last executing test programs:

9.00537206s ago: executing program 4 (id=1485):
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)

8.524224105s ago: executing program 4 (id=1491):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101}, 0x14}}, 0x0)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40002060)

8.299257697s ago: executing program 4 (id=1495):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)

8.067516171s ago: executing program 4 (id=1499):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f00000002c0)={[{@keep_last_dots}, {@umask={'umask', 0x3d, 0x9}}, {@dmask={'dmask', 0x3d, 0x3}}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x40}}, {@errors_remount}, {@sys_tz}, {@errors_remount}, {@umask={'umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}]}, 0x4, 0x1510, &(0x7f00000037c0)="$eJzs3Am4TlX7MPD7Xmvt45D0dJLhsNa6N08yLCdJMiTJkCRJkmRKSDrJKwmJQ6akQxKS4ZAMh5AMJ0465nkekyTpJEmmTMn6rlN83t7qe//v/+17/a//uX/Xta9n3c/a99prP/czrL0N33UZWrNxrWoNiQj+LfjrQxIAxALAQAC4DgACACgXVy4uqz+nxKR/7yDsr/VI6tWeAbuauP7ZG9c/e+P6Z29c/+yN65+9cf2zN65/9sb1Zyw72zy94PW8Zd+N7/9nZ/z7/79IZumxX60tfWPXfyGF65+9cf3/1wr+Kztx/bM3rn/2xvXP3rj+2UGOP+3h+mdvXH/GsrOrff+Zt6u7Xe33H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yx7OGsv0IBwOX21Z4XY4wxxhhjjDHG/jo+x9WeAWOMMcYYY4wxxv7/QxAgQUEAMZADYiEn5AIBANdCHrgOInA9xMENkBduhHyQHwpAQYiHQlAYNBiwQBBCESgKUbgJisHNUBxKQEkoBQ5KQwLcAmXgVigLt0E5uB3Kwx1QASpCJagMd0IVuAuqwt1QDe6B6lADakItuBdqw31QB+6HuvAA1IMHoT48BA3gYWgIj0AjeBQaw2PQBB6HptAMmkMLaPnfyn8JesDL0BN6QRL0hj7wCvSFftAfBsBAeBUGwWswGF6HZBgCQ+ENGAZvwnB4C0bASBgFb8NoeAfGwFgYB+MhBSbARHgXJsF7MBmmwFSYBqkwHWbA+zATZsFs+ADmwIcwF+bBfFgAafARLIRFkA4fw2L4BDJgCSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVtsB12wE7YBbvhU9gDn8Fe+Bz2wRf/Yv6Zf8jvioCAAgUqVBiDMRiLsZgLc2FuzI15MA9GMIJxGId5MS/mw3xYAAtgPMZjYSyMBg0SEhbBIhjFKBbDYlgci2NJLIkOHSZgApbBW7EslsVyWA7LY3msgBWxIlbGylgFq2BVrIrVsBpWx+pYE2vivXgv9sY6WAfrYl2sh/Uu357ChtgQG2EjbIyNsQk2wabYFJtjc2yJLbEVtsLW2BrbYltsh+2wPbbHREzEDtgBO2JH7ISdsDN2xi7YBbtiN+yGL+UAfBlfxl5YXfTGPtgH+2Jyjv44AAfgqzgIX8PX8HVMxiE4FN/AN/BNHI6ncQSOxFE4CquId3AMjkUS4zEFU3AiTsRJOAkn4xScgtMwFafjDJyBM3EWzsIPcA5+iB/iPJyHCzAN03AhLsJ0TMfFeAYzcAkuxWW4HFfgclyFq3EVrsV1uBY34AbchJtwC27BbbgNd+AO3IUKAD/Fz/AzTMZ9uA/34348gAfwIB7ETMzEQ3gID+NhPIJH8CgexWN4HE/gcTyFp/A0nsGzeBbP43m8gC/Ef9NoV4k1ySCyKKFEjIgRsSJW5BK5RG6RW+QReURERESciBN5RV6RT+QTBUQBES/iRWFRWBhhBIkwBgBEVERFMVFMFBfFRUlRUjjhRIJIEGVEGVFWlBXlxO2ivLhDVBAVRRtXWVQWVURbV1XcLaqJaqK6qCFqilqilqgtaos6oo6oK+qKeqKeqC8eEg1Eb+yPj4isyjQWQ7CJGIpNRTMhL32DtRLDsbVoI9qKp8RIHIHtRSuXKJ4VHcQY7Cj+Jsbi86KzGI9dxIuiq+gmuouXRA/R2vUUvcRk7C36iGnYV/QT/cUAMRNriA9wTs6a4nWRLIaIoeINsQDfFMPFW2KEGClGibfFaPGOGCPGinFivEgRE8RE8a6YJN4Tk8UUMVVME6liupgh3hczxSwxW3wg5ogPxVwxT8wXC0Sa+EgsFItEuvhYLBafiAyxRCwVy8RysUKsFKvEarFGrBXrxHqxQWwUm8RmsUVsFdvEdrFD7BS7xG7xqdgjPhN7xedin/hC7BdfigPiK3FQfC0yxTfikPhWHBbfiSPie3FU/CCOiePihDgpTokfxWlxRpwV58R58ZO4IH4WF4UXIFEKKaWSgYyROWSszClzyWtkbhlcenWvl3HyBplX3ijzyfyygCwo42UhWVhqaaSVJENZRBaVUXmTLCZvlsVlCVlSlpJOlpYJ8hZZRt4qy8rbZDl5uywv75AVZEVZSVaWd8oq8i4JkV+PUV3WkDVlLXmvrC3vk3Xk/bKufEDWkw/K+vIh2UA+LBvKR2Qj+ahsLB+TTeTjsqlsJpvLFrKlfEK2kk/K1rKNbCufku3k07K9fEYmymdlB+kvvUWel53lC7KLfFF2ld1kd/mzvCi97Cl7SYDeso98RfaV/WR/OUAOlK/KQfI1OVi+LpPlEDlUviGHyTflcPmWHCFHylHybTlaviPHyLFynBwvU+QEOVG+KyfJ9+RkOUVOldNkqpwu+18aabaU/zT/3T/IH/zL0TfJzXKL3Cq3ye1yh9wpd8ndcrfcI/fIvXKv3Cf3yf1yvzwgD8iD8qDMlJnykDwkD8vD8og8Io/Ko/KYPC7PyZPylPxRnpZn5Bl5Tp6X5+WFS68BKFRCSaVUoGJUDhWrcqpc6hqVW12r8qjrVERdr+LUDSqvulHlU/lVAVVQxatCqrDSyiirSIWqiCqqouomvPSGUSVVKeVUaZWgbvlX8lUxdbMqrkr8Jv/y/JL+ZH4tVUvVSrVSrVVr1Va1Ve1UO9VetVeJKlF1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VZJKUn3UK6qv6qf6qwFqoHpVDVKD1GA1WCWrZDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVolLURDVRTVKT1GQ1WU1VU1WqSlUz1Aw1U81Us9VsNUfNUXPVXDVfzVdpKk0tVAtVukpXi9VilaGWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qQ21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVabKVIfUIXVYHVZH1BF1VB1Vx9QxdUKdUKfUKXVanVZn1Vl1Xp1XF9QFdVFdzFr2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJA3uDHIF+QPCgQFg/igUFA40IEJbCAuFT0a3BQUC24OigclgpJBqcAFpYOE4JagTHBrUDa4LSgX3B6UD+4IKgQVg0pB5eDOoEpwV1A1uDuoFtwTVA9qBDWDWsG9Qe3gvqBOcH9QN3ggqBc8GNQPHgoaBA8HDYNHgkbBo0Hj4LGgSfB40DRoFjQPWgQt/9LxvT+d/0nXU/fSSbq37qNf0X11P91fD9AD9at6kH5ND9av62Q9RA/Vb+hh+k09XL+lR+iRepR+W4/W7+gxeqwep8frFD1BT9Tv6kn6PT1ZT9FT9TSdqqfrGfp9PVPP0rP1B3qO/lDP1fP0fL1Ap+mP9EK9SKfrj/Vi/YnO0Ev0Ur1ML9cr9Eq9Sq/Wa/RavU6v1xv0Rr1Jb9Zb9Fa9TW/XO/ROvUvv1p/qPfozvVd/rvfpL/R+/aU+oL/SB/XXOlN/ow/pb/Vh/Z0+or/XR/UP+pg+rk/ok/qU/lGf1mf0WX1On9c/6Qv6Z31R+6zFfdbPu1FGmRgTY2JNrMllcpncJrfJY/KYiImYOBNn8pq8Jp/JZwqYAibexJvCprDJQoZMEVPERE3UFDPFTHFT3JQ0JY0zziSYBFPGlDFlTVlTzpQz5U15U8FUMJVMJXOnudPcZe4yd5u7zT3mHlPD1DC1TC1T29Q2dUwdU9fUNfVMPVPf1DcNTAPT0DQ0jUwj09g0Nk1ME9PUNDXNTXPT0rQ0rUwr09q0Nm1NW9POtDPtTXuTaBJNB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySZJNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNsks1QM9QMM8PMcDPcjDAjzaishap5x4wxY804M96kmBQz0Uw0k8wkM9lMNlPNVJNqUs0MM8PMNDPNbDPbzDFzzFwz18w3802aSTMLzUKTbtLNYrPYZJgMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTSZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5pQ5ZU6b0+asOWvOm/yXfi+9ibU5bS57jc1tr7V57HX2H+MCtqCNt4VsYattPpv/N7Gx1ha3JWxJW8o6W9om2Ft+F1ewFW0lW9neaavYu2zV38W17X22jr3f1rUP2Fr23t/E9eyDtr59zDZABLDNbCPbwja2j9km9nHb1DazzW0L284+bdvbZ2yifdZ2sM/9Ll5oF9nVdo1da9fZPfYze9aes4ftd/a8/cn2tL3sQPuqHWRfs4Pt6zbZDvldPMq+bUfbd+wYO9aOs+N/F0+102yqnW5n2PftTDvrd3Ga/cjOsel2rp1n59sFv8RZc0q3H9vF9hObYZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+6ndarfZ7XaH3Wl3/RJnncde+7ndZ7+wh+y39oD9yh60R2ym/eaXOOv8jtjv7VH7gz1mj9sT9qQ9ZX+0p+2ZX84/69xP2p/tRestEBKQJEUBxVAOiqWclIuuodx0LeWh6yhC11Mc3UB56UbKR/mpABWkeCpEhUmTIUtEIRWhohSlm+jyOr0klSJHpSmBbqEydCuVpduoHN1O5ekOqkAVqRJVpjupCt1FVeluqkb3UHWqQTWpFt1Ltek+qkP3U116gOrRg1SfHqIG9DA1pEeoET1KjekxakKPU1NqRs2pBbWkJ6gVPUmtqQ21paeoHT1N7ekZSqRnqQM9Rx3pb9SJnqfO9AJ1oRepK3Wj7vQS9aCXqSf1oiTqTX3oFepL/ag/DaCB9CoNotdoML1OyTSEhtIbNIzepOH0Fo2gkTSK3qbR9A6NobE0jsZTCk2gifQuTaL3aDJNoak0jVJpOs2g92kmzaLZ9AHNoQ9pLs2j+bSA0ugjWkiLKJ0+psX0CWXQElpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20i3bTp7SHPqO99Dntoy9oP31JB+grOkhfUyZ9Q4foWzpM39ER+t73oh/oGB2nE3SSTtGPdJrO0Fk6R+fpJ7pAP9NF8gQhhiKUoQqDMCbMEcaGOcNc4TVh7vDaME94XRgJrw/jwhvCvOGNYb4wf1ggLBjGh4XCwqEOTWhDCsOwSFg0jIY3hcXCm8PiYYmwZFgqdGHpMCG8JSwT3hqWDW8Ly4W3h+XDO8IKYcXwsQcqh3eGVcK7wqrh3WG18J6welgjrBnWCu8Na4f3hXXC+8O64QNh2fDBsH74UNggfDhsGD4SNgofDRuHj4VNwsfDpmGzsHnYImwZPhG2Cp8MW4dtwrbhU2G78OmwffhMmBg+G3YIn/ul/8FFf96fFPYO+4SvhK+E3t8v50cXRNOiH0UXRhdF06MfRxdHP4lmRJdEl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3Rb2vlQMcOuGkUy5wMS6Hi3U5XS53jcvtrnV53HUu4q53ce4Gl9fd6PK5/K6AK+jiXSFX2GlnnHXkQlfEFXVRd5Mr5m52xV0JV9KVcs6VdgmuhWvpWrpW7knX2rVxbd1T7in3tHvaPeOecc+6Du4519H9zXVyz7vO7gX3gnvRdXXdXHf3kuvhJuT59TOZ5Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7JJdshvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLcSluopvoJrlJbrKb7Ka6qS7VpboZboab6Wa6KrN+PcpcN9fNd/NdmktzC13WmjHdLXaLXYbLcEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8db8O6va5/W6/O+AOuIPua5fpvnGH3LfusPvOHXHfu6PuB3fMHXcn3El3yv3oTrsz7qw75867n9wF97O76LxLiUyITIy8G5kUeS8yOTIlMjUyLZIamR6ZEXk/MjMyKzI78kFkTuTDyNzIvMj8yIJIWuSjyMLIokh65OPI4sgnkYzIksjSyLLI8siKiPeFtoa+iC/qo/4mX8zf7Iv7Er6kL+WdL+0T/C2+jL/Vl/W3+XL+dl/e3+Er+Iq+kn/cN/XNfHPfwrf0T/hW/knf2rfxbf1Tvp1/2rf3z/hE/6zv4J/zHf3ffCf/vO/sX/Bd/Iu+q+/mu/uXfA//su/pe/kk39v38a/4vr6f7+8H+IH+VT/Iv+YH+9d9sh/ih/o3/DD/ph/u3/Ij/Eg/KuZtP/ryJTKM9yl+gp/o3/WT/Ht+sp/ip/ppPtVP9zP8+36mn+Vn+w/8HP+hn+vn+fl+gU/zH/mFfpFP9x/7xf4Tn+GXXL6p7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//U7/Gf+b3+c7/Pf+H3+y/9Af+VP+i/9pn+G3/If+sP++/8Ef+9P+p/8Mf8cX/Cn/Sn/I/+tD/jz/pz/rz/yV/wP/uL/G/WGGOMMcb+SyZcaYo/6u/9B8+Jv9u5DwBcu61g5t/3Z60o1+f7td1PxLeLAMCzvbo8cnmrXj0pKenSvhkSgqLzAC7/SVCWGLgSL4G28DQkQhso84fz7ye6nad/Mn70doBcf5cTC1fiK+N/+SfjP/HUqIXlw7Nx/4/x5wEUL3olJydciZdAW5X12AbK/sn4+Vv9k/nn/CoFoPXf5eSGK/GV+SfAk/AcJP5mT8YYY4wxxhhj7Ff9RKVOl68/L/+Nzz+6Po9XV3JywJX4n12fM8YYY4wxxhhj7Op7vlv3Z55ITGzT6V9vVP1vZXHjf2rDe4DLzygA+DcHBPiPn8WW/8ixki99dP6xa/k5H8D/jFL+FY2r/MXEGGOMMcYY+8tdWfT/9nl1tSbEGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4xlQ/+J/07sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//geYOMQ==")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0)

7.6156241s ago: executing program 4 (id=1503):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0)
sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x34}}, 0x0)

7.295457756s ago: executing program 0 (id=1509):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000380)={[{@acl}, {@heartbeat_none}, {@err_ro}, {@coherency_full}, {@coherency_full}, {@localflocks}, {@intr}, {@noacl}]}, 0x1, 0x442a, &(0x7f0000008940)="$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")
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0)
statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080))

6.900010036s ago: executing program 4 (id=1514):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc00000000000000000000001100000014000400fe8000000000000000000000000000bb040002"], 0x58}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000007"], 0x24d8}], 0x1}, 0x0)

6.022054712s ago: executing program 0 (id=1524):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000000)={[{@bsdgroups}, {@usrquota}, {@noinit_itable}]}, 0x1, 0x541, &(0x7f0000003d80)="$eJzs3c9vHFcdAPDvjH8mdesEeoAKSIFCQFF2400bVb00uYBQVQlRcUAcUmNvLJPdrPGuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IBixQjATSopkdu1t7XW/qXa/wfj7SaObN23nf97KZeTNvk3kBjK3nI2InIqYj4s2ImC/2J8USdztL9rnHe9tL+3vbS0m022/8Pcnzs33RdUzmqaLM2Yj4xlcjvpMcj9vc3Hq4WKtV14t0uVVfKzc3t26u1hdXqivVR5XKnYU7t16+/VJlYG29Vv/l7ldWX/vmb3796fd+v/PlH2TVmivyutsxSJ2mTx3GyUxGxGvDCDYCE8V6esT14KNJI+JjEfG5/Pyfj4n8bycAcJG12/PRnu9OAwAXXZqPgSVpqRgLmIs0LZU6Y3jPxuW01mi2bjxobDxa7oyVXYmp9MFqrXrr6swfv5ffMUwlWXohz8vz83TlSPp2RFyNiB/PXMrTpaVGbXl0tz0AMNaeOtL//2um0//3ocevegDA/43ZUVcAADh3+n8AGD/6fwAYP330/8WP/TtDrwsAcD48/wPA+NH/A8D40f8DwFj5+uuvZ0t7v3j/9fJbmxsPG2/dXK42H5bqG0ulpcb6Wmml0VjJ39lTP628WqOxtvBibLxdblWbrXJzc+t+vbHxqHU/f6/3/erUubQKAPgwV6+9+4ckInZeuZQv0TWXg74aLrZ01BUARmZi1BUARsZsXzC++n/G/91Q6wGMTs+Xec/23Pygnz5BkK5CLj3BYcBwXP9k/+P/5niGi8X4P4yvjzb+/+rA6wGcP+P/ML7a7eTonP/Th1kAwIV0hn/j3/7hoG5CgJE6bTLvgfz+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfMXER8N5K0VMwFPhdpWipFPB0RV2IqebBaq96KiGfiWkRMzWTphVFXGgA4o/SvSTH/1/X5F+aO5k4n/57J1xHx/Z+98ZO3F1ut9YVs/z8O988cTB9Wef+4M8wrCAD06fk+P5f335Vi3fUg/3hve+lg6f58OuB6HrV7L/5bTEW8tL+3nS+dnMmYzNez+b3E5X8mRbozF+lzETExgPg770TEJ3q1P8nHRq4UM592x48i9tPnGj/9QPw0z+uss5uvjw+gLjBu3r0XEXd7nX9pcU3tff7P5leos9u91yns4Nq33xX/4Po30SN+8gTX/N0Xf/u1Yzvb8528dyKem+wVPzmMn5wQ/4U+4//pU5/50asn5LV/HnE9esfvjlVu1dfKzc2tm6v1xZXqSvVRpXJn4c6tl2+/VCnnY9Tlg5Hq4/72yo1nTqpb1v7LJ8Sf7dn+6cNjv9Bn+3/xnze//dkPif+lz/f+/p/tGb8j6xO/2Gf8xcu/OnH67iz+8gntP+37v9Fn/Pf+srXc50cBgHPQ3Nx6uFirVdfPtJE9hQ6inGMbWRUHWuApG3+OQRZ492yHTw3rT3XoG5OH94qDLflbWYkDrvPkKWdBOvBWnGnjcWcjhh5rtNclYPjeP+lHXRMAAAAAAAAAAAAAAOAk5/Ffl0bdRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6u/wUAAP//NonKgw==")
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x4008a, &(0x7f00000001c0)={[{@dioread_nolock}, {@usrjquota, 0x22}, {@nogrpid}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@nodelalloc}, {@usrjquota}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

5.448931108s ago: executing program 0 (id=1526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0)

5.114839137s ago: executing program 0 (id=1527):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0x2, 0x44a, &(0x7f0000000400)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0)

4.704782922s ago: executing program 0 (id=1528):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000300)=ANY=[@ANYBLOB='data_checksum=xxhash,direct_io,norecovery,fsck,journal_flush_disabled,norecovery,btree_node_imization,reconstruct_alloc,noWdata_io,hash,\x00'/148], 0x1, 0x5903, &(0x7f0000010b40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x5, 0xfffffffffffffff9, 0x3})

3.411941538s ago: executing program 3 (id=1534):
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00')
rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

3.165135557s ago: executing program 3 (id=1536):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2.603217358s ago: executing program 1 (id=1539):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f00000000c0)={0xa}, 0x1c)

2.603062278s ago: executing program 3 (id=1540):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.602871863s ago: executing program 0 (id=1541):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x70}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

2.534211061s ago: executing program 5 (id=1542):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0x1}, {0xc}}]}, 0x54}}, 0x0)

2.388309548s ago: executing program 5 (id=1544):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x1000400, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000e80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

2.144733617s ago: executing program 1 (id=1545):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x18, r1, 0x109, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0)

2.134622714s ago: executing program 5 (id=1546):
syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES64=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC, @ANYRES8, @ANYRES32], 0x1, 0x1fc, &(0x7f00000004c0)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)

1.9167741s ago: executing program 1 (id=1548):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x101801, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x19)
writev(r0, &(0x7f0000000680)=[{&(0x7f0000000280)="34c5e441001f426ce11933698f2c96851965d17470effd5a55143d7eabe769a26808eabc260526a1ecc5808f02f4ef5c07559302336541b01d2d2ecab8bdd2bed849b842a4965bed89e2c6ca7c7eb0434e53d9109090d16f611b2201337f0d387eca4d5add1d364aa47eac9bd63a181a2fbd297cabc5dca7a09c07fb65717022e02ea1ac4ecf824cb5639941505f0d949e5ac6b0ef710566cb70d9cec2a2ec5a9db56b3ba6205054405648b328078aaf167a9d218ca260ecde0700252e546f72d89577457a7526504e7f2bf8a215393becf3b5674e4bf295ac4f627f6737c18d4bd45d", 0xe3}, {&(0x7f0000000040)="f639de8ca7a6f40f104d08f00e1e7f083adbd52f06957612520500d0400d6ca164258abaf3822cb82a239d72e359e8372045026a0000000000", 0x39}, {&(0x7f0000000a80)="6dd866371e3482a3cbcdc3de28ea0707964455d9a708564698ab97789a65c972f39c273b45ef04abb708c4cc32809b0ad533b0f90931164ea33cca8dfe1bef46a452fed47e063c60accb7a52455819b951830f5c3e2d407d6679f09c436a9a33d7ce158ce766c90acfc5b707098b486746b0edfa0e1d6cc7e3589ee92d3a423b42820446e532424e958270464119ed54c2098c2ea02b9f6bde215b8c6816ad84090ee9cdd77ba22a53ce1e4f72db4544361b1ee8f0866f3be7073847969458047cb30a3ab7fb1ffd19158667d58b1e146e1283727787e3812eef3a14487887ca0ae4d24a3ca4b8c7b66a07c1eb4eb56f25d378486d4c82768d9c36922570ab720daa3df5f53c4d499485e26c208d678d75cc4c1808ccf8edfbeb75d881861dad9d831fc1cffd3f23539cdfe7a93a6173257b72e36ae55c093d2f53e6b066457f4cd552f266ea4b4ab8336960131880c1ba1441fc2fd41b7adf58b3e3f5ad610476136536fd2af3c00c686ddff94bbf2e360b34563d0594f8d5888389c6e2d500a9ea4649e798ff33915fd74e2c7b8e1b4bd312d6b5474e6550c9027d7ebfe43aafa027c27845a94b07b45c74a6a7d3d700b4d3c5747818a925b9408e725209e7f185eaa134a6e9097c386745db35ef1fb46c240fa1836bf9ccdcb872c272408a4f1533d3c6b7dd2c3456f6c4c35ef224ec968632371a9cc7ede4bf7634c4e42cb59f499f98bcccae6e30b16fce116361d95cf62f8ba28bafc9fbbca4fa6c62c52db9054351e759a093effb852589772bcb1c8b599da52d46b8caaf3166770aa280911dd708f59f4f8b69e87e094dd929d9340d7338684d397ce1f7d32fd6eaee9a214b6031b177e648a236dbcdfcb4f748cbed0d3e53718b6ca4e10745c3bdb3cb5d46794641b04b009a55b50961edaa345ae4507afde6a36f5cedd66a1cc2326d4aa891dcf2a7fb30ca1c47d6987836bdbffc66f0b8c20fc5f7519fde40dbaaa51641bb2b3e82e76fdcc1491ababa5097df7ff9bea16dcc621b21957f1d7031a1b9b20a42e4d2017c3c22fa8cafc70293dc43d3ff6623bb4d8fe25fdb70e2fc32d5645daed945ef960b3431517a081b47d3883a2508f7b3b6a67747042616e014e397ae2bab9fa4c54f6392301880d0d7b02b7dca3468878fce0343fdad54810f9e67c8fe556de3b1bf8b9b801be73075f9da8b248b6b2debc2fc0eeeb4bfe7d4162a03b085b2e1bf5e4e186197635fbae739532d299f73d2bd7ab762eaaa527b688dbd0a7e77c5284b8c8a41a736e22e3d41b05ea24aed7a5380051c4fe03980864d4b3bc5479fd6d8bc00eeebdd7d46af46d765f86c8653e3ae11f5379cef4a23f5fa91e479ce7832d74aea9e6f11b5da6d7fc0bf37586ff266872bf0bb643bde286692bed4fe2c396a4e100d39bc04b48f6851914922ca7ebaa1ba71ea77a2bb9fbc19a9b22b70a9048807ae47e3b1069ad9d6c6836ba9d69aa6845b62f9a03275bde00f1174eb1eec527cf346cb4d39f2393197a46c817dc2250570a2d0e60b84f234a8619cde8692c7a2f0d2401896d19ee39a1d5bc87135c05f64489cd0bf987247f03ada5d9d31ca2052159843ca46b5a53b357bdd7c034884c35c9019c02a8b3b86ca3262cd42a041d916766f06c12a6338c52f8fd87cf2024c49b7744c154aa5fef1d65662d28953f678ba6e8dfa86b388ffc480ceacecd6d9d9779e91107788dcdeb42989bf7b0eaa2fe5ba3730344e026fe572593a1c0da7513a6ffb53b3c0700b37f2c4a86fe9189aefbe1f2ea2647861435b190fd46ad23fa706ad456c5af98c7aede6c5913a33a7a8369f218f75dbb97723c249e2c9e358edfaf2c2c61859adf3486a1fb5613eabf9d81f2c345e4ddb73900db36c70ed25e8840043351d039820a9a3784ed5cd7236ac29df83585864ae2cc0e56e3884ec05167cf47f78288ab366fca2873b687f907058f9be7b3fa4f181d5e536f136332a7cdb78726045e0facb400f336005943441453df5c0a30e59016611404e965a2614d7cebf80d11c76ee1b73fc0de97cbfb14ed839d5112bdd985370c03e12de4cd09891aa0c666abf23cee60e833a39945ed8e53ea0284fb072a3412266b8fcab4d47f53bb3c5c79830fee47bc3448a8078b0acb1560b5e858b72cac5bec9521b760b6b6a68ac18381c171afebf484f86574c84ab64c67fdf5e9bf8bbc9d622f1cb2b9ab274eea931a9fa0c338139f40dc7677282854fb11de6aef14ba61ca2e7d70086bef2324c08acfa5bc47aa9a92a9c146895c66726639f634532bfc04415f24ce6f82c0a83d4583048ed1c80689d0cb156ca45fc94338901a227e39d621fc2e515d9cd8cb48f0f6e27622a370280636f14aa0905b161788d6514a403d67a3fc638729d2140ece0932eb33020d772bce575b25a9d2ce4e724dcd36055854d7e49c11f2910ec897bca1d911354ab2216174e36e641e1473b26166bd1dfcb5354896321c4", 0x6e5}], 0x3)

1.847484268s ago: executing program 2 (id=1549):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000040)="09000000010000", 0x7)

1.816986651s ago: executing program 1 (id=1550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000006c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="190300000000000000004a0000000e0002"], 0x34}}, 0x0)

1.672711488s ago: executing program 2 (id=1551):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000800)={0x9, {{0x2, 0x0, @multicast2}}}, 0x90)

1.647285427s ago: executing program 1 (id=1552):
timer_create(0x0, 0x0, &(0x7f0000000680))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
timer_delete(0x0)

1.525391863s ago: executing program 2 (id=1553):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0}, 0x400c004)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000000)=""/31, &(0x7f0000000040)=0x1f)

1.452588106s ago: executing program 2 (id=1554):
r0 = creat(&(0x7f0000000800)='./file0\x00', 0x29904dc13a69b7f2)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000b80)=ANY=[@ANYBLOB="98020000daffffff", @ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0xee01, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x298)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

1.391545091s ago: executing program 1 (id=1555):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000480)=ANY=[@ANYBLOB="61636c2c6469626563745f696f2c6e6f7265636f766572792c6603006b2c6a6f75726e616c5f666c7573685f64697361626c65642c6e6f7265636f766572792c6a6f75726e616c5f7472616e73616374696f6e5f6e616d65732c7265636f6e7374727563745f616c6c6f632c4abfbc926174615f696f2c00"], 0x1, 0x5906, &(0x7f0000010b40)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7)

1.344727796s ago: executing program 5 (id=1556):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.344459558s ago: executing program 2 (id=1557):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)={[{@quota}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@noquota}, {@errors_continue}, {@discard_size={'discard', 0x3d, 0x4}}, {@errors_continue}, {@quota}, {@discard}, {@grpquota}]}, 0x1, 0x60e1, &(0x7f0000000400)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000e00), 0x24, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x24, 0x0)

993.305247ms ago: executing program 5 (id=1558):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd})
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="10000000000000000100000024000000", 0x10)

963.471858ms ago: executing program 2 (id=1559):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309)

748.887499ms ago: executing program 5 (id=1560):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r1, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)

383.042613ms ago: executing program 3 (id=1561):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000b, 0x13, r0, 0x0)
timer_create(0xc0000000, 0x0, &(0x7f0000bbdffc))

131.937474ms ago: executing program 3 (id=1562):
setreuid(0x0, 0xee01)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'lo\x00'})

0s ago: executing program 3 (id=1563):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000080)="020600ffffffbabe004000000800", 0xe, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

kernel console output (not intermixed with test programs):

tover after parsing attributes in process `syz.5.850'.
[  157.870847][ T7691] bcachefs (loop0): done starting filesystem
[  158.139632][ T7737] loop1: detected capacity change from 0 to 2048
[  158.169556][ T7691] syz.0.839 (7691) used greatest stack depth: 14832 bytes left
[  158.201306][ T5793] bcachefs (loop0): shutting down
[  158.207762][ T7740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'.
[  158.221980][ T5793] bcachefs (loop0): going read-only
[  158.232183][ T5793] bcachefs (loop0): finished waiting for writes to stop
[  158.245253][ T7737] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.271162][ T5793] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[  158.396326][   T12] bcachefs (loop0): bch2_write_super(): fatal error  loop0: Superblock write was silently dropped! (seq 0 expected 53)
[  158.431878][   T12] bcachefs (loop0): fatal error - emergency read only
[  158.454498][ T5793] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12
[  158.465536][ T7747] loop3: detected capacity change from 0 to 1764
[  158.466140][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.489028][ T5793] bcachefs (loop0): unshutdown complete, journal seq 12
[  158.529528][ T5793] bcachefs (loop0): done going read-only, filesystem not clean
[  158.644770][ T7753] loop1: detected capacity change from 0 to 4096
[  158.656360][ T5793] bcachefs (loop0): shutdown complete
[  158.663813][ T7753] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  158.761796][ T7753] ntfs3(loop1): ino=1e, "file1" attr_set_size
[  158.768888][ T7753] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  158.782943][ T7753] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  158.826543][   T81] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  158.878144][ T7738] loop2: detected capacity change from 0 to 32768
[  159.026441][ T7738] JBD2: Ignoring recovery information on journal
[  159.116396][ T7738] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  159.337144][ T5238] ocfs2: Unmounting device (7,2) on (node local)
[  159.363964][ T7775] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  159.579517][ T7780] netlink: 'syz.3.875': attribute type 29 has an invalid length.
[  159.603744][ T7780] netlink: 'syz.3.875': attribute type 29 has an invalid length.
[  159.835789][ T7773] loop5: detected capacity change from 0 to 32768
[  160.013195][ T7773] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.094088][ T7785] loop3: detected capacity change from 0 to 4096
[  160.102957][ T7773] XFS (loop5): Ending clean mount
[  160.191254][ T7798] loop2: detected capacity change from 0 to 4096
[  160.226771][ T5239] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.236434][ T7785] ntfs3(loop3): Failed to load $Extend (-22).
[  160.245724][ T7799] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.261700][ T7785] ntfs3(loop3): Failed to initialize $Extend.
[  160.618280][ T7808] loop2: detected capacity change from 0 to 2048
[  160.651015][   T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  160.828405][ T7815] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  160.924156][   T25] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8
[  160.940037][   T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 895
[  160.959068][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  160.979034][   T25] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  160.990792][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  161.005195][   T25] usb 2-1: SerialNumber: syz
[  161.014458][   T25] usb 2-1: config 0 descriptor??
[  161.020490][ T7801] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  161.029788][   T25] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  161.051680][ T5319] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  161.081742][   T47] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  161.134014][ T7811] loop5: detected capacity change from 0 to 32768
[  161.188144][ T7811] XFS (loop5): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  161.202596][ T5293] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  161.211683][ T5319] usb 1-1: Using ep0 maxpacket: 16
[  161.218991][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.238487][ T5319] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.253967][   T25] usb 2-1: USB disconnect, device number 10
[  161.262788][   T47] usb 4-1: Using ep0 maxpacket: 32
[  161.275134][ T5319] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  161.290373][ T5319] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  161.292293][ T7811] XFS (loop5): Ending clean mount
[  161.300622][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.300767][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.327700][ T5319] usb 1-1: config 0 descriptor??
[  161.332974][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.351606][   T29] audit: type=1800 audit(1729509603.803:42): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.880" name="file1" dev="loop5" ino=6150 res=0 errno=0
[  161.363548][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.381883][   T47] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  161.385172][ T5293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.393924][ T5239] XFS (loop5): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  161.403612][ T5293] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  161.420601][   T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.429316][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.434085][   T47] usb 4-1: config 0 descriptor??
[  161.458026][ T5293] usb 3-1: config 0 descriptor??
[  161.781345][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.788791][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.796171][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.803527][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.810992][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.818366][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.826228][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.834248][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.841504][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.849079][ T5319] microsoft 0003:045E:07DA.0012: unknown main item tag 0x0
[  161.859556][ T5319] microsoft 0003:045E:07DA.0012: No inputs registered, leaving
[  161.863602][ T7834] loop5: detected capacity change from 0 to 256
[  161.882013][ T5319] microsoft 0003:045E:07DA.0012: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  161.893584][ T5319] microsoft 0003:045E:07DA.0012: no inputs found
[  161.899978][ T5319] microsoft 0003:045E:07DA.0012: could not initialize ff, continuing anyway
[  161.904280][ T5293] zydacron 0003:13EC:0006.0013: item fetching failed at offset 4/5
[  161.935919][   T47] lenovo 0003:17EF:60EE.0014: unknown main item tag 0x1
[  161.958014][ T5293] zydacron 0003:13EC:0006.0013: parse failed
[  161.972376][   T47] lenovo 0003:17EF:60EE.0014: hidraw1: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.3-1/input0
[  161.982440][ T5293] zydacron 0003:13EC:0006.0013: probe with driver zydacron failed with error -22
[  162.005288][   T47] usb 1-1: USB disconnect, device number 7
[  162.106105][ T5293] usb 3-1: USB disconnect, device number 5
[  162.151118][ T5295] usb 4-1: USB disconnect, device number 6
[  162.464518][ T7854] loop1: detected capacity change from 0 to 2048
[  162.477948][ T7855] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.760703][ T7861] loop1: detected capacity change from 0 to 4096
[  162.781622][ T7861] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  163.054813][ T7876] loop0: detected capacity change from 0 to 256
[  163.071159][ T7876] exfat: Deprecated parameter 'namecase'
[  163.085563][ T7875] loop3: detected capacity change from 0 to 16
[  163.093436][ T7880] syz.5.915 uses obsolete (PF_INET,SOCK_PACKET)
[  163.104279][ T7875] erofs: (device loop3): mounted with root inode @ nid 36.
[  163.136481][ T7875] syz.3.914: attempt to access beyond end of device
[  163.136481][ T7875] loop3: rw=0, sector=8, nr_sectors = 16 limit=16
[  163.154737][ T7875] erofs: (device loop3): z_erofs_read_folio: read error -5 @ 8200 of nid 36
[  163.169089][ T7876] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  163.405283][ T7882] loop1: detected capacity change from 0 to 2048
[  163.532195][ T5245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  163.551908][ T5245] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  163.570902][ T5245] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  163.586759][ T5245] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  163.625151][ T5245] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  163.667665][ T5245] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  163.792440][ T7882] hpfs: filesystem error: improperly stopped; already mounted read-only
[  163.836870][ T7882] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  163.998848][ T7892] chnl_net:caif_netlink_parms(): no params data found
[  164.099652][ T7910] loop5: detected capacity change from 0 to 64
[  164.150709][ T7906] loop2: detected capacity change from 0 to 4096
[  164.159644][ T7906] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  164.333122][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.354462][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.371942][ T7892] bridge_slave_0: entered allmulticast mode
[  164.379239][ T7892] bridge_slave_0: entered promiscuous mode
[  164.390283][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.431886][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.458586][ T7919] netlink: 'syz.1.929': attribute type 1 has an invalid length.
[  164.470466][ T7892] bridge_slave_1: entered allmulticast mode
[  164.503083][ T7892] bridge_slave_1: entered promiscuous mode
[  164.636300][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.673732][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.709881][ T7891] loop0: detected capacity change from 0 to 40427
[  164.763326][ T7891] F2FS-fs (loop0): invalid crc value
[  164.780974][ T7891] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.801112][ T7892] team0: Port device team_slave_0 added
[  164.845226][ T7892] team0: Port device team_slave_1 added
[  164.931914][ T7891] F2FS-fs (loop0): Start checkpoint disabled!
[  164.982543][ T7891] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  165.023753][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.030746][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.038765][ T7915] loop3: detected capacity change from 0 to 32768
[  165.056735][    C0] vkms_vblank_simulate: vblank timer overrun
[  165.110792][ T7891] F2FS-fs (loop0): Stopped filesystem due to reason: 0
[  165.116465][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.131724][ T7915] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.927 (7915)
[  165.182014][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.189085][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.235881][ T7915] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  165.253892][ T7915] BTRFS info (device loop3): using sha256 (sha256-ni) checksum algorithm
[  165.263739][ T7915] BTRFS info (device loop3): using free-space-tree
[  165.270617][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.351381][ T7892] hsr_slave_0: entered promiscuous mode
[  165.372545][ T7892] hsr_slave_1: entered promiscuous mode
[  165.380146][ T7892] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  165.408927][ T7892] Cannot create hsr debugfs directory
[  165.498896][ T7928] loop1: detected capacity change from 0 to 32768
[  165.543315][ T7928] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.933 (7928)
[  165.576044][ T7928] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  165.586883][ T7928] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  165.611292][ T7928] BTRFS info (device loop1): using free-space-tree
[  165.927726][ T5235] Bluetooth: hci6: command tx timeout
[  165.999427][ T5229] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.064617][ T7892] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.273012][ T5228] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  166.285581][ T7981] loop5: detected capacity change from 0 to 4096
[  166.313329][ T7981] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  166.316044][ T7892] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.598071][ T7892] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.646151][ T7952] loop2: detected capacity change from 0 to 32768
[  166.749840][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'.
[  166.763651][ T7995] netlink: 'syz.3.948': attribute type 3 has an invalid length.
[  166.796112][ T7952] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.859716][ T8003] loop3: detected capacity change from 0 to 64
[  166.925003][ T7892] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.941379][ T8006] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  166.946847][ T7952] XFS (loop2): Ending clean mount
[  167.032363][ T5293] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  167.088940][ T5238] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  167.137975][ T7892] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  167.234846][ T7892] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  167.289365][ T7892] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  167.320139][ T7892] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  167.352341][   T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  167.373158][ T5293] usb 2-1: Using ep0 maxpacket: 32
[  167.412308][ T5293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  167.444342][ T5293] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  167.454318][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  167.484820][ T5293] usb 2-1: Product: syz
[  167.489134][ T5293] usb 2-1: Manufacturer: syz
[  167.516741][ T5293] usb 2-1: SerialNumber: syz
[  167.521901][   T47] usb 6-1: Using ep0 maxpacket: 16
[  167.541381][ T5293] usb 2-1: config 0 descriptor??
[  167.564899][ T7997] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  167.572751][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.592405][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.629396][   T47] usb 6-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  167.661647][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.712538][   T47] usb 6-1: config 0 descriptor??
[  167.747416][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.815342][ T5293] usb 2-1: USB disconnect, device number 11
[  167.847925][ T7892] 8021q: adding VLAN 0 to HW filter on device team0
[  167.871245][ T4586] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.878455][ T4586] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.977720][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.985272][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.995206][ T5235] Bluetooth: hci6: command tx timeout
[  168.007509][ T8010] loop3: detected capacity change from 0 to 32768
[  168.017045][ T8010] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.953 (8010)
[  168.046257][ T8010] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  168.058671][ T7892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  168.061650][ T8010] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  168.146473][   T47] samsung 0003:0419:0001.0015: unknown main item tag 0x0
[  168.151963][ T8010] BTRFS info (device loop3): using free-space-tree
[  168.163793][   T47] samsung 0003:0419:0001.0015: unknown main item tag 0x0
[  168.173216][   T47] samsung 0003:0419:0001.0015: unknown main item tag 0x0
[  168.188684][   T47] samsung 0003:0419:0001.0015: unknown main item tag 0x0
[  168.197775][   T47] samsung 0003:0419:0001.0015: unknown main item tag 0x0
[  168.211396][   T47] samsung 0003:0419:0001.0015: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.5-1/input0
[  168.325660][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.345969][    T9] usb 6-1: USB disconnect, device number 6
[  168.626332][ T5229] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  168.630675][ T8028] loop2: detected capacity change from 0 to 32768
[  169.048556][ T8057] loop5: detected capacity change from 0 to 1024
[  169.097475][ T7892] veth0_vlan: entered promiscuous mode
[  169.110379][ T7892] veth1_vlan: entered promiscuous mode
[  169.114607][ T8060] loop0: detected capacity change from 0 to 1024
[  169.237034][ T7892] veth0_macvtap: entered promiscuous mode
[  169.295760][ T7892] veth1_macvtap: entered promiscuous mode
[  169.332017][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.391768][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.412963][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.450546][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.470088][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.509490][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.536679][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.571782][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.611927][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.630945][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.671769][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  169.691361][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.740068][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.800577][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.859866][ T8076] loop5: detected capacity change from 0 to 2048
[  169.871624][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.902097][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.921649][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  169.932375][ T8076] EXT4-fs: Ignoring removed orlov option
[  169.951609][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  169.973523][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.006613][ T8048] loop1: detected capacity change from 0 to 32768
[  170.008489][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.037069][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.047519][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.060162][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.061825][ T8076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.070677][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  170.094413][ T5235] Bluetooth: hci6: command tx timeout
[  170.100783][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  170.112891][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  170.146780][ T7892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  170.167442][ T8048] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  170.167667][ T7892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  170.181638][ T7892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  170.202926][ T7892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  170.204704][ T8048] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  170.285204][ T8048] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  170.297060][ T5294] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  170.304159][ T5294] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  170.344259][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.377791][ T5294] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 73ms
[  170.459915][ T5294] gfs2: fsid=syz:syz.0: jid=0: Done
[  170.513464][ T8048] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  170.584625][ T8075] loop2: detected capacity change from 0 to 32768
[  170.643484][ T4586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.651374][ T4586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.660173][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.668355][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.979918][ T8075] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  171.006027][ T8075] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  171.014413][ T8115] openvswitch: netlink: Actions may not be safe on all matching packets
[  171.024678][ T8075] bcachefs (loop2): Version upgrade required:
[  171.024678][ T8075] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  171.024678][ T8075] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  171.024678][ T8075]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  171.155448][ T8075] bcachefs (loop2): dropping and reconstructing all alloc info
[  171.235100][ T8075] bcachefs (loop2): check_topology... done
[  171.241026][ T8075] bcachefs (loop2): accounting_read... done
[  171.288269][ T8075] bcachefs (loop2): alloc_read... done
[  171.295690][   T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  171.296059][ T8075] bcachefs (loop2): stripes_read... done
[  171.330744][ T8075] bcachefs (loop2): snapshots_read... done
[  171.348123][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'.
[  171.357863][ T8075] bcachefs (loop2): check_allocations...
[  171.439577][ T8132] netlink: 'syz.3.991': attribute type 29 has an invalid length.
[  171.479448][ T8075]  done
[  171.488773][ T8132] netlink: 'syz.3.991': attribute type 29 has an invalid length.
[  171.496971][   T25] usb 5-1: Using ep0 maxpacket: 32
[  171.516373][   T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.530557][ T8075] bcachefs (loop2): going read-write
[  171.540253][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  171.581805][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.593743][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  171.603171][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.622717][ T8075] bcachefs (loop2): done starting filesystem
[  171.623297][   T25] usb 5-1: config 0 descriptor??
[  171.646360][ T8117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  171.680817][   T25] hub 5-1:0.0: USB hub found
[  171.741939][ T8145] loop5: detected capacity change from 0 to 2048
[  171.759786][ T8145] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.759863][ T8146] loop3: detected capacity change from 0 to 512
[  171.815826][ T8148] loop0: detected capacity change from 0 to 1024
[  171.877889][   T29] audit: type=1800 audit(1729509614.343:43): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.997" name="file1" dev="loop0" ino=20 res=0 errno=0
[  171.942781][ T8146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.955754][ T5293] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  171.981494][ T5238] bcachefs (loop2): shutting down
[  171.989224][ T5238] bcachefs (loop2): going read-only
[  172.022852][ T8146] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.036444][   T25] hub 5-1:0.0: 2 ports detected
[  172.045693][ T6434] hfsplus: b-tree write err: -5, ino 4
[  172.056635][ T5238] bcachefs (loop2): finished waiting for writes to stop
[  172.079355][ T5238] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[  172.134833][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.153390][ T5235] Bluetooth: hci6: command tx timeout
[  172.169108][ T4586] bcachefs (loop2): bch2_write_super(): fatal error  loop2: Superblock write was silently dropped! (seq 0 expected 53)
[  172.189943][ T5293] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  172.220584][ T5293] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  172.263921][ T4586] bcachefs (loop2): fatal error - emergency read only
[  172.265869][ T8163] loop0: detected capacity change from 0 to 256
[  172.278267][ T8163] exfat: Deprecated parameter 'namecase'
[  172.284244][ T8163] exfat: Deprecated parameter 'utf8'
[  172.287705][ T5293] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  172.289784][ T5238] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12
[  172.319155][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.321852][ T8163] exfat: Deprecated parameter 'namecase'
[  172.340852][ T8142] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  172.351243][ T8165] loop3: detected capacity change from 0 to 512
[  172.361058][ T8163] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  172.363589][ T5293] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  172.389595][ T5238] bcachefs (loop2): unshutdown complete, journal seq 12
[  172.399640][ T5238] bcachefs (loop2): done going read-only, filesystem not clean
[  172.440867][   T25] hub 5-1:0.0: set hub depth failed
[  172.441176][ T8165] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  172.484371][ T5238] bcachefs (loop2): shutdown complete
[  172.518123][ T8165] EXT4-fs (loop3): 1 truncate cleaned up
[  172.519669][   T25] usb 5-1: USB disconnect, device number 9
[  172.525126][ T8165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  172.566432][   T29] audit: type=1800 audit(1729509615.033:44): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1004" name="bus" dev="loop3" ino=18 res=0 errno=0
[  172.687946][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.779462][   T25] usb 2-1: USB disconnect, device number 12
[  173.665466][ T8185] loop0: detected capacity change from 0 to 40427
[  173.672400][    T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  173.694395][ T8185] F2FS-fs (loop0): invalid crc value
[  173.713661][ T8185] F2FS-fs (loop0): Found nat_bits in checkpoint
[  173.828573][ T8185] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  173.846754][    T8] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  173.862737][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.920134][    T8] usb 2-1: config 0 descriptor??
[  174.014014][ T8198] loop5: detected capacity change from 0 to 1024
[  174.021010][ T5793] syz-executor: attempt to access beyond end of device
[  174.021010][ T5793] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.071222][ T5793] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  174.073318][ T8187] loop4: detected capacity change from 0 to 32768
[  174.158100][ T8198] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  174.166327][ T8198] hfsplus: xattr searching failed
[  174.176528][ T8198] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  174.249675][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.398362][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.466129][ T8215] loop3: detected capacity change from 0 to 256
[  174.475985][ T8215] exfat: Deprecated parameter 'namecase'
[  174.483110][    T8] [drm] vendor descriptor length:6 data:06 5f 01 05 41 00 00 00 00 00 00
[  174.491966][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  174.571884][ T8187] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  174.622521][ T8187] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  174.680160][ T8187] bcachefs (loop4): Version upgrade required:
[  174.680160][ T8187] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  174.680160][ T8187] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  174.680160][ T8187]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  174.825509][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  174.860540][ T8215] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf794f3fa, utbl_chksum : 0xe619d30d)
[  174.898233][ T8187] bcachefs (loop4): dropping and reconstructing all alloc info
[  174.940322][ T8187] bcachefs (loop4): check_topology... done
[  174.947693][    T8] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  174.963183][ T8187] bcachefs (loop4): accounting_read...
[  174.973763][    T8] [drm] Initialized udl on minor 2
[  174.994985][ T8187]  done
[  174.997825][ T8187] bcachefs (loop4): alloc_read... done
[  175.011682][ T8187] bcachefs (loop4): stripes_read... done
[  175.030566][ T8187] bcachefs (loop4): snapshots_read... done
[  175.045599][    T8] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  175.058351][ T8187] bcachefs (loop4): check_allocations...
[  175.076710][    T8] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  175.110840][ T8187]  done
[  175.120801][ T5293] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  175.146940][ T8187] bcachefs (loop4): going read-write
[  175.150225][ T5293] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  175.161285][    T8] usb 2-1: USB disconnect, device number 13
[  175.187183][ T8187] bcachefs (loop4): done starting filesystem
[  175.243622][ T8236] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1030'.
[  175.410177][ T7892] bcachefs (loop4): shutting down
[  175.415680][ T7892] bcachefs (loop4): going read-only
[  175.421040][ T7892] bcachefs (loop4): finished waiting for writes to stop
[  175.433987][ T7892] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[  175.537789][ T6434] bcachefs (loop4): bch2_write_super(): fatal error  loop4: Superblock write was silently dropped! (seq 0 expected 53)
[  175.553338][ T6434] bcachefs (loop4): fatal error - emergency read only
[  175.589281][ T8250] loop1: detected capacity change from 0 to 256
[  175.589594][ T7892] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 11
[  175.631768][ T8250] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  175.642070][ T8254] loop3: detected capacity change from 0 to 1024
[  175.651980][ T7892] bcachefs (loop4): unshutdown complete, journal seq 11
[  175.659891][ T7892] bcachefs (loop4): done going read-only, filesystem not clean
[  175.713125][ T7892] bcachefs (loop4): shutdown complete
[  175.772823][ T8252] loop5: detected capacity change from 0 to 2048
[  175.814019][ T8259] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd
[  175.832571][ T8261] loop1: detected capacity change from 0 to 1024
[  175.849921][ T8252] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.862104][ T8254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.082532][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.537540][ T8275] loop3: detected capacity change from 0 to 32768
[  176.596021][ T8285] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1054'.
[  176.607729][ T8285] netlink: 'syz.1.1054': attribute type 2 has an invalid length.
[  176.751019][ T8296] Bluetooth: MGMT ver 1.23
[  176.777902][ T8297] loop1: detected capacity change from 0 to 1024
[  176.800210][ T8297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.854310][ T8301] loop0: detected capacity change from 0 to 64
[  176.874789][   T29] audit: type=1800 audit(1729509619.343:45): pid=8301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1058" name="bus" dev="loop0" ino=8 res=0 errno=0
[  176.890273][ T8297] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.924219][ T8297] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  176.936347][ T8297] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  176.948645][ T8297] EXT4-fs (loop1): changing journal_checksum during remount not supported; ignoring
[  176.974246][ T8297] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  177.057482][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.169198][ T8311] netlink: 'syz.1.1060': attribute type 1 has an invalid length.
[  177.177393][ T8311] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.1060'.
[  177.434393][ T8275] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  177.467537][ T8275] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  177.492182][ T8275] bcachefs (loop3): Version upgrade required:
[  177.492182][ T8275] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  177.492182][ T8275] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  177.492182][ T8275]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  177.511709][ T5340] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  177.576022][ T8275] bcachefs (loop3): dropping and reconstructing all alloc info
[  177.594659][ T8275] bcachefs (loop3): check_topology... done
[  177.600562][ T8275] bcachefs (loop3): accounting_read... done
[  177.670562][ T8275] bcachefs (loop3): alloc_read... done
[  177.701875][ T8275] bcachefs (loop3): stripes_read... done
[  177.742116][ T8275] bcachefs (loop3): snapshots_read... done
[  177.785465][ T8275] bcachefs (loop3): check_allocations...
[  177.930024][ T5340] usb 2-1: too many endpoints for config 0 interface 0 altsetting 64: 254, using maximum allowed: 30
[  177.998887][ T5340] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  178.051780][ T5340] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.072963][ T8340] tipc: Started in network mode
[  178.079155][ T8275]  done
[  178.082676][ T5340] usb 2-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[  178.096118][ T8340] tipc: Node identity ff00000000000000400000000000002d, cluster identity 4711
[  178.099300][ T8275] bcachefs (loop3): going read-write
[  178.105181][ T5340] usb 2-1: config 0 interface 0 has no altsetting 0
[  178.105226][ T5340] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00
[  178.131812][ T8275] bcachefs (loop3): done starting filesystem
[  178.132531][ T8343] loop4: detected capacity change from 0 to 512
[  178.145256][ T8340] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  178.156435][ T8343] EXT4-fs: Ignoring removed i_version option
[  178.179042][ T5340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.205790][ T8343] EXT4-fs error (device loop4): __ext4_iget:4952: inode #11: block 1: comm syz.4.1035: invalid block
[  178.220561][ T5340] usb 2-1: config 0 descriptor??
[  178.266242][ T8343] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.1035: couldn't read orphan inode 11 (err -117)
[  178.352206][ T8343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  178.406905][ T5229] bcachefs (loop3): shutting down
[  178.421046][ T8343] EXT4-fs error (device loop4): ext4_add_entry:2437: inode #2: comm syz.4.1035: Directory hole found for htree leaf block 0
[  178.424822][ T5229] bcachefs (loop3): going read-only
[  178.461744][ T5229] bcachefs (loop3): finished waiting for writes to stop
[  178.612321][ T5229] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  178.682925][ T7892] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.696615][   T81] bcachefs (loop3): bch2_write_super(): fatal error  loop3: Superblock write was silently dropped! (seq 0 expected 53)
[  178.784451][   T81] bcachefs (loop3): fatal error - emergency read only
[  178.841990][ T5229] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 12
[  178.857961][ T8337] loop0: detected capacity change from 0 to 32768
[  178.880556][ T5229] bcachefs (loop3): unshutdown complete, journal seq 12
[  178.890697][ T5229] bcachefs (loop3): done going read-only, filesystem not clean
[  178.894185][ T8356] loop4: detected capacity change from 0 to 64
[  178.934864][ T8356] hfs: unable to locate alternate MDB
[  178.941106][ T8356] hfs: continuing without an alternate MDB
[  178.949419][ T5229] bcachefs (loop3): shutdown complete
[  178.960986][ T5340] usb 2-1: string descriptor 0 read error: -71
[  178.967632][ T8337] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.983468][ T5340] uclogic 0003:5543:0047.0016: failed retrieving string descriptor #200: -71
[  179.001694][ T5340] uclogic 0003:5543:0047.0016: failed retrieving pen parameters: -71
[  179.017127][ T5340] uclogic 0003:5543:0047.0016: failed probing pen v2 parameters: -71
[  179.032724][ T5340] uclogic 0003:5543:0047.0016: failed probing parameters: -71
[  179.042959][ T5340] uclogic 0003:5543:0047.0016: probe with driver uclogic failed with error -71
[  179.069812][ T5340] usb 2-1: USB disconnect, device number 14
[  179.248734][ T8337] XFS (loop0): Ending clean mount
[  179.266497][ T8337] XFS (loop0): Quotacheck needed: Please wait.
[  179.349238][ T8337] XFS (loop0): Quotacheck: Done.
[  179.529245][ T8366] loop2: detected capacity change from 0 to 32768
[  179.601119][ T8366] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  179.712494][ T5793] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  179.839426][ T8375] affs: No valid root block on device nbd5
[  179.874504][ T5238] ocfs2: Unmounting device (7,2) on (node local)
[  180.008293][ T8381] loop5: detected capacity change from 0 to 512
[  180.040148][ T8381] EXT4-fs (loop5): orphan cleanup on readonly fs
[  180.047806][ T8381] EXT4-fs warning (device loop5): ext4_enable_quotas:7097: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  180.074091][ T8381] EXT4-fs (loop5): Cannot turn on quotas: error -22
[  180.081203][ T8381] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #13: comm syz.5.1087: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  180.130690][ T8381] EXT4-fs error (device loop5): ext4_orphan_get:1393: comm syz.5.1087: couldn't read orphan inode 13 (err -117)
[  180.144942][ T8381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  180.283101][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.899180][ T8416] xt_recent: Unsupported userspace flags (00000076)
[  180.931822][ T5340] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  181.111865][ T5340] usb 3-1: Using ep0 maxpacket: 8
[  181.126573][ T5340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.139046][ T5340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.169851][ T5340] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  181.199452][ T5340] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.233970][ T5340] usb 3-1: config 0 descriptor??
[  181.488266][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1109'.
[  181.506155][ T8433] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1109'.
[  181.674795][ T5340] hid-led 0003:04D8:F372.0017: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0
[  181.740304][ T8437] mkiss: ax0: crc mode is auto.
[  181.756720][ T5340] hid-led 0003:04D8:F372.0017: Greynut Luxafor initialized
[  181.877894][ T5319] usb 3-1: USB disconnect, device number 6
[  181.889260][   T25] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  181.904760][ T8427] loop1: detected capacity change from 0 to 32768
[  181.921325][   T25] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  181.947029][ T5278] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  181.975488][ T5278] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  181.989011][ T5278] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  182.001830][ T8427] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  182.005246][   T25] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  182.023191][   T25] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  182.040299][   T25] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  182.049483][   T25] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  182.059258][   T25] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  182.068555][   T25] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  182.077689][   T25] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  182.086278][   T25] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  182.095562][   T25] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  182.104365][   T25] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  182.113406][   T25] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  182.122178][   T25] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  182.133071][ T5278] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  182.191301][ T8448] warning: `syz.5.1115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  182.195890][ T5228] ocfs2: Unmounting device (7,1) on (node local)
[  182.522666][ T8459] loop4: detected capacity change from 0 to 1024
[  182.746059][ T8467] loop3: detected capacity change from 0 to 2048
[  182.812547][ T8474] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.185023][   T29] audit: type=1326 audit(1729509625.653:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8453 comm="syz.5.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ae677dff9 code=0x7fc00000
[  183.207332][    C0] vkms_vblank_simulate: vblank timer overrun
[  183.353534][ T8456] loop0: detected capacity change from 0 to 40427
[  183.401915][ T8456] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff
[  183.452274][ T8456] F2FS-fs (loop0): invalid crc value
[  183.522359][ T8456] F2FS-fs (loop0): Found nat_bits in checkpoint
[  183.654141][ T8456] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  183.847772][ T5793] syz-executor: attempt to access beyond end of device
[  183.847772][ T5793] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.871758][ T5793] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  183.907007][ T8470] loop2: detected capacity change from 0 to 32768
[  184.027091][ T8483] loop3: detected capacity change from 0 to 32768
[  184.042505][ T8483] XFS: attr2 mount option is deprecated.
[  184.042555][ T8501] loop4: detected capacity change from 0 to 512
[  184.048162][ T8483] XFS: ikeep mount option is deprecated.
[  184.060414][ T8483] XFS: noikeep mount option is deprecated.
[  184.083079][ T8501] EXT4-fs: inline encryption not supported
[  184.116632][ T8483] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  184.125019][ T8501] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  184.174103][ T8501] EXT4-fs (loop4): 1 truncate cleaned up
[  184.180898][ T8501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.221974][ T8483] XFS (loop3): Ending clean mount
[  184.225635][ T8501] EXT4-fs (loop4): Online resizing not supported with sparse_super2
[  184.243895][ T8483] XFS (loop3): Quotacheck needed: Please wait.
[  184.375501][ T8483] XFS (loop3): Quotacheck: Done.
[  184.388249][ T7892] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.497673][ T8487] loop1: detected capacity change from 0 to 32768
[  184.518761][ T5229] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  184.684311][ T5238] syz-executor (5238) used greatest stack depth: 12376 bytes left
[  185.142883][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  185.161227][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  185.165653][ T8530] loop5: detected capacity change from 0 to 64
[  185.176934][ T5235] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  185.215249][ T3179] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.227323][ T5235] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  185.239757][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  185.255841][ T5235] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  185.317590][ T8535] loop1: detected capacity change from 0 to 512
[  185.356596][ T8530] syz.5.1152: attempt to access beyond end of device
[  185.356596][ T8530] loop5: rw=0, sector=548, nr_sectors = 2 limit=64
[  185.378813][ T8524] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  185.404163][ T8535] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #17: comm syz.1.1149: iget: bogus i_mode (0)
[  185.416312][ T8530] Buffer I/O error on dev loop5, logical block 274, async page read
[  185.483211][ T8535] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1149: couldn't read orphan inode 17 (err -117)
[  185.484254][ T3179] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.499157][ T8530] syz.5.1152: attempt to access beyond end of device
[  185.499157][ T8530] loop5: rw=0, sector=548, nr_sectors = 2 limit=64
[  185.541120][ T8535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.574251][ T8530] Buffer I/O error on dev loop5, logical block 274, async page read
[  185.600967][   T29] audit: type=1800 audit(1729509628.063:47): pid=8530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1152" name="file3" dev="loop5" ino=6 res=0 errno=0
[  185.731906][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.815292][ T3179] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.165579][ T8533] loop0: detected capacity change from 0 to 40427
[  186.191144][ T3179] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  186.234461][ T8557] netlink: 'syz.4.1160': attribute type 3 has an invalid length.
[  186.358576][ T8538] loop3: detected capacity change from 0 to 40427
[  186.414912][ T8538] F2FS-fs (loop3): invalid crc value
[  186.460425][ T8570] loop1: detected capacity change from 0 to 1764
[  186.466744][ T8538] F2FS-fs (loop3): Found nat_bits in checkpoint
[  186.566970][ T8538] F2FS-fs (loop3): Start checkpoint disabled!
[  186.593841][ T8533] F2FS-fs (loop0): Found nat_bits in checkpoint
[  186.594099][ T3179] team0: left allmulticast mode
[  186.613025][ T3179] team_slave_0: left allmulticast mode
[  186.619064][ T3179] team_slave_1: left allmulticast mode
[  186.624882][ T3179] team0: left promiscuous mode
[  186.629664][ T3179] team_slave_0: left promiscuous mode
[  186.635447][ T3179] team_slave_1: left promiscuous mode
[  186.638714][ T8538] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  186.641140][ T3179] bridge0: port 3(team0) entered disabled state
[  186.737035][ T3179] bridge_slave_1: left allmulticast mode
[  186.749361][ T8570] iso9660: Corrupted directory entry in block 2 of inode 1920
[  186.754270][ T3179] bridge_slave_1: left promiscuous mode
[  186.765199][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.773296][ T8533] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  186.871054][   T29] audit: type=1800 audit(1729509629.293:48): pid=8533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1153" name="bus" dev="loop0" ino=10 res=0 errno=0
[  186.898862][ T3179] bridge_slave_0: left allmulticast mode
[  186.905359][ T3179] bridge_slave_0: left promiscuous mode
[  186.911080][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.946829][ T5793] syz-executor: attempt to access beyond end of device
[  186.946829][ T5793] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  186.964295][ T5793] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  187.083168][ T8587] loop1: detected capacity change from 0 to 256
[  187.090494][ T8587] vfat: Bad value for 'fmask'
[  187.341907][ T8591] loop1: detected capacity change from 0 to 512
[  187.352680][ T5235] Bluetooth: hci3: command tx timeout
[  187.397586][ T8591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.413013][ T8591] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  187.607748][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.993765][ T8614] loop0: detected capacity change from 0 to 128
[  188.011270][ T8614] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978)
[  188.056777][ T8614] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[  188.085358][ T8614] EXT4-fs error (device loop0): htree_dirblock_to_tree:1083: inode #2: comm syz.0.1183: Directory block failed checksum
[  188.190744][ T3179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.212523][ T5793] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  188.246442][ T3179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.283574][ T3179] bond0 (unregistering): Released all slaves
[  188.319006][ T8528] chnl_net:caif_netlink_parms(): no params data found
[  188.406631][ T3179] tipc: Left network mode
[  188.471093][ T8624] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1187'.
[  188.741907][ T5319] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  188.752846][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1193'.
[  188.909409][ T8528] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.923644][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.937141][ T8528] bridge0: port 1(bridge_slave_0) entered disabled state
[  188.945669][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.957513][ T8528] bridge_slave_0: entered allmulticast mode
[  188.978818][ T8528] bridge_slave_0: entered promiscuous mode
[  188.985206][ T5319] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00
[  189.002809][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.014271][ T8619] loop1: detected capacity change from 0 to 32768
[  189.023746][ T8640] sp0: Synchronizing with TNC
[  189.024676][ T5319] usb 4-1: config 0 descriptor??
[  189.074842][ T8528] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.076806][ T8647] sctp: [Deprecated]: syz.5.1196 (pid 8647) Use of int in maxseg socket option.
[  189.076806][ T8647] Use struct sctp_assoc_value instead
[  189.091738][ T8528] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.114622][ T8619] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.131415][ T8528] bridge_slave_1: entered allmulticast mode
[  189.161075][ T8528] bridge_slave_1: entered promiscuous mode
[  189.234012][ T8656] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1198'.
[  189.245770][ T8656] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1198'.
[  189.343650][ T8528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  189.434011][ T3179] hsr_slave_0: left promiscuous mode
[  189.441109][ T8661] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1200'.
[  189.450479][ T5246] Bluetooth: hci3: command tx timeout
[  189.463361][ T3179] hsr_slave_1: left promiscuous mode
[  189.469601][ T5319] corsair-psu 0003:1B1C:1C0D.0018: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.3-1/input0
[  189.473001][ T8661] unsupported nlmsg_type 40
[  189.528101][ T3179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.542583][ T3179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.560935][ T3179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.562275][ T8664] loop0: detected capacity change from 0 to 1024
[  189.573512][ T3179] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.651839][ T8619] XFS (loop1): Ending clean mount
[  189.659000][ T5319] corsair-psu 0003:1B1C:1C0D.0018: unable to initialize device (-71)
[  189.677641][ T3179] veth1_macvtap: left promiscuous mode
[  189.683331][ T3179] veth0_macvtap: left promiscuous mode
[  189.688974][ T3179] veth1_vlan: left promiscuous mode
[  189.694505][ T3179] veth0_vlan: left promiscuous mode
[  189.703958][ T5319] corsair-psu 0003:1B1C:1C0D.0018: probe with driver corsair-psu failed with error -71
[  189.723814][ T5319] usb 4-1: USB disconnect, device number 7
[  189.819370][ T5228] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.660920][ T8695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1217'.
[  190.798560][ T5246] Bluetooth: hci1: command 0x0406 tx timeout
[  190.799191][ T5235] Bluetooth: hci2: command 0x0406 tx timeout
[  191.300469][ T8699] loop0: detected capacity change from 0 to 32768
[  191.318721][ T8699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1218 (8699)
[  191.364458][ T8699] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.388856][ T8699] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  191.408636][ T8699] BTRFS info (device loop0): using free-space-tree
[  191.456932][ T8710] loop1: detected capacity change from 0 to 4096
[  191.478011][ T8698] loop4: detected capacity change from 0 to 32768
[  191.511824][ T5245] Bluetooth: hci3: command tx timeout
[  191.736141][ T3179] team0 (unregistering): Port device team_slave_1 removed
[  191.786023][ T8698] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  191.806050][ T3179] team0 (unregistering): Port device team_slave_0 removed
[  191.833645][ T8708] loop3: detected capacity change from 0 to 32768
[  191.845512][ T8708] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1224 (8708)
[  191.934120][ T8708] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  191.951346][ T8698] XFS (loop4): Ending clean mount
[  191.959058][ T8698] XFS (loop4): Quotacheck needed: Please wait.
[  191.974493][ T8708] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  191.987787][ T8738] loop1: detected capacity change from 0 to 16
[  192.011466][ T8738] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  192.029858][ T8708] BTRFS info (device loop3): using free-space-tree
[  192.031095][ T8698] XFS (loop4): Quotacheck: Done.
[  192.083583][ T5793] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.172851][ T7892] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  192.422829][ T5229] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  192.510964][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'.
[  192.540306][ T8759] nbd: socks must be embedded in a SOCK_ITEM attr
[  192.943741][ T8757] loop0: detected capacity change from 0 to 40427
[  192.966491][ T8757] F2FS-fs (loop0): Corrupted extension count (64 + 1 > 64)
[  192.976858][ T8757] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  193.087950][ T8757] F2FS-fs (loop0): Found nat_bits in checkpoint
[  193.165537][ T8779] loop3: detected capacity change from 0 to 256
[  193.189780][ T8779] exfat: Deprecated parameter 'utf8'
[  193.217064][ T8779] exfat: Deprecated parameter 'utf8'
[  193.286537][ T8757] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  193.303961][ T8779] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a97a7bd, utbl_chksum : 0xe619d30d)
[  193.311768][ T8757] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.476804][ T8768] f2fs_ckpt-7:0: attempt to access beyond end of device
[  193.476804][ T8768] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  193.518288][ T8768] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  193.575871][ T8793] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  193.606373][ T5245] Bluetooth: hci3: command tx timeout
[  193.839134][ T1257] ieee802154 phy0 wpan0: encryption failed: -22
[  193.846189][ T1257] ieee802154 phy1 wpan1: encryption failed: -22
[  194.153038][ T8806] Bluetooth: MGMT ver 1.23
[  194.217916][ T8810] binder: 8807:8810 ioctl 4018620d 0 returned -22
[  194.229292][ T8810] binder: 8807:8810 ioctl c0306201 20000380 returned -11
[  194.254135][ T8528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  194.303073][ T8814] program syz.3.1247 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  194.448323][ T8528] team0: Port device team_slave_0 added
[  194.486074][ T8528] team0: Port device team_slave_1 added
[  194.705799][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_0
[  194.713469][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.790184][ T8836] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1258'.
[  194.800914][ T8528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  194.825081][ T8528] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.841833][ T8528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.911815][ T8528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.921860][ T5293] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  194.991696][   T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  195.092740][ T8528] hsr_slave_0: entered promiscuous mode
[  195.093546][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.130331][ T8528] hsr_slave_1: entered promiscuous mode
[  195.151648][ T5293] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.152175][ T8528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.171946][   T25] usb 4-1: Using ep0 maxpacket: 16
[  195.179217][ T5293] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  195.197266][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.211314][ T5293] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.219749][ T8528] Cannot create hsr debugfs directory
[  195.225331][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.242173][ T5293] usb 6-1: config 0 descriptor??
[  195.255675][   T25] usb 4-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  195.290877][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.322847][   T25] usb 4-1: config 0 descriptor??
[  195.685864][ T5293] steelseries 0003:1038:12B6.0019: unbalanced delimiter at end of report description
[  195.724693][ T5293] steelseries 0003:1038:12B6.0019: probe with driver steelseries failed with error -22
[  195.739245][   T25] bigben 0003:146B:0902.001A: unexpected rdesc, please submit for review
[  195.782008][   T25] bigben 0003:146B:0902.001A: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.3-1/input0
[  195.824697][   T25] bigben 0003:146B:0902.001A: missing HID_OUTPUT_REPORT 0
[  195.862996][   T25] bigben 0003:146B:0902.001A: no output report found
[  195.900014][ T5293] usb 6-1: USB disconnect, device number 7
[  195.913288][ T8842] loop0: detected capacity change from 0 to 32768
[  195.948015][ T5294] usb 4-1: USB disconnect, device number 8
[  195.997336][ T8842] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.008443][ T8859] tipc: Started in network mode
[  196.018014][ T8859] tipc: Node identity 7, cluster identity 4711
[  196.036414][ T8859] tipc: Node number set to 7
[  196.071730][ T8841] loop1: detected capacity change from 0 to 40427
[  196.082089][ T8841] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  196.127966][ T8841] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  196.128094][ T8528] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  196.146222][ T8528] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  196.174604][ T8528] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  196.194203][ T8841] F2FS-fs (loop1): invalid crc value
[  196.203376][ T8528] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  196.215812][ T8841] F2FS-fs (loop1): Found nat_bits in checkpoint
[  196.344254][ T8842] XFS (loop0): Ending clean mount
[  196.365505][ T8842] XFS (loop0): Quotacheck needed: Please wait.
[  196.392573][ T8528] 8021q: adding VLAN 0 to HW filter on device bond0
[  196.408090][ T8841] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  196.417821][ T8528] 8021q: adding VLAN 0 to HW filter on device team0
[  196.437404][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.444617][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.451816][ T8841] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  196.494434][   T29] audit: type=1800 audit(1729509638.963:49): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1261" name="bus" dev="loop1" ino=10 res=0 errno=0
[  196.545573][ T8842] XFS (loop0): Quotacheck: Done.
[  196.562724][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.569881][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.641716][ T5793] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  197.203431][ T8528] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.438699][ T8528] veth0_vlan: entered promiscuous mode
[  197.516724][ T8528] veth1_vlan: entered promiscuous mode
[  197.666834][ T8906] loop0: detected capacity change from 0 to 1024
[  197.675024][ T8906] EXT4-fs: Ignoring removed nomblk_io_submit option
[  197.677509][ T8528] veth0_macvtap: entered promiscuous mode
[  197.777911][ T8528] veth1_macvtap: entered promiscuous mode
[  197.785302][ T8906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.852805][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.891904][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.909166][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.919731][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.930593][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.941769][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.951695][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.962199][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.972095][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.982595][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.992644][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.003230][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.015051][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.028829][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.039337][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.049220][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.059718][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.069731][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.080602][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.090620][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.101118][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.111219][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.122040][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.132171][ T8528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.143294][ T8528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.156055][ T8528] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.166479][ T8528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.175304][ T8528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.184139][ T8528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.192893][ T8528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.406910][ T8892] loop3: detected capacity change from 0 to 32768
[  198.414297][ T8892] XFS: attr2 mount option is deprecated.
[  198.420100][ T8892] XFS: ikeep mount option is deprecated.
[  198.425921][ T8892] XFS: noikeep mount option is deprecated.
[  198.572524][ T8916] loop5: detected capacity change from 0 to 40427
[  198.609283][ T8916] F2FS-fs (loop5): heap/no_heap options were deprecated
[  198.619553][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.666631][ T8916] F2FS-fs (loop5): invalid crc value
[  198.698037][ T8892] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  198.713152][ T8916] F2FS-fs (loop5): Found nat_bits in checkpoint
[  198.761215][ T8931] program syz.0.1290 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  198.806331][ T8900] loop4: detected capacity change from 0 to 40427
[  198.822906][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.843350][ T8900] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  198.847899][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.851416][ T8900] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  198.912709][ T8900] F2FS-fs (loop4): inline encryption not supported
[  198.939417][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.962707][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.988001][ T8900] F2FS-fs (loop4): invalid crc value
[  199.082318][ T8916] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  199.111079][ T8900] F2FS-fs (loop4): Found nat_bits in checkpoint
[  199.164840][ T8892] XFS (loop3): Ending clean mount
[  199.184663][ T8892] XFS (loop3): Quotacheck needed: Please wait.
[  199.330062][ T8892] XFS (loop3): Quotacheck: Done.
[  199.509024][ T8900] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  199.521757][ T8900] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  199.563353][ T5229] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  199.627150][ T5239] syz-executor: attempt to access beyond end of device
[  199.627150][ T5239] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  199.659748][ T8953] loop0: detected capacity change from 0 to 256
[  199.661706][ T5239] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  199.985480][ T8958] netlink: 'syz.1.1299': attribute type 2 has an invalid length.
[  200.234976][ T8965] loop3: detected capacity change from 0 to 2048
[  200.252310][ T5278] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  200.392028][ T5295] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  200.511841][ T5278] usb 3-1: Using ep0 maxpacket: 8
[  200.541888][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.553019][ T5278] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.563040][ T5278] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  200.576063][ T5278] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  200.585218][ T5278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.598017][ T5278] usb 3-1: config 0 descriptor??
[  200.680320][ T8968] loop1: detected capacity change from 0 to 32768
[  200.687598][ T5295] usb 1-1: Using ep0 maxpacket: 8
[  200.696669][ T5295] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  200.702531][    T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  200.711637][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.750568][ T5295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.761154][ T5295] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  200.775813][ T5295] usb 1-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  200.785947][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.812983][ T5295] usb 1-1: config 0 descriptor??
[  200.866403][ T8968] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  200.970608][ T8996] loop5: detected capacity change from 0 to 64
[  201.145036][ T8968] XFS (loop1): Ending clean mount
[  201.175268][ T5278] sony 0003:054C:0268.001B: item fetching failed at offset 6/70
[  201.190663][ T5278] sony 0003:054C:0268.001B: parse failed
[  201.198274][ T5278] sony 0003:054C:0268.001B: probe with driver sony failed with error -22
[  201.285979][ T5295] kye 0003:0458:5011.001C: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  201.328197][ T5295] kye 0003:0458:5011.001C: unbalanced collection at end of report description
[  201.368794][ T5295] kye 0003:0458:5011.001C: parse failed
[  201.379570][ T8998] loop4: detected capacity change from 0 to 40427
[  201.387942][ T8998] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  201.396137][ T8998] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  201.407545][ T5295] kye 0003:0458:5011.001C: probe with driver kye failed with error -22
[  201.410983][ T8998] F2FS-fs (loop4): invalid crc value
[  201.418080][ T5278] usb 3-1: USB disconnect, device number 7
[  201.423129][    T8] usb 4-1: Using ep0 maxpacket: 8
[  201.436380][    T8] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  201.446099][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.454648][    T8] usb 4-1: Product: syz
[  201.459442][ T5228] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  201.459914][    T8] usb 4-1: Manufacturer: syz
[  201.474441][ T8998] F2FS-fs (loop4): Found nat_bits in checkpoint
[  201.488920][ T5295] usb 1-1: USB disconnect, device number 8
[  201.506848][    T8] usb 4-1: SerialNumber: syz
[  201.528141][    T8] usb 4-1: config 0 descriptor??
[  201.545499][    T8] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[  201.582786][ T8998] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  201.594648][ T8998] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  201.616221][ T9006] loop5: detected capacity change from 0 to 24
[  201.645242][ T9006] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  201.662568][ T9006] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  201.959222][ T9010] sp0: Synchronizing with TNC
[  202.208178][    T8] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  202.218511][    T8] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  202.250769][    T8] usb 4-1: USB disconnect, device number 9
[  203.129890][ T9038] loop1: detected capacity change from 0 to 8
[  203.137137][ T9038] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  203.305514][ T9029] syz.4.1318: vmalloc error: size 3485696, failed to allocated page array size 6808, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  203.323538][ T9029] CPU: 0 UID: 0 PID: 9029 Comm: syz.4.1318 Not tainted 6.12.0-rc4-syzkaller #0
[  203.332614][ T9029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  203.342802][ T9029] Call Trace:
[  203.346102][ T9029]  <TASK>
[  203.349051][ T9029]  dump_stack_lvl+0x241/0x360
[  203.353832][ T9029]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.359087][ T9029]  ? __pfx__printk+0x10/0x10
[  203.363827][ T9029]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  203.370296][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.376015][ T9029]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  203.382568][ T9029]  warn_alloc+0x278/0x410
[  203.386943][ T9029]  ? __pfx_warn_alloc+0x10/0x10
[  203.391829][ T9029]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  203.398016][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.403667][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.409401][ T9029]  ? __get_vm_area_node+0x23d/0x270
[  203.414633][ T9029]  __vmalloc_node_range_noprof+0x691/0x13f0
[  203.420561][ T9029]  ? __kmalloc_cache_node_noprof+0x1d3/0x300
[  203.426558][ T9029]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  203.432903][ T9029]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  203.439082][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.444769][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.450438][ T9029]  ? __get_vm_area_node+0x23d/0x270
[  203.455670][ T9029]  __vmalloc_node_range_noprof+0x59c/0x13f0
[  203.461577][ T9029]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  203.467845][ T9029]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  203.473601][ T9029]  ? rcu_is_watching+0x15/0xb0
[  203.478375][ T9029]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  203.484709][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.490358][ T9029]  ? rcu_is_watching+0x15/0xb0
[  203.495131][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.500810][ T9029]  ? __kmalloc_node_noprof+0x247/0x440
[  203.506287][ T9029]  ? __kvmalloc_node_noprof+0x72/0x190
[  203.511765][ T9029]  __kvmalloc_node_noprof+0x142/0x190
[  203.517144][ T9029]  ? __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  203.523313][ T9029]  __v4l2_ctrl_modify_dimensions+0x43b/0xb60
[  203.529313][ T9029]  ? tpg_update_mv_step+0x361/0x4f0
[  203.534536][ T9029]  vivid_update_format_cap+0x133c/0x2090
[  203.540198][ T9029]  ? __pfx_vivid_update_format_cap+0x10/0x10
[  203.546191][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.551841][ T9029]  vivid_vid_cap_s_dv_timings+0x535/0x1230
[  203.557708][ T9029]  __video_do_ioctl+0xc25/0xdd0
[  203.562599][ T9029]  ? __pfx___video_do_ioctl+0x10/0x10
[  203.568026][ T9029]  ? srso_alias_return_thunk+0x5/0xfbef5
[  203.573666][ T9029]  ? __might_fault+0xc6/0x120
[  203.578357][ T9029]  video_usercopy+0x89d/0x1180
[  203.583154][ T9029]  ? __pfx___video_do_ioctl+0x10/0x10
[  203.588544][ T9029]  ? __pfx_video_usercopy+0x10/0x10
[  203.593859][ T9029]  ? __fget_files+0x29/0x470
[  203.598463][ T9029]  ? __fget_files+0x3f3/0x470
[  203.603155][ T9029]  v4l2_ioctl+0x18b/0x1e0
[  203.607506][ T9029]  ? __pfx_v4l2_ioctl+0x10/0x10
[  203.612463][ T9029]  __se_sys_ioctl+0xfb/0x170
[  203.617087][ T9029]  do_syscall_64+0xf3/0x230
[  203.621608][ T9029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  203.627632][ T9029] RIP: 0033:0x7fc705f7dff9
[  203.632054][ T9029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  203.651677][ T9029] RSP: 002b:00007fc706d46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  203.660132][ T9029] RAX: ffffffffffffffda RBX: 00007fc706135f80 RCX: 00007fc705f7dff9
[  203.668119][ T9029] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003
[  203.676096][ T9029] RBP: 00007fc705ff0296 R08: 0000000000000000 R09: 0000000000000000
[  203.684074][ T9029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  203.692051][ T9029] R13: 0000000000000000 R14: 00007fc706135f80 R15: 00007ffda8bd69c8
[  203.700171][ T9029]  </TASK>
[  203.705487][ T9029] Mem-Info:
[  203.708644][ T9029] active_anon:5348 inactive_anon:0 isolated_anon:0
[  203.708644][ T9029]  active_file:1965 inactive_file:38306 isolated_file:0
[  203.708644][ T9029]  unevictable:768 dirty:443 writeback:9
[  203.708644][ T9029]  slab_reclaimable:10468 slab_unreclaimable:99389
[  203.708644][ T9029]  mapped:28367 shmem:1234 pagetables:778
[  203.708644][ T9029]  sec_pagetables:0 bounce:0
[  203.708644][ T9029]  kernel_misc_reclaimable:0
[  203.708644][ T9029]  free:1277472 free_pcp:10897 free_cma:0
[  203.762057][ T9029] Node 0 active_anon:22656kB inactive_anon:0kB active_file:7860kB inactive_file:153152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113420kB dirty:1804kB writeback:36kB shmem:3404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10392kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no
[  203.794789][ T9029] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  203.825675][ T9029] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  203.853560][ T9029] lowmem_reserve[]: 0 2465 2466 0 0
[  203.858913][ T9029] Node 0 DMA32 free:1177652kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:25420kB inactive_anon:0kB active_file:7860kB inactive_file:152332kB unevictable:1536kB writepending:1836kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:28068kB local_pcp:18032kB free_cma:0kB
[  203.891179][ T9029] lowmem_reserve[]: 0 0 0 0 0
[  203.896792][ T9029] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB
[  203.925199][ T9029] lowmem_reserve[]: 0 0 0 0 0
[  203.930004][ T9029] Node 1 Normal free:3916876kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10248kB local_pcp:6772kB free_cma:0kB
[  203.959676][ T9029] lowmem_reserve[]: 0 0 0 0 0
[  203.964546][ T9029] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  203.978456][ T9029] Node 0 DMA32: 6*4kB (UME) 2*8kB (ME) 11*16kB (ME) 9*32kB (UME) 167*64kB (UME) 63*128kB (ME) 40*256kB (UM) 12*512kB (UME) 7*1024kB (UME) 2*2048kB (ME) 276*4096kB (M) = 1177400kB
[  203.997988][ T9029] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  204.010310][ T9029] Node 1 Normal: 189*4kB (UME) 49*8kB (UME) 17*16kB (UM) 162*32kB (UME) 90*64kB (UME) 38*128kB (UME) 11*256kB (UM) 11*512kB (UM) 2*1024kB (U) 1*2048kB (U) 949*4096kB (ME) = 3916876kB
[  204.023401][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1336'.
[  204.029009][ T9029] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  204.048152][ T9029] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  204.057530][ T9029] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  204.067243][ T9029] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  204.082080][ T9029] 41480 total pagecache pages
[  204.086879][ T9029] 0 pages in swap cache
[  204.091055][ T9029] Free swap  = 121644kB
[  204.097415][ T9029] Total swap = 124996kB
[  204.101652][ T9029] 2097051 pages RAM
[  204.105475][ T9029] 0 pages HighMem/MovableOnly
[  204.110331][ T9029] 427076 pages reserved
[  204.114667][ T9029] 0 pages cma reserved
[  204.817207][ T9069] loop2: detected capacity change from 0 to 128
[  205.199203][ T9069] EXT4-fs (loop2): Test dummy encryption mode enabled
[  205.311253][ T9069] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  205.349743][ T9069] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  205.425379][ T8528] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  205.438066][ T9094] loop1: detected capacity change from 0 to 164
[  206.141683][ T5294] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  206.215052][ T9106] loop0: detected capacity change from 0 to 2048
[  206.256169][ T9103] loop2: detected capacity change from 0 to 8192
[  206.291715][ T5294] usb 6-1: Using ep0 maxpacket: 16
[  206.304991][ T5294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  206.352153][ T9106]  loop0: p3 p4 < >
[  206.357232][ T9106] loop0: p3 size 2098944 extends beyond EOD, truncated
[  206.364657][ T5294] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  206.397038][ T5294] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c1e, bcdDevice= 0.00
[  206.410188][ T5294] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.432008][ T5294] usb 6-1: config 0 descriptor??
[  206.531796][    T8] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  206.697278][    T8] usb 4-1: Using ep0 maxpacket: 16
[  206.717608][    T8] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  206.739902][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.781300][    T8] usb 4-1: Product: syz
[  206.804021][    T8] usb 4-1: Manufacturer: syz
[  206.830094][    T8] usb 4-1: SerialNumber: syz
[  206.861810][    T8] usb 4-1: config 0 descriptor??
[  206.888488][ T5294] corsair-psu 0003:1B1C:1C1E.001D: item fetching failed at offset 2/5
[  206.898347][    T8] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  206.914763][ T5294] corsair-psu 0003:1B1C:1C1E.001D: probe with driver corsair-psu failed with error -22
[  207.092312][ T5294] usb 6-1: USB disconnect, device number 8
[  207.323914][    T8] usb 4-1: Sony Clie 3.5 converter now attached to ttyUSB0
[  207.419066][ T9117] DRBG: could not allocate CTR cipher TFM handle: ctr(aes)
[  207.530498][    T9] usb 4-1: USB disconnect, device number 10
[  207.557528][    T9] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0
[  207.642288][    T9] visor 4-1:0.0: device disconnected
[  207.796810][ T9140] ebt_among: src integrity fail: 100
[  207.811143][ T9145] loop5: detected capacity change from 0 to 512
[  207.857625][ T9145] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  207.880053][ T9144] loop2: detected capacity change from 0 to 1024
[  207.922700][ T9144] hfsplus: bad catalog entry type
[  207.938030][ T9145] EXT4-fs (loop5): invalid journal inode
[  207.964426][ T9145] EXT4-fs (loop5): can't get journal size
[  208.032459][ T9145] EXT4-fs (loop5): 1 truncate cleaned up
[  208.040376][ T9145] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.084883][   T12] hfsplus: b-tree write err: -5, ino 4
[  208.257631][ T9155] program syz.2.1379 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  208.461740][   T29] audit: type=1800 audit(1729509650.873:50): pid=9145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1376" name="file2" dev="loop5" ino=16 res=0 errno=0
[  208.697824][ T9164] loop3: detected capacity change from 0 to 512
[  208.716396][ T9164] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  208.744398][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.823874][ T9164] EXT4-fs (loop3): 1 truncate cleaned up
[  208.830586][ T9164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.859072][ T9147] loop4: detected capacity change from 0 to 32768
[  208.901110][ T9170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1385'.
[  208.991778][ T9175] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0
[  208.993378][ T9174] IPVS: stopping backup sync thread 9175 ...
[  209.113329][ T5229] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.120710][ T9185] loop1: detected capacity change from 0 to 512
[  209.158570][ T9185] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  209.201985][ T9185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  209.210065][ T9185] System zones: 0-1, 15-15, 18-18, 34-34
[  209.257851][ T9185] EXT4-fs (loop1): orphan cleanup on readonly fs
[  209.288732][ T9185] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[  209.317949][ T9147] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc
[  209.351768][ T9185] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  209.362467][ T9147] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  209.377086][ T9185] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  209.407644][ T9185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1389: bg 0: block 40: padding at end of block bitmap is not set
[  209.423890][ T9147] bcachefs (loop4): Version upgrade required:
[  209.423890][ T9147] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  209.423890][ T9147] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  209.423890][ T9147]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  209.509135][ T9185] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  209.516272][ T9158] loop0: detected capacity change from 0 to 40427
[  209.526711][ T9158] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  209.535449][ T9158] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  209.545024][ T9147] bcachefs (loop4): dropping and reconstructing all alloc info
[  209.559114][ T9185] EXT4-fs (loop1): 1 truncate cleaned up
[  209.572707][ T9202] netlink: 'syz.3.1394': attribute type 29 has an invalid length.
[  209.577853][ T9158] F2FS-fs (loop0): Found nat_bits in checkpoint
[  209.600741][ T9147] bcachefs (loop4): check_topology... done
[  209.603936][ T9202] netlink: 'syz.3.1394': attribute type 29 has an invalid length.
[  209.607783][ T9185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  209.642243][ T9147] bcachefs (loop4): accounting_read... done
[  209.656674][ T9147] bcachefs (loop4): alloc_read... done
[  209.666818][ T9204] netlink: 'syz.2.1395': attribute type 1 has an invalid length.
[  209.676351][ T9147] bcachefs (loop4): stripes_read... done
[  209.697118][ T9147] bcachefs (loop4): snapshots_read... done
[  209.714671][ T9147] bcachefs (loop4): check_allocations... done
[  209.792130][ T9185] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  209.795087][ T9158] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  209.801780][ T9185] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  209.821382][ T9158] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  209.888408][ T9147] bcachefs (loop4): going read-write
[  209.898914][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.971189][ T9147] bcachefs (loop4): done starting filesystem
[  210.108351][ T7892] bcachefs (loop4): shutting down
[  210.129731][ T7892] bcachefs (loop4): going read-only
[  210.147625][ T7892] bcachefs (loop4): finished waiting for writes to stop
[  210.154933][    T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  210.172236][ T7892] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  210.181362][ T7892] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  210.199165][ T7892] bcachefs (loop4): unshutdown complete, journal seq 11
[  210.207815][ T7892] bcachefs (loop4): done going read-only, filesystem not clean
[  210.235551][ T7892] bcachefs (loop4): shutdown complete
[  210.301870][ T5295] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  210.311815][    T9] usb 4-1: Using ep0 maxpacket: 16
[  210.322375][    T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  210.342357][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.359863][    T9] usb 4-1: Product: syz
[  210.369256][    T9] usb 4-1: Manufacturer: syz
[  210.380912][    T9] usb 4-1: SerialNumber: syz
[  210.394535][    T9] usb 4-1: config 0 descriptor??
[  210.408944][    T9] visor 4-1:0.0: Sony Clie 3.5 converter detected
[  210.475302][ T5295] usb 3-1: Using ep0 maxpacket: 16
[  210.490219][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.504566][ T5295] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.523755][ T5295] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[  210.533493][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.558897][ T5295] usb 3-1: config 0 descriptor??
[  210.761693][ T5319] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  210.820123][    T9] usb 4-1: clie_3_5_startup: get interface number bad return length: 0
[  210.840642][    T9] visor 4-1:0.0: probe with driver visor failed with error -5
[  210.945793][ T5319] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[  210.964698][ T5319] usb 6-1: config 0 has no interface number 0
[  210.971016][ T5319] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  210.993861][ T5319] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  211.008066][ T5295] smartjoyplus 0003:6666:8804.001E: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0
[  211.029154][    T9] usb 4-1: USB disconnect, device number 11
[  211.033415][ T5295] smartjoyplus 0003:6666:8804.001E: no output reports found
[  211.043927][ T5319] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  211.057881][ T5319] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64
[  211.070418][ T5319] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  211.083884][ T5319] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  211.094132][ T5319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.115466][ T5319] usb 6-1: config 0 descriptor??
[  211.123408][ T9225] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  211.151872][ T5278] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  211.172032][ T5319] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  211.206515][ T5319] usb 3-1: USB disconnect, device number 8
[  211.291874][ T9231] loop0: detected capacity change from 0 to 32768
[  211.299436][ T9231] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1406 (9231)
[  211.314904][ T5278] usb 2-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00
[  211.324124][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.336249][ T9231] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  211.348305][ T5278] usb 2-1: config 0 descriptor??
[  211.354284][ T9231] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm
[  211.382133][ T9231] BTRFS info (device loop0): using free-space-tree
[  211.400193][    T9] usb 6-1: USB disconnect, device number 9
[  211.408696][    T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[  211.452310][ T9231] BTRFS info (device loop0): rebuilding free space tree
[  211.604584][ T5793] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  211.791746][ T5278] aquacomputer_d5next 0003:0C70:F010.001F: hidraw0: USB HID vff.fd Device [HID 0c70:f010] on usb-dummy_hcd.1-1/input0
[  212.013793][ T5278] usb 2-1: USB disconnect, device number 15
[  212.184627][ T9258] loop5: detected capacity change from 0 to 128
[  212.191930][ T9258] EXT4-fs: Ignoring removed mblk_io_submit option
[  212.383026][ T9258] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.431369][ T9258] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  212.460781][ T9250] loop3: detected capacity change from 0 to 32768
[  212.463899][ T5295] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  212.545636][ T9250] JBD2: Ignoring recovery information on journal
[  212.662278][ T9250] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  212.682044][ T5295] usb 5-1: Using ep0 maxpacket: 8
[  212.693297][ T5295] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  212.702257][ T5295] usb 5-1: config 0 has no interface number 0
[  212.708567][ T5295] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  212.748588][    T9] hid-generic 0001:0784:0007.0020: item fetching failed at offset 0/1
[  212.775802][ T5295] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  212.776911][    T9] hid-generic 0001:0784:0007.0020: probe with driver hid-generic failed with error -22
[  212.823766][ T5295] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  212.831238][ T5239] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  212.859392][ T5295] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  212.889888][ T5229] ocfs2: Unmounting device (7,3) on (node local)
[  212.939435][ T5295] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  212.989830][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.023704][ T5295] usb 5-1: config 0 descriptor??
[  213.043909][ T9281] loop5: detected capacity change from 0 to 16
[  213.054136][ T5295] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  213.080916][ T9285] loop0: detected capacity change from 0 to 1024
[  213.090022][ T9281] erofs: (device loop5): mounted with root inode @ nid 36.
[  213.104021][ T9285] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  213.121677][ T9285] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  213.142439][ T9285] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  213.173372][ T9285] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: inode #5: comm syz.0.1423: unexpected bad inode w/o EXT4_IGET_BAD
[  213.242538][ T9285] EXT4-fs (loop0): no journal found
[  213.247823][ T9285] EXT4-fs (loop0): can't get journal size
[  213.283021][ T5295] usb 5-1: USB disconnect, device number 10
[  213.294303][ T5295] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  213.302602][ T9285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  213.343340][ T9293] loop2: detected capacity change from 0 to 1024
[  213.356305][ T9285] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1423: bg 0: block 32: padding at end of block bitmap is not set
[  213.503174][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.539562][ T9293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.663908][ T9293] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  213.782303][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'.
[  213.791323][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'.
[  213.816914][ T8528] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.825348][ T9306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'.
[  214.156230][ T5245] Bluetooth: hci3: command tx timeout
[  214.251700][ T5295] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  214.421975][ T5295] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  214.431080][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.481038][ T5295] usb 4-1: config 0 descriptor??
[  214.586118][ T9331] loop2: detected capacity change from 0 to 4096
[  214.931905][ T9341] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  214.962869][ T5295] hid-alps 0003:044E:120B.0021: unknown main item tag 0x0
[  214.989733][ T5295] hid-alps 0003:044E:120B.0021: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.3-1/input0
[  215.015855][ T9331] ntfs3(loop2): failed to convert "0080" to cp869
[  215.033617][ T9331] ntfs3(loop2): failed to convert name for inode 1e.
[  215.150459][    T9] usb 4-1: USB disconnect, device number 12
[  215.213523][ T9329] loop5: detected capacity change from 0 to 32768
[  215.220733][ T9329] XFS: ikeep mount option is deprecated.
[  215.314498][ T9354] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1452'.
[  215.321934][ T9329] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  215.468838][ T9329] XFS (loop5): Ending clean mount
[  215.495432][ T9328] loop1: detected capacity change from 0 to 40427
[  215.522669][ T9329] XFS (loop5): Quotacheck needed: Please wait.
[  215.583822][ T9369] loop0: detected capacity change from 0 to 1024
[  215.667261][ T9329] XFS (loop5): Quotacheck: Done.
[  215.679733][ T9328] F2FS-fs (loop1): Found nat_bits in checkpoint
[  215.796033][ T9365] loop2: detected capacity change from 0 to 32768
[  215.914892][ T5239] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  216.022054][ T9328] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.214048][ T9384] loop0: detected capacity change from 0 to 64
[  216.271941][ T5228] syz-executor: attempt to access beyond end of device
[  216.271941][ T5228] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  216.316993][ T5228] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  216.391743][ T5246] Bluetooth: hci5: command 0x0406 tx timeout
[  216.414990][ T5235] Bluetooth: hci0: command 0x0405 tx timeout
[  216.672808][ T9393] loop2: detected capacity change from 0 to 1024
[  216.941358][   T81] hfsplus: b-tree write err: -5, ino 4
[  217.303975][ T9408] loop1: detected capacity change from 0 to 256
[  217.341198][ T9408] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  217.354848][ T9413] loop5: detected capacity change from 0 to 512
[  217.403330][ T9413] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  217.450671][ T9413] EXT4-fs (loop5): invalid journal inode
[  217.469931][ T9413] EXT4-fs (loop5): can't get journal size
[  217.554271][ T9418] loop0: detected capacity change from 0 to 256
[  217.588749][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1476'.
[  217.634326][ T9425] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0
[  217.740463][ T9410] loop3: detected capacity change from 0 to 32768
[  217.747728][ T9410] bcachefs: bch2_parse_one_mount_opt() Invalid mount option str_hash: invalid selection
[  217.824394][ T9427] loop1: detected capacity change from 0 to 1024
[  217.857979][ T9427] EXT4-fs: Ignoring removed nomblk_io_submit option
[  217.923167][ T9416] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  217.930206][ T9416] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  217.955873][ T9416] vhci_hcd vhci_hcd.0: Device attached
[  217.992208][ T9417] vhci_hcd: connection closed
[  217.992842][ T9427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.012934][ T9413] EXT4-fs (loop5): 1 truncate cleaned up
[  218.019577][ T9413] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  218.036421][   T62] vhci_hcd: stop threads
[  218.052724][   T62] vhci_hcd: release socket
[  218.057239][   T62] vhci_hcd: disconnect device
[  218.094910][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.345964][ T9404] loop2: detected capacity change from 0 to 40427
[  218.361950][ T9404] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff
[  218.371146][ T9404] F2FS-fs (loop2): Image doesn't support compression
[  218.378861][ T9404] F2FS-fs (loop2): Image doesn't support compression
[  218.381269][ T5239] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.397648][ T9404] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4
[  218.429251][ T9404] F2FS-fs (loop2): invalid crc value
[  218.519577][ T9404] F2FS-fs (loop2): Found nat_bits in checkpoint
[  218.534179][ T9450] loop3: detected capacity change from 0 to 64
[  218.738664][ T9404] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  218.882489][ T8528] syz-executor: attempt to access beyond end of device
[  218.882489][ T8528] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  218.922180][ T8528] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  219.094678][ T9471] lo speed is unknown, defaulting to 1000
[  219.131448][ T9471] lo speed is unknown, defaulting to 1000
[  219.175353][ T9471] lo speed is unknown, defaulting to 1000
[  219.187834][ T9471] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  219.232060][ T9477] loop4: detected capacity change from 0 to 256
[  219.288840][ T9479] loop3: detected capacity change from 0 to 4096
[  219.300710][ T9471] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  219.328977][ T9477] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  219.372875][ T9471] lo speed is unknown, defaulting to 1000
[  219.504034][ T9471] lo speed is unknown, defaulting to 1000
[  219.537165][ T9483] openvswitch: netlink: Unknown key attributes 1
[  219.549960][ T9471] lo speed is unknown, defaulting to 1000
[  219.593042][ T9471] lo speed is unknown, defaulting to 1000
[  219.599858][ T9471] lo speed is unknown, defaulting to 1000
[  219.642778][ T9471] lo speed is unknown, defaulting to 1000
[  219.726697][ T9456] loop5: detected capacity change from 0 to 32768
[  219.742879][ T9471] lo speed is unknown, defaulting to 1000
[  219.920608][ T9456] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  219.945125][ T9456] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  219.975522][ T9456] bcachefs (loop5): Version upgrade required:
[  219.975522][ T9456] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  219.975522][ T9456] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  219.975522][ T9456]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  220.097904][ T9456] bcachefs (loop5): dropping and reconstructing all alloc info
[  220.239981][ T9456] bcachefs (loop5): check_topology... done
[  220.253942][ T9456] bcachefs (loop5): accounting_read... done
[  220.270411][ T9456] bcachefs (loop5): alloc_read... done
[  220.278525][ T9456] bcachefs (loop5): stripes_read... done
[  220.287955][ T9456] bcachefs (loop5): snapshots_read... done
[  220.342567][ T9456] bcachefs (loop5): check_allocations...
[  220.419613][ T3179] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.450938][ T9456]  done
[  220.483107][ T9456] bcachefs (loop5): going read-write
[  220.537485][ T9456] bcachefs (loop5): done starting filesystem
[  220.629490][ T3179] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.710448][ T5239] bcachefs (loop5): shutting down
[  220.718301][ T5239] bcachefs (loop5): going read-only
[  220.724680][ T5239] bcachefs (loop5): finished waiting for writes to stop
[  220.779947][ T9506] loop0: detected capacity change from 0 to 32768
[  220.793195][ T5239] bcachefs (loop5): flushing journal and stopping allocators, journal seq 12
[  220.940528][ T9506] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  221.016851][ T4617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  221.034771][ T3179] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.057930][ T4617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  221.067364][ T4617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  221.076704][ T4617] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  221.124289][ T4617] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  221.132401][ T4617] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  221.161699][ T5294] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  221.208148][ T5793] ocfs2: Unmounting device (7,0) on (node local)
[  221.216589][   T12] bcachefs (loop5): bch2_write_super(): fatal error  loop5: Superblock write was silently dropped! (seq 0 expected 54)
[  221.281845][   T12] bcachefs (loop5): fatal error - emergency read only
[  221.330649][ T5239] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 14
[  221.388391][ T3179] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.399462][ T5239] bcachefs (loop5): unshutdown complete, journal seq 14
[  221.407735][ T5239] bcachefs (loop5): done going read-only, filesystem not clean
[  221.422007][ T9539] loop0: detected capacity change from 0 to 512
[  221.483781][ T5294] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  221.495521][ T5294] usb 2-1: config 1 has no interface number 0
[  221.505483][ T5294] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.509864][ T5239] bcachefs (loop5): shutdown complete
[  221.517138][ T5294] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  221.530981][ T9539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.531925][ T5294] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[  221.554178][ T5294] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  221.562119][ T9530] lo speed is unknown, defaulting to 1000
[  221.567031][ T5294] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  221.581940][ T5294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.590059][ T5294] usb 2-1: Product: syz
[  221.594456][ T5294] usb 2-1: Manufacturer: syz
[  221.599076][ T5294] usb 2-1: SerialNumber: syz
[  221.612032][ T9539] ext4 filesystem being mounted at /233/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.666626][ T9539] EXT4-fs: Cannot change journaled quota options when quota turned on
[  221.744296][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.861219][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'.
[  221.880656][ T5294] cdc_ncm 2-1:1.1: bind() failure
[  221.900233][ T5294] usb 2-1: USB disconnect, device number 16
[  221.922937][ T3179] bridge_slave_1: left allmulticast mode
[  221.931415][ T3179] bridge_slave_1: left promiscuous mode
[  221.947035][ T3179] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.008319][ T3179] bridge_slave_0: left allmulticast mode
[  222.018316][ T3179] bridge_slave_0: left promiscuous mode
[  222.044861][ T3179] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.138749][ T9550] loop0: detected capacity change from 0 to 512
[  222.140333][ T9535] loop2: detected capacity change from 0 to 32768
[  222.173013][ T9535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1522 (9535)
[  222.178992][ T9550] EXT4-fs: Ignoring removed oldalloc option
[  222.209294][ T9535] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.283041][ T9535] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  222.294269][ T9550] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1527: Parent and EA inode have the same ino 15
[  222.310329][ T9535] BTRFS info (device loop2): using free-space-tree
[  222.340399][ T9550] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.1527: Parent and EA inode have the same ino 15
[  222.359213][ T9550] EXT4-fs (loop0): 1 orphan inode deleted
[  222.365288][ T9543] loop3: detected capacity change from 0 to 32768
[  222.374988][ T9550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.445665][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.533177][ T9543] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.621980][ T9571] loop1: detected capacity change from 0 to 512
[  222.650796][ T9571] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  222.741256][ T9571] EXT4-fs (loop1): 1 truncate cleaned up
[  222.760838][ T9571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.806333][ T8528] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  222.922491][ T9543] XFS (loop3): Ending clean mount
[  222.939720][ T9571] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback.
[  222.993525][ T9543] XFS (loop3): Quotacheck needed: Please wait.
[  223.022992][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.093729][ T9543] XFS (loop3): Quotacheck: Done.
[  223.210567][ T4617] Bluetooth: hci6: command tx timeout
[  223.245831][ T5229] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.325303][ T9578] loop0: detected capacity change from 0 to 32768
[  223.608378][ T3179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  223.794371][ T3179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  223.853879][ T9578] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc
[  223.874453][ T9578] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  223.877554][ T3179] bond0 (unregistering): Released all slaves
[  223.882733][ T9578] bcachefs (loop0): Version upgrade required:
[  223.882733][ T9578] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  223.882733][ T9578] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[  223.882733][ T9578]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  223.965741][ T9578] bcachefs (loop0): dropping and reconstructing all alloc info
[  224.018604][ T9578] bcachefs (loop0): check_topology... done
[  224.031594][ T9578] bcachefs (loop0): accounting_read... done
[  224.091675][ T9578] bcachefs (loop0): alloc_read... done
[  224.113133][ T3179] tipc: Left network mode
[  224.113831][ T9578] bcachefs (loop0): stripes_read... done
[  224.152790][ T9578] bcachefs (loop0): snapshots_read... done
[  224.187052][ T9578] bcachefs (loop0): check_allocations...
[  224.193251][ T3179] IPVS: stopping backup sync thread 9425 ...
[  224.200810][ T9603] netlink: 'syz.3.1536': attribute type 3 has an invalid length.
[  224.216399][ T9530] chnl_net:caif_netlink_parms(): no params data found
[  224.274690][ T9603] netlink: 'syz.3.1536': attribute type 1 has an invalid length.
[  224.286777][ T9605] loop1: detected capacity change from 0 to 256
[  224.301769][ T9578]  done
[  224.318272][ T9578] bcachefs (loop0): going read-write
[  224.344599][ T9578] bcachefs (loop0): done starting filesystem
[  224.359263][ T9603] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1536'.
[  224.509090][ T9591] loop2: detected capacity change from 0 to 32768
[  224.564748][ T9591] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  224.661148][ T5793] bcachefs (loop0): shutting down
[  224.667638][ T5793] bcachefs (loop0): going read-only
[  224.673117][ T5793] bcachefs (loop0): finished waiting for writes to stop
[  224.732146][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1542'.
[  224.754889][ T5793] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[  224.779389][ T5793] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 12
[  224.792978][ T9622] RDS: rds_bind could not find a transport for ::4000:20:0:0, load rds_tcp or rds_rdma?
[  224.815711][ T9624] loop5: detected capacity change from 0 to 256
[  224.846499][ T9530] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.861959][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.869299][ T9530] bridge_slave_0: entered allmulticast mode
[  224.889629][ T8528] ocfs2: Unmounting device (7,2) on (node local)
[  224.922167][ T9530] bridge_slave_0: entered promiscuous mode
[  224.959145][ T9530] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.982788][ T5319] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  225.057628][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.066336][ T9530] bridge_slave_1: entered allmulticast mode
[  225.073339][ T9530] bridge_slave_1: entered promiscuous mode
[  225.163823][ T5793] bcachefs (loop0): unshutdown complete, journal seq 15
[  225.172165][ T5793] bcachefs (loop0): done going read-only, filesystem not clean
[  225.239740][ T5793] bcachefs (loop0): shutdown complete
[  225.277455][ T5245] Bluetooth: hci6: command tx timeout
[  225.279109][ T9632] loop5: detected capacity change from 0 to 8
[  225.291762][ T5319] usb 4-1: Using ep0 maxpacket: 8
[  225.423410][ T5319] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  225.433915][ T9632] SQUASHFS error: xz decompression failed, data probably corrupt
[  225.447529][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.464530][ T9632] SQUASHFS error: Failed to read block 0xa8: -5
[  225.469073][ T5319] usb 4-1: Product: syz
[  225.506492][ T9632] SQUASHFS error: xz decompression failed, data probably corrupt
[  225.521752][ T5319] usb 4-1: Manufacturer: syz
[  225.550725][ T9632] SQUASHFS error: Failed to read block 0xa8: -5
[  225.559702][ T5319] usb 4-1: SerialNumber: syz
[  225.568558][ T5319] usb 4-1: config 0 descriptor??
[  225.577792][   T29] audit: type=1800 audit(1729509668.043:51): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1546" name="file0" dev="loop5" ino=3 res=0 errno=0
[  225.641677][ T9530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.665521][ T9530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.757836][ T3179] hsr_slave_0: left promiscuous mode
[  225.764273][ T3179] hsr_slave_1: left promiscuous mode
[  225.774272][ T3179] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.792559][ T3179] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.820241][ T5319] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  225.833313][ T3179] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.868363][ T3179] batman_adv: batadv0: Removing interface: batadv_slave_1
[  226.033444][ T3179] veth1_macvtap: left promiscuous mode
[  226.069709][ T3179] veth0_macvtap: left promiscuous mode
[  226.100241][ T3179] veth1_vlan: left promiscuous mode
[  226.120914][ T9649] loop2: detected capacity change from 0 to 32768
[  226.132071][ T3179] veth0_vlan: left promiscuous mode
[  226.229841][ T5319] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  226.245281][ T5319] usb 4-1: USB disconnect, device number 13
[  226.574978][ T9659] random: crng reseeded on system resumption
[  226.836603][ T9651] loop1: detected capacity change from 0 to 32768
[  227.210963][ T5793] ------------[ cut here ]------------
[  227.217217][ T5793] kernel BUG at fs/bcachefs/btree_cache.c:594!
[  227.234832][ T5793] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI
[  227.242011][ T5793] CPU: 1 UID: 0 PID: 5793 Comm: syz-executor Not tainted 6.12.0-rc4-syzkaller #0
[  227.251163][ T5793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  227.261228][ T5793] RIP: 0010:bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.267788][ T5793] Code: fd 90 0f 0b e8 5d 29 81 fd 90 0f 0b e8 55 29 81 fd 90 0f 0b e8 4d 29 81 fd 90 0f 0b e8 45 29 81 fd 90 0f 0b e8 3d 29 81 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[  227.287426][ T5793] RSP: 0018:ffffc90004187c40 EFLAGS: 00010293
[  227.293688][ T5793] RAX: ffffffff8413bea3 RBX: 0000000000000002 RCX: ffff88802c9bda00
[  227.301678][ T5793] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  227.309660][ T5793] RBP: 1ffff1100f390a16 R08: ffffffff8413b547 R09: 1ffff1100a8103b6
[  227.317644][ T5793] R10: dffffc0000000000 R11: ffffed100a8103b7 R12: ffff888054081c78
[  227.325662][ T5793] R13: ffff888054080000 R14: 0000000000000000 R15: dffffc0000000000
[  227.333648][ T5793] FS:  00005555865ec500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  227.342588][ T5793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.349187][ T5793] CR2: 00007f3b299fe5c0 CR3: 0000000064cf6000 CR4: 0000000000350ef0
[  227.357175][ T5793] Call Trace:
[  227.360458][ T5793]  <TASK>
[  227.363394][ T5793]  ? __die_body+0x5f/0xb0
[  227.367772][ T5793]  ? die+0x9e/0xc0
[  227.371497][ T5793]  ? do_trap+0x15a/0x3a0
[  227.375786][ T5793]  ? bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.381705][ T5793]  ? do_error_trap+0x1dc/0x2c0
[  227.386499][ T5793]  ? bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.392413][ T5793]  ? bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.398520][ T5793]  ? __pfx_do_error_trap+0x10/0x10
[  227.403744][ T5793]  ? report_bug+0x3e8/0x500
[  227.408272][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.413922][ T5793]  ? handle_invalid_op+0x34/0x40
[  227.418886][ T5793]  ? bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.424808][ T5793]  ? exc_invalid_op+0x38/0x50
[  227.429591][ T5793]  ? asm_exc_invalid_op+0x1a/0x20
[  227.434627][ T5793]  ? bch2_fs_btree_cache_exit+0x7c7/0x1130
[  227.440454][ T5793]  ? bch2_fs_btree_cache_exit+0x1123/0x1130
[  227.446371][ T5793]  ? bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.452293][ T5793]  bch2_fs_release+0x20e/0x7d0
[  227.457067][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.462801][ T5793]  ? kobject_put+0x44d/0x480
[  227.467413][ T5793]  kobject_put+0x231/0x480
[  227.471846][ T5793]  deactivate_locked_super+0xc6/0x130
[  227.477359][ T5793]  cleanup_mnt+0x41f/0x4b0
[  227.481796][ T5793]  ? srso_alias_return_thunk+0x5/0xfbef5
[  227.487642][ T5793]  ? lockdep_hardirqs_on+0x99/0x150
[  227.492880][ T5793]  task_work_run+0x251/0x310
[  227.497667][ T5793]  ? __pfx_task_work_run+0x10/0x10
[  227.502799][ T5793]  ? __x64_sys_umount+0x123/0x170
[  227.507836][ T5793]  ? syscall_exit_to_user_mode+0xa3/0x370
[  227.513738][ T5793]  syscall_exit_to_user_mode+0x168/0x370
[  227.519380][ T5793]  do_syscall_64+0x100/0x230
[  227.524005][ T5793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  227.529934][ T5793] RIP: 0033:0x7f569ad7f327
[  227.534360][ T5793] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  227.553985][ T5793] RSP: 002b:00007ffee3967d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  227.562587][ T5793] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f569ad7f327
[  227.570669][ T5793] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee3967e30
[  227.578652][ T5793] RBP: 00007ffee3967e30 R08: 0000000000000000 R09: 0000000000000000
[  227.586621][ T5793] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee3968eb0
[  227.594592][ T5793] R13: 00007f569adf0134 R14: 000000000003657e R15: 00007ffee3968ef0
[  227.602574][ T5793]  </TASK>
[  227.605586][ T5793] Modules linked in:
[  227.610898][ T5793] ---[ end trace 0000000000000000 ]---
[  227.626999][ T5245] Bluetooth: hci6: command tx timeout
[  227.637711][ T5793] RIP: 0010:bch2_fs_btree_cache_exit+0x1124/0x1130
[  227.644380][ T5793] Code: fd 90 0f 0b e8 5d 29 81 fd 90 0f 0b e8 55 29 81 fd 90 0f 0b e8 4d 29 81 fd 90 0f 0b e8 45 29 81 fd 90 0f 0b e8 3d 29 81 fd 90 <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90
[  227.664326][ T5793] RSP: 0018:ffffc90004187c40 EFLAGS: 00010293
[  227.670463][ T5793] RAX: ffffffff8413bea3 RBX: 0000000000000002 RCX: ffff88802c9bda00
[  227.709608][ T9651] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,norecovery,nojournal_transaction_names,allocator_stuck_timeout=32767
[  227.712115][ T5793] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000
[  227.729906][ T9651] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  227.758690][ T5793] RBP: 1ffff1100f390a16 R08: ffffffff8413b547 R09: 1ffff1100a8103b6
[  227.776166][ T5793] R10: dffffc0000000000 R11: ffffed100a8103b7 R12: ffff888054081c78
[  227.786982][ T5793] R13: ffff888054080000 R14: 0000000000000000 R15: dffffc0000000000
[  227.797469][ T5793] FS:  00005555865ec500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  227.805285][ T9651] bcachefs (loop1): accounting_read... done
[  227.808447][ T5793] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  227.814080][ T9651] bcachefs (loop1): alloc_read...
[  227.819444][ T5793] CR2: 000055b5eb246600 CR3: 0000000064cf6000 CR4: 0000000000350ef0
[  227.819474][ T5793] Kernel panic - not syncing: Fatal exception
[  227.824661][ T5793] Kernel Offset: disabled