last executing test programs:

11.515810323s ago: executing program 3 (id=696):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

11.350990952s ago: executing program 3 (id=698):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@private, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8)
r1 = socket$netlink(0x10, 0x3, 0x6)
writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700000000000000000000000000dd80d18a", 0x48}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1)

11.212561519s ago: executing program 3 (id=699):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}, {@xino_auto}], [], 0x2c})
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

10.950126729s ago: executing program 3 (id=702):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800000, &(0x7f0000005f80)=ANY=[@ANYBLOB='nls=cp949,barrier,uid=', @ANYRESHEX=0x0, @ANYBLOB="000800139e6ec30b2b99f47f097f267d35dc81666a63e7768c00aeecc11e3d8dd215e24988d111429ce29e60b1481b4454b6c882e8b9de8fa5ff541d3f0470f9a71ac6e14f74c9c65ca943b2e922748c5955a3428550d6fdae754bea64db124b811d06bda34e3f366148a417d90f5120", @ANYBLOB="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", @ANYRES16, @ANYRESHEX, @ANYBLOB="2c6e6f626172726965722c00cd2c1a77bebe1941eb51308a0e1eefab7e5e16b355"], 0x1, 0x6bd, &(0x7f0000000cc0)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x40000002, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

10.663392512s ago: executing program 2 (id=704):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGVERSION(r1, 0x80044801, 0x0)

10.527426248s ago: executing program 3 (id=706):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}}, 0x0)

9.900755301s ago: executing program 3 (id=709):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f5f4000040"])

8.250919162s ago: executing program 2 (id=719):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001680)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

7.390954202s ago: executing program 2 (id=725):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000080)="05", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xe)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)

7.020049805s ago: executing program 2 (id=726):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x40000c0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

5.323413872s ago: executing program 2 (id=735):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5514, &(0x7f0000005d80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r0, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000180)='.pending_reads\x00', 0x20642, 0x0)

5.270715278s ago: executing program 1 (id=736):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8)
listen(r0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0)

4.979737952s ago: executing program 1 (id=737):
r0 = syz_io_uring_setup(0xe80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x100})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)
close(r4)

4.600084036s ago: executing program 1 (id=740):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x404)

3.367462499s ago: executing program 2 (id=748):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
close(r1)

3.27511168s ago: executing program 0 (id=749):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x2, 0x0, @mcast1, 0x2}, 0x1c)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1)

2.890252405s ago: executing program 0 (id=751):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa4d, &(0x7f00000010c0)="$eJzs3U1sHFcdAPC3a6/z0bTZFIeaNLQJhbZ81G4cEz4iIFVzIWoqbpUqLlGSlog0IFIJUvWQ5MSNVlW48nnqpXyoErmgqCculWgkLj0VDhyIglSJAzQkRlm/t17/vcusHdsbe38/afbtm/d23pvZmdnZ+XgvAUOr3nqdmZmopXTp8huH//Ho37ekdHl8Pkez9TraEWuklGo5Phqm98HIXHjzw1ePdwtrabr1WuLp2evtz96TUjqf9qQrqZl2Xbr6+rvTzxy9cOTi3vfePHhtdeYeAACGy7euHJzZ+dc/P7jjo7ceOpQ2tceX4/Nmjm/Lx/2H8oF/Of6vp4XxWsfQaSzkG81DPeQb6ZKvs5xGyDfao/yxMN1Gj3ybKsof6RjXbb5hPSvrcTPV6pML4vX65OTcf/LU+l8/Vps8c+r0C2cHVFFgxf3r4ZTSHoNh6IcLrQ1i8PVY02F2+6D3QABz4vXCRc7HMwt3pj210f7Kv/5UvfvnYQWs9fqv/PVV/q8v2OOwcjbq2lTmq2xH23I8XkeI9y/F7W82Tjhs/2V68XpEo8969rqOsF6uL/Sq58ga12O5etU/rhcb1ddyWJbD10N65/YTv9P18h0D3f3b+X+DYWiHRce3AFm8b242K+nxvr6YvqkifXNF+paK9K0Lci1Ov6fi8zDMfv/yT9Jrtfn/+fE//VLPh5fzbPfm8L4l1ieej1xq+WP/J7YW5cf7ieFu9odjz5388onnr87d/19rr/+38vq+J8ebeWu6kjOU84XxvHr73v/mwnLqPfLdH+pzb5f8rffjC/PVxuenkzr2M4vqMbHwc9t75du9MF8z5NuSh82hvvH4ZGv4XDn+KPvVsrxGw/w2wnyMhXqU/cqOHMZ6wHKU9bHX/f9l/ZxIjdoLp06ffDLHy3r6p5HGptvj91UX9ZuVrjtwZ/p9/mciLXz+Z1t7fKPeuV/YPj++1rlfaIbx0z3G78/x8jv3nZEtrfGTx793+sRKzzwMubPnXvnusdOnT/7AG2+88ab9ZtB7JmC1Tb380venzp575YlTLx178eSLJ8/sP3Bg//T0ga/sn5lqHddPdR7dAxvJ/I/+oGsCAAAAAAAAAAAA9OuHRw5f/cs7X3p/7vn/+ef/yvP/5c7f8vz/j2tzz7rXO8anLv0AlucAd3RJb+UJDayOhXyNPHws1Hc8lLMzfO7jOWz345ef/y/FxXZdS30eCONj+70lX2hOYFF7KWOh1ZHYX+Cncngxh79MMEC1Ld1H57Cqfeuyrpf2KZbQLkX3ghmI8r2VL6W0Y1Ke/+7VrlPZ/+9Ygzqy8tbiccJBzyPQ3T+HuP3v1rHLKk7/V/cNfh43907bNOi6GQY/zM7qxQO4Owy6/89y3rOEZ/74zc23h5Lt+lML95ex/VK4E3d7/5PK31j9f7b7v+tr/3djce8JzeWV+5+fXXu/o9i0q9/9b5z/0g70+NLK/+h2+TfmZ+Wx1F/5s78I5ccLQn26kee/LP+tfZa/aP53V5V07u1uY/+byy+L7fFH+i1/rsa1+sJ6xPPG5fpfPG9c3Azzf2K587/Mjhpv5fJhmK2XfmaXaqX6/11khfv/7SXeh/HFHC87wnKfQ+zhZIn1b0fK78DOMP1axe+b/n/Xt6/msGp7KP3/lvWx2SVe74g3uizbjbqvgfXqg7v3+t/8D9Xg62Lo9/safD0MSxhmZ2dX94RWhYEWzsCX/6D/Jwy6/EEv/yqx/994DB/7/43psf/fmB77/43psX+9mL41pMflGfv/jekPhOnG/oEnwh/smP6Jis/vqkh/sCJ9d0X6JyvS91akP1SR/nBF+v0V6Y9UpH+6Iv0zFemPVqQ/XpH+2Yr0ja48jzKs8w/DLD6fZ/uH4VGer+21/Y9XpAPr10/f2vf087/7dnPu+f+x9vmQch3vUI438n/nH+V4vO6dOuK3097J8b+F9Lv9fAcMk9h+Rvx9f6wiHVi/yn1etm8YQrXuLfb0225Vr+N81pfP5fDzOfxCDp/I4WQOp3K4L4fTa1Q/VsfTv3374Gu1+f/720N6v/eTx+eBYjtR+/usTzw/sNT78WM7fkt1p+Uv83EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgam3XmdmJmopXbr8xuHnjp6auj3mG+0czdbraEes0f5cSk/mcCSHP89vbn746vHO8FYOa2k61VKtPT49e71d0j0ppfNpT7qSmmnXpauvvzv9zNELRy7ufe/Ng9dWbwkAAADAxve/AAAA//+byxxV")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)

2.399345422s ago: executing program 1 (id=753):
r0 = io_uring_setup(0x669, &(0x7f00000002c0))
setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.777495284s ago: executing program 0 (id=755):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000480)=ANY=[], 0x71)

1.652865818s ago: executing program 4 (id=756):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="b9d89eb4940e8486a099b2042deb7c0018be86a1374ca0240e881a0e519efb8b44bc6703f65c2c8314b3d24a", 0x2c}, {&(0x7f0000000480)="cd8b035f8f7561ed92f279303b4214c3ab05d6793e323185b72df0c53cbeba749b80e93cc2cdabd14a29821ebb5da5243ebec569dd2711321ced6418fefa27bf7a505d50eb841d08c7dc85c391e71e2bee00368b51e63ad623711a2fc2f4c03f8e05df04240fd29ea91f857f4f683227705bc804a903a5d5ce5c087b9c397001aa5dc7697ebed38d14ab6c87bd2b32c2eb3eba9a060449eec8367ad4cb976336ca9f2683224a80e52c54ab721fdc840d483955428b34acdd02c137681b70f795ec0a6cce5da31fcc2748ce69e960fd93217a6a2a48f618544035e2ee8b0a8f35c1", 0xe1}, {&(0x7f0000000580)="b49b06a805086893e592ed2469f1a3fc56ab8181ec765290175612d903f2c457bf3ff4c4d3619096f0470b4230e84efa13980f1249dedbed6757b113ea43598998ae5f8a561fbdb2c2646f3e870f855e9d3ebb3cce28e37fdc917a8fa5898e91d48d4fc74ede3400406b78f9dea1fd15c3ebd6d623f59aac33917150c2b3d8d06f8aec4ad1ada87d453bc5dd202e2a7790a35d29e027ea40a2988486141c28de8832e5dd8c6c7036c124c9aefe92821b51946f12a6fc5ac8b41ed36532f1ea73bad67c4a03bce326b2847a86f704074b5b8710b36b15da2423c8c1a37b9668fdc80bebc5a48ce2f0a5744fa2dddcb4d642d0cd", 0xf3}, {&(0x7f00000003c0)="410de91a632d62db5b840fe1eefb", 0xe}, {&(0x7f0000000680)="8bf3da3f905439d0430ff1dd59e3458932222712b9f3e6606c4b282e2aad253a4242165836878076c5b79aac081c042f51d18d252fbf0dbd000cb3ad305fb05a2409208bdeccc3e20d1ea732e52bf0d2c2e0ade1705745952695eadfe04b5742f2d07a8d06d461f1928830b9d2dc01b07e606f4d4584e2018c8a24d868c99d26d5ef47541c56982c1603a00fa478c172e53bffb0615e096bec443b74a7526246a69d48bcc344d98506069a6402caf0846f31e8e343fe5be26e9f6e9d36", 0xbd}, {&(0x7f0000000740)="ebb0d24ac165697c3b5af5aca0bc1eeba61a73c3088bd7092c5a2e25bad2f095298d56f032ff439b12006de1ba22ad087f291576f9ffa5463394165ee2ce2d96fe391cdd4e6c1d76618959cfb731c31f892256100a307abcf38e90d609ae8fb8a80ea6355bf34928eba0f80530ece48e55b33aac4441f34fd369d666d350eb6d19b1cf2146a9293806f72407ee65429ee52e98554dea8ab696a9244f38ee9383b854cdd14a62fb42ebd2176bcc579ee85a49e25490f898b9b1d17df58c336c98", 0xc0}, {&(0x7f0000000800)="b27e2dd3dc142599372146a48a8d2da15b3f60af21c5c5622b66c43574344aab3d3770e368082b007843d036e1223818d8624cd36b59935561b2e1fff1c5dba9e1c2e5fc70a6597645c02c88d7f37d21230c753e3aecc6473f7e4d659b30e2e050e337b54e9a", 0x66}], 0x7}}], 0x1, 0x0)

1.474603899s ago: executing program 4 (id=757):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x20002)
socket$inet6(0xa, 0x2, 0x0)
r1 = dup(r0)
write$FUSE_LSEEK(r1, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x24, 0x7, 0x7fff, 0xfffffffffffffff4, 0x6, 0x7fff, 0x200, 0x2742}, &(0x7f0000000040)={0x8, 0x7c13155f, 0x0, 0xd78, 0x101, 0x44c, 0xb5b0, 0x7}, 0x0, 0x0, 0x0)

1.327643426s ago: executing program 4 (id=758):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000000200)=0x18)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)

1.216322289s ago: executing program 1 (id=759):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.031479011s ago: executing program 0 (id=760):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080), &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000440)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0)

940.180481ms ago: executing program 1 (id=761):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}]}, 0x28}}, 0x0)

937.372092ms ago: executing program 0 (id=762):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRES64], 0x1, 0x620f, &(0x7f000000cb40)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x148452)

789.536398ms ago: executing program 4 (id=763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x3b, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0)

694.441769ms ago: executing program 4 (id=764):
r0 = io_uring_setup(0x1893, &(0x7f00000002c0))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000), 0x8)
sendto$inet6(r1, &(0x7f0000000100)="ee", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private0}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

426.545861ms ago: executing program 4 (id=765):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {0x1}, {0x4000}, {0x0, 0x0, 0x0, 0x420004}]})
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000003"], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000))

0s ago: executing program 0 (id=766):
chdir(0x0)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18)

kernel console output (not intermixed with test programs):

and filenames modes
[   99.550197][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.736328][ T4268] loop3: detected capacity change from 0 to 32768
[   99.770349][ T3647] EXT4-fs (loop0): unmounting filesystem.
[   99.900907][   T27] audit: type=1800 audit(1729772063.387:8): pid=4268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="file2" dev="loop3" ino=5 res=0 errno=0
[   99.939127][ T4286] netlink: 44 bytes leftover after parsing attributes in process `syz.2.71'.
[  100.323475][ T4304] loop0: detected capacity change from 0 to 64
[  100.511756][ T4304] minix_free_block (loop0:2): bit already cleared
[  100.562081][ T4304] minix_free_block (loop0:3): bit already cleared
[  100.582435][ T4304] minix_free_block (loop0:4): bit already cleared
[  100.984757][ T4283] loop1: detected capacity change from 0 to 32768
[  101.106609][ T4283] XFS (loop1): Mounting V5 Filesystem
[  101.163783][ T4326] [U] ^
[  101.236626][ T4283] XFS (loop1): Ending clean mount
[  101.264527][ T4283] XFS (loop1): Quotacheck needed: Please wait.
[  101.448998][ T4283] XFS (loop1): Quotacheck: Done.
[  101.531502][ T4298] loop4: detected capacity change from 0 to 32768
[  101.572167][ T4298] XFS: attr2 mount option is deprecated.
[  101.613037][ T4298] XFS: ikeep mount option is deprecated.
[  101.644605][ T4298] XFS: noikeep mount option is deprecated.
[  101.754989][ T4298] XFS (loop4): Mounting V5 Filesystem
[  102.016588][ T3646] XFS (loop1): Unmounting Filesystem
[  102.022419][ T4298] XFS (loop4): Ending clean mount
[  102.044579][ T4298] XFS (loop4): Quotacheck needed: Please wait.
[  102.163851][ T4298] XFS (loop4): Quotacheck: Done.
[  102.559070][ T3653] XFS (loop4): Unmounting Filesystem
[  102.923460][ T4383] loop1: detected capacity change from 0 to 256
[  103.129989][ T4390] loop2: detected capacity change from 0 to 64
[  103.604036][ T4353] loop0: detected capacity change from 0 to 40427
[  103.666975][ T4353] F2FS-fs (loop0): invalid crc value
[  103.725402][ T4353] F2FS-fs (loop0): Found nat_bits in checkpoint
[  103.795695][ T4398] loop4: detected capacity change from 0 to 4096
[  103.846902][ T4398] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  103.908753][ T4353] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  104.062854][ T4404] loop3: detected capacity change from 0 to 8192
[  104.167198][ T4404] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.220220][   T27] audit: type=1800 audit(1729772067.707:9): pid=4412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="bus" dev="loop4" ino=33 res=0 errno=0
[  104.296261][   T27] audit: type=1800 audit(1729772067.707:10): pid=4398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.169" name="bus" dev="loop4" ino=33 res=0 errno=0
[  104.342318][ T3707] kworker/u4:7: attempt to access beyond end of device
[  104.342318][ T3707] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  104.451561][ T4410] loop2: detected capacity change from 0 to 512
[  104.505479][ T4410] ext4: Unknown parameter 'fowner<00000000000000000000'
[  104.580174][ T3768] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  105.257400][ T4402] loop1: detected capacity change from 0 to 32768
[  105.421012][ T4402] jfs_readdir: bad index table
[  106.181380][ T4430] loop4: detected capacity change from 0 to 32768
[  106.220229][ T4430] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.182 (4430)
[  106.323349][ T4430] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  106.345667][ T4430] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  106.365205][ T4430] BTRFS info (device loop4): enabling disk space caching
[  106.382685][ T4430] BTRFS info (device loop4): force clearing of disk cache
[  106.409689][ T4430] BTRFS info (device loop4): use no compression
[  106.456741][ T4430] BTRFS info (device loop4): disk space caching is enabled
[  106.517845][    T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  106.523208][ T4440] loop3: detected capacity change from 0 to 32768
[  106.590989][ T4448] loop0: detected capacity change from 0 to 32768
[  106.616717][ T4448] XFS: ikeep mount option is deprecated.
[  106.742585][ T4448] XFS (loop0): Mounting V5 Filesystem
[  106.767818][    T7] usb 3-1: Using ep0 maxpacket: 8
[  106.770272][ T4477] loop1: detected capacity change from 0 to 128
[  106.789656][ T4430] BTRFS info (device loop4): enabling ssd optimizations
[  106.816252][ T4430] BTRFS info (device loop4): rebuilding free space tree
[  106.888144][    T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  106.893974][ T4477] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  106.899461][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  106.899501][    T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  106.899526][    T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  106.928275][ T4448] XFS (loop0): Ending clean mount
[  106.932488][    T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  106.959921][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.972053][ T4430] BTRFS info (device loop4): disabling free space tree
[  106.984123][ T4430] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  106.997815][ T4430] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.006094][ T4448] XFS (loop0): Quotacheck needed: Please wait.
[  107.093819][ T4448] XFS (loop0): Quotacheck: Done.
[  107.182930][ T4477] UDF-fs: error (device loop1): udf_fiiter_advance_blk: extent after position 264 not allocated in directory (ino 87)
[  107.288899][    T7] usb 3-1: GET_CAPABILITIES returned 0
[  107.294488][    T7] usbtmc 3-1:16.0: can't read capabilities
[  107.325821][ T3647] XFS (loop0): Unmounting Filesystem
[  107.482924][ T3653] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  107.618386][    T7] usb 3-1: USB disconnect, device number 3
[  107.846419][ T4493] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  108.434162][ T4508] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  108.438276][ T4510] loop4: detected capacity change from 0 to 1024
[  108.538738][ T4508] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  108.620221][ T4510] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  108.960190][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  109.222714][ T4506] loop0: detected capacity change from 0 to 32768
[  109.255567][ T4506] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop0 scanned by syz.0.193 (4506)
[  109.308729][ T4506] BTRFS info (device loop0): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  109.348173][ T4506] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  109.377365][ T4506] BTRFS info (device loop0): doing ref verification
[  109.403098][ T4506] BTRFS info (device loop0): using free space tree
[  109.549848][ T4501] loop3: detected capacity change from 0 to 40427
[  109.583746][ T4501] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  109.608008][ T4501] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  109.715004][ T4501] F2FS-fs (loop3): Found nat_bits in checkpoint
[  109.886791][ T4501] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  109.916510][ T4501] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  110.072779][ T3647] BTRFS info (device loop0): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f
[  110.433357][ T4565] loop4: detected capacity change from 0 to 256
[  110.624250][ T3651] syz-executor: attempt to access beyond end of device
[  110.624250][ T3651] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  110.717765][ T4097] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  110.967995][ T4097] usb 2-1: Using ep0 maxpacket: 16
[  111.108429][ T4097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.143316][ T4097] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.154414][ T4563] loop2: detected capacity change from 0 to 32768
[  111.247327][ T4563] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  111.264186][ T4563] XFS (loop2): Mounting V5 Filesystem
[  111.284024][ T4097] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  111.297818][ T4097] usb 2-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0
[  111.306308][ T4097] usb 2-1: Product: syz
[  111.311400][ T4097] usb 2-1: Manufacturer: syz
[  111.339010][ T4097] usb 2-1: config 0 descriptor??
[  111.400683][ T4563] XFS (loop2): Ending clean mount
[  111.567277][ T3958] XFS (loop2): Unmounting Filesystem
[  111.594423][ T4575] loop0: detected capacity change from 0 to 32768
[  111.708777][ T4575] XFS (loop0): Mounting V5 Filesystem
[  111.787153][ T4598] loop4: detected capacity change from 0 to 128
[  111.835401][ T4575] XFS (loop0): Ending clean mount
[  111.846329][ T4575] XFS (loop0): Quotacheck needed: Please wait.
[  111.861297][ T4097] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xd
[  111.934834][ T4097] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.1-1/input0
[  112.047141][ T4575] XFS (loop0): Quotacheck: Done.
[  112.339005][ T3647] XFS (loop0): Unmounting Filesystem
[  112.528774][ T4097] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device
[  112.537234][ T4097] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse
[  112.612185][ T4097] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71
[  112.653680][ T4097] usb 2-1: USB disconnect, device number 5
[  112.829766][   T27] audit: type=1326 audit(1729772076.307:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4617 comm="syz.4.228" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x0
[  113.364538][ T4634] loop0: detected capacity change from 0 to 256
[  113.389006][ T4634] exfat: Deprecated parameter 'utf8'
[  113.409141][ T4634] exfat: Deprecated parameter 'utf8'
[  113.463817][ T4634] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  113.636713][ T4620] loop2: detected capacity change from 0 to 32768
[  113.730156][ T4620] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.229 (4620)
[  113.808332][ T4620] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  113.848745][ T4620] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  113.897808][ T4620] BTRFS info (device loop2): using free space tree
[  114.104277][ T4620] BTRFS info (device loop2): enabling ssd optimizations
[  114.309438][ T3958] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  114.380067][ T4669] overlayfs: failed to set xattr on upper
[  114.407449][ T4669] overlayfs: ...falling back to index=off,metacopy=off.
[  114.410916][ T4640] loop3: detected capacity change from 0 to 32768
[  114.758005][ T4645] loop4: detected capacity change from 0 to 32768
[  114.885960][ T4640] XFS (loop3): Mounting V5 Filesystem
[  114.914109][ T4647] loop0: detected capacity change from 0 to 32768
[  114.957970][ T4647] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.240 (4647)
[  114.967472][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  114.979203][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  114.986783][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  114.998396][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  115.006358][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  115.014236][ T4679] Dead loop on virtual device ip6_vti0, fix it urgently!
[  115.088717][ T4640] XFS (loop3): Ending clean mount
[  115.107913][ T4647] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  115.142773][ T4640] XFS (loop3): Quotacheck needed: Please wait.
[  115.158227][ T4647] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  115.174531][ T4647] BTRFS info (device loop0): use zlib compression, level 3
[  115.206592][ T4647] BTRFS info (device loop0): using free space tree
[  115.325107][ T4640] XFS (loop3): Quotacheck: Done.
[  115.444900][ T4683] loop1: detected capacity change from 0 to 4096
[  115.503250][ T4683] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  115.529702][ T3651] XFS (loop3): Unmounting Filesystem
[  115.635716][ T4683] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  116.161092][ T3647] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  117.341298][ T4721] loop4: detected capacity change from 0 to 32768
[  117.375025][ T4721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.255 (4721)
[  117.453688][ T4721] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.487950][ T4721] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  117.496870][ T4721] BTRFS info (device loop4): using free space tree
[  117.505088][ T4744] loop1: detected capacity change from 0 to 512
[  117.562546][ T4744] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  117.652496][ T4744] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  117.680748][ T4744] EXT4-fs (loop1): 1 truncate cleaned up
[  117.687368][ T4744] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  117.722700][ T4764] loop3: detected capacity change from 0 to 512
[  117.729620][ T4721] BTRFS info (device loop4): enabling ssd optimizations
[  117.793157][ T4764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  117.806447][ T4764] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.880522][ T3653] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.894325][ T3646] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  117.987257][ T3646] EXT4-fs (loop1): unmounting filesystem.
[  118.368573][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  118.764864][ T4786] loop4: detected capacity change from 0 to 512
[  118.873305][ T4786] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  118.884061][ T4791] loop1: detected capacity change from 0 to 256
[  118.905619][ T4791] exfat: Deprecated parameter 'utf8'
[  118.912735][ T4786] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.928714][ T4791] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  119.039613][ T4795] loop2: detected capacity change from 0 to 512
[  119.142677][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  119.149325][ T4800] loop3: detected capacity change from 0 to 4096
[  119.162047][ T4795] EXT4-fs (loop2): 1 truncate cleaned up
[  119.179539][ T4795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  119.231601][ T4803] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  119.325999][ T4775] loop0: detected capacity change from 0 to 32768
[  119.353260][ T4775] XFS: ikeep mount option is deprecated.
[  119.446632][ T4775] XFS (loop0): Mounting V5 Filesystem
[  119.460421][ T3958] EXT4-fs (loop2): unmounting filesystem.
[  119.610056][ T4820] device macvlan2 entered promiscuous mode
[  119.616883][ T4820] device bond_slave_0 entered promiscuous mode
[  119.624072][ T4820] device bond_slave_1 entered promiscuous mode
[  119.635321][ T4820] device bond0 entered promiscuous mode
[  119.645120][ T4775] XFS (loop0): Ending clean mount
[  119.695973][ T4775] XFS (loop0): Quotacheck needed: Please wait.
[  119.708625][ T4820] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  119.805478][ T4775] XFS (loop0): Quotacheck: Done.
[  119.829507][ T4820] team0: Port device macvlan2 added
[  120.151542][ T4831] loop1: detected capacity change from 0 to 2048
[  120.185412][ T4831] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  120.267306][ T4838] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.311989][ T3647] XFS (loop0): Unmounting Filesystem
[  120.580790][ T4843] tipc: Started in network mode
[  120.611122][ T4843] tipc: Node identity f0, cluster identity 4711
[  120.617451][ T4843] tipc: Node number set to 240
[  121.190034][ T4100] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  121.300174][ T4860] loop3: detected capacity change from 0 to 32768
[  121.314552][ T4860] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.299 (4860)
[  121.392279][ T4860] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  121.402788][ T4860] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  121.412498][ T4860] BTRFS info (device loop3): using free space tree
[  121.481429][ T4862] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  121.658597][ T4100] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.748708][ T4860] BTRFS info (device loop3): enabling ssd optimizations
[  121.752910][   T33] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.788150][ T4100] usb 3-1: config 3 has an invalid interface number: 19 but max is 0
[  121.806682][ T4100] usb 3-1: config 3 has an invalid interface number: 4 but max is 0
[  121.818809][ T4100] usb 3-1: config 3 has 2 interfaces, different from the descriptor's value: 1
[  121.845001][ T4100] usb 3-1: config 3 has no interface number 0
[  121.859306][ T4100] usb 3-1: config 3 has no interface number 1
[  121.865744][ T4100] usb 3-1: config 3 interface 19 altsetting 9 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  121.885585][ T4100] usb 3-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30
[  121.897332][ T4100] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32
[  121.914089][ T4100] usb 3-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0
[  121.924563][ T4100] usb 3-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0
[  121.940878][ T4100] usb 3-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175
[  121.956987][ T4100] usb 3-1: config 3 interface 19 has no altsetting 0
[  121.999928][ T4100] usb 3-1: config 3 interface 4 has no altsetting 0
[  122.025472][ T4860] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  122.198237][ T4100] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5
[  122.234737][   T33] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.238137][ T4100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.274023][ T4100] usb 3-1: Product: syz
[  122.307447][ T3651] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  122.333670][ T4100] usb 3-1: Manufacturer: syz
[  122.338597][ T4100] usb 3-1: SerialNumber: syz
[  122.646993][ T3660] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  122.662584][ T3660] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  122.673687][ T3660] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  122.738021][ T4100] pl2303 3-1:3.19: required endpoints missing
[  122.749051][ T3660] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  122.763435][ T3660] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  122.771048][ T3660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  122.800667][ T4100] pl2303 3-1:3.4: required interrupt-in endpoint missing
[  122.824236][ T4100] usb 3-1: USB disconnect, device number 4
[  122.952865][   T33] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.105131][   T33] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.557231][ T4902] loop3: detected capacity change from 0 to 8192
[  123.588330][ T4897] loop4: detected capacity change from 0 to 8192
[  123.607095][ T4902] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  123.637365][ T4897] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  123.641489][ T4902] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  123.677999][ T4902] REISERFS (device loop3): using ordered data mode
[  123.684598][ T4902] reiserfs: using flush barriers
[  123.727394][ T4897] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  123.740148][ T4897] REISERFS (device loop4): using ordered data mode
[  123.746724][ T4897] reiserfs: using flush barriers
[  123.766416][ T4889] chnl_net:caif_netlink_parms(): no params data found
[  123.773649][ T4897] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  123.789713][ T4902] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  123.805406][ T4897] REISERFS (device loop4): checking transaction log (loop4)
[  123.852957][ T4911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.308'.
[  123.892420][ T4902] REISERFS (device loop3): checking transaction log (loop3)
[  123.939080][ T4902] REISERFS (device loop3): Using r5 hash to sort names
[  123.990964][ T4902] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  124.105731][ T4897] REISERFS (device loop4): Using tea hash to sort names
[  124.126739][ T4897] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  124.556063][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.574687][ T4889] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.599590][ T4889] device bridge_slave_0 entered promiscuous mode
[  124.640496][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.655132][ T4889] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.675691][ T4889] device bridge_slave_1 entered promiscuous mode
[  124.868119][ T3660] Bluetooth: hci1: command tx timeout
[  125.145479][ T4889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.310377][ T4889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.536570][ T4889] team0: Port device team_slave_0 added
[  125.673529][ T4889] team0: Port device team_slave_1 added
[  125.732306][ T4943] loop3: detected capacity change from 0 to 8192
[  125.768398][ T4943] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  125.790824][ T4943] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  125.827156][ T4943] REISERFS (device loop3): using ordered data mode
[  125.834859][ T4943] reiserfs: using flush barriers
[  125.856632][ T4943] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  125.880983][ T4943] REISERFS (device loop3): checking transaction log (loop3)
[  125.904756][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.937600][ T4943] REISERFS (device loop3): Using r5 hash to sort names
[  125.946652][ T4943] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  125.957488][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.022259][ T4889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.271631][ T4962] loop0: detected capacity change from 0 to 32768
[  126.288574][ T4889] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.295654][ T4889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.325753][ T4962] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 scanned by syz.0.323 (4962)
[  126.342789][ T4962] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  126.353232][ T4962] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  126.363227][ T4962] BTRFS info (device loop0): using free space tree
[  126.375107][ T4889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.439877][ T4891] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  126.683462][ T4962] BTRFS info (device loop0): enabling ssd optimizations
[  126.711257][ T4891] usb 5-1: Using ep0 maxpacket: 8
[  126.738418][ T4962] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  126.835377][ T4891] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  126.875446][ T4891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  126.886240][ T4891] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  126.907804][ T3647] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  126.914479][ T4891] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  126.961517][ T3660] Bluetooth: hci1: command tx timeout
[  126.982893][ T4891] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  127.037722][ T4891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.377936][ T4891] usb 5-1: GET_CAPABILITIES returned 0
[  127.383527][ T4891] usbtmc 5-1:16.0: can't read capabilities
[  127.444831][ T4889] device hsr_slave_0 entered promiscuous mode
[  127.477205][ T4889] device hsr_slave_1 entered promiscuous mode
[  127.501997][ T4889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.522220][ T4889] Cannot create hsr debugfs directory
[  127.629229][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.639972][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.649153][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.658341][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.667506][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.676670][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.685842][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.695038][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.704224][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.713646][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.722869][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.732127][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.741299][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.750461][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.759613][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.768716][    C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  127.794855][ T4097] usb 5-1: USB disconnect, device number 3
[  128.063501][   T33] device hsr_slave_0 left promiscuous mode
[  128.128374][   T33] device hsr_slave_1 left promiscuous mode
[  128.143532][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  128.162827][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  128.178738][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  128.188282][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  128.207476][   T33] device bridge_slave_1 left promiscuous mode
[  128.240645][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  128.273835][   T33] device bridge_slave_0 left promiscuous mode
[  128.298061][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  128.482762][   T33] device veth1_macvtap left promiscuous mode
[  128.500540][   T33] device veth0_macvtap left promiscuous mode
[  128.531026][   T33] device veth1_vlan left promiscuous mode
[  128.567777][   T33] device veth0_vlan left promiscuous mode
[  128.681395][ T5019] loop0: detected capacity change from 0 to 1024
[  129.027996][ T3660] Bluetooth: hci1: command tx timeout
[  129.893652][ T5030] loop4: detected capacity change from 0 to 32768
[  130.529265][   T33] team0 (unregistering): Port device team_slave_1 removed
[  130.716680][   T33] team0 (unregistering): Port device team_slave_0 removed
[  130.873662][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.012429][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.109215][ T3660] Bluetooth: hci1: command tx timeout
[  131.182641][ T5053] loop0: detected capacity change from 0 to 32768
[  131.251152][ T5053] jfs_strtoUCS: char2uni returned -22.
[  131.257313][ T5053] charset = cp936, char = 0xd5
[  131.360630][   T27] audit: type=1326 audit(1729772094.847:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.389956][   T27] audit: type=1326 audit(1729772094.847:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.413043][   T27] audit: type=1326 audit(1729772094.887:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.435598][   T27] audit: type=1326 audit(1729772094.887:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.465797][   T27] audit: type=1326 audit(1729772094.887:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.491025][   T27] audit: type=1326 audit(1729772094.887:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.513825][   T27] audit: type=1326 audit(1729772094.897:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.537127][   T27] audit: type=1326 audit(1729772094.897:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.560277][   T27] audit: type=1326 audit(1729772094.947:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  131.584645][   T27] audit: type=1326 audit(1729772094.947:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5056 comm="syz.4.345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b5757dff9 code=0x7ffc0000
[  132.385290][   T33] bond0 (unregistering): Released all slaves
[  133.032660][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  133.039231][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  133.277957][ T4023] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  133.330190][ T5083] input: syz0 as /devices/virtual/input/input8
[  133.538019][ T4023] usb 4-1: Using ep0 maxpacket: 8
[  133.663791][ T4023] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  133.683765][ T4023] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  133.712902][ T4023] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.734000][ T4023] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  133.912858][ T4023] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  133.943059][ T4023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.963413][ T4023] usb 4-1: Product: syz
[  133.980167][ T4023] usb 4-1: Manufacturer: syz
[  133.995284][ T4023] usb 4-1: SerialNumber: syz
[  134.015607][ T4023] usb 4-1: config 0 descriptor??
[  134.074330][ T4023] hub 4-1:0.0: bad descriptor, ignoring hub
[  134.087875][ T4023] hub: probe of 4-1:0.0 failed with error -5
[  134.420373][  T124] usb 4-1: USB disconnect, device number 2
[  134.493433][ T5114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'.
[  134.596835][ T4889] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  134.667121][ T4889] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  134.700255][ T5119] loop4: detected capacity change from 0 to 128
[  134.724009][ T4889] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  134.758481][ T4889] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  134.827434][ T5119] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  134.852138][ T5119] ext4 filesystem being mounted at /77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  134.967389][ T4889] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.008155][ T5124] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in;
[  135.008155][ T5124]    program syz.2.365 not setting count and/or reply_len properly
[  135.042306][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  135.063821][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  135.111621][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  135.139909][ T4889] 8021q: adding VLAN 0 to HW filter on device team0
[  135.210594][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  135.245354][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  135.268990][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.276335][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  135.353464][ T5106] loop0: detected capacity change from 0 to 40427
[  135.356402][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  135.388574][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  135.405300][ T5106] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  135.413972][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  135.440750][ T5106] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  135.465169][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.472579][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  135.498414][ T5106] F2FS-fs (loop0): invalid crc value
[  135.508681][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  135.539930][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  135.572594][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  135.609390][ T5106] F2FS-fs (loop0): Found nat_bits in checkpoint
[  135.627976][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  135.669413][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  135.683052][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  135.709242][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.758314][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.796520][ T5106] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  135.808045][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.853443][ T4889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  135.895109][ T4889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.913920][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.927491][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.959882][ T3647] syz-executor: attempt to access beyond end of device
[  135.959882][ T3647] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.057875][ T4097] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  136.317980][ T4097] usb 4-1: Using ep0 maxpacket: 32
[  136.443763][ T4097] usb 4-1: config index 0 descriptor too short (expected 62, got 60)
[  136.462512][ T4097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.497743][ T4097] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  136.538591][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.546293][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  136.593471][ T4889] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.660416][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.689351][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.704635][ T5146] loop2: detected capacity change from 0 to 32768
[  136.718396][ T4097] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=30.ad
[  136.758161][ T4097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.776779][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.795143][ T4097] usb 4-1: Product: syz
[  136.801332][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.814868][ T4097] usb 4-1: Manufacturer: syz
[  136.821409][ T4097] usb 4-1: SerialNumber: syz
[  136.830495][ T4889] device veth0_vlan entered promiscuous mode
[  136.843979][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.855170][ T4097] usb 4-1: config 0 descriptor??
[  136.865980][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.900969][ T4889] device veth1_vlan entered promiscuous mode
[  136.978613][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.988061][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.998379][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  137.021836][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  137.064520][ T4889] device veth0_macvtap entered promiscuous mode
[  137.100103][ T4889] device veth1_macvtap entered promiscuous mode
[  137.141728][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.158792][ T5145] loop3: detected capacity change from 0 to 512
[  137.204780][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.215955][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.236874][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.265351][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.283039][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.293612][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  137.314464][ T5145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  137.332552][ T5145] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.342854][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.381175][ T4023] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  137.390111][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.427488][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  137.454567][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  137.471940][ T4097] usb 4-1: USB disconnect, device number 3
[  137.499939][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  137.529260][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  137.570720][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.588893][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.607733][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.624056][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.658034][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.677732][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.703407][ T4889] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  137.724567][ T4889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  137.768190][ T4889] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.776107][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  137.788271][ T4023] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  137.809009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  137.824180][ T4023] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.847920][ T4023] usb 1-1: config 0 descriptor??
[  137.865454][ T4889] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.885103][ T4889] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.899280][ T4023] cp210x 1-1:0.0: cp210x converter detected
[  137.927077][ T4889] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.948582][ T4889] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.039876][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  138.267419][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.295490][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.393653][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  138.452675][ T3704] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.506085][ T3704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.567967][ T4023] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71
[  138.576179][ T4023] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  138.585304][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  138.682027][ T4023] usb 1-1: cp210x converter now attached to ttyUSB0
[  138.711164][ T5201] tipc: Started in network mode
[  138.718089][ T5201] tipc: Node identity 7f000001, cluster identity 4711
[  138.730264][ T4023] usb 1-1: USB disconnect, device number 5
[  138.748665][ T4023] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  138.768525][ T5183] loop4: detected capacity change from 0 to 32768
[  138.796995][ T4023] cp210x 1-1:0.0: device disconnected
[  138.844418][ T5201] tipc: Enabled bearer <udp:syz1>, priority 10
[  138.873698][ T5183] XFS (loop4): Mounting V5 Filesystem
[  138.882689][ T5200] device ipip0 entered promiscuous mode
[  138.948667][ T5213] loop1: detected capacity change from 0 to 256
[  138.956594][ T5213] exfat: Deprecated parameter 'namecase'
[  138.964087][ T5213] exfat: Deprecated parameter 'utf8'
[  138.979891][ T5213] exfat: Deprecated parameter 'namecase'
[  139.003900][ T5213] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  139.095287][ T5183] XFS (loop4): Ending clean mount
[  139.448433][ T3653] XFS (loop4): Unmounting Filesystem
[  139.478647][ T5228] siw: device registration error -23
[  139.689258][    C0] vkms_vblank_simulate: vblank timer overrun
[  139.789237][ T5235] loop3: detected capacity change from 0 to 128
[  139.851046][ T4104] tipc: Node number set to 2130706433
[  139.865787][ T5235] VFS: Found a Xenix FS (block size = 512) on device loop3
[  140.076142][ T5235] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  140.145718][ T5243] loop0: detected capacity change from 0 to 24
[  140.173760][ T5243] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  140.226286][ T5242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.387'.
[  140.243518][ T5243] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  140.339307][ T5235] sysv_count_free_inodes: unable to read inode table
[  140.366345][ T5235] sysv_count_free_blocks: free block count was -2041545935, correcting to 3
[  140.426837][ T5235] sysv_count_free_inodes: unable to read inode table
[  140.592419][ T3651] sysv_free_block: trying to free block not in datazone
[  140.747828][ T3651] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  140.799701][ T5224] loop2: detected capacity change from 0 to 32768
[  140.818752][ T5224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.381 (5224)
[  140.883593][ T5260] netlink: 56 bytes leftover after parsing attributes in process `syz.3.392'.
[  140.896396][ T5224] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.940747][ T5224] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  140.966677][ T5224] BTRFS info (device loop2): metadata ratio 4
[  140.991574][ T5224] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  141.040601][ T5224] BTRFS info (device loop2): force lzo compression, level 0
[  141.072365][ T5224] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  141.111015][ T5265] loop4: detected capacity change from 0 to 256
[  141.139227][ T5224] BTRFS info (device loop2): trying to use backup root at mount time
[  141.148563][ T5265] exfat: Deprecated parameter 'namecase'
[  141.154309][ T5265] exfat: Deprecated parameter 'utf8'
[  141.183377][ T5224] BTRFS info (device loop2): doing ref verification
[  141.230393][ T5224] BTRFS info (device loop2): enabling auto defrag
[  141.242038][ T5265] exfat: Deprecated parameter 'namecase'
[  141.248603][ T5269] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  141.266581][ T5224] BTRFS info (device loop2): disabling tree log
[  141.287866][ T5224] BTRFS info (device loop2): using free space tree
[  141.294863][ T5265] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0xe1a8932d, utbl_chksum : 0xe619d30d)
[  141.385823][ T5272] IPVS: length: 24 != 49176
[  141.658796][    T9] BTRFS warning (device loop2): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0
[  141.707186][ T5292] loop1: detected capacity change from 0 to 256
[  141.739451][ T5224] BTRFS warning (device loop2): couldn't read tree root
[  141.746536][ T5224] BTRFS warning (device loop2): try to load backup roots slot 1
[  141.811836][    T9] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0
[  141.860270][ T5292] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  141.889312][ T5224] BTRFS warning (device loop2): couldn't read tree root
[  141.896428][ T5224] BTRFS warning (device loop2): try to load backup roots slot 2
[  141.954679][ T5224] BTRFS error (device loop2): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[  141.979836][ T5224] BTRFS warning (device loop2): couldn't read tree root
[  141.987341][ T5224] BTRFS warning (device loop2): try to load backup roots slot 3
[  142.103432][ T5224] BTRFS info (device loop2): enabling ssd optimizations
[  142.128155][  T124] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.154807][ T5224] BTRFS info (device loop2): rebuilding free space tree
[  142.237555][ T5224] BTRFS info (device loop2): checking UUID tree
[  142.378119][  T124] usb 1-1: Using ep0 maxpacket: 32
[  142.501699][  T124] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  142.523370][ T3958] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.525184][  T124] usb 1-1: config 0 has no interface number 0
[  142.703710][ T5281] loop3: detected capacity change from 0 to 32768
[  142.768076][  T124] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  142.868365][ T3655] Bluetooth: hci1: command tx timeout
[  142.873903][  T124] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.910938][  T124] usb 1-1: Product: syz
[  142.933458][  T124] usb 1-1: Manufacturer: syz
[  142.946011][  T124] usb 1-1: SerialNumber: syz
[  143.051177][  T124] usb 1-1: config 0 descriptor??
[  143.092507][ T5281] XFS (loop3): Mounting V5 Filesystem
[  143.121166][  T124] smsc95xx v2.0.0
[  143.311561][ T5341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'.
[  143.548400][ T5281] XFS (loop3): Ending clean mount
[  143.646431][ T5281] XFS (loop3): Quotacheck needed: Please wait.
[  143.867949][ T5281] XFS (loop3): Quotacheck: Done.
[  143.953476][ T4104] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  143.992277][  T124] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  144.007847][ T5281] XFS (loop3): Unmounting Filesystem
[  144.204118][ T5365] loop4: detected capacity change from 0 to 256
[  144.213452][ T4104] usb 3-1: Using ep0 maxpacket: 8
[  144.219016][  T124] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  144.249205][  T124] smsc95xx: probe of 1-1:0.67 failed with error -71
[  144.276611][  T124] usb 1-1: USB disconnect, device number 6
[  144.347961][ T4104] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  144.361586][ T4104] usb 3-1: config 0 has no interface number 0
[  144.382351][ T4104] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  144.395064][ T4104] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  144.407335][ T4104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.424360][ T4104] usb 3-1: config 0 descriptor??
[  144.434272][ T5365] FAT-fs (loop4): Directory bread(block 64) failed
[  144.454235][ T5365] FAT-fs (loop4): Directory bread(block 65) failed
[  144.470578][ T5365] FAT-fs (loop4): Directory bread(block 66) failed
[  144.485050][ T4104] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  144.497860][ T5365] FAT-fs (loop4): Directory bread(block 67) failed
[  144.522871][ T5365] FAT-fs (loop4): Directory bread(block 68) failed
[  144.535206][ T5348] loop1: detected capacity change from 0 to 32768
[  144.542876][ T5365] FAT-fs (loop4): Directory bread(block 69) failed
[  144.568005][ T5365] FAT-fs (loop4): Directory bread(block 70) failed
[  144.579926][ T5365] FAT-fs (loop4): Directory bread(block 71) failed
[  144.586981][ T5365] FAT-fs (loop4): Directory bread(block 72) failed
[  144.595186][ T5365] FAT-fs (loop4): Directory bread(block 73) failed
[  144.668445][ T5348] XFS (loop1): Mounting V5 Filesystem
[  144.808027][ T4097] usb 3-1: USB disconnect, device number 5
[  144.864991][ T4097] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  144.888399][   T33] kworker/u4:2: attempt to access beyond end of device
[  144.888399][   T33] loop4: rw=1, sector=1224, nr_sectors = 4 limit=256
[  144.891857][ T5348] XFS (loop1): Ending clean mount
[  145.120102][ T5376] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  145.128702][ T5376] IPv6: NLM_F_CREATE should be set when creating new route
[  145.151645][ T4889] XFS (loop1): Unmounting Filesystem
[  145.391463][ T5383] netlink: 'syz.3.419': attribute type 4 has an invalid length.
[  145.725847][ T5393] loop3: detected capacity change from 0 to 512
[  145.771183][ T5387] loop4: detected capacity change from 0 to 4096
[  145.817001][ T5393] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  145.845258][ T5387] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  145.939361][ T5387] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  146.527324][   T75] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  146.547911][ T4023] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  146.577450][ T3653] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  146.797810][ T4023] usb 2-1: Using ep0 maxpacket: 32
[  146.918128][ T4023] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  146.947660][    C0] sched: RT throttling activated
[  147.098153][ T4023] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  147.128040][ T4023] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  147.145062][ T5399] loop2: detected capacity change from 0 to 131072
[  147.170458][ T5399] F2FS-fs (loop2): Found nat_bits in checkpoint
[  147.185757][ T4023] usb 2-1: Product: syz
[  147.215722][ T4023] usb 2-1: Manufacturer: syz
[  147.237828][ T5399] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  147.245993][ T4023] usb 2-1: SerialNumber: syz
[  147.318816][ T4023] usb 2-1: config 0 descriptor??
[  147.339195][ T5402] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.498802][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  147.641988][ T5414] input: syz1 as /devices/virtual/input/input9
[  147.723494][  T124] usb 2-1: USB disconnect, device number 6
[  147.881872][ T5405] loop0: detected capacity change from 0 to 32768
[  147.927511][ T5408] loop4: detected capacity change from 0 to 32768
[  147.947236][ T5408] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.427 (5408)
[  147.994133][ T5408] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  148.005564][ T5405] XFS (loop0): Mounting V5 Filesystem
[  148.027837][ T5408] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  148.062889][ T5408] BTRFS info (device loop4): using free space tree
[  148.202445][ T5405] XFS (loop0): Ending clean mount
[  148.284978][ T3647] XFS (loop0): Unmounting Filesystem
[  148.412388][ T4023] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  148.468330][ T5408] BTRFS info (device loop4): enabling ssd optimizations
[  148.667781][ T4023] usb 4-1: Using ep0 maxpacket: 8
[  148.790435][ T4023] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  148.807451][ T4023] usb 4-1: config 0 has no interface number 0
[  148.815833][ T4023] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  148.828861][ T3653] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  148.846514][ T4023] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  148.856967][ T4023] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.870228][ T4023] usb 4-1: config 0 descriptor??
[  148.934451][ T4023] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  148.950856][ T4097] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  149.230155][ T5459] loop0: detected capacity change from 0 to 512
[  149.289551][ T4097] usb 2-1: Using ep0 maxpacket: 8
[  149.307200][ T5459] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  149.343873][ T5459] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.438356][ T4097] usb 2-1: config 0 has an invalid interface number: 137 but max is 0
[  149.446772][ T4097] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.497731][ T4097] usb 2-1: config 0 has no interface number 0
[  149.504037][ T4097] usb 2-1: config 0 interface 137 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  149.557748][ T4097] usb 2-1: config 0 interface 137 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  149.574910][ T4097] usb 2-1: config 0 interface 137 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  149.848889][ T4097] usb 2-1: New USB device found, idVendor=06f8, idProduct=3009, bcdDevice=3c.93
[  149.860074][ T4097] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.877734][ T4097] usb 2-1: Product: syz
[  149.881983][ T4097] usb 2-1: Manufacturer: syz
[  149.886615][ T4097] usb 2-1: SerialNumber: syz
[  149.900829][ T4097] usb 2-1: config 0 descriptor??
[  149.952781][ T4097] gspca_main: gspca_pac7302-2.14.0 probing 06f8:3009
[  149.969166][ T3647] EXT4-fs (loop0): unmounting filesystem.
[  150.075733][ T3707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.113817][ T5465] loop2: detected capacity change from 0 to 32768
[  150.203145][ T5465] jfs_rename did not expect dtDelete to return rc = -2
[  150.219824][ T5465] ERROR: (device loop2): jfs_rename: 
[  150.219824][ T5465] 
[  150.247079][ T3707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.323474][ T4566] usb 4-1: USB disconnect, device number 4
[  150.346389][ T4566] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  150.405924][ T3707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.534319][ T3707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.563912][ T3660] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  150.576923][ T3660] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  150.587938][ T3660] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  150.596910][ T3660] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  150.606156][ T3660] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  150.614156][ T3660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  150.832477][ T4097] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10
[  150.893554][ T5482] loop4: detected capacity change from 0 to 512
[  151.104880][ T5475] chnl_net:caif_netlink_parms(): no params data found
[  151.141053][ T5482] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.445: Parent and EA inode have the same ino 15
[  151.174324][ T4018] usb 2-1: USB disconnect, device number 7
[  151.279337][ T5482] EXT4-fs (loop4): 1 orphan inode deleted
[  151.285248][ T5482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  151.546522][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  151.906209][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.941727][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.966902][ T5475] device bridge_slave_0 entered promiscuous mode
[  152.019226][  T124] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  152.092526][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.104207][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.116792][ T5475] device bridge_slave_1 entered promiscuous mode
[  152.294304][ T4097] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  152.302126][  T124] usb 5-1: Using ep0 maxpacket: 16
[  152.315613][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.356542][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  152.477362][ T5522] loop1: detected capacity change from 0 to 2048
[  152.532192][ T5525] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.566405][ T5475] team0: Port device team_slave_0 added
[  152.592185][ T5475] team0: Port device team_slave_1 added
[  152.648437][  T124] usb 5-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06
[  152.673557][  T124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.704467][  T124] usb 5-1: Product: syz
[  152.709138][ T3660] Bluetooth: hci2: command tx timeout
[  152.726263][ T4097] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  152.746758][  T124] usb 5-1: Manufacturer: syz
[  152.751726][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.765867][  T124] usb 5-1: SerialNumber: syz
[  152.775320][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.777604][ T4097] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.816181][  T124] usb 5-1: config 0 descriptor??
[  152.834452][ T4097] usb 3-1: config 0 descriptor??
[  152.843727][ T5527] loop1: detected capacity change from 0 to 1024
[  152.914178][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.945219][ T5527] hfsplus: bad catalog entry type
[  153.070755][ T4825] udevd[4825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.117958][ T3704] hfsplus: b-tree write err: -5, ino 4
[  153.131824][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1
[  153.151477][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  153.182345][ T5500] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  153.264739][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  153.402411][ T4097] [drm:udl_init] *ERROR* Selecting channel failed
[  153.479969][ T4028] usb 5-1: USB disconnect, device number 4
[  153.524108][ T4097] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  153.557497][ T4097] [drm] Initialized udl on minor 2
[  153.590862][ T4097] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  153.617602][ T4097] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  153.666609][ T4097] usb 3-1: USB disconnect, device number 6
[  153.959321][ T5475] device hsr_slave_0 entered promiscuous mode
[  153.988783][ T5475] device hsr_slave_1 entered promiscuous mode
[  154.015813][ T5475] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.027746][ T5475] Cannot create hsr debugfs directory
[  154.499761][ T4028] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  154.532047][ T3707] device hsr_slave_0 left promiscuous mode
[  154.543286][ T3707] device hsr_slave_1 left promiscuous mode
[  154.565663][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.575098][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.608847][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.623498][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.738563][ T3707] device bridge_slave_1 left promiscuous mode
[  154.747481][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.757384][ T5572] loop3: detected capacity change from 0 to 8
[  154.767868][ T4028] usb 3-1: Using ep0 maxpacket: 8
[  154.780613][ T3707] device bridge_slave_0 left promiscuous mode
[  154.796533][ T3660] Bluetooth: hci2: command tx timeout
[  154.817122][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.908221][ T4028] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  154.923528][ T4028] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.935483][ T4028] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.958070][ T3707] device veth1_macvtap left promiscuous mode
[  154.964287][ T3707] device veth0_macvtap left promiscuous mode
[  154.981094][ T4028] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.988005][ T3707] device veth1_vlan left promiscuous mode
[  154.997319][ T4028] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.007854][ T3707] device veth0_vlan left promiscuous mode
[  155.022457][ T4028] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  155.043369][ T4028] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.269546][ T5565] loop4: detected capacity change from 0 to 32768
[  155.283528][ T5565] XFS: attr2 mount option is deprecated.
[  155.338074][ T4028] usb 3-1: usb_control_msg returned -32
[  155.344346][ T4028] usbtmc 3-1:16.0: can't read capabilities
[  155.431483][ T5565] XFS (loop4): Mounting V5 Filesystem
[  155.537359][ T5565] XFS (loop4): Ending clean mount
[  155.564562][ T5565] XFS (loop4): Quotacheck needed: Please wait.
[  155.674972][ T5565] XFS (loop4): Quotacheck: Done.
[  155.797279][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  155.797297][   T27] audit: type=1800 audit(1729772119.277:23): pid=5565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.466" name="file1" dev="loop4" ino=6150 res=0 errno=0
[  155.877228][ T4027] usb 3-1: USB disconnect, device number 7
[  155.935585][ T3653] XFS (loop4): Unmounting Filesystem
[  156.340478][ T5584] loop3: detected capacity change from 0 to 40427
[  156.417500][ T5584] F2FS-fs (loop3): invalid crc value
[  156.434338][ T5584] F2FS-fs (loop3): Found nat_bits in checkpoint
[  156.513594][ T5584] F2FS-fs (loop3): recover fsync data on readonly fs
[  156.522176][ T5584] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  156.596546][ T5591] loop4: detected capacity change from 0 to 64
[  156.867954][ T3660] Bluetooth: hci2: command tx timeout
[  157.065093][ T3707] team0 (unregistering): Port device team_slave_1 removed
[  157.220580][ T5606] loop3: detected capacity change from 0 to 64
[  157.312099][ T3707] team0 (unregistering): Port device team_slave_0 removed
[  157.476934][ T5608] loop3: detected capacity change from 0 to 64
[  157.568400][ T3707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  157.833253][ T3707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  157.849809][ T4097] infiniband syz1: ib_query_port failed (-19)
[  157.957879][ T5604] loop4: detected capacity change from 0 to 32768
[  158.008870][ T5604] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop4 scanned by syz.4.479 (5604)
[  158.066694][ T5604] BTRFS info (device loop4): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  158.088370][ T5604] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  158.097204][ T5604] BTRFS info (device loop4): using free space tree
[  158.285843][ T5604] BTRFS info (device loop4): enabling ssd optimizations
[  158.420331][ T3653] BTRFS info (device loop4): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  158.956947][ T3660] Bluetooth: hci2: command tx timeout
[  159.420618][ T3707] bond0 (unregistering): Released all slaves
[  159.555635][ T4018] bond0 speed is unknown, defaulting to 1000
[  159.959789][ T5648] loop3: detected capacity change from 0 to 256
[  160.040731][ T5648] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  160.552398][ T5661] loop3: detected capacity change from 0 to 256
[  160.913387][   T27] audit: type=1800 audit(1729772124.397:24): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.491" name="bus" dev="loop3" ino=1048619 res=0 errno=0
[  161.501736][ T5475] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  161.526263][ T4097] kernel read not supported for file /usbmon7 (pid: 4097 comm: kworker/0:9)
[  161.551690][ T5475] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  161.621704][ T5475] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  161.675143][ T5475] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  161.733694][ T5699] loop4: detected capacity change from 0 to 256
[  161.784552][ T5699] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  162.082098][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.143792][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.198827][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.213496][ T5475] 8021q: adding VLAN 0 to HW filter on device team0
[  162.299249][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.344231][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.387970][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.395241][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.441773][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.458815][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.495271][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.497793][ T5713] xt_CT: You must specify a L4 protocol and not use inversions on it
[  162.502870][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.528196][ T5715] loop4: detected capacity change from 0 to 2048
[  162.581379][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.592599][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.615920][ T5715] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.634697][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.666149][ T5688] loop1: detected capacity change from 0 to 32768
[  162.714048][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.777884][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.832870][ T5688] XFS (loop1): Mounting V5 Filesystem
[  162.864425][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.961752][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.013179][ T5704] loop2: detected capacity change from 0 to 32768
[  163.054884][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.095468][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.108699][ T5704] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.506 (5704)
[  163.122145][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.130858][ T5688] XFS (loop1): Ending clean mount
[  163.174336][ T5475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  163.217821][ T5704] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  163.242605][ T5475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.250403][ T5704] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  163.271191][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.287839][ T5704] BTRFS info (device loop2): using free space tree
[  163.294535][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.311995][ T4889] XFS (loop1): Unmounting Filesystem
[  163.574269][ T5704] BTRFS info (device loop2): enabling ssd optimizations
[  163.863948][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.878027][ T3704] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.912001][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.050696][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.081558][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.205613][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  164.236797][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  164.255797][ T5475] device veth0_vlan entered promiscuous mode
[  164.281025][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.329059][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.365684][ T5475] device veth1_vlan entered promiscuous mode
[  164.381686][ T3958] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.439231][ T5774] loop4: detected capacity change from 0 to 1024
[  164.489983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.542307][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.604700][ T5475] device veth0_macvtap entered promiscuous mode
[  164.644710][ T5475] device veth1_macvtap entered promiscuous mode
[  164.797036][ T5774] hfsplus: request for non-existent node 3 in B*Tree
[  164.832944][ T5774] hfsplus: request for non-existent node 3 in B*Tree
[  165.105110][ T5774] hfsplus: catalog searching failed
[  165.146402][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.203128][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.257867][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.294741][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.317804][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.341010][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.362127][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  165.393269][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.431178][ T3704] hfsplus: b-tree write err: -5, ino 3
[  165.452316][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0
[  165.504936][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.519053][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  165.581626][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.618648][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.644550][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.659440][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.679797][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.703430][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.730149][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.750294][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.776357][ T5475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.817091][ T5475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.837445][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.852025][ T5780] loop3: detected capacity change from 0 to 32768
[  165.869966][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.891019][ T5780] XFS: ikeep mount option is deprecated.
[  165.896755][ T5780] XFS: ikeep mount option is deprecated.
[  165.899465][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.981373][ T5475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.078637][ T5475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.087588][ T5475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.117207][ T5780] XFS (loop3): Mounting V5 Filesystem
[  166.162556][ T5475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.283425][ T5780] XFS (loop3): Ending clean mount
[  166.395613][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.441110][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.522917][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.557887][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.587417][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.662411][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.685896][ T3651] XFS (loop3): Unmounting Filesystem
[  166.693255][ T5791] loop2: detected capacity change from 0 to 32768
[  166.786729][ T5791] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.521 (5791)
[  166.859875][ T5791] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.910789][ T5791] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  166.940481][ T5791] BTRFS info (device loop2): setting nodatacow, compression disabled
[  166.993147][ T5791] BTRFS info (device loop2): setting datacow
[  167.013441][ T5791] BTRFS info (device loop2): doing ref verification
[  167.034041][ T5791] BTRFS info (device loop2): force clearing of disk cache
[  167.084446][ T5791] BTRFS info (device loop2): turning off barriers
[  167.104744][ T5791] BTRFS info (device loop2): enabling ssd optimizations
[  167.145861][ T5791] BTRFS info (device loop2): using spread ssd allocation scheme
[  167.192687][ T5791] BTRFS info (device loop2): not using ssd optimizations
[  167.255118][ T5791] BTRFS info (device loop2): not using spread ssd allocation scheme
[  167.287103][ T5791] BTRFS info (device loop2): using free space tree
[  167.473758][ T5848] loop4: detected capacity change from 0 to 8
[  167.478351][ T5840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.533'.
[  167.643711][ T5791] BTRFS info (device loop2): rebuilding free space tree
[  168.218823][ T3958] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  169.038024][ T5899] device macvlan0 entered promiscuous mode
[  169.073677][ T5894] device macvlan0 left promiscuous mode
[  169.165461][ T5855] loop0: detected capacity change from 0 to 40427
[  169.209216][ T5855] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff
[  169.249155][ T5855] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4
[  169.342492][ T5855] F2FS-fs (loop0): invalid crc value
[  169.399649][ T5855] F2FS-fs (loop0): Found nat_bits in checkpoint
[  169.635652][ T5855] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  169.647356][ T5920] loop2: detected capacity change from 0 to 128
[  169.879665][ T5475] syz-executor: attempt to access beyond end of device
[  169.879665][ T5475] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.950243][ T5933] loop1: detected capacity change from 0 to 64
[  170.101236][ T3729] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  170.411132][ T5936] loop3: detected capacity change from 0 to 32768
[  170.438490][ T5936] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.558 (5936)
[  170.453995][ T5936] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.464430][ T5936] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  170.473979][ T5936] BTRFS info (device loop3): turning off barriers
[  170.482289][ T5936] BTRFS info (device loop3): enabling auto defrag
[  170.488921][ T5936] BTRFS info (device loop3): force clearing of disk cache
[  170.491275][ T5941] loop2: detected capacity change from 0 to 256
[  170.496147][ T5936] BTRFS info (device loop3): max_inline at 4096
[  170.509689][ T5936] BTRFS info (device loop3): turning on sync discard
[  170.516670][ T5936] BTRFS info (device loop3): use no compression
[  170.523133][ T5936] BTRFS info (device loop3): using free space tree
[  170.675342][   T27] audit: type=1800 audit(1729772134.157:25): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.560" name=C1FEDC30 dev="loop2" ino=1048626 res=0 errno=0
[  170.697457][ T5936] BTRFS info (device loop3): enabling ssd optimizations
[  170.708750][ T5936] BTRFS info (device loop3): rebuilding free space tree
[  170.757873][ T3729] usb 5-1: Using ep0 maxpacket: 16
[  170.878044][ T3729] usb 5-1: config 0 has no interfaces?
[  171.038315][ T3729] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  171.056346][ T3651] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  171.097583][ T3729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.105819][ T3729] usb 5-1: Product: syz
[  171.157313][ T3729] usb 5-1: Manufacturer: syz
[  171.173885][ T3729] usb 5-1: SerialNumber: syz
[  171.198427][ T3729] r8152-cfgselector 5-1: config 0 descriptor??
[  171.245483][ T4825] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 11 /dev/loop3 scanned by udevd (4825)
[  171.488032][ T4566] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  171.489814][ T3729] usbip-host 5-1: 5-1 is not in match_busid table... skip!
[  171.537024][   T11] usb 5-1: config 0 descriptor??
[  171.672184][ T5974] loop0: detected capacity change from 0 to 4096
[  171.718181][ T5974] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  171.748019][ T4566] usb 2-1: Using ep0 maxpacket: 8
[  171.759171][  T124] usb 5-1: USB disconnect, device number 5
[  171.778125][   T11] usb 5-1: can't set config #0, error -71
[  171.908215][ T4566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.926431][ T4566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.957915][ T4566] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  171.973016][ T4566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.018694][ T4566] usb 2-1: config 0 descriptor??
[  172.114785][   T27] audit: type=1800 audit(1729772135.597:26): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.555" name="file1" dev="loop0" ino=29 res=0 errno=0
[  172.165315][ T5974] ntfs3: loop0: ino=1d, "file1" attr_set_size
[  172.198676][   T27] audit: type=1804 audit(1729772135.627:27): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.555" name="/newroot/3/file0/file0/file1" dev="loop0" ino=29 res=1 errno=0
[  172.220585][    C1] vkms_vblank_simulate: vblank timer overrun
[  172.222383][ T5987] loop3: detected capacity change from 0 to 512
[  172.298976][ T5987] EXT4-fs: Ignoring removed nobh option
[  172.307112][ T5987] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  172.374724][ T5967] loop2: detected capacity change from 0 to 32768
[  172.410446][ T5987] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  172.435026][ T5967] XFS (loop2): Mounting V5 Filesystem
[  172.441199][ T5987] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.540185][ T4566] steelseries_srws1 0003:1038:1410.0005: unknown main item tag 0xd
[  172.549595][ T4566] steelseries_srws1 0003:1038:1410.0005: item fetching failed at offset 6/7
[  172.559615][ T4566] steelseries_srws1 0003:1038:1410.0005: parse failed
[  172.581029][ T4566] steelseries_srws1: probe of 0003:1038:1410.0005 failed with error -22
[  172.659760][ T5967] XFS (loop2): Ending clean mount
[  172.693090][ T5967] XFS (loop2): Quotacheck needed: Please wait.
[  172.724216][ T6006] device batadv0 entered promiscuous mode
[  172.759406][ T4097] usb 2-1: USB disconnect, device number 8
[  172.803418][ T6006] device macsec1 entered promiscuous mode
[  172.816076][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  172.823668][ T5967] XFS (loop2): Quotacheck: Done.
[  172.930224][ T6006] device batadv0 left promiscuous mode
[  173.010161][ T6010] loop4: detected capacity change from 0 to 4096
[  173.097103][ T3958] XFS (loop2): Unmounting Filesystem
[  174.292677][ T6045] loop0: detected capacity change from 0 to 2048
[  174.342306][ T6045] NILFS (loop0): invalid segment: Sequence number mismatch
[  174.358049][ T6045] NILFS (loop0): trying rollback from an earlier position
[  174.386403][ T6047] loop1: detected capacity change from 0 to 512
[  174.415787][ T6045] NILFS (loop0): recovery complete
[  174.452275][ T6050] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.487660][ T6047] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #16: comm syz.1.585: iget: bad extended attribute block 128
[  174.520640][ T6047] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.585: couldn't read orphan inode 16 (err -117)
[  174.533846][ T6047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  174.534507][   T27] audit: type=1800 audit(1729772138.017:28): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.584" name="bus" dev="loop0" ino=12 res=0 errno=0
[  174.543879][ T6047] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.740219][ T4889] EXT4-fs (loop1): unmounting filesystem.
[  175.051360][  T124] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  175.080427][ T4016] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  175.297828][  T124] usb 3-1: Using ep0 maxpacket: 16
[  175.428067][  T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.458562][ T4016] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  175.466946][ T4016] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.468233][  T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.502204][  T124] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  175.502296][ T4016] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  175.532012][  T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.551723][  T124] usb 3-1: config 0 descriptor??
[  175.567808][ T4016] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  175.597884][ T4016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.650256][ T4016] usb 4-1: config 0 descriptor??
[  175.683213][ T6084] loop1: detected capacity change from 0 to 256
[  175.729140][ T6087] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present
[  175.757830][ T6087] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1)
[  175.780347][ T6088] loop0: detected capacity change from 0 to 1764
[  175.832602][ T6084] syz.1.601: attempt to access beyond end of device
[  175.832602][ T6084] loop1: rw=2049, sector=256, nr_sectors = 100 limit=256
[  176.009548][ T6054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.031285][ T6054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.050079][ T6091] loop4: detected capacity change from 0 to 4096
[  176.083134][ T6091] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  176.102097][ T6091] EXT4-fs (loop4): shut down requested (2)
[  176.132803][ T4016] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  176.148633][ T4016] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  176.168196][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  176.178594][ T4016] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  176.323592][  T124] usb 3-1: string descriptor 0 read error: -71
[  176.378066][  T124] usb 3-1: Max retries (5) exceeded reading string descriptor 200
[  176.385993][  T124] letsketch: probe of 0003:6161:4D15.0006 failed with error -32
[  176.439521][  T124] usb 3-1: USB disconnect, device number 8
[  176.469132][ T3693] usb 4-1: USB disconnect, device number 5
[  176.872120][ T2595] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  177.134141][ T2595] usb 5-1: Using ep0 maxpacket: 32
[  177.157146][ T6106] loop0: detected capacity change from 0 to 32768
[  177.191472][ T6121] loop1: detected capacity change from 0 to 512
[  177.202866][ T6121] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  177.247030][ T6121] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  177.265815][ T2595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.288456][ T2595] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.298470][ T2595] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  177.307557][ T2595] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.317390][ T6121] EXT4-fs (loop1): Remounting filesystem read-only
[  177.333016][ T2595] usb 5-1: config 0 descriptor??
[  177.350174][ T6106] XFS (loop0): Mounting V5 Filesystem
[  177.375095][ T6121] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.616: invalid indirect mapped block 1 (level 1)
[  177.379217][ T2595] hub 5-1:0.0: USB hub found
[  177.464887][ T6121] EXT4-fs (loop1): Remounting filesystem read-only
[  177.490114][ T6121] EXT4-fs (loop1): 1 truncate cleaned up
[  177.496214][ T6121] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  177.530871][ T6106] XFS (loop0): Ending clean mount
[  177.579386][ T6106] XFS (loop0): Quotacheck needed: Please wait.
[  177.608008][ T4889] EXT4-fs (loop1): unmounting filesystem.
[  177.688126][ T2595] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  177.763325][ T6106] XFS (loop0): Quotacheck: Done.
[  177.773332][ T6144] loop1: detected capacity change from 0 to 256
[  177.853588][ T6148] loop3: detected capacity change from 0 to 512
[  177.877263][ T6144] exfat: Deprecated parameter 'utf8'
[  177.905411][ T6144] exfat: Deprecated parameter 'utf8'
[  177.916911][ T6144] exfat: Deprecated parameter 'namecase'
[  177.946752][ T6144] exfat: Deprecated parameter 'utf8'
[  177.949641][ T6148] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  177.989761][ T6148] EXT4-fs (loop3): invalid journal inode
[  177.995604][ T6148] EXT4-fs (loop3): can't get journal size
[  177.999328][ T6144] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001213e, chksum : 0xd5e0710c, utbl_chksum : 0xe619d30d)
[  178.017535][ T2595] usbhid 5-1:0.0: can't add hid device: -71
[  178.019624][ T5475] XFS (loop0): Unmounting Filesystem
[  178.025004][ T2595] usbhid: probe of 5-1:0.0 failed with error -71
[  178.069470][ T2595] usb 5-1: USB disconnect, device number 6
[  178.158087][ T6148] EXT4-fs (loop3): 1 truncate cleaned up
[  178.163891][ T6148] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  178.352497][ T6151] loop2: detected capacity change from 0 to 8192
[  178.551452][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  178.746569][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'.
[  178.770015][ T6159] loop3: detected capacity change from 0 to 1024
[  178.777196][ T6159] EXT4-fs: Ignoring removed orlov option
[  178.809892][ T6159] EXT4-fs: Ignoring removed nomblk_io_submit option
[  178.894654][ T6159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  179.087377][ T6174] loop0: detected capacity change from 0 to 128
[  179.114090][ T6174] EXT4-fs: Ignoring removed bh option
[  179.167928][ T6174] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  179.232545][ T6174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  179.250811][ T6174] ext2 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  179.282835][    C0] vkms_vblank_simulate: vblank timer overrun
[  179.303906][ T3651] EXT4-fs (loop3): unmounting filesystem.
[  179.519866][ T6187] loop3: detected capacity change from 0 to 16
[  179.603239][ T6187] erofs: (device loop3): mounted with root inode @ nid 36.
[  179.672773][ T6187] syz.3.638: attempt to access beyond end of device
[  179.672773][ T6187] loop3: rw=0, sector=8, nr_sectors = 32 limit=16
[  179.756519][ T5475] EXT4-fs (loop0): unmounting filesystem.
[  179.766456][ T6187] syz.3.638: attempt to access beyond end of device
[  179.766456][ T6187] loop3: rw=0, sector=8, nr_sectors = 32 limit=16
[  180.105963][ T6195] loop2: detected capacity change from 0 to 8192
[  180.147906][ T4996] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  180.159874][ T6195] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  180.265622][ T6202] loop1: detected capacity change from 0 to 4096
[  180.284168][ T6202] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  180.296686][ T6202] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  180.322215][ T6202] ntfs: volume version 3.1.
[  180.333878][ T6202] ntfs: (device loop1): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  180.371630][ T6202] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  180.383108][ T6202] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  180.404025][ T6206] loop4: detected capacity change from 0 to 256
[  180.454338][ T6202] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net.
[  180.483717][ T6202] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  180.507907][ T4996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.511619][ T6202] ntfs: (device loop1): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[  180.524240][ T4996] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  180.605034][ T4996] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  180.658615][ T4996] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  180.674978][ T4996] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.727260][ T4996] usb 1-1: config 0 descriptor??
[  180.873379][ T6213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.648'.
[  181.060799][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.652'.
[  181.188967][ T6224] loop4: detected capacity change from 0 to 512
[  181.193132][ T6221] loop1: detected capacity change from 0 to 4096
[  181.199586][ T6224] EXT4-fs: Ignoring removed mblk_io_submit option
[  181.226403][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00
[  181.243058][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00
[  181.251777][ T4996] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  181.275060][ T4996] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  181.280537][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00
[  181.288778][ T6224] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  181.302468][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc0c00
[  181.328223][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc1c00
[  181.362141][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc2c00
[  181.375177][   T27] audit: type=1800 audit(1729772144.857:29): pid=6224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.654" name="file1" dev="loop4" ino=15 res=0 errno=0
[  181.384065][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc4c00
[  181.410306][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffc8c00
[  181.430451][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffd0c00
[  181.443433][ T6221] ntfs3: loop1: try to read out of volume at offset 0x3fffffe0c00
[  181.491067][  T124] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  181.519789][ T2595] usb 1-1: USB disconnect, device number 7
[  181.562316][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  181.692191][ T6232] sctp: [Deprecated]: syz.4.656 (pid 6232) Use of struct sctp_assoc_value in delayed_ack socket option.
[  181.692191][ T6232] Use struct sctp_sack_info instead
[  181.767083][  T124] usb 4-1: Using ep0 maxpacket: 8
[  182.078566][  T124] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  182.097744][  T124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.114921][  T124] usb 4-1: Product: syz
[  182.123963][  T124] usb 4-1: Manufacturer: syz
[  182.134157][  T124] usb 4-1: SerialNumber: syz
[  182.152680][  T124] usb 4-1: config 0 descriptor??
[  182.163669][ T6236] loop4: detected capacity change from 0 to 4096
[  182.194708][ T6236] ntfs: (device loop4): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  182.211646][  T124] gspca_main: sq930x-2.14.0 probing 2770:930c
[  182.226376][ T6236] ntfs: volume version 3.1.
[  182.278006][ T6238] loop0: detected capacity change from 0 to 4096
[  182.600144][ T6244] binder: 6243:6244 ioctl 40046205 0 returned -22
[  182.855908][ T6256] loop1: detected capacity change from 0 to 2048
[  182.926836][ T6257] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  182.958081][ T3655] Bluetooth: hci0: command tx timeout
[  183.004105][ T6257] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3)
[  183.016762][ T6257] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2)
[  183.060922][ T6257] Remounting filesystem read-only
[  183.099069][ T4889] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[  183.109170][ T4889] NILFS (loop1): discard dirty page: offset=0, ino=2
[  183.115913][ T4889] NILFS (loop1): discard dirty block: blocknr=18, size=1024
[  183.123516][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.132754][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.158130][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.167284][ T4889] NILFS (loop1): discard dirty page: offset=0, ino=18
[  183.174637][ T4889] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  183.185465][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.195040][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.204983][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.214494][ T4889] NILFS (loop1): discard dirty page: offset=0, ino=6
[  183.221456][ T4889] NILFS (loop1): discard dirty block: blocknr=35, size=1024
[  183.228960][ T4889] NILFS (loop1): discard dirty block: blocknr=36, size=1024
[  183.236462][ T4889] NILFS (loop1): discard dirty block: blocknr=37, size=1024
[  183.244203][ T4889] NILFS (loop1): discard dirty block: blocknr=38, size=1024
[  183.251702][ T4889] NILFS (loop1): discard dirty page: offset=4096, ino=6
[  183.259060][ T4889] NILFS (loop1): discard dirty block: blocknr=39, size=1024
[  183.272231][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.282739][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.295520][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.318845][ T4889] NILFS (loop1): discard dirty page: offset=0, ino=5
[  183.325610][ T4889] NILFS (loop1): discard dirty block: blocknr=41, size=1024
[  183.340747][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.350224][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.359255][  T124] gspca_sq930x: reg_w 0105 0f00 failed -71
[  183.365266][  T124] sq930x: probe of 4-1:0.0 failed with error -71
[  183.372162][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.404355][  T124] usb 4-1: USB disconnect, device number 6
[  183.421615][ T4889] NILFS (loop1): discard dirty page: offset=0, ino=3
[  183.436926][ T4889] NILFS (loop1): discard dirty block: blocknr=42, size=1024
[  183.453405][ T4889] NILFS (loop1): discard dirty block: blocknr=43, size=1024
[  183.461201][ T4889] NILFS (loop1): discard dirty block: blocknr=44, size=1024
[  183.477575][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.487744][ T4889] NILFS (loop1): discard dirty page: offset=65536, ino=3
[  183.511696][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.528136][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.556247][ T4889] NILFS (loop1): discard dirty block: blocknr=0, size=1024
[  183.578406][ T4889] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024
[  183.761367][ T6268] loop2: detected capacity change from 0 to 4096
[  183.824257][ T6275] loop4: detected capacity change from 0 to 1024
[  183.831964][ T6275] EXT4-fs: Ignoring removed orlov option
[  183.838260][ T6275] EXT4-fs: Ignoring removed nomblk_io_submit option
[  183.854237][ T6276] loop0: detected capacity change from 0 to 512
[  183.926667][ T6276] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  183.959573][ T6275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  184.027847][ T4566] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  184.032392][ T6276] EXT4-fs error (device loop0): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  184.064760][ T6276] EXT4-fs (loop0): Remounting filesystem read-only
[  184.071908][ T6276] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.675: invalid indirect mapped block 1 (level 1)
[  184.114131][ T6276] EXT4-fs (loop0): Remounting filesystem read-only
[  184.146713][ T6276] EXT4-fs (loop0): 1 truncate cleaned up
[  184.156954][ T6276] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  184.183842][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  184.257774][ T2595] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  184.302304][ T5475] EXT4-fs (loop0): unmounting filesystem.
[  184.330993][ T4566] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  184.418751][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.437846][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.507922][ T2595] usb 4-1: Using ep0 maxpacket: 8
[  184.539158][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.564284][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.628208][ T2595] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  184.640054][ T2595] usb 4-1: config 179 has no interface number 0
[  184.646431][ T2595] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  184.658061][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.665705][ T2595] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  184.672399][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.685428][ T2595] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  184.697327][ T2595] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  184.719010][ T2595] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  184.739874][ T6297] Bluetooth: MGMT ver 1.22
[  184.758511][ T2595] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  184.775239][ T2595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.793185][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.813491][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  184.818320][ T6282] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  184.880870][ T6299] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  184.918125][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  184.948193][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.038119][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.051497][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.102103][ T3693] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12
[  185.138082][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.179631][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.259336][ T4566] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  185.277753][ T4566] usb 2-1: config 0 interface 0 has no altsetting 0
[  185.296363][ T3693] usb 4-1: USB disconnect, device number 7
[  185.302561][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  185.302624][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  185.365604][ T3693] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  185.464004][ T4566] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  185.478980][ T4566] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  185.479760][ T6301] loop0: detected capacity change from 0 to 32768
[  185.487745][ T4566] usb 2-1: Product: syz
[  185.510255][ T4566] usb 2-1: Manufacturer: syz
[  185.523310][ T4566] usb 2-1: SerialNumber: syz
[  185.545571][ T4566] usb 2-1: config 0 descriptor??
[  185.580878][ T6301] XFS (loop0): Mounting V5 Filesystem
[  185.595993][ T4566] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  185.673403][ T6320] sctp: [Deprecated]: syz.4.690 (pid 6320) Use of struct sctp_assoc_value in delayed_ack socket option.
[  185.673403][ T6320] Use struct sctp_sack_info instead
[  185.687056][ T6301] XFS (loop0): Ending clean mount
[  185.706784][ T6301] XFS (loop0): Quotacheck needed: Please wait.
[  185.776716][ T6301] XFS (loop0): Quotacheck: Done.
[  185.820611][ T2595] usb 2-1: USB disconnect, device number 9
[  185.866138][ T2595] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  185.871476][ T5475] XFS (loop0): Unmounting Filesystem
[  186.776688][ T6345] loop1: detected capacity change from 0 to 512
[  186.813997][ T6346] loop3: detected capacity change from 0 to 1024
[  186.835168][ T6345] ext2: Unknown parameter 'euid>00000000000000000000'
[  186.845367][ T6324] loop4: detected capacity change from 0 to 32768
[  186.891801][ T6324] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.691 (6324)
[  186.918621][ T6340] loop0: detected capacity change from 0 to 4096
[  186.972929][ T6324] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  186.982749][ T6340] __ntfs_error: 8 callbacks suppressed
[  186.982778][ T6340] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 0) do not match.  Run ntfsfix or chkdsk.
[  187.018695][ T6324] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  187.023519][ T6340] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  187.027452][ T6324] BTRFS info (device loop4): using free space tree
[  187.066839][ T6340] ntfs: volume version 3.1.
[  187.073353][ T3651] hfsplus: bad catalog entry type
[  187.092272][ T6340] ntfs: (device loop0): ntfs_read_locked_attr_inode(): Failed with error code -2 while reading attribute inode (mft_no 0x1a, type 0x80, name_len 4).  Marking corrupt inode and base inode 0x1a as bad.  Run chkdsk.
[  187.125148][ T6351] loop1: detected capacity change from 0 to 128
[  187.133380][ T6340] ntfs: (device loop0): load_and_init_usnjrnl(): Failed to load $UsnJrnl/$DATA/$Max attribute.
[  187.144340][ T6340] ntfs: (device loop0): load_system_files(): Failed to load $UsnJrnl.  Will not be able to remount read-write.  Run chkdsk.
[  187.171108][ T6340] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Found already allocated name in phase 2. Please run chkdsk and if that doesn't find any errors please report you saw this message to linux-ntfs-dev@lists.sourceforge.net.
[  187.195645][ T6351] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  187.210171][ T6340] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Corrupt directory.  Aborting lookup.
[  187.225016][ T6351] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  187.235898][ T6340] ntfs: (device loop0): ntfs_lookup(): ntfs_lookup_ino_by_name() failed with error code 5.
[  187.317894][ T4996] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  187.512306][ T6324] BTRFS info (device loop4): enabling ssd optimizations
[  187.519125][ T4889] EXT4-fs (loop1): unmounting filesystem.
[  187.647554][   T33] hfsplus: b-tree write err: -5, ino 4
[  187.688154][ T4996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.721616][ T4996] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.774347][ T4996] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  187.828557][ T4996] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  187.857786][ T4996] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.901176][ T4996] usb 3-1: config 0 descriptor??
[  187.933769][ T3653] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.422133][ T4996] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving
[  188.513766][ T4996] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  188.638708][ T3707] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.683224][ T4016] usb 3-1: USB disconnect, device number 9
[  188.875505][ T6386] cifs: Unknown parameter '_�LI��� !BE�J�F�A�i_^�w�k�t�c��ُ�E|�,�2�'
[  188.897352][ T3707] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  188.970931][ T6375] loop1: detected capacity change from 0 to 32768
[  189.054672][ T6392] loop0: detected capacity change from 0 to 128
[  189.074706][ T3707] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.095563][ T6392] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  189.106074][ T6392] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.128307][ T6375] XFS (loop1): Mounting V5 Filesystem
[  189.152106][ T3660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  189.164569][ T3660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  189.174130][ T3660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  189.187772][ T3660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  189.206135][ T3660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  189.213592][ T3660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  189.233889][ T5475] EXT4-fs (loop0): unmounting filesystem.
[  189.395531][   T27] audit: type=1326 audit(1729772152.877:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.2.719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e72b7dff9 code=0x0
[  189.440561][ T6375] XFS (loop1): Ending clean mount
[  189.493835][ T3707] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  189.526668][ T6375] XFS (loop1): User initiated shutdown received.
[  189.574082][ T6375] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:492).  Shutting down filesystem.
[  189.594725][ T6375] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  189.672767][ T4889] XFS (loop1): Unmounting Filesystem
[  189.858655][ T6411] syz.4.720 (6411) used greatest stack depth: 18808 bytes left
[  190.179318][ T6419] loop0: detected capacity change from 0 to 2048
[  190.218483][ T6419] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  190.322620][ T4825] udevd[4825]: incorrect nilfs2 checksum on /dev/loop0
[  190.327992][ T6424] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  190.438029][ T3707] tipc: Disabling bearer <udp:syz1>
[  190.457710][ T3707] tipc: Left network mode
[  190.509687][ T6397] chnl_net:caif_netlink_parms(): no params data found
[  190.929584][ T6416] loop4: detected capacity change from 0 to 40427
[  190.956584][ T6416] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  190.986032][ T6416] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  191.044203][ T6435] loop1: detected capacity change from 0 to 2048
[  191.122515][ T6416] F2FS-fs (loop4): Found nat_bits in checkpoint
[  191.266056][ T6435] UDF-fs: iocharset defauovrs not found
[  191.272773][ T3660] Bluetooth: hci4: command tx timeout
[  191.314717][ T6416] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  191.362368][ T6416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  191.427973][ T3660] Bluetooth: hci3: command 0x0406 tx timeout
[  191.495169][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.502555][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.511564][ T6397] device bridge_slave_0 entered promiscuous mode
[  191.537673][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.555144][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.580071][ T6397] device bridge_slave_1 entered promiscuous mode
[  191.906453][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.081819][ T6469] loop0: detected capacity change from 0 to 512
[  192.102280][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.271650][ T6469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  192.305320][ T6469] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  192.313735][ T6476] loop4: detected capacity change from 0 to 512
[  192.375129][ T6476] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.732: bad orphan inode 15
[  192.471941][ T6476] ext4_test_bit(bit=14, block=5) = 0
[  192.477393][ T6476] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  192.532428][ T6397] team0: Port device team_slave_0 added
[  192.600619][ T6476] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters
[  192.665565][ T6476] EXT4-fs error (device loop4): ext4_free_inode:355: comm syz.4.732: bit already cleared for inode 13
[  192.696361][ T6397] team0: Port device team_slave_1 added
[  192.706446][ T5475] EXT4-fs (loop0): unmounting filesystem.
[  192.794132][ T3653] EXT4-fs (loop4): unmounting filesystem.
[  193.007831][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.014853][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.135827][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.153659][ T6491] loop0: detected capacity change from 0 to 512
[  193.162943][ T6487] netlink: 'syz.4.739': attribute type 2 has an invalid length.
[  193.208546][ T6491] EXT4-fs: Ignoring removed mblk_io_submit option
[  193.290613][ T6491] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  193.317134][ T6475] loop2: detected capacity change from 0 to 40427
[  193.348454][   T27] audit: type=1800 audit(1729772156.837:32): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.741" name="file1" dev="loop0" ino=15 res=0 errno=0
[  193.370513][ T3660] Bluetooth: hci4: command tx timeout
[  193.454239][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.467790][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.483976][ T6475] F2FS-fs (loop2): Found nat_bits in checkpoint
[  193.553154][ T5475] EXT4-fs (loop0): unmounting filesystem.
[  193.567869][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.594542][ T6495] netlink: 'syz.4.742': attribute type 8 has an invalid length.
[  193.820730][ T6475] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  193.905275][ T6475] F2FS-fs (loop2): sanity_check_inode: corrupted inode i_blocks i_ino=b iblocks=0, run fsck to fix.
[  194.174870][ T3707] device hsr_slave_0 left promiscuous mode
[  194.190010][ T3958] syz-executor: attempt to access beyond end of device
[  194.190010][ T3958] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  194.215927][ T3707] device hsr_slave_1 left promiscuous mode
[  194.222905][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.257379][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.278630][ T3707] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.286132][ T3707] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.303103][ T6489] loop1: detected capacity change from 0 to 32768
[  194.365085][ T6489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.740 (6489)
[  194.393357][ T3707] device bridge_slave_1 left promiscuous mode
[  194.421506][ T3707] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.482312][ T6489] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  194.486315][ T1243] ieee802154 phy0 wpan0: encryption failed: -22
[  194.504214][ T6489] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  194.508888][ T1243] ieee802154 phy1 wpan1: encryption failed: -22
[  194.537807][ T6489] BTRFS info (device loop1): using free space tree
[  194.558537][ T3707] device bridge_slave_0 left promiscuous mode
[  194.568388][ T3707] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.798289][ T3707] device veth1_macvtap left promiscuous mode
[  194.804439][ T3707] device veth0_macvtap left promiscuous mode
[  194.812735][ T3707] device veth1_vlan left promiscuous mode
[  194.835084][ T3707] device veth0_vlan left promiscuous mode
[  194.908336][ T6489] BTRFS info (device loop1): enabling ssd optimizations
[  194.922378][ T6543] loop0: detected capacity change from 0 to 2048
[  194.988555][ T6543] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  195.106556][ T6553] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.133069][ T3734] udevd[3734]: incorrect nilfs2 checksum on /dev/loop0
[  195.173770][ T6551] loop4: detected capacity change from 0 to 512
[  195.257080][ T6551] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  195.284906][ T4889] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  195.430698][ T3660] Bluetooth: hci4: command tx timeout
[  195.504146][ T6543] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  195.646480][ T6543] Remounting filesystem read-only
[  195.673845][ T6543] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 3044605952
[  195.716867][ T6543] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15)
[  195.757242][ T6543] NILFS (loop0): error -5 truncating bmap (ino=15)
[  195.783643][ T6543] syz.0.751 (6543) used greatest stack depth: 17880 bytes left
[  195.896282][ T5475] NILFS (loop0): discard dirty page: offset=0, ino=6
[  195.918322][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.927369][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  195.984804][ T5475] NILFS (loop0): discard dirty block: blocknr=37, size=1024
[  196.000348][ T5475] NILFS (loop0): discard dirty block: blocknr=38, size=1024
[  196.023352][ T5475] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  196.041394][ T5475] NILFS (loop0): discard dirty page: offset=0, ino=15
[  196.048649][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.057728][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.077827][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.104672][ T5475] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  196.113389][ T5475] NILFS (loop0): discard dirty page: offset=0, ino=3
[  196.124139][ T5475] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  196.164947][ T5475] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  196.193409][ T5475] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  196.218198][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.236352][ T5475] NILFS (loop0): discard dirty page: offset=229376, ino=3
[  196.251002][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.269438][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  196.302193][ T5475] NILFS (loop0): discard dirty block: blocknr=50, size=1024
[  196.345593][ T5475] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  197.273060][ T6578] loop0: detected capacity change from 0 to 32768
[  197.360022][ T6578] 
[  197.360022][ T6578]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.360022][ T6578] 
[  197.401704][ T6578] read_mapping_page failed!
[  197.406777][ T6578] ERROR: (device loop0): txCommit: 
[  197.406777][ T6578] 
[  197.508078][ T3660] Bluetooth: hci4: command tx timeout
[  197.572194][ T3707] team0 (unregistering): Port device team_slave_1 removed
[  197.625333][ T4159] 
[  197.625333][ T4159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.625333][ T4159] 
[  197.642043][ T4159] 
[  197.642043][ T4159]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.642043][ T4159] 
[  197.665692][ T5475] 
[  197.665692][ T5475]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.665692][ T5475] 
[  197.681793][ T5475] 
[  197.681793][ T5475]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.681793][ T5475] 
[  197.714661][ T3707] team0 (unregistering): Port device team_slave_0 removed
[  197.740951][  T105] 
[  197.740951][  T105]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.740951][  T105] 
[  197.807717][  T105] ==================================================================
[  197.815859][  T105] BUG: KASAN: use-after-free in lmLogSync+0xa2f/0xad0
[  197.822673][  T105] Write of size 4 at addr ffff88807b5b3220 by task jfsCommit/105
[  197.830424][  T105] 
[  197.832792][  T105] CPU: 0 PID: 105 Comm: jfsCommit Not tainted 6.1.114-syzkaller #0
[  197.841118][  T105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  197.851315][  T105] Call Trace:
[  197.854661][  T105]  <TASK>
[  197.857612][  T105]  dump_stack_lvl+0x1e3/0x2cb
[  197.862372][  T105]  ? nf_tcp_handle_invalid+0x642/0x642
[  197.867884][  T105]  ? panic+0x764/0x764
[  197.872003][  T105]  ? _printk+0xd1/0x111
[  197.876197][  T105]  ? __virt_addr_valid+0x17f/0x530
[  197.881436][  T105]  ? __virt_addr_valid+0x17f/0x530
[  197.886599][  T105]  print_report+0x15f/0x4f0
[  197.891152][  T105]  ? __virt_addr_valid+0x17f/0x530
[  197.896330][  T105]  ? __virt_addr_valid+0x17f/0x530
[  197.901550][  T105]  ? __virt_addr_valid+0x45b/0x530
[  197.906732][  T105]  ? __phys_addr+0xb6/0x170
[  197.911298][  T105]  ? lmLogSync+0xa2f/0xad0
[  197.915787][  T105]  kasan_report+0x136/0x160
[  197.920401][  T105]  ? lmLogSync+0xa2f/0xad0
[  197.924860][  T105]  lmLogSync+0xa2f/0xad0
[  197.929124][  T105]  ? lmWriteRecord+0x12e0/0x12e0
[  197.934074][  T105]  ? do_raw_spin_unlock+0x137/0x8a0
[  197.939281][  T105]  jfs_syncpt+0x79/0x90
[  197.943447][  T105]  txEnd+0x30b/0x560
[  197.947369][  T105]  jfs_lazycommit+0x610/0xb60
[  197.952097][  T105]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  197.958002][  T105]  ? lockdep_hardirqs_on+0x94/0x130
[  197.963218][  T105]  ? txFreelock+0x580/0x580
[  197.967737][  T105]  ? do_task_dead+0xd0/0xd0
[  197.972259][  T105]  ? _raw_spin_unlock+0x40/0x40
[  197.977207][  T105]  ? __kthread_parkme+0x168/0x1c0
[  197.982253][  T105]  kthread+0x28d/0x320
[  197.986331][  T105]  ? txFreelock+0x580/0x580
[  197.990970][  T105]  ? kthread_blkcg+0xd0/0xd0
[  197.995567][  T105]  ret_from_fork+0x1f/0x30
[  198.000012][  T105]  </TASK>
[  198.003123][  T105] 
[  198.005450][  T105] Allocated by task 6578:
[  198.009782][  T105]  kasan_set_track+0x4b/0x70
[  198.014395][  T105]  __kasan_kmalloc+0x97/0xb0
[  198.018990][  T105]  lmLogOpen+0x314/0x1030
[  198.023348][  T105]  jfs_mount_rw+0xe3/0x640
[  198.027777][  T105]  jfs_fill_super+0x67d/0xc40
[  198.032462][  T105]  mount_bdev+0x2c9/0x3f0
[  198.036801][  T105]  legacy_get_tree+0xeb/0x180
[  198.041490][  T105]  vfs_get_tree+0x88/0x270
[  198.046021][  T105]  do_new_mount+0x2ba/0xb40
[  198.050553][  T105]  __se_sys_mount+0x2d5/0x3c0
[  198.055346][  T105]  do_syscall_64+0x3b/0xb0
[  198.059776][  T105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.065725][  T105] 
[  198.068048][  T105] Freed by task 5475:
[  198.072022][  T105]  kasan_set_track+0x4b/0x70
[  198.076625][  T105]  kasan_save_free_info+0x27/0x40
[  198.081652][  T105]  ____kasan_slab_free+0xd6/0x120
[  198.086785][  T105]  __kmem_cache_free+0x25c/0x3c0
[  198.091748][  T105]  lmLogClose+0x29d/0x530
[  198.096102][  T105]  jfs_umount+0x298/0x370
[  198.100485][  T105]  jfs_put_super+0x86/0x180
[  198.105090][  T105]  generic_shutdown_super+0x130/0x340
[  198.110481][  T105]  kill_block_super+0x7a/0xe0
[  198.115169][  T105]  deactivate_locked_super+0xa0/0x110
[  198.120638][  T105]  cleanup_mnt+0x490/0x520
[  198.125066][  T105]  task_work_run+0x246/0x300
[  198.129712][  T105]  exit_to_user_mode_loop+0xde/0x100
[  198.135004][  T105]  exit_to_user_mode_prepare+0xb1/0x140
[  198.140555][  T105]  syscall_exit_to_user_mode+0x60/0x270
[  198.146106][  T105]  do_syscall_64+0x47/0xb0
[  198.150521][  T105]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  198.156426][  T105] 
[  198.158750][  T105] The buggy address belongs to the object at ffff88807b5b3000
[  198.158750][  T105]  which belongs to the cache kmalloc-1k of size 1024
[  198.172889][  T105] The buggy address is located 544 bytes inside of
[  198.172889][  T105]  1024-byte region [ffff88807b5b3000, ffff88807b5b3400)
[  198.186261][  T105] 
[  198.188595][  T105] The buggy address belongs to the physical page:
[  198.195020][  T105] page:ffffea0001ed6c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7b5b0
[  198.205184][  T105] head:ffffea0001ed6c00 order:3 compound_mapcount:0 compound_pincount:0
[  198.213671][  T105] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  198.221666][  T105] raw: 00fff00000010200 ffffea00009bbe00 dead000000000002 ffff888017c41dc0
[  198.230251][  T105] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  198.238842][  T105] page dumped because: kasan: bad access detected
[  198.245303][  T105] page_owner tracks the page as allocated
[  198.251023][  T105] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3691, tgid 3691 (kworker/0:6), ts 75475422624, free_ts 73404830070
[  198.273267][  T105]  post_alloc_hook+0x18d/0x1b0
[  198.278087][  T105]  get_page_from_freelist+0x322e/0x33b0
[  198.283722][  T105]  __alloc_pages+0x28d/0x770
[  198.288314][  T105]  alloc_slab_page+0x6a/0x150
[  198.292995][  T105]  new_slab+0x84/0x2d0
[  198.297073][  T105]  ___slab_alloc+0xc20/0x1270
[  198.301755][  T105]  __kmem_cache_alloc_node+0x19f/0x260
[  198.307311][  T105]  __kmalloc_node_track_caller+0xa0/0x220
[  198.313093][  T105]  __alloc_skb+0x135/0x670
[  198.317518][  T105]  inet6_rt_notify+0xdc/0x280
[  198.322207][  T105]  fib6_add+0x1db2/0x3c80
[  198.326538][  T105]  ip6_ins_rt+0x102/0x170
[  198.330882][  T105]  __ipv6_ifa_notify+0x5bc/0x11d0
[  198.335919][  T105]  addrconf_dad_completed+0x17d/0xcb0
[  198.341292][  T105]  addrconf_dad_work+0xd8e/0x16b0
[  198.346324][  T105]  process_one_work+0x8a9/0x11d0
[  198.351315][  T105] page last free stack trace:
[  198.355981][  T105]  free_unref_page_prepare+0xf63/0x1120
[  198.361529][  T105]  free_unref_page+0x33/0x3e0
[  198.366213][  T105]  qlist_free_all+0x76/0xe0
[  198.370740][  T105]  kasan_quarantine_reduce+0x156/0x170
[  198.376224][  T105]  __kasan_slab_alloc+0x1f/0x70
[  198.381198][  T105]  slab_post_alloc_hook+0x52/0x3a0
[  198.386345][  T105]  __kmem_cache_alloc_node+0x137/0x260
[  198.391818][  T105]  __kmalloc+0xa1/0x230
[  198.395983][  T105]  fib_create_info+0xa37/0x2500
[  198.401019][  T105]  fib_table_insert+0x1f2/0x1f20
[  198.405967][  T105]  fib_add_ifaddr+0x47f/0x1730
[  198.410739][  T105]  fib_inetaddr_event+0x12b/0x2b0
[  198.415769][  T105]  blocking_notifier_call_chain+0x104/0x1b0
[  198.421668][  T105]  __inet_insert_ifa+0x9cb/0xbd0
[  198.426614][  T105]  inet_rtm_newaddr+0x8d3/0x18e0
[  198.431572][  T105]  rtnetlink_rcv_msg+0x818/0xff0
[  198.436551][  T105] 
[  198.438884][  T105] Memory state around the buggy address:
[  198.444523][  T105]  ffff88807b5b3100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.452590][  T105]  ffff88807b5b3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.460657][  T105] >ffff88807b5b3200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.468715][  T105]                                ^
[  198.473821][  T105]  ffff88807b5b3280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.482060][  T105]  ffff88807b5b3300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  198.490139][  T105] ==================================================================
[  198.527772][    C1] vkms_vblank_simulate: vblank timer overrun
[  198.547138][  T105] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  198.554405][  T105] CPU: 1 PID: 105 Comm: jfsCommit Not tainted 6.1.114-syzkaller #0
[  198.562340][  T105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  198.572441][  T105] Call Trace:
[  198.575744][  T105]  <TASK>
[  198.578718][  T105]  dump_stack_lvl+0x1e3/0x2cb
[  198.583430][  T105]  ? nf_tcp_handle_invalid+0x642/0x642
[  198.588921][  T105]  ? panic+0x764/0x764
[  198.593025][  T105]  ? preempt_schedule_common+0xa6/0xd0
[  198.598650][  T105]  ? vscnprintf+0x59/0x80
[  198.603012][  T105]  panic+0x318/0x764
[  198.606928][  T105]  ? check_panic_on_warn+0x1d/0xa0
[  198.612068][  T105]  ? memcpy_page_flushcache+0xfc/0xfc
[  198.617548][  T105]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  198.623665][  T105]  ? _raw_spin_unlock+0x40/0x40
[  198.628555][  T105]  ? print_report+0x4a3/0x4f0
[  198.633487][  T105]  check_panic_on_warn+0x7e/0xa0
[  198.638444][  T105]  ? lmLogSync+0xa2f/0xad0
[  198.643058][  T105]  end_report+0x66/0x110
[  198.647419][  T105]  kasan_report+0x143/0x160
[  198.651929][  T105]  ? lmLogSync+0xa2f/0xad0
[  198.656349][  T105]  lmLogSync+0xa2f/0xad0
[  198.660712][  T105]  ? lmWriteRecord+0x12e0/0x12e0
[  198.665654][  T105]  ? do_raw_spin_unlock+0x137/0x8a0
[  198.670859][  T105]  jfs_syncpt+0x79/0x90
[  198.675068][  T105]  txEnd+0x30b/0x560
[  198.678967][  T105]  jfs_lazycommit+0x610/0xb60
[  198.683648][  T105]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  198.689554][  T105]  ? lockdep_hardirqs_on+0x94/0x130
[  198.694765][  T105]  ? txFreelock+0x580/0x580
[  198.699306][  T105]  ? do_task_dead+0xd0/0xd0
[  198.703820][  T105]  ? _raw_spin_unlock+0x40/0x40
[  198.708702][  T105]  ? __kthread_parkme+0x168/0x1c0
[  198.713742][  T105]  kthread+0x28d/0x320
[  198.717832][  T105]  ? txFreelock+0x580/0x580
[  198.722366][  T105]  ? kthread_blkcg+0xd0/0xd0
[  198.726962][  T105]  ret_from_fork+0x1f/0x30
[  198.731397][  T105]  </TASK>
[  198.734779][  T105] Kernel Offset: disabled
[  198.739358][  T105] Rebooting in 86400 seconds..