.869153][T21687] loop6: detected capacity change from 0 to 2048
[ 1007.903149][T21660] overlayfs: ...falling back to uuid=null.
[ 1007.937814][T21689] smpboot: Booting Node 0 Processor 1 APIC 0x1
[ 1007.993509][T21687] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1008.074116][T21687] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[ 1008.122907][T21687] UDF-fs: Scanning with blocksize 512 failed
[ 1008.140375][T20231] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[ 1008.168690][T20231] UDF-fs: error (device loop1): udf_read_inode: (ino 1440) failed !bh
[ 1008.223731][T21687] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1008.538917][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1008.999465][  T173] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1009.190442][  T173] usb 1-1: Using ep0 maxpacket: 16
[ 1009.210505][  T173] usb 1-1: too many configurations: 123, using maximum allowed: 8
[ 1009.281429][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.313103][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.371215][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.393216][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.421169][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.452111][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.472113][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.491833][  T173] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.515571][  T173] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1009.550430][  T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45
[ 1009.574376][  T173] usb 1-1: SerialNumber: syz
[ 1009.602131][  T173] usb 1-1: config 0 descriptor??
[ 1009.614986][  T173] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input37
[ 1009.932996][ T5126] bcm5974 1-1:0.0: could not read from device
[ 1009.988157][T21701] bcm5974 1-1:0.0: could not read from device
[ 1010.017086][ T3011] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.048828][ T3011] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.080233][ T5126] bcm5974 1-1:0.0: could not read from device
[ 1010.091155][  T173] usb 1-1: USB disconnect, device number 12
[ 1010.455382][ T3011] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.508492][ T3011] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.767406][ T3011] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1010.812582][ T3011] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1010.965573][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1010.981858][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1011.001166][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1011.020742][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1011.052118][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1011.059668][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1011.156833][ T3011] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1011.214176][ T3011] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1011.241967][T21746] batadv_slave_0: entered promiscuous mode
[ 1011.260046][T21744] batadv_slave_0: left promiscuous mode
[ 1011.379988][T21739] lo speed is unknown, defaulting to 1000
[ 1011.568118][T21756] loop0: detected capacity change from 0 to 512
[ 1011.603033][T18660] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1011.625484][T21756] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 1011.637397][T18660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1011.652498][T18660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1011.668720][T18660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1011.679850][T18660] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1011.691638][T18660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1011.736188][T21756] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[ 1011.803579][T21756] EXT4-fs (loop0): 1 truncate cleaned up
[ 1011.833728][T21756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1012.052927][T21764] netlink: 'syz.6.5058': attribute type 7 has an invalid length.
[ 1012.082171][T18658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1012.096194][T21764] netlink: 'syz.6.5058': attribute type 7 has an invalid length.
[ 1012.424785][T21757] lo speed is unknown, defaulting to 1000
[ 1012.965650][T21779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5064'.
[ 1012.975925][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5064'.
[ 1012.985547][T21779] macvlan0: entered allmulticast mode
[ 1012.991578][T21779] veth1_vlan: entered allmulticast mode
[ 1013.170531][ T5776] Bluetooth: hci0: command tx timeout
[ 1013.185686][T21739] chnl_net:caif_netlink_parms(): no params data found
[ 1013.561239][T21739] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1013.568518][T21739] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1013.576235][T21739] bridge_slave_0: entered allmulticast mode
[ 1013.583911][T21739] bridge_slave_0: entered promiscuous mode
[ 1013.642209][T21739] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1013.649478][T21739] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1013.657370][T21739] bridge_slave_1: entered allmulticast mode
[ 1013.668205][T21739] bridge_slave_1: entered promiscuous mode
[ 1013.734857][ T5776] Bluetooth: hci1: command tx timeout
[ 1013.764904][T21739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1013.778484][T21739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1013.886150][T21739] team0: Port device team_slave_0 added
[ 1013.897959][T21739] team0: Port device team_slave_1 added
[ 1014.008419][T21757] chnl_net:caif_netlink_parms(): no params data found
[ 1014.096706][T21739] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1014.112151][T21739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1014.149905][T21739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1014.163786][T21739] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1014.180548][T21739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1014.213381][T21739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1014.572588][T21739] hsr_slave_0: entered promiscuous mode
[ 1014.609108][T21739] hsr_slave_1: entered promiscuous mode
[ 1014.647055][T21739] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1014.660111][T21739] Cannot create hsr debugfs directory
[ 1014.855743][ T3011] hsr_slave_0: left promiscuous mode
[ 1014.872963][T21802] loop0: detected capacity change from 0 to 512
[ 1014.879614][ T3011] hsr_slave_1: left promiscuous mode
[ 1014.895145][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1014.909965][T21802] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 1014.920575][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1014.940886][ T3011] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1014.948396][ T3011] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1014.960412][T21802] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1015.001595][ T3011] bridge_slave_1: left allmulticast mode
[ 1015.007344][ T3011] bridge_slave_1: left promiscuous mode
[ 1015.032136][ T3011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1015.049460][T21802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1015.105190][T21802] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1015.120092][ T3011] veth1_macvtap: left promiscuous mode
[ 1015.128841][ T3011] veth0_macvtap: left promiscuous mode
[ 1015.134942][ T3011] veth1_vlan: left promiscuous mode
[ 1015.250438][ T5776] Bluetooth: hci0: command tx timeout
[ 1015.427111][T18658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1015.812597][ T5776] Bluetooth: hci1: command tx timeout
[ 1015.837270][T21809] netlink: 'syz.6.5072': attribute type 1 has an invalid length.
[ 1016.153536][T21814] loop6: detected capacity change from 0 to 64
[ 1016.242052][   T28] audit: type=1800 audit(1785408132.292:220): pid=21814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5074" name="file1" dev="loop6" ino=22 res=0 errno=0
[ 1016.620744][T21818] loop6: detected capacity change from 0 to 256
[ 1016.683213][T21820] loop0: detected capacity change from 0 to 256
[ 1016.721447][T21820] exfat: Deprecated parameter 'utf8'
[ 1016.738790][T21820] exfat: Deprecated parameter 'utf8'
[ 1016.746494][T21820] exfat: Deprecated parameter 'namecase'
[ 1016.754396][T21820] exfat: Deprecated parameter 'namecase'
[ 1016.837036][T21820] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1017.330544][ T5776] Bluetooth: hci0: command tx timeout
[ 1017.359833][T21834] loop0: detected capacity change from 0 to 128
[ 1017.668128][T21840] loop6: detected capacity change from 0 to 512
[ 1017.697185][T21840] EXT4-fs (loop6): external journal device major/minor numbers have changed
[ 1017.838630][ T3011] team0 (unregistering): Port device team_slave_1 removed
[ 1017.855313][T21840] EXT4-fs (loop6): failed to open journal device unknown-block(238,156) -6
[ 1017.905918][    T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1017.910955][ T5776] Bluetooth: hci1: command tx timeout
[ 1017.975843][T21840] loop6: detected capacity change from 0 to 544
[ 1018.010082][ T3011] team0 (unregistering): Port device C removed
[ 1018.104334][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1018.120447][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1018.144847][    T9] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[ 1018.163778][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.187766][    T9] usb 1-1: config 0 descriptor??
[ 1018.233147][ T3011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1018.371662][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1018.387303][ T3011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1018.637834][    T9] hid-led 0003:27B8:01ED.0018: unbalanced collection at end of report description
[ 1018.658729][    T9] hid-led: probe of 0003:27B8:01ED.0018 failed with error -22
[ 1019.422599][ T5776] Bluetooth: hci0: command tx timeout
[ 1019.435185][ T3011] bond0 (unregistering): Released all slaves
[ 1019.608633][T21757] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1019.616070][T21757] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1019.640806][T21757] bridge_slave_0: entered allmulticast mode
[ 1019.648350][T21757] bridge_slave_0: entered promiscuous mode
[ 1019.687220][T21757] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1019.695290][T21757] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1019.702832][T21757] bridge_slave_1: entered allmulticast mode
[ 1019.710922][T21757] bridge_slave_1: entered promiscuous mode
[ 1019.888045][T21757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1019.908149][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1019.957187][T21757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1019.988328][ T5776] Bluetooth: hci1: command tx timeout
[ 1020.105244][T21757] team0: Port device team_slave_0 added
[ 1020.158653][T21757] team0: Port device team_slave_1 added
[ 1020.454669][T21757] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1020.463897][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1020.491190][T21757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1020.528852][T21757] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1020.555783][T21757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1020.582133][T21757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1020.655636][    T9] usb 1-1: USB disconnect, device number 13
[ 1020.858815][T21857] loop6: detected capacity change from 0 to 32768
[ 1020.918084][T21857] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1021.000654][T21857] XFS (loop6): Ending clean mount
[ 1021.003205][T21757] hsr_slave_0: entered promiscuous mode
[ 1021.022972][T21757] hsr_slave_1: entered promiscuous mode
[ 1021.143266][ T8238] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1021.639395][T21739] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1021.677349][T21739] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1021.777146][T21739] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1021.806924][T21739] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1022.139532][T21739] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1022.247142][T21739] 8021q: adding VLAN 0 to HW filter on device team0
[ 1022.311884][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1022.319102][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1022.330320][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1022.337541][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1022.583449][T21878] loop0: detected capacity change from 0 to 256
[ 1022.743690][T21757] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1022.831217][T21757] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1022.875078][T21757] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1022.908238][T21757] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1023.300188][T21757] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1023.307109][T21888] loop0: detected capacity change from 0 to 1024
[ 1023.414556][T21757] 8021q: adding VLAN 0 to HW filter on device team0
[ 1023.516071][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1023.523336][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1023.569781][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1023.577089][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1023.862601][T21739] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1024.028225][T21739] veth0_vlan: entered promiscuous mode
[ 1024.044524][T21892] loop0: detected capacity change from 0 to 8192
[ 1024.089479][T21884] loop6: detected capacity change from 0 to 32768
[ 1024.116658][T21892] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1024.121175][T21739] veth1_vlan: entered promiscuous mode
[ 1024.158011][T21892] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1024.168535][T21892] REISERFS (device loop0): using ordered data mode
[ 1024.176467][T21892] reiserfs: using flush barriers
[ 1024.227845][T21884] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1024.267817][T21892] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1024.317521][T21892] REISERFS (device loop0): checking transaction log (loop0)
[ 1024.330167][T21739] veth0_macvtap: entered promiscuous mode
[ 1024.362845][T21739] veth1_macvtap: entered promiscuous mode
[ 1024.391668][T21884] XFS (loop6): Ending clean mount
[ 1024.497132][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.544878][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.584363][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.631702][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.668581][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1024.732005][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.752366][T21892] REISERFS (device loop0): Using tea hash to sort names
[ 1024.759833][T21892] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1024.765840][T21739] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1024.803150][ T8238] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1024.845546][T21757] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1024.873313][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1024.936473][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1024.970350][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.000495][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.056494][T21739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1025.084712][T21739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1025.122318][T21739] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1025.191551][T21739] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.218135][T21739] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.250498][T21739] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.267817][T21739] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1025.770024][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1025.848931][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1025.969079][ T2907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1026.012763][ T2907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1026.304060][T21757] veth0_vlan: entered promiscuous mode
[ 1026.339683][T21757] veth1_vlan: entered promiscuous mode
[ 1026.488774][T21757] veth0_macvtap: entered promiscuous mode
[ 1026.524989][T21757] veth1_macvtap: entered promiscuous mode
[ 1026.583975][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1026.610774][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.644947][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1026.681374][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.700473][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1026.730622][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.750431][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1026.770730][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.793688][T21757] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1026.857299][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1026.889321][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.918090][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1026.954669][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1026.985687][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1027.000003][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.012827][T21954] loop3: detected capacity change from 0 to 1024
[ 1027.019413][T21757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1027.052136][T21757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1027.081745][T21757] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1027.132445][T21757] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.151801][T21757] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.165909][T21757] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.178137][T21757] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1027.417372][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1027.447928][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1027.518878][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1027.533738][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1027.818960][T21965] loop6: detected capacity change from 0 to 1024
[ 1027.888972][T21965] EXT4-fs error (device loop6): __ext4_fill_super:5517: comm syz.6.5111: inode #2: comm syz.6.5111: iget: illegal inode #
[ 1028.000958][T21965] EXT4-fs (loop6): get root inode failed
[ 1028.067329][T21965] EXT4-fs (loop6): mount failed
[ 1028.114175][  T173] usb 10-1: new full-speed USB device number 21 using dummy_hcd
[ 1028.362752][  T173] usb 10-1: config 0 has an invalid interface number: 37 but max is 1
[ 1028.407915][  T173] usb 10-1: config 0 has an invalid interface number: 255 but max is 1
[ 1028.468184][  T173] usb 10-1: config 0 has no interface number 0
[ 1028.549402][  T173] usb 10-1: config 0 has no interface number 1
[ 1028.586256][  T173] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1028.679918][  T173] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1028.745721][  T173] usb 10-1: config 0 interface 255 has no altsetting 0
[ 1028.783606][  T173] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3
[ 1028.813449][  T173] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1028.864176][  T173] usb 10-1: Product: syz
[ 1028.897709][  T173] usb 10-1: Manufacturer: syz
[ 1028.917542][  T173] usb 10-1: SerialNumber: syz
[ 1028.956775][  T173] usb 10-1: config 0 descriptor??
[ 1029.279996][ T5819] usb 10-1: USB disconnect, device number 21
[ 1029.335329][ T5776] Bluetooth: hci4: unexpected event for opcode 0x040d
[ 1029.620675][  T173] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1029.826694][  T173] usb 1-1: Using ep0 maxpacket: 32
[ 1029.858418][  T173] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.894469][  T173] usb 1-1: too many endpoints for config 1 interface 2 altsetting 240: 255, using maximum allowed: 30
[ 1029.946509][  T173] usb 1-1: config 1 interface 2 altsetting 240 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1029.967821][T22020] loop3: detected capacity change from 0 to 2048
[ 1030.005324][  T173] usb 1-1: config 1 interface 2 has no altsetting 0
[ 1030.029358][  T173] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[ 1030.058283][  T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.078576][  T173] usb 1-1: Product: syz
[ 1030.097240][  T173] usb 1-1: Manufacturer: syz
[ 1030.107293][T22020] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[ 1030.130644][  T173] usb 1-1: SerialNumber: syz
[ 1030.141015][T22020] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[ 1030.179849][T22020] UDF-fs: Scanning with blocksize 512 failed
[ 1030.237980][T22020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1030.320218][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5128'.
[ 1030.480462][  T173] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1030.580669][  T173] usb 1-1: USB disconnect, device number 14
[ 1031.033777][ T5819] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1031.250498][ T5819] usb 10-1: Using ep0 maxpacket: 32
[ 1031.271578][ T5819] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[ 1031.301542][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1031.309746][ T5819] usb 10-1: Product: syz
[ 1031.334912][ T5819] usb 10-1: Manufacturer: syz
[ 1031.339718][ T5819] usb 10-1: SerialNumber: syz
[ 1031.374524][T22058] loop0: detected capacity change from 0 to 128
[ 1031.390207][ T5819] usb 10-1: config 0 descriptor??
[ 1031.403629][ T5819] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[ 1031.427599][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[ 1031.444137][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1031.467171][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[ 1031.480303][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1031.517063][ T5819] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1031.531345][ T5819] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[ 1031.541279][ T5819] usb 10-1: media controller created
[ 1031.585830][ T5819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1031.655469][T22039] ttusb2: i2c wr len=120 too high
[ 1031.701451][ T5819] usb 10-1: selecting invalid altsetting 3
[ 1031.752619][ T5819] ttusb2: set interface to alts=3 failed
[ 1031.899454][ T5819] DVB: Unable to find symbol tda10086_attach()
[ 1031.930972][ T5819] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[ 1031.976363][ T5819] dvb-usb: bulk message failed: -22 (4/0)
[ 1031.996524][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1032.047818][ T5819] dvb-usb: bulk message failed: -22 (5/0)
[ 1032.070923][ T5819] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[ 1032.116396][ T5819] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[ 1032.140562][T22073] netlink: 'syz.3.5139': attribute type 1 has an invalid length.
[ 1032.169123][ T5819] usb 10-1: USB disconnect, device number 22
[ 1032.175817][T22073] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5139'.
[ 1032.334822][ T5819] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[ 1033.003854][T22094] loop3: detected capacity change from 0 to 16
[ 1033.058486][T22094] erofs: (device loop3): mounted with root inode @ nid 36.
[ 1033.179425][T22094] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 0
[ 1033.392512][T22066] loop6: detected capacity change from 0 to 32768
[ 1033.520443][T22066] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[ 1033.569021][T22066] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1033.589959][T22102] loop9: detected capacity change from 0 to 4096
[ 1033.631848][T22102] ntfs3: loop9: Different NTFS sector size (4096) and media sector size (512).
[ 1033.726959][T22066] XFS (loop6): Ending clean mount
[ 1033.733705][T22102] ntfs3: loop9: Mark volume as dirty due to NTFS errors
[ 1033.763924][T22066] XFS (loop6): Quotacheck needed: Please wait.
[ 1033.795157][T22102] ntfs3: loop9: Failed to initialize $Extend/$Reparse.
[ 1033.928778][T22085] loop0: detected capacity change from 0 to 32768
[ 1034.022124][T22085] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[ 1034.069110][T22066] XFS (loop6): Quotacheck: Done.
[ 1034.297154][T21757] ntfs3: loop9: ino=1a, ntfs_sync_fs failed, -22.
[ 1034.429376][ T6646] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10
[ 1034.483771][ T8238] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1034.689246][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.313808][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1035.510501][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5163'.
[ 1035.843236][T22167] loop9: detected capacity change from 0 to 1024
[ 1036.434197][T22182] loop9: detected capacity change from 0 to 1024
[ 1036.461698][T22182] EXT4-fs: Ignoring removed i_version option
[ 1036.568236][T22182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[ 1036.587894][T22182] System zones: 0-1, 3-12
[ 1036.606551][T22185] loop6: detected capacity change from 0 to 4096
[ 1036.621948][T22182] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1036.740823][T22185] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1036.801676][T21757] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1036.890338][T22185] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1037.066771][ T8238] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.046344][T22223] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.5183'.
[ 1038.101459][T22223] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.5183'.
[ 1039.312953][T22262] loop6: detected capacity change from 0 to 256
[ 1039.443297][T22262] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[ 1039.845280][T22277] loop8: detected capacity change from 0 to 7
[ 1039.866217][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1039.875587][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1039.902206][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1039.911565][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1039.930379][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1039.939685][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1039.956149][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1039.965440][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.006239][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.015518][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.025529][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.034784][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.043634][    C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.053050][    C0] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.061234][T22277] ldm_validate_partition_table(): Disk read failed.
[ 1040.104873][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.114138][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.128353][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.137622][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.147661][    C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1040.157008][    C1] Buffer I/O error on dev loop8, logical block 0, async page read
[ 1040.165889][T22277] Dev loop8: unable to read RDB block 0
[ 1040.208114][T22277]  loop8: unable to read partition table
[ 1040.241671][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1040.252755][T22284] program syz.9.5202 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1040.270654][T22277] loop8: partition table beyond EOD, truncated
[ 1040.287757][T22277] loop_reread_partitions: partition scan of loop8 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1040.735532][T22297] loop3: detected capacity change from 0 to 2048
[ 1040.866670][   T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.994696][T22301] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1041.153087][   T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.353598][   T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.656694][   T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1041.965627][T22323] loop9: detected capacity change from 0 to 256
[ 1042.012917][T22323] exFAT-fs (loop9): error, The cluster chain has a loop
[ 1042.020000][T22323] exFAT-fs (loop9): Filesystem has been set read-only
[ 1042.051187][T22323] exFAT-fs (loop9): failed to count the number of clusters in root
[ 1042.076909][T22323] exFAT-fs (loop9): failed to recognize exfat type
[ 1042.472458][T22329] loop9: detected capacity change from 0 to 64
[ 1042.638106][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1042.656693][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1042.706421][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1042.714920][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1042.726882][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1042.735320][T22329] hfs: request for non-existent node 237 in B*Tree
[ 1043.029698][T22338] loop3: detected capacity change from 0 to 512
[ 1043.181833][T22338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1043.443521][T21739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1044.402575][T18660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1044.422714][T18660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1044.439248][T18660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1044.460782][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1044.468610][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1044.476311][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1044.595482][T22363] lo speed is unknown, defaulting to 1000
[ 1044.981160][T22376] syzkaller1: tun_chr_ioctl cmd 1074025672
[ 1044.987128][T22376] syzkaller1: ignored: set checksum enabled
[ 1045.086218][T22355] loop0: detected capacity change from 0 to 40427
[ 1045.114724][T22355] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[ 1045.171079][T22355] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288)
[ 1045.224116][T22355] F2FS-fs (loop0): invalid crc value
[ 1045.324864][T22385] loop3: detected capacity change from 0 to 128
[ 1045.348241][T22355] F2FS-fs (loop0): invalid crc value
[ 1045.360352][T22355] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
[ 1045.395635][T22385] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1045.468642][T22385] hpfs: filesystem error: improperly stopped
[ 1045.501129][T22385] hpfs: You really don't want any checks? You are crazy...
[ 1045.527353][T22385] hpfs: hpfs_map_sector(): read error
[ 1045.542003][T22385] hpfs: code page support is disabled
[ 1045.559245][T22385] hpfs: hpfs_map_4sectors(): unaligned read
[ 1045.567998][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5228'.
[ 1045.594498][T22385] hpfs: hpfs_map_4sectors(): unaligned read
[ 1045.606079][T22385] hpfs: filesystem error: unable to find root dir
[ 1046.283603][T22398] loop3: detected capacity change from 0 to 4096
[ 1046.307562][T22398] EXT4-fs: inline encryption not supported
[ 1046.414318][T22398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1046.425477][T22398] EXT4-fs (loop3): Test dummy encryption mode enabled
[ 1046.501198][T22398] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c0a8, mo2=0003]
[ 1046.536859][ T5819] hid-generic 0005:0C45:1010.0019: unknown main item tag 0x0
[ 1046.593302][T22398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1046.610510][ T5779] Bluetooth: hci2: command tx timeout
[ 1046.761697][ T5819] hid-generic 0005:0C45:1010.0019: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa
[ 1046.793636][   T48] hsr_slave_0: left promiscuous mode
[ 1046.854010][   T48] hsr_slave_1: left promiscuous mode
[ 1046.876606][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1046.900593][   T48] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1046.949542][T21739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1046.959813][   T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1046.983143][   T48] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1047.068228][   T48] bridge_slave_1: left promiscuous mode
[ 1047.089664][   T48] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1047.165891][   T48] bridge_slave_0: left allmulticast mode
[ 1047.178867][   T48] bridge_slave_0: left promiscuous mode
[ 1047.210680][   T48] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1047.301932][   T48] veth1_macvtap: left allmulticast mode
[ 1047.312305][   T48] veth1_macvtap: left promiscuous mode
[ 1047.318006][   T48] veth0_macvtap: left promiscuous mode
[ 1047.332069][   T48] veth1_vlan: left promiscuous mode
[ 1047.769708][   T48] infiniband syz1: set down
[ 1048.318026][T22442] loop9: detected capacity change from 0 to 256
[ 1048.330668][   T48] bond1 (unregistering): Released all slaves
[ 1048.379272][T22442] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1048.710437][ T5779] Bluetooth: hci2: command tx timeout
[ 1048.840878][T22450] loop5: detected capacity change from 0 to 7
[ 1048.867603][T22450] Dev loop5: unable to read RDB block 7
[ 1048.884975][T22450]  loop5: unable to read partition table
[ 1048.901793][T22450] loop5: partition table beyond EOD, truncated
[ 1048.928808][T22450] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü�¾Ã½¸*‹ºÐ	œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5)
[ 1049.009374][T22452] loop9: detected capacity change from 0 to 8192
[ 1049.070696][T22452] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1049.097081][T22452] REISERFS (device loop9): found reiserfs format "3.5" with non-standard journal
[ 1049.116827][T22452] REISERFS (device loop9): using ordered data mode
[ 1049.130410][T22452] reiserfs: using flush barriers
[ 1049.150546][T22452] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1049.182019][T22452] REISERFS (device loop9): checking transaction log (loop9)
[ 1049.204632][T22452] REISERFS (device loop9): Using r5 hash to sort names
[ 1049.214308][T22452] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage.
[ 1049.336143][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1049.456608][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1049.480704][  T173] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1049.682745][  T173] usb 4-1: Using ep0 maxpacket: 32
[ 1049.692248][  T173] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 1049.724425][  T173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.736312][  T173] usb 4-1: config 0 descriptor??
[ 1049.766651][  T173] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 1049.854635][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1049.890499][ T5819] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1050.084039][ T5819] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1050.100634][ T5819] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1050.125245][ T5819] usb 10-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1050.142909][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.151414][ T5819] usb 10-1: Product: syz
[ 1050.160434][ T5819] usb 10-1: Manufacturer: syz
[ 1050.175512][ T5819] usb 10-1: SerialNumber: syz
[ 1050.412665][ T5819] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1050.453572][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1050.573588][   T48] team0 (unregistering): Port device team_slave_1 removed
[ 1050.582819][  T173] gspca_sunplus: reg_w_riv err -71
[ 1050.588143][  T173] sunplus: probe of 4-1:0.0 failed with error -71
[ 1050.612300][ T5819] usb 10-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[ 1050.636050][  T173] usb 4-1: USB disconnect, device number 9
[ 1050.643323][ T5819] usb 10-1: found format II with max.bitrate = 4, frame size=7372
[ 1050.753818][   T48] team0 (unregistering): Port device team_slave_0 removed
[ 1050.770447][ T5779] Bluetooth: hci2: command tx timeout
[ 1050.887362][   T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1050.896713][   T48] bond_slave_1 (unregistering): left allmulticast mode
[ 1051.016759][ T5819] usb 10-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0)
[ 1051.032555][   T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1051.045593][   T48] bond_slave_0 (unregistering): left allmulticast mode
[ 1051.083804][ T5819] usb 10-1: USB disconnect, device number 23
[ 1051.191670][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1052.108139][   T48] bond0 (unregistering): Released all slaves
[ 1052.316233][ T2907] smc: removing ib device syz1
[ 1052.454478][T21829] lo speed is unknown, defaulting to 1000
[ 1052.855189][ T5779] Bluetooth: hci2: command tx timeout
[ 1052.916275][T22363] chnl_net:caif_netlink_parms(): no params data found
[ 1052.972691][T22474] loop0: detected capacity change from 0 to 2048
[ 1053.136208][T22474] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1053.195544][   T28] audit: type=1800 audit(1785408170.241:221): pid=22474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5256" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1053.234712][T22474] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[ 1053.329779][T22474] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 11 with max blocks 1 with error 28
[ 1053.424304][T22474] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 1053.424304][T22474] 
[ 1053.460703][T22474] EXT4-fs (loop0): Total free blocks count 0
[ 1053.478765][T22474] EXT4-fs (loop0): Free/Dirty block details
[ 1053.508535][T22495] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1053.530194][T22474] EXT4-fs (loop0): free_blocks=4096
[ 1053.548079][T22474] EXT4-fs (loop0): dirty_blocks=16
[ 1053.572657][T22474] EXT4-fs (loop0): Block reservation details
[ 1053.610429][T22474] EXT4-fs (loop0): i_reserved_data_blocks=1
[ 1053.704488][   T28] audit: type=1800 audit(1785408170.731:222): pid=22492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5256" name="file1" dev="loop0" ino=15 res=0 errno=0
[ 1054.010774][T22363] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1054.061486][T22363] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.068802][T22363] bridge_slave_0: entered allmulticast mode
[ 1054.101806][T18658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1054.125769][T22363] bridge_slave_0: entered promiscuous mode
[ 1054.165162][T22363] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1054.200384][T22363] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.207791][T22363] bridge_slave_1: entered allmulticast mode
[ 1054.223517][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1054.286244][T22363] bridge_slave_1: entered promiscuous mode
[ 1054.666641][T22363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1054.703760][ T1290] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.710159][ T1290] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.780759][T22363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1054.801644][T22517] loop0: detected capacity change from 0 to 8192
[ 1054.900645][T22517]  loop0: p1 < > p2 < > p3 p4 < >
[ 1054.905836][T22517] loop0: partition table partially beyond EOD, truncated
[ 1054.938569][T22517] loop0: p1 start 67108864 is beyond EOD, truncated
[ 1055.001318][T22517] loop0: p3 start 100859904 is beyond EOD, truncated
[ 1055.241661][T22363] team0: Port device team_slave_0 added
[ 1055.303672][T22363] team0: Port device team_slave_1 added
[ 1055.350620][T22535] comedi: valid board names for 8255 driver are:
[ 1055.368551][T22535]  8255
[ 1055.372040][T22535] comedi: valid board names for vmk80xx driver are:
[ 1055.400482][T22535]  vmk80xx
[ 1055.403629][T22535] comedi: valid board names for usbduxsigma driver are:
[ 1055.436996][T22535]  usbduxsigma
[ 1055.456031][T22535] comedi: valid board names for usbduxfast driver are:
[ 1055.514679][T22535]  usbduxfast
[ 1055.524804][T22535] comedi: valid board names for usbdux driver are:
[ 1055.552558][T22363] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1055.559582][T22363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1055.561103][T22535]  usbdux
[ 1055.665677][T22535] comedi: valid board names for ni6501 driver are:
[ 1055.700419][T22535]  ni6501
[ 1055.703516][T22363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1055.719359][T22535] comedi: valid board names for dt9812 driver are:
[ 1055.734340][T22535]  dt9812
[ 1055.747998][T22535] comedi: valid board names for ni_labpc_cs driver are:
[ 1055.777949][T22535]  ni_labpc_cs
[ 1055.799181][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[ 1055.818747][T22535] comedi: valid board names for ni_daq_700 driver are:
[ 1055.838865][ T5791] udevd[5791]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[ 1055.856071][T22535]  ni_daq_700
[ 1055.871418][T22535] comedi: valid board names for labpc_pci driver are:
[ 1055.893442][T22363] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1055.920558][T22535]  labpc_pci
[ 1055.930358][T22363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1055.956418][T22535] comedi: valid board names for adl_pci9118 driver are:
[ 1055.956437][T22535]  pci9118dg
[ 1055.990487][T22535]  pci9118hg
[ 1055.997591][T22535]  pci9118hr
[ 1056.007164][T22535] comedi: valid board names for 8255_pci driver are:
[ 1056.036779][T22535]  8255_pci
[ 1056.044577][ T6646] udevd[6646]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[ 1056.053804][T22535] comedi: valid board names for s526 driver are:
[ 1056.066094][T22363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1056.094501][ T5775] udevd[5775]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory
[ 1056.123000][T22535]  s526
[ 1056.162252][T22535] comedi: valid board names for multiq3 driver are:
[ 1056.175055][T22548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5274'.
[ 1056.256646][T22535]  multiq3
[ 1056.268167][T22535] comedi: valid board names for pcmuio driver are:
[ 1056.304977][T22535]  pcmuio48
[ 1056.308187][T22535]  pcmuio96
[ 1056.315124][T22535] comedi: valid board names for pcmmio driver are:
[ 1056.344429][T22535]  pcmmio
[ 1056.347458][T22535] comedi: valid board names for pcmda12 driver are:
[ 1056.388991][T22535]  pcmda12
[ 1056.409284][T22535] comedi: valid board names for pcmad driver are:
[ 1056.436087][T22535]  pcmad12
[ 1056.446318][T22535]  pcmad16
[ 1056.449423][T22535] comedi: valid board names for ni_labpc driver are:
[ 1056.479873][T22535]  lab-pc-1200
[ 1056.493892][T22535]  lab-pc-1200ai
[ 1056.497516][T22535]  lab-pc+
[ 1056.514465][T22535] comedi: valid board names for atmio16 driver are:
[ 1056.530454][T22535]  atmio16
[ 1056.533642][T22535]  atmio16d
[ 1056.536831][T22535] comedi: valid board names for ni_at_ao driver are:
[ 1056.574687][T22535]  at-ao-6
[ 1056.579930][T22363] hsr_slave_0: entered promiscuous mode
[ 1056.598244][T22363] hsr_slave_1: entered promiscuous mode
[ 1056.604989][T22535]  at-ao-10
[ 1056.608376][T22363] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1056.620317][T22363] Cannot create hsr debugfs directory
[ 1056.626334][T22535] comedi: valid board names for ni_at_a2150 driver are:
[ 1056.646746][T22535]  ni_at_a2150
[ 1056.661059][T22535] comedi: valid board names for adq12b driver are:
[ 1056.684829][T22535]  adq12b
[ 1056.687911][T22535] comedi: valid board names for mpc624 driver are:
[ 1056.720530][T22535]  mpc624
[ 1056.723563][T22535] comedi: valid board names for c6xdigio driver are:
[ 1056.751991][T22535]  c6xdigio
[ 1056.755238][T22535] comedi: valid board names for aio_iiro_16 driver are:
[ 1056.764189][T22559] loop9: detected capacity change from 0 to 4096
[ 1056.781018][T22535]  aio_iiro_16
[ 1056.784469][T22535] comedi: valid board names for aio_aio12_8 driver are:
[ 1056.807370][T22535]  aio_aio12_8
[ 1056.820930][T22535]  aio_ai12_8
[ 1056.833692][T22535]  aio_ao12_4
[ 1056.868833][T22535] comedi: valid board names for fl512 driver are:
[ 1056.888911][T22564] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1056.910615][T22535]  fl512
[ 1056.920393][T22535] comedi: valid board names for dmm32at driver are:
[ 1056.951109][T22535]  dmm32at
[ 1056.954266][T22535] comedi: valid board names for dt282x driver are:
[ 1056.986872][T22535]  dt2821
[ 1056.989934][T22535]  dt2821-f
[ 1057.022312][   T48] IPVS: stop unused estimator thread 0...
[ 1057.038197][T22535]  dt2821-g
[ 1057.045580][T22535]  dt2823
[ 1057.070835][T22535]  dt2824-pgh
[ 1057.074218][T22535]  dt2824-pgl
[ 1057.077536][T22535]  dt2825
[ 1057.100342][T22535]  dt2827
[ 1057.104111][T22535]  dt2828
[ 1057.107095][T22535]  dt2829
[ 1057.130946][T22535]  dt21-ez
[ 1057.134070][T22535]  dt23-ez
[ 1057.156335][T22535]  dt24-ez
[ 1057.173836][T22566] synth uevent: /bus/platform/drivers/intel_xhci_usb_sw: unknown uevent action string
[ 1057.200998][T22535]  dt24-ez-pgl
[ 1057.215779][T22535] comedi: valid board names for dt2817 driver are:
[ 1057.240391][T22535]  dt2817
[ 1057.254119][T22535] comedi: valid board names for dt2815 driver are:
[ 1057.281119][T22535]  dt2815
[ 1057.284149][T22535] comedi: valid board names for dt2814 driver are:
[ 1057.320365][T22535]  dt2814
[ 1057.340617][T22535] comedi: valid board names for dt2811 driver are:
[ 1057.347206][T22535]  dt2811-pgh
[ 1057.372914][T22535]  dt2811-pgl
[ 1057.376300][T22535] comedi: valid board names for dt2801 driver are:
[ 1057.413866][T22535]  dt2801
[ 1057.416901][T22535] comedi: valid board names for das6402 driver are:
[ 1057.467957][T22535]  das6402-12
[ 1057.490524][T22535]  das6402-16
[ 1057.493937][T22535] comedi: valid board names for das1800 driver are:
[ 1057.538569][T22535]  das-1701st
[ 1057.556900][T22535]  das-1701st-da
[ 1057.570641][T22535]  das-1702st
[ 1057.574004][T22535]  das-1702st-da
[ 1057.577585][T22535]  das-1702hr
[ 1057.616820][T22535]  das-1702hr-da
[ 1057.622303][T22535]  das-1701ao
[ 1057.625732][T22535]  das-1702ao
[ 1057.650516][T22535]  das-1801st
[ 1057.653924][T22535]  das-1801st-da
[ 1057.657519][T22535]  das-1802st
[ 1057.690369][T22535]  das-1802st-da
[ 1057.694001][T22535]  das-1802hr
[ 1057.708054][T22535]  das-1802hr-da
[ 1057.717213][T22575] loop9: detected capacity change from 0 to 4096
[ 1057.728420][T22535]  das-1801hc
[ 1057.750725][T22535]  das-1802hc
[ 1057.754134][T22535]  das-1801ao
[ 1057.777839][T22535]  das-1802ao
[ 1057.786290][T22535] comedi: valid board names for das800 driver are:
[ 1057.804297][T22535]  das-800
[ 1057.811692][T22535]  cio-das800
[ 1057.818957][T22535]  das-801
[ 1057.830928][T22575] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[ 1057.838780][T22535]  cio-das801
[ 1057.849669][T22535]  das-802
[ 1057.859817][T22575] UDF-fs: Scanning with blocksize 512 failed
[ 1057.873005][T22535]  cio-das802
[ 1057.876366][T22535]  cio-das802/16
[ 1057.879955][T22535] comedi: valid board names for isa-das08 driver are:
[ 1057.921986][T22535]  isa-das08
[ 1057.925304][T22535]  das08-pgm
[ 1057.928554][T22535]  das08-pgh
[ 1057.948200][T22575] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1057.974877][T22535]  das08-pgl
[ 1057.978194][T22535]  das08-aoh
[ 1058.006313][T22535]  das08-aol
[ 1058.009596][T22535]  das08-aom
[ 1058.030373][T22535]  das08/jr-ao
[ 1058.033892][T22535]  das08jr-16-ao
[ 1058.060543][T22535]  pc104-das08
[ 1058.064003][T22535]  das08jr/16
[ 1058.067336][T22535] comedi: valid board names for das16m1 driver are:
[ 1058.089613][T22575] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[ 1058.120396][T22535]  das16m1
[ 1058.123510][T22535] comedi: valid board names for dac02 driver are:
[ 1058.151925][T22585] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 0 not allocated in directory (ino 1328)
[ 1058.164760][T22535]  dac02
[ 1058.167680][T22535] comedi: valid board names for rti802 driver are:
[ 1058.201189][T22535]  rti802
[ 1058.206405][T22535] comedi: valid board names for rti800 driver are:
[ 1058.231655][T22535]  rti800
[ 1058.244881][T22535]  rti815
[ 1058.247903][T22535] comedi: valid board names for pcm3724 driver are:
[ 1058.289731][T22535]  pcm3724
[ 1058.305002][T22535] comedi: valid board names for pcl818 driver are:
[ 1058.350435][T22535]  pcl818l
[ 1058.353665][T22535]  pcl818h
[ 1058.360677][T22535]  pcl818hd
[ 1058.387237][T22535]  pcl818hg
[ 1058.400491][T22535]  pcl818
[ 1058.403595][T22535]  pcl718
[ 1058.411163][T22535]  pcm3718
[ 1058.416787][T22535] comedi: valid board names for pcl816 driver are:
[ 1058.440427][T22535]  pcl816
[ 1058.453657][T22535]  pcl814b
[ 1058.463846][T22535] comedi: valid board names for pcl812 driver are:
[ 1058.491451][T22535]  pcl812
[ 1058.510344][T22535]  pcl812pg
[ 1058.520828][T22535]  acl8112pg
[ 1058.524197][T22535]  acl8112dg
[ 1058.541163][T22535]  acl8112hg
[ 1058.554144][T22535]  a821pgl
[ 1058.560774][T22535]  a821pglnda
[ 1058.581914][T22535]  a821pgh
[ 1058.598552][T22535]  a822pgl
[ 1058.634112][T22535]  a822pgh
[ 1058.645772][T22535]  a823pgl
[ 1058.659109][T22535]  a823pgh
[ 1058.669998][T22535]  pcl813
[ 1058.676766][T22535]  pcl813b
[ 1058.700374][T22535]  acl8113
[ 1058.710340][T22535]  iso813
[ 1058.720378][T22535]  acl8216
[ 1058.732510][T22535]  a826pg
[ 1058.737326][T22535] comedi: valid board names for pcl730 driver are:
[ 1058.761963][T22535]  pcl730
[ 1058.790471][T22535]  iso730
[ 1058.810333][T22535]  acl7130
[ 1058.820349][T22535]  pcm3730
[ 1058.840704][T22535]  pcl725
[ 1058.858395][T22535]  p8r8dio
[ 1058.873003][T22535]  acl7225b
[ 1058.890618][T22535]  p16r16dio
[ 1058.898532][T22535]  pcl733
[ 1058.907532][T22535]  pcl734
[ 1058.917624][T22535]  opmm-1616-xt
[ 1058.926106][T22535]  pearl-mm-p
[ 1058.946119][T22535]  ir104-pbf
[ 1058.963328][T22535] comedi: valid board names for pcl726 driver are:
[ 1058.982213][T22535]  pcl726
[ 1058.990375][T22535]  pcl727
[ 1059.000650][T22535]  pcl728
[ 1059.017177][ T5779] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1059.026767][ T5779] Bluetooth: hci1: Injecting HCI hardware error event
[ 1059.036904][T22535]  acl6126
[ 1059.040085][T22535]  acl6128
[ 1059.041023][ T5776] Bluetooth: hci1: hardware error 0x00
[ 1059.053590][T22535] comedi: valid board names for pcl724 driver are:
[ 1059.080376][T22535]  pcl724
[ 1059.090919][T22535]  pcl722
[ 1059.099202][T22535]  pcl731
[ 1059.102720][T22535]  acl7122
[ 1059.116274][T22535]  acl7124
[ 1059.135943][T22535]  pet48dio
[ 1059.139910][T22535]  pcmio48
[ 1059.147647][T22535]  onyx-mm-dio
[ 1059.162365][T22535] comedi: valid board names for pcl711 driver are:
[ 1059.190206][T22535]  pcl711
[ 1059.205291][T22535]  pcl711b
[ 1059.230647][T22535]  acl8112hg
[ 1059.234001][T22535]  acl8112dg
[ 1059.237331][T22535] comedi: valid board names for amplc_pc263 driver are:
[ 1059.263484][T22535]  pc263
[ 1059.268927][T22601] loop9: detected capacity change from 0 to 4096
[ 1059.282438][T22535] comedi: valid board names for amplc_pc236 driver are:
[ 1059.311047][T22535]  pc36at
[ 1059.331433][T22535] comedi: valid board names for amplc_dio200 driver are:
[ 1059.370450][T22604] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1059.382808][T22535]  pc212e
[ 1059.394660][T22535]  pc214e
[ 1059.412359][T22535]  pc215e
[ 1059.430425][T22535]  pc218e
[ 1059.447990][T22535]  pc272e
[ 1059.480356][T22535] comedi: valid board names for comedi_parport driver are:
[ 1059.511028][T22535]  comedi_parport
[ 1059.524987][T22535] comedi: valid board names for comedi_test driver are:
[ 1059.561991][T22535]  comedi_test
[ 1059.576299][T22535] comedi: valid board names for comedi_bond driver are:
[ 1059.604481][T22535]  comedi_bond
[ 1060.130490][T12905] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1060.334247][T22363] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1060.344490][T12905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1060.376203][T12905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1060.397992][T22363] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1060.420376][T12905] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1060.433978][T22363] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1060.460351][T12905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.485008][T22363] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1060.510899][T12905] usb 1-1: config 0 descriptor??
[ 1060.567688][T22626] loop9: detected capacity change from 0 to 128
[ 1060.625246][T22626] FAT-fs (loop9): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[ 1060.808568][T22363] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1060.849748][T22363] 8021q: adding VLAN 0 to HW filter on device team0
[ 1060.857316][T22616] loop3: detected capacity change from 0 to 32768
[ 1060.869740][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1060.876983][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1060.944503][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1060.951797][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1060.975696][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.002047][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.055079][T22616] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1061.082544][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.148574][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.209125][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.250682][ T5776] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1061.259128][T22643] input: syz1 as /devices/virtual/input/input38
[ 1061.282465][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.327282][T22616] XFS (loop3): Ending clean mount
[ 1061.353457][T12905] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0
[ 1061.435739][T12905] cp2112 0003:10C4:EA90.001A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1061.573443][T12905] cp2112 0003:10C4:EA90.001A: Part Number: 0x00 Device Version: 0x00
[ 1061.703117][T21739] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1061.776280][T12905] cp2112 0003:10C4:EA90.001A: error requesting SMBus config
[ 1061.829281][T12905] cp2112: probe of 0003:10C4:EA90.001A failed with error -71
[ 1061.887411][T12905] usb 1-1: USB disconnect, device number 15
[ 1062.094960][T22363] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1062.524100][T22668] loop9: detected capacity change from 0 to 256
[ 1062.648478][   T28] audit: type=1800 audit(1785408179.691:223): pid=22668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5302" name="file1" dev="loop9" ino=1048886 res=0 errno=0
[ 1062.669531][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1062.679253][T22668] FAT-fs (loop9): error, clusters badly computed (0 != 128)
[ 1062.698126][T22668] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1062.844198][T22668] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[ 1062.897499][T22679] loop3: detected capacity change from 0 to 1024
[ 1062.910833][  T173] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1062.944024][T22679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1063.100947][  T173] usb 1-1: Using ep0 maxpacket: 8
[ 1063.118927][T22363] veth0_vlan: entered promiscuous mode
[ 1063.134647][  T173] usb 1-1: config index 0 descriptor too short (expected 74, got 45)
[ 1063.164501][T22363] veth1_vlan: entered promiscuous mode
[ 1063.170953][  T173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1063.244968][  T173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1063.286413][  T173] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1063.314350][  T173] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1063.364742][T22363] veth0_macvtap: entered promiscuous mode
[ 1063.369262][  T173] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1063.419646][T22363] veth1_macvtap: entered promiscuous mode
[ 1063.438194][  T173] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1063.482491][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.493617][  T173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.520458][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.550387][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.590457][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.614785][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.629818][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.652697][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1063.664905][T22689] loop3: detected capacity change from 0 to 4096
[ 1063.704592][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.730468][T22689] NILFS (loop3): invalid segment: Checksum error in segment payload
[ 1063.746298][T22689] NILFS (loop3): trying rollback from an earlier position
[ 1063.759712][T22363] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1063.782757][  T173] usb 1-1: GET_CAPABILITIES returned 0
[ 1063.809872][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.819135][  T173] usbtmc 1-1:16.0: can't read capabilities
[ 1063.848640][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.851343][T22689] NILFS (loop3): recovery complete
[ 1063.877277][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1063.915611][T22695] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1063.936864][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1063.988179][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1064.007855][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.060312][T22363] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1064.075220][    C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[ 1064.085809][T22363] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1064.099818][T22674] usbtmc 1-1:16.0: Unable to send data, error -71
[ 1064.123541][T22363] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1064.144744][  T173] usb 1-1: USB disconnect, device number 16
[ 1064.180135][T22363] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.230422][T22363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.239193][T22363] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.262127][T22363] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1064.571046][   T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1064.579525][   T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1064.607723][T22704] loop3: detected capacity change from 0 to 1024
[ 1064.728624][ T3011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1064.757376][ T3011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1064.980714][T22709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5311'.
[ 1065.134637][T22715] loop4: detected capacity change from 0 to 1024
[ 1065.178022][T22715] EXT4-fs: Ignoring removed i_version option
[ 1065.232304][T22715] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002]
[ 1065.279340][T22715] System zones: 0-1, 3-12
[ 1065.314033][T22715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1065.479571][T22701] loop9: detected capacity change from 0 to 32768
[ 1065.518872][T22721] block device autoloading is deprecated and will be removed.
[ 1065.585537][T22363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1065.701024][T22701] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1065.901439][T22701] (syz.9.5310,22701,0):ocfs2_double_lock:1190 ERROR: status = -2
[ 1065.930444][T22701] (syz.9.5310,22701,0):ocfs2_rename:1299 ERROR: status = -2
[ 1065.964413][T22701] (syz.9.5310,22701,0):ocfs2_rename:1690 ERROR: status = -2
[ 1066.281769][T21757] ocfs2: Unmounting device (7,9) on (node local)
[ 1066.344440][T22744] input: syz0 as /devices/virtual/input/input39
[ 1066.639926][T22730] loop3: detected capacity change from 0 to 32768
[ 1066.697939][T22730] BTRFS: device fsid 59b5568a-a427-4554-b73a-27dcd238cc5a devid 1 transid 8 /dev/loop3 scanned by syz.3.5315 (22730)
[ 1066.778400][T22730] BTRFS info (device loop3): first mount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a
[ 1066.816136][T22730] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[ 1066.860407][T22730] BTRFS info (device loop3): using free space tree
[ 1067.094576][T22730] BTRFS info (device loop3): enabling ssd optimizations
[ 1067.158492][T22730] BTRFS info (device loop3): auto enabling async discard
[ 1067.703115][T21739] BTRFS info (device loop3): last unmount of filesystem 59b5568a-a427-4554-b73a-27dcd238cc5a
[ 1067.864735][T22793] loop9: detected capacity change from 0 to 64
[ 1068.324190][T22804] loop3: detected capacity change from 0 to 256
[ 1068.398749][T22804] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1068.445431][T22804] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1068.592335][T22810] loop7: detected capacity change from 0 to 7
[ 1068.600878][T22804] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1068.637070][T22810] Dev loop7: unable to read RDB block 7
[ 1068.696106][ T2907] loop: Write error at byte offset 2, length 3584.
[ 1068.725272][    C1] blk_print_req_error: 11 callbacks suppressed
[ 1068.725292][    C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[ 1068.741222][    C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x8800 phys_seg 1 prio class 2
[ 1068.771149][T22810]  loop7: unable to read partition table
[ 1068.817994][T22810] loop7: partition table beyond EOD, truncated
[ 1068.851710][T22810] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1069.076305][T22821] mmap: syz.4.5336 (22821): VmData 43626496 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 1069.456148][T22830] IPv6: addrconf: prefix option has invalid lifetime
[ 1069.529467][T22825] loop0: detected capacity change from 0 to 8192
[ 1069.603133][T22825] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1069.720612][T22825] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[ 1069.785875][T22825] REISERFS (device loop0): using ordered data mode
[ 1069.822975][T22825] reiserfs: using flush barriers
[ 1069.870360][T22825] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1069.998270][T22825] REISERFS (device loop0): checking transaction log (loop0)
[ 1070.090439][T22825] REISERFS (device loop0): Using r5 hash to sort names
[ 1070.128585][T22825] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1070.502556][T22861] trusted_key: encrypted_key: keyword 'upeate' not recognized
[ 1070.571011][T14165] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1070.774478][T14165] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1070.812289][T14165] usb 5-1: config 0 has no interface number 0
[ 1070.861124][T14165] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1070.894242][T14165] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1070.921587][T14165] usb 5-1: Product: syz
[ 1070.940309][T14165] usb 5-1: Manufacturer: syz
[ 1070.944983][T14165] usb 5-1: SerialNumber: syz
[ 1070.991618][T14165] usb 5-1: config 0 descriptor??
[ 1071.016791][T22872] loop0: detected capacity change from 0 to 128
[ 1071.182682][ T3011] FAT-fs (loop0): error, invalid FAT chain (i_pos 548, last_block 8)
[ 1071.217038][T14165] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 1071.218759][ T3011] FAT-fs (loop0): Filesystem has been set read-only
[ 1071.252216][T14165] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1071.264472][ T3011] FAT-fs (loop0): error, corrupted file size (i_pos 548, 522)
[ 1071.285259][T14165] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 1071.314146][T14165] usb 5-1: media controller created
[ 1071.445301][T14165] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1072.016674][T22890] loop0: detected capacity change from 0 to 2048
[ 1072.093530][T22890] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1072.166624][   T28] audit: type=1800 audit(1785408189.211:224): pid=22890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5352" name="file1" dev="loop0" ino=1367 res=0 errno=0
[ 1072.187390][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1072.572278][T14165] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 1072.730003][T14165] usb 5-1: USB disconnect, device number 10
[ 1072.850458][ T5779] Bluetooth: hci3: command 0x1003 tx timeout
[ 1072.850522][ T5776] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1073.410906][T22922] pimreg: tun_chr_ioctl cmd 1074025677
[ 1073.416729][T22922] pimreg: linktype set to 270
[ 1073.708713][T22937] loop4: detected capacity change from 0 to 2048
[ 1073.726649][T22906] loop3: detected capacity change from 0 to 32768
[ 1073.799273][T22937] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1073.892103][   T28] audit: type=1800 audit(1785408190.931:225): pid=22937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5363" name="file1" dev="loop4" ino=1367 res=0 errno=0
[ 1074.709407][T22965] loop4: detected capacity change from 0 to 8
[ 1074.781855][T22965] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 1074.838987][T22965] SQUASHFS error: Failed to read block 0x9b: -5
[ 1074.880385][T22965] SQUASHFS error: Unable to read metadata cache entry [99]
[ 1074.907604][T22965] SQUASHFS error: Unable to read inode 0x127
[ 1075.592890][T22958] loop3: detected capacity change from 0 to 32768
[ 1075.726503][T22958] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[ 1075.974643][T22958] (syz.3.5365,22958,0):ocfs2_double_lock:1190 ERROR: status = -2
[ 1076.000414][T22958] (syz.3.5365,22958,0):ocfs2_rename:1299 ERROR: status = -2
[ 1076.028481][T22958] (syz.3.5365,22958,0):ocfs2_rename:1690 ERROR: status = -2
[ 1076.243479][T21739] ocfs2: Unmounting device (7,3) on (node local)
[ 1076.251768][T22994] netlink: 27 bytes leftover after parsing attributes in process `syz.0.5377'.
[ 1076.776355][T23003] loop4: detected capacity change from 0 to 256
[ 1076.871690][T23003] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1076.947879][T23005] loop3: detected capacity change from 0 to 2048
[ 1077.080132][T23005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1077.185679][   T28] audit: type=1800 audit(1785408194.231:226): pid=23005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5376" name="file1" dev="loop3" ino=1367 res=0 errno=0
[ 1077.880621][T23031] loop0: detected capacity change from 0 to 256
[ 1077.997509][T23031] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d)
[ 1079.127772][T23063] loop4: detected capacity change from 0 to 256
[ 1079.176698][T23063] exfat: Deprecated parameter 'namecase'
[ 1079.282011][T23067] loop9: detected capacity change from 0 to 4096
[ 1079.305226][T23063] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e8b, chksum : 0xf0cee8ef, utbl_chksum : 0xe619d30d)
[ 1079.443286][T23069] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1079.880401][   T28] audit: type=1326 audit(1785408196.921:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23073 comm="syz.3.5398" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff00899df99 code=0x0
[ 1080.217285][T23060] loop0: detected capacity change from 0 to 32768
[ 1080.312993][T23060] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1080.456344][T23060] XFS (loop0): Ending clean mount
[ 1080.656167][T23101] loop9: detected capacity change from 0 to 256
[ 1080.768095][T18658] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1080.831686][T23105] loop3: detected capacity change from 0 to 512
[ 1080.863348][T23105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[ 1080.937412][T23105] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[ 1080.988171][T23105] EXT4-fs (loop3): orphan cleanup on readonly fs
[ 1081.041306][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.199918][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.249457][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.293803][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.365619][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.399034][T23105] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:512: comm syz.3.5402: Block bitmap for bg 0 marked uninitialized
[ 1081.461388][T23105] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1081.571951][T23105] EXT4-fs (loop3): 1 truncate cleaned up
[ 1081.595742][T23105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1081.820794][T23105] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (35405!=33349)
[ 1082.120456][T21739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1082.525305][T23146] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5412'.
[ 1082.886235][T23153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input40
[ 1083.398026][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5419'.
[ 1083.785091][T23144] loop4: detected capacity change from 0 to 40427
[ 1083.862664][T23144] F2FS-fs (loop4): Invalid SB checksum offset: 0
[ 1083.869148][T23144] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[ 1083.937860][T23144] F2FS-fs (loop4): invalid crc value
[ 1084.024215][   T28] audit: type=1326 audit(1785408201.071:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.123277][   T28] audit: type=1326 audit(1785408201.071:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.236022][   T28] audit: type=1326 audit(1785408201.071:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.281325][   T28] audit: type=1326 audit(1785408201.071:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.334729][   T28] audit: type=1326 audit(1785408201.101:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.393609][T23191] loop9: detected capacity change from 0 to 512
[ 1084.401703][   T28] audit: type=1326 audit(1785408201.101:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23177 comm="syz.9.5425" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff416b9df99 code=0x7ffc0000
[ 1084.482558][T23144] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0
[ 1084.510579][T23144] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[ 1084.706340][T23144] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[ 1084.830716][T23200] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5429'.
[ 1085.310410][  T173] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1085.500351][  T173] usb 1-1: Using ep0 maxpacket: 32
[ 1085.520050][  T173] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[ 1085.544561][  T173] usb 1-1: config 0 has no interface number 0
[ 1085.589790][  T173] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1085.609729][  T173] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.642984][  T173] usb 1-1: Product: syz
[ 1085.647246][  T173] usb 1-1: Manufacturer: syz
[ 1085.681897][  T173] usb 1-1: SerialNumber: syz
[ 1085.711238][  T173] usb 1-1: config 0 descriptor??
[ 1085.739074][  T173] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1085.951096][  T173] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1086.014091][  T173] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1086.249965][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 170
[ 1086.277662][T23230] loop4: detected capacity change from 0 to 512
[ 1086.394131][T23230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1086.462572][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1086.474954][  T173] usb 1-1: USB disconnect, device number 17
[ 1086.500662][T23230] ext4 filesystem being mounted at /26/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1086.529593][  T173] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1086.597406][  T173] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1086.653487][T23230] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1086.671148][  T173] quatech2 1-1:0.51: device disconnected
[ 1086.768504][T23246] program syz.9.5440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1086.805348][T22363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.135910][T23257] loop4: detected capacity change from 0 to 256
[ 1087.357551][T23265] loop9: detected capacity change from 0 to 512
[ 1087.443945][T23265] EXT4-fs (loop9): 1 truncate cleaned up
[ 1087.462029][T23265] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1087.664334][   T28] audit: type=1800 audit(1785408204.691:234): pid=23265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5446" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 1087.768744][T23274] program syz.4.5448 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1087.829326][T21757] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1087.936654][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1088.124213][T23284] loop4: detected capacity change from 0 to 128
[ 1088.199002][T23284] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1088.243185][T23284] hpfs: filesystem error: improperly stopped
[ 1088.270356][T23284] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1088.320832][T23284] hpfs: You really don't want any checks? You are crazy...
[ 1088.328578][T23284] hpfs: hpfs_map_sector(): read error
[ 1088.377707][T23284] hpfs: code page support is disabled
[ 1088.396197][T23284] hpfs: hpfs_map_4sectors(): unaligned read
[ 1088.440468][T23284] hpfs: hpfs_map_4sectors(): unaligned read
[ 1088.456922][T23284] hpfs: filesystem error: unable to find root dir
[ 1088.779741][T23275] loop3: detected capacity change from 0 to 32768
[ 1088.830708][T23275] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.5449 (23275)
[ 1088.894281][T23275] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1088.942617][T23275] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[ 1088.983142][T23275] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[ 1089.020356][T23275] BTRFS info (device loop3): use zstd compression, level 3
[ 1089.080371][T23275] BTRFS info (device loop3): using free space tree
[ 1089.144199][T23282] loop0: detected capacity change from 0 to 32768
[ 1089.282685][  T173] kernel write not supported for file /vcsa1 (pid: 173 comm: kworker/0:2)
[ 1089.364459][T23275] BTRFS info (device loop3): enabling ssd optimizations
[ 1089.387186][T23275] BTRFS info (device loop3): auto enabling async discard
[ 1089.787308][T21739] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1090.076647][T23335] loop4: detected capacity change from 0 to 128
[ 1090.146879][T23335] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1090.271528][T23335] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1090.584976][T22363] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1090.707977][T23345] loop3: detected capacity change from 0 to 256
[ 1090.747428][T23345] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1090.790429][T23345] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[ 1090.848095][T23345] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1091.177234][T23327] loop9: detected capacity change from 0 to 40427
[ 1091.236275][T23327] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[ 1091.278971][T23327] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[ 1091.347509][T23327] F2FS-fs (loop9): Found nat_bits in checkpoint
[ 1091.658626][T23327] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[ 1091.683660][T23327] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[ 1091.714733][T23366] Failed to get privilege flags for destination (handle=0x2:0x0)
[ 1093.089012][T23372] loop3: detected capacity change from 0 to 32768
[ 1093.176800][T23372] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1093.265016][T23402] loop0: detected capacity change from 0 to 256
[ 1093.307083][T23402] exfat: Deprecated parameter 'utf8'
[ 1093.333900][T23402] exfat: Deprecated parameter 'namecase'
[ 1093.350422][T23402] exfat: Deprecated parameter 'namecase'
[ 1093.429902][T23372] XFS (loop3): Ending clean mount
[ 1093.490388][T23402] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[ 1093.562132][   T28] audit: type=1800 audit(1785408210.581:235): pid=23372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5466" name="file2" dev="loop3" ino=6151 res=0 errno=0
[ 1093.943375][T21739] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1094.243670][   T28] audit: type=1326 audit(1785408211.291:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e899df99 code=0x7ffc0000
[ 1094.280012][T23425] loop4: detected capacity change from 0 to 256
[ 1094.312907][T23425] exfat: Deprecated parameter 'utf8'
[ 1094.318322][T23425] exfat: Deprecated parameter 'utf8'
[ 1094.348426][T23425] exfat: Deprecated parameter 'utf8'
[ 1094.356434][   T28] audit: type=1326 audit(1785408211.291:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e899df99 code=0x7ffc0000
[ 1094.450721][   T28] audit: type=1326 audit(1785408211.321:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e899df99 code=0x7ffc0000
[ 1094.514525][T23425] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d)
[ 1094.557827][   T28] audit: type=1326 audit(1785408211.321:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99e899df99 code=0x7ffc0000
[ 1094.660646][   T28] audit: type=1326 audit(1785408211.321:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f99e899df99 code=0x7ffc0000
[ 1094.684763][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1094.800338][   T28] audit: type=1326 audit(1785408211.321:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f99e899dd02 code=0x7ffc0000
[ 1094.899102][T23440] netlink: 75 bytes leftover after parsing attributes in process `syz.0.5484'.
[ 1094.922052][   T28] audit: type=1326 audit(1785408211.321:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99e895e7ce code=0x7ffc0000
[ 1095.034623][   T28] audit: type=1326 audit(1785408211.321:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f99e899ddc7 code=0x7ffc0000
[ 1095.098185][   T28] audit: type=1326 audit(1785408211.321:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23424 comm="syz.4.5479" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99e895e7ce code=0x7ffc0000
[ 1095.344642][T23451] loop4: detected capacity change from 0 to 4096
[ 1095.867629][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1095.875328][T23451] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[ 1095.970458][T14165] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1095.980041][T23451] ntfs3: loop4: failed to convert name for inode 1e.
[ 1096.163043][T14165] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1096.189658][T14165] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.205002][T23469] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5492'.
[ 1096.252296][T14165] usb 10-1: config 0 descriptor??
[ 1096.269456][T14165] cp210x 10-1:0.0: cp210x converter detected
[ 1096.401485][T23474] kernel profiling enabled (shift: 0)
[ 1096.909089][T14165] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71
[ 1096.952847][T14165] cp210x 10-1:0.0: GPIO initialisation failed: -71
[ 1096.996988][T14165] usb 10-1: cp210x converter now attached to ttyUSB0
[ 1097.041996][T14165] usb 10-1: USB disconnect, device number 24
[ 1097.089538][T14165] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1097.129129][T14165] cp210x 10-1:0.0: device disconnected
[ 1097.567675][T23483] loop0: detected capacity change from 0 to 32768
[ 1098.039833][T23474] syz.4.5493: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1
[ 1098.110445][T23474] CPU: 0 PID: 23474 Comm: syz.4.5493 Not tainted syzkaller #0
[ 1098.118002][T23474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1098.128112][T23474] Call Trace:
[ 1098.131427][T23474]  <TASK>
[ 1098.134387][T23474]  dump_stack_lvl+0x18c/0x250
[ 1098.139109][T23474]  ? show_regs_print_info+0x20/0x20
[ 1098.144342][T23474]  ? load_image+0x420/0x420
[ 1098.148886][T23474]  ? __rcu_read_unlock+0x7c/0xd0
[ 1098.153849][T23474]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1098.160302][T23474]  ? cpuset_print_current_mems_allowed+0x2e7/0x360
[ 1098.166846][T23474]  warn_alloc+0x246/0x340
[ 1098.171224][T23474]  ? zone_watermark_ok_safe+0x230/0x230
[ 1098.176822][T23474]  ? _raw_spin_unlock+0x28/0x40
[ 1098.181728][T23474]  __vmalloc_node_range+0x661/0x1320
[ 1098.187072][T23474]  ? free_vm_area+0x50/0x50
[ 1098.191613][T23474]  ? alloc_pages+0x2ff/0x740
[ 1098.196240][T23474]  ? rcu_is_watching+0x15/0xb0
[ 1098.201043][T23474]  ? profile_init+0xee/0x130
[ 1098.205682][T23474]  vzalloc+0x79/0x90
[ 1098.209618][T23474]  ? profile_init+0xee/0x130
[ 1098.214243][T23474]  profile_init+0xee/0x130
[ 1098.218709][T23474]  profiling_store+0x5e/0xc0
[ 1098.223336][T23474]  ? sysfs_kf_read+0x360/0x360
[ 1098.228130][T23474]  kernfs_fop_write_iter+0x3a4/0x520
[ 1098.233548][T23474]  do_iter_write+0x747/0xc50
[ 1098.238191][T23474]  ? vfs_iter_write+0xa0/0xa0
[ 1098.242910][T23474]  ? __asan_memset+0x22/0x40
[ 1098.247618][T23474]  ? iov_iter_bvec+0xd4/0x1b0
[ 1098.252322][T23474]  ? vfs_iter_write+0x6e/0xa0
[ 1098.257037][T23474]  iter_file_splice_write+0x6b6/0xcf0
[ 1098.262454][T23474]  ? splice_from_pipe+0x180/0x180
[ 1098.267516][T23474]  ? splice_shrink_spd+0xc0/0xc0
[ 1098.272486][T23474]  ? common_file_perm+0x198/0x1f0
[ 1098.277552][T23474]  ? splice_from_pipe+0x180/0x180
[ 1098.282604][T23474]  direct_splice_actor+0xe8/0x130
[ 1098.287664][T23474]  splice_direct_to_actor+0x30b/0x8e0
[ 1098.293075][T23474]  ? direct_file_splice_eof+0xb0/0xb0
[ 1098.298479][T23474]  ? warn_unsupported+0xc0/0xc0
[ 1098.303371][T23474]  ? fsnotify_perm+0x5d/0x5e0
[ 1098.308083][T23474]  ? security_file_permission+0x79/0xa0
[ 1098.313669][T23474]  do_splice_direct+0x1d5/0x2f0
[ 1098.318552][T23474]  ? splice_direct_to_actor+0x8e0/0x8e0
[ 1098.324130][T23474]  ? rcu_read_lock_any_held+0xb4/0x140
[ 1098.329625][T23474]  ? do_splice_direct+0x2f0/0x2f0
[ 1098.334797][T23474]  vfs_copy_file_range+0xb7d/0x1590
[ 1098.340038][T23474]  ? generic_copy_file_range+0x1e0/0x1e0
[ 1098.345708][T23474]  ? __might_fault+0xaa/0x120
[ 1098.350508][T23474]  ? __might_fault+0xc6/0x120
[ 1098.355217][T23474]  ? __might_fault+0xaa/0x120
[ 1098.360023][T23474]  __se_sys_copy_file_range+0x324/0x470
[ 1098.365610][T23474]  ? __x64_sys_copy_file_range+0xf0/0xf0
[ 1098.371288][T23474]  ? __x64_sys_copy_file_range+0x21/0xf0
[ 1098.376961][T23474]  do_syscall_64+0x55/0xb0
[ 1098.381422][T23474]  ? clear_bhb_loop+0x40/0x90
[ 1098.386132][T23474]  ? clear_bhb_loop+0x40/0x90
[ 1098.390846][T23474]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1098.396776][T23474] RIP: 0033:0x7f99e899df99
[ 1098.401228][T23474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1098.420887][T23474] RSP: 002b:00007f99e9872028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146
[ 1098.429335][T23474] RAX: ffffffffffffffda RBX: 00007f99e8c25fa0 RCX: 00007f99e899df99
[ 1098.437345][T23474] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003
[ 1098.445349][T23474] RBP: 00007f99e8a34ec4 R08: 0000000000000002 R09: 0000000000000000
[ 1098.453349][T23474] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[ 1098.461358][T23474] R13: 00007f99e8c26038 R14: 00007f99e8c25fa0 R15: 00007fff9cfd8de8
[ 1098.469378][T23474]  </TASK>
[ 1098.472468][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.003101][T23512] loop9: detected capacity change from 0 to 32768
[ 1099.017478][T23474] Mem-Info:
[ 1099.020975][T23508] loop3: detected capacity change from 0 to 40427
[ 1099.029944][T23474] active_anon:23350 inactive_anon:0 isolated_anon:0
[ 1099.029944][T23474]  active_file:5419 inactive_file:52435 isolated_file:0
[ 1099.029944][T23474]  unevictable:768 dirty:255 writeback:0
[ 1099.029944][T23474]  slab_reclaimable:12102 slab_unreclaimable:99278
[ 1099.029944][T23474]  mapped:25351 shmem:14652 pagetables:998
[ 1099.029944][T23474]  sec_pagetables:0 bounce:0
[ 1099.029944][T23474]  kernel_misc_reclaimable:0
[ 1099.029944][T23474]  free:1300993 free_pcp:6036 free_cma:0
[ 1099.075391][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.081918][T23508] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[ 1099.089351][T23508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1099.113867][T23474] Node 0 active_anon:93300kB inactive_anon:0kB active_file:21676kB inactive_file:209524kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101392kB dirty:1020kB writeback:0kB shmem:57072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:11696kB pagetables:3992kB sec_pagetables:0kB all_unreclaimable? no
[ 1099.146649][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.160899][T23474] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[ 1099.191247][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.213745][T23512] XFS (loop9): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1099.241046][T23474] Node 0 DMA free:15344kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1099.268289][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.278120][T23508] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1099.390728][T23512] XFS (loop9): Ending clean mount
[ 1099.421172][T23474] lowmem_reserve[]: 0 2521 2522 2522 2522
[ 1099.444633][T23512] XFS (loop9): Quotacheck needed: Please wait.
[ 1099.470406][T23474] Node 0 DMA32 free:1281004kB boost:0kB min:34684kB low:43352kB high:52020kB reserved_highatomic:0KB active_anon:85660kB inactive_anon:0kB active_file:21676kB inactive_file:209004kB unevictable:1536kB writepending:1020kB present:3129332kB managed:2586840kB mlocked:0kB bounce:0kB free_pcp:22992kB local_pcp:21524kB free_cma:0kB
[ 1099.501200][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.574226][T23508] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1099.590386][T23474] lowmem_reserve[]: 0 0 0 0 0
[ 1099.600785][T23508] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1099.618697][T23474] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB
[ 1099.706054][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.752628][T23512] XFS (loop9): Quotacheck: Done.
[ 1099.790585][T23474] lowmem_reserve[]: 0 0 0 0 0
[ 1099.820585][T23474] Node 1 Normal free:3902720kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:216kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12296kB local_pcp:12296kB free_cma:0kB
[ 1099.850229][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1099.968117][T23536] loop0: detected capacity change from 0 to 512
[ 1099.980649][T23474] lowmem_reserve[]: 0 0 0 0 0
[ 1099.993616][T21739] syz-executor: attempt to access beyond end of device
[ 1099.993616][T21739] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1100.020327][T23474] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB
[ 1100.045688][T23474] Node 0 DMA32: 564*4kB (ME) 551*8kB (UME) 114*16kB (ME) 594*32kB (UME) 342*64kB (UME) 187*128kB (UME) 109*256kB (ME) 51*512kB (UME) 22*1024kB (UME) 10*2048kB (UME) 276*4096kB (UM) = 1300840kB
[ 1100.068041][T21739] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[ 1100.083489][T23474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1100.105165][T21757] XFS (loop9): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1100.116054][T23474] Node 1 Normal: 222*4kB (UM) 63*8kB (UME) 39*16kB (UE) 207*32kB (UME) 73*64kB (UE) 12*128kB (UME) 1*256kB (U) 3*512kB (UME) 1*1024kB (U) 1*2048kB (E) 948*4096kB (M) = 3902720kB
[ 1100.175599][T23536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1100.195568][T23474] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1100.240611][T23474] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1100.269176][T23474] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1100.296777][T23474] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1100.334174][T23474] 67444 total pagecache pages
[ 1100.351608][T23474] 0 pages in swap cache
[ 1100.356961][T23474] Free swap  = 124776kB
[ 1100.372861][T23474] Total swap = 124996kB
[ 1100.391431][T23474] 2097051 pages RAM
[ 1100.399787][T23474] 0 pages HighMem/MovableOnly
[ 1100.415605][T23474] 416955 pages reserved
[ 1100.440607][T23474] 0 pages cma reserved
[ 1100.500192][T18658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1101.116601][T23557] loop3: detected capacity change from 0 to 256
[ 1101.544593][T12905] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[ 1101.990841][T12905] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1102.034082][T12905] usb 1-1: not running at top speed; connect to a high speed hub
[ 1102.090742][T12905] usb 1-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40
[ 1102.130719][T12905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.138925][T12905] usb 1-1: Product: syz
[ 1102.173716][T12905] usb 1-1: Manufacturer: syz
[ 1102.200289][T12905] usb 1-1: SerialNumber: syz
[ 1102.692888][T12905] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1103.020839][T12905] usb 1-1: USB disconnect, device number 18
[ 1103.149794][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1103.770829][T23590] loop4: detected capacity change from 0 to 32768
[ 1103.801088][T23611] loop3: detected capacity change from 0 to 128
[ 1103.828294][T23612] loop0: detected capacity change from 0 to 512
[ 1103.872291][T23612] EXT4-fs (loop0): revision level too high, forcing read-only mode
[ 1103.897009][T23590] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1103.913130][T23595] loop9: detected capacity change from 0 to 32768
[ 1103.966138][T23612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[ 1103.999017][T23595] (syz.9.5513,23595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1104.013897][T23612] EXT4-fs (loop0): orphan cleanup on readonly fs
[ 1104.077542][T23612] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #13: comm syz.0.5518: iget: bad i_size value: 12154761577498
[ 1104.111806][T23595] (syz.9.5513,23595,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[ 1104.158914][T23612] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.5518: couldn't read orphan inode 13 (err -117)
[ 1104.200060][T23590] XFS (loop4): Ending clean mount
[ 1104.243766][T23612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1104.286505][T23595] JBD2: Ignoring recovery information on journal
[ 1104.351741][T23612] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.5518: dx entry: limit 65535 != root limit 120
[ 1104.380767][T23612] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.5518: Corrupt directory, running e2fsck is recommended
[ 1104.437166][T23612] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 3: comm syz.0.5518: path /345/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[ 1104.470879][T23595] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 1104.525261][T22363] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1104.775603][T18658] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1105.173086][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1105.291870][T21757] ocfs2: Unmounting device (7,9) on (node local)
[ 1105.976095][T23639] loop3: detected capacity change from 0 to 32768
[ 1106.052653][T23639] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[ 1106.288736][ T5775] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10
[ 1106.305295][T23667] loop9: detected capacity change from 0 to 256
[ 1106.436602][T23667] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[ 1107.135845][T23689] loop9: detected capacity change from 0 to 64
[ 1107.368956][T23696] loop3: detected capacity change from 0 to 136
[ 1107.569976][T23696] iso9660: Corrupted directory entry in block 2 of inode 1472
[ 1107.786737][T23700] loop0: detected capacity change from 0 to 8192
[ 1107.887479][T23700] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[ 1107.978311][T23700] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[ 1108.023869][T23700] REISERFS (device loop0): using ordered data mode
[ 1108.058954][T23700] reiserfs: using flush barriers
[ 1108.066308][T23710] loop9: detected capacity change from 0 to 2048
[ 1108.107303][T23700] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[ 1108.166186][T23700] REISERFS (device loop0): checking transaction log (loop0)
[ 1108.202155][T23710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.260348][T23710] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1108.564586][T21757] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1108.606992][T23728] loop3: detected capacity change from 0 to 1024
[ 1108.629528][T23728] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1108.758416][T23728] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002]
[ 1108.823198][T23728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1108.845932][T23700] REISERFS (device loop0): Using tea hash to sort names
[ 1108.892863][T23700] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[ 1108.908354][T23728] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1109.059820][T23728] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.5547: bg 0: block 112: padding at end of block bitmap is not set
[ 1109.168368][T23728] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28
[ 1109.230459][T23728] EXT4-fs (loop3): This should not happen!! Data will be lost
[ 1109.230459][T23728] 
[ 1109.277014][T23728] EXT4-fs (loop3): Total free blocks count 0
[ 1109.304477][T23728] EXT4-fs (loop3): Free/Dirty block details
[ 1109.327219][T23728] EXT4-fs (loop3): free_blocks=0
[ 1109.344161][T23728] EXT4-fs (loop3): dirty_blocks=64
[ 1109.369318][T23728] EXT4-fs (loop3): Block reservation details
[ 1109.410517][T23728] EXT4-fs (loop3): i_reserved_data_blocks=4
[ 1109.648196][T21739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1109.722330][T23755] netem: change failed
[ 1110.053586][T23766] loop4: detected capacity change from 0 to 512
[ 1110.103284][T23768] loop9: detected capacity change from 0 to 64
[ 1110.163689][T23766] EXT4-fs (loop4): 1 truncate cleaned up
[ 1110.206593][T23766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1110.423255][   T28] kauditd_printk_skb: 24 callbacks suppressed
[ 1110.423272][   T28] audit: type=1800 audit(1785408227.471:269): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5558" name="file0" dev="loop4" ino=13 res=0 errno=0
[ 1110.448181][T23766] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.5558: bg 0: block 465: padding at end of block bitmap is not set
[ 1110.560377][T23766] EXT4-fs (loop4): Remounting filesystem read-only
[ 1110.724013][T22363] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1110.784547][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1111.098288][T23797] loop3: detected capacity change from 0 to 2048
[ 1111.131657][T23797] EXT4-fs: Ignoring removed nobh option
[ 1111.299889][T23797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1111.408035][T23797] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1111.549887][   T28] audit: type=1800 audit(1785408228.591:270): pid=23797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5568" name="file0" dev="loop3" ino=13 res=0 errno=0
[ 1111.632416][T23797] fs-verity (loop3, inode 13): Error -22 reading file data
[ 1111.681242][T23797] fs-verity (loop3, inode 13): Error -22 building Merkle tree
[ 1111.833397][T21739] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1112.405753][T23802] loop9: detected capacity change from 0 to 32768
[ 1112.643612][   T12] kworker/u4:1: attempt to access beyond end of device
[ 1112.643612][   T12] loop9: rw=1, sector=4680032, nr_sectors = 8 limit=32768
[ 1112.695898][  T113] blkno = 8ed2c, nblocks = 1
[ 1112.701563][  T113] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map
[ 1112.701563][  T113] 
[ 1112.737836][  T113] ERROR: (device loop9): remounting filesystem as read-only
[ 1112.805547][T23849] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN
[ 1112.817366][T23849] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef]
[ 1112.825835][T23849] CPU: 0 PID: 23849 Comm: syz.0.5583 Not tainted syzkaller #0
[ 1112.833621][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1112.843760][T23849] RIP: 0010:rebind_store+0xc7/0x240
[ 1112.849048][T23849] Code: 83 c7 30 4d 89 fd 49 c1 ed 03 41 80 7c 2d 00 00 74 08 4c 89 ff e8 e9 e0 06 fb 41 bc e8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 cb e0 06 fb 4d 8b 24 24 4d 85 e4 0f
[ 1112.868936][T23849] RSP: 0018:ffffc9000437fc78 EFLAGS: 00010206
[ 1112.875070][T23849] RAX: 000000000000001d RBX: 0000000000000001 RCX: 0000000000000000
[ 1112.883100][T23849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
[ 1112.891132][T23849] RBP: dffffc0000000000 R08: ffffffff9765f503 R09: 1ffffffff2ecbea0
[ 1112.899213][T23849] R10: dffffc0000000000 R11: fffffbfff2ecbea1 R12: 00000000000000e8
[ 1112.907256][T23849] R13: 1ffffffff2ecbe9e R14: ffff88802e381780 R15: ffffffff9765f4f0
[ 1112.915300][T23849] FS:  00007fb43018e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1112.924280][T23849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1112.930901][T23849] CR2: 0000001b3201fff8 CR3: 0000000024743000 CR4: 00000000003506f0
[ 1112.938945][T23849] Call Trace:
[ 1112.942250][T23849]  <TASK>
[ 1112.945220][T23849]  ? sysfs_kf_read+0x360/0x360
[ 1112.950020][T23849]  kernfs_fop_write_iter+0x3a4/0x520
[ 1112.955351][T23849]  vfs_write+0x474/0x9a0
[ 1112.959640][T23849]  ? file_end_write+0x250/0x250
[ 1112.964528][T23849]  ? __fget_files+0x3fc/0x460
[ 1112.969247][T23849]  ? __fdget_pos+0x2a3/0x330
[ 1112.973884][T23849]  ? ksys_write+0x74/0x260
[ 1112.978362][T23849]  ksys_write+0x151/0x260
[ 1112.982765][T23849]  ? __ia32_sys_read+0x90/0x90
[ 1112.987587][T23849]  ? lockdep_hardirqs_on+0x98/0x150
[ 1112.992827][T23849]  do_syscall_64+0x55/0xb0
[ 1112.997299][T23849]  ? clear_bhb_loop+0x40/0x90
[ 1113.002004][T23849]  ? clear_bhb_loop+0x40/0x90
[ 1113.006800][T23849]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 1113.012732][T23849] RIP: 0033:0x7fb42f39df99
[ 1113.017176][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1113.036817][T23849] RSP: 002b:00007fb43018e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1113.045385][T23849] RAX: ffffffffffffffda RBX: 00007fb42f625fa0 RCX: 00007fb42f39df99
[ 1113.053406][T23849] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003
[ 1113.061434][T23849] RBP: 00007fb42f434ec4 R08: 0000000000000000 R09: 0000000000000000
[ 1113.069427][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1113.077418][T23849] R13: 00007fb42f626038 R14: 00007fb42f625fa0 R15: 00007ffd0346b278
[ 1113.085431][T23849]  </TASK>
[ 1113.088485][T23849] Modules linked in:
[ 1113.092517][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1113.347776][T23853] loop4: detected capacity change from 0 to 40427
[ 1113.356227][T23853] F2FS-fs (loop4): Small segment_count (9 < 1 * 24)
[ 1113.362973][T23853] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1113.373874][T23849] ---[ end trace 0000000000000000 ]---
[ 1113.379570][T23849] RIP: 0010:rebind_store+0xc7/0x240
[ 1113.385195][T23849] Code: 83 c7 30 4d 89 fd 49 c1 ed 03 41 80 7c 2d 00 00 74 08 4c 89 ff e8 e9 e0 06 fb 41 bc e8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 cb e0 06 fb 4d 8b 24 24 4d 85 e4 0f
[ 1113.406085][T23849] RSP: 0018:ffffc9000437fc78 EFLAGS: 00010206
[ 1113.412698][T23849] RAX: 000000000000001d RBX: 0000000000000001 RCX: 0000000000000000
[ 1113.422168][T23849] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
[ 1113.430600][T23849] RBP: dffffc0000000000 R08: ffffffff9765f503 R09: 1ffffffff2ecbea0
[ 1113.438971][T23849] R10: dffffc0000000000 R11: fffffbfff2ecbea1 R12: 00000000000000e8
[ 1113.447361][T23849] R13: 1ffffffff2ecbe9e R14: ffff88802e381780 R15: ffffffff9765f4f0
[ 1113.455559][T23849] FS:  00007fb43018e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[ 1113.464916][T23849] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1113.472241][T23853] F2FS-fs (loop4): Found nat_bits in checkpoint
[ 1113.501012][T23849] CR2: 00007fb42f3eb680 CR3: 0000000024743000 CR4: 00000000003506f0
[ 1113.546705][T23849] Kernel panic - not syncing: Fatal exception
[ 1113.553401][T23849] Kernel Offset: disabled
[ 1113.557740][T23849] Rebooting in 86400 seconds..