last executing test programs:

10m44.233392981s ago: executing program 2 (id=676):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010004, &(0x7f00000000c0)={[{@nobh}, {@jqfmt_vfsv0}, {@minixdf}]}, 0x3, 0x4f8, &(0x7f0000000800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x91)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

10m43.468984136s ago: executing program 2 (id=680):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0xd0, 0xfffdf038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)

10m43.245948489s ago: executing program 2 (id=681):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff024}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0)

10m42.870221211s ago: executing program 2 (id=687):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})

10m42.011984032s ago: executing program 2 (id=696):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x2, 0x10001, {}, {0x1, 0x2, 0x6, 0x6, 0x9, 0x2, "26fd4de3"}, 0x6, 0x4, {}, 0x5})

10m41.240601707s ago: executing program 2 (id=701):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000108000045d713a5df25021800000000000800000000080001"], 0x24}}, 0x0)

10m40.745445246s ago: executing program 32 (id=701):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000108000045d713a5df25021800000000000800000000080001"], 0x24}}, 0x0)

5m51.294146473s ago: executing program 3 (id=3600):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x9, @loopback, 0x4000006}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x2680000}, 0x1c)

5m51.078901066s ago: executing program 3 (id=3602):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0xf36, &(0x7f0000008900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x401c5820, &(0x7f0000000000)={@desc={0xd32780, 0x0, @auto="ee04c7403ecb4938"}})

5m50.608505403s ago: executing program 3 (id=3607):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
writev(r0, 0x0, 0x0)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000000c0))

5m50.175525149s ago: executing program 3 (id=3611):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc02, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'macturkish'}}, {}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@keep_last_dots}, {@keep_last_dots}, {@namecase}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {}]}, 0x1, 0x151e, &(0x7f0000007640)="$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")
mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0)

5m49.898470425s ago: executing program 3 (id=3613):
syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042)
syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2)
syz_open_dev$amidi(&(0x7f0000000000), 0x200, 0x80041)

5m49.388469005s ago: executing program 3 (id=3614):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x129080, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000080)=0xf5)

5m48.986013029s ago: executing program 33 (id=3614):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x129080, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000080)=0xf5)

1m34.818496984s ago: executing program 1 (id=6024):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x52, 0x884ae4a8fc7b4ada, &(0x7f0000e68000)={0x2, 0x4e24, @local}, 0x10)
shutdown(r0, 0x1)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0)

1m34.654704815s ago: executing program 1 (id=6026):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe, 0x1000000})

1m34.288622176s ago: executing program 1 (id=6029):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971})
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000005c0)={0x1, 0x0, [{0x0, 0x3, 0x1, 0x0, @adapter={0x8000000000000001, 0x80000000, 0x1, 0x3, 0xfffffffd}}]})

1m34.007108842s ago: executing program 1 (id=6031):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

1m33.799503635s ago: executing program 1 (id=6033):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0xe, 0x0)

1m33.135187463s ago: executing program 1 (id=6040):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27)

1m32.629981554s ago: executing program 34 (id=6040):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX=r1], 0x27)

1m23.169018849s ago: executing program 5 (id=6104):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x25, 0x2000, @fd, 0xb, 0x5, 0x8020, 0x7, 0x0, {0x2}})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'team_slave_1\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x33, "a4c3ea051fc8f66eedf1c6676b4e9ac4711a3ee41b102a78284f8818400000fe", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba934683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda467f0000000000000000008000", "9900255a099270427859ce54", 0xa1, 0x9, 0x4, 0x5, 0x9}})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

1m22.926261743s ago: executing program 5 (id=6106):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x148, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffc00}]}, 0x148}}, 0x844)

1m22.670499937s ago: executing program 5 (id=6108):
r0 = io_uring_setup(0x19be, &(0x7f0000000500)={0x0, 0x709f, 0x8, 0x2, 0xef})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1)
io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1)

1m22.492417168s ago: executing program 5 (id=6110):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4040, &(0x7f00000002c0)={[{@creator={'creator', 0x3d, "1c4cdc1a"}}, {@type={'type', 0x3d, "e833026f"}}, {@gid}, {@uid}, {}, {@part={'part', 0x3d, 0x2}}, {@creator={'creator', 0x3d, "338be97f"}}, {}, {@part={'part', 0x3d, 0x7}}, {@nobarrier}]}, 0x20, 0x6fe, &(0x7f0000000480)="$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")
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020)

1m22.058457374s ago: executing program 5 (id=6113):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x200900)

1m21.545717944s ago: executing program 5 (id=6116):
capset(&(0x7f0000000980)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x5})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)

1m21.151121727s ago: executing program 35 (id=6116):
capset(&(0x7f0000000980)={0x19980330}, &(0x7f0000000200)={0x200002, 0x200003, 0x9, 0x8000004, 0x7, 0x5})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8b}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70)

5.732665013s ago: executing program 0 (id=6705):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x61, 0xfd, 0xcb, 0x8, 0xfd9, 0x2a, 0xa946, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x1, 0x90, 0x6, [{{0x9, 0x4, 0x1d, 0x1b, 0x1, 0xb2, 0x36, 0x95, 0x5b, [], [{{0x9, 0x5, 0x80, 0x2, 0x8, 0x4, 0x3, 0x7}}]}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

3.39109963s ago: executing program 7 (id=6715):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2901842, 0x0, 0x0, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1d0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x2)

2.444570006s ago: executing program 0 (id=6719):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000640)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.257001647s ago: executing program 0 (id=6721):
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0)
recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010)

2.250589387s ago: executing program 7 (id=6722):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x37d}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000680)="b16b", 0x2}], 0x1}}], 0x1, 0x8004)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x0, 0x20}, &(0x7f00000005c0)=0xc)

2.052489429s ago: executing program 0 (id=6723):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00))
symlinkat(&(0x7f0000001040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18)

1.836231092s ago: executing program 0 (id=6724):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x8000001})
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
creat(&(0x7f0000000100)='./file2\x00', 0x12)

1.637655373s ago: executing program 0 (id=6726):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f00000005c0)={0x0, 0xa, 0x3, "000340"}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.436575965s ago: executing program 7 (id=6728):
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x200480, &(0x7f00000002c0)=ANY=[], 0xfd, 0x2a1, &(0x7f00000006c0)="$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")
setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0)
pwrite64(r0, &(0x7f0000000280)='l', 0x1, 0x404142ffc)

1.270095625s ago: executing program 7 (id=6730):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20)
r1 = socket(0x2, 0x3, 0xff)
sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000300)="f5a7933a00"/20, 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000)

1.172595601s ago: executing program 4 (id=6731):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xdc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x19, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x4005d, 0x0, 0x7ff, 0x1fe}}, {0x4}}]}]}, 0xdc}}, 0x0)

1.106387085s ago: executing program 7 (id=6732):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00')
pread64(r1, &(0x7f0000000100)=""/151, 0x97, 0xb6)

1.01641745s ago: executing program 4 (id=6734):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x29c}]})

925.332395ms ago: executing program 7 (id=6736):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}, 0xfb, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)

822.293512ms ago: executing program 4 (id=6737):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000002c0)={0x28, 0x10006, 0x0, r1, 0x3ab820, 0xd628, 0x0, 0x17342a})

813.730452ms ago: executing program 6 (id=6738):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-ssse3\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
sendmsg$sock(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='*', 0x1}, {&(0x7f00000002c0)="470e8a89e6279e8382a36797063c19c85433675ac7cfe879c46c596bb2f6930647c649c728470dd7387d80a110a66b9124df11f2de47bb20de4c42c4e4260d", 0x3f}], 0x2}, 0x0)

747.838466ms ago: executing program 4 (id=6739):
unshare(0x22020400)
r0 = socket(0x10, 0x80002, 0x2)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)

708.571558ms ago: executing program 6 (id=6740):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c00)=@newtaction={0xe68, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x7, 0x1, 0x10000000, 0x4, 0xaee}, 0x7, 0x7}, [{0x8, 0xfffff000, 0x2, 0x9, 0x1ff, 0xafe}, {0xe, 0xfffffffe, 0x1, 0x9, 0x4, 0x7}, {0x2, 0xfe73, 0x6, 0x8, 0x2, 0x10000}, {0x4320, 0x3bf6, 0x4, 0x8, 0xffffff9d, 0x4}, {0x6, 0x40, 0x3, 0x986, 0xffff6d72, 0xbf5}, {0x7ff, 0x9ef, 0x1, 0x3, 0x9, 0x81}, {0x7f, 0x5752, 0x0, 0x9, 0x7}, {0x9, 0xe6, 0xa000, 0x8, 0x5, 0xa17}, {0x7, 0x200, 0x1000, 0x80, 0x4, 0x1}, {0x7, 0x80000000, 0x40, 0x3, 0xfffffff2, 0x8}, {0x5, 0xfff, 0xe4af, 0x5, 0x8, 0x7}, {0x6, 0xd, 0x22e, 0x400, 0x6971, 0xfff}, {0x6, 0x8, 0x6, 0x2, 0x4, 0x3}, {0x83, 0x3, 0x4, 0x7, 0x9, 0xaa7}, {0x5, 0x5, 0x4, 0x80, 0x0, 0x100}, {0x4, 0x8, 0x9, 0x1, 0x2, 0x9}, {0x2690, 0x7ff, 0x11, 0xd, 0x2, 0x722dadd0}, {0x4b, 0x5, 0x9, 0x9, 0x279, 0x3}, {0x7, 0x7b5a, 0x4, 0x0, 0xfffffffb, 0x7fffffff}, {0x0, 0x0, 0x6fbc79d2, 0x9, 0x401, 0x5}, {0x0, 0x527e, 0xc7, 0x4, 0x80, 0x7}, {0x4, 0xd, 0x5, 0xbd52, 0x80, 0xef35}, {0x9, 0xb, 0x4, 0x8001, 0xfffffff8, 0x1}, {0x3, 0x8, 0xd, 0x83, 0x9, 0x400}, {0x8000, 0x74dfe8ce, 0x956b, 0x4, 0x2, 0xfffffff4}, {0xf2, 0x1ee, 0x5, 0xfffffd14, 0x9, 0x40}, {0x0, 0xd, 0x9, 0x8, 0xffffffff, 0x1}, {0xfffff125, 0x1000, 0x1ff, 0xfffffffe, 0x3, 0x1}, {0x0, 0xfffffff9, 0x6, 0x3, 0x7fffffff, 0x20000002}, {0x800ec, 0x8, 0x8f1, 0xfffffffb, 0xa, 0x10000}, {0x6, 0x726, 0x6, 0x8, 0xfff, 0x9}, {0x5, 0x9, 0x3, 0x5, 0x3, 0x2}, {0x4, 0xffff, 0x5, 0xfffffffe, 0x7f, 0x6}, {0x400, 0xf, 0xcf, 0xc, 0x4022, 0x4}, {0x4, 0x4, 0x8, 0xfff, 0x6, 0x1}, {0xffff, 0x3, 0xb5, 0x433, 0x6, 0x6}, {0x10000, 0x0, 0x7, 0x9, 0x20, 0x4}, {0x4, 0x9, 0x594, 0xf90, 0xc, 0x3}, {0x5, 0x657a0ecc, 0x10000, 0xa4, 0x0, 0x7}, {0x8, 0xde, 0x2, 0x4, 0x8001, 0x2}, {0x2, 0xe4, 0xe, 0x2, 0x0, 0x9}, {0x3, 0xff, 0x6, 0x7, 0x7, 0x9}, {0x42, 0x2, 0x6, 0x7, 0xae45, 0x5}, {0x4, 0x10001, 0x5, 0x80, 0x7fffffff, 0x5}, {0x7, 0x3, 0x3, 0x9, 0x0, 0x4}, {0x7ff, 0x2, 0x8, 0x8, 0x9, 0x5}, {0x1, 0x1, 0x4, 0x800, 0x0, 0x8}, {0x8, 0x5, 0x3fd, 0x4, 0xffffffff, 0x7}, {0x4, 0x0, 0x6, 0x5, 0x9, 0x9}, {0x3, 0x80000001, 0xb, 0x1, 0x80000000}, {0x0, 0xfffffff7, 0x84e5, 0x7f, 0x3a, 0x3fd}, {0x8000, 0x7, 0x2, 0xd8, 0x2000000a}, {0x9, 0x1004, 0x8, 0x6, 0x1, 0x2}, {0x0, 0x9, 0x9, 0xd, 0x7fffffff, 0xfffffc00}, {0x1, 0xfffffffc, 0x6, 0x2, 0xc0, 0xfffff44c}, {0x4, 0x2, 0xfffffff3, 0x9, 0xbe, 0x4}, {0x6, 0x3, 0x0, 0x7fff, 0x5, 0x7ff}, {0x400, 0x7, 0x80000000, 0x5, 0xfffffff7, 0x1}, {0x7, 0x100000, 0x200, 0x9, 0xbc, 0xf}, {0x1ff, 0xfffffffc, 0x1, 0x4, 0x1, 0x2}, {0x10000, 0x3, 0x5, 0x111, 0x7, 0x2}, {0x1d, 0x3, 0xda62, 0x4, 0x2, 0x8}, {0xb8000000, 0xfffffff8, 0x7, 0x9, 0x0, 0x49}, {0x8, 0x401, 0x9, 0x332a, 0x1, 0x2}, {0xfa0, 0x6, 0x2, 0x7, 0x8, 0x80}, {0x10001, 0x4, 0x400, 0x9, 0x6, 0xdbce}, {0x1, 0x57f, 0x800, 0xe49, 0x0, 0xa81c}, {0x5, 0x8, 0xa, 0x10, 0x6, 0x8}, {0x7f, 0xf, 0x1, 0x5, 0x401}, {0x7f, 0x4, 0x6, 0x2, 0x3}, {0x625, 0x80000001, 0xfc4, 0xfffffffd, 0x7}, {0x6, 0xfffffffc, 0x95db, 0x3d0b, 0x3, 0x80000001}, {0x7fff, 0x2, 0xffffff7f, 0x383, 0x8, 0x1}, {0x9, 0x4, 0x1, 0x80000000, 0xae, 0x9}, {0x9, 0xffffff80, 0xffff, 0xfff, 0x3, 0x3ff}, {0x47, 0x2, 0xb2f9, 0xbf, 0x1ff, 0x9}, {0xe, 0x310, 0x2, 0xad0, 0x7fffffff, 0x859}, {0x7, 0x6, 0x2, 0x1, 0x6, 0x3}, {0x7bf65384, 0x8, 0xe87, 0x215ac34e, 0x3, 0xfffffffd}, {0x3, 0x2, 0x1fd, 0x7, 0x2, 0x6}, {0x3, 0x0, 0x3, 0x80000001, 0xc3, 0xa9d}, {0x8, 0x200, 0x8, 0x8, 0xc, 0x2}, {0x4, 0x4, 0x13ca, 0x74, 0x2, 0x1}, {0x2, 0x2, 0x1, 0x7fff, 0x14, 0x3}, {0x80000000, 0x4, 0x899, 0xfff, 0x0, 0x2}, {0x5, 0x80000, 0x0, 0x1, 0x3, 0x3}, {0x400, 0x5, 0x3ff, 0x3, 0xd, 0x7769}, {0x2, 0x20000000, 0x3, 0x6, 0x81, 0x5}, {0x6, 0x0, 0x1, 0x40, 0x9, 0x7}, {0x8, 0x0, 0xd, 0x6, 0x5}, {0x3, 0x9, 0x1, 0x3b1c, 0x2, 0x6}, {0x4, 0x49354bbb, 0x2, 0x3, 0x7, 0x9}, {0x5, 0x2, 0x10, 0x9, 0x2, 0x400}, {0xfff, 0x54, 0x8, 0x9, 0x0, 0x6}, {0x401, 0x6, 0xff, 0x6, 0x3, 0x3}, {0x80000000, 0x7d, 0x2, 0xb, 0x81, 0x3}, {0xc45c, 0xa, 0x0, 0x2, 0x4, 0x2}, {0x7, 0x6, 0x86, 0x9, 0x3, 0x8001}, {0x3a, 0x7eb, 0x4, 0x9, 0x9, 0x5}, {0x7011, 0xfff, 0x9, 0x1, 0x9, 0x2}, {0x1, 0xff, 0x8, 0x2968, 0x2, 0xfffffffc}, {0x1, 0x9, 0xc402, 0x1, 0x100, 0xc72}, {0xfffffff9, 0x5, 0x81, 0x26, 0x9, 0x1}, {0x7ff, 0x81, 0xfffffff8, 0x401, 0x5, 0x3ff}, {0x6, 0x6, 0xd, 0x0, 0x6e5f, 0x80}, {0x4, 0x3ff, 0xb, 0x0, 0x0, 0x6}, {0x0, 0x4, 0x81, 0x4, 0x10, 0x4}, {0x7, 0x4, 0x81, 0x6, 0xf, 0x6}, {0x3, 0xff, 0x2, 0x7f, 0x4, 0x5}, {0x4, 0x8, 0xd, 0x1, 0x5, 0x4}, {0xcab, 0xd, 0x4, 0xf, 0x8, 0x7}, {0x1, 0x2, 0x3, 0x5, 0x7, 0x34}, {0x0, 0x6, 0x10000, 0x8, 0xbb, 0x7fffffff}, {0x2, 0x9, 0x9, 0x9, 0x80, 0x7}, {0x39e3, 0x9, 0x0, 0x0, 0x31, 0x3}, {0xfffffffc, 0x4, 0x0, 0xbe50, 0x40, 0x7}, {0xe, 0x5, 0x7, 0xffffffff, 0x10, 0x1}, {0x5, 0x1000, 0x9, 0x4, 0x24e, 0x4}, {0x7, 0x7, 0x7, 0x80000000, 0x1, 0x5}, {0x7, 0x9, 0x4, 0x8dad, 0xaacd, 0x7}, {0x1, 0x101, 0x3, 0x7, 0x4, 0x7}, {0x3ff, 0x3, 0x5, 0x2, 0x0, 0x2}, {0x2, 0x5, 0x7, 0x5, 0x2, 0x8}, {0x3c, 0x3409, 0x3, 0x5, 0x997c, 0x2df0}, {0x2, 0x9, 0x10001, 0x8711, 0x800}, {0x81, 0x0, 0x1, 0x1db, 0x0, 0xb}, {0x2, 0x5, 0x5, 0x5, 0x0, 0x7}, {0x8, 0xdfd3, 0x8, 0x2, 0xfffffffe, 0x2}], [{0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x6}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0xe691a73254f1a9a5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x0, 0x3}, {0x2}, {0x2}, {0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {}, {0x5}, {0x5}, {0x5, 0x1}, {}, {0x2}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x2}, {0x2}, {0x3}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1, 0x708aee799a2a8f33}, {0x4}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x1}, {0x3}, {0x2}, {0x4}, {0x4, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4}, 0x20000015)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x2000000)

630.283152ms ago: executing program 6 (id=6741):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x1, 0x121d, &(0x7f00000024c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)
getdents(r0, 0x0, 0xbb)

623.204683ms ago: executing program 4 (id=6742):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

435.377984ms ago: executing program 6 (id=6743):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x2a}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e0", 0x13}], 0x3}, 0x0)

278.461003ms ago: executing program 6 (id=6744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0x2}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

174.832749ms ago: executing program 6 (id=6745):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

0s ago: executing program 4 (id=6746):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x40000103, 0x0, 0x2}]})

kernel console output (not intermixed with test programs):

9040] loop4: detected capacity change from 0 to 256
[  599.084897][ T5842] microsoft 0003:045E:07DA.0042: ignoring exceeding usage max
[  599.107277][ T5842] HID 045e:07da: Invalid code 65582 type 1
[  599.124777][ T5842] HID 045e:07da: Invalid code 65583 type 1
[  599.133348][T19040] FAT-fs (loop4): Directory bread(block 64) failed
[  599.139922][T19040] FAT-fs (loop4): Directory bread(block 65) failed
[  599.151194][ T5842] HID 045e:07da: Invalid code 65584 type 1
[  599.157057][ T5842] HID 045e:07da: Invalid code 65585 type 1
[  599.172513][T19040] FAT-fs (loop4): Directory bread(block 66) failed
[  599.182981][T19040] FAT-fs (loop4): Directory bread(block 67) failed
[  599.189651][T19040] FAT-fs (loop4): Directory bread(block 68) failed
[  599.196985][ T5842] HID 045e:07da: Invalid code 65586 type 1
[  599.202827][ T5842] HID 045e:07da: Invalid code 65587 type 1
[  599.219269][ T5842] HID 045e:07da: Invalid code 65588 type 1
[  599.219725][T19040] FAT-fs (loop4): Directory bread(block 69) failed
[  599.225129][ T5842] HID 045e:07da: Invalid code 65589 type 1
[  599.245938][ T5842] HID 045e:07da: Invalid code 65590 type 1
[  599.250543][T19040] FAT-fs (loop4): Directory bread(block 70) failed
[  599.251914][ T5842] HID 045e:07da: Invalid code 65591 type 1
[  599.273671][T19040] FAT-fs (loop4): Directory bread(block 71) failed
[  599.284578][T19040] FAT-fs (loop4): Directory bread(block 72) failed
[  599.303751][ T5842] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0042/input/input51
[  599.332682][T19040] FAT-fs (loop4): Directory bread(block 73) failed
[  599.425014][ T5842] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0
[  599.543487][ T5842] usb 6-1: USB disconnect, device number 9
[  599.633351][T19044] fido_id[19044]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  599.726935][T19046] loop4: detected capacity change from 0 to 64
[  600.241602][T19056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5264'.
[  600.499520][ T5842] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  600.535893][T19066] netlink: 'syz.0.5270': attribute type 10 has an invalid length.
[  600.545804][T19065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  600.558747][T19068] loop4: detected capacity change from 0 to 2048
[  600.582482][T19068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  600.724189][ T5842] usb 6-1: Using ep0 maxpacket: 32
[  600.737980][ T5842] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  600.754472][ T5842] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  600.778055][ T5842] usb 6-1: New USB device found, idVendor=19d2, idProduct=1266, bcdDevice=cd.c2
[  600.780700][T19070] loop4: detected capacity change from 0 to 4096
[  600.787144][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.787168][ T5842] usb 6-1: Product: syz
[  600.787183][ T5842] usb 6-1: Manufacturer: syz
[  600.787197][ T5842] usb 6-1: SerialNumber: syz
[  600.789538][ T5842] usb 6-1: config 0 descriptor??
[  600.799493][T19070] EXT4-fs: Ignoring removed mblk_io_submit option
[  600.843962][T19070] EXT4-fs (loop4): Test dummy encryption mode enabled
[  600.857692][T19070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  600.983461][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  601.074702][ T5842] usb 6-1: USB disconnect, device number 10
[  602.187535][ T5767] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  602.188095][T18049] Bluetooth: hci4: command 0x1003 tx timeout
[  602.526195][T19081] loop5: detected capacity change from 0 to 40427
[  602.549399][T19081] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  602.581486][T19081] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  602.597144][T19081] F2FS-fs (loop5): invalid crc value
[  602.627740][T19081] F2FS-fs (loop5): Found nat_bits in checkpoint
[  602.777322][T19081] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  602.806109][T19081] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  602.896701][T19081] syz.5.5275: attempt to access beyond end of device
[  602.896701][T19081] loop5: rw=2049, sector=77824, nr_sectors = 136 limit=40427
[  603.129936][   T42] kworker/u4:2: attempt to access beyond end of device
[  603.129936][   T42] loop5: rw=1, sector=77856, nr_sectors = 8 limit=40427
[  603.143919][   T42] kworker/u4:2: attempt to access beyond end of device
[  603.143919][   T42] loop5: rw=1, sector=77920, nr_sectors = 8 limit=40427
[  603.203266][T14781] syz-executor: attempt to access beyond end of device
[  603.203266][T14781] loop5: rw=2051, sector=77864, nr_sectors = 56 limit=40427
[  603.239576][T14781] F2FS-fs (loop5): Issue discard(9733, 9733, 7) failed, ret: -5
[  603.688442][T19131] loop1: detected capacity change from 0 to 1024
[  603.774659][T19131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  603.861942][T19131] ext4 filesystem being mounted at /1325/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  604.047185][T19131] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 3: comm syz.1.5295: lblock 3 mapped to illegal pblock 3 (length 3)
[  604.203810][T19131] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  604.256665][T19131] EXT4-fs (loop1): This should not happen!! Data will be lost
[  604.256665][T19131] 
[  604.422621][ T4802] EXT4-fs error (device loop1): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:9: lblock 8 mapped to illegal pblock 8 (length 8)
[  604.450385][ T4802] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  604.468055][ T4802] EXT4-fs (loop1): This should not happen!! Data will be lost
[  604.468055][ T4802] 
[  604.494303][T19126] loop4: detected capacity change from 0 to 131072
[  604.502918][T19126] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  604.511074][T19126] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  604.530042][   T49] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm kworker/u4:3: bg 0: block 112: padding at end of block bitmap is not set
[  604.550927][T19126] F2FS-fs (loop4): invalid crc value
[  604.561891][   T49] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 48 with max blocks 20 with error 117
[  604.574979][   T49] EXT4-fs (loop1): This should not happen!! Data will be lost
[  604.574979][   T49] 
[  604.587849][T19126] F2FS-fs (loop4): Found nat_bits in checkpoint
[  604.648563][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  604.658235][T19126] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  604.658262][T19126] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  605.159467][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5304'.
[  605.305994][T19164] loop1: detected capacity change from 0 to 64
[  606.056538][T19182] loop1: detected capacity change from 0 to 2048
[  606.112203][T19182] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  606.713861][T19195] loop4: detected capacity change from 0 to 1024
[  606.729967][T19195] EXT4-fs: Ignoring removed bh option
[  606.741974][T19195] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  606.808906][T19195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  606.872626][T19195] EXT4-fs error (device loop4): ext4_read_inline_dir:1583: inode #12: block 7: comm syz.4.5321: path /1148/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  606.896077][T19195] EXT4-fs (loop4): Remounting filesystem read-only
[  606.935114][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  607.100558][T19207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5326'.
[  607.568381][T19225] net_ratelimit: 44 callbacks suppressed
[  607.568401][T19225] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  607.927696][T19236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5339'.
[  607.986322][T19233] kvm: apic: phys broadcast and lowest prio
[  608.513707][T19253] loop4: detected capacity change from 0 to 512
[  608.542101][T19253] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  608.583839][T19253] EXT4-fs (loop4): Test dummy encryption mode enabled
[  608.603468][T19253] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  608.637151][T19255] loop1: detected capacity change from 0 to 1024
[  608.674512][T19251] loop5: detected capacity change from 0 to 8192
[  608.700953][T19251] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  608.713103][T19255] syz.1.5348: attempt to access beyond end of device
[  608.713103][T19255] loop1: rw=2057, sector=262, nr_sectors = 65274 limit=1024
[  608.728476][T19251] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  608.728756][T19251] REISERFS (device loop5): using ordered data mode
[  608.745867][T19251] reiserfs: using flush barriers
[  608.753238][T19251] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  608.770489][T19251] REISERFS (device loop5): checking transaction log (loop5)
[  608.804277][T19255] syz.1.5348: attempt to access beyond end of device
[  608.804277][T19255] loop1: rw=1, sector=262, nr_sectors = 2048 limit=1024
[  608.850502][T19255] syz.1.5348: attempt to access beyond end of device
[  608.850502][T19255] loop1: rw=1, sector=2310, nr_sectors = 2048 limit=1024
[  608.886171][T19255] syz.1.5348: attempt to access beyond end of device
[  608.886171][T19255] loop1: rw=1, sector=4358, nr_sectors = 2048 limit=1024
[  608.960525][T19255] syz.1.5348: attempt to access beyond end of device
[  608.960525][T19255] loop1: rw=1, sector=6406, nr_sectors = 2048 limit=1024
[  608.980338][T19253] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  609.003632][T19253] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.5347: Directory hole found for htree leaf block 0
[  609.023315][T19255] syz.1.5348: attempt to access beyond end of device
[  609.023315][T19255] loop1: rw=1, sector=8454, nr_sectors = 2048 limit=1024
[  609.026089][T19251] REISERFS (device loop5): Using tea hash to sort names
[  609.053915][T19251] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  609.063147][T19253] EXT4-fs (loop4): Remounting filesystem read-only
[  609.073728][T19255] syz.1.5348: attempt to access beyond end of device
[  609.073728][T19255] loop1: rw=1, sector=10502, nr_sectors = 2048 limit=1024
[  609.088749][T19255] syz.1.5348: attempt to access beyond end of device
[  609.088749][T19255] loop1: rw=1, sector=12550, nr_sectors = 2048 limit=1024
[  609.135100][T19255] syz.1.5348: attempt to access beyond end of device
[  609.135100][T19255] loop1: rw=1, sector=14598, nr_sectors = 2048 limit=1024
[  609.175006][ T7519] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  609.211292][T19255] syz.1.5348: attempt to access beyond end of device
[  609.211292][T19255] loop1: rw=1, sector=16646, nr_sectors = 2048 limit=1024
[  609.279834][   T28] audit: type=1800 audit(1770384832.349:443): pid=19251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5346" name="file1" dev="loop5" ino=4 res=0 errno=0
[  610.328449][T19281] loop4: detected capacity change from 0 to 32768
[  610.371877][T19281] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  610.500566][T19281] XFS (loop4): Ending clean mount
[  610.623569][ T7519] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  610.776213][T19301] ieee802154 phy0 wpan0: encryption failed: -22
[  611.316734][T19316] loop4: detected capacity change from 0 to 128
[  611.329918][T19316] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  611.364400][T19316] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  611.501239][   T49] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  611.927969][T19329] loop4: detected capacity change from 0 to 64
[  611.956243][T19329] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  612.104143][T19333] loop5: detected capacity change from 0 to 128
[  612.321601][T19337] loop1: detected capacity change from 0 to 2048
[  612.352254][T19337] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  612.361859][T19337] NILFS (loop1): mounting unchecked fs
[  612.403659][ T5911] udevd[5911]: incorrect nilfs2 checksum on /dev/loop1
[  612.444973][T19337] NILFS (loop1): recovery complete
[  612.456184][T19342] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  612.535800][T19344] loop4: detected capacity change from 0 to 64
[  612.630892][T19344] Buffer I/O error on dev loop4, logical block 117440531, async page read
[  612.680543][T19344] Buffer I/O error on dev loop4, logical block 4274257920, async page read
[  612.723214][T19344] Buffer I/O error on dev loop4, logical block 150994944, async page read
[  612.745527][T19344] Buffer I/O error on dev loop4, logical block 117440531, async page read
[  612.783590][   T28] audit: type=1800 audit(1770384835.624:444): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5381" name="file2" dev="loop4" ino=6 res=0 errno=0
[  612.892853][T19356] loop5: detected capacity change from 0 to 256
[  612.993512][T19356] FAT-fs (loop5): Directory bread(block 64) failed
[  613.019770][T19356] FAT-fs (loop5): Directory bread(block 65) failed
[  613.037322][T19356] FAT-fs (loop5): Directory bread(block 66) failed
[  613.056097][T19356] FAT-fs (loop5): Directory bread(block 67) failed
[  613.072836][T19356] FAT-fs (loop5): Directory bread(block 68) failed
[  613.089895][T19356] FAT-fs (loop5): Directory bread(block 69) failed
[  613.113149][T19356] FAT-fs (loop5): Directory bread(block 70) failed
[  613.140661][T19356] FAT-fs (loop5): Directory bread(block 71) failed
[  613.153992][T19356] FAT-fs (loop5): Directory bread(block 72) failed
[  613.173386][T19356] FAT-fs (loop5): Directory bread(block 73) failed
[  613.277432][T19368] loop4: detected capacity change from 0 to 1024
[  613.290111][T19368] EXT4-fs: Ignoring removed orlov option
[  613.382816][T19368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  613.481779][T19375] dccp_invalid_packet: pskb_may_pull failed
[  613.537726][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.670777][T19382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5397'.
[  613.687465][T19382] bridge0: port 4(vlan0) entered blocking state
[  613.697615][T19382] bridge0: port 4(vlan0) entered disabled state
[  613.709382][T19382] vlan0: entered allmulticast mode
[  613.742428][T19382] gretap0: entered allmulticast mode
[  613.756279][T19382] vlan0: entered promiscuous mode
[  613.761384][T19382] gretap0: entered promiscuous mode
[  613.784196][T19386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5398'.
[  613.801568][T19382] bridge0: port 4(vlan0) entered blocking state
[  613.808002][T19382] bridge0: port 4(vlan0) entered forwarding state
[  614.219127][T19399] loop5: detected capacity change from 0 to 4096
[  614.244394][T19399] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  614.302879][T19399] ntfs3: loop5: Failed to initialize $Extend/$ObjId.
[  614.528752][T19411] loop5: detected capacity change from 0 to 512
[  614.798757][T14880] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  615.033175][T19420] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  615.058265][T14880] usb 2-1: Using ep0 maxpacket: 16
[  615.073602][T19420] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  615.101123][T19420] REISERFS (device loop5): using ordered data mode
[  615.115772][T14880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.118127][T19420] reiserfs: using flush barriers
[  615.126843][T14880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.126870][T14880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  615.126923][T14880] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  615.126947][T14880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.167120][T14880] usb 2-1: config 0 descriptor??
[  615.254443][T19420] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  615.280426][T19420] REISERFS (device loop5): checking transaction log (loop5)
[  615.289622][T19420] REISERFS (device loop5): Using r5 hash to sort names
[  615.304962][T19420] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  615.710907][T14880] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0043/input/input52
[  615.758007][T14880] microsoft 0003:045E:07DA.0043: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  616.098478][ T1195] usb 2-1: USB disconnect, device number 44
[  616.254123][T19440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5421'.
[  616.766827][ T5853] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  616.800994][T19461] set_capacity_and_notify: 1 callbacks suppressed
[  616.801009][T19461] loop1: detected capacity change from 0 to 128
[  616.969837][ T5853] usb 5-1: Using ep0 maxpacket: 8
[  616.988899][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  617.014551][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  617.043938][ T5853] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  617.077277][ T5853] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  617.099377][ T5853] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  617.120080][ T5853] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  617.141091][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.408570][ T5853] usb 5-1: GET_CAPABILITIES returned 0
[  617.429539][ T5853] usbtmc 5-1:16.0: can't read capabilities
[  617.438777][T19460] loop5: detected capacity change from 0 to 40427
[  617.459566][T19460] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x35f7
[  617.511767][T19460] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  617.531105][T19460] F2FS-fs (loop5): Image doesn't support compression
[  617.557526][T19460] F2FS-fs (loop5): invalid crc value
[  617.570349][T19460] F2FS-fs (loop5): Found nat_bits in checkpoint
[  617.695286][ T5853] usb 5-1: USB disconnect, device number 38
[  617.702821][T19460] F2FS-fs (loop5): Start checkpoint disabled!
[  617.718512][T19460] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  617.788305][T19460] bio_check_eod: 27 callbacks suppressed
[  617.788322][T19460] syz.5.5430: attempt to access beyond end of device
[  617.788322][T19460] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  617.829033][T19460] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  617.858178][T19474] loop1: detected capacity change from 0 to 2048
[  617.917594][T19474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  619.401526][T19480] loop1: detected capacity change from 0 to 131072
[  619.414137][T19480] F2FS-fs (loop1): Invalid log sectorsize (67108873)
[  619.420945][T19480] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  619.443761][T19480] F2FS-fs (loop1): invalid crc value
[  619.465374][T19498] loop5: detected capacity change from 0 to 512
[  619.472196][T19480] F2FS-fs (loop1): Found nat_bits in checkpoint
[  619.540124][T19480] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  619.547592][T19480] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  619.618238][T19480] fscrypt (loop1, inode 8): Error -61 getting encryption context
[  619.635654][T19498] EXT4-fs (loop5): 1 truncate cleaned up
[  619.681884][T19498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  619.731166][T19509] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5450'.
[  619.918059][T14781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.257721][T19523] loop1: detected capacity change from 0 to 256
[  620.421001][T19523] FAT-fs (loop1): Directory bread(block 64) failed
[  620.443278][T19523] FAT-fs (loop1): Directory bread(block 65) failed
[  620.508155][T19523] FAT-fs (loop1): Directory bread(block 66) failed
[  620.514726][T19523] FAT-fs (loop1): Directory bread(block 67) failed
[  620.540158][T19523] FAT-fs (loop1): Directory bread(block 68) failed
[  620.553517][T19523] FAT-fs (loop1): Directory bread(block 69) failed
[  620.571057][T19523] FAT-fs (loop1): Directory bread(block 70) failed
[  620.581792][T19523] FAT-fs (loop1): Directory bread(block 71) failed
[  620.603450][T19523] FAT-fs (loop1): Directory bread(block 72) failed
[  620.610985][T19523] FAT-fs (loop1): Directory bread(block 73) failed
[  620.889355][T19537] loop5: detected capacity change from 0 to 256
[  621.203928][T19542] cgroup: fork rejected by pids controller in /syz1
[  621.798958][T11871] bridge0: port 3(syz_tun) entered disabled state
[  621.903182][T11871] syz_tun (unregistering): left allmulticast mode
[  621.910592][T11871] syz_tun (unregistering): left promiscuous mode
[  621.936283][T11871] bridge0: port 3(syz_tun) entered disabled state
[  622.139329][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.309571][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.445975][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.591421][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  622.929642][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5484'.
[  623.165241][   T49] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  623.259335][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  623.293114][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  623.304866][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  623.316770][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  623.324876][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  623.332611][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  623.505558][   T49] batman_adv: batadv0: Removing interface: ip6gretap1
[  623.519428][T19595] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5487'.
[  624.127935][T19624] rtc_cmos 00:00: Alarms can be up to one day in the future
[  624.393016][T19630] loop5: detected capacity change from 0 to 2048
[  624.453401][T19630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  624.720428][T19637] loop4: detected capacity change from 0 to 8
[  624.786293][T19640] loop5: detected capacity change from 0 to 128
[  624.814013][T19640] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  624.822641][T19594] chnl_net:caif_netlink_parms(): no params data found
[  624.830333][T19637] SQUASHFS error: Failed to read block 0x6e6: -5
[  624.836709][T19637] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  624.864441][T19637] SQUASHFS error: Unable to read directory block [6e4:0]
[  624.968294][T14880] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.001453][T14880] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.027266][ T4802] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  625.036115][T14880] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.069949][T14880] rtc_cmos 00:00: Alarms can be up to one day in the future
[  625.110362][T14880] rtc rtc0: __rtc_set_alarm: err=-22
[  625.619605][ T5085] Bluetooth: hci3: command tx timeout
[  625.734339][T19594] bridge0: port 1(bridge_slave_0) entered blocking state
[  625.778276][T19594] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.787123][T19672] CUSE: info not properly terminated
[  625.790796][T19594] bridge_slave_0: entered allmulticast mode
[  625.801634][T19594] bridge_slave_0: entered promiscuous mode
[  625.822390][T19594] bridge0: port 2(bridge_slave_1) entered blocking state
[  625.829533][T19594] bridge0: port 2(bridge_slave_1) entered disabled state
[  625.852744][T19594] bridge_slave_1: entered allmulticast mode
[  625.868036][T19594] bridge_slave_1: entered promiscuous mode
[  625.917038][   T49] hsr_slave_0: left promiscuous mode
[  625.928577][   T49] hsr_slave_1: left promiscuous mode
[  625.942808][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.961981][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.981660][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.989093][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.005066][   T49] team0: left allmulticast mode
[  626.009957][   T49] team_slave_0: left allmulticast mode
[  626.017653][   T49] team_slave_1: left allmulticast mode
[  626.023377][   T49] bridge0: port 4(team0) entered disabled state
[  626.041436][   T49] bridge_slave_1: left allmulticast mode
[  626.053942][   T49] bridge_slave_1: left promiscuous mode
[  626.071605][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  626.094355][   T49] bridge_slave_0: left allmulticast mode
[  626.106660][   T49] bridge_slave_0: left promiscuous mode
[  626.123709][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  626.187726][   T49] veth1_macvtap: left promiscuous mode
[  626.193545][   T49] veth0_macvtap: left promiscuous mode
[  626.200267][   T49] veth1_vlan: left promiscuous mode
[  626.206748][   T49] veth0_vlan: left promiscuous mode
[  627.003134][T19695] loop4: detected capacity change from 0 to 1764
[  627.128967][T19693] loop5: detected capacity change from 0 to 8192
[  627.307921][T19698] loop4: detected capacity change from 0 to 128
[  627.324816][T19698] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  627.374951][T19698] hpfs: filesystem error: improperly stopped
[  627.381015][T19698] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  627.408440][T19698] hpfs: You really don't want any checks? You are crazy...
[  627.432173][T19698] hpfs: hpfs_map_sector(): read error
[  627.456878][T19698] hpfs: code page support is disabled
[  627.462470][T19698] hpfs: hpfs_map_4sectors(): unaligned read
[  627.487720][T19698] hpfs: hpfs_map_4sectors(): unaligned read
[  627.520319][T19698] hpfs: filesystem error: unable to find root dir
[  627.715922][T19698] hpfs: hpfs_map_4sectors(): unaligned read
[  627.847962][ T5085] Bluetooth: hci3: command tx timeout
[  627.892516][T19705] autofs4:pid:19705:autofs_fill_super: called with bogus options
[  628.015069][T19707] loop4: detected capacity change from 0 to 2048
[  628.094457][T19707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  628.164386][T19707] EXT4-fs (loop4): Online defrag not supported with bigalloc
[  628.228253][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.436045][   T49] team_slave_1 (unregistering): left promiscuous mode
[  628.509857][   T49] team0 (unregistering): Port device team_slave_1 removed
[  628.632647][   T49] team_slave_0 (unregistering): left promiscuous mode
[  628.642143][   T49] team0 (unregistering): Port device team_slave_0 removed
[  628.804212][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  628.917937][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  630.009848][T19736] loop4: detected capacity change from 0 to 256
[  630.045342][T19736] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  630.064656][ T5085] Bluetooth: hci3: command tx timeout
[  630.176015][   T49] bond0 (unregistering): Released all slaves
[  630.503298][T19594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  630.548796][T19594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  630.637776][T19738] loop5: detected capacity change from 0 to 1024
[  630.659023][T19740] loop4: detected capacity change from 0 to 128
[  630.696405][T19594] team0: Port device team_slave_0 added
[  630.707575][T19738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  630.750603][T19594] team0: Port device team_slave_1 added
[  630.791178][T19738] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  630.819224][T19740] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  630.849137][T19740] ext4 filesystem being mounted at /1220/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  630.956238][T19594] batman_adv: batadv0: Adding interface: batadv_slave_0
[  630.966386][T19740] fscrypt (loop4, inode 12): Unsupported encryption flags (0xb9)
[  630.997363][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.066203][T19594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  631.091697][T19738] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 3: comm syz.5.5534: lblock 3 mapped to illegal pblock 3 (length 3)
[  631.138326][T19738] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  631.151248][T19594] batman_adv: batadv0: Adding interface: batadv_slave_1
[  631.152469][ T7519] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  631.176342][T19594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  631.190490][T19738] EXT4-fs (loop5): This should not happen!! Data will be lost
[  631.190490][T19738] 
[  631.278014][T19748] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #15: block 3: comm syz.5.5534: lblock 3 mapped to illegal pblock 3 (length 1)
[  631.311839][T19594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  631.452772][T19748] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #15: block 3: comm syz.5.5534: lblock 3 mapped to illegal pblock 3 (length 1)
[  631.501398][T19748] EXT4-fs error (device loop5): ext4_map_blocks:608: inode #15: block 3: comm syz.5.5534: lblock 3 mapped to illegal pblock 3 (length 1)
[  631.574751][T19753] loop4: detected capacity change from 0 to 4096
[  631.598739][T19594] hsr_slave_0: entered promiscuous mode
[  631.629169][T19753] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  631.673820][T19594] hsr_slave_1: entered promiscuous mode
[  631.689920][T19753] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk.
[  631.696578][ T4807] EXT4-fs error (device loop5): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8)
[  631.718482][T19594] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  631.737189][T19753] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing.
[  631.750051][T19594] Cannot create hsr debugfs directory
[  631.762073][ T4807] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  631.774485][T19753] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2.  Marking corrupt inode 0x1 as bad.  Run chkdsk.
[  631.774555][T19753] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  631.838044][T19753] ntfs: volume version 3.1.
[  631.870637][ T4807] EXT4-fs (loop5): This should not happen!! Data will be lost
[  631.870637][ T4807] 
[  631.907985][T14781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  631.913884][T19753] ntfs: (device loop4): ntfs_lookup_inode_by_name(): Index buffer (VCN 0x0) of directory inode 0x5 has a size (24) differing from the directory specified size (4096). Directory inode is corrupt or driver bug.
[  631.966455][T19753] ntfs: (device loop4): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  632.019338][T19753] ntfs: (device loop4): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  632.287618][ T5085] Bluetooth: hci3: command tx timeout
[  633.208466][T19765] loop5: detected capacity change from 0 to 32768
[  633.221025][T19765] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.5539 (19765)
[  633.285237][T19765] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  633.318023][T19765] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  633.351286][T19765] BTRFS info (device loop5): using free space tree
[  633.500745][T19768] loop4: detected capacity change from 0 to 32768
[  633.543357][T19765] BTRFS info (device loop5): enabling ssd optimizations
[  633.576570][T19768] 
[  633.576570][T19768]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  633.576570][T19768] 
[  633.588526][T19765] BTRFS info (device loop5): auto enabling async discard
[  633.679017][T19768] ialloc: diAlloc returned -5!
[  633.715952][T19594] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  633.762301][T19594] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  633.813557][T19594] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  633.828262][ T7519] 
[  633.828262][ T7519]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  633.828262][ T7519] 
[  633.848258][ T7519] 
[  633.848258][ T7519]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  633.848258][ T7519] 
[  633.904785][T19594] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  633.940489][T14781] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  634.103589][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  634.110031][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  634.441896][ T5758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop5 scanned by udevd (5758)
[  634.512365][ T5085] Bluetooth: hci3: command tx timeout
[  634.575196][T19594] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.612473][T19594] 8021q: adding VLAN 0 to HW filter on device team0
[  634.699360][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.706556][ T4807] bridge0: port 1(bridge_slave_0) entered forwarding state
[  634.769297][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.776570][ T4807] bridge0: port 2(bridge_slave_1) entered forwarding state
[  634.849219][T19826] Dead loop on virtual device ip6_vti0, fix it urgently!
[  635.645323][T19594] 8021q: adding VLAN 0 to HW filter on device batadv0
[  635.791863][T19594] veth0_vlan: entered promiscuous mode
[  635.831740][T19594] veth1_vlan: entered promiscuous mode
[  635.927065][T19594] veth0_macvtap: entered promiscuous mode
[  635.978067][T19594] veth1_macvtap: entered promiscuous mode
[  636.053680][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.076587][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.105712][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.137346][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.193176][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  636.215447][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.244015][T19594] batman_adv: batadv0: Interface activated: batadv_slave_0
[  636.280047][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.302761][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.349521][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.359995][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.404928][T19594] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  636.456314][T19594] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  636.486765][T19594] batman_adv: batadv0: Interface activated: batadv_slave_1
[  636.511377][T19594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.534550][T19594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.553708][T19594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.585006][T19594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  636.750747][T19854] loop5: detected capacity change from 0 to 32768
[  636.856164][T19854] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  636.887443][T14881] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  636.914722][T14881] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.034155][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  637.068811][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  637.179738][T14781] ocfs2: Unmounting device (7,5) on (node local)
[  638.782121][T19904] loop5: detected capacity change from 0 to 40427
[  638.820463][T19904] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  638.828239][T19904] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  638.868864][T19904] F2FS-fs (loop5): invalid crc value
[  638.886229][T19904] F2FS-fs (loop5): Found nat_bits in checkpoint
[  639.033197][T19904] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  639.043419][T19904] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  639.054117][  T786] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  639.104764][   T28] audit: type=1800 audit(1770384860.247:445): pid=19904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5568" name="bus" dev="loop5" ino=10 res=0 errno=0
[  639.141014][T19904] Invalid ELF header magic: != ELF
[  639.294759][  T786] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  639.319982][  T786] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  639.341618][  T786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  639.353310][  T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  639.396466][  T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  639.427027][  T786] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  639.458397][  T786] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  639.480461][  T786] usb 5-1: Product: syz
[  639.490881][  T786] usb 5-1: Manufacturer: syz
[  639.536118][  T786] cdc_wdm 5-1:1.0: skipping garbage
[  639.569819][  T786] cdc_wdm 5-1:1.0: skipping garbage
[  639.587607][  T786] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  639.609641][  T786] cdc_wdm 5-1:1.0: Unknown control protocol
[  639.831037][T19955] loop1: detected capacity change from 0 to 1024
[  639.872195][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.879118][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.885484][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.892106][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.898780][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.905405][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.911897][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.918522][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.924832][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.931448][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.937727][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.944338][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.950676][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.957304][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.963657][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.970281][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.976746][ T5799] usb 5-1: USB disconnect, device number 39
[  639.983277][    C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71
[  639.989908][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes
[  639.996006][    C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  640.412600][T19968] loop1: detected capacity change from 0 to 1024
[  640.540291][T19971] loop5: detected capacity change from 0 to 2048
[  640.569017][   T28] audit: type=1800 audit(1770384861.622:446): pid=19968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5582" name="file1" dev="loop1" ino=3 res=0 errno=0
[  640.684421][T19971] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  640.704588][T19971] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  640.785088][   T49] hfsplus: b-tree write err: -5, ino 3
[  641.051226][T19984] loop4: detected capacity change from 0 to 1024
[  641.071082][T19984] EXT4-fs: Ignoring removed bh option
[  641.108160][T14781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.134391][T19984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  641.458053][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  641.620296][T20001] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5590'.
[  641.629471][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5590'.
[  641.715959][T20007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5589'.
[  641.757027][T20004] loop5: detected capacity change from 0 to 4096
[  642.736798][T20031] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5602'.
[  643.282062][T20043] Bluetooth: hci4: Frame reassembly failed (-84)
[  644.776068][T20077] input: syz0 as /devices/virtual/input/input54
[  644.794330][T20079] program syz.5.5622 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  645.369748][T20087] loop4: detected capacity change from 0 to 40427
[  645.404440][T20087] F2FS-fs (loop4): Invalid log sectorsize (131081)
[  645.411015][T20087] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  645.427751][T20087] F2FS-fs (loop4): invalid crc value
[  645.456946][ T5085] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  645.466046][T19097] Bluetooth: hci4: command 0x1003 tx timeout
[  645.579344][T20087] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  645.618097][T20087] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  646.011607][   T28] audit: type=1326 audit(1770384866.711:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.064167][   T28] audit: type=1326 audit(1770384866.739:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.108809][   T28] audit: type=1326 audit(1770384866.739:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.180443][   T28] audit: type=1326 audit(1770384866.739:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3289399d97 code=0x7ffc0000
[  646.194382][T20112] loop1: detected capacity change from 0 to 256
[  646.225747][   T28] audit: type=1326 audit(1770384866.739:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.274828][T20112] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  646.278048][   T28] audit: type=1326 audit(1770384866.739:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.367897][   T28] audit: type=1326 audit(1770384866.739:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.413272][   T28] audit: type=1326 audit(1770384866.739:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.453541][   T28] audit: type=1326 audit(1770384866.739:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  646.500443][   T28] audit: type=1326 audit(1770384866.739:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20108 comm="syz.1.5636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f328939aeb9 code=0x7ffc0000
[  647.068072][T20124] loop5: detected capacity change from 0 to 32768
[  647.079433][T20136] loop1: detected capacity change from 0 to 512
[  647.112847][T20124] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  647.163856][T20136] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.5648: couldn't read orphan inode 26 (err -116)
[  647.202837][T20124] XFS (loop5): Ending clean mount
[  647.203760][T20136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  647.228562][T20136] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  647.295653][T20136] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.5648: iget: bad i_size value: 360287970189639690
[  647.330055][T20136] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  647.333465][T14781] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  647.414303][T19594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  647.473857][T20149] loop1: detected capacity change from 0 to 16
[  647.493513][T20149] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  647.757791][T20153] netlink: 'syz.1.5651': attribute type 2 has an invalid length.
[  647.767132][T20153] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.5651'.
[  647.905693][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5654'.
[  648.019625][T20164] sctp: [Deprecated]: syz.5.5655 (pid 20164) Use of int in max_burst socket option.
[  648.019625][T20164] Use struct sctp_assoc_value instead
[  648.225198][ T5799] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  648.429002][ T5799] usb 5-1: Using ep0 maxpacket: 16
[  648.486090][ T5799] usb 5-1: config 0 has no interfaces?
[  648.491979][ T5799] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  648.559447][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  648.582139][ T5799] usb 5-1: config 0 descriptor??
[  649.014412][  T786] usb 5-1: USB disconnect, device number 40
[  649.073717][T20188] loop5: detected capacity change from 0 to 2048
[  649.111846][T20191] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  649.506333][T20198] loop1: detected capacity change from 0 to 136
[  649.750418][T20198] rock: directory entry would overflow storage
[  649.764519][T20198] rock: sig=0x4f50, size=4, remaining=3
[  649.781960][T20198] iso9660: Corrupted directory entry in block 2 of inode 1472
[  649.877881][T20203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5672'.
[  649.925991][T20203] netlink: 'syz.4.5672': attribute type 14 has an invalid length.
[  649.933850][T20203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5672'.
[  650.046748][T20207] input: syz0 as /devices/virtual/input/input55
[  650.126952][T20196] loop5: detected capacity change from 0 to 32768
[  650.886202][T20206] loop1: detected capacity change from 0 to 32768
[  650.992846][T20206] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  651.320731][T20206] XFS (loop1): Ending clean mount
[  651.348512][T20206] XFS (loop1): Quotacheck needed: Please wait.
[  651.466875][T20206] XFS (loop1): Quotacheck: Done.
[  651.860162][T19594] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  652.526596][T20249] loop5: detected capacity change from 0 to 32768
[  653.908635][T20285] loop4: detected capacity change from 0 to 4096
[  655.201428][T20309] loop5: detected capacity change from 0 to 32768
[  655.279181][T20309] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  655.374401][T20309] XFS (loop5): Ending clean mount
[  655.390236][T20309] XFS (loop5): Quotacheck needed: Please wait.
[  655.510022][T20309] XFS (loop5): Quotacheck: Done.
[  655.766881][T14781] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  656.310450][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[  656.322964][T20344] Bluetooth: hci4: Frame reassembly failed (-84)
[  656.329620][ T5799] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  656.450477][T20351] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached
[  656.546173][ T5799] usb 5-1: Using ep0 maxpacket: 32
[  656.554670][ T5799] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  656.568612][ T5799] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  656.578139][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  656.587168][ T5799] usb 5-1: Product: syz
[  656.591338][ T5799] usb 5-1: Manufacturer: syz
[  656.596296][ T5799] usb 5-1: SerialNumber: syz
[  656.603502][ T5799] usb 5-1: config 0 descriptor??
[  656.609377][T20337] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  656.618564][ T5799] hub 5-1:0.0: bad descriptor, ignoring hub
[  656.624488][ T5799] hub: probe of 5-1:0.0 failed with error -5
[  656.840820][  T787] usb 2-1: new full-speed USB device number 45 using dummy_hcd
[  656.958637][  T786] usb 5-1: USB disconnect, device number 41
[  657.045392][  T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  657.058637][  T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  657.070459][  T787] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  657.079606][  T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.087820][  T787] usb 2-1: Product: syz
[  657.091988][  T787] usb 2-1: Manufacturer: syz
[  657.096578][  T787] usb 2-1: SerialNumber: syz
[  657.547422][  T787] usb 2-1: 0:2 : does not exist
[  658.015672][  T787] usb 2-1: USB disconnect, device number 45
[  658.091151][T20365] loop4: detected capacity change from 0 to 64
[  658.128473][T20365] hfs: walked past end of dir
[  658.455068][T19097] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  658.905582][T20376] loop4: detected capacity change from 0 to 4096
[  658.993609][T20381] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  659.092883][T20380] loop1: detected capacity change from 0 to 4096
[  659.217924][T20384] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  659.283635][T20380] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[  659.341517][T20380] Remounting filesystem read-only
[  659.517432][T20388] loop5: detected capacity change from 0 to 4096
[  659.557458][    C1] sd 0:0:1:0: [sda] tag#4774 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  659.567949][    C1] sd 0:0:1:0: [sda] tag#4774 CDB: Write(6) 0a 00 00 00 04 00 00 00 04 00 00 00
[  659.582029][T20388] ntfs3: loop5: Different NTFS sector size (2048) and media sector size (512).
[  659.793524][T20399] loop1: detected capacity change from 0 to 512
[  659.827985][T20399] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  659.919906][T20399] EXT4-fs (loop1): 1 truncate cleaned up
[  659.963208][T20399] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.068962][T20399] EXT4-fs (loop1): shut down requested (1)
[  660.183056][T19594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  661.106365][T20429] loop4: detected capacity change from 0 to 16
[  661.117010][  T787] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  661.130425][T20429] erofs: (device loop4): mounted with root inode @ nid 36.
[  661.189143][T20429] syz.4.5765: attempt to access beyond end of device
[  661.189143][T20429] loop4: rw=0, sector=16, nr_sectors = 8 limit=16
[  661.341358][  T787] usb 6-1: Using ep0 maxpacket: 8
[  661.358110][  T787] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  661.414076][  T787] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  661.429499][  T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.467818][  T787] usb 6-1: config 0 descriptor??
[  661.719992][  T787] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  661.930864][  T787] usb 6-1: USB disconnect, device number 11
[  662.171632][T20453] loop4: detected capacity change from 0 to 64
[  662.708617][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5785'.
[  663.688855][T20512] loop4: detected capacity change from 0 to 2048
[  663.698803][T20512] EXT4-fs: Ignoring removed bh option
[  663.766639][T20512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  663.860163][ T4807] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  663.882467][ T4807] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28
[  663.894785][ T4807] EXT4-fs (loop4): This should not happen!! Data will be lost
[  663.894785][ T4807] 
[  663.905217][ T4807] EXT4-fs (loop4): Total free blocks count 0
[  663.912032][ T4807] EXT4-fs (loop4): Free/Dirty block details
[  663.918038][ T4807] EXT4-fs (loop4): free_blocks=2415919104
[  663.923816][ T4807] EXT4-fs (loop4): dirty_blocks=16
[  663.929288][ T4807] EXT4-fs (loop4): Block reservation details
[  663.935281][ T4807] EXT4-fs (loop4): i_reserved_data_blocks=1
[  663.943736][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  664.066730][T14880] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  664.270258][T14880] usb 2-1: Using ep0 maxpacket: 16
[  664.293504][T14880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  664.334400][T14880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  664.359271][T14880] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  664.383497][T14880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  664.405873][T14880] usb 2-1: config 0 descriptor??
[  664.622621][  T786] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  664.842127][  T786] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  664.857162][  T786] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  664.874420][T14880] corsair 0003:1B1C:1B02.0044: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0
[  664.912789][  T786] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  664.933970][  T786] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  664.963045][  T786] usb 6-1: SerialNumber: syz
[  665.217733][T20553] program syz.0.5822 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  665.235140][  T786] usb 6-1: 0:2 : does not exist
[  665.267320][  T786] usb 6-1: USB disconnect, device number 12
[  665.379137][T14880] usb 2-1: USB disconnect, device number 46
[  665.399188][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  666.278430][T20577] trusted_key: syz.1.5831 sent an empty control message without MSG_MORE.
[  666.471773][T20584] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  666.525995][T20584] bridge0: port 3(team0) entered disabled state
[  666.532737][T20584] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.540197][T20584] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.657687][T20589] bridge0: port 4(vlan0) entered disabled state
[  666.664204][T20589] bridge0: port 3(team0) entered disabled state
[  666.670942][T20589] bridge0: port 2(bridge_slave_1) entered disabled state
[  666.678628][T20589] bridge0: port 1(bridge_slave_0) entered disabled state
[  666.792142][T20590] loop4: detected capacity change from 0 to 4096
[  666.923755][T20590] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  666.949161][T20590] ntfs3: loop4: Failed to initialize $Extend/$Reparse.
[  667.158794][T20604] loop5: detected capacity change from 0 to 736
[  667.674939][T20614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5850'.
[  668.340534][T20634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  668.348523][T20634] IPv6: NLM_F_CREATE should be set when creating new route
[  668.355954][T20634] IPv6: NLM_F_CREATE should be set when creating new route
[  668.363203][T20634] IPv6: NLM_F_CREATE should be set when creating new route
[  668.417499][T20634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  668.663918][T20616] overlayfs: failed to resolve './file0': -2
[  668.704280][T20645] netlink: 'syz.4.5863': attribute type 1 has an invalid length.
[  668.730259][T20645] netlink: 'syz.4.5863': attribute type 2 has an invalid length.
[  668.763505][T20647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5865'.
[  668.782935][T20648] netlink: 'syz.4.5863': attribute type 1 has an invalid length.
[  668.808323][T20648] netlink: 'syz.4.5863': attribute type 2 has an invalid length.
[  669.043051][T20652] loop1: detected capacity change from 0 to 4096
[  669.359299][T20666] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  669.450991][T20666] bridge0: port 3(team0) entered disabled state
[  669.457681][T20666] bridge0: port 1(bridge_slave_0) entered disabled state
[  669.711194][T14880] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  669.717746][T20676] loop1: detected capacity change from 0 to 4096
[  669.816929][T20676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  669.903378][T14880] usb 6-1: Using ep0 maxpacket: 32
[  669.915690][T14880] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  669.935538][T14880] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0
[  669.956458][T14880] usb 6-1: config 0 interface 0 has no altsetting 0
[  669.963157][T14880] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  670.020479][T14880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.054913][T14880] usb 6-1: config 0 descriptor??
[  670.438393][T19594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  670.543919][T14880] corsair-psu 0003:1B1C:1C09.0045: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.5-1/input0
[  670.667434][T14880] corsair-psu 0003:1B1C:1C09.0045: unable to initialize device (-90)
[  670.711934][T14880] corsair-psu: probe of 0003:1B1C:1C09.0045 failed with error -90
[  670.926339][T20716] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  670.971209][T20716] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.979044][T20716] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.099660][ T5799] usb 6-1: USB disconnect, device number 13
[  672.016916][T20752] loop5: detected capacity change from 0 to 8
[  672.087111][T20752] SQUASHFS error: Failed to read block 0x260685: -5
[  672.121730][T20752] SQUASHFS error: Unable to read metadata cache entry [260685]
[  672.137589][T20752] SQUASHFS error: Unable to read directory block [260685:0]
[  672.701788][T20779] loop5: detected capacity change from 0 to 1024
[  672.767741][  T787] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  673.014219][  T787] usb 2-1: Using ep0 maxpacket: 32
[  673.032414][  T787] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  673.055446][  T787] usb 2-1: config 0 interface 0 has no altsetting 0
[  673.063391][  T787] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  673.073053][  T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.102360][  T787] usb 2-1: config 0 descriptor??
[  673.354454][  T787] usbhid 2-1:0.0: can't add hid device: -71
[  673.364477][  T787] usbhid: probe of 2-1:0.0 failed with error -71
[  673.375507][  T787] usb 2-1: USB disconnect, device number 47
[  674.041142][T20809] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5935'.
[  674.926980][T14349] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  675.148556][T14349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.164698][T14349] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.175204][T14349] usb 6-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00
[  675.185563][T14349] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.199003][T14349] usb 6-1: config 0 descriptor??
[  675.680969][T14349] wacom 0003:056A:030C.0046: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.5-1/input0
[  675.754062][T20859] loop4: detected capacity change from 0 to 512
[  675.927706][  T787] usb 6-1: USB disconnect, device number 14
[  676.266315][T20870] loop1: detected capacity change from 0 to 2048
[  676.309997][T20870] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  676.320811][T20870] NILFS (loop1): mounting unchecked fs
[  676.361040][T20870] NILFS (loop1): recovery complete
[  676.378272][T20871] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  676.679935][T20874] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5965'.
[  677.633568][T20904] macvlan0: entered promiscuous mode
[  677.655206][T20904] netlink: 'syz.5.5977': attribute type 1 has an invalid length.
[  677.662991][T20904] netlink: 'syz.5.5977': attribute type 2 has an invalid length.
[  677.699739][T20906] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5978'.
[  678.421599][T20930] pim6reg1: tun_chr_ioctl cmd 1074292226
[  679.065699][T20950] vivid-001: disconnect
[  679.075152][T20949] vivid-001: reconnect
[  679.398121][T20960] loop5: detected capacity change from 0 to 512
[  679.448490][  T787] kernel write not supported for file /2826/net/sockstat (pid: 787 comm: kworker/0:2)
[  679.460526][T20960] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  679.522581][T20965] loop1: detected capacity change from 0 to 64
[  679.536706][T20960] EXT4-fs (loop5): 1 truncate cleaned up
[  679.543633][T20960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  679.557749][T20965] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  679.839834][T14781] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  680.758844][T20999] loop5: detected capacity change from 0 to 4096
[  680.772963][T20999] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  680.856518][T20999] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  680.874876][T20999] ntfs3: loop5: Failed to load $Extend (-22).
[  680.892908][T20999] ntfs3: loop5: Failed to initialize $Extend.
[  680.996411][T20999] ntfs3: loop5: ino=0, attr_set_size
[  681.023926][T20999] ntfs3: loop5: ino=0, attr_set_size
[  681.055646][T20999] ntfs3: loop5: ino=0, attr_set_size
[  682.276184][T21007] loop5: detected capacity change from 0 to 40427
[  682.302654][T21007] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  682.309323][T21007] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  682.351307][T21007] F2FS-fs (loop5): Found nat_bits in checkpoint
[  682.507053][T21007] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  682.514142][T21007] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  682.575475][T21037] loop4: detected capacity change from 0 to 4096
[  682.775463][T21007] syz.5.6018: attempt to access beyond end of device
[  682.775463][T21007] loop5: rw=2049, sector=53248, nr_sectors = 32 limit=40427
[  683.027458][T14781] syz-executor: attempt to access beyond end of device
[  683.027458][T14781] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  683.082905][T14781] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  683.139035][T21049] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  683.572374][ T4802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  683.888436][ T4802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.123705][ T4802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.348790][ T4802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  684.670730][ T5085] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  684.688853][ T5085] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  684.708147][ T5085] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  684.724631][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  684.739807][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  684.749446][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  685.326157][T21092] loop5: detected capacity change from 0 to 8192
[  685.438200][T21092] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  685.473829][T21092] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal
[  685.509632][T21092] REISERFS (device loop5): using ordered data mode
[  685.516450][T21092] reiserfs: using flush barriers
[  685.570406][T21092] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  685.627488][T21092] REISERFS (device loop5): checking transaction log (loop5)
[  685.670402][T21092] REISERFS (device loop5): Using r5 hash to sort names
[  685.677806][T21092] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  685.976514][T21077] chnl_net:caif_netlink_parms(): no params data found
[  686.873469][T21077] bridge0: port 1(bridge_slave_0) entered blocking state
[  686.875133][T21119] loop5: detected capacity change from 0 to 32768
[  686.891003][T21077] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.904904][T21119] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.6058 (21119)
[  686.918137][T21077] bridge_slave_0: entered allmulticast mode
[  686.930984][ T5085] Bluetooth: hci3: command tx timeout
[  686.935792][T21077] bridge_slave_0: entered promiscuous mode
[  686.947980][T21119] BTRFS info (device loop5): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  686.964848][T21119] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  686.989993][T21119] BTRFS info (device loop5): using free space tree
[  687.062429][T21077] bridge0: port 2(bridge_slave_1) entered blocking state
[  687.082667][T21077] bridge0: port 2(bridge_slave_1) entered disabled state
[  687.110305][T21077] bridge_slave_1: entered allmulticast mode
[  687.127692][T21077] bridge_slave_1: entered promiscuous mode
[  687.143874][T21119] BTRFS info (device loop5): enabling ssd optimizations
[  687.179251][T21119] BTRFS info (device loop5): auto enabling async discard
[  687.300514][T21077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  687.340144][T21077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  687.374799][T14781] BTRFS info (device loop5): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  687.487607][T21077] team0: Port device team_slave_0 added
[  687.590492][T21077] team0: Port device team_slave_1 added
[  687.796886][T21077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  687.803871][T21077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  687.893610][T21077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  688.066272][T21077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  688.095141][T21077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  688.157246][T21077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  688.430511][T21077] hsr_slave_0: entered promiscuous mode
[  688.467604][T21077] hsr_slave_1: entered promiscuous mode
[  688.475144][T21077] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  688.496141][T21077] Cannot create hsr debugfs directory
[  688.566499][ T4802] hsr_slave_0: left promiscuous mode
[  688.583231][ T4802] hsr_slave_1: left promiscuous mode
[  688.610831][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  688.639516][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_0
[  688.652714][ T4802] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  688.668646][ T4802] batman_adv: batadv0: Removing interface: batadv_slave_1
[  688.695373][ T4802] bridge_slave_1: left allmulticast mode
[  688.712274][ T4802] bridge_slave_1: left promiscuous mode
[  688.722899][ T4802] bridge0: port 2(bridge_slave_1) entered disabled state
[  688.752132][ T4802] bridge_slave_0: left allmulticast mode
[  688.768731][ T4802] bridge_slave_0: left promiscuous mode
[  688.779659][ T4802] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.887703][ T4802] veth1_macvtap: left promiscuous mode
[  688.893286][ T4802] veth0_macvtap: left promiscuous mode
[  688.911782][ T4802] veth1_vlan: left promiscuous mode
[  688.917142][ T4802] veth0_vlan: left promiscuous mode
[  689.155087][ T5085] Bluetooth: hci3: command tx timeout
[  689.248179][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.264060][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.276150][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.295691][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.303129][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.316696][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.324150][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.342885][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.361997][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.387065][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.412208][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.435730][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.445215][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.457456][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.464986][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.472537][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.480773][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.488362][T14880] hid-generic 0003:0004:0000.0047: unknown main item tag 0x0
[  689.504199][T14880] hid-generic 0003:0004:0000.0047: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  689.607386][T21207] fido_id[21207]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  690.233405][T14880] kernel read not supported for file /video7 (pid: 14880 comm: kworker/0:1)
[  690.911458][ T4802] team0 (unregistering): Port device team_slave_1 removed
[  690.978161][ T4802] team0 (unregistering): Port device team_slave_0 removed
[  691.038836][ T4802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  691.101646][ T4802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  691.380139][ T5085] Bluetooth: hci3: command tx timeout
[  691.583377][ T4802] bond0 (unregistering): Released all slaves
[  692.641761][T21077] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  692.693789][T21077] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  692.750318][T21077] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  692.768074][T21077] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  693.081980][T21077] 8021q: adding VLAN 0 to HW filter on device bond0
[  693.161852][T21077] 8021q: adding VLAN 0 to HW filter on device team0
[  693.230492][T14881] bridge0: port 1(bridge_slave_0) entered blocking state
[  693.237743][T14881] bridge0: port 1(bridge_slave_0) entered forwarding state
[  693.261333][T14881] bridge0: port 2(bridge_slave_1) entered blocking state
[  693.268539][T14881] bridge0: port 2(bridge_slave_1) entered forwarding state
[  693.612576][ T5085] Bluetooth: hci3: command tx timeout
[  693.854947][T21308] loop4: detected capacity change from 0 to 16
[  693.911993][T21308] erofs: (device loop4): mounted with root inode @ nid 36.
[  694.017194][T21077] 8021q: adding VLAN 0 to HW filter on device batadv0
[  694.027038][T21308] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  694.090173][T21314] syz.4.6107: attempt to access beyond end of device
[  694.090173][T21314] loop4: rw=524288, sector=16, nr_sectors = 8 limit=16
[  694.130421][T21316] loop5: detected capacity change from 0 to 1024
[  694.153060][T21308] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749]
[  694.186585][T21308] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  694.404366][T14781] hfsplus: bad catalog entry type
[  694.528758][T21330] loop4: detected capacity change from 0 to 1024
[  694.550521][T21330] EXT4-fs: Ignoring removed nobh option
[  694.574319][ T4807] hfsplus: b-tree write err: -5, ino 4
[  694.595662][T21330] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  694.693803][T21330] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  694.756840][T21330] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4047: comm syz.4.6111: Allocating blocks 497-513 which overlap fs metadata
[  694.798940][T21329] EXT4-fs (loop4): pa ffff88805b25b740: logic 32768, phys. 145, len 23
[  694.808110][T21329] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5388: group 0, free 0, pa_free 1
[  694.897293][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  694.913524][T21077] veth0_vlan: entered promiscuous mode
[  695.039175][ T3449] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.168462][T21077] veth1_vlan: entered promiscuous mode
[  695.254965][ T3449] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.323157][T21077] veth0_macvtap: entered promiscuous mode
[  695.382409][ T3449] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.415985][T21077] veth1_macvtap: entered promiscuous mode
[  695.446213][T21347] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6118'.
[  695.540731][ T3449] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.616138][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.642075][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.670574][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.698397][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.713069][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  695.724229][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.749211][T21077] batman_adv: batadv0: Interface activated: batadv_slave_0
[  695.790343][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.819764][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.835270][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.873302][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.892847][T21077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  695.914956][T19097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  695.917695][T21077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  695.938410][T19097] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  695.939804][T21077] batman_adv: batadv0: Interface activated: batadv_slave_1
[  695.957237][T19097] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  695.976990][T19097] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  695.985894][T19097] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  695.993716][T19097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  695.994180][T21077] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  696.048476][T21077] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  696.057608][T21077] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  696.066927][T21077] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  696.292815][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.338157][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.366098][ T4802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  696.378228][ T4802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  696.463940][T21358] chnl_net:caif_netlink_parms(): no params data found
[  696.739754][T21358] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.754375][T21358] bridge0: port 1(bridge_slave_0) entered disabled state
[  696.761614][T21358] bridge_slave_0: entered allmulticast mode
[  696.813517][T21358] bridge_slave_0: entered promiscuous mode
[  696.828426][T21386] loop6: detected capacity change from 0 to 16
[  696.829503][T21373] nvme_fabrics: missing parameter 'transport=%s'
[  696.845421][T21358] bridge0: port 2(bridge_slave_1) entered blocking state
[  696.877468][T21386] erofs: (device loop6): mounted with root inode @ nid 36.
[  696.877563][T21358] bridge0: port 2(bridge_slave_1) entered disabled state
[  696.892211][T21373] nvme_fabrics: missing parameter 'nqn=%s'
[  696.901587][T21358] bridge_slave_1: entered allmulticast mode
[  696.916359][T21358] bridge_slave_1: entered promiscuous mode
[  696.946864][T21386] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  696.974732][T21386] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  696.993512][T21386] syz.6.6120: attempt to access beyond end of device
[  696.993512][T21386] loop6: rw=524288, sector=16, nr_sectors = 8 limit=16
[  697.004282][T21358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  697.008777][T21386] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -50 in[64, 4032] out[3749]
[  697.041433][T21358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  697.160220][T21358] team0: Port device team_slave_0 added
[  697.229394][T21358] team0: Port device team_slave_1 added
[  697.327571][T21358] batman_adv: batadv0: Adding interface: batadv_slave_0
[  697.349379][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.380774][T21358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  697.487049][T21358] batman_adv: batadv0: Adding interface: batadv_slave_1
[  697.495496][T21358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  697.557685][T21358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  697.611103][T21401] mkiss: ax0: crc mode is auto.
[  697.697322][T21404] Falling back ldisc for ttyS3.
[  697.761419][T21358] hsr_slave_0: entered promiscuous mode
[  697.792162][T21358] hsr_slave_1: entered promiscuous mode
[  697.810584][T21358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  697.823840][T21358] Cannot create hsr debugfs directory
[  698.220194][ T5085] Bluetooth: hci2: command tx timeout
[  698.635822][T21405] loop4: detected capacity change from 0 to 40427
[  698.697221][T21405] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff
[  698.722198][T21405] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  698.730353][T21405] F2FS-fs (loop4): Image doesn't support compression
[  698.774058][T21405] F2FS-fs (loop4): invalid crc value
[  698.803067][T21405] F2FS-fs (loop4): Found nat_bits in checkpoint
[  698.970553][T21405] F2FS-fs (loop4): Start checkpoint disabled!
[  699.006186][T21405] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  699.138776][T21358] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  699.240866][T21414] loop6: detected capacity change from 0 to 32768
[  699.288107][T21358] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  699.316917][T21414] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  699.338082][T21358] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  699.532909][T21414] XFS (loop6): Ending clean mount
[  699.565876][T21358] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  699.577718][   T59] kworker/u4:4: attempt to access beyond end of device
[  699.577718][   T59] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  699.620170][   T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  699.629087][   T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  699.645161][   T59] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  699.764357][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  699.787527][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  699.812176][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  699.821977][T21077] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  700.442741][ T5085] Bluetooth: hci2: command tx timeout
[  700.556706][ T3449] vlan0 (unregistering): left allmulticast mode
[  700.565747][ T3449] gretap0 (unregistering): left allmulticast mode
[  700.572932][ T3449] vlan0 (unregistering): left promiscuous mode
[  700.589995][ T3449] gretap0 (unregistering): left promiscuous mode
[  700.600820][ T3449] bridge0: port 4(vlan0) entered disabled state
[  700.694779][T21358] 8021q: adding VLAN 0 to HW filter on device bond0
[  700.818142][T21358] 8021q: adding VLAN 0 to HW filter on device team0
[  700.861694][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.868872][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  701.008241][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.015490][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  701.090784][T21467] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  701.125410][T21467] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  701.142241][T21467] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  701.220231][T21467] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  701.255663][T21467] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  701.325026][T21467] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  701.338659][T21358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  701.370383][T21467] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  701.377549][ T3449] hsr_slave_0: left promiscuous mode
[  701.396008][ T3449] hsr_slave_1: left promiscuous mode
[  701.419816][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  701.438882][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_0
[  701.465349][ T3449] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  701.486633][ T3449] batman_adv: batadv0: Removing interface: batadv_slave_1
[  701.591989][ T3449] team0: left allmulticast mode
[  701.618937][ T3449] team_slave_0: left allmulticast mode
[  701.624474][ T3449] team_slave_1: left allmulticast mode
[  701.650634][ T3449] bridge0: port 3(team0) entered disabled state
[  701.663519][T21490] loop6: detected capacity change from 0 to 1024
[  701.670941][T21490] EXT4-fs: Ignoring removed mblk_io_submit option
[  701.697288][ T3449] bridge_slave_1: left allmulticast mode
[  701.703007][ T3449] bridge_slave_1: left promiscuous mode
[  701.712647][T21490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  701.723691][ T3449] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.748901][ T3449] bridge_slave_0: left allmulticast mode
[  701.754599][ T3449] bridge_slave_0: left promiscuous mode
[  701.764895][ T3449] bridge0: port 1(bridge_slave_0) entered disabled state
[  701.791161][T21490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  701.860053][ T3449] veth1_macvtap: left promiscuous mode
[  701.867611][ T3449] veth0_macvtap: left promiscuous mode
[  701.873300][ T3449] veth1_vlan: left promiscuous mode
[  701.879253][ T3449] veth0_vlan: left promiscuous mode
[  701.958070][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.007334][T21509] loop4: detected capacity change from 0 to 1024
[  703.062064][T21509] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  703.091001][T21509] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  703.177587][T21509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  703.264285][ T5085] Bluetooth: hci3: command 0x0c1a tx timeout
[  703.264538][T19097] Bluetooth: hci1: command 0x0406 tx timeout
[  703.342911][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  703.399680][ T3449] team_slave_1 (unregistering): left promiscuous mode
[  703.435566][T19097] Bluetooth: hci2: command 0x0419 tx timeout
[  703.460881][ T3449] team0 (unregistering): Port device team_slave_1 removed
[  703.583884][ T3449] team_slave_0 (unregistering): left promiscuous mode
[  703.596428][ T3449] team0 (unregistering): Port device team_slave_0 removed
[  703.702129][ T3449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  703.804772][ T3449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  704.215664][ T5853] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  704.363471][ T3449] bond0 (unregistering): Released all slaves
[  704.439967][ T5853] usb 5-1: Using ep0 maxpacket: 16
[  704.447019][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  704.459587][ T5853] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  704.469080][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.483919][ T5853] usb 5-1: config 0 descriptor??
[  705.000458][ T5853] mcp2221 0003:04D8:00DD.0048: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  705.293258][T21358] 8021q: adding VLAN 0 to HW filter on device batadv0
[  705.516235][T19097] Bluetooth: hci3: command 0x0c1a tx timeout
[  705.573938][ T5853] usb 5-1: USB disconnect, device number 42
[  705.659877][T19097] Bluetooth: hci2: command 0x0419 tx timeout
[  706.440695][T21358] veth0_vlan: entered promiscuous mode
[  706.487203][T21358] veth1_vlan: entered promiscuous mode
[  706.604087][T21358] veth0_macvtap: entered promiscuous mode
[  706.655148][T21358] veth1_macvtap: entered promiscuous mode
[  706.701056][T21583] loop4: detected capacity change from 0 to 1024
[  706.734357][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.739013][T21583] EXT4-fs: Ignoring removed orlov option
[  706.770004][T21583] EXT4-fs: Ignoring removed mblk_io_submit option
[  706.785097][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.797386][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.808743][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.808763][T21583] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  706.818614][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  706.818633][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  706.820357][T21358] batman_adv: batadv0: Interface activated: batadv_slave_0
[  706.863605][T21583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  706.949294][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  706.977377][T21585] netlink: 'syz.0.6171': attribute type 25 has an invalid length.
[  707.168378][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.202471][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.220372][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.231415][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.245848][T21358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  707.256706][T21358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  707.279517][T21358] batman_adv: batadv0: Interface activated: batadv_slave_1
[  707.334899][T21358] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  707.379009][T21358] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  707.402582][T21358] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  707.419371][T21358] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  707.665489][   T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.688901][   T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  707.712342][T19097] Bluetooth: hci3: command 0x0c1a tx timeout
[  707.874121][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  707.882469][T19097] Bluetooth: hci2: command 0x0419 tx timeout
[  707.915522][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  708.125620][T21617] netlink: 'syz.0.6181': attribute type 298 has an invalid length.
[  708.531710][T21630] loop7: detected capacity change from 0 to 16
[  708.587878][T21630] erofs: (device loop7): mounted with root inode @ nid 36.
[  708.628042][T21636] 9pnet_fd: p9_fd_create_tcp (21636): problem binding to privport
[  710.105243][T19097] Bluetooth: hci2: command 0x0419 tx timeout
[  711.194113][T21717] smc: net device bond0 applied user defined pnetid SYZ0
[  711.212557][T21717] smc: net device bond0 erased user defined pnetid SYZ0
[  711.502885][T21731] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6216'.
[  711.874980][T21695] loop4: detected capacity change from 0 to 65536
[  711.948092][T21695] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  712.029825][T21695] XFS (loop4): Ending clean mount
[  712.448141][ T7519] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  713.225829][T21771] netlink: 'syz.0.6226': attribute type 2 has an invalid length.
[  713.241833][T21771] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6226'.
[  713.930302][T21795] loop7: detected capacity change from 0 to 128
[  714.148969][T21773] loop4: detected capacity change from 0 to 40427
[  714.184480][T21773] F2FS-fs (loop4): Image doesn't support compression
[  714.202895][T21773] F2FS-fs (loop4): invalid crc value
[  714.481031][T21773] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  714.721625][ T7519] syz-executor: attempt to access beyond end of device
[  714.721625][ T7519] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  714.741846][ T7519] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  716.402022][T21871] loop4: detected capacity change from 0 to 256
[  716.452155][T21872] loop6: detected capacity change from 0 to 256
[  716.490704][T21871] FAT-fs (loop4): Directory bread(block 64) failed
[  716.512508][T21871] FAT-fs (loop4): Directory bread(block 65) failed
[  716.545781][T21871] FAT-fs (loop4): Directory bread(block 66) failed
[  716.571083][T21872] FAT-fs (loop6): Directory bread(block 64) failed
[  716.571559][T21871] FAT-fs (loop4): Directory bread(block 67) failed
[  716.586264][T21872] FAT-fs (loop6): Directory bread(block 65) failed
[  716.592940][T21872] FAT-fs (loop6): Directory bread(block 66) failed
[  716.610122][T21871] FAT-fs (loop4): Directory bread(block 68) failed
[  716.620073][T21872] FAT-fs (loop6): Directory bread(block 67) failed
[  716.632491][T21875] loop7: detected capacity change from 0 to 2048
[  716.646849][T21871] FAT-fs (loop4): Directory bread(block 69) failed
[  716.657933][T21872] FAT-fs (loop6): Directory bread(block 68) failed
[  716.664496][T21872] FAT-fs (loop6): Directory bread(block 69) failed
[  716.667473][T21875] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  716.680060][T21871] FAT-fs (loop4): Directory bread(block 70) failed
[  716.680102][T21871] FAT-fs (loop4): Directory bread(block 71) failed
[  716.680191][T21871] FAT-fs (loop4): Directory bread(block 72) failed
[  716.680217][T21871] FAT-fs (loop4): Directory bread(block 73) failed
[  716.714462][T21872] FAT-fs (loop6): Directory bread(block 70) failed
[  716.721029][T21872] FAT-fs (loop6): Directory bread(block 71) failed
[  716.818139][T21872] FAT-fs (loop6): Directory bread(block 72) failed
[  716.824737][T21872] FAT-fs (loop6): Directory bread(block 73) failed
[  717.118288][T21872] syz.6.6253: attempt to access beyond end of device
[  717.118288][T21872] loop6: rw=524288, sector=1192, nr_sectors = 4 limit=256
[  717.195837][T21872] syz.6.6253: attempt to access beyond end of device
[  717.195837][T21872] loop6: rw=0, sector=1192, nr_sectors = 4 limit=256
[  717.231856][   T28] kauditd_printk_skb: 10 callbacks suppressed
[  717.231871][   T28] audit: type=1800 audit(1770384933.339:467): pid=21872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6253" name="file1" dev="loop6" ino=1048947 res=0 errno=0
[  717.258137][    C0] vkms_vblank_simulate: vblank timer overrun
[  719.215517][T21944] block nbd0: Unsupported socket: should be TCP or UNIX.
[  720.091755][T21970] overlayfs: upper fs does not support tmpfile.
[  720.784365][T21967] loop7: detected capacity change from 0 to 40427
[  720.837204][T21967] F2FS-fs (loop7): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288)
[  720.869398][T21967] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  720.884913][T21967] F2FS-fs (loop7): build fault injection attr: rate: 0, type: 0x35f7
[  720.916108][T21967] F2FS-fs (loop7): build fault injection attr: rate: 690, type: 0x7ffff
[  720.939286][T21967] F2FS-fs (loop7): Image doesn't support compression
[  720.961345][T21967] F2FS-fs (loop7): invalid crc value
[  720.986706][T21967] F2FS-fs (loop7): Found nat_bits in checkpoint
[  721.118120][T21967] F2FS-fs (loop7): Start checkpoint disabled!
[  721.139152][T21967] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  721.146593][T21967] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  721.220092][T21967] syz.7.6279: attempt to access beyond end of device
[  721.220092][T21967] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  721.279553][T21967] F2FS-fs (loop7): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910
[  721.385240][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6292'.
[  721.412095][T22007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6292'.
[  721.606672][ T4807] kworker/u4:10: attempt to access beyond end of device
[  721.606672][ T4807] loop7: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  721.691490][ T4807] kworker/u4:10: attempt to access beyond end of device
[  721.691490][ T4807] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  721.708004][T22017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6296'.
[  721.708040][ T4807] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  721.724261][ T4807] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  721.762980][T22017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6296'.
[  721.907606][T22022] netlink: 'syz.6.6299': attribute type 8 has an invalid length.
[  721.916058][T22022] sch_fq: defrate 0 ignored.
[  722.858762][T22053] Context (ID=0x1) not attached to queue pair (handle=0x2:0x40)
[  723.172044][T22066] loop4: detected capacity change from 0 to 512
[  723.235134][T22066] EXT4-fs (loop4): 1 truncate cleaned up
[  723.266869][T22066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  723.448544][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.859302][T22124] loop7: detected capacity change from 0 to 512
[  724.887964][T22124] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.902477][T22124] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  725.320500][T21358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.214620][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6336'.
[  726.259035][T22133] loop4: detected capacity change from 0 to 131072
[  726.277677][T22133] F2FS-fs (loop4): invalid crc value
[  726.357216][T22133] F2FS-fs (loop4): Found nat_bits in checkpoint
[  726.425065][T22133] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  728.136885][T22195] program syz.0.6348 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  728.694148][T22213] loop4: detected capacity change from 0 to 64
[  729.202732][T22219] loop4: detected capacity change from 0 to 8192
[  729.248765][T22219] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  729.271713][T22219] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  729.308979][T22219] REISERFS (device loop4): using ordered data mode
[  729.377969][T22219] reiserfs: using flush barriers
[  729.424852][T22219] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  729.486393][T22219] REISERFS (device loop4): checking transaction log (loop4)
[  729.511488][T22219] REISERFS (device loop4): Using r5 hash to sort names
[  729.552021][T22219] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  729.598624][T22219] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  729.610524][T22230] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6361'.
[  731.770680][T22299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6382'.
[  731.780475][T22299] netem: change failed
[  731.864637][T22288] loop6: detected capacity change from 0 to 32768
[  731.929248][T22288] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  732.121099][T22288] XFS (loop6): Ending clean mount
[  732.311911][T21077] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  732.379725][T22323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6385'.
[  733.198039][T22350] veth0: entered promiscuous mode
[  733.225017][T22346] veth0: left promiscuous mode
[  734.011843][T22372] loop4: detected capacity change from 0 to 4096
[  734.095341][T22372] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  734.278499][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  735.209651][T22382] loop6: detected capacity change from 0 to 32768
[  735.260114][T22382] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  735.566457][ T9666] BTRFS error: device /dev/loop6 already registered with a higher generation, found 8 expect 10
[  736.563166][T22464] loop7: detected capacity change from 0 to 512
[  736.642725][T22464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  736.722086][T22464] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  736.955190][T22464] EXT4-fs error (device loop7): ext4_get_first_dir_block:3606: inode #12: comm syz.7.6427: directory missing '..'
[  737.141568][T21358] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  737.422621][T22498] erspan0: entered promiscuous mode
[  737.457737][T22500] loop6: detected capacity change from 0 to 512
[  737.597960][  T787] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  737.812237][  T787] usb 5-1: Using ep0 maxpacket: 8
[  737.826340][  T787] usb 5-1: config index 0 descriptor too short (expected 6427, got 27)
[  737.859972][  T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  737.896919][  T787] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  737.909968][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6444'.
[  737.931665][  T787] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  737.949038][T22516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6444'.
[  737.961355][  T787] usb 5-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  737.969527][  T787] usb 5-1: Product: syz
[  737.983440][  T787] usb 5-1: Manufacturer: syz
[  738.021197][  T787] usb 5-1: config 0 descriptor??
[  738.348029][T22148] usb 5-1: USB disconnect, device number 43
[  738.374857][T22532] loop7: detected capacity change from 0 to 256
[  738.423680][  T787] kernel write not supported for file /sg0 (pid: 787 comm: kworker/0:2)
[  738.439933][T22532] exFAT-fs (loop7): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d)
[  738.572022][T22532] exFAT-fs (loop7): invalid start cluster (520)
[  739.719511][T22540] loop7: detected capacity change from 0 to 32768
[  739.746080][T22540] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop7 scanned by syz.7.6451 (22540)
[  739.827010][T22540] BTRFS info (device loop7): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  739.880426][T22540] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  739.928523][T22540] BTRFS info (device loop7): using free space tree
[  740.387943][T22540] BTRFS info (device loop7): enabling ssd optimizations
[  740.430173][T22540] BTRFS info (device loop7): auto enabling async discard
[  741.008962][T22598] loop4: detected capacity change from 0 to 8192
[  741.068927][T22598] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  741.154104][T22598] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  741.227825][T22598] REISERFS (device loop4): using ordered data mode
[  741.299329][T22598] reiserfs: using flush barriers
[  741.338482][T22598] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  741.490057][T22598] REISERFS (device loop4): checking transaction log (loop4)
[  741.586291][T22598] REISERFS (device loop4): Using r5 hash to sort names
[  741.627428][T21358] BTRFS info (device loop7): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  741.637915][T22598] REISERFS (device loop4): using 3.5.x disk format
[  741.707106][T22598] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  742.411971][T22579] loop6: detected capacity change from 0 to 262144
[  742.434533][T22579] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.6462 (22579)
[  742.460354][T22579] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  742.470634][T22579] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  742.479929][T22579] BTRFS info (device loop6): using free space tree
[  742.750808][T22579] BTRFS info (device loop6): enabling ssd optimizations
[  743.089912][T22651] netlink: 'syz.0.6472': attribute type 12 has an invalid length.
[  743.176221][T21077] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  743.824356][T22665] loop6: detected capacity change from 0 to 2048
[  743.905164][T22665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  743.950839][T22622] loop4: detected capacity change from 0 to 40427
[  743.974675][T22622] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  744.000896][T22622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  744.044778][T22622] F2FS-fs (loop4): invalid crc value
[  744.108320][T22622] F2FS-fs (loop4): Found nat_bits in checkpoint
[  744.347523][T22622] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  744.397841][T22622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  744.505940][T22687] netlink: 92 bytes leftover after parsing attributes in process `syz.6.6481'.
[  744.557264][T22687] netem: unknown loss type 0
[  744.567628][T22687] netem: change failed
[  744.583593][T22689] usb usb1: check_ctrlrecip: process 22689 (syz.7.6482) requesting ep 01 but needs 81
[  744.628809][T22689] usb usb1: usbfs: process 22689 (syz.7.6482) did not claim interface 0 before use
[  744.924729][ T1195] Process accounting resumed
[  744.979261][T22699] Process accounting resumed
[  745.176287][T22707] loop7: detected capacity change from 0 to 64
[  746.160296][T22736] loop7: detected capacity change from 0 to 16
[  746.250690][T22738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:33) already exists on: vlan1
[  746.320431][T22738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  746.513925][T22743] loop6: detected capacity change from 0 to 4096
[  746.553816][T22747] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6500'.
[  746.591807][T22743] ntfs: (device loop6): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  746.646322][T22743] ntfs: (device loop6): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  746.748466][T22743] ntfs: volume version 3.1.
[  746.822129][T22743] ntfs: (device loop6): ntfs_nlstoucs(): Name using character set cp949 contains characters that cannot be converted to Unicode.
[  746.876356][T22743] ntfs: (device loop6): ntfs_lookup(): Failed to convert name to Unicode.
[  747.234571][T22763] nbd0: detected capacity change from 0 to 127
[  747.283926][T19097] block nbd0: Receive control failed (result -104)
[  747.335026][ T1058] block nbd0: Dead connection, failed to find a fallback
[  747.343318][ T1058] block nbd0: shutting down sockets
[  747.352538][ T1058] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  747.368030][ T1058] Buffer I/O error on dev nbd0, logical block 1, async page read
[  747.375995][ T1058] Buffer I/O error on dev nbd0, logical block 2, async page read
[  747.385555][ T1058] Buffer I/O error on dev nbd0, logical block 3, async page read
[  748.411500][T22806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6520'.
[  749.963253][T22857] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  750.040087][T22859] random: crng reseeded on system resumption
[  750.965336][T22860] loop7: detected capacity change from 0 to 32768
[  750.991087][T22873] program syz.4.6538 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  751.043251][T22860] XFS (loop7): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  751.271104][T21358] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  751.311575][T22883] loop4: detected capacity change from 0 to 4096
[  751.446649][ T9666] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  751.545779][T19097] Bluetooth: hci1: unexpected event for opcode 0x1003
[  752.382592][T22903] tmpfs: Bad value for 'mpol'
[  752.396562][T22905] netlink: 'syz.0.6549': attribute type 1 has an invalid length.
[  752.414403][T22905] netlink: 'syz.0.6549': attribute type 4 has an invalid length.
[  752.422173][T22905] netlink: 212 bytes leftover after parsing attributes in process `syz.0.6549'.
[  753.120056][ T1195] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  753.333586][ T1195] usb 5-1: Using ep0 maxpacket: 32
[  753.345108][ T1195] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  753.360600][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  753.372660][ T1195] usb 5-1: config 0 descriptor??
[  753.409750][ T1195] as10x_usb: device has been detected
[  753.425219][ T1195] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  753.463431][ T1195] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  753.605225][ T1195] as10x_usb: error during firmware upload part1
[  753.630230][ T1195] Registered device nBox DVB-T Dongle
[  753.636211][ T1195] usb 5-1: USB disconnect, device number 44
[  753.694464][ T1195] Unregistered device nBox DVB-T Dongle
[  753.697422][ T1195] as10x_usb: device has been disconnected
[  753.717823][ T5085] Bluetooth: hci2: command 0x0419 tx timeout
[  754.497262][T22947] loop6: detected capacity change from 0 to 1024
[  754.675263][T22949] loop6: detected capacity change from 0 to 1024
[  754.713604][T22949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  754.758322][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  754.862554][T22945] loop4: detected capacity change from 0 to 32768
[  754.887914][T22945] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  754.899582][T22945] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  754.920576][T22945] BTRFS info (device loop4): using free space tree
[  755.018814][T22945] BTRFS info (device loop4): enabling ssd optimizations
[  755.047610][T22945] BTRFS info (device loop4): auto enabling async discard
[  755.164890][ T7519] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  755.808148][T22992] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6581'.
[  755.860688][ T5085] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  755.879091][ T5085] Bluetooth: hci1: Injecting HCI hardware error event
[  755.892147][ T5085] Bluetooth: hci1: hardware error 0x00
[  755.905571][T22994] loop7: detected capacity change from 0 to 1024
[  756.003776][   T11] hfsplus: b-tree write err: -5, ino 8
[  756.149285][T21462] kernel read not supported for file /dsp (pid: 21462 comm: kworker/0:6)
[  756.245175][T23001] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  756.459570][T23007] erspan0: entered promiscuous mode
[  756.790632][T23016] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6592'.
[  756.800163][T23016] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6592'.
[  756.810004][T23015] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6592'.
[  756.822839][T23016] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.6592'.
[  757.313160][T23027] loop7: detected capacity change from 0 to 64
[  757.323263][T23027] BFS-fs: bfs_fill_super(): loop7 is unclean, continuing
[  758.000575][T23037] tap0: tun_chr_ioctl cmd 2148553947
[  758.024969][T23039] loop7: detected capacity change from 0 to 2048
[  758.066115][T23039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  758.085935][ T5085] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  759.122542][T23071] loop6: detected capacity change from 0 to 4096
[  759.164308][T23076] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  759.858693][T23094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6624'.
[  760.521034][T23106] loop4: detected capacity change from 0 to 512
[  760.544511][T23106] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  760.560635][T23106] EXT4-fs (loop4): 1 truncate cleaned up
[  760.572619][T23106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  760.682478][T23106] fscrypt (loop4, inode 18): Mutually exclusive encryption flags (0x18)
[  760.803618][ T7519] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  761.271597][T23127] loop7: detected capacity change from 0 to 65
[  761.289462][T23127] BFS-fs: bfs_fill_super(): NOTE: filesystem loop7 was created with 512 inodes, the real maximum is 511, mounting anyway
[  761.925025][T23117] loop4: detected capacity change from 0 to 40427
[  761.937438][ T5085] Bluetooth: hci2: command 0x0419 tx timeout
[  761.963189][T23117] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  761.971191][T23117] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  761.982352][T23117] F2FS-fs (loop4): invalid crc value
[  762.019208][T23117] F2FS-fs (loop4): Found nat_bits in checkpoint
[  762.218087][T23117] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  762.236907][T23117] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  762.961978][T23146] loop7: detected capacity change from 0 to 32768
[  763.025242][T23146] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 scanned by syz.7.6644 (23146)
[  763.109962][T23146] BTRFS info (device loop7): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  763.124204][T23146] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  763.146748][T23146] BTRFS info (device loop7): using free space tree
[  763.343876][T23146] BTRFS info (device loop7): enabling ssd optimizations
[  763.374980][T23146] BTRFS info (device loop7): auto enabling async discard
[  763.603399][T21358] BTRFS info (device loop7): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  763.730849][T23155] loop6: detected capacity change from 0 to 32768
[  763.835561][T23155] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  764.070186][T23155] XFS (loop6): Ending clean mount
[  764.088174][T23155] XFS (loop6): Quotacheck needed: Please wait.
[  764.411154][T19097] Bluetooth: hci2: command 0x0419 tx timeout
[  764.446245][T23155] XFS (loop6): Quotacheck: Done.
[  765.139780][T21077] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  765.221736][T23199] loop7: detected capacity change from 0 to 131072
[  765.231068][T23199] F2FS-fs (loop7): Invalid log sectors per block(570425347) log sectorsize(9)
[  765.240021][T23199] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  765.256587][T23199] F2FS-fs (loop7): invalid crc value
[  765.405102][T23199] F2FS-fs (loop7): Try to recover 2th superblock, ret: -30
[  765.412522][T23199] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b
[  765.439640][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[  765.446634][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[  768.185765][T23250] loop6: detected capacity change from 0 to 4096
[  768.231496][T23242] loop4: detected capacity change from 0 to 32768
[  768.240981][T23250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.282669][T23246] loop7: detected capacity change from 0 to 32768
[  768.342580][T23242] ea_get: invalid extended attribute
[  768.357151][T23246] ERROR: (device loop7): jfs_readdir: DT_GETPAGE: dtree page corrupt
[  768.357151][T23246] 
[  768.361947][T23242] ffff88805df58c70: 04 00 00 00                                      ....
[  768.381945][T23246] ERROR: (device loop7): remounting filesystem as read-only
[  768.400592][T23250] fs-verity: sha256 using implementation "sha256-avx2"
[  768.445729][T23242] ea_get: invalid extended attribute
[  768.454969][T23250] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.6677: bg 0: block 146: padding at end of block bitmap is not set
[  768.473317][T23242] ffff88805df58c70: 04 00 00 00                                      ....
[  768.514792][T23256] ea_get: invalid extended attribute
[  768.520133][T23256] ffff88805df58c70: 04 00 00 00                                      ....
[  768.541778][T23250] fs-verity (loop6, inode 16): Error -117 writing Merkle tree block 0
[  768.560766][T23250] fs-verity (loop6, inode 16): Error -117 building Merkle tree
[  768.698826][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  768.845590][T23265] loop6: detected capacity change from 0 to 512
[  768.921505][T23265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  768.959001][T23265] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  769.082751][   T28] audit: type=1800 audit(1770384981.855:468): pid=23265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6683" name="file1" dev="loop6" ino=15 res=0 errno=0
[  769.275399][T21077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  769.946719][T23287] loop7: detected capacity change from 0 to 2048
[  769.990543][T23287] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  770.040625][T23290] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  770.497638][T23303] input: syz0 as /devices/virtual/input/input60
[  770.607554][T23307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6701'.
[  770.759703][T23311] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  770.807322][ T3449] Bluetooth: hci4: Frame reassembly failed (-84)
[  771.793065][  T786] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  771.996169][  T786] usb 5-1: Using ep0 maxpacket: 16
[  772.002929][  T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  772.013994][  T786] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  772.024346][  T786] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  772.035047][  T786] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  772.050006][  T786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  772.059199][  T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  772.067273][  T786] usb 5-1: SerialNumber: syz
[  772.075397][T23333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  772.082908][T23333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  772.090998][  T786] hub 5-1:1.0: bad descriptor, ignoring hub
[  772.097601][  T786] hub: probe of 5-1:1.0 failed with error -5
[  772.314204][T23333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  772.325943][T23333] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  772.783371][  T786] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42
[  772.958995][ T5085] Bluetooth: hci4: command 0x1003 tx timeout
[  772.968334][T19097] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  773.278171][ T5842] usb 5-1: USB disconnect, device number 45
[  773.287163][ T5842] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device
[  773.630932][T23346] loop7: detected capacity change from 0 to 32768
[  773.673706][T23346] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  773.716592][T23346] XFS (loop7): Ending clean mount
[  773.756053][T23346] XFS (loop7): Quotacheck needed: Please wait.
[  773.876593][T23346] XFS (loop7): Quotacheck: Done.
[  774.217761][T21358] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  774.295345][ T4802] tipc: Subscription rejected, illegal request
[  775.040482][T23400] loop7: detected capacity change from 0 to 128
[  775.147227][   T28] audit: type=1800 audit(1770384987.524:469): pid=23400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6728" name="file1" dev="loop7" ino=1048951 res=0 errno=0
[  775.149526][T23402] input: syz1 as /devices/virtual/input/input62
[  775.432501][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6733'.
[  775.958314][T23432] loop6: detected capacity change from 0 to 8192
[  776.278373][T23433] loop4: detected capacity change from 0 to 32768
[  776.324537][T23433] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  776.324537][T23433] 
[  776.347531][T23433] ERROR: (device loop4): remounting filesystem as read-only
[  776.358765][T23433] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  776.358765][T23433] 
[  776.431135][ T7519] ------------[ cut here ]------------
[  776.436836][ T7519] kernel BUG at fs/jfs/inode.c:175!
[  776.448409][ T7519] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  776.454527][ T7519] CPU: 1 PID: 7519 Comm: syz-executor Not tainted syzkaller #0
[  776.462088][ T7519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  776.472173][ T7519] RIP: 0010:jfs_evict_inode+0x431/0x440
[  776.477748][ T7519] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 89 f0 df fe e9 16 fe ff ff e8 4f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41
[  776.497368][ T7519] RSP: 0018:ffffc9000479fac0 EFLAGS: 00010293
[  776.503452][ T7519] RAX: ffffffff82ff4b61 RBX: ffff88805df5a930 RCX: ffff888019f51e00
[  776.511443][ T7519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805df5a930
[  776.519429][ T7519] RBP: 0000000000000001 R08: ffffffff911bf637 R09: 1ffffffff2237ec6
[  776.527414][ T7519] R10: dffffc0000000000 R11: fffffbfff2237ec7 R12: dffffc0000000000
[  776.535392][ T7519] R13: dffffc0000000000 R14: ffff88805df5a5b8 R15: ffff88805df5a968
[  776.543360][ T7519] FS:  0000555558857500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  776.552298][ T7519] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  776.558869][ T7519] CR2: 0000555558872a28 CR3: 0000000062b47000 CR4: 00000000003506e0
[  776.566837][ T7519] Call Trace:
[  776.570114][ T7519]  <TASK>
[  776.573026][ T7519]  ? evict+0x4c4/0x8d0
[  776.577080][ T7519]  ? jfs_write_inode+0x220/0x220
[  776.582009][ T7519]  evict+0x4ca/0x8d0
[  776.585893][ T7519]  ? proc_nr_inodes+0x230/0x230
[  776.590720][ T7519]  ? do_raw_spin_unlock+0x121/0x230
[  776.595904][ T7519]  ? do_raw_spin_unlock+0x121/0x230
[  776.601086][ T7519]  evict_inodes+0x606/0x6a0
[  776.605572][ T7519]  ? clear_inode+0x150/0x150
[  776.610141][ T7519]  generic_shutdown_super+0x97/0x2b0
[  776.615407][ T7519]  kill_block_super+0x44/0x90
[  776.620062][ T7519]  deactivate_locked_super+0x97/0x100
[  776.625416][ T7519]  cleanup_mnt+0x43b/0x4d0
[  776.629812][ T7519]  task_work_run+0x1d4/0x260
[  776.634386][ T7519]  ? task_work_cancel+0x220/0x220
[  776.639395][ T7519]  ? exit_to_user_mode_loop+0x3b/0x110
[  776.644840][ T7519]  exit_to_user_mode_loop+0xe6/0x110
[  776.650111][ T7519]  exit_to_user_mode_prepare+0xee/0x180
[  776.655651][ T7519]  syscall_exit_to_user_mode+0x1a/0x50
[  776.661100][ T7519]  do_syscall_64+0x61/0xa0
[  776.665508][ T7519]  ? clear_bhb_loop+0x40/0x90
[  776.670171][ T7519]  ? clear_bhb_loop+0x40/0x90
[  776.674829][ T7519]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  776.680703][ T7519] RIP: 0033:0x7f3284b9c117
[  776.685105][ T7519] Code: a2 c7 05 7c c4 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  776.704698][ T7519] RSP: 002b:00007fffbbe0c888 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  776.713093][ T7519] RAX: 0000000000000000 RBX: 00007f3284c0471f RCX: 00007f3284b9c117
[  776.721058][ T7519] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffbbe0c940
[  776.729026][ T7519] RBP: 00007fffbbe0c940 R08: 00007fffbbe0d940 R09: 00000000ffffffff
[  776.736980][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffbbe0d9d0
[  776.744938][ T7519] R13: 00007f3284c0471f R14: 00000000000b8fdf R15: 00007fffbbe0da10
[  776.752895][ T7519]  </TASK>
[  776.755903][ T7519] Modules linked in:
[  776.766246][ T7519] ---[ end trace 0000000000000000 ]---
[  776.771748][ T7519] RIP: 0010:jfs_evict_inode+0x431/0x440
[  776.777576][ T7519] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 89 f0 df fe e9 16 fe ff ff e8 4f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41
[  776.797628][ T7519] RSP: 0018:ffffc9000479fac0 EFLAGS: 00010293
[  776.804954][ T7519] RAX: ffffffff82ff4b61 RBX: ffff88805df5a930 RCX: ffff888019f51e00
[  776.814179][ T7519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88805df5a930
[  776.822470][ T7519] RBP: 0000000000000001 R08: ffffffff911bf637 R09: 1ffffffff2237ec6
[  776.831066][ T7519] R10: dffffc0000000000 R11: fffffbfff2237ec7 R12: dffffc0000000000
[  776.839132][ T7519] R13: dffffc0000000000 R14: ffff88805df5a5b8 R15: ffff88805df5a968
[  776.847114][ T7519] FS:  0000555558857500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  776.856169][ T7519] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  776.863928][ T7519] CR2: 0000555558872a28 CR3: 0000000062b47000 CR4: 00000000003506e0
[  776.873455][ T7519] Kernel panic - not syncing: Fatal exception
[  776.879856][ T7519] Kernel Offset: disabled
[  776.884179][ T7519] Rebooting in 86400 seconds..