last executing test programs:

3m0.75828686s ago: executing program 2 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)

3m0.605670272s ago: executing program 2 (id=166):
syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000480)=ANY=[@ANYBLOB='map=off,dmode=0x0000000000000006,iocharset=cp865,cruft,mode=0x0000000000000003,session=0x0000000000000019,norock,overriderockperm,utf8,unhide,map=off,norock,cruft,dmode=0x0000000000000005,session=0x0000000000000027,showassoc,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66738772616e736d7574653d7569642c736d61636b66736465663d6d61637475726b6973682c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB="2c0184f74e7d114f29b02318df9c4e7ce9d351a4f7daf8ff543e7ea72af7282670a98729e30e0a4550c118a7e1cf8975dd00004375fcec11cb18fc783f5d60e258f97a47548068736cacbb6ea79b4b7cae15dc7087c135cc5742c447bd6f2d7c28b87a44156000739a87c2c0"], 0x1, 0x93b, &(0x7f0000001300)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x125)
getdents64(r0, &(0x7f0000000100)=""/117, 0x75)

3m0.264170318s ago: executing program 2 (id=169):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_to_team\x00', 0x10)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)

3m0.055913651s ago: executing program 2 (id=172):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2cf, &(0x7f0000002080)="$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")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)

2m59.723229627s ago: executing program 2 (id=177):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
read$FUSE(r0, 0x0, 0x0)

2m59.197240764s ago: executing program 2 (id=182):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)

2m58.803241851s ago: executing program 32 (id=182):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700"], 0x48)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000640)=""/4139, &(0x7f0000000140)=0x102b)

2m15.664457631s ago: executing program 4 (id=528):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m15.538960393s ago: executing program 4 (id=529):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7c, 0x0, 0x0, 0xffbfffff}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a"], 0x24}}, 0x40c0)

2m15.446148115s ago: executing program 4 (id=530):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58}, 0x7)

2m15.367773526s ago: executing program 4 (id=531):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x81c00a, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c696f636861727365743d69736f383835392d312c666d61736b3d30303030303030303030303030303030303030303036362c6e6f6e756d7461696c3d302c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303030332c73686f72746e616d653d6c6f7765722c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c757466383d302c756e695f786c6174653d312c756e695f786c6174653d302c666c7573682c757466383d302c726f6469722c747a3d5554432c00e696e27e745267d0e7f7d60cf64c4d116172285e0a94b37c3f04b4e454913b1615b6c103a4be033c3f79c81a7a0dc9f3282eb2b984b8df829f11f7b15ceaa2ddb341548691e92d41d923144fa5f6aa8b37c7698e74a04d87cb16f3c338160646d1719f9aa1097cb78032fa4c9c60c14840662537510c0ac9f95a646f5231c0c9eb096b898803099b3050797137354ed2fb2a3dd97ad790f0758b4561eb7180b4b366c9ac840ca3d57727827ab961af0bb24ac6b14796d3bedfa4addb1c2f59217a563ca0a3729d45669905a6f0f3dbf3fd22ab36dfe7cf80913ecb4656ca"], 0x6, 0x2cf, &(0x7f0000002080)="$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")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000480)='./file0/../file0/../file0\x00', &(0x7f0000000240)='debugfs\x00', 0x0, 0x0)

2m15.140350059s ago: executing program 4 (id=532):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000056, &(0x7f0000000540), 0x1, 0x54f, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000})

2m14.682568346s ago: executing program 4 (id=536):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x8925, 0xffffffffffff7ffe)

2m14.113145715s ago: executing program 33 (id=536):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5)
ioctl$TCFLSH(r0, 0x8925, 0xffffffffffff7ffe)

31.400091505s ago: executing program 0 (id=1614):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2)
read(r0, 0x0, 0x0)
read(r0, 0x0, 0x0)

30.44448638s ago: executing program 0 (id=1621):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x300, &(0x7f00000001c0)={&(0x7f0000000380)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x100, 0x44}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'gretap0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x44}, 0x1, 0x40000000, 0x0, 0x81}, 0x4048884)

30.191070174s ago: executing program 0 (id=1624):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x2}, 0x94)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @loopback, 0xe0c}, {0xa, 0x4e23, 0x7, @remote, 0x103}, 0xffffffffffffffff, 0x7}}, 0x48)

29.944012368s ago: executing program 0 (id=1627):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000080)='./file2\x00', 0x402, &(0x7f0000001280)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="ec1a3881369fae6987d7a6922db874bcb0563edbf212875f142a04bbe14fd11ed31543677ddfbd12a760f13dd2fd476b0d7e088b2ac5eaebe64ab225975b882e26ccc04ae1e56422927a5de974cf1bc2873d781e837bdea83a1a8ff1fc5670132de294b6b2ae840099cb4d037cc46b3980928a506f800befa5037ecc4c128dc83d62f8d7ede6c05d595ab96a009e378894d776a0e83d4c1bbd9cfe6dbf29c3c5", @ANYRESOCT, @ANYBLOB="650dff969a08ff9e724d5d7c4ef89e23d56dda29c31665f63ec8a6f772a525c5b7212d46fcdce41a1775bdc7ae8d824d46ff9c67feac09d995afa0aed98ce5381701ee97a11793808dbb0a95927953efd647f04a4d25be7c929451bd4f6a217f6976fe903f0542222969f6d90184c98b67298ed804d7b1b0e667a2c734bec13f27287182ddd1e4f5ecf7"], 0x1, 0x242, &(0x7f0000000e40)="$eJzsmL+LE0EUx7+zu5kkIqLNFTYKHhjRSy57KNeE8wTBysYTtdLgrceZvYskK5iA4mFjo52FYGPhP2BxxdV2/gOCFioIFqawEEQOVt7O7GbiJpdltfN9iuE7M2/m/ZjNKwKGYf5bPn/68fHJucWVUwD2YxZFvf7VBoRQ2jLsPzy/e/JZ4/yL1+9fvdk8cH/nz/voSBjuhuZCaQ//DoDKso0g8RTGZ3+RmNWTFRQTfRkWTmh9BQJVrW/AKsT3evgZKoDbELim19tkX63eWve96s22v0pinoY6DS4NI/lSfIMtgVU9pxuFsd/t9VtN3/c6hnD03pitXCJx1ppJ1a8AicGyhYaOluKj+K8+frRFK3Ft5mEl9avDQl0nsbCblAmLKMa1USUx8j/sDPO3i4l7etpW0x+brb4V05Is+b5nd3uN7/+kWKY4NJfveIXSOatXHgDQWweRJwwMTy3B6xQw3LLpSx0xPpr55jKADJ9OJBzjdTDeeEm/aI4EL6aymCCeZor570WuLGIxM9h5m976op9SMeZ4KKa7ECPfj9zLuJQ15jik/BUro9+yclZMTv51A++2Vf8IXwocB2TcPxyjf9WCjTu1bq8/t77RXPPWvE3XXTgjgIen3VrUiNSY6nvD/lyO+tM+oz8XJthKS+JeMwg6dTVKIVFGEHTcaO4aP5tL2+1v1/WxABcAHFMTapsyudFO+RBS2ViRLalK2ohhGIZhGIZhGIZhGIZhGCYrI394HoFAOB1XWf8OAAD//5X0aKk=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000380)='./file0\x00')
chdir(&(0x7f0000000080)='./file0\x00')

29.664109453s ago: executing program 0 (id=1631):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
creat(&(0x7f00000002c0)='./file0\x00', 0x5f)

29.100012951s ago: executing program 0 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000)

28.678850828s ago: executing program 34 (id=1637):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r1 = socket$netlink(0x10, 0x3, 0x9)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000017c0)=r0, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x4000)

4.048812376s ago: executing program 3 (id=1826):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x5c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x4, "7738e21f"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x6, 0x10, "711900797b56846b16efc33779dd8380"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.851900335s ago: executing program 6 (id=1834):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r1 = fanotify_init(0x1a, 0x800)
fanotify_mark(r1, 0x1, 0x40000000, r0, 0x0)
fanotify_mark(r1, 0x2, 0x4800100a, r0, 0x0)

2.851597415s ago: executing program 6 (id=1835):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c000a0001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1], 0xb4}}, 0x0)

2.741292947s ago: executing program 6 (id=1836):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[], 0x1, 0x120b, &(0x7f0000002300)="$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")
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1e0)

2.700303788s ago: executing program 1 (id=1837):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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")
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, 0x0)

2.417987612s ago: executing program 1 (id=1839):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r0, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)

2.275955954s ago: executing program 6 (id=1841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x91, 0x1862b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x2b}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x64048040)

2.169523265s ago: executing program 1 (id=1842):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60ff040000442f00fc000000000000000000000000000000fe8000000000000000000000000000aa042022eb00000000"], 0x0)

2.048124007s ago: executing program 5 (id=1843):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004)

1.87977989s ago: executing program 6 (id=1844):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x183f43, 0x9a)
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001040)=ANY=[], 0x841, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

1.813230041s ago: executing program 5 (id=1845):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x1}, 0x8)

1.769362952s ago: executing program 1 (id=1846):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2, {0xfff2}}}, 0x24}}, 0x0)

1.583833215s ago: executing program 5 (id=1847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810c12, &(0x7f0000000400)=ANY=[], 0x2, 0x1e3, &(0x7f0000000b40)="$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")

1.583177075s ago: executing program 1 (id=1848):
syz_mount_image$jfs(&(0x7f00000001c0), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000040)={[{@noquota}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@errors_continue}, {@errors_continue}, {}, {@uid}, {@quota}, {@uid}, {@usrquota}]}, 0x1, 0x614f, &(0x7f000000ccc0)="$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")
chdir(&(0x7f0000000440)='./file0\x00')
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)

1.339251849s ago: executing program 5 (id=1849):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000})

1.298929849s ago: executing program 3 (id=1850):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1c76e3, 0x40)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

991.959314ms ago: executing program 5 (id=1851):
socket$packet(0x11, 0xa, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]})
syz_emit_ethernet(0x82, &(0x7f0000000580)=ANY=[@ANYBLOB="cf599d3baed500000000000086dd60f20000004c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0006000800"], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0)

991.603754ms ago: executing program 3 (id=1852):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
mkdir(&(0x7f0000000100)='./control\x00', 0xa0)
mount$afs(&(0x7f0000000080)=@cell={0x25, 'syz1:', 'syz1', '.readonly'}, &(0x7f00000000c0)='./control\x00', &(0x7f0000000000), 0x200000, 0x0)

818.881877ms ago: executing program 5 (id=1853):
r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

784.343537ms ago: executing program 3 (id=1854):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x135}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

188.023187ms ago: executing program 3 (id=1855):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0xfd03}}, 0x80)

123.310648ms ago: executing program 6 (id=1856):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r1], 0x8b)

113.555008ms ago: executing program 1 (id=1857):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000b00)={@random="9139a817b9cb", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0xdd, 0x100, @void}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/211, 0x45}, {0x0}], 0x2}, 0x7ff}], 0x1, 0x400100ea, 0x0)

0s ago: executing program 3 (id=1858):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0xa000000c})
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

kernel console output (not intermixed with test programs):

FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  189.608865][ T8707] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  189.623566][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.651392][ T8707] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff
[  189.687660][ T8707] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8
[  189.700963][ T8707] F2FS-fs (loop3): invalid crc value
[  189.740565][ T8707] F2FS-fs (loop3): Found nat_bits in checkpoint
[  189.877120][ T8707] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  189.892384][ T8707] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  189.899123][ T8736] loop1: detected capacity change from 0 to 2048
[  190.016523][ T8736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.099486][ T8741] loop5: detected capacity change from 0 to 1024
[  190.117051][ T5786] syz-executor: attempt to access beyond end of device
[  190.117051][ T5786] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  190.148296][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  190.160203][ T5786] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  190.308001][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.328996][   T11] hfsplus: b-tree write err: -5, ino 4
[  190.500373][ T8745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  190.508043][ T8743] loop5: detected capacity change from 0 to 2048
[  190.583646][ T8743] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.679781][ T8737] loop0: detected capacity change from 0 to 32768
[  191.021935][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  191.068232][ T8754] loop0: detected capacity change from 0 to 512
[  191.097884][ T8754] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  191.158083][ T8754] EXT4-fs (loop0): orphan cleanup on readonly fs
[  191.168651][ T8754] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  191.185138][ T8754] EXT4-fs warning (device loop0): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  191.210101][ T8754] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  191.243260][ T8754] EXT4-fs (loop0): 1 truncate cleaned up
[  191.260822][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  191.292439][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  191.315718][ T5855] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  191.363921][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  191.389228][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.406560][ T5855] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  191.443120][ T5855] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  191.453984][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.463351][ T5855] usb 2-1: Product: syz
[  191.467553][ T5855] usb 2-1: Manufacturer: syz
[  191.472609][ T5855] usb 2-1: SerialNumber: syz
[  191.483176][ T5855] usb 2-1: config 0 descriptor??
[  191.500388][ T5855] ums-isd200 2-1:0.0: USB Mass Storage device detected
[  191.621754][ T5826] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  191.724469][ T5855] scsi host1: usb-storage 2-1:0.0
[  191.821698][ T5826] usb 6-1: Using ep0 maxpacket: 16
[  191.846083][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.870431][ T5826] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  191.902306][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.929870][  T786] usb 2-1: USB disconnect, device number 9
[  191.942445][ T8765] loop3: detected capacity change from 0 to 40427
[  191.948031][ T5826] usb 6-1: config 0 descriptor??
[  191.962841][ T8765] F2FS-fs (loop3): build fault injection attr: rate: 693, type: 0x7ffff
[  191.987752][ T8765] F2FS-fs (loop3): Image doesn't support compression
[  192.045121][ T8765] F2FS-fs (loop3): invalid crc value
[  192.064198][ T8765] F2FS-fs (loop3): Found nat_bits in checkpoint
[  192.148841][ T8765] F2FS-fs (loop3): Start checkpoint disabled!
[  192.177616][ T8765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  192.240576][ T8783] loop0: detected capacity change from 0 to 64
[  192.259631][   T28] audit: type=1800 audit(1753201374.038:33): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.947" name="file1" dev="loop3" ino=10 res=0 errno=0
[  192.264523][ T8765] F2FS-fs (loop3): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0
[  192.307643][ T8783] hfs: unable to locate alternate MDB
[  192.335581][ T8783] hfs: continuing without an alternate MDB
[  192.335933][ T8765] syz.3.947: attempt to access beyond end of device
[  192.335933][ T8765] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  192.413075][ T5826] apple 0003:05AC:024B.0009: fixing up MacBook JIS keyboard report descriptor
[  192.438365][ T5826] apple 0003:05AC:024B.0009: item fetching failed at offset 2/69
[  192.469917][ T5826] apple 0003:05AC:024B.0009: parse failed
[  192.507993][ T5826] apple: probe of 0003:05AC:024B.0009 failed with error -22
[  192.654606][   T27] usb 6-1: USB disconnect, device number 4
[  192.694046][   T12] kworker/u4:1: attempt to access beyond end of device
[  192.694046][   T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  192.723508][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  192.732431][   T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  192.888573][ T8795] loop0: detected capacity change from 0 to 256
[  192.955587][ T8795] FAT-fs (loop0): Directory bread(block 64) failed
[  192.962315][ T8798] netlink: 'syz.1.961': attribute type 4 has an invalid length.
[  192.962387][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.961'.
[  192.986564][ T8795] FAT-fs (loop0): Directory bread(block 65) failed
[  193.006745][ T8795] FAT-fs (loop0): Directory bread(block 66) failed
[  193.015427][ T8795] FAT-fs (loop0): Directory bread(block 67) failed
[  193.022670][ T8795] FAT-fs (loop0): Directory bread(block 68) failed
[  193.029319][ T8795] FAT-fs (loop0): Directory bread(block 69) failed
[  193.040201][ T8795] FAT-fs (loop0): Directory bread(block 70) failed
[  193.048860][ T8795] FAT-fs (loop0): Directory bread(block 71) failed
[  193.059737][ T8795] FAT-fs (loop0): Directory bread(block 72) failed
[  193.067206][ T8795] FAT-fs (loop0): Directory bread(block 73) failed
[  193.158678][ T8800] loop1: detected capacity change from 0 to 64
[  193.444323][ T8807] loop0: detected capacity change from 0 to 64
[  193.784899][ T8820] loop5: detected capacity change from 0 to 256
[  194.170543][   T27] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  194.192111][ T8832] loop3: detected capacity change from 0 to 128
[  194.215812][ T8832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.239219][ T8832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  194.269708][ T8832] EXT4-fs (loop3): Test dummy encryption mode enabled
[  194.314000][ T8832] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.331574][ T8832] ext4 filesystem being mounted at /253/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  194.372204][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.392310][   T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.403460][   T27] usb 2-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  194.413219][   T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.428575][ T8832] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  194.440378][   T27] usb 2-1: config 0 descriptor??
[  194.466404][ T8844] netlink: 100 bytes leftover after parsing attributes in process `syz.5.980'.
[  194.479253][ T8845] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w.
[  194.564647][ T8849] loop5: detected capacity change from 0 to 512
[  194.605289][ T5786] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.615994][ T8849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.629425][ T8849] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.766751][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.900456][   T27] itetech 0003:06CB:2968.000A: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.1-1/input0
[  195.050061][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  195.058088][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  195.093296][   T27] usb 2-1: USB disconnect, device number 10
[  195.155684][ T8847] loop0: detected capacity change from 0 to 32768
[  195.290261][ T5826] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  195.498865][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.517160][ T5826] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.537752][ T5826] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  195.547557][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.566997][ T5826] usb 6-1: config 0 descriptor??
[  195.632328][ T8861] loop3: detected capacity change from 0 to 32768
[  195.687720][ T8861] jfs_rmdir: dtDelete returned -2
[  195.973508][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.994'.
[  196.023408][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.049375][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.065311][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.099354][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.108196][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.137263][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.167489][ T5826] cypress 0003:04B4:DE61.000B: unknown main item tag 0x0
[  196.202310][ T5826] cypress 0003:04B4:DE61.000B: hidraw0: USB HID v0.00 Device [HID 04b4:de61] on usb-dummy_hcd.5-1/input0
[  196.279588][ T8884] loop0: detected capacity change from 0 to 64
[  196.280933][ T5826] usb 6-1: USB disconnect, device number 5
[  196.398877][ T8887] lo speed is unknown, defaulting to 1000
[  196.434870][ T8887] lo speed is unknown, defaulting to 1000
[  196.451582][ T8885] fido_id[8885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  196.490917][ T8887] lo speed is unknown, defaulting to 1000
[  196.591669][ T8887] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  196.653597][ T8893] netlink: 'syz.1.1001': attribute type 1 has an invalid length.
[  196.666661][ T8887] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  196.674048][ T8893] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1001'.
[  196.779282][ T8887] lo speed is unknown, defaulting to 1000
[  196.788336][ T8887] lo speed is unknown, defaulting to 1000
[  196.811955][ T8887] lo speed is unknown, defaulting to 1000
[  196.830512][ T8887] lo speed is unknown, defaulting to 1000
[  197.194781][ T8911] loop0: detected capacity change from 0 to 64
[  197.593727][ T8928] loop0: detected capacity change from 0 to 1024
[  197.678246][ T8928] hfsplus: bad catalog entry type
[  197.883408][ T8940] loop0: detected capacity change from 0 to 256
[  197.974474][ T8940] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  198.948770][ T8980] netlink: 'syz.3.1040': attribute type 1 has an invalid length.
[  198.997982][ T5877] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  199.093190][ T8974] loop5: detected capacity change from 0 to 32768
[  199.131007][ T8974] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  199.182058][ T8974] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  199.189817][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  199.207780][ T5877] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  199.227152][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.241625][ T5877] usb 2-1: config 0 descriptor??
[  199.404242][ T8970] loop0: detected capacity change from 0 to 32768
[  199.420044][ T7532] ocfs2: Unmounting device (7,5) on (node local)
[  199.551343][ T8970] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  199.551343][ T8970] 
[  199.607706][ T8970] ERROR: (device loop0): remounting filesystem as read-only
[  199.638883][ T8970] ERROR: (device loop0): diWrite: ixpxd invalid
[  199.638883][ T8970] 
[  199.647372][ T8970] ERROR: (device loop0): txCommit: 
[  199.647372][ T8970] 
[  199.685887][ T5877] glorious 0003:258A:0036.000C: unknown main item tag 0x0
[  199.721809][ T5877] glorious 0003:258A:0036.000C: unknown main item tag 0x0
[  199.737556][ T5877] glorious 0003:258A:0036.000C: unknown main item tag 0x0
[  199.754968][ T5877] glorious 0003:258A:0036.000C: unknown main item tag 0x0
[  199.783273][ T5877] glorious 0003:258A:0036.000C: unknown main item tag 0x0
[  199.825900][ T5877] glorious 0003:258A:0036.000C: hidraw0: USB HID v0.01 Device [Glorious Model O] on usb-dummy_hcd.1-1/input0
[  199.908488][ T5877] usb 2-1: USB disconnect, device number 11
[  200.075181][ T8995] fido_id[8995]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  200.377191][ T5826] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  200.434814][ T8990] loop3: detected capacity change from 0 to 65536
[  200.458421][ T8990] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  200.491416][ T8990] XFS (loop3): Ending clean mount
[  200.500895][ T8990] XFS (loop3): Quotacheck needed: Please wait.
[  200.567314][ T5826] usb 6-1: Using ep0 maxpacket: 8
[  200.613441][ T8990] XFS (loop3): Quotacheck: Done.
[  200.618837][ T5826] usb 6-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  200.618868][ T5826] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.618887][ T5826] usb 6-1: Product: syz
[  200.618901][ T5826] usb 6-1: Manufacturer: syz
[  200.618916][ T5826] usb 6-1: SerialNumber: syz
[  200.621308][ T5826] usb 6-1: config 0 descriptor??
[  200.629873][ T5826] gspca_main: sq930x-2.14.0 probing 2770:930c
[  200.734050][ T5786] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  201.123618][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1055'.
[  201.150892][ T9023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1055'.
[  201.170428][ T9023] netlink: 'syz.1.1055': attribute type 3 has an invalid length.
[  201.298625][ T5826] gspca_sq930x: reg_w 0305 fd00 failed -71
[  201.304575][ T5826] sq930x: probe of 6-1:0.0 failed with error -71
[  201.349047][ T5826] usb 6-1: USB disconnect, device number 6
[  201.414386][ T9028] loop1: detected capacity change from 0 to 4096
[  201.505989][ T9034] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  201.536287][ T9028] ntfs: volume version 3.1.
[  201.908316][ T9042] TCP: TCP_TX_DELAY enabled
[  201.958116][ T9043] loop3: detected capacity change from 0 to 2048
[  202.023151][ T9048] loop1: detected capacity change from 0 to 256
[  202.059429][ T9043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.072690][ T9045] loop5: detected capacity change from 0 to 4096
[  202.141293][ T9048] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  202.158102][   T28] audit: type=1800 audit(1753201383.923:34): pid=9043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1066" name="bus" dev="loop3" ino=18 res=0 errno=0
[  202.222206][ T9045] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  202.313509][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.342099][ T9045] ntfs3: loop5: Failed to load $Extend (-22).
[  202.373934][ T9045] ntfs3: loop5: Failed to initialize $Extend.
[  202.479292][ T9060] loop1: detected capacity change from 0 to 256
[  202.534968][ T9060] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  202.911866][ T9076] loop1: detected capacity change from 0 to 16
[  202.922356][ T9076] erofs: Unknown parameter ''
[  202.995877][ T5776] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  203.035997][ T9074] loop3: detected capacity change from 0 to 8192
[  203.104655][ T9074] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  203.165501][ T9074] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  203.175415][ T9074] REISERFS (device loop3): using ordered data mode
[  203.182290][ T9074] reiserfs: using flush barriers
[  203.195881][ T9074] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  203.226593][ T9074] REISERFS (device loop3): checking transaction log (loop3)
[  203.491149][ T9074] REISERFS (device loop3): Using tea hash to sort names
[  203.519601][ T9074] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  203.956205][ T9111] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1092'.
[  203.956631][ T9107] loop3: detected capacity change from 0 to 2048
[  203.982786][ T9111] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1092'.
[  204.017952][ T9109] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1092'.
[  204.050315][ T9114] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  204.285635][  T966] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  204.410711][ T9129] loop1: detected capacity change from 0 to 16
[  204.420477][ T9129] erofs: (device loop1): mounted with root inode @ nid 36.
[  204.440102][ T9129] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36
[  204.461536][ T9129] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -57 in[61, 4035] out[1851]
[  204.474678][ T9129] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36
[  204.485152][  T966] usb 6-1: Using ep0 maxpacket: 16
[  204.492693][  T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.523144][  T966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.538188][  T966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  204.551715][ T5855] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  204.560103][  T966] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  204.590200][  T966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.606218][  T966] usb 6-1: config 0 descriptor??
[  204.775157][ T5855] usb 4-1: Using ep0 maxpacket: 16
[  204.790887][ T5855] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  204.808388][ T5855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  204.824196][ T5855] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  204.839604][ T5855] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  204.859509][ T5855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  204.869519][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.877682][ T5855] usb 4-1: Product: syz
[  204.882008][ T5855] usb 4-1: Manufacturer: syz
[  204.886768][ T5855] usb 4-1: SerialNumber: syz
[  204.925082][   T23] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  204.976941][ T9146] loop0: detected capacity change from 0 to 256
[  204.984256][ T9146] exfat: Deprecated parameter 'utf8'
[  205.002566][ T9146] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  205.044609][  T966] microsoft 0003:045E:07DA.000D: unbalanced collection at end of report description
[  205.071984][  T966] microsoft 0003:045E:07DA.000D: parse failed
[  205.079058][  T966] microsoft: probe of 0003:045E:07DA.000D failed with error -22
[  205.117679][ T5855] usb 4-1: 0:2 : does not exist
[  205.140745][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  205.165314][   T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.185027][ T5855] usb 4-1: USB disconnect, device number 11
[  205.191101][   T23] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[  205.211883][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.250889][   T23] usb 2-1: config 0 descriptor??
[  205.298930][ T5854] usb 6-1: USB disconnect, device number 7
[  205.724284][   T23] zydacron 0003:13EC:0006.000E: item fetching failed at offset 1/5
[  205.729902][ T9162] nbd: must specify a size in bytes for the device
[  205.738010][   T23] zydacron 0003:13EC:0006.000E: parse failed
[  205.750144][   T23] zydacron: probe of 0003:13EC:0006.000E failed with error -22
[  205.924188][ T5826] usb 2-1: USB disconnect, device number 12
[  206.101430][ T9170] loop0: detected capacity change from 0 to 4096
[  206.394771][ T9184] 
@0Ù: renamed from bond_slave_1 (while UP)
[  206.411131][ T9182] loop3: detected capacity change from 0 to 1024
[  206.521170][ T9182] hfsplus: keylen 65060 too large
[  206.542896][ T9182] hfsplus: xattr searching failed
[  206.922815][ T9199] loop3: detected capacity change from 0 to 512
[  206.962970][ T9199] EXT4-fs (loop3): 1 truncate cleaned up
[  206.989845][ T9199] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.094125][ T9199] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.1135: Directory hole found for htree leaf block 0
[  207.105489][ T9203] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  207.162819][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.185207][ T9188] loop0: detected capacity change from 0 to 40427
[  207.204810][ T9188] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  207.212494][ T9188] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  207.258852][ T9188] F2FS-fs (loop0): invalid crc value
[  207.281601][ T9188] F2FS-fs (loop0): Found nat_bits in checkpoint
[  207.357721][ T5788] Bluetooth: hci3: command 0x0406 tx timeout
[  207.357729][ T5799] Bluetooth: hci1: command 0x0406 tx timeout
[  207.415395][ T9188] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  207.470120][ T9188] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  207.517159][ T9212] loop1: detected capacity change from 0 to 256
[  207.530813][ T9212] exfat: Deprecated parameter 'utf8'
[  207.544030][ T9212] exfat: Deprecated parameter 'namecase'
[  207.549799][ T9212] exfat: Deprecated parameter 'utf8'
[  207.579979][ T9204] f2fs_ckpt-7:0: attempt to access beyond end of device
[  207.579979][ T9204] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  207.617296][ T9212] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  207.653168][ T9204] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  208.108902][   T28] audit: type=1326 audit(1753201389.896:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.183312][   T28] audit: type=1326 audit(1753201389.896:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.253240][   T28] audit: type=1326 audit(1753201389.926:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.306784][   T28] audit: type=1326 audit(1753201389.926:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.353129][   T28] audit: type=1326 audit(1753201389.926:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.454191][   T28] audit: type=1326 audit(1753201389.926:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.523372][   T28] audit: type=1326 audit(1753201389.926:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.562600][ T9239] loop3: detected capacity change from 0 to 128
[  208.603115][   T28] audit: type=1326 audit(1753201389.926:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9230 comm="syz.1.1149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f093cd8e9a9 code=0x7ffc0000
[  208.645840][ T9239] autofs4:pid:9239:autofs_fill_super: called with bogus options
[  208.996773][ T9247] loop3: detected capacity change from 0 to 256
[  208.997804][ T9229] loop5: detected capacity change from 0 to 32768
[  209.030264][ T9247] exfat: Deprecated parameter 'namecase'
[  209.038409][ T9229] XFS: ikeep mount option is deprecated.
[  209.049221][ T9229] XFS: noikeep mount option is deprecated.
[  209.069589][ T9247] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d)
[  209.069806][ T9229] XFS (loop5): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  209.252171][ T9229] XFS (loop5): Ending clean mount
[  209.285128][ T9229] XFS (loop5): Quotacheck needed: Please wait.
[  209.383303][ T9229] XFS (loop5): Quotacheck: Done.
[  209.492210][ T7532] XFS (loop5): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  209.596197][ T9241] loop1: detected capacity change from 0 to 32768
[  209.720811][ T9241] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  209.877723][ T9241] XFS (loop1): Ending clean mount
[  209.950660][ T9280] loop0: detected capacity change from 0 to 256
[  210.092979][ T9280] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  210.097141][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  210.165977][   T28] audit: type=1800 audit(1753201391.957:43): pid=9280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1164" name="file1" dev="loop0" ino=1048693 res=0 errno=0
[  210.350176][ T9290] sctp: [Deprecated]: syz.0.1170 (pid 9290) Use of int in max_burst socket option.
[  210.350176][ T9290] Use struct sctp_assoc_value instead
[  210.782805][ T9304] program syz.0.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  210.862088][ T5826] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  211.061997][ T5826] usb 4-1: Using ep0 maxpacket: 16
[  211.099982][ T5826] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.122861][ T5826] usb 4-1: config 0 interface 0 has no altsetting 0
[  211.129538][ T5826] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00
[  211.155176][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.175027][ T5826] usb 4-1: config 0 descriptor??
[  211.559969][ T9322] syz.1.1167 uses obsolete (PF_INET,SOCK_PACKET)
[  211.610705][ T5826] ryos 0003:1E7D:3138.000F: unknown main item tag 0x0
[  211.629475][ T5826] ryos 0003:1E7D:3138.000F: unknown main item tag 0x0
[  211.641067][ T5826] ryos 0003:1E7D:3138.000F: unknown main item tag 0x0
[  211.651629][ T5854] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  211.675906][ T5826] ryos 0003:1E7D:3138.000F: unknown main item tag 0x0
[  211.684809][ T5826] ryos 0003:1E7D:3138.000F: unknown main item tag 0x0
[  211.712754][ T5826] ryos 0003:1E7D:3138.000F: hidraw0: USB HID v0.05 Device [HID 1e7d:3138] on usb-dummy_hcd.3-1/input0
[  211.818911][   T27] usb 4-1: USB disconnect, device number 12
[  211.863928][ T5854] usb 6-1: Using ep0 maxpacket: 16
[  211.875007][ T5854] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.901765][ T5854] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.941016][ T5854] usb 6-1: config 0 interface 0 has no altsetting 0
[  211.955388][ T5854] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  211.967233][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.991440][ T5854] usb 6-1: config 0 descriptor??
[  212.412989][ T5854] mcp2200 0003:04D8:00DF.0010: item fetching failed at offset 5/7
[  212.424574][ T5854] mcp2200 0003:04D8:00DF.0010: can't parse reports
[  212.438128][ T5854] mcp2200: probe of 0003:04D8:00DF.0010 failed with error -22
[  212.572304][ T5877] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  212.607822][ T9353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1199'.
[  212.628718][   T27] usb 6-1: USB disconnect, device number 8
[  212.668126][ T9351] loop3: detected capacity change from 0 to 4096
[  212.677911][ T9351] ntfs3: loop3: ino=3, Correct links count -> 2.
[  212.761245][ T5877] usb 2-1: Using ep0 maxpacket: 8
[  212.790972][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  212.808143][ T5877] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  212.809290][ T9351] ntfs3: loop3: failed to convert "0080" to cp874
[  212.818568][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.858810][ T9351] ntfs3: loop3: failed to convert name for inode 1e.
[  212.883104][ T5877] usb 2-1: config 0 descriptor??
[  213.260923][   T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  213.329691][ T5877] megaworld 0003:07B5:0312.0011: item fetching failed at offset 10/11
[  213.349410][ T5877] megaworld 0003:07B5:0312.0011: parse failed
[  213.359524][ T5877] megaworld: probe of 0003:07B5:0312.0011 failed with error -22
[  213.452310][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.480589][   T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.490363][   T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.524630][  T966] usb 2-1: USB disconnect, device number 13
[  213.530735][   T27] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  213.539791][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.558333][   T27] usb 4-1: config 0 descriptor??
[  213.646183][ T9368] loop5: detected capacity change from 0 to 32768
[  213.660102][ T9368] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 scanned by syz.5.1206 (9368)
[  213.687383][ T9368] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  213.700649][ T9368] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[  213.715781][ T9368] BTRFS info (device loop5): force zlib compression, level 3
[  213.724135][ T9368] BTRFS info (device loop5): force clearing of disk cache
[  213.732265][ T9368] BTRFS info (device loop5): setting nodatasum
[  213.738584][ T9368] BTRFS info (device loop5): doing ref verification
[  213.745877][ T9368] BTRFS info (device loop5): allowing degraded mounts
[  213.760514][ T9368] BTRFS info (device loop5): enabling disk space caching
[  213.777874][ T9368] BTRFS info (device loop5): disk space caching is enabled
[  213.871577][ T9384] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  213.918140][ T9368] BTRFS info (device loop5): enabling ssd optimizations
[  213.945978][ T9368] BTRFS info (device loop5): auto enabling async discard
[  213.989373][   T27] kye 0003:0458:5011.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  214.005128][ T9368] BTRFS info (device loop5): rebuilding free space tree
[  214.012280][   T27] kye 0003:0458:5011.0012: unbalanced collection at end of report description
[  214.013065][   T27] kye 0003:0458:5011.0012: parse failed
[  214.013126][   T27] kye: probe of 0003:0458:5011.0012 failed with error -22
[  214.048072][ T9388] loop0: detected capacity change from 0 to 64
[  214.063525][ T9368] BTRFS info (device loop5): disabling free space tree
[  214.076302][ T9368] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  214.097823][ T9368] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  214.184764][   T27] usb 4-1: USB disconnect, device number 13
[  214.276362][ T7532] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  214.928099][ T9400] loop0: detected capacity change from 0 to 1764
[  214.984191][ T9390] loop1: detected capacity change from 0 to 32768
[  214.996796][ T9400] iso9660: Corrupted directory entry in block 0 of inode 1792
[  215.252954][ T9407] CIFS mount error: No usable UNC path provided in device string!
[  215.252954][ T9407] 
[  215.277705][ T9407] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  215.424769][ T9413] loop0: detected capacity change from 0 to 2048
[  215.480923][ T9413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  215.691276][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.040285][ T9429] loop0: detected capacity change from 0 to 8192
[  216.076799][ T9433] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  216.110723][ T9429] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  216.127891][ T9432] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  216.185524][ T9429] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  216.242843][ T9429] REISERFS (device loop0): using ordered data mode
[  216.244335][ T9423] loop3: detected capacity change from 0 to 32768
[  216.292280][ T9429] reiserfs: using flush barriers
[  216.337188][ T9423] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  216.350600][ T9429] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  216.405805][ T9423] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  216.412262][ T9444] loop5: detected capacity change from 0 to 256
[  216.434903][ T9429] REISERFS (device loop0): checking transaction log (loop0)
[  216.473256][ T9429] REISERFS (device loop0): Using r5 hash to sort names
[  216.509860][ T9429] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  216.527316][ T9444] FAT-fs (loop5): Directory bread(block 64) failed
[  216.530654][ T9429] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  216.586730][ T9444] FAT-fs (loop5): Directory bread(block 65) failed
[  216.602546][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  216.603578][ T9444] FAT-fs (loop5): Directory bread(block 66) failed
[  216.660051][ T9444] FAT-fs (loop5): Directory bread(block 67) failed
[  216.670549][ T9444] FAT-fs (loop5): Directory bread(block 68) failed
[  216.696850][ T9444] FAT-fs (loop5): Directory bread(block 69) failed
[  216.734434][ T9444] FAT-fs (loop5): Directory bread(block 70) failed
[  216.751195][ T5826] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  216.758978][ T9444] FAT-fs (loop5): Directory bread(block 71) failed
[  216.765630][ T9444] FAT-fs (loop5): Directory bread(block 72) failed
[  216.779525][ T9444] FAT-fs (loop5): Directory bread(block 73) failed
[  216.958962][ T5826] usb 2-1: Using ep0 maxpacket: 8
[  216.973995][ T5826] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  216.996489][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.019029][ T5826] usb 2-1: Product: syz
[  217.023348][ T5826] usb 2-1: Manufacturer: syz
[  217.038933][ T5826] usb 2-1: SerialNumber: syz
[  217.045309][ T9452] loop5: detected capacity change from 0 to 512
[  217.050281][ T5826] usb 2-1: config 0 descriptor??
[  217.071020][ T9452] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  217.094046][ T5826] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  217.112613][ T5826] usb 2-1: setting power ON
[  217.130848][ T9452] EXT4-fs (loop5): orphan cleanup on readonly fs
[  217.133490][ T5826] dvb-usb: bulk message failed: -22 (2/0)
[  217.160404][ T5826] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  217.170496][ T9452] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6).
[  217.170926][ T5826] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  217.196884][ T5826] usb 2-1: media controller created
[  217.203317][ T9452] EXT4-fs warning (device loop5): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  217.223629][ T5826] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  217.253905][ T5826] usb 2-1: selecting invalid altsetting 6
[  217.260193][ T5826] usb 2-1: digital interface selection failed (-22)
[  217.266943][ T5826] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  217.276738][ T9452] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  217.284873][ T5826] usb 2-1: setting power OFF
[  217.290957][ T9452] EXT4-fs (loop5): 1 truncate cleaned up
[  217.292183][ T9452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  217.304478][ T9446] dvb-usb: bulk message failed: -22 (3/0)
[  217.321128][ T5826] dvb-usb: bulk message failed: -22 (2/0)
[  217.327256][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  217.353398][ T5826] (NULL device *): no alternate interface
[  217.489526][ T5826] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  217.532289][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.558819][ T5826] usb 2-1: USB disconnect, device number 14
[  217.981861][ T9480] siw: device registration error -23
[  218.326797][ T9495] loop5: detected capacity change from 0 to 256
[  218.577544][ T9499] loop5: detected capacity change from 0 to 4096
[  218.596153][ T9499] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  218.663471][ T9499] ntfs: volume version 3.1.
[  218.772674][ T9491] loop3: detected capacity change from 0 to 32768
[  218.806332][ T9491] (syz.3.1254,9491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.836384][ T9491] (syz.3.1254,9491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  218.911911][ T9491] JBD2: Ignoring recovery information on journal
[  219.021449][ T9491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  219.219240][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  219.309501][ T9516] lo speed is unknown, defaulting to 1000
[  219.315353][ T9516] lo speed is unknown, defaulting to 1000
[  219.322488][ T9516] lo speed is unknown, defaulting to 1000
[  219.361291][ T9516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  219.425517][ T9516] lo speed is unknown, defaulting to 1000
[  219.440182][ T9516] lo speed is unknown, defaulting to 1000
[  219.457971][ T9516] lo speed is unknown, defaulting to 1000
[  219.465248][ T9516] lo speed is unknown, defaulting to 1000
[  219.594037][ T9519] loop5: detected capacity change from 0 to 8192
[  219.615025][ T9519] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  219.683530][ T9519] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  219.693361][ T9519] REISERFS (device loop5): using ordered data mode
[  219.700211][ T9519] reiserfs: using flush barriers
[  219.707525][ T9519] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  219.724686][ T9519] REISERFS (device loop5): checking transaction log (loop5)
[  219.785163][ T9528] pim6reg: entered allmulticast mode
[  219.897461][ T5877] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  219.910837][ T9519] REISERFS (device loop5): Using tea hash to sort names
[  219.918567][ T9519] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  220.087572][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  220.100155][ T5877] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  220.108559][ T5877] usb 2-1: config 0 has no interface number 0
[  220.118205][ T5877] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  220.127782][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.147433][ T5877] usb 2-1: Product: syz
[  220.151667][ T5877] usb 2-1: Manufacturer: syz
[  220.167272][ T5877] usb 2-1: SerialNumber: syz
[  220.174449][ T5877] usb 2-1: config 0 descriptor??
[  220.188306][ T5877] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  220.772134][ T5877] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  220.791431][ T5877] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  220.947501][ T5794] Bluetooth: hci3: Malformed LE Event: 0x0d
[  220.963278][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  220.972046][   T27] usb 2-1: USB disconnect, device number 15
[  221.003608][   T27] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  221.040161][   T27] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  221.055903][   T27] quatech2 2-1:0.51: device disconnected
[  221.744990][ T9572] loop5: detected capacity change from 0 to 40427
[  221.758428][ T9572] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff
[  221.783910][ T9572] F2FS-fs (loop5): Image doesn't support compression
[  221.802370][ T9572] F2FS-fs (loop5): Image doesn't support compression
[  221.831017][ T9572] F2FS-fs (loop5): invalid crc value
[  221.849857][ T9572] F2FS-fs (loop5): Found nat_bits in checkpoint
[  221.971228][ T9572] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  222.069438][ T7532] syz-executor: attempt to access beyond end of device
[  222.069438][ T7532] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  222.088577][ T7532] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  222.424677][ T9589] loop3: detected capacity change from 0 to 32768
[  222.452413][ T9589] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.527635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  222.538886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  222.547490][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  222.576655][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  222.663658][ T9589] XFS (loop3): Ending clean mount
[  222.700871][ T9589] XFS (loop3): Quotacheck needed: Please wait.
[  222.787665][ T9589] XFS (loop3): Quotacheck: Done.
[  222.952580][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  223.260090][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1309'.
[  223.518662][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1314'.
[  223.636176][ T9633] loop5: detected capacity change from 0 to 64
[  223.733245][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1317'.
[  224.275080][ T9651] loop1: detected capacity change from 0 to 256
[  224.331389][ T9651] FAT-fs (loop1): Directory bread(block 64) failed
[  224.355316][ T9651] FAT-fs (loop1): Directory bread(block 65) failed
[  224.375808][ T9651] FAT-fs (loop1): Directory bread(block 66) failed
[  224.405472][ T9651] FAT-fs (loop1): Directory bread(block 67) failed
[  224.416744][ T9651] FAT-fs (loop1): Directory bread(block 68) failed
[  224.427897][ T9651] FAT-fs (loop1): Directory bread(block 69) failed
[  224.434587][ T9651] FAT-fs (loop1): Directory bread(block 70) failed
[  224.506146][ T9651] FAT-fs (loop1): Directory bread(block 71) failed
[  224.512921][ T9651] FAT-fs (loop1): Directory bread(block 72) failed
[  224.523162][ T9657] loop5: detected capacity change from 0 to 256
[  224.538204][ T9651] FAT-fs (loop1): Directory bread(block 73) failed
[  224.616124][ T9657] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  224.631447][ T9660] loop3: detected capacity change from 0 to 2048
[  224.636565][ T9661] loop0: detected capacity change from 0 to 2048
[  224.695064][ T9661] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  224.715163][ T9660]  loop3: p1 p2 < > p3 < p5 p6 > p4
[  224.720440][ T9660] loop3: partition table partially beyond EOD, truncated
[  224.768724][ T9662] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.772464][ T9660] loop3: p2 start 4278190080 is beyond EOD, truncated
[  224.887344][ T9660] loop3: p4 size 8192 extends beyond EOD, truncated
[  224.937905][ T9660] loop3: p6 size 8192 extends beyond EOD, truncated
[  225.176582][   T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  225.380607][   T27] usb 4-1: config 0 has no interfaces?
[  225.389515][   T27] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  225.410677][ T9679] loop1: detected capacity change from 0 to 512
[  225.435612][   T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.457499][   T27] usb 4-1: config 0 descriptor??
[  225.482164][ T9679] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1337: iget: bad extended attribute block 1
[  225.530405][ T9679] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1337: couldn't read orphan inode 15 (err -117)
[  225.552686][ T9679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.586937][ T9679] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed
[  225.647869][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.708153][ T5854] usb 4-1: USB disconnect, device number 14
[  225.941975][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  225.950760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  226.241331][ T9696] loop0: detected capacity change from 0 to 8192
[  226.287839][ T9696] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  226.356085][ T9696] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  226.382428][ T9696] REISERFS (device loop0): using ordered data mode
[  226.419229][ T9696] reiserfs: using flush barriers
[  226.474749][ T9696] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  226.504871][ T9696] REISERFS (device loop0): checking transaction log (loop0)
[  226.590804][ T5877] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  226.638542][ T9696] REISERFS (device loop0): Using tea hash to sort names
[  226.648108][ T9696] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  226.763024][ T9698] loop1: detected capacity change from 0 to 40427
[  226.794323][ T5877] usb 6-1: Using ep0 maxpacket: 32
[  226.794391][ T9698] F2FS-fs (loop1): build fault injection attr: rate: 693, type: 0x7ffff
[  226.804498][ T5854] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  226.820659][ T9698] F2FS-fs (loop1): Image doesn't support compression
[  226.831417][ T5877] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  226.840999][ T5877] usb 6-1: config 0 has no interface number 0
[  226.845706][ T9698] F2FS-fs (loop1): invalid crc value
[  226.859502][ T9698] F2FS-fs (loop1): Found nat_bits in checkpoint
[  226.861669][ T5877] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  226.905946][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.944418][ T9698] F2FS-fs (loop1): Start checkpoint disabled!
[  226.947055][ T5877] usb 6-1: Product: syz
[  226.968048][ T5877] usb 6-1: Manufacturer: syz
[  226.969219][ T9698] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  226.972677][ T5877] usb 6-1: SerialNumber: syz
[  226.999080][ T5877] usb 6-1: config 0 descriptor??
[  227.037498][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.056706][ T5877] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  227.087973][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.099781][   T28] audit: type=1800 audit(1753201408.886:44): pid=9698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1345" name="file1" dev="loop1" ino=10 res=0 errno=0
[  227.103219][ T9698] F2FS-fs (loop1): inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2fb/0x5b0
[  227.135477][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  227.163154][ T9698] syz.1.1345: attempt to access beyond end of device
[  227.163154][ T9698] loop1: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  227.205435][ T5854] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  227.236038][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.268279][ T5854] usb 4-1: config 0 descriptor??
[  227.279063][ T5877] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  227.318424][ T5877] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  227.399358][ T9712] netlink: 'syz.0.1350': attribute type 2 has an invalid length.
[  227.436456][ T9712] netlink: 'syz.0.1350': attribute type 2 has an invalid length.
[  227.441464][   T12] kworker/u4:1: attempt to access beyond end of device
[  227.441464][   T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  227.463482][   T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  227.471900][   T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  227.711477][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  227.713306][   T23] usb 6-1: USB disconnect, device number 9
[  227.758745][   T23] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  227.766982][ T5854] kye 0003:0458:5011.0013: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  227.800493][   T23] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  227.842589][ T5854] kye 0003:0458:5011.0013: hidraw0: USB HID vff.fe Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  227.851138][   T23] quatech2 6-1:0.51: device disconnected
[  227.870144][ T5854] kye 0003:0458:5011.0013: tablet-enabling feature report not found
[  227.895477][ T5854] kye 0003:0458:5011.0013: tablet enabling failed
[  227.940611][ T5854] usb 4-1: USB disconnect, device number 15
[  228.004431][ T9719] fido_id[9719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  228.019892][ T9721] netlink: 'syz.1.1351': attribute type 281 has an invalid length.
[  228.600420][ T9736] loop3: detected capacity change from 0 to 64
[  228.618521][ T9723] loop1: detected capacity change from 0 to 32768
[  228.652182][ T9723] (syz.1.1355,9723,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  228.673102][   T28] audit: type=1800 audit(1753201410.466:45): pid=9736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1361" name="file1" dev="loop3" ino=18 res=0 errno=0
[  228.693228][ T9738] loop5: detected capacity change from 0 to 512
[  228.724750][ T9723] (syz.1.1355,9723,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  228.745862][ T9738] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002]
[  228.778723][ T9738] System zones: 1-12
[  228.830057][ T9738] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1362: Directory hole found for htree index block 0
[  228.867522][ T9723] JBD2: Ignoring recovery information on journal
[  228.940948][ T9738] EXT4-fs (loop5): Remounting filesystem read-only
[  228.950155][ T9738] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  228.960591][ T9738] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  228.970766][ T9738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  229.009613][ T9747] loop3: detected capacity change from 0 to 256
[  229.023240][ T9723] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  229.094456][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.139714][ T9747] FAT-fs (loop3): Directory bread(block 64) failed
[  229.159436][ T9747] FAT-fs (loop3): Directory bread(block 65) failed
[  229.189315][ T9747] FAT-fs (loop3): Directory bread(block 66) failed
[  229.228281][ T9745] loop0: detected capacity change from 0 to 4096
[  229.242938][ T9747] FAT-fs (loop3): Directory bread(block 67) failed
[  229.251721][ T9747] FAT-fs (loop3): Directory bread(block 68) failed
[  229.273900][ T9745] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  229.288860][ T9747] FAT-fs (loop3): Directory bread(block 69) failed
[  229.353150][ T9747] FAT-fs (loop3): Directory bread(block 70) failed
[  229.360552][ T9747] FAT-fs (loop3): Directory bread(block 71) failed
[  229.360796][ T5783] ocfs2: Unmounting device (7,1) on (node local)
[  229.384826][ T9747] FAT-fs (loop3): Directory bread(block 72) failed
[  229.391984][ T9745] ntfs: volume version 3.1.
[  229.399995][ T9747] FAT-fs (loop3): Directory bread(block 73) failed
[  229.937873][   T28] audit: type=1326 audit(1753201411.737:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.002654][   T28] audit: type=1326 audit(1753201411.737:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.085709][   T28] audit: type=1326 audit(1753201411.737:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.160527][   T28] audit: type=1326 audit(1753201411.747:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.205321][   T28] audit: type=1326 audit(1753201411.747:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.252337][   T28] audit: type=1326 audit(1753201411.747:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.274807][   T28] audit: type=1326 audit(1753201411.747:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9759 comm="syz.0.1372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  230.357315][ T9768] netlink: 'syz.3.1376': attribute type 27 has an invalid length.
[  230.363957][ T9750] loop5: detected capacity change from 0 to 32768
[  230.407478][ T9750] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1366 (9750)
[  230.466097][ T9750] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.493841][ T9750] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  230.514715][ T9750] BTRFS info (device loop5): using free space tree
[  230.686470][ T9750] BTRFS info (device loop5): enabling ssd optimizations
[  230.717592][ T9750] BTRFS info (device loop5): auto enabling async discard
[  230.761681][ T9758] loop1: detected capacity change from 0 to 32768
[  230.835548][ T9758] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  230.974330][ T7532] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  230.999984][ T5800] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 11
[  231.164064][ T9803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1385'.
[  231.181064][ T9805] netlink: 'syz.0.1384': attribute type 10 has an invalid length.
[  231.283162][ T9805] team0: Device hsr_slave_0 failed to register rx_handler
[  231.563943][ T9815] netlink: 'syz.1.1389': attribute type 62 has an invalid length.
[  231.703977][ T9817] loop5: detected capacity change from 0 to 256
[  231.787906][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1391'.
[  231.826539][ T9817] FAT-fs (loop5): Directory bread(block 64) failed
[  231.851815][ T9817] FAT-fs (loop5): Directory bread(block 65) failed
[  231.858497][ T9817] FAT-fs (loop5): Directory bread(block 66) failed
[  231.898116][ T9817] FAT-fs (loop5): Directory bread(block 67) failed
[  231.931499][ T9817] FAT-fs (loop5): Directory bread(block 68) failed
[  231.938080][ T9817] FAT-fs (loop5): Directory bread(block 69) failed
[  231.961493][ T9817] FAT-fs (loop5): Directory bread(block 70) failed
[  231.968070][ T9817] FAT-fs (loop5): Directory bread(block 71) failed
[  232.010922][ T9817] FAT-fs (loop5): Directory bread(block 72) failed
[  232.021199][ T9817] FAT-fs (loop5): Directory bread(block 73) failed
[  232.560364][ T9812] loop3: detected capacity change from 0 to 32768
[  232.610845][ T9812] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.689290][ T9851] loop1: detected capacity change from 0 to 256
[  232.697207][ T9853] nbd: couldn't find device at index 587202560
[  232.704184][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  232.751272][ T9851] exfat: Deprecated parameter 'utf8'
[  232.756645][ T9851] exfat: Deprecated parameter 'utf8'
[  232.762696][ T9851] exfat: Deprecated parameter 'utf8'
[  232.791078][ T5854] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  232.818946][ T9812] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  232.837216][ T9851] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  232.888059][ T9812] XFS (loop3): Starting recovery (logdev: internal)
[  232.925415][ T9812] XFS (loop3): Ending recovery (logdev: internal)
[  232.982546][ T5854] usb 6-1: Using ep0 maxpacket: 32
[  233.009810][ T5854] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  233.023684][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  233.024513][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.099914][ T5854] usb 6-1: config 0 descriptor??
[  233.153168][ T5854] gspca_main: sunplus-2.14.0 probing 041e:400b
[  233.546215][ T5854] gspca_sunplus: reg_w_riv err -71
[  233.552237][ T5854] sunplus: probe of 6-1:0.0 failed with error -71
[  233.593073][ T5854] usb 6-1: USB disconnect, device number 10
[  233.761492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  234.179517][ T9887] loop1: detected capacity change from 0 to 1024
[  234.194010][ T9885] loop3: detected capacity change from 0 to 1024
[  234.290925][ T9887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.292445][ T9885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.308237][ T9887] ext4 filesystem being mounted at /344/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  234.515274][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.644503][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.645812][ T9900] loop5: detected capacity change from 0 to 4096
[  234.656948][ T9904] loop1: detected capacity change from 0 to 64
[  234.687996][ T9900] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512).
[  234.807664][ T9900] ntfs3: loop5: failed to convert "c46c" to macromanian
[  235.209555][ T9920] loop3: detected capacity change from 0 to 4096
[  235.226503][ T9920] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  235.330266][ T5854] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  235.333914][ T9920] ntfs3: loop3: ino=1e, "file1" ntfs3_write_inode failed, -22.
[  235.533992][ T5854] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  235.547770][ T5854] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  235.569190][ T5854] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  235.599603][ T5854] usb 6-1: config 1 has no interface number 1
[  235.605779][ T5854] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  235.631996][ T5854] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  235.641808][ T5854] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.650339][ T5854] usb 6-1: Product: syz
[  235.654532][ T5854] usb 6-1: Manufacturer: syz
[  235.659127][ T5854] usb 6-1: SerialNumber: syz
[  235.886803][ T5854] usb 6-1: Failed to set altset
[  235.897947][ T5854] usb 6-1: 0:2: cannot create sequencer device
[  235.921415][ T5854] usb 6-1: Failed to set altset
[  235.950737][ T5854] snd-usb-audio: probe of 6-1:1.2 failed with error -71
[  235.965653][ T5854] usb 6-1: USB disconnect, device number 11
[  235.999503][ T5877] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  236.017086][ T9928] loop3: detected capacity change from 0 to 40427
[  236.028613][ T9928] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  236.047070][ T9928] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  236.058911][ T9928] F2FS-fs (loop3): invalid crc value
[  236.077841][ T9928] F2FS-fs (loop3): Found nat_bits in checkpoint
[  236.138326][ T9928] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  236.146704][ T9928] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  236.209513][ T5877] usb 2-1: Using ep0 maxpacket: 8
[  236.224548][ T5877] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  236.234420][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  236.245438][ T5877] usb 2-1: Product: syz
[  236.250445][ T5877] usb 2-1: Manufacturer: syz
[  236.256130][ T5877] usb 2-1: SerialNumber: syz
[  236.265498][ T5877] usb 2-1: config 0 descriptor??
[  236.276913][ T5877] gspca_main: sq905-2.14.0 probing 2770:9120
[  236.503081][ T9940] loop3: detected capacity change from 0 to 2048
[  236.529102][ T9940] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  236.572673][ T5800] udevd[5800]: incorrect nilfs2 checksum on /dev/loop3
[  236.572773][ T9943] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  236.862453][ T9948] loop3: detected capacity change from 0 to 8192
[  236.879668][ T9948] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  236.908391][ T5877] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  236.916570][ T9948] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal
[  236.927741][ T9948] REISERFS (device loop3): using ordered data mode
[  236.936162][ T9948] reiserfs: using flush barriers
[  236.939932][ T5877] sq905: probe of 2-1:0.0 failed with error -71
[  236.948842][ T9948] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  236.966243][ T9948] REISERFS (device loop3): checking transaction log (loop3)
[  236.985219][ T5877] usb 2-1: USB disconnect, device number 16
[  237.074305][ T9948] REISERFS (device loop3): Using tea hash to sort names
[  237.083005][ T9948] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  237.574970][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'.
[  238.047981][ T9989] loop0: detected capacity change from 0 to 64
[  238.436455][T10003] can0: slcan on ptm0.
[  238.495583][T10007] loop5: detected capacity change from 0 to 1024
[  238.530739][T10002] can0 (unregistered): slcan off ptm0.
[  238.683815][   T12] hfsplus: b-tree write err: -5, ino 4
[  239.136550][T10027] loop5: detected capacity change from 0 to 128
[  239.185942][T10033] loop3: detected capacity change from 0 to 128
[  239.725223][T10052] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1486'.
[  240.510182][T10080] loop5: detected capacity change from 0 to 4096
[  240.535997][T10087] loop3: detected capacity change from 0 to 256
[  240.604294][T10091] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.681032][T10087] FAT-fs (loop3): Directory bread(block 64) failed
[  240.699506][T10087] FAT-fs (loop3): Directory bread(block 65) failed
[  240.734339][T10087] FAT-fs (loop3): Directory bread(block 66) failed
[  240.767571][T10087] FAT-fs (loop3): Directory bread(block 67) failed
[  240.774244][T10087] FAT-fs (loop3): Directory bread(block 68) failed
[  240.779203][T10095] netlink: 'syz.1.1502': attribute type 1 has an invalid length.
[  240.821725][T10087] FAT-fs (loop3): Directory bread(block 69) failed
[  240.847115][T10087] FAT-fs (loop3): Directory bread(block 70) failed
[  240.878861][T10087] FAT-fs (loop3): Directory bread(block 71) failed
[  240.885541][T10087] FAT-fs (loop3): Directory bread(block 72) failed
[  240.896094][T10087] FAT-fs (loop3): Directory bread(block 73) failed
[  241.085964][T10102] loop1: detected capacity change from 0 to 512
[  241.156853][T10102] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  241.249337][T10102] EXT4-fs (loop1): 1 truncate cleaned up
[  241.297171][T10102] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.428558][T10090] loop0: detected capacity change from 0 to 32768
[  241.533405][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.548073][T10090] ialloc: diAlloc returned -5!
[  241.707309][  T111] ERROR: (device loop0): diUpdatePMap: the iag is outside the map
[  241.707309][  T111] 
[  241.744963][  T111] ERROR: (device loop0): remounting filesystem as read-only
[  241.936786][T10120] netlink: 'syz.3.1512': attribute type 28 has an invalid length.
[  242.150933][T10105] loop5: detected capacity change from 0 to 32768
[  242.169874][T10105] XFS: ikeep mount option is deprecated.
[  242.175637][T10105] XFS: noikeep mount option is deprecated.
[  242.231482][T10105] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  242.408701][T10105] XFS (loop5): Ending clean mount
[  242.575628][T10144] loop1: detected capacity change from 0 to 128
[  242.590475][ T7532] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  243.224496][T10164] loop3: detected capacity change from 0 to 512
[  243.234155][T10157] loop0: detected capacity change from 0 to 4096
[  243.250668][T10157] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512).
[  243.309863][T10157] ntfs3: loop0: Failed to initialize $Extend/$ObjId.
[  243.354244][T10164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.446104][T10164] ext4 filesystem being mounted at /379/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  243.601599][T10164] EXT4-fs error (device loop3): ext4_map_blocks:608: inode #2: block 3: comm syz.3.1528: lblock 8 mapped to illegal pblock 3 (length 26)
[  243.656003][T10164] EXT4-fs (loop3): Remounting filesystem read-only
[  243.721608][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.812500][T10162] loop1: detected capacity change from 0 to 32768
[  243.892867][T10162] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  244.068333][T10162] XFS (loop1): Ending clean mount
[  244.186926][ T5783] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  244.272354][T10169] loop5: detected capacity change from 0 to 32768
[  244.320512][T10169] (syz.5.1530,10169,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  244.385677][T10169] (syz.5.1530,10169,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  244.415556][T10171] loop0: detected capacity change from 0 to 32768
[  244.488891][T10171] 
[  244.488891][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.488891][T10171] 
[  244.489566][T10169] JBD2: Ignoring recovery information on journal
[  244.578679][T10169] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  244.590218][T10171] 
[  244.590218][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.590218][T10171] 
[  244.606259][T10171] 
[  244.606259][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.606259][T10171] 
[  244.617488][T10171] 
[  244.617488][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.617488][T10171] 
[  244.628147][T10171] 
[  244.628147][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.628147][T10171] 
[  244.645089][T10171] 
[  244.645089][T10171]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.645089][T10171] 
[  244.695201][  T111] 
[  244.695201][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.695201][  T111] 
[  244.798996][   T34] 
[  244.798996][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.798996][   T34] 
[  244.846329][   T34] 
[  244.846329][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.846329][   T34] 
[  244.892400][ T5784] 
[  244.892400][ T5784]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.892400][ T5784] 
[  244.911341][ T7532] ocfs2: Unmounting device (7,5) on (node local)
[  244.949743][T10178] loop3: detected capacity change from 0 to 32768
[  244.983157][  T112] 
[  244.983157][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.983157][  T112] 
[  245.014877][ T5784] 
[  245.014877][ T5784]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  245.014877][ T5784] 
[  245.025214][T10178] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.1532 (10178)
[  245.041248][T10187] loop1: detected capacity change from 0 to 16
[  245.070086][T10187] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  245.141338][T10178] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  245.182157][T10178] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  245.218940][T10178] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  245.255627][T10178] BTRFS info (device loop3): use zstd compression, level 3
[  245.262890][T10178] BTRFS info (device loop3): using free space tree
[  245.370626][T10206] loop1: detected capacity change from 0 to 512
[  245.399508][T10206] EXT4-fs: Ignoring removed mblk_io_submit option
[  245.440778][T10209] loop5: detected capacity change from 0 to 256
[  245.450861][T10178] BTRFS info (device loop3): enabling ssd optimizations
[  245.464651][T10178] BTRFS info (device loop3): auto enabling async discard
[  245.556539][T10206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  245.583677][T10209] FAT-fs (loop5): Directory bread(block 64) failed
[  245.609189][T10206] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  245.609774][T10209] FAT-fs (loop5): Directory bread(block 65) failed
[  245.678492][T10209] FAT-fs (loop5): Directory bread(block 66) failed
[  245.698582][T10209] FAT-fs (loop5): Directory bread(block 67) failed
[  245.732500][T10209] FAT-fs (loop5): Directory bread(block 68) failed
[  245.753042][T10209] FAT-fs (loop5): Directory bread(block 69) failed
[  245.769714][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  245.784663][   T28] audit: type=1326 audit(1753201427.565:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  245.808556][T10209] FAT-fs (loop5): Directory bread(block 70) failed
[  245.824920][T10209] FAT-fs (loop5): Directory bread(block 71) failed
[  245.831580][T10209] FAT-fs (loop5): Directory bread(block 72) failed
[  245.844191][   T28] audit: type=1326 audit(1753201427.585:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  245.849918][T10209] FAT-fs (loop5): Directory bread(block 73) failed
[  245.866737][   T28] audit: type=1326 audit(1753201427.585:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  245.895802][   T28] audit: type=1326 audit(1753201427.585:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10215 comm="syz.0.1539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6cf58e9a9 code=0x7ffc0000
[  246.733985][ T5826] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  246.923919][ T5826] usb 6-1: Using ep0 maxpacket: 32
[  246.932873][ T5826] usb 6-1: config 4 has an invalid interface number: 128 but max is 0
[  246.950168][ T5826] usb 6-1: config 4 has no interface number 0
[  246.967205][ T5826] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.001799][ T5826] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.022567][ T5786] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  247.033161][ T5826] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  247.049453][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.090993][ T5826] hub 6-1:4.128: USB hub found
[  247.293943][ T5826] hub 6-1:4.128: 2 ports detected
[  247.303768][ T5826] hub 6-1:4.128: Using single TT (err -22)
[  247.577171][T10244] loop1: detected capacity change from 0 to 32768
[  247.704764][ T5826] usb 6-1: USB disconnect, device number 12
[  248.133609][T10262] loop0: detected capacity change from 0 to 8192
[  248.253396][T10271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1565'.
[  248.340403][T10273] loop1: detected capacity change from 0 to 512
[  248.431689][T10273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  248.453401][T10273] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  248.925959][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.083094][ T5826] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  249.305699][ T5826] usb 4-1: Using ep0 maxpacket: 8
[  249.340551][ T5826] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  249.367025][ T5826] usb 4-1: config 179 has no interface number 0
[  249.375639][T10309] loop5: detected capacity change from 0 to 512
[  249.393106][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  249.396376][T10309] EXT4-fs (loop5): Test dummy encryption mode enabled
[  249.411931][T10309] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  249.417338][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  249.463669][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  249.465808][T10309] EXT4-fs (loop5): 1 truncate cleaned up
[  249.494951][T10309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  249.542573][ T5826] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  249.593800][ T5826] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  249.642782][ T5826] usb 4-1: config 179 interface 65 has no altsetting 0
[  249.651272][ T5826] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  249.669074][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.680484][T10309] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.1581: Siphash requires key
[  249.723063][ T5794] Bluetooth: hci1: command 0x0406 tx timeout
[  249.760270][ T5826] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14
[  249.785149][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.797688][T10301] loop1: detected capacity change from 0 to 32768
[  249.902970][   T27] XFS (loop1): filesystem is marked as having an internal log; do not specify logdev on the mount command line.
[  250.063401][ T5855] usb 4-1: USB disconnect, device number 16
[  250.064373][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  250.078072][ T5855] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  250.328237][T10329] block nbd5: shutting down sockets
[  250.462239][   T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  250.608369][T10333] loop5: detected capacity change from 0 to 32768
[  250.652730][   T23] usb 2-1: Using ep0 maxpacket: 8
[  250.680030][   T23] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  250.697657][T10333] ialloc: diAlloc returned -5!
[  250.724905][   T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  250.735192][   T23] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  250.745666][   T23] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.760025][   T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  250.769404][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.780023][  T111] ERROR: (device loop5): diUpdatePMap: the iag is outside the map
[  250.780023][  T111] 
[  250.800469][  T111] ERROR: (device loop5): remounting filesystem as read-only
[  251.022598][   T23] usb 2-1: GET_CAPABILITIES returned 0
[  251.028139][   T23] usbtmc 2-1:16.0: can't read capabilities
[  251.231927][   T23] usb 2-1: USB disconnect, device number 17
[  252.212339][T10375] vxcan1: tx address claim with dest, not broadcast
[  252.879479][T10379] loop5: detected capacity change from 0 to 32768
[  252.984880][T10393] serio: Serial port ttynull
[  253.059461][T10396] loop1: detected capacity change from 0 to 1024
[  253.076590][T10396] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  253.118673][T10385] loop3: detected capacity change from 0 to 40427
[  253.152554][T10396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  253.154874][T10385] F2FS-fs (loop3): Invalid log sectorsize (131081)
[  253.176168][T10385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  253.221181][T10385] F2FS-fs (loop3): invalid crc value
[  253.321404][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.395202][T10385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  253.420785][T10385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  253.573468][T10406] loop1: detected capacity change from 0 to 1024
[  253.777336][T10408] loop1: detected capacity change from 0 to 256
[  253.813525][T10408] exfat: Deprecated parameter 'utf8'
[  253.818883][T10408] exfat: Deprecated parameter 'utf8'
[  253.923264][T10408] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x3150c3aa, utbl_chksum : 0xe619d30d)
[  254.444292][T10430] loop0: detected capacity change from 0 to 16
[  254.463937][T10429] syzkaller1: tun_chr_ioctl cmd 2148553947
[  254.465229][T10430] erofs: (device loop0): mounted with root inode @ nid 36.
[  254.614969][ T5784] erofs: (device loop0): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46
[  254.636244][ T5784] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 0 of nid 46
[  254.657585][ T5784] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655
[  254.679478][ T5784] erofs: (device loop0): erofs_read_inode: bogus i_mode (0) @ nid 281474976710655
[  254.998229][T10432] loop5: detected capacity change from 0 to 32768
[  255.023605][T10432] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.150705][T10432] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  255.246384][T10432] XFS (loop5): Starting recovery (logdev: internal)
[  255.299209][   T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.310155][T10432] XFS (loop5): Ending recovery (logdev: internal)
[  255.335394][T10432] XFS (loop5): Quotacheck needed: Please wait.
[  255.433230][T10432] XFS (loop5): Quotacheck: Done.
[  255.483887][   T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.691432][ T7532] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  255.702577][   T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.754491][T10455] tipc: Started in network mode
[  255.770678][T10455] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  255.832289][T10455] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  255.997330][T10452] loop1: detected capacity change from 0 to 32768
[  256.075469][   T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  256.142857][T10458] loop3: detected capacity change from 0 to 64
[  256.195171][T10452] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  256.217277][T10464] loop5: detected capacity change from 0 to 1024
[  256.327080][T10464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.360560][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  256.374182][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  256.387378][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  256.402478][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  256.413327][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  256.426734][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  256.445358][T10452] XFS (loop1): Ending clean mount
[  256.453534][ T1291] ieee802154 phy0 wpan0: encryption failed: -22
[  256.460059][ T1291] ieee802154 phy1 wpan1: encryption failed: -22
[  256.530305][T10452] XFS (loop1): Quotacheck needed: Please wait.
[  256.634855][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.674159][T10471] lo speed is unknown, defaulting to 1000
[  256.679189][T10474] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1642'.
[  256.710982][T10452] XFS (loop1): Quotacheck: Done.
[  256.773565][   T58] tipc: Disabling bearer <eth:vlan0>
[  256.821825][   T58] tipc: Left network mode
[  257.103306][ T5783] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  257.176379][T10486] loop5: detected capacity change from 0 to 2048
[  257.219847][T10486] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.663569][T10471] chnl_net:caif_netlink_parms(): no params data found
[  258.469788][T10471] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.476960][T10471] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.487296][T10471] bridge_slave_0: entered allmulticast mode
[  258.494982][T10471] bridge_slave_0: entered promiscuous mode
[  258.505766][T10471] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.513614][T10471] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.538276][T10471] bridge_slave_1: entered allmulticast mode
[  258.551789][T10535] loop5: detected capacity change from 0 to 64
[  258.565961][T10471] bridge_slave_1: entered promiscuous mode
[  258.610772][ T5794] Bluetooth: hci1: command tx timeout
[  258.626964][T10535] syz.5.1659: attempt to access beyond end of device
[  258.626964][T10535] loop5: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  258.664112][T10535] Buffer I/O error on dev loop5, logical block 134217734, async page read
[  258.760848][T10471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  258.801586][T10471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.989226][T10471] team0: Port device team_slave_0 added
[  259.072773][T10471] team0: Port device team_slave_1 added
[  259.248796][T10471] batman_adv: batadv0: Adding interface: batadv_slave_0
[  259.285056][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.374474][T10471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  259.415492][T10471] batman_adv: batadv0: Adding interface: batadv_slave_1
[  259.433245][T10471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  259.510841][T10539] loop3: detected capacity change from 0 to 32768
[  259.518700][T10471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  259.597152][T10539] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  259.735510][T10539] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  259.785319][T10539] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  259.805541][T10539] OCFS2: File system is now read-only.
[  259.811557][   T27] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  259.846412][T10563] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[  259.860612][T10539] (syz.3.1661,10539,0):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  259.910519][T10563] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  259.946112][T10563] (syz.3.1661,10563,1):ocfs2_find_leaf:1941 ERROR: status = -30
[  259.977507][T10563] (syz.3.1661,10563,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[  260.008521][T10471] hsr_slave_0: entered promiscuous mode
[  260.023109][   T27] usb 6-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  260.032834][T10471] hsr_slave_1: entered promiscuous mode
[  260.039242][T10539] OCFS2: ERROR (device loop3): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  260.063053][   T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.084079][T10563] (syz.3.1661,10563,0):ocfs2_fiemap:776 ERROR: status = -30
[  260.105428][   T27] usb 6-1: config 0 descriptor??
[  260.111341][T10539] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  260.121974][T10471] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  260.135017][   T27] gspca_main: sunplus-2.14.0 probing 055f:c420
[  260.144312][T10471] Cannot create hsr debugfs directory
[  260.167356][T10539] (syz.3.1661,10539,1):ocfs2_find_entry_dx:1029 ERROR: status = -30
[  260.197419][T10539] (syz.3.1661,10539,1):ocfs2_mknod:502 ERROR: status = -30
[  260.212588][   T58] hsr_slave_0: left promiscuous mode
[  260.228615][T10539] (syz.3.1661,10539,1):ocfs2_create:676 ERROR: status = -30
[  260.255281][   T58] hsr_slave_1: left promiscuous mode
[  260.314681][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.328565][   T58] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.359681][ T5786] ocfs2: Unmounting device (7,3) on (node local)
[  260.367293][   T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  260.395842][   T58] batman_adv: batadv0: Removing interface: batadv_slave_1
[  260.419115][   T58] bridge_slave_1: left allmulticast mode
[  260.435041][   T58] bridge_slave_1: left promiscuous mode
[  260.445380][   T58] bridge0: port 2(bridge_slave_1) entered disabled state
[  260.468389][   T58] bridge_slave_0: left allmulticast mode
[  260.474122][   T58] bridge_slave_0: left promiscuous mode
[  260.490495][   T58] bridge0: port 1(bridge_slave_0) entered disabled state
[  260.585768][   T58] veth1_macvtap: left promiscuous mode
[  260.597347][   T58] veth0_macvtap: left promiscuous mode
[  260.603082][   T58] veth1_vlan: left promiscuous mode
[  260.627392][   T58] veth0_vlan: left promiscuous mode
[  260.627525][ T5826] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  260.687175][ T5794] Bluetooth: hci1: command tx timeout
[  260.830245][ T5826] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  260.839658][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.863317][ T5826] usb 2-1: config 0 descriptor??
[  260.955013][   T27] gspca_sunplus: reg_w_riv err -71
[  260.966958][   T27] sunplus: probe of 6-1:0.0 failed with error -71
[  260.993570][   T27] usb 6-1: USB disconnect, device number 13
[  261.105622][ T5826] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  261.124886][ T5826] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  261.315885][ T5826] [drm:udl_init] *ERROR* Selecting channel failed
[  261.384181][ T5826] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2
[  261.397774][ T5826] [drm] Initialized udl on minor 2
[  261.410590][ T5826] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  261.437491][ T5826] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  261.473262][ T5854] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  261.488928][ T5826] usb 2-1: USB disconnect, device number 18
[  261.496870][   T58] team0 (unregistering): Port device team_slave_1 removed
[  261.538222][ T5854] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  261.656338][   T58] team0 (unregistering): Port device team_slave_0 removed
[  261.711965][   T58] bond0 (unregistering): (slave 
4
@0Ù): Releasing backup interface
[  261.720485][   T58] 
@0Ù (unregistering): left allmulticast mode
[  261.757591][   T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  261.766921][   T58] bond_slave_0 (unregistering): left allmulticast mode
[  262.084436][T10586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1674'.
[  262.509857][   T58] bond0 (unregistering): Released all slaves
[  262.595484][T10597] 9pnet: p9_errstr2errno: server reported unknown error 
[  262.756840][ T5794] Bluetooth: hci1: command tx timeout
[  262.976953][T10607] block nbd1: NBD_DISCONNECT
[  263.093804][T10605] block nbd0: server does not support multiple connections per device.
[  263.125306][T10605] block nbd0: shutting down sockets
[  263.185789][ T5854] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  263.276930][T10471] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  263.307517][T10471] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  263.355076][T10471] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  263.368659][T10612] loop3: detected capacity change from 0 to 512
[  263.380626][T10471] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  263.400475][T10612] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  263.425770][ T5854] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  263.461707][ T5854] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.464298][T10612] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  263.472719][ T5854] usb 6-1: config 0 descriptor??
[  263.564047][T10612] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  263.585985][T10612] EXT4-fs (loop3): 1 truncate cleaned up
[  263.605846][T10612] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.693629][   T28] audit: type=1800 audit(1753201445.504:57): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1686" name="file1" dev="loop3" ino=15 res=0 errno=0
[  263.704999][ T5854] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00
[  263.742547][ T5854] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  263.809311][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.812838][T10471] 8021q: adding VLAN 0 to HW filter on device bond0
[  263.877431][T10471] 8021q: adding VLAN 0 to HW filter on device team0
[  263.898450][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[  263.905661][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[  263.925814][ T5854] [drm:udl_init] *ERROR* Selecting channel failed
[  263.965716][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[  263.972886][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[  263.988473][ T5854] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  264.019629][ T5854] [drm] Initialized udl on minor 2
[  264.036774][ T5854] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  264.062389][ T5854] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  264.072478][  T786] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  264.141409][  T786] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  264.151689][ T5854] usb 6-1: USB disconnect, device number 14
[  264.173793][  T786] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  264.180434][T10614] loop1: detected capacity change from 0 to 32768
[  264.190468][T10614] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1687 (10614)
[  264.263541][T10614] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  264.313657][T10614] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  264.334863][T10614] BTRFS info (device loop1): setting nodatacow, compression disabled
[  264.346580][T10614] BTRFS info (device loop1): turning on flush-on-commit
[  264.353797][T10614] BTRFS info (device loop1): using free space tree
[  264.468821][T10614] BTRFS info (device loop1): enabling ssd optimizations
[  264.489895][T10614] BTRFS info (device loop1): auto enabling async discard
[  264.732500][T10471] 8021q: adding VLAN 0 to HW filter on device batadv0
[  264.771369][ T5783] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  264.845766][ T5794] Bluetooth: hci1: command tx timeout
[  265.499337][   T27] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  265.669351][T10684] Attempt to restore checkpoint with obsolete wellknown handles
[  265.708017][   T27] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  265.725113][   T27] usb 6-1: config 0 has no interface number 0
[  265.735734][T10471] veth0_vlan: entered promiscuous mode
[  265.745694][   T27] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  265.755012][   T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.763031][   T27] usb 6-1: Product: syz
[  265.774854][   T27] usb 6-1: Manufacturer: syz
[  265.783499][T10471] veth1_vlan: entered promiscuous mode
[  265.783962][   T27] usb 6-1: SerialNumber: syz
[  265.818530][   T27] usb 6-1: config 0 descriptor??
[  265.854148][T10471] veth0_macvtap: entered promiscuous mode
[  265.872758][T10471] veth1_macvtap: entered promiscuous mode
[  265.912425][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.927805][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.952011][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  265.963792][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.980716][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.013067][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.053059][T10471] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.076542][   T27] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  266.126250][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.141252][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.157677][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.168885][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.173522][   T27] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  266.183028][T10471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.216484][T10471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.224484][   T27] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  266.245916][T10471] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.256477][   T27] usb 6-1: media controller created
[  266.280313][T10471] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.312799][T10471] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.334261][T10471] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.338080][   T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  266.342980][T10471] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.434983][   T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  266.449607][   T27] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  266.533484][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.561028][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.588741][   T27] usb 6-1: USB disconnect, device number 15
[  266.641231][   T23] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  266.658273][   T23] usb 2-1: config 0 has no interface number 0
[  266.667494][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.673248][   T23] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  266.693750][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.711506][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.754492][   T23] usb 2-1: Product: syz
[  266.758701][   T23] usb 2-1: Manufacturer: syz
[  266.763312][   T23] usb 2-1: SerialNumber: syz
[  266.791735][   T23] usb 2-1: config 0 descriptor??
[  267.039450][   T23] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  267.066654][   T23] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  267.095550][   T23] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  267.139838][   T23] usb 2-1: media controller created
[  267.215180][   T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  267.242274][T10721] mac80211_hwsim hwsim14 »»»»»»: renamed from wlan0 (while UP)
[  267.948454][T10740] loop6: detected capacity change from 0 to 4096
[  267.995597][T10740] ntfs: (device loop6): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  268.018838][T10740] ntfs: (device loop6): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  268.038726][T10740] ntfs: (device loop6): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  268.079327][T10740] ntfs: volume version 3.1.
[  268.228694][ T1099] ntfs: (device loop6): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  268.246246][T10471] ntfs: (device loop6): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  268.324172][ T5854] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  268.393612][   T23] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  268.467897][   T23] usb 2-1: USB disconnect, device number 19
[  268.513536][ T5854] usb 4-1: Using ep0 maxpacket: 8
[  268.532162][ T5854] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  268.553436][ T5854] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  268.583102][ T5854] usb 4-1: config 0 has no interface number 0
[  268.589268][ T5854] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  268.636223][ T5854] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.671505][ T5854] usb 4-1: config 0 interface 52 has no altsetting 0
[  268.696633][ T5854] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[  268.718138][ T5854] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[  268.729959][ T5854] usb 4-1: Manufacturer: syz
[  268.746497][ T5854] usb 4-1: config 0 descriptor??
[  268.765828][ T5854] hub 4-1:0.52: bad descriptor, ignoring hub
[  268.778898][ T5854] hub: probe of 4-1:0.52 failed with error -5
[  269.010674][ T5854] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input16
[  269.115693][T10772] loop6: detected capacity change from 0 to 1024
[  269.371630][T10777] loop1: detected capacity change from 0 to 4096
[  269.473785][   T23] usb 4-1: USB disconnect, device number 17
[  269.925699][T10796] loop1: detected capacity change from 0 to 128
[  270.025165][T10796] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  270.096653][T10796] ext4 filesystem being mounted at /438/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  270.135946][T10804] loop6: detected capacity change from 0 to 256
[  270.181578][   T28] audit: type=1800 audit(1753202220.002:58): pid=10804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1726" name="file1" dev="loop6" ino=1048789 res=0 errno=0
[  270.204819][T10796] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x18)
[  270.286480][   T28] audit: type=1800 audit(1753202220.042:59): pid=10804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1726" name="file1" dev="loop6" ino=1048789 res=0 errno=0
[  270.324002][T10809] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  270.362601][T10809] FAT-fs (loop6): error, corrupted file size (i_pos 196, 2097152)
[  270.441232][ T5783] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  270.805622][T10824] mkiss: ax0: crc mode is auto.
[  271.267988][T10844] loop5: detected capacity change from 0 to 512
[  271.309193][ T5826] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  271.311708][T10844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  271.448794][T10844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.502667][T10844] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.522673][ T5826] usb 7-1: Using ep0 maxpacket: 16
[  271.537447][ T5826] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  271.553610][ T5826] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  271.572120][ T5826] usb 7-1: Product: syz
[  271.581726][ T5826] usb 7-1: Manufacturer: syz
[  271.606985][ T5826] usb 7-1: SerialNumber: syz
[  271.642508][ T5826] usb 7-1: config 0 descriptor??
[  271.671243][T10844] EXT4-fs warning (device loop5): __ext4_unlink:3336: inode #16: comm syz.5.1738: Deleting file 'file3' with no links
[  271.741139][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.913630][ T5854] usb 7-1: USB disconnect, device number 2
[  272.218960][T10846] loop3: detected capacity change from 0 to 32768
[  272.253889][T10846] XFS: ikeep mount option is deprecated.
[  272.330077][T10846] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  272.711369][T10846] XFS (loop3): Ending clean mount
[  272.784320][T10883] loop5: detected capacity change from 0 to 128
[  272.791820][T10883] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  272.804401][T10846] XFS (loop3): Quotacheck needed: Please wait.
[  272.987577][T10846] XFS (loop3): Quotacheck: Done.
[  273.061168][ T5786] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.394237][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'.
[  273.470324][T10898] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1753'.
[  273.868720][T10910] tap0: tun_chr_ioctl cmd 1074025677
[  273.882279][T10910] tap0: linktype set to 769
[  274.606618][T10942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1769'.
[  274.696407][T10944] loop5: detected capacity change from 0 to 2048
[  274.738276][T10944] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  274.759779][T10944] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  274.780163][T10944] UDF-fs: Scanning with blocksize 512 failed
[  274.831982][T10944] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  274.874167][T10944] UDF-fs: Scanning with blocksize 1024 failed
[  274.892666][T10944] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  274.909281][T10944] UDF-fs: Scanning with blocksize 2048 failed
[  274.940595][T10951] loop6: detected capacity change from 0 to 128
[  274.946607][T10944] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=385, location=385
[  274.958849][T10944] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  274.980473][T10944] UDF-fs: Scanning with blocksize 4096 failed
[  275.009885][T10944] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1)
[  275.222741][T10958] loop1: detected capacity change from 0 to 1024
[  275.234622][T10944] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1770'.
[  275.307639][T10958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  275.370305][T10967] loop5: detected capacity change from 0 to 8
[  275.491098][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.828237][T10983] loop3: detected capacity change from 0 to 256
[  275.958925][T10983] FAT-fs (loop3): Directory bread(block 64) failed
[  275.985970][T10983] FAT-fs (loop3): Directory bread(block 65) failed
[  275.992950][T10983] FAT-fs (loop3): Directory bread(block 66) failed
[  276.033161][T10983] FAT-fs (loop3): Directory bread(block 67) failed
[  276.048348][T10983] FAT-fs (loop3): Directory bread(block 68) failed
[  276.063313][T10983] FAT-fs (loop3): Directory bread(block 69) failed
[  276.098435][T10983] FAT-fs (loop3): Directory bread(block 70) failed
[  276.118973][T10983] FAT-fs (loop3): Directory bread(block 71) failed
[  276.120416][T10989] loop5: detected capacity change from 0 to 4096
[  276.134120][T10983] FAT-fs (loop3): Directory bread(block 72) failed
[  276.153351][T10983] FAT-fs (loop3): Directory bread(block 73) failed
[  276.164087][T10989] EXT4-fs: inline encryption not supported
[  276.191931][T10989] EXT4-fs (loop5): Test dummy encryption mode enabled
[  276.226982][T10989] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.678561][T10989] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  276.688276][T10987] loop1: detected capacity change from 0 to 40427
[  276.739452][T10987] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504)
[  276.770638][T10987] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  276.783144][T10987] F2FS-fs (loop1): heap/no_heap options were deprecated
[  276.795339][ T7532] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.827162][T10987] F2FS-fs (loop1): invalid crc value
[  276.879846][T10987] F2FS-fs (loop1): Found nat_bits in checkpoint
[  277.067377][T10987] F2FS-fs (loop1): Start checkpoint disabled!
[  277.098398][T10987] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  277.106117][T10987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  277.491392][   T58] kworker/u4:4: attempt to access beyond end of device
[  277.491392][   T58] loop1: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  277.526315][   T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  277.543380][   T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  277.550305][   T58] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  277.735759][T11042] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1808'.
[  278.339440][T11058] loop5: detected capacity change from 0 to 736
[  278.438229][T11035] loop3: detected capacity change from 0 to 32768
[  278.488234][T11035] 
[  278.488234][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.488234][T11035] 
[  278.605620][T11035] 
[  278.605620][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.605620][T11035] 
[  278.633495][T11035] 
[  278.633495][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.633495][T11035] 
[  278.683580][T11035] 
[  278.683580][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.683580][T11035] 
[  278.721049][T11035] 
[  278.721049][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.721049][T11035] 
[  278.749458][T11035] 
[  278.749458][T11035]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.749458][T11035] 
[  278.771130][  T111] 
[  278.771130][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.771130][  T111] 
[  278.904962][   T34] 
[  278.904962][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.904962][   T34] 
[  278.927965][   T34] 
[  278.927965][   T34]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.927965][   T34] 
[  278.953916][ T5786] 
[  278.953916][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.953916][ T5786] 
[  278.981073][  T112] 
[  278.981073][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.981073][  T112] 
[  278.993642][ T5786] 
[  278.993642][ T5786]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  278.993642][ T5786] 
[  279.201682][T11054] loop1: detected capacity change from 0 to 32768
[  279.240831][T11054] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.430096][T11054] XFS (loop1): Ending clean mount
[  279.444628][T11091] loop5: detected capacity change from 0 to 2048
[  279.499135][T11092] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  279.532973][T11054] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  279.563889][   T27] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  279.660754][T11091] overlayfs: upper fs does not support tmpfile.
[  279.685632][T11091] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  279.692732][T11091] overlayfs: failed to set xattr on upper
[  279.716501][T11091] overlayfs: ...falling back to redirect_dir=nofollow.
[  279.731465][T11091] overlayfs: ...falling back to index=off.
[  279.733589][ T5783] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  279.737763][T11091] overlayfs: ...falling back to uuid=null.
[  279.800384][   T27] usb 7-1: Using ep0 maxpacket: 32
[  279.815870][   T27] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  279.842445][   T27] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.895554][   T27] usb 7-1: config 0 descriptor??
[  279.924326][   T27] gspca_main: sq930x-2.14.0 probing 041e:403c
[  279.964506][T11092] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  279.983099][T11092] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  280.026705][T11092] Remounting filesystem read-only
[  280.032076][ T1026] NILFS (loop5): discard dirty page: offset=4096, ino=6
[  280.040246][ T1026] NILFS (loop5): discard dirty block: blocknr=39, size=1024
[  280.060327][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.069794][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.087111][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.098004][ T1026] NILFS (loop5): discard dirty page: offset=0, ino=3
[  280.099796][T11089] loop3: detected capacity change from 0 to 32768
[  280.117156][ T1026] NILFS (loop5): discard dirty block: blocknr=42, size=1024
[  280.138692][ T1026] NILFS (loop5): discard dirty block: blocknr=43, size=1024
[  280.146636][ T1026] NILFS (loop5): discard dirty block: blocknr=44, size=1024
[  280.154944][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.174145][ T1026] NILFS (loop5): discard dirty page: offset=65536, ino=3
[  280.181338][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.204293][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.213210][ T1026] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  280.232773][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.246422][ T1026] NILFS (loop5): discard dirty page: offset=98304, ino=3
[  280.254008][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.267051][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.286789][ T1026] NILFS (loop5): discard dirty block: blocknr=0, size=1024
[  280.294519][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.303543][ T1026] NILFS (loop5): discard dirty page: offset=131072, ino=3
[  280.311018][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.322394][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.332796][ T1026] NILFS (loop5): discard dirty block: blocknr=46, size=1024
[  280.342350][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.351356][ T1026] NILFS (loop5): discard dirty page: offset=163840, ino=3
[  280.360718][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.371902][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.381132][ T1026] NILFS (loop5): discard dirty block: blocknr=47, size=1024
[  280.388539][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.397803][ T1026] NILFS (loop5): discard dirty page: offset=196608, ino=3
[  280.405617][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.414747][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.423964][ T1026] NILFS (loop5): discard dirty block: blocknr=49, size=1024
[  280.431318][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.440570][ T1026] NILFS (loop5): discard dirty page: offset=0, ino=5
[  280.448192][ T1026] NILFS (loop5): discard dirty block: blocknr=41, size=1024
[  280.455651][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.465737][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.474967][ T1026] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.489575][ T7532] NILFS (loop5): discard dirty page: offset=0, ino=4
[  280.496401][ T7532] NILFS (loop5): discard dirty block: blocknr=40, size=1024
[  280.503790][ T7532] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.512674][ T7532] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.521629][ T7532] NILFS (loop5): discard dirty block: blocknr=18446744073709551615, size=1024
[  280.550825][ T5877] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  280.735911][ T5877] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  280.754995][ T5877] usb 2-1: config 0 has no interface number 0
[  280.765057][ T5877] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  280.776753][ T5877] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  280.787520][   T27] gspca_sq930x: reg_w 0105 bf00 failed -71
[  280.793620][ T5877] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  280.808771][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.829665][ T5877] usb 2-1: config 0 descriptor??
[  280.839878][T11095] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  280.854250][   T27] sq930x: probe of 7-1:0.0 failed with error -71
[  280.865732][ T5877] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  280.869257][   T27] usb 7-1: USB disconnect, device number 3
[  281.060514][   T23] usb 2-1: USB disconnect, device number 20
[  281.303874][ T5826] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  281.501594][T11117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1835'.
[  281.514001][ T5826] usb 4-1: Using ep0 maxpacket: 16
[  281.516037][T11117] vlan2: entered allmulticast mode
[  281.526433][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.538114][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.548318][ T5826] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  281.557578][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.584133][ T5826] usb 4-1: config 0 descriptor??
[  281.705873][T11121] loop1: detected capacity change from 0 to 1024
[  281.779892][T11121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  281.782041][T11119] loop6: detected capacity change from 0 to 8192
[  281.809563][T11121] ext4 filesystem being mounted at /454/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.919891][ T5783] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  282.056428][ T5826] playstation 0003:054C:05C4.0014: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0
[  282.201291][T11134] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  282.231086][ T5826] playstation 0003:054C:05C4.0014: Invalid reportID received, expected 18 got 113
[  282.273889][ T5826] playstation 0003:054C:05C4.0014: Failed to retrieve DualShock4 pairing info: -22
[  282.324187][ T5826] playstation 0003:054C:05C4.0014: Failed to get MAC address from DualShock4
[  282.344439][T11136] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82
[  282.360505][ T5826] playstation 0003:054C:05C4.0014: Failed to create dualshock4.
[  282.417893][ T5826] playstation: probe of 0003:054C:05C4.0014 failed with error -22
[  282.455299][ T5826] usb 4-1: USB disconnect, device number 18
[  282.855795][T11155] loop5: detected capacity change from 0 to 16
[  282.881379][T11155] erofs: (device loop5): mounted with root inode @ nid 36.
[  283.649197][T11179] team_slave_0: entered promiscuous mode
[  283.655735][T11179] team_slave_1: entered promiscuous mode
[  283.669773][T11143] loop6: detected capacity change from 0 to 40427
[  283.684718][T11179] macsec1: entered promiscuous mode
[  283.697472][T11179] team0: entered promiscuous mode
[  283.708764][T11179] team0: Device macsec1 is already an upper device of the team interface
[  283.726934][T11143] F2FS-fs (loop6): invalid crc value
[  283.742675][T11179] team0: left promiscuous mode
[  283.753655][T11179] team_slave_0: left promiscuous mode
[  283.759215][T11179] team_slave_1: left promiscuous mode
[  283.769137][T11143] F2FS-fs (loop6): Found nat_bits in checkpoint
[  283.874248][ T5855] usb 6-1: new low-speed USB device number 16 using dummy_hcd
[  283.895539][T11156] loop1: detected capacity change from 0 to 32768
[  283.917285][T11143] F2FS-fs (loop6): Start checkpoint disabled!
[  283.943894][T11143] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  283.994641][T11156] find_entry called with index = 0
[  284.001182][T11156] read_mapping_page failed!
[  284.024412][T11156] ERROR: (device loop1): txCommit: 
[  284.024412][T11156] 
[  284.043143][T11156] ERROR: (device loop1): diFree: numfree > numinos
[  284.043143][T11156] 
[  284.091964][ T5855] usb 6-1: config index 0 descriptor too short (expected 6427, got 27)
[  284.112389][ T5855] usb 6-1: config 0 has an invalid interface number: 21 but max is 0
[  284.121628][ T5794] Bluetooth: hci2: command 0x0406 tx timeout
[  284.134201][ T5855] usb 6-1: config 0 has no interface number 0
[  284.140344][ T5855] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  284.154183][ T5855] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  284.164198][ T5855] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  284.178321][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.193049][ T5855] usb 6-1: config 0 descriptor??
[  284.255643][  T111] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  284.263047][  T111] ------------[ cut here ]------------
[  284.268712][  T111] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  284.325108][  T111] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  284.331250][  T111] CPU: 1 PID: 111 Comm: jfsCommit Not tainted 6.6.99-syzkaller #0
[  284.339067][  T111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  284.349140][  T111] RIP: 0010:txUnlock+0xc87/0xcb0
[  284.354098][  T111] Code: ef fc 60 07 0f 0b e8 d8 c7 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba a3 03 00 00 48 c7 c1 a0 18 e4 8a e8 c9 fc 60 07 <0f> 0b e8 b2 c7 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba
[  284.373718][  T111] RSP: 0018:ffffc900025b7d08 EFLAGS: 00010246
[  284.379796][  T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 485474a8ad836000
[  284.387772][  T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  284.390050][   T58] kworker/u4:4: attempt to access beyond end of device
[  284.390050][   T58] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  284.395736][  T111] RBP: ffffc9000287a090 R08: ffffc900025b7a07 R09: 1ffff920004b6f40
[  284.395753][  T111] R10: dffffc0000000000 R11: fffff520004b6f41 R12: ffff88807b3afe88
[  284.395764][  T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f884494
[  284.395776][  T111] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  284.409870][   T58] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  284.417673][  T111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.417688][  T111] CR2: 00007fd8488e56c0 CR3: 000000007750b000 CR4: 00000000003506e0
[  284.417703][  T111] Call Trace:
[  284.417710][  T111]  <TASK>
[  284.470025][  T111]  ? lockdep_hardirqs_on+0x98/0x150
[  284.475220][  T111]  jfs_lazycommit+0x570/0xa60
[  284.479886][  T111]  ? txFreelock+0x5a0/0x5a0
[  284.484371][  T111]  ? do_task_dead+0xd0/0xd0
[  284.488862][  T111]  ? __kthread_parkme+0x7a/0x1c0
[  284.493789][  T111]  kthread+0x2fa/0x390
[  284.497841][  T111]  ? txFreelock+0x5a0/0x5a0
[  284.502328][  T111]  ? kthread_blkcg+0xd0/0xd0
[  284.506897][  T111]  ret_from_fork+0x48/0x80
[  284.511315][  T111]  ? kthread_blkcg+0xd0/0xd0
[  284.515902][  T111]  ret_from_fork_asm+0x11/0x20
[  284.520671][  T111]  </TASK>
[  284.523687][  T111] Modules linked in:
[  284.533745][  T111] ---[ end trace 0000000000000000 ]---
[  284.540448][  T111] RIP: 0010:txUnlock+0xc87/0xcb0
[  284.545554][  T111] Code: ef fc 60 07 0f 0b e8 d8 c7 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba a3 03 00 00 48 c7 c1 a0 18 e4 8a e8 c9 fc 60 07 <0f> 0b e8 b2 c7 84 fe 48 c7 c7 c0 0b e4 8a 48 c7 c6 b9 07 e4 8a ba
[  284.565223][  T111] RSP: 0018:ffffc900025b7d08 EFLAGS: 00010246
[  284.571705][  T111] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 485474a8ad836000
[  284.580043][  T111] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  284.586704][   T58] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  284.597098][  T111] RBP: ffffc9000287a090 R08: ffffc900025b7a07 R09: 1ffff920004b6f40
[  284.615768][  T111] R10: dffffc0000000000 R11: fffff520004b6f41 R12: ffff88807b3afe88
[  284.627199][  T111] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88807f884494
[  284.661459][  T111] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  284.691824][  T111] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.708732][  T111] CR2: 000055da88e24950 CR3: 000000006a4d1000 CR4: 00000000003506e0
[  284.735666][  T111] Kernel panic - not syncing: Fatal exception
[  284.741989][  T111] Kernel Offset: disabled
[  284.746296][  T111] Rebooting in 86400 seconds..