last executing test programs:

3m40.056090873s ago: executing program 4 (id=565):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00')
read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2020)
preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/29, 0x1d}], 0x1, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000006440)={0x2020}, 0x18fa)

3m39.973699802s ago: executing program 4 (id=567):
r0 = openat$vmci(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000001c0)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a6, &(0x7f0000000300)={{@local}, @local, 0x0, 0x0, 0x80000000})

3m39.898836372s ago: executing program 4 (id=569):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x100c20, &(0x7f0000000000)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6b]}}]})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/107)

3m39.766183022s ago: executing program 4 (id=571):
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x800414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='size=E'])
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000001780)={0x2020}, 0x2020)

3m39.42917013s ago: executing program 4 (id=574):
syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="adffec4400", @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xc2}, 0x0)

3m38.858577408s ago: executing program 4 (id=577):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

3m38.726812957s ago: executing program 32 (id=577):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

10.833351692s ago: executing program 5 (id=2725):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{}, 0x1})

10.742785512s ago: executing program 5 (id=2727):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001400))
writev(r0, &(0x7f0000000240)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}, {&(0x7f0000000000)="db369b7754f1c5eecdf78b6c7cb015454307613be4b2272bd33a68453d2414b815ed3a6d1985b87e1dbf233a3d204088f5f6749b81b48d228b7be4628f7810", 0x3f}], 0x2)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)

10.574932632s ago: executing program 5 (id=2731):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="f7"], 0x9)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x5}, 0x8)

10.502594491s ago: executing program 5 (id=2733):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa20, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x800090, 0x0)
chroot(&(0x7f0000000180)='./file0\x00')
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

10.18347244s ago: executing program 5 (id=2739):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1e3340, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4004f506, 0x0)

9.117698126s ago: executing program 5 (id=2744):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000700"/17], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

8.782601904s ago: executing program 33 (id=2744):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000700"/17], 0x50)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

2.951291361s ago: executing program 0 (id=2786):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0xfffffff6}]}}]}, 0x3c}}, 0x44000)

2.250632529s ago: executing program 0 (id=2798):
syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a163831820c847c4cc9c5f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f00"/124], 0x84, 0x181, &(0x7f0000000740)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents64(r0, &(0x7f0000000000)=""/32, 0x20)

2.078865368s ago: executing program 0 (id=2801):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2254}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}]}, 0x44}}, 0x0)

1.932909167s ago: executing program 1 (id=2803):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, 0x20, 0x9, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

1.917163897s ago: executing program 0 (id=2804):
syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$eJzs3UFsHNd9B+D/Gy5Fym4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIRtrQvfTQQ4Ci6CEnAq1RIEUDoymCHtnWBZKLD0VOPREtbARFD2wRIKeAxcy+lZY0ZcmmSFH299nUbznz3ux7b5YzkqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN976cKpZ9ODbgUAcJAuTX311Gn3fwD4RLnsz/8AAAAAAAAAAAAAAHDYpSjisUixeGkzzVTfdw1fbHdu3Jwen9i92tFU1Ryoypdfw8+ePnP2S8+NnevlB9e/356IV6YuX6i/uHB9cam1vNyaq0932rMLc617PsJe6+80Wg1A/fqrN+auXl2un37mzLbdN0feG3r0+Mj5sadOPtkrOz0+MTHVV6Y2+JHf/X3uNMPjSBRxMlI8/b2fpGZEFLH3sbjLZ2e/Ha06MVp1Ynp8ourIfLvZWSl3TvYGooio91Vq9MboAM7FnjQiVsvmlw0eLbs3tdhcal6Zb9Unm0sr7ZX2QmcydVtb9qceRZxLEWsRsTH0/sMNRhG1SPGdY5vpSkQM9Mbhi9XE4Du3o9jHPt6Dsp31wYi14iE4Z4fYUBTxcqT46dtFzJZjlr/iCxEvl/mDiDfLfCEilR+MsxHv7vI54uFUiyL+vDz/5zfTXHU96F1XLn6t/pXO1YW+sr3rykN/fzhIh/zaNBxFNKsr/mb66L/ZAQAAAAAAAAAAAAAAAOB+OxpFPBEpXvr3P6rmFUc1L/3Y+bHfH/nF/jnjj9/lOGXZZyJitbi3OblH8hTiyTSZ0gOeS/xJNhxF/HGe//fGg24MAAAAAAAAAAAAAAAAAADAJ9yPI8Xz75xIa9G/pni7c61+uXllvrsqbG/t396a6VtbW1v11M1GzpmcqznXcq7n3MgZRa6fs5FzJudqzrWc6zk3csZArp+zkXMm52rOtZzrOTdyRi3Xz9nIOZNzNedazvWcGznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwcVJEET+PFN/+xmaKFBGNiJno5vpQrwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CANpSK+Hynqf9C4ta0WEan6v+tE+cvZaBwp89PRGCvzhWhcyNmsstZ44wG0n70ZTEX8KFIMDb9164Tn8z/Y/e7WxyDe/Obt736l1s2B3s6R94YePX7s/NjErz1+p9dptwaMXmx3btysT49PTEz1ba7ld/9037aR/L7F/ek6EbH82uuvNufnW0ufmBdFHIpmPKgXte6LWhyS9hzUi3y9il12FYfhp6BxWAaq9+IBX5g4EOX9/91I8dvv/Efvht+7//9C97tbd/j42Z/cvv8/v/NA+3T/f6xv2/P5dyODtYjhleuLg8cjhpdfe/1k+3rzWutaq3P21Kkvj419+cypwSMRw1fb862+V3seKgAAAAAAAAAAAAAAAICDlYr43UjR/NFmqkfEzWq+1sj5sadOPjkQA9V8q23ztl6Zunyh/uLC9cWl1vJya64+3WnPLsy17vXthqvpXtPjE/vSmbs6us/tPzr84sLia0vta3+4suv+R4YvXFleWWrO7r47jkYR0ejfMlo1eHp8omr0fLvZqapO7jqZ7sMbTEX8Z6SYPVs/0tuW5//tnOG/bf7/6s4D7dP8v0/1bSvfM6UifhYpfusvHo/PV+18JN43Zrnc30SK0XOfy+XiSFmu14bucwW6MwPLsv8bKf7h59vL9uZDPna77LP3Oq4Pi/L8H4sU3/+z78av523bn/+w+/l/ZOeB9un8f6Zv2yPbnlew566Tz//JSPHCY2/Fb+RtH/T8jyK2tra+FXEiF771fI59Ov+f7ds2Et33/c37130AAAAAAAAAAICH1mAq4m8jxZMTtfRc3nYv//5vbueB9unff/1y37a5A1qvaM+DCgAAAACHxGAq4seR4trKW7fmUG+f/903//N3bq+9Pp527K3+nu+XqucG3M+//+s3kt93Zu/dBgAAAAAAAAAAAAAAAAAAgEMlpSKey+upz9xlPfX1SPHSfz+dy6XjZbneOvAj1a/DlxY6Jy/Mzy/MNleaV+Zb9anF5myrrPuZSLH515/LdYtqffXP57rdNd6Ht3prsS9Fiom/65XtrsXeW5u8ux54dy32suynIsV//f32sr11rD97u+zpsuxfRYqv/9PuZY/fLnumLPvdSPHDr9d7ZR8py/aej9p9JulwLeZbz8wuzL/vUagAAAAAAAAAAAAAAAAAAADwYQ2mIv40UvzP9bVYrab9v3FrV85ab8Ob3+xb73+Hm9U6/yPV+v93ev1R1v8fuS+9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh0uKIl6PFIuXNtP6UPl91/DFdufGzenxid2rHU1VzYGqfPk1/OzpM2e/9NzYuV5+cP377Yl4ZeryhfqLC9cXl1rLy625+nSnPbsw17rnI+y1/u2h6xqtBqB+/dUbc1evLtdPP3Nm2+6bI+8NPXp85PzYUyef7JWdHp+YmOorUxv8EO/+oRp325Eo4i8jxdPf+0n656GIIvY+Fnf57Oy3o1UnRqtOTI9PVB2Zbzc7K+XOyd5AFBH1vkqN3hgdwLnYk0bEatn8ssGjZfemFptLzSvzrfpkc2mlvdJe6EymbmvL/tSjiHMpYi0iNob6D3QkZxGvRorvHNtM/zIUMdAbhy9emvrqqdN3bkexr728i29V7awPRqwVD8E5O8SGooh/jBQ/fftE/OtQRC26X/GFiJfL/EHEm2W+EJHKD8bZiHeHHnSruV9qUcT/lef//GZ6eyii+pGprisXv1b/SufqQl/Z3nVl5/1hKyIeqvvDQTrk16bhKOKH1RV/M/2bn2sAAAAAAAAAAAAAAACAQ6SIX40Uz79zIlXzg2/NKW53rtUvN6/Md6f19eb+9eZMb21tbdVTNxs5Z3Ku5lzLuZ5zI2cUuX7ORs6ZnKs513Ku59zIGQO5fs5GzpmcqznXcq7n3MgZtVw/ZyPnTM7VnGs513Nu5IxDMncPAAAAAAAAAAAAAAAAAAD4eCmq/1J8+xubaWuou770THRz3XqgH3v/HwAA//9wn/vk")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000f40)=0x700)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

1.545275006s ago: executing program 2 (id=2807):
syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp936,codepage=iso8859-4,dir_umask=00000000000\x00\x00\x00\x0000000005,part=0x000000000000007e,\x00'], 0x1, 0x2fe, &(0x7f0000000240)="$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")
chdir(&(0x7f0000000300)='./file0\x00')
r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x0, @empty}}}, 0xa0)

1.412120175s ago: executing program 1 (id=2809):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000100)=0xffff, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/208, 0xd0}, 0x6}], 0x1, 0x10102, 0x0)

1.410682285s ago: executing program 0 (id=2810):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@lazytime}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000980)="$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")
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@getneightbl={0x14, 0x42, 0x727d4c0aeeddad0d, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)

1.273224115s ago: executing program 0 (id=2811):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000040)={0x20, 0x18, 0x5, "a956e9c1d5"}, 0x0, 0x0})

1.234514945s ago: executing program 1 (id=2812):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8, 0x22, r2}]}}}]}, 0x44}}, 0x0)

1.048379354s ago: executing program 3 (id=2813):
open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$KDFONTOP_COPY(r0, 0x80081272, &(0x7f0000000180)={0x3, 0x0, 0xd, 0x1d, 0xd2, 0x0})

962.557123ms ago: executing program 3 (id=2814):
r0 = epoll_create(0x6)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
epoll_pwait(r0, &(0x7f0000000100)=[{}], 0x1, 0x1000d4, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0xb0000005})

961.322534ms ago: executing program 2 (id=2815):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, r0, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x8]}]}, 0x44}}, 0x0)

950.676113ms ago: executing program 1 (id=2816):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, 0x0, &(0x7f00000001c0))

748.452412ms ago: executing program 1 (id=2817):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x5})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x5, 0x40, 0x2})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000080)={0x5, 0x7})

682.127083ms ago: executing program 3 (id=2818):
unshare(0x2040600)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"69890100660000000000000200", 0x0, 0x0, {0x4, 0xc}, {0x7, 0xc00000}, 0x5, [0x3, 0x6, 0x9, 0x6, 0x8000000000, 0x10000400, 0x8, 0x2, 0x8, 0x6, 0xfffe, 0x8000081, 0x10, 0x8de, 0x7]})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

667.051922ms ago: executing program 2 (id=2819):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x129102, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0)
lseek(r0, 0x5, 0x1)

596.700712ms ago: executing program 3 (id=2820):
r0 = syz_io_uring_setup(0x6778, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0))
r1 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r1, 0x1)
io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0)

539.209142ms ago: executing program 1 (id=2821):
r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000003c0)={[{@compress_force}, {@clear_cache}, {@nodatasum}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x5, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
mount$afs(&(0x7f00000001c0)=@cell={0x23, 'syz1:', 'syz0', '.readonly'}, 0x0, 0x0, 0x0, &(0x7f0000000400))
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)

475.250751ms ago: executing program 2 (id=2822):
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000100)={0x1, 0x18, 0xfff7, 0x2ff, "56cfe30c486e5a643e11194e35a0156eaa7e2a5dc66f32f33ef0701953be82e2"})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4001}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00010200000000000000fd68000000", @ANYRES32=0x0], 0x1c}}, 0x0)

256.46157ms ago: executing program 3 (id=2823):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000b0000000a00000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x8000, r0}, 0x38)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x38)

166.27806ms ago: executing program 2 (id=2824):
pipe2(&(0x7f0000001440)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0)

106.95252ms ago: executing program 3 (id=2825):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
readv(r1, &(0x7f0000000540)=[{&(0x7f0000000200)=""/183, 0xb7}], 0x1)

0s ago: executing program 2 (id=2826):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50)

kernel console output (not intermixed with test programs):

or directory
[  243.060754][ T9534] loop0: detected capacity change from 0 to 1024
[  243.150432][ T4448] usb 2-1: USB disconnect, device number 12
[  243.249457][ T9534] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none.
[  243.342702][ T4839] udevd[4839]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  243.372240][ T4539] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  243.398146][ T9545] loop2: detected capacity change from 0 to 64
[  243.445140][ T9534] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[  243.469169][ T9534] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: none.
[  243.541134][ T9532] loop3: detected capacity change from 0 to 40427
[  243.646416][ T9547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1816'.
[  243.709643][ T9532] F2FS-fs (loop3): Found nat_bits in checkpoint
[  243.788551][ T4539] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  243.819352][ T4539] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  243.831502][ T4539] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64
[  243.850441][ T4539] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  243.881620][ T9532] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  243.909217][ T4539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.980461][ T9559] loop1: detected capacity change from 0 to 2048
[  243.992158][ T9538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  244.001450][ T9558] loop2: detected capacity change from 0 to 2048
[  244.003912][ T9538] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  244.016351][ T4179] attempt to access beyond end of device
[  244.016351][ T4179] loop3: rw=2049, want=45104, limit=40427
[  244.090903][ T9559] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.094582][ T9558] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.282281][ T4539] usb 6-1: USB disconnect, device number 10
[  244.783861][ T9554] loop0: detected capacity change from 0 to 32768
[  244.918702][ T9568] loop3: detected capacity change from 0 to 4096
[  244.938440][ T9574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'.
[  244.989552][ T9554] XFS (loop0): Mounting V5 Filesystem
[  245.138146][ T9554] XFS (loop0): Ending clean mount
[  245.145563][ T9568] ntfs3: loop3: failed to convert "0000" to cp949
[  245.163488][ T9568] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  245.185843][ T9554] XFS (loop0): Quotacheck needed: Please wait.
[  245.398119][ T9554] XFS (loop0): Quotacheck: Done.
[  245.530751][ T9588] loop1: detected capacity change from 0 to 2048
[  245.668185][ T4176] XFS (loop0): Unmounting Filesystem
[  245.694621][ T9597] loop2: detected capacity change from 0 to 256
[  245.715322][ T9588] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  245.802198][ T9582] loop5: detected capacity change from 0 to 32768
[  245.821279][ T9588] EXT4-fs (loop1): shut down requested (1)
[  245.990892][ T9582] XFS (loop5): Mounting V5 Filesystem
[  246.164965][ T9582] XFS (loop5): Ending clean mount
[  246.194879][ T4542] XFS (loop5): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x8 
[  246.210706][ T4542] XFS (loop5): Unmount and run xfs_repair
[  246.216719][ T4542] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  246.224672][ T4542] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  246.237119][ T4542] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 40  ...............@
[  246.246718][ T4542] 00000020: ca 7e 21 01 b8 f1 48 38 8e 2d 76 37 b9 06 20 e6  .~!...H8.-v7.. .
[  246.255795][ T4542] 00000030: 00 00 00 00 07 00 00 00 00 00 00 00 00 00 00 03  ................
[  246.270631][ T4542] 00000040: 00 00 02 a4 00 00 0d 5c 00 00 02 a0 00 00 0d 60  .......\.......`
[  246.313087][ T4542] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.335915][ T4542] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.379126][ T4542] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  246.391960][ T9582] XFS (loop5): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x8 len 8 error 74
[  246.461523][ T9619] loop0: detected capacity change from 0 to 128
[  246.486661][ T9582] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  246.524131][ T9624] loop3: detected capacity change from 0 to 512
[  246.536926][ T9582] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  246.625507][ T5895] XFS (loop5): Unmounting Filesystem
[  246.735908][ T9624] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  246.757522][ T9624] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  246.945645][ T9635] loop2: detected capacity change from 0 to 4096
[  247.017219][ T9638] loop0: detected capacity change from 0 to 256
[  247.193022][ T9638] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  247.458177][ T9631] loop1: detected capacity change from 0 to 32768
[  247.495239][ T9643] MTD: Couldn't look up './file0': -15
[  247.527915][ T9645] loop0: detected capacity change from 0 to 1024
[  247.595663][ T9652] ALSA: mixer_oss: invalid OSS volume ''
[  247.640631][ T9655] loop2: detected capacity change from 0 to 512
[  247.661513][ T9645] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  247.663393][ T9631] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1843 (9631)
[  247.765148][ T9655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  247.801028][ T9631] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  247.829942][ T9631] BTRFS info (device loop1): using free space tree
[  247.839903][ T9655] EXT4-fs (loop2): 1 truncate cleaned up
[  247.852906][ T9631] BTRFS info (device loop1): has skinny extents
[  247.892633][ T9655] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  248.123322][ T9631] BTRFS info (device loop1): enabling ssd optimizations
[  248.494445][ T9692] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1862'.
[  248.866268][ T9684] loop0: detected capacity change from 0 to 40427
[  248.985538][ T9684] F2FS-fs (loop0): invalid crc value
[  249.030591][ T9684] F2FS-fs (loop0): Found nat_bits in checkpoint
[  249.039926][ T9678] loop3: detected capacity change from 0 to 32768
[  249.201259][ T9678] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.1858 (9678)
[  249.249753][ T9684] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  249.330127][ T9678] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  249.386849][ T9678] BTRFS info (device loop3): using free space tree
[  249.418089][ T9678] BTRFS info (device loop3): has skinny extents
[  249.432864][   T26] audit: type=1326 audit(1734426508.943:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff482d3ed19 code=0x7ffc0000
[  249.542027][ T4445] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  249.578840][   T26] audit: type=1326 audit(1734426508.943:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff482d3ed19 code=0x7ffc0000
[  249.655230][ T4176] attempt to access beyond end of device
[  249.655230][ T4176] loop0: rw=2049, want=45104, limit=40427
[  249.659728][   T26] audit: type=1326 audit(1734426508.943:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff482d3ed19 code=0x7ffc0000
[  249.729092][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1872'.
[  249.758603][   T26] audit: type=1326 audit(1734426508.983:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9711 comm="syz.2.1869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff482d3ed19 code=0x7ffc0000
[  249.788886][ T9678] BTRFS info (device loop3): enabling ssd optimizations
[  249.822016][ T4445] usb 6-1: Using ep0 maxpacket: 16
[  249.951989][ T4445] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.988755][ T4445] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.061862][ T4445] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  250.112632][ T4445] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  250.142658][ T4445] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.174426][ T4445] usb 6-1: config 0 descriptor??
[  250.244746][ T9744] lo speed is unknown, defaulting to 1000
[  250.337821][ T9748] loop2: detected capacity change from 0 to 256
[  250.391344][ T9750] netlink: 'syz.0.1873': attribute type 21 has an invalid length.
[  250.401678][ T9750] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1873'.
[  250.492261][ T9748] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  250.505197][ T9748] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  250.623880][ T4178] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006)
[  250.644676][ T4445] microsoft 0003:045E:07DA.000E: ignoring exceeding usage max
[  250.654013][ T4178] exFAT-fs (loop2): Filesystem has been set read-only
[  250.675849][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.692082][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.699358][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.732502][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.739929][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.762952][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.770430][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.796147][ T4445] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  250.817891][ T4445] microsoft 0003:045E:07DA.000E: No inputs registered, leaving
[  250.997351][ T4178] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000006)
[  251.059997][ T4445] microsoft 0003:045E:07DA.000E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  251.075245][ T9762] loop3: detected capacity change from 0 to 8
[  251.083187][ T4445] microsoft 0003:045E:07DA.000E: no inputs found
[  251.089752][ T4445] microsoft 0003:045E:07DA.000E: could not initialize ff, continuing anyway
[  251.118198][ T4445] usb 6-1: USB disconnect, device number 11
[  251.256494][   T26] audit: type=1800 audit(1734426510.763:58): pid=9762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1878" name="file1" dev="loop3" ino=5 res=0 errno=0
[  251.306092][ T4493] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  251.309549][ T9762] SQUASHFS error: Failed to read block 0x6e6: -5
[  251.347446][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.364008][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.371501][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.410886][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.451611][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.462383][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.489869][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.513558][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.520970][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.540838][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.559564][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.569395][ T9771] loop2: detected capacity change from 0 to 8192
[  251.577104][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.591172][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.599012][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.606949][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.623078][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.630743][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.640737][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.663445][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.677443][ T9771] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  251.692733][ T4493] usb 2-1: config 7 descriptor has 1 excess byte, ignoring
[  251.702022][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.709541][ T9771] REISERFS (device loop2): using ordered data mode
[  251.748823][ T9771] reiserfs: using flush barriers
[  251.755229][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.763366][ T4493] usb 2-1: config 7 has 1 interface, different from the descriptor's value: 2
[  251.783143][ T9771] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  251.800202][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.802328][ T4542] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  251.827967][ T9762] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  251.832289][ T9771] REISERFS (device loop2): checking transaction log (loop2)
[  251.865376][ T9762] SQUASHFS error: read_indexes: reading block [6e4:0]
[  251.962758][ T4493] usb 2-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  251.972825][ T4493] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.996802][ T4493] usb 2-1: Product: syz
[  252.001017][ T4493] usb 2-1: Manufacturer: syz
[  252.006461][ T4493] usb 2-1: SerialNumber: syz
[  252.056790][ T4493] rndis_wlan 2-1:7.0: skipping garbage
[  252.071840][ T9771] REISERFS (device loop2): Using tea hash to sort names
[  252.072814][ T4542] usb 6-1: Using ep0 maxpacket: 8
[  252.079444][ T9771] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  252.098976][ T4493] usb 2-1: bad CDC descriptors
[  252.130385][ T4493] rndis_host 2-1:7.0: skipping garbage
[  252.148156][ T4493] usb 2-1: bad CDC descriptors
[  252.162338][ T4493] option 2-1:7.0: GSM modem (1-port) converter detected
[  252.238124][ T4542] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  252.263678][ T4542] usb 6-1: config 179 has no interface number 0
[  252.270095][ T4542] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  252.295609][ T9787] netlink: 'syz.3.1894': attribute type 21 has an invalid length.
[  252.303978][ T4542] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  252.326387][ T4542] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  252.369345][ T4542] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  252.382143][ T4493] usb 2-1: USB disconnect, device number 13
[  252.389007][ T4493] option 2-1:7.0: device disconnected
[  252.395750][ T4445] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  252.401224][ T4542] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  252.462043][ T4542] usb 6-1: config 179 interface 65 has no altsetting 0
[  252.469083][ T4542] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  252.499441][ T4542] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.552363][ T9775] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  252.578787][ T4542] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input21
[  252.672661][ T4445] usb 1-1: Using ep0 maxpacket: 32
[  252.792719][ T4445] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[  252.824157][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.845805][ T4445] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.867070][ T4542] usb 6-1: USB disconnect, device number 12
[  252.880980][ T4445] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  252.902516][ T4542] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  252.936111][ T4445] usb 1-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00
[  252.976872][ T4445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.996613][ T4445] usb 1-1: config 0 descriptor??
[  253.277371][ T9790] loop3: detected capacity change from 0 to 40427
[  253.315463][ T9797] loop2: detected capacity change from 0 to 512
[  253.361089][ T9790] F2FS-fs (loop3): invalid crc value
[  253.372558][ T9797] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  253.380514][ T9797] EXT4-fs (loop2): Ignoring removed bh option
[  253.441980][ T9797] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  253.463185][ T9790] F2FS-fs (loop3): Found nat_bits in checkpoint
[  253.496060][ T4445] logitech 0003:046D:C287.000F: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.0-1/input0
[  253.512268][ T4445] logitech 0003:046D:C287.000F: no inputs found
[  253.530841][ T9797] EXT4-fs (loop2): 1 truncate cleaned up
[  253.578241][ T9797] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,quota,nogrpid,,errors=continue. Quota mode: writeback.
[  253.753148][ T4493] usb 1-1: USB disconnect, device number 13
[  253.764780][ T9790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  253.949786][ T9790] F2FS-fs (loop3): Corrupted max_depth of 3: 4294967295
[  254.263514][ T9822] netlink: 'syz.2.1907': attribute type 10 has an invalid length.
[  254.483327][ T4179] attempt to access beyond end of device
[  254.483327][ T4179] loop3: rw=2051, want=45064, limit=40427
[  254.542176][ T4179] attempt to access beyond end of device
[  254.542176][ T4179] loop3: rw=2051, want=131072, limit=40427
[  254.574821][ T4179] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5
[  254.574874][ T4179] F2FS-fs (loop3): Issue discard(5637, 5637, 10747) failed, ret: -5
[  254.607235][ T9806] loop5: detected capacity change from 0 to 32768
[  254.745681][ T9806] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.1900 (9806)
[  254.805124][ T9806] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  254.887092][ T9806] BTRFS info (device loop5): setting nodatacow, compression disabled
[  254.905888][ T9806] BTRFS info (device loop5): setting datacow
[  254.950871][ T9806] BTRFS info (device loop5): doing ref verification
[  255.001448][ T9806] BTRFS info (device loop5): force clearing of disk cache
[  255.062114][ T9806] BTRFS info (device loop5): turning off barriers
[  255.068689][ T9806] BTRFS info (device loop5): enabling ssd optimizations
[  255.112487][ T9806] BTRFS info (device loop5): using spread ssd allocation scheme
[  255.166423][ T9806] BTRFS info (device loop5): using free space tree
[  255.194733][ T9806] BTRFS info (device loop5): has skinny extents
[  255.260530][ T9842] loop2: detected capacity change from 0 to 128
[  255.264783][ T9818] loop1: detected capacity change from 0 to 32768
[  255.323886][ T9842] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  255.354952][ T9842] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  255.394637][ T9842] overlayfs: filesystem on './file1' not supported
[  255.397666][ T9818] XFS (loop1): Mounting V5 Filesystem
[  255.518672][ T9806] BTRFS info (device loop5): clearing free space tree
[  255.538011][ T9806] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.585369][ T9806] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.597701][ T9788] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  255.651135][ T9818] XFS (loop1): Ending clean mount
[  255.727346][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.733647][ T9806] BTRFS info (device loop5): creating free space tree
[  255.734921][ T9806] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  255.740610][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  255.810338][ T9879] loop0: detected capacity change from 0 to 2048
[  255.861846][ T9806] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  255.898178][ T4172] XFS (loop1): Unmounting Filesystem
[  255.974457][ T9879] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none.
[  256.098691][ T9879] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  256.239569][ T9879] EXT4-fs (loop0): Remounting filesystem read-only
[  256.901488][   T26] audit: type=1326 audit(1734426516.403:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba24cd19 code=0x7ffc0000
[  256.989598][   T26] audit: type=1326 audit(1734426516.443:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba24cd19 code=0x7ffc0000
[  257.119688][   T26] audit: type=1326 audit(1734426516.443:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7fc4ba24cd19 code=0x7ffc0000
[  257.250821][ T9881] loop2: detected capacity change from 0 to 40427
[  257.274431][   T26] audit: type=1326 audit(1734426516.443:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba24cd19 code=0x7ffc0000
[  257.318492][ T9907] loop0: detected capacity change from 0 to 256
[  257.328195][   T26] audit: type=1326 audit(1734426516.443:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9896 comm="syz.3.1925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba24cd19 code=0x7ffc0000
[  257.380971][ T9881] F2FS-fs (loop2): invalid crc value
[  257.415968][ T9907] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  257.480200][ T9881] F2FS-fs (loop2): Found nat_bits in checkpoint
[  257.560774][ T9913] loop1: detected capacity change from 0 to 64
[  257.585382][ T9881] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  257.645413][ T9881] F2FS-fs (loop2): Corrupted max_depth of 3: 4294967295
[  258.034742][ T4178] attempt to access beyond end of device
[  258.034742][ T4178] loop2: rw=2051, want=45064, limit=40427
[  258.034987][ T9922] loop3: detected capacity change from 0 to 128
[  258.089044][ T4178] attempt to access beyond end of device
[  258.089044][ T4178] loop2: rw=2051, want=131072, limit=40427
[  258.129046][ T4178] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5
[  258.129101][ T4178] F2FS-fs (loop2): Issue discard(5637, 5637, 10747) failed, ret: -5
[  258.466043][ T9939] loop1: detected capacity change from 0 to 256
[  258.639431][ T9939] FAT-fs (loop1): Directory bread(block 64) failed
[  258.647606][ T9939] FAT-fs (loop1): Directory bread(block 65) failed
[  258.659902][ T9939] FAT-fs (loop1): Directory bread(block 66) failed
[  258.668944][ T9939] FAT-fs (loop1): Directory bread(block 67) failed
[  258.691140][ T9946] loop2: detected capacity change from 0 to 128
[  258.694283][ T9939] FAT-fs (loop1): Directory bread(block 68) failed
[  258.710927][ T9939] FAT-fs (loop1): Directory bread(block 69) failed
[  258.718864][ T9939] FAT-fs (loop1): Directory bread(block 70) failed
[  258.730158][ T9939] FAT-fs (loop1): Directory bread(block 71) failed
[  258.737089][ T9939] FAT-fs (loop1): Directory bread(block 72) failed
[  258.745690][ T9946] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  258.771992][ T9939] FAT-fs (loop1): Directory bread(block 73) failed
[  258.782576][ T9946] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  258.884892][   T26] audit: type=1800 audit(1734426518.393:64): pid=9939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1937" name="file1" dev="loop1" ino=1048705 res=0 errno=0
[  258.907772][  T154] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  259.001109][ T9947] attempt to access beyond end of device
[  259.001109][ T9947] loop1: rw=2049, want=1352, limit=256
[  259.142811][ T9952] netlink: 'syz.0.1945': attribute type 19 has an invalid length.
[  259.540060][ T9788] attempt to access beyond end of device
[  259.540060][ T9788] loop1: rw=1, want=1832, limit=256
[  259.561656][ T9963] loop0: detected capacity change from 0 to 4096
[  259.584792][ T9788] attempt to access beyond end of device
[  259.584792][ T9788] loop1: rw=1, want=6640, limit=256
[  259.663668][ T9963] NILFS (loop0): invalid segment: Checksum error in segment payload
[  259.678808][ T9788] attempt to access beyond end of device
[  259.678808][ T9788] loop1: rw=1, want=8728, limit=256
[  259.706044][ T9963] NILFS (loop0): trying rollback from an earlier position
[  259.745675][ T9788] attempt to access beyond end of device
[  259.745675][ T9788] loop1: rw=1, want=11064, limit=256
[  259.768358][ T9963] NILFS (loop0): recovery complete
[  259.796027][ T9788] attempt to access beyond end of device
[  259.796027][ T9788] loop1: rw=1, want=13112, limit=256
[  259.825812][ T9975] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  259.850106][ T9788] attempt to access beyond end of device
[  259.850106][ T9788] loop1: rw=1, want=14608, limit=256
[  260.153766][ T9978] loop3: detected capacity change from 0 to 8192
[  260.228616][ T9978] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  260.239082][ T9987] loop1: detected capacity change from 0 to 2048
[  260.318381][ T9978] REISERFS (device loop3): using ordered data mode
[  260.367480][ T9978] reiserfs: using flush barriers
[  260.381350][ T9987] UDF-fs: bad mount option "ÿÿÿÿÿÿÿÿÿÿ¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value
[  260.430042][ T9993] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1964'.
[  260.432658][ T9978] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  260.495388][ T9982] loop2: detected capacity change from 0 to 8192
[  260.532525][ T9978] REISERFS (device loop3): checking transaction log (loop3)
[  260.634536][ T9997] loop5: detected capacity change from 0 to 256
[  260.701124][ T9997] FAT-fs (loop5): Directory bread(block 64) failed
[  260.739191][ T9997] FAT-fs (loop5): Directory bread(block 65) failed
[  260.792171][ T9997] FAT-fs (loop5): Directory bread(block 66) failed
[  260.809019][ T9997] FAT-fs (loop5): Directory bread(block 67) failed
[  260.832050][ T9997] FAT-fs (loop5): Directory bread(block 68) failed
[  260.861961][ T9997] FAT-fs (loop5): Directory bread(block 69) failed
[  260.869028][ T9997] FAT-fs (loop5): Directory bread(block 70) failed
[  260.896937][ T9997] FAT-fs (loop5): Directory bread(block 71) failed
[  260.942061][ T9997] FAT-fs (loop5): Directory bread(block 72) failed
[  260.957497][ T9991] loop0: detected capacity change from 0 to 32768
[  260.959415][ T9978] REISERFS (device loop3): Using tea hash to sort names
[  261.001826][ T9997] FAT-fs (loop5): Directory bread(block 73) failed
[  261.022769][ T9978] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  261.089107][T10005] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1969'.
[  261.186756][   T26] audit: type=1800 audit(1734426520.693:65): pid=9997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1965" name="file1" dev="loop5" ino=1048707 res=0 errno=0
[  261.248293][ T9991] XFS (loop0): Mounting V5 Filesystem
[  261.381046][T10017] attempt to access beyond end of device
[  261.381046][T10017] loop5: rw=2049, want=1352, limit=256
[  261.553420][ T9991] XFS (loop0): Ending clean mount
[  261.794126][ T4176] XFS (loop0): Unmounting Filesystem
[  262.345910][T10014] loop2: detected capacity change from 0 to 40427
[  262.358693][T10028] program syz.5.1976 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  262.508620][T10014] F2FS-fs (loop2): invalid crc value
[  262.559699][T10014] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  262.679099][T10037] loop5: detected capacity change from 0 to 1024
[  262.796718][T10014] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.862049][T10037] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  262.871213][T10037] EXT4-fs (loop5): orphan cleanup on readonly fs
[  262.882555][T10047] loop1: detected capacity change from 0 to 512
[  262.913799][T10026] loop3: detected capacity change from 0 to 32768
[  262.943252][T10037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  262.954835][T10026] XFS: noikeep mount option is deprecated.
[  262.985306][T10047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  263.003085][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.013010][T10037] EXT4-fs error (device loop5): ext4_quota_write:6592: inode #3: comm syz.5.1979: mark_inode_dirty error
[  263.078306][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.078345][T10047] EXT4-fs (loop1): 1 orphan inode deleted
[  263.096372][T10047] EXT4-fs (loop1): 1 truncate cleaned up
[  263.104635][T10047] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,data=journal,data_err=ignore,inode_readahead_blks=0x0000000000000020,resuid=0x0000000000000000,block_validity,. Quota mode: none.
[  263.152033][T10037] Quota error (device loop5): write_blk: dquota write failed
[  263.186247][T10026] XFS (loop3): Mounting V5 Filesystem
[  263.193572][T10037] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[  263.204706][T10037] EXT4-fs error (device loop5): ext4_acquire_dquot:6197: comm syz.5.1979: Failed to acquire dquot type 0
[  263.217941][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.313671][T10037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  263.343368][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.350645][T10037] EXT4-fs error (device loop5): ext4_ext_truncate:4454: inode #15: comm syz.5.1979: mark_inode_dirty error
[  263.368335][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.375514][T10037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  263.375795][T10026] XFS (loop3): Ending clean mount
[  263.402687][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.454323][T10037] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  263.486387][T10026] XFS (loop3): Quotacheck needed: Please wait.
[  263.558575][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.558731][T10067] netlink: 'syz.0.1989': attribute type 18 has an invalid length.
[  263.579250][T10037] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5806: Corrupt filesystem
[  263.672637][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.679379][T10037] EXT4-fs error (device loop5): ext4_truncate:4272: inode #15: comm syz.5.1979: mark_inode_dirty error
[  263.730886][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.743748][T10037] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  263.759405][T10037] EXT4-fs (loop5): Remounting filesystem read-only
[  263.776831][T10073] overlayfs: workdir and upperdir must reside under the same mount
[  263.792612][T10037] EXT4-fs (loop5): 1 truncate cleaned up
[  263.799530][T10037] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000015,stripe=0x0000000000000000,grpid,errors=remount-ro,data_err=ignore,noblock_validity,sysvgroups,quota,. Quota mode: writeback.
[  263.833547][T10069] loop1: detected capacity change from 0 to 32768
[  263.908738][T10026] XFS (loop3): Quotacheck: Done.
[  263.931384][T10069] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1988 (10069)
[  264.023919][ T4214] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  264.064502][T10069] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  264.073670][T10069] BTRFS info (device loop1): using free space tree
[  264.080311][T10069] BTRFS info (device loop1): has skinny extents
[  264.093999][ T4179] XFS (loop3): Unmounting Filesystem
[  264.123769][T10079] loop2: detected capacity change from 0 to 2048
[  264.210355][T10089] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.232594][ T4539] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  264.298692][T10069] BTRFS info (device loop1): enabling ssd optimizations
[  264.310950][ T4225] BTRFS warning (device loop1): checksum verify failed on 5308416 wanted 0xe1d58233 found 0x1d9379c2 level 0
[  264.324037][ T4214] usb 1-1: Using ep0 maxpacket: 16
[  264.551183][ T4214] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.563350][ T4214] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  264.585674][ T4214] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  264.600908][ T4214] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.635932][ T4214] usb 1-1: config 0 descriptor??
[  264.732035][ T4539] usb 6-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config
[  264.751782][ T4539] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  264.872743][ T4539] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  264.895142][ T4539] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  264.907189][ T4539] usb 6-1: SerialNumber: syz
[  265.012148][T10108] input: syz1 as /devices/virtual/input/input22
[  265.029802][T10110] loop2: detected capacity change from 0 to 764
[  265.105600][T10110] rock: directory entry would overflow storage
[  265.116530][T10110] rock: sig=0x4654, size=5, remaining=4
[  265.166596][ T4214] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input23
[  265.310019][ T4539] usb 6-1: 0:2 : does not exist
[  265.319637][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'.
[  265.333145][ T4214] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  265.407602][ T4539] usb 6-1: USB disconnect, device number 13
[  265.522086][   T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  265.612672][ T4216] usb 1-1: USB disconnect, device number 14
[  265.693436][ T4839] udevd[4839]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  265.814938][   T13] usb 2-1: Using ep0 maxpacket: 32
[  265.930017][T10133] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2007'.
[  265.942483][   T13] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91
[  265.955420][   T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.977866][   T13] usb 2-1: config 0 descriptor??
[  266.024151][   T13] gspca_main: sunplus-2.14.0 probing 0458:7006
[  266.248915][T10139] loop5: detected capacity change from 0 to 4096
[  266.435752][T10139] ntfs3: loop5: failed to convert "0080" to cp737
[  266.447906][T10145] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  266.462699][T10139] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  266.515491][T10139] ntfs3: loop5: mft corrupted
[  266.585213][T10151] loop3: detected capacity change from 0 to 128
[  266.694232][T10151] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  266.758355][T10156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2019'.
[  266.780385][T10151] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  266.893490][   T13] gspca_sunplus: reg_w_riv err -71
[  266.898823][   T13] sunplus: probe of 2-1:0.0 failed with error -71
[  266.940626][   T13] usb 2-1: USB disconnect, device number 14
[  267.620175][T10191] loop3: detected capacity change from 0 to 128
[  268.113406][T10205] syz.2.2042 (10205) used greatest stack depth: 17056 bytes left
[  268.365537][T10180] loop0: detected capacity change from 0 to 32768
[  268.446692][T10180] 
[  268.446692][T10180]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.446692][T10180] 
[  268.530662][T10180] 
[  268.530662][T10180]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.530662][T10180] 
[  268.598914][T10180] 
[  268.598914][T10180]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.598914][T10180] 
[  268.657373][T10180] JFS: Invalid value of umask
[  268.785040][ T4176] 
[  268.785040][ T4176]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.785040][ T4176] 
[  268.805738][T10229] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  268.826861][ T4176] 
[  268.826861][ T4176]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  268.826861][ T4176] 
[  268.879641][T10227] loop5: detected capacity change from 0 to 4096
[  268.921988][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  269.013520][T10231] loop1: detected capacity change from 0 to 512
[  269.050895][T10213] loop2: detected capacity change from 0 to 32768
[  269.130758][T10231] EXT4-fs (loop1): 1 truncate cleaned up
[  269.149335][T10231] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  269.206309][   T13] usb 4-1: Using ep0 maxpacket: 32
[  269.215124][T10213] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2045 (10213)
[  269.346891][T10213] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  269.386598][T10213] BTRFS info (device loop2): using free space tree
[  269.401309][T10213] BTRFS info (device loop2): has skinny extents
[  269.592097][   T13] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  269.601191][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.630843][   T13] usb 4-1: Product: syz
[  269.651218][   T13] usb 4-1: Manufacturer: syz
[  269.671224][   T13] usb 4-1: SerialNumber: syz
[  269.679510][   T13] usb 4-1: config 0 descriptor??
[  269.717177][T10213] BTRFS info (device loop2): enabling ssd optimizations
[  269.965457][   T13] RobotFuzz Open Source InterFace, OSIF 4-1:0.0: version d4.15 found at bus 004 address 009
[  270.603656][ T6942] usb 4-1: USB disconnect, device number 9
[  270.613385][T10293] loop2: detected capacity change from 0 to 128
[  270.654157][T10286] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  270.719444][T10293] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  270.733840][T10293] ext4 filesystem being mounted at /426/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  270.803209][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'.
[  270.813207][T10299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2073'.
[  270.897054][T10293] fscrypt (loop2, inode 12): Can't use IV_INO_LBLK_64 policy with contents mode other than AES-256-XTS
[  271.351926][   T13] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  271.424315][T10326] loop2: detected capacity change from 0 to 1024
[  271.633120][   T13] usb 2-1: Using ep0 maxpacket: 8
[  271.952696][   T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  271.967827][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.990760][   T13] usb 2-1: Product: syz
[  272.006584][   T13] usb 2-1: Manufacturer: syz
[  272.011386][   T13] usb 2-1: SerialNumber: syz
[  272.033380][   T13] usb 2-1: config 0 descriptor??
[  272.169857][T10326] handle_bad_sector: 4 callbacks suppressed
[  272.169877][T10326] attempt to access beyond end of device
[  272.169877][T10326] loop2: rw=0, want=5780, limit=1024
[  272.214149][T10336] attempt to access beyond end of device
[  272.214149][T10336] loop2: rw=0, want=5780, limit=1024
[  272.265969][T10331] loop0: detected capacity change from 0 to 65536
[  272.302212][   T13] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  272.366295][ T4543] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  272.397279][T10331] XFS (loop0): Mounting V5 Filesystem
[  272.441208][T10331] XFS (loop0): Ending clean mount
[  272.470730][T10331] XFS (loop0): Quotacheck needed: Please wait.
[  272.586430][T10331] XFS (loop0): Quotacheck: Done.
[  272.707845][ T4176] XFS (loop0): Unmounting Filesystem
[  272.777505][T10358] serio: Serial port ptm0
[  272.824479][ T4543] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  272.834353][ T4543] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  272.845167][ T4543] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  272.860097][ T4543] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  272.871525][ T4543] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  272.982538][   T13] usb write operation failed. (-71)
[  272.992815][   T13] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  273.032289][ T4543] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  273.053613][ T4543] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  273.073324][   T13] dvbdev: DVB: registering new adapter (Terratec H7)
[  273.087039][ T4543] usb 4-1: Product: syz
[  273.102396][   T13] usb 2-1: media controller created
[  273.109698][ T4543] usb 4-1: Manufacturer: syz
[  273.132155][   T13] usb read operation failed. (-71)
[  273.154201][   T13] usb write operation failed. (-71)
[  273.187576][ T4543] cdc_wdm 4-1:1.0: skipping garbage
[  273.195437][ T4543] cdc_wdm 4-1:1.0: skipping garbage
[  273.204563][   T13] dvb_usb_az6007: probe of 2-1:0.0 failed with error -5
[  273.226536][ T4543] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  273.241249][   T13] usb 2-1: USB disconnect, device number 15
[  273.249037][ T4543] cdc_wdm 4-1:1.0: Unknown control protocol
[  273.463881][T10369] loop0: detected capacity change from 0 to 512
[  273.552839][ T4543] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  273.572287][T10369] EXT4-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value
[  273.652254][ T4453] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  273.981975][ T4543] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.000517][ T4543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.012982][ T4543] usb 3-1: config 0 descriptor??
[  274.021889][    C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE
[  274.032749][ T4453] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  274.038104][   T13] usb 4-1: USB disconnect, device number 10
[  274.045672][ T4453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.065795][ T4543] cp210x 3-1:0.0: cp210x converter detected
[  274.100849][ T4453] usb 6-1: config 0 descriptor??
[  274.116231][T10389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2110'.
[  274.143131][ T4453] cp210x 6-1:0.0: cp210x converter detected
[  274.174440][T10391] loop0: detected capacity change from 0 to 1024
[  274.244020][T10391] hfsplus: failed to load catalog file
[  274.337200][T10397] loop1: detected capacity change from 0 to 2048
[  274.459950][T10397] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  274.497303][ T4543] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71
[  274.510563][ T4543] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  274.531222][ T4543] usb 3-1: cp210x converter now attached to ttyUSB0
[  274.588126][ T4543] usb 3-1: USB disconnect, device number 9
[  274.594949][ T4453] usb 6-1: cp210x converter now attached to ttyUSB1
[  274.668008][ T4543] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  274.707996][T10410] loop3: detected capacity change from 0 to 512
[  274.715870][ T4543] cp210x 3-1:0.0: device disconnected
[  274.738656][T10410] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  274.820208][ T4216] usb 6-1: USB disconnect, device number 14
[  274.840652][ T4216] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  274.841259][T10410] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  274.896687][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  274.906940][T10413] loop1: detected capacity change from 0 to 2048
[  274.933732][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  274.940352][ T4216] cp210x 6-1:0.0: device disconnected
[  274.978835][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  275.003830][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  275.024539][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.060475][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  275.085716][T10413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  275.170091][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  275.191354][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.217553][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  275.269698][T10423] loop0: detected capacity change from 0 to 2048
[  275.294563][T10410] EXT4-fs error (device loop3): ext4_map_blocks:628: inode #2: block 18: comm syz.3.2120: lblock 23 mapped to illegal pblock 18 (length 1)
[  275.312787][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  275.397900][T10427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'.
[  275.421156][T10410] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz.3.2120: path /437/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  275.493065][T10423] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  275.523425][T10423] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  275.712430][ T4216] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  275.719980][T10442] loop1: detected capacity change from 0 to 512
[  275.807733][T10442] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  275.818698][ T4179] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  275.882050][T10442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002]
[  275.910349][T10442] System zones: 1-12
[  275.916026][T10442] EXT4-fs (loop1): 1 truncate cleaned up
[  275.923099][T10442] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000001,resuid=0x000000000000ee01,debug,lazytime,nombcache,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  276.040957][T10425] loop2: detected capacity change from 0 to 32768
[  276.082851][T10425] XFS: noikeep mount option is deprecated.
[  276.214068][T10425] XFS (loop2): Mounting V5 Filesystem
[  276.239110][T10456] loop1: detected capacity change from 0 to 2048
[  276.319980][T10462] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  276.322144][ T4216] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  276.369951][T10461] loop0: detected capacity change from 0 to 8192
[  276.410654][ T4216] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.419695][   T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  276.428319][ T4216] usb 6-1: Product: syz
[  276.433526][ T4216] usb 6-1: Manufacturer: syz
[  276.438242][ T4216] usb 6-1: SerialNumber: syz
[  276.460737][T10425] XFS (loop2): Ending clean mount
[  276.468302][ T4216] usb 6-1: config 0 descriptor??
[  276.480075][T10461] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  276.487499][T10425] XFS (loop2): Quotacheck needed: Please wait.
[  276.490692][T10461] REISERFS (device loop0): using ordered data mode
[  276.505415][T10461] reiserfs: using flush barriers
[  276.513721][T10461] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  276.547655][T10461] REISERFS (device loop0): checking transaction log (loop0)
[  276.675309][T10425] XFS (loop2): Quotacheck: Done.
[  276.722028][   T13] usb 4-1: Using ep0 maxpacket: 16
[  276.804750][T10465] loop1: detected capacity change from 0 to 4096
[  276.849136][ T4178] XFS (loop2): Unmounting Filesystem
[  276.862173][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.876229][   T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.891405][   T13] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  276.905467][   T13] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  276.914652][T10461] REISERFS (device loop0): Using tea hash to sort names
[  276.915514][T10461] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  276.972957][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.987747][ T4216] usb 6-1: USB disconnect, device number 15
[  277.003610][   T13] usb 4-1: config 0 descriptor??
[  277.081375][T10465] ntfs3: loop1: ino=21, "bus" mmap(write) compressed not supported
[  277.141179][ T4172] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  277.148986][ T4172] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  277.253163][T10467] loop1: detected capacity change from 0 to 256
[  277.342797][T10467] CUSE: info not properly terminated
[  277.567962][   T13] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0
[  277.579061][   T13] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max
[  277.593560][   T13] microsoft 0003:045E:07DA.0011: No inputs registered, leaving
[  277.627835][   T13] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  277.640412][   T13] microsoft 0003:045E:07DA.0011: no inputs found
[  277.665801][   T13] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway
[  277.838824][   T13] usb 4-1: USB disconnect, device number 11
[  278.025031][T10493] loop5: detected capacity change from 0 to 8192
[  278.176901][T10493] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  278.207980][T10493] REISERFS (device loop5): using ordered data mode
[  278.216138][T10484] loop1: detected capacity change from 0 to 32768
[  278.234078][T10493] reiserfs: using flush barriers
[  278.264674][T10493] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  278.288885][T10493] REISERFS (device loop5): checking transaction log (loop5)
[  278.384952][T10484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.2147 (10484)
[  278.437223][T10484] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  278.456043][T10484] BTRFS info (device loop1): using free space tree
[  278.525635][T10484] BTRFS info (device loop1): has skinny extents
[  278.612844][T10493] REISERFS (device loop5): Using tea hash to sort names
[  278.650919][T10493] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  278.781966][ T6942] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  278.920259][T10484] BTRFS info (device loop1): enabling ssd optimizations
[  279.154341][ T6942] usb 1-1: config 0 has no interfaces?
[  279.280760][T10529] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  279.312656][ T6942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  279.324049][T10529] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  279.337920][ T6942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.378705][ T6942] usb 1-1: Product: syz
[  279.391999][ T6942] usb 1-1: Manufacturer: syz
[  279.397250][ T6942] usb 1-1: SerialNumber: syz
[  279.428096][ T6942] usb 1-1: config 0 descriptor??
[  279.477333][T10503] loop3: detected capacity change from 0 to 32768
[  279.578743][T10503] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2154 (10503)
[  279.780145][T10538] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.787412][T10538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.956358][T10540] loop5: detected capacity change from 0 to 164
[  280.079944][T10540] rock: directory entry would overflow storage
[  280.114971][T10540] rock: sig=0x4f50, size=4, remaining=3
[  280.120757][T10540] iso9660: Corrupted directory entry in block 4 of inode 1792
[  280.169222][T10531] loop2: detected capacity change from 0 to 32768
[  280.200058][ T4494] usb 1-1: USB disconnect, device number 15
[  280.202458][T10503] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  280.232542][T10503] BTRFS info (device loop3): use no compression
[  280.246202][T10503] BTRFS info (device loop3): force zlib compression, level 3
[  280.256810][T10503] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  280.365571][T10531] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  280.373428][T10503] BTRFS info (device loop3): use lzo compression, level 0
[  280.381694][T10503] BTRFS info (device loop3): turning on flush-on-commit
[  280.412450][T10503] BTRFS info (device loop3): enabling auto defrag
[  280.418955][T10503] BTRFS info (device loop3): using free space tree
[  280.462103][T10503] BTRFS info (device loop3): has skinny extents
[  280.591658][ T4178] ocfs2: Unmounting device (7,2) on (node local)
[  280.845649][T10503] BTRFS info (device loop3): enabling ssd optimizations
[  281.373425][T10597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2179'.
[  281.388866][T10580] loop2: detected capacity change from 0 to 32768
[  281.501302][T10598] loop0: detected capacity change from 0 to 4096
[  281.603142][T10598] ntfs3: Unknown parameter 'ÿÿÿÿÿ'
[  281.742406][T10580] XFS (loop2): Mounting V5 Filesystem
[  281.956531][T10598] loop0: detected capacity change from 0 to 1024
[  282.093468][T10580] XFS (loop2): Ending clean mount
[  282.205140][ T9788] hfsplus: b-tree write err: -5, ino 4
[  282.272489][ T4178] XFS (loop2): Unmounting Filesystem
[  282.540336][T10636] vivid-000: =================  START STATUS  =================
[  282.566888][T10636] vivid-000: Radio HW Seek Mode: Bounded
[  282.584344][T10636] vivid-000: Radio Programmable HW Seek: false
[  282.591372][T10636] vivid-000: RDS Rx I/O Mode: Block I/O
[  282.636004][T10636] vivid-000: Generate RBDS Instead of RDS: false
[  282.647332][T10636] vivid-000: RDS Reception: true
[  282.652507][T10636] vivid-000: RDS Program Type: 0 inactive
[  282.660914][T10636] vivid-000: RDS PS Name:  inactive
[  282.679800][T10636] vivid-000: RDS Radio Text:  inactive
[  282.690810][T10636] vivid-000: RDS Traffic Announcement: false inactive
[  282.698090][ T4458] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  282.713772][T10640] loop5: detected capacity change from 0 to 8192
[  282.720581][T10636] vivid-000: RDS Traffic Program: false inactive
[  282.727658][T10636] vivid-000: RDS Music: false inactive
[  282.734209][T10636] vivid-000: ==================  END STATUS  ==================
[  282.813757][T10640] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  282.880522][T10640] REISERFS (device loop5): using ordered data mode
[  282.930491][T10640] reiserfs: using flush barriers
[  282.961104][T10640] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  283.052039][ T4458] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  283.068463][T10640] REISERFS (device loop5): checking transaction log (loop5)
[  283.081864][ T4458] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  283.181907][ T4458] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  283.215276][ T4458] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  283.231188][   T26] audit: type=1326 audit(1734426542.743:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10658 comm="syz.0.2202" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b8312fd19 code=0x0
[  283.264052][ T4458] usb 4-1: SerialNumber: syz
[  283.330946][T10640] REISERFS (device loop5): Using tea hash to sort names
[  283.339410][T10640] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  283.369124][T10640] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  283.452510][T10662] loop1: detected capacity change from 0 to 4096
[  283.511585][T10648] loop2: detected capacity change from 0 to 32768
[  283.577016][ T4458] usb 4-1: 0:2 : does not exist
[  283.597990][T10666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.648461][T10662] NILFS error (device loop1): nilfs_dotdot: directory #12 missing '.'
[  283.677935][T10662] Remounting filesystem read-only
[  283.678356][T10648] XFS (loop2): Mounting V5 Filesystem
[  283.720366][ T4458] usb 4-1: USB disconnect, device number 12
[  283.756071][T10648] XFS (loop2): Ending clean mount
[  283.917304][ T4178] XFS (loop2): Unmounting Filesystem
[  283.975100][ T4839] udevd[4839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.191136][T10685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  284.191981][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2210'.
[  284.453187][T10697] loop1: detected capacity change from 0 to 1024
[  284.537474][T10699] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.670272][ T1236] hfsplus: b-tree write err: -5, ino 8
[  284.851952][ T4539] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  285.148073][ T4539] usb 6-1: Using ep0 maxpacket: 8
[  285.181624][T10696] loop0: detected capacity change from 0 to 32768
[  285.282165][ T4539] usb 6-1: config 0 has no interfaces?
[  285.309124][T10720] loop1: detected capacity change from 0 to 4096
[  285.331048][T10696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2217 (10696)
[  285.406590][T10720] NILFS (loop1): invalid segment: Checksum error in segment payload
[  285.415613][T10696] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  285.431984][T10720] NILFS (loop1): trying rollback from an earlier position
[  285.451246][T10696] BTRFS info (device loop0): using free space tree
[  285.470145][T10696] BTRFS info (device loop0): has skinny extents
[  285.486651][ T4539] usb 6-1: New USB device found, idVendor=0003, idProduct=fae2, bcdDevice=70.8b
[  285.513730][ T4539] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.513974][T10720] NILFS (loop1): recovery complete
[  285.533436][T10707] loop3: detected capacity change from 0 to 32768
[  285.540612][ T4539] usb 6-1: Product: syz
[  285.546029][T10727] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  285.564234][ T4539] usb 6-1: Manufacturer: syz
[  285.568921][ T4539] usb 6-1: SerialNumber: syz
[  285.585689][ T4539] usb 6-1: config 0 descriptor??
[  285.633347][T10707] ERROR: (device loop3): diAllocBit: iag inconsistent
[  285.633347][T10707] 
[  285.664907][T10707] ialloc: diAlloc returned -5!
[  285.743866][T10696] BTRFS info (device loop0): enabling ssd optimizations
[  285.851689][ T4539] usb 6-1: USB disconnect, device number 16
[  286.296647][    C0] vkms_vblank_simulate: vblank timer overrun
[  286.599061][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2238'.
[  286.614478][T10757] loop2: detected capacity change from 0 to 512
[  286.730621][T10757] EXT4-fs (loop2): Test dummy encryption mode enabled
[  286.764565][T10757] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  286.821070][T10757] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002]
[  286.855921][T10757] System zones: 1-12
[  286.886728][T10757] EXT4-fs (loop2): 1 truncate cleaned up
[  286.903789][T10757] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,test_dummy_encryption,debug,nobarrier,quota,,errors=continue. Quota mode: writeback.
[  287.188009][T10757] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  287.329195][T10762] loop0: detected capacity change from 0 to 32768
[  287.455320][T10762] (syz.0.2235,10762,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  287.509678][T10762] (syz.0.2235,10762,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  287.533253][T10789] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2242'.
[  287.610258][T10762] JBD2: Ignoring recovery information on journal
[  287.657505][T10755] loop1: detected capacity change from 0 to 40427
[  287.666642][T10792] loop3: detected capacity change from 0 to 128
[  287.798905][T10762] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  287.800588][T10755] F2FS-fs (loop1): Found nat_bits in checkpoint
[  287.903963][T10799] device bond1 entered promiscuous mode
[  287.909848][T10799] 8021q: adding VLAN 0 to HW filter on device bond1
[  287.919603][   T26] audit: type=1800 audit(1734426547.423:67): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2244" name="bus" dev="loop3" ino=1048713 res=0 errno=0
[  287.976345][T10755] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  287.994031][T10755] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  288.015789][T10799] bond1 (unregistering): Released all slaves
[  288.050602][ T4172] attempt to access beyond end of device
[  288.050602][ T4172] loop1: rw=2049, want=45104, limit=40427
[  288.060283][   T26] audit: type=1804 audit(1734426547.533:68): pid=10755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2233" name="/newroot/492/file2/bus" dev="loop1" ino=10 res=1 errno=0
[  288.128204][ T4176] ocfs2: Unmounting device (7,0) on (node local)
[  288.546795][T10796] loop5: detected capacity change from 0 to 32768
[  288.568360][   T26] audit: type=1326 audit(1734426548.073:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10812 comm="syz.3.2253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4ba24cd19 code=0x0
[  288.596514][T10815] netlink: 468 bytes leftover after parsing attributes in process `syz.2.2254'.
[  288.617654][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2254'.
[  288.739006][T10796] JBD2: Ignoring recovery information on journal
[  288.788145][T10822] sctp: [Deprecated]: syz.0.2256 (pid 10822) Use of int in max_burst socket option deprecated.
[  288.788145][T10822] Use struct sctp_assoc_value instead
[  288.846716][T10796] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  288.904486][   T26] audit: type=1800 audit(1734426548.413:70): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2245" name="file0" dev="loop5" ino=16946 res=0 errno=0
[  289.027211][ T5895] ocfs2: Unmounting device (7,5) on (node local)
[  289.053169][T10831] loop1: detected capacity change from 0 to 64
[  289.149079][T10831] hfs: unable to parse mount options
[  289.650457][T10843] loop3: detected capacity change from 0 to 1024
[  289.659552][T10845] syz.1.2265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  289.718397][T10843] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  289.770273][T10843] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsddf,nombcache,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nomblk_io_submit,noblock_validity,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  289.980465][T10832] loop0: detected capacity change from 0 to 32768
[  290.127487][T10832] JBD2: Ignoring recovery information on journal
[  290.152210][T10826] loop2: detected capacity change from 0 to 40427
[  290.223301][T10832] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  290.356852][T10826] F2FS-fs (loop2): Found nat_bits in checkpoint
[  290.469161][T10869] binder: 10868:10869 ioctl 400c620e 20000040 returned -22
[  290.473108][ T4176] ocfs2: Unmounting device (7,0) on (node local)
[  290.511886][T10826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  290.720841][ T4178] attempt to access beyond end of device
[  290.720841][ T4178] loop2: rw=2049, want=45104, limit=40427
[  290.866108][T10855] loop5: detected capacity change from 0 to 40427
[  290.927763][T10855] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  290.959787][T10855] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  291.005350][T10855] F2FS-fs (loop5): invalid crc value
[  291.040813][T10855] F2FS-fs (loop5): Found nat_bits in checkpoint
[  291.238810][T10855] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  291.258099][T10855] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  291.370485][T10894] loop0: detected capacity change from 0 to 512
[  291.447917][T10894] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  291.524069][T10894] EXT4-fs (loop0): 1 truncate cleaned up
[  291.570866][T10894] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,data_err=abort,init_itable,norecovery,noinit_itable,max_dir_size_kb=0x0000000000000003,,errors=continue. Quota mode: none.
[  291.885109][T10880] loop1: detected capacity change from 0 to 32768
[  291.952866][T10880] XFS: noikeep mount option is deprecated.
[  292.022132][T10900] loop2: detected capacity change from 0 to 32768
[  292.073482][T10883] loop3: detected capacity change from 0 to 40427
[  292.134746][T10883] F2FS-fs (loop3): invalid crc value
[  292.145579][T10880] XFS (loop1): Mounting V5 Filesystem
[  292.169492][T10883] F2FS-fs (loop3): Found nat_bits in checkpoint
[  292.350653][T10880] XFS (loop1): Ending clean mount
[  292.360456][T10883] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  292.373066][T10880] XFS (loop1): Quotacheck needed: Please wait.
[  292.391881][T10883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  292.471837][T10880] XFS (loop1): Quotacheck: Done.
[  292.644738][ T5978] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  292.673950][ T4179] attempt to access beyond end of device
[  292.673950][ T4179] loop3: rw=2049, want=45104, limit=40427
[  292.726731][ T4172] XFS (loop1): Unmounting Filesystem
[  292.882723][ T4541] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  293.082145][ T5978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.105356][ T5978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.248003][ T5978] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  293.278880][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  293.288203][ T4541] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  293.307999][ T4541] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  293.321040][ T5978] usb 1-1: SerialNumber: syz
[  293.334116][ T4541] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  293.354549][ T4541] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  293.369611][ T4541] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  293.505908][T10923] loop2: detected capacity change from 0 to 32768
[  293.522804][ T4541] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  293.536344][ T4541] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  293.547665][ T4541] usb 6-1: Product: syz
[  293.556357][ T4541] usb 6-1: Manufacturer: syz
[  293.578094][T10923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.2287 (10923)
[  293.608670][ T4541] cdc_wdm 6-1:1.0: skipping garbage
[  293.620777][ T4541] cdc_wdm 6-1:1.0: skipping garbage
[  293.635161][ T5978] usb 1-1: 0:2 : does not exist
[  293.659517][ T5978] usb 1-1: USB disconnect, device number 16
[  293.674467][ T4541] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[  293.674795][T10923] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  293.680407][ T4541] cdc_wdm 6-1:1.0: Unknown control protocol
[  293.752370][ T4539] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  293.767456][T10923] BTRFS info (device loop2): using free space tree
[  293.791801][T10923] BTRFS info (device loop2): has skinny extents
[  293.852846][ T4214] usb 6-1: USB disconnect, device number 17
[  293.928054][ T4839] udevd[4839]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.052825][T10923] BTRFS info (device loop2): enabling ssd optimizations
[  294.054771][T10933] loop1: detected capacity change from 0 to 40427
[  294.107719][T10933] F2FS-fs (loop1): Found nat_bits in checkpoint
[  294.212978][ T4539] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8
[  294.231788][ T4539] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[  294.252395][ T4539] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x32, skipping
[  294.318100][T10933] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  294.382071][ T4539] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  294.392742][ T4539] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  294.400781][ T4539] usb 4-1: SerialNumber: syz
[  294.423667][ T4539] usb 4-1: config 0 descriptor??
[  294.463325][T10935] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  294.470780][T10935] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  294.483472][ T4539] port100 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  294.619029][ T4172] attempt to access beyond end of device
[  294.619029][ T4172] loop1: rw=2049, want=45104, limit=40427
[  294.647701][ T5880] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5880)
[  294.730224][ T4539] usb 4-1: USB disconnect, device number 13
[  294.802427][T10962] input: syz1 as /devices/virtual/input/input25
[  294.990435][T10967] loop0: detected capacity change from 0 to 4096
[  295.245202][T10967] ntfs3: loop0: failed to convert "0080" to cp857
[  295.255012][T10967] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  295.283798][T10967] ntfs3: loop0: failed to convert name for inode 1e.
[  295.472645][T10978] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2299'.
[  295.492666][T10978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2299'.
[  295.755199][T10980] loop5: detected capacity change from 0 to 8192
[  295.755238][T10984] loop1: detected capacity change from 0 to 2048
[  295.820384][T10969] loop2: detected capacity change from 0 to 32768
[  295.908873][T10984] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  295.986247][T10969] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2302 (10969)
[  296.307829][T10969] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  296.342555][T10969] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  296.362456][T10969] BTRFS info (device loop2): trying to use backup root at mount time
[  296.370617][T10969] BTRFS info (device loop2): max_inline at 0
[  296.442444][T10969] BTRFS info (device loop2): using free space tree
[  296.492395][T10969] BTRFS info (device loop2): has skinny extents
[  296.521084][T11015] vxcan1: tx address claim with dlc 1
[  296.608579][T10969] BTRFS info (device loop2): enabling ssd optimizations
[  296.742476][T11037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2322'.
[  296.870601][   T26] audit: type=1800 audit(1734426556.373:71): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2302" name="bus" dev="loop2" ino=263 res=0 errno=0
[  296.984116][T11007] loop5: detected capacity change from 0 to 32768
[  297.171378][T11007] JBD2: Ignoring recovery information on journal
[  297.371283][T11007] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  297.626196][ T5895] ocfs2: Unmounting device (7,5) on (node local)
[  298.177697][T11064] netlink: 'syz.2.2332': attribute type 21 has an invalid length.
[  298.191951][T11064] netlink: 'syz.2.2332': attribute type 1 has an invalid length.
[  298.204444][T11064] netlink: 14374 bytes leftover after parsing attributes in process `syz.2.2332'.
[  298.316750][T11049] loop1: detected capacity change from 0 to 32768
[  298.427206][T11049] (syz.1.2327,11049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  298.470241][T11049] (syz.1.2327,11049,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  298.544601][T11049] JBD2: Ignoring recovery information on journal
[  298.570414][T11070] loop5: detected capacity change from 0 to 8192
[  298.627508][T11068] loop2: detected capacity change from 0 to 8192
[  298.712499][T11049] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  298.833214][T11070] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  298.862575][T11070] FAT-fs (loop5): Filesystem has been set read-only
[  298.871525][T11070] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  298.872683][T11068] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  298.881409][T11070] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 2074)
[  298.952504][T11068] REISERFS (device loop2): using ordered data mode
[  298.959056][T11068] reiserfs: using flush barriers
[  298.966027][T11068] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  298.983563][T11068] REISERFS (device loop2): checking transaction log (loop2)
[  298.987358][T11078] overlayfs: failed to resolve './file0': -2
[  299.025417][T11068] REISERFS (device loop2): Using r5 hash to sort names
[  299.033660][T11068] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  299.065891][ T4172] ocfs2: Unmounting device (7,1) on (node local)
[  299.113464][T11085] device batadv_slave_1 entered promiscuous mode
[  299.155806][T11084] device batadv_slave_1 left promiscuous mode
[  299.303645][T11093] loop3: detected capacity change from 0 to 17
[  299.610768][T11102] loop5: detected capacity change from 0 to 512
[  299.711934][T11102] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  299.743880][T11102] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  299.816479][T11102] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  299.901867][T11102] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  299.909973][T11102] System zones: 0-2, 18-18, 34-34
[  299.993060][T11102] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  300.046689][T11105] loop1: detected capacity change from 0 to 32768
[  300.086062][T11102] EXT4-fs (loop5): 1 truncate cleaned up
[  300.104614][T11102] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=,sb=0x000000000000074e,,errors=continue. Quota mode: none.
[  300.137609][T11105] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 scanned by syz.1.2360 (11105)
[  300.180770][T11105] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  300.221424][T11105] BTRFS info (device loop1): using free space tree
[  300.242438][T11105] BTRFS info (device loop1): has skinny extents
[  300.542348][T11105] BTRFS info (device loop1): enabling ssd optimizations
[  300.990152][T11139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2355'.
[  301.016488][T11108] loop3: detected capacity change from 0 to 40427
[  301.023778][T11139] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2355'.
[  301.185494][T11108] F2FS-fs (loop3): Found nat_bits in checkpoint
[  301.245703][T11145] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2357'.
[  301.328877][T11108] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  301.356189][T11108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  301.565591][   T26] audit: type=1804 audit(1734426561.073:72): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2350" name="/newroot/479/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  301.588138][T11149] loop5: detected capacity change from 0 to 2048
[  301.593236][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'.
[  301.695761][ T4179] attempt to access beyond end of device
[  301.695761][ T4179] loop3: rw=2049, want=45104, limit=40427
[  302.038901][T11159] IPv6: NLM_F_CREATE should be specified when creating new route
[  302.073526][T11159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'.
[  302.345171][T11172] misc userio: Can't change port type on an already running userio instance
[  302.710517][T11196] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2378'.
[  302.811345][T11201] mkiss: ax0: crc mode is auto.
[  303.146301][T11222] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2390'.
[  303.174970][T11226] loop3: detected capacity change from 0 to 512
[  303.355094][T11226] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback.
[  303.369284][T11226] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  303.418874][T11231] loop2: detected capacity change from 0 to 4096
[  303.493630][T11231] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  303.541981][ T4542] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  303.888312][T11235] loop3: detected capacity change from 0 to 8192
[  303.981951][ T4542] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  303.982708][T11235] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  303.990364][ T4542] usb 1-1: config 0 has no interface number 0
[  304.006240][T11235] REISERFS (device loop3): using journaled data mode
[  304.013136][T11235] reiserfs: using flush barriers
[  304.028649][T11235] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  304.046501][T11235] REISERFS (device loop3): checking transaction log (loop3)
[  304.062351][T11235] REISERFS (device loop3): Using r5 hash to sort names
[  304.075563][T11235] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  304.089739][ T4542] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  304.089778][ T4542] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  304.089820][ T4542] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  304.089855][ T4542] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.107413][ T4542] usb 1-1: config 0 descriptor??
[  304.113786][T11235] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  304.222973][T11228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  304.244885][ T4542] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  304.319926][T11245] loop5: detected capacity change from 0 to 4096
[  304.473322][T11245] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  304.596942][ T4542] usb 1-1: USB disconnect, device number 17
[  304.880838][T11262] tipc: Started in network mode
[  304.933123][T11262] tipc: Node identity ac141441, cluster identity 4711
[  304.996204][T11262] tipc: Enabled bearer <udp:syz2>, priority 10
[  305.063786][T11275] QAT: Invalid ioctl 1075883590
[  305.075012][T11275] QAT: Invalid ioctl 1075883590
[  305.088543][T11275] QAT: Invalid ioctl 1075883590
[  305.107983][T11275] QAT: Invalid ioctl 1075883590
[  305.126770][T11275] QAT: Invalid ioctl 1075883590
[  305.155999][T11279] QAT: Invalid ioctl 16704
[  305.165247][T11275] QAT: Invalid ioctl 1075883590
[  305.185229][T11275] QAT: Invalid ioctl 1075883590
[  305.191652][T11275] QAT: Invalid ioctl 1075883590
[  305.211461][T11275] QAT: Invalid ioctl 1075883590
[  305.296100][T11283] tun0: tun_chr_ioctl cmd 1074812118
[  305.606717][T11295] loop2: detected capacity change from 0 to 2048
[  305.676361][T11297] loop1: detected capacity change from 0 to 4096
[  305.709493][T11303] loop5: detected capacity change from 0 to 2048
[  305.740230][T11297] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  305.878205][T11312] loop3: detected capacity change from 0 to 1024
[  305.906547][T11303] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  305.933267][T11295] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,minixdf,nolazytime,stripe=0x0000000000000020,,errors=continue. Quota mode: none.
[  306.021876][T11295] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  306.022723][T11312] EXT4-fs (loop3): Ignoring removed orlov option
[  306.109940][T11295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2422: bg 0: block 345: padding at end of block bitmap is not set
[  306.118977][T11312] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  306.144753][T11320] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  306.188397][ T5978] tipc: Node number set to 2886997057
[  306.300809][T11295] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117
[  306.313262][T11312] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  306.409014][T11328] netlink: 'syz.1.2433': attribute type 11 has an invalid length.
[  306.456321][T11330] IPv6: addrconf: prefix option has invalid lifetime
[  306.511854][T11295] EXT4-fs (loop2): This should not happen!! Data will be lost
[  306.511854][T11295] 
[  307.538756][T11340] loop3: detected capacity change from 0 to 32768
[  307.621122][T11340] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.2436 (11340)
[  307.703110][T11340] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  307.743444][T11340] BTRFS info (device loop3): using free space tree
[  307.776422][T11340] BTRFS info (device loop3): has skinny extents
[  307.788824][T11338] loop5: detected capacity change from 0 to 40427
[  307.981192][T11338] F2FS-fs (loop5): Found nat_bits in checkpoint
[  308.136114][T11338] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  308.151838][T11340] BTRFS info (device loop3): enabling ssd optimizations
[  308.322731][ T5895] attempt to access beyond end of device
[  308.322731][ T5895] loop5: rw=2049, want=45104, limit=40427
[  308.506928][ T4446] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  308.766629][ T4497] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  308.845246][ T4446] usb 1-1: Using ep0 maxpacket: 8
[  308.938514][T11423] loop3: detected capacity change from 0 to 256
[  308.965743][ T4446] usb 1-1: config 0 has no interfaces?
[  309.124608][ T4446] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  309.142860][ T4497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  309.169432][ T4446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.199752][ T4497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  309.218755][T11427] loop3: detected capacity change from 0 to 512
[  309.228463][ T4446] usb 1-1: Product: syz
[  309.236124][ T4446] usb 1-1: Manufacturer: syz
[  309.241034][ T4446] usb 1-1: SerialNumber: syz
[  309.249661][ T4497] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  309.275499][ T4497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.285757][ T4446] usb 1-1: config 0 descriptor??
[  309.292853][T11427] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  309.330002][T11427] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  309.339302][ T4497] usb 2-1: config 0 descriptor??
[  309.392017][T11427] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended
[  309.437465][T11427] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002]
[  309.459132][T11427] System zones: 0-2, 18-18, 34-34
[  309.506550][T11427] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  309.525751][ T4446] usb 1-1: USB disconnect, device number 18
[  309.599951][T11427] EXT4-fs (loop3): 1 truncate cleaned up
[  309.619296][T11427] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,sb=0x000000000000074e,,errors=continue. Quota mode: none.
[  309.683429][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2473'.
[  309.856789][ T4497] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0
[  309.885710][T11436] team0 (unregistering): Port device team_slave_0 removed
[  309.916432][T11436] team0 (unregistering): Port device team_slave_1 removed
[  310.027288][T11440] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2485'.
[  310.145354][ T4497] usb 2-1: USB disconnect, device number 16
[  310.511799][ T4458] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  310.528704][T11448] loop5: detected capacity change from 0 to 32768
[  310.585432][T11442] loop3: detected capacity change from 0 to 40427
[  310.692454][T11442] F2FS-fs (loop3): Found nat_bits in checkpoint
[  310.772377][ T4458] usb 3-1: Using ep0 maxpacket: 16
[  310.864074][T11442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  310.875299][T11457] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.893193][ T4458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  311.060547][ T4179] attempt to access beyond end of device
[  311.060547][ T4179] loop3: rw=2049, want=45104, limit=40427
[  311.080564][ T4458] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  311.102736][ T4458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.110863][ T4458] usb 3-1: Product: syz
[  311.123921][T11462] loop5: detected capacity change from 0 to 4096
[  311.131187][ T4458] usb 3-1: Manufacturer: syz
[  311.150597][ T4458] usb 3-1: SerialNumber: syz
[  311.171220][ T4458] usb 3-1: config 0 descriptor??
[  311.187278][T11462] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512)
[  311.224971][ T4458] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  311.260661][ T4458] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  311.507538][T11470] loop1: detected capacity change from 0 to 4096
[  311.626230][T11470] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  311.660435][T11470] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  311.704867][T11470] ntfs3: loop1: Failed to load $Extend.
[  311.786391][ T4172] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  311.857105][ T4458] em28xx 3-1:0.0: chip ID is em2884
[  311.950449][T11492] ubi0: attaching mtd0
[  311.979818][T11492] ubi0: scanning is finished
[  312.001482][T11492] ubi0: empty MTD device detected
[  312.044638][T11497] netlink: 'syz.3.2501': attribute type 14 has an invalid length.
[  312.138533][ T5978] kernel read not supported for file /dsp (pid: 5978 comm: kworker/0:22)
[  312.182761][ T4458] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  312.201186][ T4458] em28xx 3-1:0.0: board has no eeprom
[  312.252687][T11492] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  312.267758][T11508] tap0: tun_chr_ioctl cmd 37730
[  312.281195][T11492] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  312.304809][T11492] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  312.319328][T11492] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  312.351933][ T4458] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  312.374397][ T4458] em28xx 3-1:0.0: dvb set to bulk mode.
[  312.381891][T11492] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  312.389270][T11492] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  312.400403][ T4454] em28xx 3-1:0.0: Binding DVB extension
[  312.420309][T11492] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3490381144
[  312.436401][ T4458] usb 3-1: USB disconnect, device number 10
[  312.453090][T11513] loop3: detected capacity change from 0 to 1024
[  312.472824][ T4458] em28xx 3-1:0.0: Disconnecting em28xx
[  312.487779][T11492] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  312.506708][ T4454] em28xx 3-1:0.0: Registering input extension
[  312.534684][T11495] ubi0: detaching mtd0
[  312.540215][T11513] EXT4-fs (loop3): Ignoring removed orlov option
[  312.580123][T11513] EXT4-fs (loop3): Ignoring removed oldalloc option
[  312.601484][T11513] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  312.630705][T11495] ubi0: mtd0 is detached
[  312.642936][T11513] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869)
[  312.653451][T11513] EXT4-fs (loop3): invalid journal inode
[  312.666148][T11513] EXT4-fs (loop3): can't get journal size
[  312.673053][ T4454] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  312.682399][ T4454] Registered IR keymap rc-empty
[  312.709335][T11513] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000008001,norecovery,orlov,oldalloc,,errors=continue. Quota mode: writeback.
[  312.726630][ T4454] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  312.789837][ T4454] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input27
[  312.911046][ T4454] em28xx 3-1:0.0: Input extension successfully initialized
[  312.920028][T11527] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  312.957697][ T4458] em28xx 3-1:0.0: Closing input extension
[  313.302942][T11538] device sit0 entered promiscuous mode
[  313.342606][ T4458] em28xx 3-1:0.0: Freeing device
[  313.360163][T11538] netlink: 'syz.1.2518': attribute type 1 has an invalid length.
[  313.398741][T11538] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2518'.
[  313.854609][T11557] netlink: 'syz.5.2525': attribute type 11 has an invalid length.
[  314.017510][T11532] loop2: detected capacity change from 0 to 32768
[  314.032849][T11563] loop5: detected capacity change from 0 to 256
[  314.281870][T11532] XFS (loop2): Mounting V5 Filesystem
[  314.435593][T11587] loop3: detected capacity change from 0 to 64
[  314.451089][T11589] netlink: 'syz.0.2539': attribute type 4 has an invalid length.
[  314.556832][   T26] audit: type=1800 audit(1734426574.063:73): pid=11587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2538" name="file1" dev="loop3" ino=18 res=0 errno=0
[  314.560644][T11532] XFS (loop2): Ending clean mount
[  314.645156][T11532] XFS (loop2): Quotacheck needed: Please wait.
[  314.896844][T11532] XFS (loop2): Quotacheck: Done.
[  314.990615][ T4178] XFS (loop2): Unmounting Filesystem
[  315.265686][T11614] loop3: detected capacity change from 0 to 1024
[  315.368549][T11616] loop1: detected capacity change from 0 to 256
[  315.399087][T11614] EXT4-fs (loop3): Test dummy encryption mode enabled
[  315.428908][T11614] EXT4-fs (loop3): Ignoring removed orlov option
[  315.496682][T11614] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000200,debug_want_extra_isize=0x00000000000000c2,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,bsdgroups,,errors=continue. Quota mode: writeback.
[  316.025577][T11646] loop2: detected capacity change from 0 to 256
[  316.159498][T11646] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  316.445540][T11655] loop5: detected capacity change from 0 to 4096
[  316.528086][T11655] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  316.625541][T11655] ntfs3: loop5: Failed to load $Extend.
[  317.167138][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.173510][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  317.255800][T11650] loop3: detected capacity change from 0 to 40427
[  317.281397][T11684] loop5: detected capacity change from 0 to 4096
[  317.357751][T11684] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512)
[  317.446950][T11650] F2FS-fs (loop3): Found nat_bits in checkpoint
[  317.454012][T11662] loop2: detected capacity change from 0 to 40427
[  317.541606][T11662] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  317.576583][T11662] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  317.592447][T11650] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  317.609423][T11650] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  317.649822][T11662] F2FS-fs (loop2): invalid crc value
[  317.709582][T11662] F2FS-fs (loop2): Found nat_bits in checkpoint
[  317.750108][ T4179] attempt to access beyond end of device
[  317.750108][ T4179] loop3: rw=2049, want=45104, limit=40427
[  317.876462][T11662] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  317.910960][T11662] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  318.684429][T11740] syzkaller0: tun_chr_ioctl cmd 1074812117
[  318.700542][T11714] loop1: detected capacity change from 0 to 32768
[  318.790408][T11743] netlink: 'syz.0.2593': attribute type 4 has an invalid length.
[  319.305400][T11732] loop5: detected capacity change from 0 to 32768
[  319.386836][T11732] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.2589 (11732)
[  319.418822][T11769] loop2: detected capacity change from 0 to 64
[  319.455428][T11773] program syz.1.2606 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  319.469463][T11732] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  319.510975][T11732] BTRFS info (device loop5): using free space tree
[  319.528339][T11769] hfs: filesystem was not cleanly unmounted, running fsck.hfs is recommended.  leaving read-only.
[  319.538445][T11732] BTRFS info (device loop5): has skinny extents
[  319.800481][T11783] loop1: detected capacity change from 0 to 4096
[  319.939972][T11783] NILFS (loop1): invalid segment: Checksum error in segment payload
[  319.972331][T11783] NILFS (loop1): trying rollback from an earlier position
[  320.000456][T11783] NILFS (loop1): recovery complete
[  320.006810][T11797] loop2: detected capacity change from 0 to 2048
[  320.053625][T11804] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  320.065788][T11732] BTRFS info (device loop5): enabling ssd optimizations
[  320.128106][T11806] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  320.160867][T11780] loop3: detected capacity change from 0 to 32768
[  320.411831][T11780] XFS (loop3): Mounting V5 Filesystem
[  320.517530][T11780] XFS (loop3): Ending clean mount
[  320.610697][T11780] XFS (loop3): Quotacheck needed: Please wait.
[  320.992649][T11780] XFS (loop3): Quotacheck: Done.
[  321.296420][ T4179] XFS (loop3): Unmounting Filesystem
[  321.493766][T11824] loop2: detected capacity change from 0 to 40427
[  321.567648][T11841] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002
[  321.580226][T11824] F2FS-fs (loop2): invalid crc value
[  321.611286][T11824] F2FS-fs (loop2): Found nat_bits in checkpoint
[  321.820836][T11824] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  321.995181][ T4178] attempt to access beyond end of device
[  321.995181][ T4178] loop2: rw=2049, want=45104, limit=40427
[  322.690414][T11862] loop1: detected capacity change from 0 to 32768
[  322.691476][T11856] loop5: detected capacity change from 0 to 40427
[  322.737516][T11862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2636 (11862)
[  322.783824][T11862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  322.789429][T11856] F2FS-fs (loop5): Invalid log blocks per segment (4278190089)
[  322.803827][T11862] BTRFS info (device loop1): using free space tree
[  322.810387][T11862] BTRFS info (device loop1): has skinny extents
[  322.819815][T11856] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  322.874087][T11856] F2FS-fs (loop5): invalid crc value
[  323.001647][T11856] F2FS-fs (loop5): Found nat_bits in checkpoint
[  323.179927][T11856] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  323.198689][T11856] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  323.204430][T11889] loop2: detected capacity change from 0 to 8192
[  323.270846][T11899] loop3: detected capacity change from 0 to 512
[  323.279274][T11862] BTRFS info (device loop1): enabling ssd optimizations
[  323.306299][T11889] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  323.328868][T11899] EXT4-fs (loop3): Ignoring removed nobh option
[  323.345918][T11889] REISERFS (device loop2): using ordered data mode
[  323.353838][T11889] reiserfs: using flush barriers
[  323.375853][T11889] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  323.393874][T11889] REISERFS (device loop2): checking transaction log (loop2)
[  323.401550][T11899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  323.419550][T11889] REISERFS (device loop2): Using r5 hash to sort names
[  323.558675][T11889] REISERFS (device loop2): using 3.5.x disk format
[  323.606378][T11889] REISERFS warning (device loop2): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are!
[  323.640484][T11899] EXT4-fs (loop3): 1 truncate cleaned up
[  323.647200][T11899] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  323.674420][T11889] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  324.062617][T11918] netlink: 'syz.3.2647': attribute type 21 has an invalid length.
[  324.070749][T11918] netlink: 'syz.3.2647': attribute type 1 has an invalid length.
[  324.232545][ T4547] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  324.350442][T11923] loop3: detected capacity change from 0 to 2048
[  324.400864][T11927] loop1: detected capacity change from 0 to 512
[  324.473007][T11923] UDF-fs: bad mount option "xœìÝAl×}àÿrÅ¥ÜVLœ(N›´HeÅreI1«pW5Í6€" or missing value
[  324.500163][T11927] EXT4-fs (loop1): Ignoring removed orlov option
[  324.527291][T11927] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  324.609474][T11936] loop2: detected capacity change from 0 to 1024
[  324.639799][T11927] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2652: casefold flag without casefold feature
[  324.681115][T11941] loop3: detected capacity change from 0 to 256
[  324.681472][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  324.704566][T11936] EXT4-fs (loop2): Ignoring removed orlov option
[  324.708242][T11927] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2652: couldn't read orphan inode 15 (err -117)
[  324.723294][T11936] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[  324.724471][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  324.738237][T11927] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,quota,dioread_nolock,quota,grpjquota=,inode_readahead_blks=0x0000000000020000,. Quota mode: writeback.
[  324.794884][T11936] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  324.842677][T11927] EXT4-fs error (device loop1): ext4_empty_dir:3136: inode #2: comm syz.1.2652: invalid size
[  324.861593][T11927] EXT4-fs (loop1): Remounting filesystem read-only
[  324.872737][ T4547] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  324.896271][ T4547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.940888][ T4547] usb 1-1: Product: syz
[  324.966857][T11951] loop5: detected capacity change from 0 to 256
[  324.969322][ T4547] usb 1-1: Manufacturer: syz
[  324.990895][T11953] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  325.009080][ T4547] usb 1-1: SerialNumber: syz
[  325.047115][ T4547] usb 1-1: config 0 descriptor??
[  325.332536][ T4446] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  325.562724][ T4547] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  325.582438][ T4547] usb 1-1: USB disconnect, device number 19
[  325.698014][ T4446] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  325.707801][T11959] loop2: detected capacity change from 0 to 32768
[  325.709746][ T4446] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.732372][ T4446] usb 2-1: config 0 descriptor??
[  325.784192][ T4446] cp210x 2-1:0.0: cp210x converter detected
[  325.856431][T11959] XFS (loop2): Mounting V5 Filesystem
[  325.878507][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2667'.
[  325.970611][T11959] XFS (loop2): Ending clean mount
[  325.988925][T11959] XFS (loop2): Quotacheck needed: Please wait.
[  326.175776][T11959] XFS (loop2): Quotacheck: Done.
[  326.223642][ T4446] usb 2-1: cp210x converter now attached to ttyUSB0
[  326.424213][ T4541] usb 2-1: USB disconnect, device number 17
[  326.442919][ T4541] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  326.451143][ T4541] cp210x 2-1:0.0: device disconnected
[  326.570886][ T4178] XFS (loop2): Unmounting Filesystem
[  326.812052][T12007] loop5: detected capacity change from 0 to 4096
[  326.881134][T12007] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[  326.991801][T12007] ntfs3: loop5: Inode r=19 is not in use!
[  326.998018][T12007] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  327.026686][T11997] loop3: detected capacity change from 0 to 32768
[  327.088194][   T26] audit: type=1800 audit(1734426586.593:74): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2682" name="bus" dev="loop5" ino=33 res=0 errno=0
[  327.108490][    C1] vkms_vblank_simulate: vblank timer overrun
[  327.129814][T11997] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.2676 (11997)
[  327.157833][T12011] loop1: detected capacity change from 0 to 2048
[  327.207926][T11997] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  327.235871][T11997] BTRFS info (device loop3): use zlib compression, level 3
[  327.251312][T11997] BTRFS info (device loop3): using free space tree
[  327.283832][T12011] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  327.287980][T11997] BTRFS info (device loop3): has skinny extents
[  327.574632][T12030] trusted_key: encrypted_key: keyword 'updat' not recognized
[  327.808677][T11997] BTRFS info (device loop3): enabling ssd optimizations
[  327.950908][T11997] BTRFS info (device loop3): scrub: started on devid 1
[  328.051426][T11997] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0
[  328.080632][T12050] loop2: detected capacity change from 0 to 1024
[  329.020749][T12058] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2697'.
[  329.022090][T12047] loop5: detected capacity change from 0 to 32768
[  329.113894][T12045] loop1: detected capacity change from 0 to 32768
[  329.379739][T12052] loop2: detected capacity change from 0 to 32768
[  329.392053][T12047] XFS (loop5): Mounting V5 Filesystem
[  329.401264][T12045] XFS (loop1): Mounting V5 Filesystem
[  329.544078][T12052] XFS (loop2): Mounting V5 Filesystem
[  329.564890][T12045] XFS (loop1): Ending clean mount
[  329.605207][T12045] XFS (loop1): Quotacheck needed: Please wait.
[  329.629125][T12047] XFS (loop5): Ending clean mount
[  329.667160][T12047] XFS (loop5): Quotacheck needed: Please wait.
[  329.784508][T12052] XFS (loop2): Ending clean mount
[  329.811100][T12052] XFS (loop2): Quotacheck needed: Please wait.
[  329.904523][T12047] XFS (loop5): Quotacheck: Done.
[  330.022431][T12045] XFS (loop1): Quotacheck: Done.
[  330.079604][T12052] XFS (loop2): Quotacheck: Done.
[  330.108296][ T4172] XFS (loop1): Unmounting Filesystem
[  330.149108][T12052] XFS (loop2): User initiated shutdown received.
[  330.162781][T12052] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  330.179047][T12052] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  330.250371][ T4178] XFS (loop2): Unmounting Filesystem
[  330.432633][ T5895] XFS (loop5): Unmounting Filesystem
[  330.508140][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.730614][T12098] loop3: detected capacity change from 0 to 40427
[  330.926233][T12098] F2FS-fs (loop3): Found nat_bits in checkpoint
[  331.169167][T12098] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  331.419287][ T4179] attempt to access beyond end of device
[  331.419287][ T4179] loop3: rw=2049, want=45104, limit=40427
[  331.493947][T12127] loop5: detected capacity change from 0 to 1024
[  331.638686][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2718'.
[  332.450019][T12169] loop5: detected capacity change from 0 to 1024
[  332.550563][T12169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  332.742596][ T5895] UDF-fs: error (device loop5): udf_read_inode: (ino 838) failed !bh
[  332.763042][ T5895] UDF-fs: error (device loop5): udf_read_inode: (ino 838) failed !bh
[  333.046791][T12160] loop2: detected capacity change from 0 to 32768
[  333.074327][T12158] loop1: detected capacity change from 0 to 32768
[  333.170555][   T26] audit: type=1800 audit(1734426592.673:75): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2728" name="file1" dev="loop1" ino=4 res=0 errno=0
[  333.238655][T12160] XFS (loop2): Mounting V5 Filesystem
[  333.388289][T12160] XFS (loop2): Ending clean mount
[  333.407180][T12160] XFS (loop2): Quotacheck needed: Please wait.
[  333.679931][T12160] XFS (loop2): Quotacheck: Done.
[  333.797117][ T4178] XFS (loop2): Unmounting Filesystem
[  333.830352][ T1236] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  333.912096][T12204] loop3: detected capacity change from 0 to 512
[  333.973068][T12204] EXT4-fs (loop3): inline encryption not supported
[  333.979779][T12204] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5
[  333.979779][T12204] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  333.979779][T12204] 
[  334.127064][ T1236] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.219225][ T1236] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.266277][T12204] EXT4-fs (loop3): 1 orphan inode deleted
[  334.282183][T12204] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inlinecrypt,nouser_xattr,,errors=continue. Quota mode: writeback.
[  334.302807][T12204] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.409375][ T1236] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.480679][T12202] loop1: detected capacity change from 0 to 32768
[  334.568329][T12202] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.2745 (12202)
[  334.666725][T12202] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  334.727355][T12211] lo speed is unknown, defaulting to 1000
[  334.759817][T12202] BTRFS info (device loop1): use zlib compression, level 3
[  334.810700][T12202] BTRFS info (device loop1): using free space tree
[  334.893586][T12202] BTRFS info (device loop1): has skinny extents
[  335.371531][T12202] BTRFS info (device loop1): enabling ssd optimizations
[  335.443021][T12211] chnl_net:caif_netlink_parms(): no params data found
[  335.478324][T12202] BTRFS info (device loop1): scrub: started on devid 1
[  335.553711][T12202] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  335.641377][T12261] loop2: detected capacity change from 0 to 512
[  335.769597][T12261] EXT4-fs (loop2): orphan cleanup on readonly fs
[  335.810559][T12261] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2756: bg 0: block 248: padding at end of block bitmap is not set
[  335.883842][T12261] Quota error (device loop2): write_blk: dquota write failed
[  335.891447][T12261] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  336.064852][T12261] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.2756: Failed to acquire dquot type 1
[  336.178886][T12261] EXT4-fs (loop2): 1 truncate cleaned up
[  336.296906][T12272] loop3: detected capacity change from 0 to 32768
[  336.381039][T12272] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.2758 (12272)
[  336.559749][ T4216] Bluetooth: hci3: command 0x0409 tx timeout
[  336.565591][T12272] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  336.578396][T12261] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  336.603789][T12272] BTRFS info (device loop3): force zlib compression, level 3
[  336.640545][T12261] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  336.646865][T12211] bridge0: port 1(bridge_slave_0) entered blocking state
[  336.653621][T12272] BTRFS info (device loop3): force clearing of disk cache
[  336.681417][T12211] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.691431][T12272] BTRFS info (device loop3): setting nodatasum
[  336.699230][T12211] device bridge_slave_0 entered promiscuous mode
[  336.720101][T12272] BTRFS info (device loop3): allowing degraded mounts
[  336.751002][T12211] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.764362][T12211] bridge0: port 2(bridge_slave_1) entered disabled state
[  336.765286][T12272] BTRFS info (device loop3): enabling disk space caching
[  336.783705][T12211] device bridge_slave_1 entered promiscuous mode
[  336.789311][T12261] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback.
[  336.823459][T12272] BTRFS info (device loop3): disk space caching is enabled
[  336.840101][T12272] BTRFS info (device loop3): has skinny extents
[  336.843472][T12277] Quota error (device loop2): find_block_dqentry: Quota for id 131072 referenced but not present
[  336.906304][T12272] BTRFS info (device loop3): clearing free space tree
[  336.913481][T12272] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  336.928677][T12272] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  336.953770][T12277] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131072
[  336.971553][T12277] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.2756: Failed to acquire dquot type 1
[  337.053681][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  337.118292][T12272] BTRFS info (device loop3): balance: start -d -m
[  337.171518][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  337.184845][T12272] BTRFS info (device loop3): balance: canceled
[  337.496306][T12211] team0: Port device team_slave_0 added
[  337.573844][T12211] team0: Port device team_slave_1 added
[  337.603748][T12316] loop1: detected capacity change from 0 to 1024
[  337.880069][T12316] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  338.053249][T12316] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz.1.2766: directory missing '..'
[  338.143623][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0
[  338.169737][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.210180][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  338.352485][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1
[  338.359618][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  338.443174][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  338.453392][T12338] loop1: detected capacity change from 0 to 2048
[  338.608288][ T4456] Bluetooth: hci3: command 0x041b tx timeout
[  338.650308][T12338] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  338.676524][ T1236] device hsr_slave_0 left promiscuous mode
[  338.725369][ T1236] device hsr_slave_1 left promiscuous mode
[  338.732251][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  338.751491][T12338] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  338.768563][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_0
[  338.840432][ T1236] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  338.849020][   T13] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  338.875192][ T1236] batman_adv: batadv0: Removing interface: batadv_slave_1
[  338.923308][ T1236] device bridge_slave_1 left promiscuous mode
[  338.929580][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.938706][T12330] loop2: detected capacity change from 0 to 40427
[  338.962148][ T1236] device bridge_slave_0 left promiscuous mode
[  338.984524][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.025694][T12330] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  339.048284][T12330] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  339.069614][ T1236] device veth1_macvtap left promiscuous mode
[  339.090032][ T1236] device veth0_macvtap left promiscuous mode
[  339.125822][T12330] F2FS-fs (loop2): Found nat_bits in checkpoint
[  339.143619][   T13] usb 4-1: Using ep0 maxpacket: 32
[  339.177872][T12361] loop1: detected capacity change from 0 to 65
[  339.259499][T12330] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  339.273869][T12361] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  339.273901][   T13] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  339.295349][   T13] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  339.313071][T12330] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  339.492875][   T13] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  339.521777][   T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.530543][   T13] usb 4-1: Product: syz
[  339.536219][   T13] usb 4-1: Manufacturer: syz
[  339.540949][   T13] usb 4-1: SerialNumber: syz
[  339.840757][   T13] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  339.970150][ T1236] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  340.026133][ T1236] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  340.061819][ T4458] usb 4-1: USB disconnect, device number 14
[  340.072652][ T4458] usblp0: removed
[  340.358392][ T1236] bond0 (unregistering): Released all slaves
[  340.528191][ T4212] lo speed is unknown, defaulting to 1000
[  340.558725][T12211] device hsr_slave_0 entered promiscuous mode
[  340.657277][T12211] device hsr_slave_1 entered promiscuous mode
[  340.666301][T12211] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.720338][T12211] Cannot create hsr debugfs directory
[  340.743578][ T4456] Bluetooth: hci3: command 0x040f tx timeout
[  340.870647][T12409] loop2: detected capacity change from 0 to 512
[  341.008833][T12409] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2802: Invalid inode bitmap blk 4 in block_group 0
[  341.044675][T12409] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,data_err=abort,noload,nobarrier,lazytime,,errors=continue. Quota mode: none.
[  341.091227][T12409] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz.2.2802: Invalid inode bitmap blk 4 in block_group 0
[  341.198848][T12409] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  341.507735][T12434] loop2: detected capacity change from 0 to 64
[  341.571233][T12211] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  341.646890][T12211] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  341.765750][T12211] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  341.869174][T12211] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  342.062957][ T4216] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  342.251432][T12211] 8021q: adding VLAN 0 to HW filter on device bond0
[  342.308159][ T4216] usb 1-1: Using ep0 maxpacket: 16
[  342.322423][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  342.343273][ T9788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  342.387650][T12211] 8021q: adding VLAN 0 to HW filter on device team0
[  342.433029][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  342.443859][ T4216] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  342.465048][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  342.504815][ T4528] bridge0: port 1(bridge_slave_0) entered blocking state
[  342.511985][ T4528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  342.576021][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  342.614838][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  342.647506][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  342.662888][ T4216] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  342.682522][ T4216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.690561][ T4216] usb 1-1: Product: syz
[  342.699772][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state
[  342.706981][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state
[  342.752655][ T4216] usb 1-1: Manufacturer: syz
[  342.757305][ T4216] usb 1-1: SerialNumber: syz
[  342.764353][ T4495] Bluetooth: hci3: command 0x0419 tx timeout
[  342.818626][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  342.834614][ T4216] usb 1-1: config 0 descriptor??
[  342.868521][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  342.906466][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  342.914030][ T4216] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  342.938260][ T4216] usb 1-1: Detected FT232RL
[  342.967874][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  342.999878][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  343.036364][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  343.122755][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  343.132827][ T4216] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  343.158577][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  343.197372][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  343.267035][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  343.337172][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  343.354068][T12469] loop1: detected capacity change from 0 to 32768
[  343.403412][T12211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  343.418844][T12469] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz.1.2821 (12469)
[  343.432463][ T4216] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  343.484401][    C0] 
[  343.486872][    C0] ============================================
[  343.493267][    C0] WARNING: possible recursive locking detected
[  343.499515][    C0] 5.15.174-syzkaller #0 Not tainted
[  343.504725][    C0] --------------------------------------------
[  343.510994][    C0] kworker/0:11/4248 is trying to acquire lock:
[  343.517173][    C0] ffff8880778ba218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x2158/0x32b0
[  343.529280][    C0] 
[  343.529280][    C0] but task is already holding lock:
[  343.536660][    C0] ffff88807c8c3258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x1178/0x32b0
[  343.548702][    C0] 
[  343.548702][    C0] other info that might help us debug this:
[  343.556906][    C0]  Possible unsafe locking scenario:
[  343.556906][    C0] 
[  343.564363][    C0]        CPU0
[  343.567732][    C0]        ----
[  343.571003][    C0]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock);
[  343.578030][    C0]   lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock);
[  343.584979][    C0] 
[  343.584979][    C0]  *** DEADLOCK ***
[  343.584979][    C0] 
[  343.593132][    C0]  May be due to missing lock nesting notation
[  343.593132][    C0] 
[  343.601459][    C0] 15 locks held by kworker/0:11/4248:
[  343.606829][    C0]  #0: ffff888062fe3d38 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  343.617718][    C0]  #1: ffffc900030cfd20 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((typeof(*((worker))) *)((worker))); (typeof((typeof(*((worker))) *)((worker)))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  343.653033][    C0]  #2: ffffc90000007ca0 ((&d->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbe/0x560
[  343.662125][    C0]  #3: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  343.671439][    C0]  #4: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.681283][    C0]  #5: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.690868][    C0]  #6: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  343.700194][    C0]  #7: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.709785][    C0]  #8: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.719357][    C0]  #9: ffff88807c8c3258 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{2:2}, at: __dev_queue_xmit+0x1178/0x32b0
[  343.731911][    C0]  #10: ffff8880646ab360 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xcb5/0x21e0
[  343.741400][    C0]  #11: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30
[  343.750792][    C0]  #12: ffffffff8cb1fd20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.760195][    C0]  #13: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.769851][    C0]  #14: ffffffff8cb1fd80 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30
[  343.779596][    C0] 
[  343.779596][    C0] stack backtrace:
[  343.785480][    C0] CPU: 0 PID: 4248 Comm: kworker/0:11 Not tainted 5.15.174-syzkaller #0
[  343.793885][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024
[  343.803937][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  343.811152][    C0] Call Trace:
[  343.814455][    C0]  <IRQ>
[  343.817301][    C0]  dump_stack_lvl+0x1e3/0x2d0
[  343.821980][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  343.827617][    C0]  ? panic+0x860/0x860
[  343.831803][    C0]  validate_chain+0x46d2/0x5930
[  343.836655][    C0]  ? stack_trace_save+0x1c0/0x1c0
[  343.841682][    C0]  ? reacquire_held_locks+0x660/0x660
[  343.847204][    C0]  ? queued_spin_lock_slowpath+0x42/0x50
[  343.852928][    C0]  ? lockdep_lock+0x1a7/0x2a0
[  343.857627][    C0]  ? lockdep_unlock+0x166/0x300
[  343.862471][    C0]  ? lockdep_lock+0x2a0/0x2a0
[  343.867146][    C0]  ? mark_lock+0x98/0x340
[  343.871590][    C0]  __lock_acquire+0x1295/0x1ff0
[  343.876442][    C0]  lock_acquire+0x1db/0x4f0
[  343.880945][    C0]  ? __dev_queue_xmit+0x2158/0x32b0
[  343.886141][    C0]  ? reacquire_held_locks+0x660/0x660
[  343.891512][    C0]  ? read_lock_is_recursive+0x10/0x10
[  343.896882][    C0]  ? nf_nat_ipv4_unregister_fn+0x60/0x60
[  343.902518][    C0]  ? rcu_lockdep_current_cpu_online+0x35/0x130
[  343.908668][    C0]  ? rcu_read_lock_bh_held+0x7a/0x110
[  343.914081][    C0]  ? rcu_read_lock_held+0x40/0x40
[  343.919107][    C0]  _raw_spin_lock+0x2a/0x40
[  343.923607][    C0]  ? __dev_queue_xmit+0x2158/0x32b0
[  343.928804][    C0]  __dev_queue_xmit+0x2158/0x32b0
[  343.933835][    C0]  ? dev_queue_xmit+0x20/0x20
[  343.938513][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  343.944528][    C0]  ? print_irqtrace_events+0x210/0x210
[  343.950248][    C0]  ? __ipv6_neigh_lookup_noref+0x59b/0x730
[  343.956081][    C0]  ? ip6_finish_output2+0xcbf/0x15a0
[  343.961450][    C0]  ip6_finish_output2+0xead/0x15a0
[  343.967211][    C0]  ? __ip6_finish_output+0x7d0/0x7d0
[  343.972602][    C0]  ? __ip6_finish_output+0x645/0x7d0
[  343.977914][    C0]  ip6_send_skb+0x1aa/0x390
[  343.982416][    C0]  icmp6_send+0x1732/0x21e0
[  343.986936][    C0]  ? icmpv6_push_pending_frames+0x450/0x450
[  343.992826][    C0]  ? __local_bh_enable_ip+0x164/0x1f0
[  343.998326][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  344.003523][    C0]  ? __local_bh_enable_ip+0x164/0x1f0
[  344.008911][    C0]  ? rt6_uncached_list_del+0x210/0x210
[  344.014455][    C0]  ip6_link_failure+0x37/0x4a0
[  344.019216][    C0]  ip_tunnel_xmit+0x187b/0x25c0
[  344.024214][    C0]  ? skb_network_protocol+0x578/0x770
[  344.029587][    C0]  ? validate_xmit_xfrm+0xb4/0x1000
[  344.034931][    C0]  ? skb_crc32c_csum_help+0x530/0x530
[  344.040415][    C0]  ? tnl_update_pmtu+0x10b0/0x10b0
[  344.045540][    C0]  ? validate_chain+0x112/0x5930
[  344.050583][    C0]  ? xfrm_init_replay+0x12f/0x190
[  344.055618][    C0]  ? gre_build_header+0x25b/0x8a0
[  344.060644][    C0]  gre_tap_xmit+0x4f8/0x6e0
[  344.065147][    C0]  dev_hard_start_xmit+0x298/0x7a0
[  344.070266][    C0]  sch_direct_xmit+0x2b2/0x5e0
[  344.075034][    C0]  ? mrp_pdu_append_vecattr_event+0x1630/0x1630
[  344.081274][    C0]  __dev_queue_xmit+0x1861/0x32b0
[  344.086307][    C0]  ? dev_queue_xmit+0x20/0x20
[  344.090982][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  344.096964][    C0]  ? print_irqtrace_events+0x210/0x210
[  344.102417][    C0]  ? __ipv6_neigh_lookup_noref+0x59b/0x730
[  344.108221][    C0]  ? ip6_finish_output2+0xcbf/0x15a0
[  344.113505][    C0]  ip6_finish_output2+0xead/0x15a0
[  344.118619][    C0]  ? __ip6_finish_output+0x7d0/0x7d0
[  344.123900][    C0]  ? __ip6_finish_output+0x645/0x7d0
[  344.129188][    C0]  udp_tunnel6_xmit_skb+0x538/0x970
[  344.134392][    C0]  geneve_xmit+0x25ff/0x3480
[  344.138989][    C0]  ? mark_lock+0x98/0x340
[  344.143321][    C0]  ? skb_network_protocol+0x578/0x770
[  344.148694][    C0]  ? geneve_stop+0x1d0/0x1d0
[  344.153284][    C0]  ? validate_xmit_xfrm+0xb4/0x1000
[  344.158480][    C0]  ? skb_crc32c_csum_help+0x530/0x530
[  344.163856][    C0]  ? rcu_lock_release+0x20/0x20
[  344.168706][    C0]  ? validate_xmit_skb+0x7f6/0xe90
[  344.173852][    C0]  dev_hard_start_xmit+0x298/0x7a0
[  344.178968][    C0]  __dev_queue_xmit+0x1c8e/0x32b0
[  344.183998][    C0]  ? dev_queue_xmit+0x20/0x20
[  344.188947][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  344.195080][    C0]  ? print_irqtrace_events+0x210/0x210
[  344.200542][    C0]  ? ip_finish_output2+0xadb/0x11a0
[  344.205743][    C0]  ip_finish_output2+0xcd7/0x11a0
[  344.210763][    C0]  ? ip_mc_finish_output+0x480/0x480
[  344.216045][    C0]  ? ip_fragment+0x210/0x210
[  344.220632][    C0]  ? __ip_finish_output+0x3dd/0x4a0
[  344.225826][    C0]  iptunnel_xmit+0x513/0x950
[  344.230417][    C0]  udp_tunnel_xmit_skb+0x1d0/0x2d0
[  344.235527][    C0]  tipc_udp_xmit+0x576/0x9d0
[  344.240140][    C0]  ? rcu_lock_release+0x20/0x20
[  344.244993][    C0]  ? tipc_crypto_xmit+0x1df/0x24d0
[  344.250109][    C0]  ? tipc_udp_send_msg+0x28e/0x3c0
[  344.255242][    C0]  tipc_bearer_xmit_skb+0x2ca/0x420
[  344.260657][    C0]  ? tipc_bearer_min_mtu+0x190/0x190
[  344.265973][    C0]  tipc_disc_timeout+0x5ea/0x760
[  344.270925][    C0]  ? tipc_disc_create+0x9a0/0x9a0
[  344.275951][    C0]  call_timer_fn+0x16d/0x560
[  344.280544][    C0]  ? tipc_disc_create+0x9a0/0x9a0
[  344.285560][    C0]  ? __run_timers+0x890/0x890
[  344.290235][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  344.295429][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  344.300622][    C0]  ? tipc_disc_create+0x9a0/0x9a0
[  344.305724][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  344.310919][    C0]  ? tipc_disc_create+0x9a0/0x9a0
[  344.315941][    C0]  __run_timers+0x67c/0x890
[  344.320492][    C0]  ? detach_timer+0x2f0/0x2f0
[  344.325190][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  344.331188][    C0]  run_timer_softirq+0x63/0xf0
[  344.336077][    C0]  handle_softirqs+0x3a7/0x930
[  344.340840][    C0]  ? do_softirq+0x162/0x240
[  344.345341][    C0]  ? do_softirq+0x240/0x240
[  344.349843][    C0]  do_softirq+0x162/0x240
[  344.354164][    C0]  </IRQ>
[  344.357088][    C0]  <TASK>
[  344.360019][    C0]  ? __local_bh_enable_ip+0x1f0/0x1f0
[  344.365383][    C0]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  344.371358][    C0]  ? __local_bh_enable_ip+0x102/0x1f0
[  344.376732][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  344.382038][    C0]  __local_bh_enable_ip+0x1b1/0x1f0
[  344.387232][    C0]  ? local_bh_enable+0x5/0x20
[  344.391936][    C0]  ? _local_bh_enable+0xa0/0xa0
[  344.396789][    C0]  ? wg_packet_send_staged_packets+0xeb5/0x1840
[  344.403134][    C0]  wg_packet_send_staged_packets+0x1170/0x1840
[  344.409328][    C0]  ? detach_timer+0x15a/0x2f0
[  344.414015][    C0]  ? wg_packet_send_keepalive+0x290/0x290
[  344.419735][    C0]  ? pvclock_gtod_unregister_notifier+0x50/0x50
[  344.426060][    C0]  ? wg_packet_send_keepalive+0x44/0x290
[  344.431692][    C0]  wg_packet_handshake_receive_worker+0x686/0xe00
[  344.438110][    C0]  ? local_bh_enable+0x20/0x20
[  344.442875][    C0]  ? read_lock_is_recursive+0x10/0x10
[  344.448251][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  344.454235][    C0]  ? print_irqtrace_events+0x210/0x210
[  344.459686][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  344.465573][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  344.470767][    C0]  process_one_work+0x8a1/0x10c0
[  344.475705][    C0]  ? worker_detach_from_pool+0x260/0x260
[  344.481345][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  344.486890][    C0]  ? kthread_data+0x4e/0xc0
[  344.491402][    C0]  ? wq_worker_running+0x97/0x170
[  344.496423][    C0]  worker_thread+0xaca/0x1280
[  344.501096][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  344.507010][    C0]  kthread+0x3f6/0x4f0
[  344.511078][    C0]  ? rcu_lock_release+0x20/0x20
[  344.516070][    C0]  ? kthread_blkcg+0xd0/0xd0
[  344.520670][    C0]  ret_from_fork+0x1f/0x30
[  344.525174][    C0]  </TASK>
[  344.554307][ T4214] usb 1-1: USB disconnect, device number 20
[  344.562366][ T4214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  344.572068][ T4214] ftdi_sio 1-1:0.0: device disconnected
[  344.736359][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  344.744499][T12469] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  344.754946][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  344.778577][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.794488][T12469] BTRFS info (device loop1): force zlib compression, level 3
[  344.845522][T12469] BTRFS info (device loop1): force clearing of disk cache
[  344.889758][T12469] BTRFS info (device loop1): setting nodatasum
[  344.926270][T12469] BTRFS info (device loop1): allowing degraded mounts
[  344.965624][T12469] BTRFS info (device loop1): enabling disk space caching
[  344.989268][T12469] BTRFS info (device loop1): disk space caching is enabled
[  345.006306][T12469] BTRFS info (device loop1): has skinny extents
[  345.044457][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  345.054868][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  345.093324][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  345.104290][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  345.116789][T12211] device veth0_vlan entered promiscuous mode
[  345.127555][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  345.136625][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  345.154713][T12211] device veth1_vlan entered promiscuous mode
[  345.198105][T12469] BTRFS info (device loop1): clearing free space tree
[  345.206340][T12469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  345.216938][T12469] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  345.224730][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  345.285130][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  345.298809][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  345.317930][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  345.333430][T12469] BTRFS info (device loop1): balance: start -d -m
[  345.343283][T12211] device veth0_macvtap entered promiscuous mode
[  345.353098][T12469] BTRFS info (device loop1): relocating block group 6881280 flags data|metadata
[  345.378087][T12211] device veth1_macvtap entered promiscuous mode
[  345.386445][T12469] BTRFS info (device loop1): balance: canceled
[  345.454548][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.486022][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.505572][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.518978][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.529396][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.541076][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.551668][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  345.566823][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.579907][T12211] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.589373][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  345.603423][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  345.611598][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  345.621000][ T4528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  345.639221][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.651448][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.662897][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  345.674135][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  345.686210][T12211] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.707042][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  345.723528][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.735243][T12211] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.762212][T12211] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.770959][T12211] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.784115][T12211] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.828412][T12211] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
[  345.870615][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.871634][T12211] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  345.884302][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.914235][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  345.938099][ T1236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.946534][ T1236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.967229][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready